@astrale-os/cli 1.0.0-beta.9 → 1.0.0-npm-deprecated.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (617) hide show
  1. package/README.md +14 -166
  2. package/package.json +10 -102
  3. package/.check-workspace.cjs +0 -40
  4. package/LICENSE +0 -202
  5. package/THIRD-PARTY-NOTICES.md +0 -27
  6. package/dist/astrale.js +0 -93344
  7. package/dist/public/connect-core.js +0 -29187
  8. package/dist/public/keys/index.js +0 -5651
  9. package/dist/public/paths/index.js +0 -4282
  10. package/dist/types/admin/binding.d.ts +0 -19
  11. package/dist/types/admin/instance/client.d.ts +0 -22
  12. package/dist/types/admin/instance/index.d.ts +0 -2
  13. package/dist/types/admin/instance/model.d.ts +0 -33
  14. package/dist/types/connect-core.d.ts +0 -22
  15. package/dist/types/connection/auth.d.ts +0 -39
  16. package/dist/types/connection/call.d.ts +0 -3
  17. package/dist/types/connection/command.d.ts +0 -27
  18. package/dist/types/connection/credential.d.ts +0 -14
  19. package/dist/types/connection/errors.d.ts +0 -1
  20. package/dist/types/connection/exchange.d.ts +0 -9
  21. package/dist/types/connection/failure/classify.d.ts +0 -2
  22. package/dist/types/connection/failure/index.d.ts +0 -5
  23. package/dist/types/connection/failure/model.d.ts +0 -25
  24. package/dist/types/connection/failure/render.d.ts +0 -3
  25. package/dist/types/connection/index.d.ts +0 -8
  26. package/dist/types/connection/reasons.d.ts +0 -37
  27. package/dist/types/connection/self.d.ts +0 -37
  28. package/dist/types/connection/session.d.ts +0 -31
  29. package/dist/types/connection/target.d.ts +0 -38
  30. package/dist/types/errors.d.ts +0 -23
  31. package/dist/types/identity/registry.d.ts +0 -25
  32. package/dist/types/keys/algorithm.d.ts +0 -6
  33. package/dist/types/keys/credential.d.ts +0 -21
  34. package/dist/types/keys/index.d.ts +0 -4
  35. package/dist/types/keys/pair.d.ts +0 -34
  36. package/dist/types/lib/admin-instance.d.ts +0 -17
  37. package/dist/types/lib/admin-target.d.ts +0 -78
  38. package/dist/types/lib/ca-fetch.d.ts +0 -2
  39. package/dist/types/lib/config.d.ts +0 -71
  40. package/dist/types/lib/failure-debug.d.ts +0 -1
  41. package/dist/types/lib/format.d.ts +0 -1
  42. package/dist/types/lib/idp-session.d.ts +0 -33
  43. package/dist/types/lib/idp.d.ts +0 -404
  44. package/dist/types/lib/instance-target.d.ts +0 -38
  45. package/dist/types/lib/instance.d.ts +0 -202
  46. package/dist/types/lib/invocation.d.ts +0 -3
  47. package/dist/types/lib/log.d.ts +0 -33
  48. package/dist/types/lib/login-flow.d.ts +0 -49
  49. package/dist/types/lib/meta.d.ts +0 -36
  50. package/dist/types/lib/output.d.ts +0 -87
  51. package/dist/types/lib/proc.d.ts +0 -43
  52. package/dist/types/lib/self.d.ts +0 -9
  53. package/dist/types/lib/table.d.ts +0 -18
  54. package/dist/types/lib/update.d.ts +0 -131
  55. package/dist/types/lib/validation.d.ts +0 -11
  56. package/dist/types/paths/index.d.ts +0 -2
  57. package/dist/types/state/exchange-credentials.d.ts +0 -25
  58. package/dist/types/state/files.d.ts +0 -9
  59. package/dist/types/state/identities.d.ts +0 -42
  60. package/dist/types/state/index.d.ts +0 -8
  61. package/dist/types/state/paths.d.ts +0 -32
  62. package/src/__tests__/fixtures/publication.ts +0 -20
  63. package/src/admin/.spec/api.d.ts +0 -3
  64. package/src/admin/.spec/architecture.md +0 -15
  65. package/src/admin/.spec/icon.svg +0 -3
  66. package/src/admin/.spec/layout.ts +0 -6
  67. package/src/admin/__tests__/binding.test.ts +0 -31
  68. package/src/admin/__tests__/fixture.ts +0 -101
  69. package/src/admin/binding.ts +0 -98
  70. package/src/admin/catalog/.spec/api.d.ts +0 -65
  71. package/src/admin/catalog/.spec/architecture.md +0 -6
  72. package/src/admin/catalog/.spec/icon.svg +0 -3
  73. package/src/admin/catalog/.spec/layout.ts +0 -6
  74. package/src/admin/catalog/__tests__/client.test.ts +0 -142
  75. package/src/admin/catalog/client.ts +0 -218
  76. package/src/admin/catalog/index.ts +0 -13
  77. package/src/admin/catalog/model.ts +0 -41
  78. package/src/admin/catalog/tsconfig.json +0 -8
  79. package/src/admin/graph/.spec/api.d.ts +0 -22
  80. package/src/admin/graph/.spec/architecture.md +0 -5
  81. package/src/admin/graph/.spec/icon.svg +0 -3
  82. package/src/admin/graph/.spec/layout.ts +0 -3
  83. package/src/admin/graph/index.ts +0 -6
  84. package/src/admin/graph/nodes.ts +0 -56
  85. package/src/admin/index.ts +0 -2
  86. package/src/admin/instance/.spec/api.d.ts +0 -66
  87. package/src/admin/instance/.spec/architecture.md +0 -10
  88. package/src/admin/instance/.spec/icon.svg +0 -3
  89. package/src/admin/instance/.spec/layout.ts +0 -6
  90. package/src/admin/instance/__tests__/client.test.ts +0 -166
  91. package/src/admin/instance/client.ts +0 -196
  92. package/src/admin/instance/index.ts +0 -15
  93. package/src/admin/instance/model.ts +0 -56
  94. package/src/admin/instance/tsconfig.json +0 -8
  95. package/src/commands/__tests__/admin-instance.test.ts +0 -91
  96. package/src/commands/__tests__/auth-login.test.ts +0 -231
  97. package/src/commands/__tests__/auth-token.test.ts +0 -223
  98. package/src/commands/__tests__/call-describe.test.ts +0 -80
  99. package/src/commands/__tests__/call.test.ts +0 -29
  100. package/src/commands/__tests__/domain-install-operation.test.ts +0 -126
  101. package/src/commands/__tests__/domain-install-owned.test.ts +0 -191
  102. package/src/commands/__tests__/domain-list.test.ts +0 -133
  103. package/src/commands/__tests__/domain-uninstall.test.ts +0 -53
  104. package/src/commands/__tests__/install-direct.test.ts +0 -21
  105. package/src/commands/__tests__/install-identity-override.test.ts +0 -76
  106. package/src/commands/__tests__/instance-bookmark.test.ts +0 -166
  107. package/src/commands/__tests__/instance-list-admin.test.ts +0 -26
  108. package/src/commands/__tests__/instance-list-rows.test.ts +0 -64
  109. package/src/commands/__tests__/instance-use.test.ts +0 -67
  110. package/src/commands/__tests__/introspect-parse.test.ts +0 -21
  111. package/src/commands/__tests__/logs.test.ts +0 -97
  112. package/src/commands/__tests__/read-commands.test.ts +0 -294
  113. package/src/commands/__tests__/setup-plan.test.ts +0 -61
  114. package/src/commands/__tests__/studio-descriptor.test.ts +0 -22
  115. package/src/commands/__tests__/token-ttl.test.ts +0 -21
  116. package/src/commands/__tests__/update.test.ts +0 -95
  117. package/src/commands/__tests__/view-build.test.ts +0 -58
  118. package/src/commands/__tests__/view.test.ts +0 -149
  119. package/src/commands/admin/status.ts +0 -61
  120. package/src/commands/admin/use.ts +0 -100
  121. package/src/commands/auth/login.ts +0 -82
  122. package/src/commands/auth/logout.ts +0 -52
  123. package/src/commands/auth/status.ts +0 -86
  124. package/src/commands/auth/token.ts +0 -174
  125. package/src/commands/browser.ts +0 -207
  126. package/src/commands/call-describe.ts +0 -123
  127. package/src/commands/call.ts +0 -205
  128. package/src/commands/domain/install.ts +0 -548
  129. package/src/commands/domain/list.ts +0 -155
  130. package/src/commands/domain/publish.ts +0 -136
  131. package/src/commands/domain/uninstall.ts +0 -128
  132. package/src/commands/get.ts +0 -69
  133. package/src/commands/identity/__tests__/register.test.ts +0 -93
  134. package/src/commands/identity/create.ts +0 -35
  135. package/src/commands/identity/delete.ts +0 -24
  136. package/src/commands/identity/export.ts +0 -46
  137. package/src/commands/identity/import.ts +0 -61
  138. package/src/commands/identity/list.ts +0 -56
  139. package/src/commands/identity/register.ts +0 -196
  140. package/src/commands/identity/sync.ts +0 -38
  141. package/src/commands/identity/unsync.ts +0 -34
  142. package/src/commands/identity/use.ts +0 -24
  143. package/src/commands/identity/whoami.ts +0 -34
  144. package/src/commands/idp/add.ts +0 -150
  145. package/src/commands/idp/list.ts +0 -57
  146. package/src/commands/idp/refresh.ts +0 -38
  147. package/src/commands/idp/remove.ts +0 -36
  148. package/src/commands/idp/show.ts +0 -29
  149. package/src/commands/instance/active.ts +0 -73
  150. package/src/commands/instance/bookmark.ts +0 -101
  151. package/src/commands/instance/create.ts +0 -61
  152. package/src/commands/instance/delete.ts +0 -69
  153. package/src/commands/instance/forget.ts +0 -26
  154. package/src/commands/instance/list.ts +0 -197
  155. package/src/commands/instance/status.ts +0 -38
  156. package/src/commands/instance/use.ts +0 -263
  157. package/src/commands/introspect.ts +0 -110
  158. package/src/commands/logs.ts +0 -283
  159. package/src/commands/mutate.ts +0 -122
  160. package/src/commands/query.ts +0 -136
  161. package/src/commands/session/analyze.ts +0 -50
  162. package/src/commands/session/list.ts +0 -36
  163. package/src/commands/setup.ts +0 -54
  164. package/src/commands/status.ts +0 -60
  165. package/src/commands/studio.ts +0 -434
  166. package/src/commands/token.ts +0 -107
  167. package/src/commands/update.ts +0 -334
  168. package/src/commands/use.ts +0 -86
  169. package/src/commands/view-serve.ts +0 -26
  170. package/src/commands/view.ts +0 -614
  171. package/src/connect-core.test.ts +0 -38
  172. package/src/connect-core.ts +0 -42
  173. package/src/connection/.spec/api.d.ts +0 -110
  174. package/src/connection/.spec/architecture.md +0 -47
  175. package/src/connection/.spec/capabilities/connection.ts +0 -13
  176. package/src/connection/.spec/examples/call.ts +0 -7
  177. package/src/connection/.spec/flows/command.ts +0 -20
  178. package/src/connection/.spec/flows/session.ts +0 -61
  179. package/src/connection/.spec/laws/connection.ts +0 -205
  180. package/src/connection/.spec/layout.ts +0 -21
  181. package/src/connection/__tests__/auth.test.ts +0 -128
  182. package/src/connection/__tests__/ca-fetch.test.ts +0 -60
  183. package/src/connection/__tests__/call.test.ts +0 -17
  184. package/src/connection/__tests__/credential.test.ts +0 -138
  185. package/src/connection/__tests__/errors.test.ts +0 -577
  186. package/src/connection/__tests__/exchange.test.ts +0 -295
  187. package/src/connection/__tests__/failure-fixtures.ts +0 -39
  188. package/src/connection/__tests__/failure-safety.test.ts +0 -75
  189. package/src/connection/__tests__/fixtures/localhost-cert.pem +0 -19
  190. package/src/connection/__tests__/fixtures/localhost-key.base64 +0 -1
  191. package/src/connection/__tests__/managed.test.ts +0 -39
  192. package/src/connection/__tests__/reasons.test.ts +0 -78
  193. package/src/connection/__tests__/self.test.ts +0 -71
  194. package/src/connection/__tests__/session.test.ts +0 -140
  195. package/src/connection/__tests__/target.test.ts +0 -94
  196. package/src/connection/auth.ts +0 -249
  197. package/src/connection/call.ts +0 -7
  198. package/src/connection/command.ts +0 -67
  199. package/src/connection/credential.ts +0 -117
  200. package/src/connection/errors.ts +0 -1
  201. package/src/connection/exchange.ts +0 -311
  202. package/src/connection/failure/classify.ts +0 -110
  203. package/src/connection/failure/index.ts +0 -18
  204. package/src/connection/failure/model.ts +0 -28
  205. package/src/connection/failure/render.ts +0 -116
  206. package/src/connection/index.ts +0 -8
  207. package/src/connection/reasons.ts +0 -209
  208. package/src/connection/self.ts +0 -138
  209. package/src/connection/session.ts +0 -196
  210. package/src/connection/target.ts +0 -112
  211. package/src/connection/tsconfig.json +0 -6
  212. package/src/errors.ts +0 -66
  213. package/src/graph/.spec/api.d.ts +0 -41
  214. package/src/graph/.spec/laws/documents.ts +0 -24
  215. package/src/graph/.spec/laws/projection.ts +0 -13
  216. package/src/graph/.spec/layout.ts +0 -14
  217. package/src/graph/__tests__/mutation.test.ts +0 -51
  218. package/src/graph/__tests__/projection.test.ts +0 -22
  219. package/src/graph/__tests__/query.test.ts +0 -173
  220. package/src/graph/class.ts +0 -30
  221. package/src/graph/index.ts +0 -4
  222. package/src/graph/mutation.ts +0 -46
  223. package/src/graph/projection.ts +0 -21
  224. package/src/graph/query.ts +0 -97
  225. package/src/graph/tsconfig.json +0 -6
  226. package/src/identity/.history/ard/bootstrap-root-transfer.md +0 -57
  227. package/src/identity/.history/ard/domain-mediated-registration.md +0 -36
  228. package/src/identity/.spec/api.d.ts +0 -124
  229. package/src/identity/.spec/architecture.md +0 -33
  230. package/src/identity/.spec/capabilities/identity.ts +0 -7
  231. package/src/identity/.spec/flows/bootstrap-root.ts +0 -79
  232. package/src/identity/.spec/flows/domain-mediated-registration.ts +0 -51
  233. package/src/identity/.spec/flows/import.ts +0 -29
  234. package/src/identity/.spec/laws/identity.ts +0 -56
  235. package/src/identity/.spec/layout.ts +0 -13
  236. package/src/identity/.spec/schemas/identity-export-v1.schema.json +0 -25
  237. package/src/identity/__tests__/fixtures/registry-journey.ts +0 -53
  238. package/src/identity/__tests__/registration.test.ts +0 -64
  239. package/src/identity/__tests__/registry.test.ts +0 -70
  240. package/src/identity/__tests__/transfer.test.ts +0 -198
  241. package/src/identity/index.ts +0 -23
  242. package/src/identity/registration.ts +0 -72
  243. package/src/identity/registry.ts +0 -179
  244. package/src/identity/transfer.ts +0 -187
  245. package/src/identity/tsconfig.json +0 -6
  246. package/src/index.ts +0 -1
  247. package/src/keys/.spec/api.d.ts +0 -74
  248. package/src/keys/.spec/architecture.md +0 -13
  249. package/src/keys/.spec/laws/keys.ts +0 -43
  250. package/src/keys/.spec/layout.ts +0 -6
  251. package/src/keys/__tests__/algorithm.test.ts +0 -39
  252. package/src/keys/__tests__/keys.test.ts +0 -168
  253. package/src/keys/algorithm.ts +0 -33
  254. package/src/keys/credential.ts +0 -112
  255. package/src/keys/index.ts +0 -14
  256. package/src/keys/pair.ts +0 -219
  257. package/src/keys/tsconfig.json +0 -6
  258. package/src/lib/__tests__/admin-target.test.ts +0 -184
  259. package/src/lib/__tests__/binary.test.ts +0 -55
  260. package/src/lib/__tests__/command-dx.test.ts +0 -102
  261. package/src/lib/__tests__/concurrency.test.ts +0 -62
  262. package/src/lib/__tests__/config.test.ts +0 -54
  263. package/src/lib/__tests__/design.test.ts +0 -99
  264. package/src/lib/__tests__/domain-publication.test.ts +0 -138
  265. package/src/lib/__tests__/format.test.ts +0 -22
  266. package/src/lib/__tests__/idp-session.driver.ts +0 -53
  267. package/src/lib/__tests__/idp-session.test.ts +0 -379
  268. package/src/lib/__tests__/idp.test.ts +0 -415
  269. package/src/lib/__tests__/instance-candidates.test.ts +0 -146
  270. package/src/lib/__tests__/instance-target.test.ts +0 -213
  271. package/src/lib/__tests__/instance.test.ts +0 -192
  272. package/src/lib/__tests__/local-status.test.ts +0 -202
  273. package/src/lib/__tests__/log-errors.test.ts +0 -64
  274. package/src/lib/__tests__/log.test.ts +0 -31
  275. package/src/lib/__tests__/meta.test.ts +0 -55
  276. package/src/lib/__tests__/output.test.ts +0 -162
  277. package/src/lib/__tests__/panel.test.ts +0 -40
  278. package/src/lib/__tests__/port.test.ts +0 -44
  279. package/src/lib/__tests__/prompt.test.ts +0 -25
  280. package/src/lib/__tests__/sdk-deps.test.ts +0 -68
  281. package/src/lib/__tests__/self.test.ts +0 -50
  282. package/src/lib/__tests__/studio-server-deps.test.ts +0 -111
  283. package/src/lib/__tests__/table.test.ts +0 -53
  284. package/src/lib/__tests__/update.test.ts +0 -351
  285. package/src/lib/__tests__/use-target.test.ts +0 -56
  286. package/src/lib/__tests__/validation.test.ts +0 -34
  287. package/src/lib/__tests__/view-assets.test.ts +0 -146
  288. package/src/lib/__tests__/view-open-intent.test.ts +0 -280
  289. package/src/lib/__tests__/view-port-allocation.test.ts +0 -82
  290. package/src/lib/__tests__/view-server.test.ts +0 -68
  291. package/src/lib/__tests__/view-session.test.ts +0 -99
  292. package/src/lib/__tests__/view-snapshot.test.ts +0 -77
  293. package/src/lib/admin-domain.ts +0 -43
  294. package/src/lib/admin-instance.ts +0 -56
  295. package/src/lib/admin-target.ts +0 -290
  296. package/src/lib/binary.ts +0 -110
  297. package/src/lib/browser.ts +0 -150
  298. package/src/lib/ca-fetch.ts +0 -133
  299. package/src/lib/command-dx.ts +0 -191
  300. package/src/lib/concurrency.ts +0 -31
  301. package/src/lib/config.ts +0 -46
  302. package/src/lib/domain-publication.ts +0 -104
  303. package/src/lib/failure-debug.ts +0 -26
  304. package/src/lib/format.ts +0 -4
  305. package/src/lib/idp-session.ts +0 -134
  306. package/src/lib/idp.ts +0 -906
  307. package/src/lib/instance-candidates.ts +0 -49
  308. package/src/lib/instance-target.ts +0 -197
  309. package/src/lib/instance.ts +0 -467
  310. package/src/lib/invocation.ts +0 -11
  311. package/src/lib/local-status.ts +0 -152
  312. package/src/lib/log.ts +0 -143
  313. package/src/lib/login-flow.ts +0 -201
  314. package/src/lib/meta.ts +0 -90
  315. package/src/lib/output.ts +0 -238
  316. package/src/lib/panel.ts +0 -61
  317. package/src/lib/port.ts +0 -41
  318. package/src/lib/proc.ts +0 -82
  319. package/src/lib/prompt.ts +0 -136
  320. package/src/lib/provision-instance.ts +0 -139
  321. package/src/lib/sdk-deps.ts +0 -104
  322. package/src/lib/self.ts +0 -22
  323. package/src/lib/skills.ts +0 -171
  324. package/src/lib/table.ts +0 -62
  325. package/src/lib/update.ts +0 -409
  326. package/src/lib/use-target.ts +0 -24
  327. package/src/lib/validation.ts +0 -59
  328. package/src/lib/view/assets.ts +0 -78
  329. package/src/lib/view/open-intent.ts +0 -67
  330. package/src/lib/view/port-allocation.ts +0 -19
  331. package/src/lib/view/resolve.ts +0 -111
  332. package/src/lib/view/server.ts +0 -244
  333. package/src/lib/view/session.ts +0 -152
  334. package/src/lib/view/snapshot.ts +0 -101
  335. package/src/paths/.spec/api.d.ts +0 -13
  336. package/src/paths/.spec/architecture.md +0 -5
  337. package/src/paths/.spec/layout.ts +0 -3
  338. package/src/paths/index.ts +0 -13
  339. package/src/program/.spec/api.d.ts +0 -42
  340. package/src/program/.spec/architecture.md +0 -18
  341. package/src/program/.spec/laws/program.ts +0 -29
  342. package/src/program/.spec/layout.ts +0 -14
  343. package/src/program/__tests__/program.test.ts +0 -378
  344. package/src/program/build.ts +0 -183
  345. package/src/program/command.ts +0 -42
  346. package/src/program/index.ts +0 -2
  347. package/src/program/options.ts +0 -41
  348. package/src/program/registry.ts +0 -63
  349. package/src/program/tsconfig.json +0 -6
  350. package/src/setup/__tests__/instance-step.test.ts +0 -256
  351. package/src/setup/__tests__/util.test.ts +0 -29
  352. package/src/setup/engine.ts +0 -83
  353. package/src/setup/render.ts +0 -107
  354. package/src/setup/steps/admin.ts +0 -93
  355. package/src/setup/steps/agent-browser.ts +0 -81
  356. package/src/setup/steps/auth.ts +0 -54
  357. package/src/setup/steps/domain.ts +0 -68
  358. package/src/setup/steps/index.ts +0 -18
  359. package/src/setup/steps/instance.ts +0 -206
  360. package/src/setup/steps/skills-bridge.ts +0 -70
  361. package/src/setup/steps/skills.ts +0 -59
  362. package/src/setup/types.ts +0 -61
  363. package/src/setup/util.ts +0 -34
  364. package/src/state/.spec/api.d.ts +0 -133
  365. package/src/state/.spec/architecture.md +0 -31
  366. package/src/state/.spec/capabilities/state.ts +0 -7
  367. package/src/state/.spec/flows/identity-update.ts +0 -22
  368. package/src/state/.spec/laws/state.ts +0 -73
  369. package/src/state/.spec/layout.ts +0 -14
  370. package/src/state/__tests__/exchange-credentials.test.ts +0 -188
  371. package/src/state/__tests__/files.test.ts +0 -113
  372. package/src/state/__tests__/fixtures/identity-transition.ts +0 -37
  373. package/src/state/__tests__/identities.test.ts +0 -142
  374. package/src/state/__tests__/paths.test.ts +0 -27
  375. package/src/state/exchange-credentials.ts +0 -219
  376. package/src/state/files.ts +0 -129
  377. package/src/state/identities.ts +0 -229
  378. package/src/state/index.ts +0 -29
  379. package/src/state/paths.ts +0 -61
  380. package/src/state/tsconfig.json +0 -6
  381. package/src/telemetry/__tests__/gate.test.ts +0 -63
  382. package/src/telemetry/__tests__/recorder.test.ts +0 -110
  383. package/src/telemetry/__tests__/redact.test.ts +0 -79
  384. package/src/telemetry/__tests__/session.test.ts +0 -166
  385. package/src/telemetry/__tests__/trigger.test.ts +0 -49
  386. package/src/telemetry/adapters/__tests__/claude-code.test.ts +0 -89
  387. package/src/telemetry/adapters/__tests__/codex.test.ts +0 -138
  388. package/src/telemetry/adapters/__tests__/index.test.ts +0 -88
  389. package/src/telemetry/adapters/claude-code.ts +0 -90
  390. package/src/telemetry/adapters/codex.ts +0 -160
  391. package/src/telemetry/adapters/index.ts +0 -45
  392. package/src/telemetry/adapters/types.ts +0 -21
  393. package/src/telemetry/analyze.ts +0 -227
  394. package/src/telemetry/gate.ts +0 -79
  395. package/src/telemetry/recorder.ts +0 -57
  396. package/src/telemetry/redact.ts +0 -53
  397. package/src/telemetry/session.ts +0 -88
  398. package/src/telemetry/settings.ts +0 -26
  399. package/src/telemetry/store.ts +0 -91
  400. package/src/telemetry/trigger.ts +0 -119
  401. package/src/telemetry/types.ts +0 -64
  402. package/src/test-utils.ts +0 -18
  403. package/studio/client/dist/assets/elk-api-ByzoDZWH.js +0 -1
  404. package/studio/client/dist/assets/elk-worker.min-C9JGDOE-.js +0 -6312
  405. package/studio/client/dist/assets/index-B0RCgUOT.js +0 -8
  406. package/studio/client/dist/assets/index-BiGR8Oo9.css +0 -1
  407. package/studio/client/dist/assets/index-ChOr3yP0.css +0 -1
  408. package/studio/client/dist/assets/index-N8J8EKlB.js +0 -81
  409. package/studio/client/dist/index.html +0 -13
  410. package/studio/package.json +0 -65
  411. package/studio/server/agent/ask.test.ts +0 -74
  412. package/studio/server/agent/ask.ts +0 -71
  413. package/studio/server/agent/bridge/client.test.ts +0 -49
  414. package/studio/server/agent/bridge/client.ts +0 -37
  415. package/studio/server/agent/bridge/grant.test.ts +0 -62
  416. package/studio/server/agent/bridge/grant.ts +0 -84
  417. package/studio/server/agent/bridge/routes.test.ts +0 -151
  418. package/studio/server/agent/bridge/routes.ts +0 -148
  419. package/studio/server/agent/bridge/stdio.ts +0 -195
  420. package/studio/server/agent/conversation.test.ts +0 -89
  421. package/studio/server/agent/conversation.ts +0 -158
  422. package/studio/server/agent/harness/adapter.ts +0 -171
  423. package/studio/server/agent/harness/claude/adapter.test.ts +0 -348
  424. package/studio/server/agent/harness/claude/adapter.ts +0 -71
  425. package/studio/server/agent/harness/claude/ask.ts +0 -114
  426. package/studio/server/agent/harness/claude/capabilities.ts +0 -27
  427. package/studio/server/agent/harness/claude/command.ts +0 -63
  428. package/studio/server/agent/harness/claude/events.ts +0 -215
  429. package/studio/server/agent/harness/claude/loadout.ts +0 -132
  430. package/studio/server/agent/harness/claude/mcp.test.ts +0 -36
  431. package/studio/server/agent/harness/claude/mcp.ts +0 -41
  432. package/studio/server/agent/harness/claude/skills.ts +0 -43
  433. package/studio/server/agent/harness/codex/adapter.test.ts +0 -269
  434. package/studio/server/agent/harness/codex/adapter.ts +0 -116
  435. package/studio/server/agent/harness/codex/ask.test.ts +0 -176
  436. package/studio/server/agent/harness/codex/ask.ts +0 -181
  437. package/studio/server/agent/harness/codex/command.test.ts +0 -69
  438. package/studio/server/agent/harness/codex/command.ts +0 -43
  439. package/studio/server/agent/harness/codex/events.test.ts +0 -94
  440. package/studio/server/agent/harness/codex/events.ts +0 -132
  441. package/studio/server/agent/harness/codex/exec.ts +0 -113
  442. package/studio/server/agent/harness/codex/loadout.ts +0 -60
  443. package/studio/server/agent/harness/codex/mcp.test.ts +0 -32
  444. package/studio/server/agent/harness/codex/mcp.ts +0 -27
  445. package/studio/server/agent/harness/codex/models.test.ts +0 -167
  446. package/studio/server/agent/harness/codex/models.ts +0 -211
  447. package/studio/server/agent/harness/codex/skills.ts +0 -33
  448. package/studio/server/agent/harness/gateway/config.test.ts +0 -98
  449. package/studio/server/agent/harness/gateway/config.ts +0 -214
  450. package/studio/server/agent/harness/gateway/token.test.ts +0 -133
  451. package/studio/server/agent/harness/gateway/token.ts +0 -166
  452. package/studio/server/agent/harness/mock/adapter.ts +0 -190
  453. package/studio/server/agent/harness/mock/domain-edit.ts +0 -41
  454. package/studio/server/agent/harness/process.test.ts +0 -46
  455. package/studio/server/agent/harness/process.ts +0 -104
  456. package/studio/server/agent/harness/registry.ts +0 -37
  457. package/studio/server/agent/harness/selection.test.ts +0 -75
  458. package/studio/server/agent/harness/selection.ts +0 -85
  459. package/studio/server/agent/harness/skills.test.ts +0 -95
  460. package/studio/server/agent/harness/skills.ts +0 -100
  461. package/studio/server/agent/layout.test.ts +0 -95
  462. package/studio/server/agent/notify.ts +0 -12
  463. package/studio/server/agent/prompts/anchors.test.ts +0 -70
  464. package/studio/server/agent/prompts/anchors.ts +0 -153
  465. package/studio/server/agent/prompts/ask.ts +0 -34
  466. package/studio/server/agent/prompts/system.test.ts +0 -13
  467. package/studio/server/agent/prompts/system.ts +0 -99
  468. package/studio/server/agent/prompts/turn.ts +0 -66
  469. package/studio/server/agent/routes.test.ts +0 -176
  470. package/studio/server/agent/routes.ts +0 -214
  471. package/studio/server/agent/run/completion.ts +0 -193
  472. package/studio/server/agent/run/coordinator.test.ts +0 -337
  473. package/studio/server/agent/run/coordinator.ts +0 -104
  474. package/studio/server/agent/run/live-state.ts +0 -73
  475. package/studio/server/agent/run/preparation.ts +0 -163
  476. package/studio/server/agent/run/transcript.test.ts +0 -81
  477. package/studio/server/agent/run/transcript.ts +0 -196
  478. package/studio/server/agent/run/usage.test.ts +0 -70
  479. package/studio/server/agent/run/usage.ts +0 -62
  480. package/studio/server/agent/stream.ts +0 -37
  481. package/studio/server/agent/telemetry.ts +0 -13
  482. package/studio/server/api/canvas.ts +0 -43
  483. package/studio/server/api/comments.ts +0 -85
  484. package/studio/server/api/context.ts +0 -61
  485. package/studio/server/api/deployment.ts +0 -39
  486. package/studio/server/api/documents.ts +0 -55
  487. package/studio/server/api/domain.ts +0 -59
  488. package/studio/server/api/http.ts +0 -45
  489. package/studio/server/api/project.ts +0 -57
  490. package/studio/server/api/schema.ts +0 -12
  491. package/studio/server/api/views.ts +0 -57
  492. package/studio/server/api/workspace.ts +0 -60
  493. package/studio/server/api-agent-loadout.test.ts +0 -69
  494. package/studio/server/api.test.ts +0 -147
  495. package/studio/server/api.ts +0 -34
  496. package/studio/server/cache.test.ts +0 -122
  497. package/studio/server/cache.ts +0 -303
  498. package/studio/server/cli-consumers.test.ts +0 -494
  499. package/studio/server/cli.test.ts +0 -88
  500. package/studio/server/cli.ts +0 -240
  501. package/studio/server/client-package.test.ts +0 -147
  502. package/studio/server/client-package.ts +0 -266
  503. package/studio/server/detect.ts +0 -81
  504. package/studio/server/domain.test.ts +0 -77
  505. package/studio/server/domain.ts +0 -124
  506. package/studio/server/environment/dotenv-preview.test.ts +0 -39
  507. package/studio/server/environment/dotenv-preview.ts +0 -27
  508. package/studio/server/environment/files.test.ts +0 -53
  509. package/studio/server/environment/files.ts +0 -120
  510. package/studio/server/handoff/copy.ts +0 -171
  511. package/studio/server/handoff/service.test.ts +0 -22
  512. package/studio/server/handoff/service.ts +0 -62
  513. package/studio/server/index.ts +0 -148
  514. package/studio/server/instances/active.ts +0 -72
  515. package/studio/server/instances/deploy-record.test.ts +0 -31
  516. package/studio/server/instances/deploy-record.ts +0 -37
  517. package/studio/server/instances/deploy.ts +0 -56
  518. package/studio/server/instances/probe.test.ts +0 -67
  519. package/studio/server/instances/probe.ts +0 -67
  520. package/studio/server/instances/status.test.ts +0 -12
  521. package/studio/server/instances/status.ts +0 -49
  522. package/studio/server/introspect/anatomy/client-tree.ts +0 -57
  523. package/studio/server/introspect/anatomy/env-fields.ts +0 -66
  524. package/studio/server/introspect/anatomy/schema-definition.ts +0 -53
  525. package/studio/server/introspect/anatomy/source.ts +0 -181
  526. package/studio/server/introspect/anatomy/views/routes.ts +0 -114
  527. package/studio/server/introspect/anatomy/views.ts +0 -53
  528. package/studio/server/introspect/anatomy-extras.test.ts +0 -265
  529. package/studio/server/introspect/anatomy-extras.ts +0 -10
  530. package/studio/server/introspect/anatomy.test.ts +0 -41
  531. package/studio/server/introspect/anatomy.ts +0 -147
  532. package/studio/server/introspect/bundle.ts +0 -69
  533. package/studio/server/introspect/canonical-schema.test.ts +0 -179
  534. package/studio/server/introspect/canonical-schema.ts +0 -583
  535. package/studio/server/introspect/config-preview.test.ts +0 -32
  536. package/studio/server/introspect/config-preview.ts +0 -119
  537. package/studio/server/introspect/core-extractor.ts +0 -30
  538. package/studio/server/introspect/core.ts +0 -45
  539. package/studio/server/introspect/diff.test.ts +0 -124
  540. package/studio/server/introspect/diff.ts +0 -316
  541. package/studio/server/introspect/extractor.ts +0 -41
  542. package/studio/server/introspect/hash.ts +0 -24
  543. package/studio/server/introspect/overlay-tsmorph.test.ts +0 -146
  544. package/studio/server/introspect/overlay-tsmorph.ts +0 -9
  545. package/studio/server/introspect/overlay.test.ts +0 -44
  546. package/studio/server/introspect/overlay.ts +0 -40
  547. package/studio/server/introspect/revision.test.ts +0 -54
  548. package/studio/server/introspect/revision.ts +0 -49
  549. package/studio/server/introspect/runtime.test.ts +0 -157
  550. package/studio/server/introspect/runtime.ts +0 -140
  551. package/studio/server/introspect/schema-ir-json.test.ts +0 -70
  552. package/studio/server/introspect/schema-ir-json.ts +0 -151
  553. package/studio/server/introspect/schema-refs.test.ts +0 -55
  554. package/studio/server/introspect/schema-refs.ts +0 -32
  555. package/studio/server/introspect/source-overlay/annotations.ts +0 -14
  556. package/studio/server/introspect/source-overlay/handlers.ts +0 -161
  557. package/studio/server/introspect/source-overlay/kernel-calls.ts +0 -46
  558. package/studio/server/introspect/source-overlay/project.ts +0 -248
  559. package/studio/server/introspect/source-overlay/spans.ts +0 -330
  560. package/studio/server/json.ts +0 -46
  561. package/studio/server/lifecycle.ts +0 -42
  562. package/studio/server/sse.test.ts +0 -26
  563. package/studio/server/sse.ts +0 -60
  564. package/studio/server/state/baseline.test.ts +0 -267
  565. package/studio/server/state/baseline.ts +0 -354
  566. package/studio/server/state/comments.test.ts +0 -94
  567. package/studio/server/state/comments.ts +0 -484
  568. package/studio/server/state/context.ts +0 -199
  569. package/studio/server/state/documents.ts +0 -111
  570. package/studio/server/state/integrations.ts +0 -81
  571. package/studio/server/state/layout.test.ts +0 -34
  572. package/studio/server/state/layout.ts +0 -82
  573. package/studio/server/state/settings.test.ts +0 -78
  574. package/studio/server/state/settings.ts +0 -73
  575. package/studio/server/state/store.test.ts +0 -122
  576. package/studio/server/state/store.ts +0 -146
  577. package/studio/server/state/visibility.ts +0 -48
  578. package/studio/server/views/model.test.ts +0 -57
  579. package/studio/server/views/model.ts +0 -66
  580. package/studio/server/views/runtime.ts +0 -40
  581. package/studio/server/views/selection-repository.test.ts +0 -31
  582. package/studio/server/views/selection-repository.ts +0 -60
  583. package/studio/server/views/session.test.ts +0 -73
  584. package/studio/server/views/session.ts +0 -166
  585. package/studio/server/views/target.test.ts +0 -78
  586. package/studio/server/views/target.ts +0 -222
  587. package/studio/server/watch.test.ts +0 -36
  588. package/studio/server/watch.ts +0 -93
  589. package/studio/server/workspace/catalog.test.ts +0 -17
  590. package/studio/server/workspace/catalog.ts +0 -43
  591. package/studio/server/workspace/create.test.ts +0 -37
  592. package/studio/server/workspace/create.ts +0 -162
  593. package/studio/server/workspace/git.ts +0 -75
  594. package/studio/server/workspace/updates.ts +0 -83
  595. package/studio/server/workspace-state.ts +0 -26
  596. package/studio/server/workspace-watch.ts +0 -106
  597. package/studio/shared/agent-effort.test.ts +0 -12
  598. package/studio/shared/agent-effort.ts +0 -15
  599. package/studio/shared/agent-models.test.ts +0 -9
  600. package/studio/shared/agent-models.ts +0 -14
  601. package/studio/shared/contracts/README.md +0 -16
  602. package/studio/shared/contracts/agent.ts +0 -270
  603. package/studio/shared/contracts/runtime.ts +0 -50
  604. package/studio/shared/contracts/schema.ts +0 -393
  605. package/studio/shared/contracts/surface.test.ts +0 -317
  606. package/studio/shared/contracts/workspace.ts +0 -265
  607. package/studio/shared/layout.test.ts +0 -116
  608. package/studio/shared/schema/identity.test.ts +0 -34
  609. package/studio/shared/schema/identity.ts +0 -68
  610. package/studio/shared/settings-values.test.ts +0 -18
  611. package/studio/shared/settings-values.ts +0 -20
  612. package/studio/shared/types.ts +0 -14
  613. package/studio/tsconfig.json +0 -23
  614. package/tsconfig.json +0 -14
  615. package/viewer/dist/index.html +0 -93
  616. package/viewer/dist/main.js +0 -76
  617. package/viewer/tsconfig.json +0 -13
@@ -1,71 +0,0 @@
1
- import { z } from 'zod';
2
- export declare const AstraleConfigSchema: z.ZodObject<{
3
- issuer: z.ZodDefault<z.ZodString>;
4
- admin: z.ZodDefault<z.ZodEffects<z.ZodObject<{
5
- name: z.ZodOptional<z.ZodString>;
6
- url: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
7
- kernelIssuer: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
8
- domainIssuer: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
9
- instance: z.ZodOptional<z.ZodString>;
10
- }, "strip", z.ZodTypeAny, {
11
- name?: string | undefined;
12
- url?: string | undefined;
13
- kernelIssuer?: string | undefined;
14
- domainIssuer?: string | undefined;
15
- instance?: string | undefined;
16
- }, {
17
- name?: string | undefined;
18
- url?: string | undefined;
19
- kernelIssuer?: string | undefined;
20
- domainIssuer?: string | undefined;
21
- instance?: string | undefined;
22
- }>, {
23
- name?: string | undefined;
24
- url?: string | undefined;
25
- kernelIssuer?: string | undefined;
26
- domainIssuer?: string | undefined;
27
- instance?: string | undefined;
28
- }, {
29
- name?: string | undefined;
30
- url?: string | undefined;
31
- kernelIssuer?: string | undefined;
32
- domainIssuer?: string | undefined;
33
- instance?: string | undefined;
34
- }>>;
35
- telemetry: z.ZodDefault<z.ZodObject<{
36
- enabled: z.ZodDefault<z.ZodBoolean>;
37
- }, "strip", z.ZodTypeAny, {
38
- enabled: boolean;
39
- }, {
40
- enabled?: boolean | undefined;
41
- }>>;
42
- }, "strip", z.ZodTypeAny, {
43
- issuer: string;
44
- admin: {
45
- name?: string | undefined;
46
- url?: string | undefined;
47
- kernelIssuer?: string | undefined;
48
- domainIssuer?: string | undefined;
49
- instance?: string | undefined;
50
- };
51
- telemetry: {
52
- enabled: boolean;
53
- };
54
- }, {
55
- issuer?: string | undefined;
56
- admin?: {
57
- name?: string | undefined;
58
- url?: string | undefined;
59
- kernelIssuer?: string | undefined;
60
- domainIssuer?: string | undefined;
61
- instance?: string | undefined;
62
- } | undefined;
63
- telemetry?: {
64
- enabled?: boolean | undefined;
65
- } | undefined;
66
- }>;
67
- export type AstraleConfig = z.infer<typeof AstraleConfigSchema>;
68
- export declare const DEFAULT_CONFIG: AstraleConfig;
69
- export declare function readConfig(): Promise<AstraleConfig>;
70
- export declare function writeConfig(config: AstraleConfig): Promise<void>;
71
- export declare function configExists(): Promise<boolean>;
@@ -1 +0,0 @@
1
- export declare function printFailureDebug(error: unknown, url: string): void;
@@ -1 +0,0 @@
1
- export declare function formatElapsed(ms: number): string;
@@ -1,33 +0,0 @@
1
- import { type IdpSession } from './idp';
2
- /** No cached session file exists for the identity — only a login creates one. */
3
- export declare class IdpSessionMissingError extends Error {
4
- readonly identityName: string;
5
- constructor(identityName: string);
6
- }
7
- /** The session needs a refresh but never received a refresh token. */
8
- export declare class IdpSessionNoRefreshTokenError extends Error {
9
- readonly identityName: string;
10
- constructor(identityName: string);
11
- }
12
- export type EnsureFreshSessionOptions = {
13
- audience?: string;
14
- organizationId?: string;
15
- /**
16
- * Org-hint resolver, consulted only when a refresh actually happens.
17
- * Defaults to `fetchOrgHint`; injectable for tests.
18
- */
19
- resolveOrganizationId?: (audience: string) => Promise<string | undefined>;
20
- };
21
- export declare function idpSessionLockPath(identityName: string): string;
22
- /**
23
- * Return a session holding a fresh access token for `audience`, refreshing it
24
- * if needed. This is the ONLY correct way to refresh: WorkOS refresh tokens
25
- * are single-use, so two processes refreshing concurrently burn the same
26
- * token — the loser's `invalid_grant` can revoke the whole upstream session.
27
- * All refreshes therefore serialize on a per-identity file lock, and waiters
28
- * re-read the rotated session instead of re-exchanging.
29
- *
30
- * `IdpAudienceMismatchError` propagates verbatim (the session is healthy; the
31
- * IdP just won't mint that audience).
32
- */
33
- export declare function ensureFreshSession(identityName: string, opts?: EnsureFreshSessionOptions): Promise<IdpSession>;
@@ -1,404 +0,0 @@
1
- import { type JWTPayload } from 'jose';
2
- import { z } from 'zod';
3
- /**
4
- * Thrown when a refresh succeeds but the IdP mints an access token whose `aud`
5
- * does not match the one the caller requested. Distinct from a transport/grant
6
- * failure: the session is *healthy*, the IdP simply will not issue that
7
- * audience (e.g. WorkOS AuthKit ignores the `audience` param and stamps a fixed
8
- * API audience per environment). Re-login does not help — callers must target
9
- * an instance whose audience equals `actual`, or reconfigure the IdP/bookmark.
10
- */
11
- export declare class IdpAudienceMismatchError extends Error {
12
- readonly requested: string;
13
- readonly actual: string | undefined;
14
- constructor(requested: string, actual: string | undefined);
15
- }
16
- /**
17
- * A token-endpoint request that the IdP answered with an OAuth error (or that
18
- * failed at the HTTP layer). Carries the structured OAuth `error` code so
19
- * callers can tell a definitively dead grant (`invalid_grant`) from a
20
- * transient outage — the message string alone cannot.
21
- */
22
- export declare class OAuthTokenError extends Error {
23
- /** OAuth `error` code, e.g. `invalid_grant`. */
24
- readonly code?: string;
25
- /** OAuth `error_description`. */
26
- readonly description?: string;
27
- /** HTTP status of the token response. */
28
- readonly status?: number;
29
- constructor(args: {
30
- code?: string;
31
- description?: string;
32
- status?: number;
33
- });
34
- }
35
- export type RefreshFailureKind = 'session-ended' | 'org-rejected' | 'transient' | 'unknown';
36
- /**
37
- * Classify a `refreshSession` failure so callers only demand a re-login when
38
- * the grant is actually dead. `org-rejected` = healthy session, wrong/stale
39
- * org scope (re-login can't fix it); 5xx/429 and fetch-layer failures are
40
- * transient — the cached session is likely still valid.
41
- */
42
- export declare function classifyRefreshFailure(e: unknown): RefreshFailureKind;
43
- export declare const OidcMetadataSchema: z.ZodObject<{
44
- issuer: z.ZodString;
45
- authorization_endpoint: z.ZodOptional<z.ZodString>;
46
- token_endpoint: z.ZodString;
47
- jwks_uri: z.ZodString;
48
- device_authorization_endpoint: z.ZodOptional<z.ZodString>;
49
- revocation_endpoint: z.ZodOptional<z.ZodString>;
50
- scopes_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
51
- grant_types_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
52
- response_types_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
53
- code_challenge_methods_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
54
- }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
55
- issuer: z.ZodString;
56
- authorization_endpoint: z.ZodOptional<z.ZodString>;
57
- token_endpoint: z.ZodString;
58
- jwks_uri: z.ZodString;
59
- device_authorization_endpoint: z.ZodOptional<z.ZodString>;
60
- revocation_endpoint: z.ZodOptional<z.ZodString>;
61
- scopes_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
62
- grant_types_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
63
- response_types_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
64
- code_challenge_methods_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
65
- }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
66
- issuer: z.ZodString;
67
- authorization_endpoint: z.ZodOptional<z.ZodString>;
68
- token_endpoint: z.ZodString;
69
- jwks_uri: z.ZodString;
70
- device_authorization_endpoint: z.ZodOptional<z.ZodString>;
71
- revocation_endpoint: z.ZodOptional<z.ZodString>;
72
- scopes_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
73
- grant_types_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
74
- response_types_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
75
- code_challenge_methods_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
76
- }, z.ZodTypeAny, "passthrough">>;
77
- export type OidcMetadata = z.infer<typeof OidcMetadataSchema>;
78
- export declare const IdpClientConfigSchema: z.ZodObject<{
79
- client_id: z.ZodOptional<z.ZodString>;
80
- client_secret_env: z.ZodOptional<z.ZodString>;
81
- redirect_uris: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
82
- scope: z.ZodOptional<z.ZodString>;
83
- public: z.ZodOptional<z.ZodBoolean>;
84
- token_response: z.ZodOptional<z.ZodEnum<["oauth", "workos-authkit"]>>;
85
- token_request_format: z.ZodOptional<z.ZodEnum<["form", "json"]>>;
86
- workos_application_id: z.ZodOptional<z.ZodString>;
87
- workos_application_type: z.ZodOptional<z.ZodEnum<["oauth", "m2m"]>>;
88
- }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
89
- client_id: z.ZodOptional<z.ZodString>;
90
- client_secret_env: z.ZodOptional<z.ZodString>;
91
- redirect_uris: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
92
- scope: z.ZodOptional<z.ZodString>;
93
- public: z.ZodOptional<z.ZodBoolean>;
94
- token_response: z.ZodOptional<z.ZodEnum<["oauth", "workos-authkit"]>>;
95
- token_request_format: z.ZodOptional<z.ZodEnum<["form", "json"]>>;
96
- workos_application_id: z.ZodOptional<z.ZodString>;
97
- workos_application_type: z.ZodOptional<z.ZodEnum<["oauth", "m2m"]>>;
98
- }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
99
- client_id: z.ZodOptional<z.ZodString>;
100
- client_secret_env: z.ZodOptional<z.ZodString>;
101
- redirect_uris: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
102
- scope: z.ZodOptional<z.ZodString>;
103
- public: z.ZodOptional<z.ZodBoolean>;
104
- token_response: z.ZodOptional<z.ZodEnum<["oauth", "workos-authkit"]>>;
105
- token_request_format: z.ZodOptional<z.ZodEnum<["form", "json"]>>;
106
- workos_application_id: z.ZodOptional<z.ZodString>;
107
- workos_application_type: z.ZodOptional<z.ZodEnum<["oauth", "m2m"]>>;
108
- }, z.ZodTypeAny, "passthrough">>;
109
- export type IdpClientConfig = z.infer<typeof IdpClientConfigSchema>;
110
- export declare const IdpIndexEntrySchema: z.ZodObject<{
111
- issuer: z.ZodString;
112
- builtIn: z.ZodOptional<z.ZodBoolean>;
113
- createdAt: z.ZodString;
114
- updatedAt: z.ZodString;
115
- }, "strip", z.ZodTypeAny, {
116
- issuer: string;
117
- builtIn?: boolean | undefined;
118
- createdAt: string;
119
- updatedAt: string;
120
- }, {
121
- issuer: string;
122
- builtIn?: boolean | undefined;
123
- createdAt: string;
124
- updatedAt: string;
125
- }>;
126
- export declare const IdpStoreSchema: z.ZodObject<{
127
- idps: z.ZodRecord<z.ZodString, z.ZodObject<{
128
- issuer: z.ZodString;
129
- builtIn: z.ZodOptional<z.ZodBoolean>;
130
- createdAt: z.ZodString;
131
- updatedAt: z.ZodString;
132
- }, "strip", z.ZodTypeAny, {
133
- issuer: string;
134
- builtIn?: boolean | undefined;
135
- createdAt: string;
136
- updatedAt: string;
137
- }, {
138
- issuer: string;
139
- builtIn?: boolean | undefined;
140
- createdAt: string;
141
- updatedAt: string;
142
- }>>;
143
- }, "strip", z.ZodTypeAny, {
144
- idps: Record<string, {
145
- issuer: string;
146
- builtIn?: boolean | undefined;
147
- createdAt: string;
148
- updatedAt: string;
149
- }>;
150
- }, {
151
- idps: Record<string, {
152
- issuer: string;
153
- builtIn?: boolean | undefined;
154
- createdAt: string;
155
- updatedAt: string;
156
- }>;
157
- }>;
158
- export type IdpStore = z.infer<typeof IdpStoreSchema>;
159
- export type IdpIndexEntry = z.infer<typeof IdpIndexEntrySchema>;
160
- export declare const IdpSessionSchema: z.ZodObject<{
161
- identity: z.ZodString;
162
- idp: z.ZodString;
163
- issuer: z.ZodString;
164
- subject: z.ZodString;
165
- /** OAuth client that issued this session's refresh token. */
166
- clientId: z.ZodOptional<z.ZodString>;
167
- audience: z.ZodOptional<z.ZodString>;
168
- organizationId: z.ZodOptional<z.ZodString>;
169
- access_token: z.ZodString;
170
- id_token: z.ZodOptional<z.ZodString>;
171
- refresh_token: z.ZodOptional<z.ZodString>;
172
- token_type: z.ZodOptional<z.ZodString>;
173
- scope: z.ZodOptional<z.ZodString>;
174
- expires_at: z.ZodOptional<z.ZodString>;
175
- claims: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
176
- /**
177
- * Access tokens by audience. WorkOS mints one `aud` per token, so a
178
- * session juggling several instances would otherwise burn a (single-use)
179
- * refresh-token rotation on every instance flip. The top-level
180
- * `access_token`/`expires_at` stay the most recently minted token for
181
- * back-compat with older CLI builds.
182
- */
183
- tokens: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
184
- access_token: z.ZodString;
185
- expires_at: z.ZodOptional<z.ZodString>;
186
- }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
187
- access_token: z.ZodString;
188
- expires_at: z.ZodOptional<z.ZodString>;
189
- }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
190
- access_token: z.ZodString;
191
- expires_at: z.ZodOptional<z.ZodString>;
192
- }, z.ZodTypeAny, "passthrough">>>>;
193
- updatedAt: z.ZodString;
194
- }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
195
- identity: z.ZodString;
196
- idp: z.ZodString;
197
- issuer: z.ZodString;
198
- subject: z.ZodString;
199
- /** OAuth client that issued this session's refresh token. */
200
- clientId: z.ZodOptional<z.ZodString>;
201
- audience: z.ZodOptional<z.ZodString>;
202
- organizationId: z.ZodOptional<z.ZodString>;
203
- access_token: z.ZodString;
204
- id_token: z.ZodOptional<z.ZodString>;
205
- refresh_token: z.ZodOptional<z.ZodString>;
206
- token_type: z.ZodOptional<z.ZodString>;
207
- scope: z.ZodOptional<z.ZodString>;
208
- expires_at: z.ZodOptional<z.ZodString>;
209
- claims: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
210
- /**
211
- * Access tokens by audience. WorkOS mints one `aud` per token, so a
212
- * session juggling several instances would otherwise burn a (single-use)
213
- * refresh-token rotation on every instance flip. The top-level
214
- * `access_token`/`expires_at` stay the most recently minted token for
215
- * back-compat with older CLI builds.
216
- */
217
- tokens: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
218
- access_token: z.ZodString;
219
- expires_at: z.ZodOptional<z.ZodString>;
220
- }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
221
- access_token: z.ZodString;
222
- expires_at: z.ZodOptional<z.ZodString>;
223
- }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
224
- access_token: z.ZodString;
225
- expires_at: z.ZodOptional<z.ZodString>;
226
- }, z.ZodTypeAny, "passthrough">>>>;
227
- updatedAt: z.ZodString;
228
- }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
229
- identity: z.ZodString;
230
- idp: z.ZodString;
231
- issuer: z.ZodString;
232
- subject: z.ZodString;
233
- /** OAuth client that issued this session's refresh token. */
234
- clientId: z.ZodOptional<z.ZodString>;
235
- audience: z.ZodOptional<z.ZodString>;
236
- organizationId: z.ZodOptional<z.ZodString>;
237
- access_token: z.ZodString;
238
- id_token: z.ZodOptional<z.ZodString>;
239
- refresh_token: z.ZodOptional<z.ZodString>;
240
- token_type: z.ZodOptional<z.ZodString>;
241
- scope: z.ZodOptional<z.ZodString>;
242
- expires_at: z.ZodOptional<z.ZodString>;
243
- claims: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
244
- /**
245
- * Access tokens by audience. WorkOS mints one `aud` per token, so a
246
- * session juggling several instances would otherwise burn a (single-use)
247
- * refresh-token rotation on every instance flip. The top-level
248
- * `access_token`/`expires_at` stay the most recently minted token for
249
- * back-compat with older CLI builds.
250
- */
251
- tokens: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
252
- access_token: z.ZodString;
253
- expires_at: z.ZodOptional<z.ZodString>;
254
- }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
255
- access_token: z.ZodString;
256
- expires_at: z.ZodOptional<z.ZodString>;
257
- }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
258
- access_token: z.ZodString;
259
- expires_at: z.ZodOptional<z.ZodString>;
260
- }, z.ZodTypeAny, "passthrough">>>>;
261
- updatedAt: z.ZodString;
262
- }, z.ZodTypeAny, "passthrough">>;
263
- export type IdpSession = z.infer<typeof IdpSessionSchema>;
264
- export type TokenResponse = {
265
- access_token?: string;
266
- accessToken?: string;
267
- id_token?: string;
268
- idToken?: string;
269
- refresh_token?: string;
270
- refreshToken?: string;
271
- token_type?: string;
272
- scope?: string;
273
- expires_in?: number;
274
- expiresIn?: number;
275
- user?: {
276
- id?: string;
277
- [key: string]: unknown;
278
- };
279
- organization_id?: string;
280
- authentication_method?: string;
281
- error?: string;
282
- error_description?: string;
283
- [key: string]: unknown;
284
- };
285
- export type DeviceAuthorizationResponse = {
286
- device_code: string;
287
- user_code?: string;
288
- verification_uri?: string;
289
- verification_uri_complete?: string;
290
- expires_in: number;
291
- interval?: number;
292
- message?: string;
293
- [key: string]: unknown;
294
- };
295
- export type IdpConfig = {
296
- name: string;
297
- entry: IdpIndexEntry;
298
- metadata: OidcMetadata;
299
- client: IdpClientConfig;
300
- };
301
- export declare const BUILTIN_WORKOS_IDP_NAME = "workos";
302
- export declare function idpDir(name: string): string;
303
- export declare function idpMetadataPath(name: string): string;
304
- export declare function idpClientPath(name: string): string;
305
- export declare function idpSessionPath(identityName: string): string;
306
- export declare function readIdpStore(): Promise<IdpStore>;
307
- export declare function writeIdpStore(store: IdpStore): Promise<void>;
308
- export declare function readIdpConfig(name: string): Promise<IdpConfig>;
309
- export declare function readIdpConfigOrBuiltin(name: string, opts?: {
310
- clientId?: string;
311
- persist?: boolean;
312
- }): Promise<IdpConfig>;
313
- export declare function listIdpConfigs(): Promise<IdpConfig[]>;
314
- export declare function upsertIdpConfig(args: {
315
- name: string;
316
- metadata: OidcMetadata;
317
- client?: IdpClientConfig;
318
- builtIn?: boolean;
319
- }): Promise<IdpConfig>;
320
- export declare function removeIdpConfig(name: string): Promise<void>;
321
- export declare function fetchOidcMetadata(issuer: string): Promise<OidcMetadata>;
322
- export declare function workosAuthKitMetadata(apiHost?: string, clientId?: string): OidcMetadata;
323
- export declare function builtinIdpConfig(name: string, clientIdOverride?: string, env?: NodeJS.ProcessEnv): IdpConfig | null;
324
- export declare function workosClientIdFromEnv(env?: NodeJS.ProcessEnv): string | undefined;
325
- export declare function legacyBuiltinWorkosReplacement(existing: IdpConfig, clientIdOverride?: string, env?: NodeJS.ProcessEnv): IdpConfig | undefined;
326
- export declare function postForm(url: string, params: URLSearchParams): Promise<TokenResponse>;
327
- export declare function postJson(url: string, bodyInput: Record<string, string>): Promise<TokenResponse>;
328
- export declare function tokenExpiresAt(token: TokenResponse): string | undefined;
329
- export declare function decodeTokenClaims(token: string | undefined): JWTPayload | undefined;
330
- export declare function tokenAudienceMatches(token: string | undefined, audience: string): boolean;
331
- export declare function subjectFromToken(token: TokenResponse, fallback: string): string;
332
- export declare function issuerFromToken(token: TokenResponse, fallback: string): string;
333
- export declare function normalizeTokenResponse(token: TokenResponse): TokenResponse;
334
- export declare function identityNameFromClaims(claims: JWTPayload | undefined, fallback: string): string;
335
- export declare function saveIdpSession(session: IdpSession): Promise<void>;
336
- export declare function readIdpSession(identityName: string): Promise<IdpSession | null>;
337
- export declare function deleteIdpSession(identityName: string): Promise<void>;
338
- export declare function listIdpSessions(): Promise<IdpSession[]>;
339
- export declare function isSessionExpired(session: Pick<IdpSession, 'expires_at'> & {
340
- access_token?: string;
341
- }, skewMs?: number): boolean;
342
- /**
343
- * A still-fresh access token usable for `audience`, or undefined when a
344
- * refresh is needed. Checks the per-audience `tokens` map first, then the
345
- * top-level token's own `aud` claim. Without an `audience`, freshness of the
346
- * top-level token is the only requirement.
347
- */
348
- export declare function accessTokenForAudience(session: IdpSession, audience?: string): string | undefined;
349
- /**
350
- * Fold a freshly minted access token into the per-audience map under every
351
- * `aud` it carries, dropping entries that have already expired.
352
- */
353
- export declare function withCachedToken(tokens: IdpSession['tokens'], accessToken: string, expiresAt: string | undefined): IdpSession['tokens'];
354
- export declare function requireClientId(idp: IdpConfig, override?: string): string;
355
- export declare function resolveClientSecret(idp: IdpConfig, overrideEnv?: string): string | undefined;
356
- export declare function refreshSession(identityName: string, session: IdpSession, opts?: {
357
- readonly audience?: string;
358
- readonly organizationId?: string;
359
- }): Promise<IdpSession>;
360
- export declare function requestClientCredentials(args: {
361
- idp: IdpConfig;
362
- clientId?: string;
363
- clientSecretEnv?: string;
364
- scope?: string;
365
- audience?: string;
366
- }): Promise<TokenResponse>;
367
- export declare function requestDeviceAuthorization(args: {
368
- idp: IdpConfig;
369
- clientId?: string;
370
- scope?: string;
371
- audience?: string;
372
- }): Promise<DeviceAuthorizationResponse>;
373
- export declare function pollDeviceToken(args: {
374
- idp: IdpConfig;
375
- deviceCode: string;
376
- clientId?: string;
377
- clientSecretEnv?: string;
378
- intervalSec?: number;
379
- expiresInSec: number;
380
- }): Promise<TokenResponse>;
381
- export declare function exchangeAuthorizationCode(args: {
382
- idp: IdpConfig;
383
- code: string;
384
- redirectUri: string;
385
- codeVerifier?: string;
386
- clientId?: string;
387
- clientSecretEnv?: string;
388
- }): Promise<TokenResponse>;
389
- export type WorkosApplication = {
390
- id: string;
391
- client_id?: string;
392
- name?: string;
393
- application_type?: 'oauth' | 'm2m';
394
- scopes?: string[];
395
- redirect_uris?: Array<{
396
- uri?: string;
397
- default?: boolean;
398
- }>;
399
- uses_pkce?: boolean;
400
- };
401
- export declare function fetchWorkosApplication(args: {
402
- apiKeyEnv: string;
403
- app: string;
404
- }): Promise<WorkosApplication>;
@@ -1,38 +0,0 @@
1
- import type { AstraleConfig } from './config';
2
- import { type InstanceInfo } from '../admin/instance/model';
3
- import { type AdminTargetCommandOpts, type ResolvedAdminTarget } from './admin-target';
4
- import { type InstanceStore } from './instance';
5
- export type InstanceTargetRequest = {
6
- source: 'active';
7
- } | {
8
- source: 'name';
9
- name: string;
10
- } | {
11
- source: 'admin';
12
- } | {
13
- source: 'url';
14
- url: string;
15
- name?: string;
16
- kernelIssuer?: string;
17
- };
18
- export type ResolvedInstanceTarget = {
19
- name?: string;
20
- source: 'bookmark' | 'managed' | 'admin' | 'url';
21
- url: string;
22
- kernelIssuer: string;
23
- domainIssuer?: string;
24
- defaultIdentity?: string;
25
- caFile?: string;
26
- };
27
- export type ResolveInstanceTargetOpts = {
28
- config: AstraleConfig;
29
- instances?: InstanceStore;
30
- admin?: AdminTargetCommandOpts;
31
- managed?: (slug: string) => Promise<InstanceInfo>;
32
- };
33
- export declare function resolveInstanceTarget(request: InstanceTargetRequest, opts: ResolveInstanceTargetOpts): Promise<ResolvedInstanceTarget>;
34
- export declare function couldBeConfiguredAdminInstance(identifier: string, config: AstraleConfig): boolean;
35
- export declare function adminTargetToInstance(target: ResolvedAdminTarget): ResolvedInstanceTarget;
36
- /** Admin lookup failed before it could say whether the slug exists. */
37
- export declare function isAdminDiscoveryFailure(error: unknown): boolean;
38
- export declare function isManagedInstanceNotFound(error: unknown): boolean;