@b3os/cli 0.0.0-stage → 0.0.1

package/LICENSE

@@ -0,0 +1,202 @@
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/README.md

@@ -1,3 +1,112 @@
-# Temporary Holding Version
+# @b3os/cli (B3OS CLI)
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+The B3OS command line, built on `@b3os/sdk`. Every command takes `--json` (machine-readable stdout), `--yes`
+(skip confirmations), `--quiet`, `--api-key`, `--base-url`, `--timeout MS` and `--help`. Without a terminal it never
+prompts: a destructive command without `--yes` exits 2.
+
+The npm package is `@b3os/cli`; its executable is `b3os`. Run it without a global installation:
+
+```sh
+npx --yes --package @b3os/cli b3os --help
+```
+
+For repeated use, install the package globally:
+
+```sh
+npm install --global @b3os/cli
+b3os login                         # device login; stores a CLI token
+b3os scrape https://example.com     # Markdown on stdout
+b3os screenshot https://example.com --out shot.png --frame browser-dark
+SBX=$(b3os sandbox create --template base)
+b3os sandbox exec "$SBX" -- python3 -c 'print(2 + 2)'
+b3os sandbox shell "$SBX"
+b3os sandbox rm "$SBX" --yes
+b3os mcp install --client claude
+```
+
+## Credentials
+
+`--api-key`, else `B3OS_API_KEY`, else the token from `b3os login` (`$XDG_CONFIG_HOME/b3os/credentials.json`, default
+`~/.config/b3os/`, mode 0600). `b3os whoami` shows which one is in use, its org, project and scopes, and where node
+operations go. Inside a B3OS sandbox node operations use `B3OS_API_URL`. On a node they use b3osd's Unix socket
+when `B3OS_SOCKET` is set, or when no key and no base URL are configured; over the socket the command acts as the
+principal your uid maps to, not as a key's (see the SDK README for the routing rules).
+
+`b3os login` runs the RFC 8628 device flow: it prints the dashboard URL and the code to confirm (and opens a browser
+when there is a terminal), then polls until you approve. The token is never printed. `--scope 'vision:run
+sandboxes:*'` asks for fewer scopes.
+
+## Commands
+
+| Command | What it does |
+|---|---|
+| `login`, `logout`, `whoami` | device login, remove the stored token, show the credential in use |
+| `keys list\|create\|get\|update\|revoke` | API keys (`create --name ci --scope vision:run,sandboxes:*` prints the secret once) |
+| `scrape <url>` | `vision.scrape`; `--format markdown\|html\|raw_html\|text\|links\|json`, `--all-content`, `--engine`, `--no-cache`, `--header K=V`, `--out` |
+| `screenshot <url>` | `render.createScreenshot`; saves the image (`--out`, `--format png\|webp\|jpeg`, `--width`/`--height`, `--dpr`, `--full-page`, `--selector`, `--background`, `--frame`, `--theme`, `--hide`, `--html FILE`) |
+| `video <script.json>` | `render.createVideo`; streams progress, saves the MP4 (`--kind mp4\|gif\|poster\|vtt`, `--no-wait`) |
+| `sandbox create` | `--template`, `--snapshot`, `--vcpu`, `--memory`, `--disk`, `--lifetime S`, `--on-idle`, `--env K=V`, `--port N[:public]`, `--grant SCOPES` |
+| `sandbox exec <id> -- <cmd…>` | streams stdout and stderr; exits 0 when the command exits 0, else 10 with the remote code on stderr (`--exit-code` passes the remote code through instead); `--json` prints the buffered result; `--stdin` sends local stdin; `--background` |
+| `sandbox shell <id>` | a terminal over the ticketed PTY WebSocket (raw mode, resize follows your window) |
+| `sandbox ls\|get\|logs\|url\|rm` | list, inspect, follow background logs, get a port URL, delete |
+| `routine deploy <file>` | publishes YAML or JSON by its `name` (`PUT /v1/routines/{name}` creates on first deploy) |
+| `routine run <routine>` | `--input JSON\|@file`; waits and prints the output; `--follow` streams step events; `--no-wait` prints the run id |
+| `routine logs <run_id>` | the run's steps, or `--follow` its events |
+| `action search\|describe\|run` | marketplace actions (`run io.b3os/github/create-issue@1 --input @issue.json`) |
+| `mcp install --client claude\|cursor\|codex` | adds the B3OS MCP server to the client (below) |
+| `mcp serve [--packs a,b]` | the stdio MCP server in this process |
+| `bench [ping\|scrape\|exec]` | a client-side latency probe from where you run it (below) |
+| `api <METHOD> <path>` | any operation, with `--data JSON\|@file`, `--query k=v`, `--header k=v`, `--edge`/`--node` |
+
+## Exit codes
+
+| Code | Meaning |
+|---|---|
+| 0 | success |
+| 1 | an error not listed here |
+| 2 | usage error, or a confirmation refused without `--yes` |
+| 3 | authentication or authorization (401, 403) |
+| 4 | not found (404) |
+| 5 | invalid request, conflict or state error (other 4xx, including 421 `edge_only`) |
+| 6 | rate limited, quota or credits (429, 402) |
+| 7 | server error or unavailable (5xx) |
+| 8 | timeout |
+| 9 | connection error |
+| 10 | a job or routine run failed, or a remote command (`sandbox exec`, `sandbox shell`) exited non-zero or was killed |
+| 130 | interrupted |
+
+`sandbox exec` and `sandbox shell` keep these codes: a remote exit code of 3 must not read as an auth error. Pass
+`--exit-code` to exit with the remote command's own code (as `ssh` does) when a script needs it. Errors go to stderr: one
+line plus validation items, or with `--json` a `{"error": {code, status, title, detail, type, request_id, errors}}`
+object.
+
+## MCP install
+
+`b3os mcp install --client claude|cursor|codex [--scope user|project] [--packs github,slack]` adds an entry that runs
+`npx -y @b3os/mcp`. The server reads `B3OS_API_KEY` or the `b3os login` token itself, so the client's config holds no
+secret. Claude Code is configured through `claude mcp add` (or `.mcp.json` with `--scope project` when the `claude`
+CLI is missing), Cursor through `~/.cursor/mcp.json` (or `.cursor/mcp.json`), Codex through
+`~/.codex/config.toml` (or `.codex/config.toml`; only the `[mcp_servers.b3os]` table is replaced). `--print` prints
+the entry instead of writing it. `--remote` points Claude or Cursor at the edge's `/mcp` endpoint with an
+`Authorization: Bearer` header that refers to `B3OS_API_KEY` (`${B3OS_API_KEY}` for Claude Code, `${env:B3OS_API_KEY}`
+for Cursor; the client expands it when it connects), so no key is written to a config file (project files such as
+`.mcp.json` are often committed), printed, or put on the `claude mcp add` command line. Start the client with
+`B3OS_API_KEY` in its environment. New user-scope config files are created mode 0600. The expansion is the
+clients' documented behavior; it has not been tried against a running Claude Code or Cursor here.
+
+## bench
+
+`b3os bench ping -n 30` (also `scrape --url URL`, `exec --sandbox sbx_…`) times sequential calls from your machine and
+prints client-side p50/p95/p99 next to the server's own `Server-Timing` total and phases, so the difference
+(network, TLS, edge, client) is visible. It is a closed-loop probe labeled `dev`, not the published harness
+(`bench/harness`, ARCHITECTURE §6). `--interval-ms` spaces calls to see idle-gap latency; `--json` includes every
+sample.
+
+## Development
+
+```sh
+pnpm --filter @b3os/cli typecheck
+pnpm --filter @b3os/cli test
+node --conditions=b3os-source packages/cli/src/main.ts --help   # run from source
+pnpm --filter @b3os/cli build                                        # dist/, used by bin/b3os.js
+```

package/bin/b3os.js

@@ -0,0 +1,6 @@
+#!/usr/bin/env node
+// `b3os` launcher for the built CLI. From a checkout without a build:
+//   node --conditions=b3os-source packages/cli/src/main.ts <args>
+import { run } from "../dist/main.js";
+
+process.exitCode = await run(process.argv.slice(2));

package/dist/commands/api.d.ts

@@ -0,0 +1,2 @@
+import { type Ctx } from "../ctx.ts";
+export declare function api(ctx: Ctx, argv: string[]): Promise<number>;

package/dist/commands/api.js

@@ -0,0 +1,48 @@
+// b3os api <METHOD> <path>: any operation, with the CLI's credentials and routing (for endpoints newer than the
+// CLI and for scripting). Prints the response body.
+import { readFileSync } from "node:fs";
+import { EXIT, jsonFlag, pairs, parse, UsageError } from "../ctx.js";
+const METHODS = ["GET", "POST", "PUT", "PATCH", "DELETE", "HEAD", "OPTIONS"];
+export async function api(ctx, argv) {
+    const a = parse(argv, {
+        data: { type: "string", short: "d" },
+        query: { type: "string", multiple: true },
+        header: { type: "string", multiple: true },
+        edge: { type: "boolean" },
+        node: { type: "boolean" },
+    });
+    ctx.applyGlobals(a.values);
+    const [m, path] = a.positionals;
+    if (!m || !path || a.values.help) {
+        ctx.out("usage: b3os api <METHOD> </v1/path> [--data JSON|@file] [--query k=v ...] [--header k=v ...] [--edge|--node]");
+        return m && path ? EXIT.OK : EXIT.USAGE;
+    }
+    const method = m.toUpperCase();
+    if (!METHODS.includes(method))
+        throw new UsageError(`unknown method ${m}`);
+    if (!path.startsWith("/"))
+        throw new UsageError("the path starts with /v1/ or /compat/");
+    const raw = typeof a.values.data === "string" ? a.values.data : undefined;
+    const body = raw === undefined ? undefined : jsonFlag(raw.startsWith("@") ? readFileSync(raw.slice(1), "utf8") : raw, "--data");
+    const edge = a.values.edge ? true : a.values.node ? false : undefined;
+    const res = await ctx
+        .client()
+        .request({
+        method: method,
+        path,
+        query: a.values.query ? pairs(a.values.query, "--query") : undefined,
+        headers: a.values.header ? pairs(a.values.header, "--header") : undefined,
+        body,
+        edge,
+    })
+        .withResponse();
+    if (typeof res.data === "string")
+        ctx.out(res.data);
+    else if (res.data instanceof Uint8Array)
+        ctx.io.stdout.write(res.data);
+    else if (res.data !== undefined)
+        ctx.printJson(res.data);
+    ctx.info(`${res.response.status} ${res.response.requestId ?? ""} ${res.response.timing.total_ms ?? "-"} ms`.trim());
+    return EXIT.OK;
+}
+//# sourceMappingURL=api.js.map

package/dist/commands/api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api.js","sourceRoot":"","sources":["../../src/commands/api.ts"],"names":[],"mappings":"AAAA,gHAAgH;AAChH,oDAAoD;AAEpD,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAEvC,OAAO,EAAY,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAE/E,MAAM,OAAO,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;AAE7E,MAAM,CAAC,KAAK,UAAU,GAAG,CAAC,GAAQ,EAAE,IAAc;IAChD,MAAM,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE;QACpB,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE;QACpC,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;QACzC,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;QAC1C,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;QACzB,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;KAC1B,CAAC,CAAC;IACH,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAC3B,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,CAAC;IAChC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QACjC,GAAG,CAAC,GAAG,CACL,8GAA8G,CAC/G,CAAC;QACF,OAAO,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC;IAC1C,CAAC;IACD,MAAM,MAAM,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;IAC/B,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,UAAU,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC;IAC3E,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,UAAU,CAAC,uCAAuC,CAAC,CAAC;IACzF,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IAC1E,MAAM,IAAI,GACR,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IACrH,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IACtE,MAAM,GAAG,GAAG,MAAM,GAAG;SAClB,MAAM,EAAE;SACR,OAAO,CAAC;QACP,MAAM,EAAE,MAAoB;QAC5B,IAAI;QACJ,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS;QACpE,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS;QACzE,IAAI;QACJ,IAAI;KACL,CAAC;SACD,YAAY,EAAE,CAAC;IAClB,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ;QAAE,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;SAC/C,IAAI,GAAG,CAAC,IAAI,YAAY,UAAU;QAAE,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;SAClE,IAAI,GAAG,CAAC,IAAI,KAAK,SAAS;QAAE,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACzD,GAAG,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,QAAQ,CAAC,MAAM,IAAI,GAAG,CAAC,QAAQ,CAAC,SAAS,IAAI,EAAE,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,IAAI,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IACpH,OAAO,IAAI,CAAC,EAAE,CAAC;AACjB,CAAC"}

package/dist/commands/auth.d.ts

@@ -0,0 +1,4 @@
+import { type Ctx } from "../ctx.ts";
+export declare function login(ctx: Ctx, argv: string[]): Promise<number>;
+export declare function logout(ctx: Ctx, argv: string[]): Promise<number>;
+export declare function whoami(ctx: Ctx, argv: string[]): Promise<number>;

package/dist/commands/auth.js

@@ -0,0 +1,141 @@
+// b3os login | logout | whoami. Login is the RFC 8628 device flow (platform.yaml platformCreateDeviceCode and
+// platformExchangeDeviceCode): show the code, the user approves it in the dashboard, the CLI polls for a
+// `b3os_pat_` token and stores it. It never asks anything on the terminal.
+import { spawn } from "node:child_process";
+import { B3OS, B3OSError, DEFAULT_BASE_URL } from "@b3os/sdk";
+import { credentialsPath, deleteCredentials, saveCredentials } from "../config.js";
+import { EXIT, parse } from "../ctx.js";
+function openBrowser(url) {
+    const cmd = process.platform === "darwin" ? "open" : process.platform === "win32" ? "cmd" : "xdg-open";
+    const args = process.platform === "win32" ? ["/c", "start", "", url] : [url];
+    try {
+        const p = spawn(cmd, args, { stdio: "ignore", detached: true });
+        p.on("error", () => { });
+        p.unref();
+    }
+    catch {
+        // No browser here; the printed URL is enough.
+    }
+}
+const sleep = (ms) => new Promise((r) => setTimeout(r, ms));
+export async function login(ctx, argv) {
+    const a = parse(argv, { "no-browser": { type: "boolean" }, scope: { type: "string" } });
+    ctx.applyGlobals(a.values);
+    if (a.values.help) {
+        ctx.out("usage: b3os login [--scope 'vision:run sandboxes:*'] [--no-browser] [--base-url URL]");
+        return EXIT.OK;
+    }
+    const baseUrl = ctx.baseUrl ?? process.env.B3OS_BASE_URL ?? DEFAULT_BASE_URL;
+    // Device login is public: no credential is sent, whatever the environment holds.
+    const anon = new B3OS({ apiKey: null, baseUrl, transport: "http", socketPath: false });
+    const scope = typeof a.values.scope === "string" ? a.values.scope : undefined;
+    const code = await anon.request({
+        method: "POST",
+        path: "/v1/auth/device/code",
+        body: scope ? { client_id: "b3os-cli", scope } : { client_id: "b3os-cli" },
+        bodyType: "form",
+        edge: true,
+        errorFormat: "oauth2",
+    });
+    if (ctx.json) {
+        ctx.printJsonLine({
+            verification_uri: code.verification_uri,
+            verification_uri_complete: code.verification_uri_complete,
+            user_code: code.user_code,
+            expires_in: code.expires_in,
+        });
+    }
+    else {
+        ctx.warn(`Open ${code.verification_uri_complete}`);
+        ctx.warn(`and check that it shows the code ${code.user_code}. Waiting for approval...`);
+    }
+    if (ctx.isTTY && !a.values["no-browser"])
+        openBrowser(code.verification_uri_complete);
+    // RFC 8628 §3.5: wait `interval` seconds between polls (5 when absent).
+    let interval = (typeof code.interval === "number" && code.interval >= 0 ? code.interval : 5) * 1000;
+    const deadline = Date.now() + code.expires_in * 1000;
+    for (;;) {
+        if (Date.now() > deadline)
+            throw new B3OSError({ code: "expired_token", detail: "The login code expired; run b3os login again" });
+        await sleep(interval);
+        try {
+            const tok = await anon.request({
+                method: "POST",
+                path: "/v1/auth/device/token",
+                body: {
+                    grant_type: "urn:ietf:params:oauth:grant-type:device_code",
+                    device_code: code.device_code,
+                    client_id: "b3os-cli",
+                },
+                bodyType: "form",
+                edge: true,
+                errorFormat: "oauth2",
+            }, { maxRetries: 0 });
+            const expires_at = tok.expires_in ? new Date(Date.now() + tok.expires_in * 1000).toISOString() : null;
+            const path = saveCredentials({
+                token: tok.access_token,
+                base_url: baseUrl,
+                org_id: tok.org_id,
+                project_id: tok.project_id,
+                scope: tok.scope,
+                expires_at,
+                created_at: new Date().toISOString(),
+            });
+            const summary = {
+                logged_in: true,
+                org_id: tok.org_id,
+                project_id: tok.project_id,
+                scope: tok.scope,
+                expires_at,
+                credentials: path,
+            };
+            ctx.result(summary, () => ctx.out(`Logged in: org ${tok.org_id}, project ${tok.project_id} (token saved in ${path})`));
+            return EXIT.OK;
+        }
+        catch (e) {
+            if (!(e instanceof B3OSError))
+                throw e;
+            if (e.code === "authorization_pending")
+                continue;
+            if (e.code === "slow_down") {
+                interval += 5000;
+                continue;
+            }
+            if (e.code === "rate_limited") {
+                interval = Math.max(interval, e.retryAfterMs ?? 10_000);
+                continue;
+            }
+            throw e;
+        }
+    }
+}
+export async function logout(ctx, argv) {
+    const a = parse(argv);
+    ctx.applyGlobals(a.values);
+    const removed = deleteCredentials();
+    ctx.result({ logged_out: removed, credentials: credentialsPath() }, () => ctx.out(removed ? `Removed ${credentialsPath()}` : "Not logged in"));
+    return EXIT.OK;
+}
+export async function whoami(ctx, argv) {
+    const a = parse(argv);
+    ctx.applyGlobals(a.values);
+    const c = ctx.credential();
+    const b3 = ctx.client();
+    const me = await b3.keys.getCurrentKey();
+    const info = { ...me, credential: c.source, routes: b3.routes };
+    ctx.result(info, () => {
+        ctx.out(`${me.kind} ${me.key_id ?? ""}`.trim());
+        if (me.user)
+            ctx.out(`user      ${JSON.stringify(me.user)}`);
+        ctx.out(`org       ${me.org_id}`);
+        ctx.out(`project   ${me.project_id}`);
+        ctx.out(`scopes    ${me.scopes.join(" ")}`);
+        if (me.spend_cap_usd !== null)
+            ctx.out(`spend cap $${me.spend_cap_usd}`);
+        if (me.expires_at)
+            ctx.out(`expires   ${me.expires_at}`);
+        ctx.out(`via       ${c.source}; node operations go to ${b3.routes.node}`);
+    });
+    return EXIT.OK;
+}
+//# sourceMappingURL=auth.js.map

package/dist/commands/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../src/commands/auth.ts"],"names":[],"mappings":"AAAA,8GAA8G;AAC9G,yGAAyG;AACzG,2EAA2E;AAE3E,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAC9D,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AACnF,OAAO,EAAY,IAAI,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAoBlD,SAAS,WAAW,CAAC,GAAW;IAC9B,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC;IACvG,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAC7E,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QAChE,CAAC,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACxB,CAAC,CAAC,KAAK,EAAE,CAAC;IACZ,CAAC;IAAC,MAAM,CAAC;QACP,8CAA8C;IAChD,CAAC;AACH,CAAC;AAED,MAAM,KAAK,GAAG,CAAC,EAAU,EAAE,EAAE,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;AAEpE,MAAM,CAAC,KAAK,UAAU,KAAK,CAAC,GAAQ,EAAE,IAAc;IAClD,MAAM,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;IACxF,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAC3B,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QAClB,GAAG,CAAC,GAAG,CAAC,sFAAsF,CAAC,CAAC;QAChG,OAAO,IAAI,CAAC,EAAE,CAAC;IACjB,CAAC;IACD,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,gBAAgB,CAAC;IAC7E,iFAAiF;IACjF,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC;IACvF,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IAC9E,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAa;QAC1C,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,sBAAsB;QAC5B,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,UAAU,EAAE;QAC1E,QAAQ,EAAE,MAAM;QAChB,IAAI,EAAE,IAAI;QACV,WAAW,EAAE,QAAQ;KACtB,CAAC,CAAC;IACH,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;QACb,GAAG,CAAC,aAAa,CAAC;YAChB,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;YACvC,yBAAyB,EAAE,IAAI,CAAC,yBAAyB;YACzD,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,GAAG,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,yBAAyB,EAAE,CAAC,CAAC;QACnD,GAAG,CAAC,IAAI,CAAC,oCAAoC,IAAI,CAAC,SAAS,2BAA2B,CAAC,CAAC;IAC1F,CAAC;IACD,IAAI,GAAG,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC;QAAE,WAAW,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;IACtF,wEAAwE;IACxE,IAAI,QAAQ,GAAG,CAAC,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,IAAI,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC;IACpG,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;IACrD,SAAS,CAAC;QACR,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ;YACvB,MAAM,IAAI,SAAS,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,8CAA8C,EAAE,CAAC,CAAC;QACzG,MAAM,KAAK,CAAC,QAAQ,CAAC,CAAC;QACtB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAC5B;gBACE,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,uBAAuB;gBAC7B,IAAI,EAAE;oBACJ,UAAU,EAAE,8CAA8C;oBAC1D,WAAW,EAAE,IAAI,CAAC,WAAW;oBAC7B,SAAS,EAAE,UAAU;iBACtB;gBACD,QAAQ,EAAE,MAAM;gBAChB,IAAI,EAAE,IAAI;gBACV,WAAW,EAAE,QAAQ;aACtB,EACD,EAAE,UAAU,EAAE,CAAC,EAAE,CAClB,CAAC;YACF,MAAM,UAAU,GAAG,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;YACtG,MAAM,IAAI,GAAG,eAAe,CAAC;gBAC3B,KAAK,EAAE,GAAG,CAAC,YAAY;gBACvB,QAAQ,EAAE,OAAO;gBACjB,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,UAAU,EAAE,GAAG,CAAC,UAAU;gBAC1B,KAAK,EAAE,GAAG,CAAC,KAAK;gBAChB,UAAU;gBACV,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACrC,CAAC,CAAC;YACH,MAAM,OAAO,GAAG;gBACd,SAAS,EAAE,IAAI;gBACf,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,UAAU,EAAE,GAAG,CAAC,UAAU;gBAC1B,KAAK,EAAE,GAAG,CAAC,KAAK;gBAChB,UAAU;gBACV,WAAW,EAAE,IAAI;aAClB,CAAC;YACF,GAAG,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,EAAE,CACvB,GAAG,CAAC,GAAG,CAAC,kBAAkB,GAAG,CAAC,MAAM,aAAa,GAAG,CAAC,UAAU,oBAAoB,IAAI,GAAG,CAAC,CAC5F,CAAC;YACF,OAAO,IAAI,CAAC,EAAE,CAAC;QACjB,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,CAAC,CAAC,CAAC,YAAY,SAAS,CAAC;gBAAE,MAAM,CAAC,CAAC;YACvC,IAAI,CAAC,CAAC,IAAI,KAAK,uBAAuB;gBAAE,SAAS;YACjD,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;gBAC3B,QAAQ,IAAI,IAAI,CAAC;gBACjB,SAAS;YACX,CAAC;YACD,IAAI,CAAC,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;gBAC9B,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,YAAY,IAAI,MAAM,CAAC,CAAC;gBACxD,SAAS;YACX,CAAC;YACD,MAAM,CAAC,CAAC;QACV,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,GAAQ,EAAE,IAAc;IACnD,MAAM,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;IACtB,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAC3B,MAAM,OAAO,GAAG,iBAAiB,EAAE,CAAC;IACpC,GAAG,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,EAAE,EAAE,GAAG,EAAE,CACvE,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,eAAe,EAAE,EAAE,CAAC,CAAC,CAAC,eAAe,CAAC,CACpE,CAAC;IACF,OAAO,IAAI,CAAC,EAAE,CAAC;AACjB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,GAAQ,EAAE,IAAc;IACnD,MAAM,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;IACtB,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAC3B,MAAM,CAAC,GAAG,GAAG,CAAC,UAAU,EAAE,CAAC;IAC3B,MAAM,EAAE,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC;IACxB,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;IACzC,MAAM,IAAI,GAAG,EAAE,GAAG,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC;IAChE,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE;QACpB,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;QAChD,IAAI,EAAE,CAAC,IAAI;YAAE,GAAG,CAAC,GAAG,CAAC,aAAa,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC7D,GAAG,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC;QAClC,GAAG,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC,UAAU,EAAE,CAAC,CAAC;QACtC,GAAG,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC5C,IAAI,EAAE,CAAC,aAAa,KAAK,IAAI;YAAE,GAAG,CAAC,GAAG,CAAC,cAAc,EAAE,CAAC,aAAa,EAAE,CAAC,CAAC;QACzE,IAAI,EAAE,CAAC,UAAU;YAAE,GAAG,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC,UAAU,EAAE,CAAC,CAAC;QACzD,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,MAAM,2BAA2B,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IAC5E,CAAC,CAAC,CAAC;IACH,OAAO,IAAI,CAAC,EAAE,CAAC;AACjB,CAAC"}

package/dist/commands/bench.d.ts

@@ -0,0 +1,12 @@
+import { type Ctx } from "../ctx.ts";
+export declare function percentile(sorted: number[], p: number): number | null;
+export declare function summarize(values: number[]): {
+    n: number;
+    min: number | null;
+    p50: number | null;
+    p95: number | null;
+    p99: number | null;
+    max: number | null;
+    mean: number | null;
+};
+export declare function bench(ctx: Ctx, argv: string[]): Promise<number>;