@boardwalk-labs/cli 0.1.0

package/dist/client.js

@@ -0,0 +1,193 @@
+// BoardwalkClient — a small hand-rolled REST client over Boardwalk's public platform API
+// (deliberately no codegen client framework).
+//
+// Targets the workflow endpoints the deploy flow needs:
+//   GET  /v1/orgs/:slug/workflows                       — list (resolve create-vs-update by name)
+//   POST /v1/orgs/:slug/workflows/artifact-upload-url   — presign an upload for the program artifact
+//   POST /v1/orgs/:slug/workflows                       — create (body: { artifact })
+//   PATCH /v1/workflows/:id                             — update → new version (body: { artifact })
+//   POST /v1/runs/:id/cancel                            — cancel a queued or in-flight run (204)
+//
+// Deploy is artifact-based: the CLI builds a content-addressed program tarball, uploads it straight
+// to object storage via a presigned PUT (the CLI holds no storage credentials), then finalizes the
+// version with a reference the server re-reads + verifies.
+//
+// Auth is a Bearer token (a session token from `boardwalk login`, OR a `bwk_…` API key).
+// The API accepts both on the same header.
+import { randomUUID } from "node:crypto";
+import { CliError } from "./errors.js";
+const UNSAFE_METHODS = new Set(["POST", "PUT", "PATCH", "DELETE"]);
+export class BoardwalkClient {
+    baseUrl;
+    token;
+    fetchImpl;
+    constructor(opts) {
+        this.baseUrl = opts.baseUrl.replace(/\/+$/, "");
+        this.token = opts.token;
+        this.fetchImpl = opts.fetchImpl ?? fetch;
+    }
+    async listWorkflows(orgSlug) {
+        const body = await this.request("GET", `/v1/orgs/${encodeURIComponent(orgSlug)}/workflows`);
+        const rows = Array.isArray(body.workflows) ? body.workflows : [];
+        return rows.filter(isWorkflowSummary);
+    }
+    async createWorkflow(orgSlug, artifact) {
+        return this.deployResult(await this.request("POST", `/v1/orgs/${encodeURIComponent(orgSlug)}/workflows`, {
+            artifact,
+        }));
+    }
+    async updateWorkflow(id, artifact) {
+        return this.deployResult(await this.request("PATCH", `/v1/workflows/${encodeURIComponent(id)}`, { artifact }));
+    }
+    /** Request a presigned PUT for a program artifact (the CLI then uploads the tarball directly). */
+    async getArtifactUploadUrl(orgSlug, input) {
+        const body = await this.request("POST", `/v1/orgs/${encodeURIComponent(orgSlug)}/workflows/artifact-upload-url`, input);
+        if (typeof body.uploadUrl !== "string" || typeof body.contentType !== "string") {
+            throw new CliError("The API returned an unexpected upload-url response shape.");
+        }
+        return { uploadUrl: body.uploadUrl, contentType: body.contentType };
+    }
+    /** Upload the artifact bytes straight to storage via the presigned PUT. The Content-Type MUST
+     *  equal the one signed into the URL, or the store rejects the PUT. No auth header — the URL
+     *  carries the signature. */
+    async uploadArtifact(uploadUrl, contentType, bytes) {
+        let res;
+        try {
+            res = await this.fetchImpl(uploadUrl, {
+                method: "PUT",
+                headers: { "Content-Type": contentType },
+                body: bytes,
+            });
+        }
+        catch (err) {
+            throw new CliError("Could not upload the program artifact to storage.", err instanceof Error ? err.message : undefined);
+        }
+        if (!res.ok) {
+            throw new CliError(`Artifact upload failed (${String(res.status)}).`, await safeText(res));
+        }
+    }
+    async triggerRun(orgSlug, workflowId, input) {
+        const path = `/v1/orgs/${encodeURIComponent(orgSlug)}/workflows/${encodeURIComponent(workflowId)}/runs`;
+        return this.runSummary(await this.request("POST", path, input === undefined ? {} : { input }));
+    }
+    async getRun(runId) {
+        return this.runSummary(await this.request("GET", `/v1/runs/${encodeURIComponent(runId)}`));
+    }
+    /**
+     * Cancel a run. Idempotent server-side (a terminal/already-cancelling run is a no-op); the
+     * endpoint resolves the org from the run id, so no org slug is needed. Returns 204 No Content.
+     */
+    async cancelRun(runId) {
+        await this.request("POST", `/v1/runs/${encodeURIComponent(runId)}/cancel`);
+    }
+    async request(method, path, body) {
+        const headers = {
+            Authorization: `Bearer ${this.token}`,
+            Accept: "application/json",
+        };
+        if (body !== undefined)
+            headers["Content-Type"] = "application/json";
+        if (UNSAFE_METHODS.has(method))
+            headers["Idempotency-Key"] = randomUUID();
+        const init = { method, headers };
+        if (body !== undefined)
+            init.body = JSON.stringify(body);
+        let res;
+        try {
+            res = await this.fetchImpl(`${this.baseUrl}${path}`, init);
+        }
+        catch (err) {
+            throw new CliError(`Could not reach the Boardwalk API at ${this.baseUrl}.`, err instanceof Error ? err.message : undefined);
+        }
+        const text = await res.text();
+        if (!res.ok) {
+            throw new CliError(`${method} ${path} failed (${String(res.status)}).`, apiErrorMessage(text, res.status), res.status);
+        }
+        if (text.length === 0)
+            return undefined;
+        try {
+            return JSON.parse(text);
+        }
+        catch {
+            throw new CliError(`The API returned a non-JSON response for ${method} ${path}.`);
+        }
+    }
+    deployResult(body) {
+        if (typeof body === "object" && body !== null) {
+            const b = body;
+            if (isWorkflowSummary(b.workflow) && isVersion(b.version)) {
+                return { workflow: b.workflow, version: b.version };
+            }
+        }
+        throw new CliError("The API returned an unexpected workflow response shape.");
+    }
+    runSummary(body) {
+        if (typeof body === "object" && body !== null) {
+            const run = body.run;
+            if (isRunSummary(run))
+                return run;
+        }
+        throw new CliError("The API returned an unexpected run response shape.");
+    }
+}
+function isWorkflowSummary(value) {
+    if (typeof value !== "object" || value === null)
+        return false;
+    const v = value;
+    return (typeof v.id === "string" &&
+        typeof v.name === "string" &&
+        (v.currentVersionId === null || typeof v.currentVersionId === "string"));
+}
+function isVersion(value) {
+    if (typeof value !== "object" || value === null)
+        return false;
+    const v = value;
+    return typeof v.id === "string" && typeof v.number === "number";
+}
+function isRunSummary(value) {
+    if (typeof value !== "object" || value === null)
+        return false;
+    const v = value;
+    return (typeof v.id === "string" &&
+        typeof v.workflowId === "string" &&
+        typeof v.status === "string" &&
+        (v.outcomeStatus === null || typeof v.outcomeStatus === "string") &&
+        (v.startedAt === null || typeof v.startedAt === "number") &&
+        (v.completedAt === null || typeof v.completedAt === "number"));
+}
+/** Best-effort read of a response body for an error message (never throws). */
+async function safeText(res) {
+    try {
+        const t = await res.text();
+        return t.length > 0 ? t.slice(0, 300) : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+/** Pull a human message out of the API's `{ error: { code, message } }` (or plain text) body. */
+function apiErrorMessage(text, status) {
+    if (status === 401)
+        return "Unauthorized — run `boardwalk login`, or set BOARDWALK_API_KEY.";
+    if (status === 403)
+        return "Forbidden — your account lacks permission for this org.";
+    try {
+        const body = JSON.parse(text);
+        if (typeof body === "object" && body !== null) {
+            const err = body.error;
+            if (typeof err === "object" && err !== null) {
+                const message = err.message;
+                if (typeof message === "string" && message.length > 0)
+                    return message;
+            }
+            const topMessage = body.message;
+            if (typeof topMessage === "string" && topMessage.length > 0)
+                return topMessage;
+        }
+    }
+    catch {
+        // not JSON
+    }
+    return text.length > 0 ? text.slice(0, 300) : "(no response body)";
+}
+//# sourceMappingURL=client.js.map

package/dist/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA,yFAAyF;AACzF,8CAA8C;AAC9C,EAAE;AACF,wDAAwD;AACxD,kGAAkG;AAClG,qGAAqG;AACrG,sFAAsF;AACtF,oGAAoG;AACpG,iGAAiG;AACjG,EAAE;AACF,oGAAoG;AACpG,mGAAmG;AACnG,2DAA2D;AAC3D,EAAE;AACF,yFAAyF;AACzF,2CAA2C;AAE3C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAsCvC,MAAM,cAAc,GAAwB,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;AAExF,MAAM,OAAO,eAAe;IACT,OAAO,CAAS;IAChB,KAAK,CAAS;IACd,SAAS,CAAY;IAEtC,YAAY,IAA4B;QACtC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAChD,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QACxB,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC;IAC3C,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,OAAe;QACjC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAC7B,KAAK,EACL,YAAY,kBAAkB,CAAC,OAAO,CAAC,YAAY,CACpD,CAAC;QACF,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;QACjE,OAAO,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;IACxC,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,OAAe,EAAE,QAA2B;QAC/D,OAAO,IAAI,CAAC,YAAY,CACtB,MAAM,IAAI,CAAC,OAAO,CAAU,MAAM,EAAE,YAAY,kBAAkB,CAAC,OAAO,CAAC,YAAY,EAAE;YACvF,QAAQ;SACT,CAAC,CACH,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,EAAU,EAAE,QAA2B;QAC1D,OAAO,IAAI,CAAC,YAAY,CACtB,MAAM,IAAI,CAAC,OAAO,CAAU,OAAO,EAAE,iBAAiB,kBAAkB,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,CAC9F,CAAC;IACJ,CAAC;IAED,kGAAkG;IAClG,KAAK,CAAC,oBAAoB,CACxB,OAAe,EACf,KAAuC;QAEvC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAC7B,MAAM,EACN,YAAY,kBAAkB,CAAC,OAAO,CAAC,gCAAgC,EACvE,KAAK,CACN,CAAC;QACF,IAAI,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ,IAAI,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ,EAAE,CAAC;YAC/E,MAAM,IAAI,QAAQ,CAAC,2DAA2D,CAAC,CAAC;QAClF,CAAC;QACD,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC;IACtE,CAAC;IAED;;iCAE6B;IAC7B,KAAK,CAAC,cAAc,CAAC,SAAiB,EAAE,WAAmB,EAAE,KAAiB;QAC5E,IAAI,GAAa,CAAC;QAClB,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE;gBACpC,MAAM,EAAE,KAAK;gBACb,OAAO,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE;gBACxC,IAAI,EAAE,KAAK;aACZ,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,QAAQ,CAChB,mDAAmD,EACnD,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAC/C,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,QAAQ,CAAC,2BAA2B,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;QAC7F,CAAC;IACH,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,OAAe,EAAE,UAAkB,EAAE,KAAc;QAClE,MAAM,IAAI,GAAG,YAAY,kBAAkB,CAAC,OAAO,CAAC,cAAc,kBAAkB,CAAC,UAAU,CAAC,OAAO,CAAC;QACxG,OAAO,IAAI,CAAC,UAAU,CACpB,MAAM,IAAI,CAAC,OAAO,CAAU,MAAM,EAAE,IAAI,EAAE,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAChF,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAAa;QACxB,OAAO,IAAI,CAAC,UAAU,CACpB,MAAM,IAAI,CAAC,OAAO,CAAU,KAAK,EAAE,YAAY,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC,CAC5E,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,SAAS,CAAC,KAAa;QAC3B,MAAM,IAAI,CAAC,OAAO,CAAY,MAAM,EAAE,YAAY,kBAAkB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACxF,CAAC;IAEO,KAAK,CAAC,OAAO,CAAI,MAAc,EAAE,IAAY,EAAE,IAAc;QACnE,MAAM,OAAO,GAA2B;YACtC,aAAa,EAAE,UAAU,IAAI,CAAC,KAAK,EAAE;YACrC,MAAM,EAAE,kBAAkB;SAC3B,CAAC;QACF,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;QACrE,IAAI,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC;YAAE,OAAO,CAAC,iBAAiB,CAAC,GAAG,UAAU,EAAE,CAAC;QAE1E,MAAM,IAAI,GAAgB,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;QAC9C,IAAI,IAAI,KAAK,SAAS;YAAE,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAEzD,IAAI,GAAa,CAAC;QAClB,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,OAAO,GAAG,IAAI,EAAE,EAAE,IAAI,CAAC,CAAC;QAC7D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,QAAQ,CAChB,wCAAwC,IAAI,CAAC,OAAO,GAAG,EACvD,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAC/C,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC9B,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,QAAQ,CAChB,GAAG,MAAM,IAAI,IAAI,YAAY,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EACnD,eAAe,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,EACjC,GAAG,CAAC,MAAM,CACX,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,SAAc,CAAC;QAC7C,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAM,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,QAAQ,CAAC,4CAA4C,MAAM,IAAI,IAAI,GAAG,CAAC,CAAC;QACpF,CAAC;IACH,CAAC;IAEO,YAAY,CAAC,IAAa;QAChC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAC9C,MAAM,CAAC,GAAG,IAAiD,CAAC;YAC5D,IAAI,iBAAiB,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC1D,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;YACtD,CAAC;QACH,CAAC;QACD,MAAM,IAAI,QAAQ,CAAC,yDAAyD,CAAC,CAAC;IAChF,CAAC;IAEO,UAAU,CAAC,IAAa;QAC9B,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAC9C,MAAM,GAAG,GAAI,IAA0B,CAAC,GAAG,CAAC;YAC5C,IAAI,YAAY,CAAC,GAAG,CAAC;gBAAE,OAAO,GAAG,CAAC;QACpC,CAAC;QACD,MAAM,IAAI,QAAQ,CAAC,oDAAoD,CAAC,CAAC;IAC3E,CAAC;CACF;AAED,SAAS,iBAAiB,CAAC,KAAc;IACvC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAC9D,MAAM,CAAC,GAAG,KAAgC,CAAC;IAC3C,OAAO,CACL,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ;QACxB,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ;QAC1B,CAAC,CAAC,CAAC,gBAAgB,KAAK,IAAI,IAAI,OAAO,CAAC,CAAC,gBAAgB,KAAK,QAAQ,CAAC,CACxE,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,KAAc;IAC/B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAC9D,MAAM,CAAC,GAAG,KAAgC,CAAC;IAC3C,OAAO,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC;AAClE,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAC9D,MAAM,CAAC,GAAG,KAAgC,CAAC;IAC3C,OAAO,CACL,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ;QACxB,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ;QAChC,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ;QAC5B,CAAC,CAAC,CAAC,aAAa,KAAK,IAAI,IAAI,OAAO,CAAC,CAAC,aAAa,KAAK,QAAQ,CAAC;QACjE,CAAC,CAAC,CAAC,SAAS,KAAK,IAAI,IAAI,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,CAAC;QACzD,CAAC,CAAC,CAAC,WAAW,KAAK,IAAI,IAAI,OAAO,CAAC,CAAC,WAAW,KAAK,QAAQ,CAAC,CAC9D,CAAC;AACJ,CAAC;AAED,+EAA+E;AAC/E,KAAK,UAAU,QAAQ,CAAC,GAAa;IACnC,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC3B,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACpD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,iGAAiG;AACjG,SAAS,eAAe,CAAC,IAAY,EAAE,MAAc;IACnD,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,iEAAiE,CAAC;IAC7F,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,yDAAyD,CAAC;IACrF,IAAI,CAAC;QACH,MAAM,IAAI,GAAY,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACvC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAC9C,MAAM,GAAG,GAAI,IAA4B,CAAC,KAAK,CAAC;YAChD,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;gBAC5C,MAAM,OAAO,GAAI,GAA6B,CAAC,OAAO,CAAC;gBACvD,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;oBAAE,OAAO,OAAO,CAAC;YACxE,CAAC;YACD,MAAM,UAAU,GAAI,IAA8B,CAAC,OAAO,CAAC;YAC3D,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC;gBAAE,OAAO,UAAU,CAAC;QACjF,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,WAAW;IACb,CAAC;IACD,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,oBAAoB,CAAC;AACrE,CAAC"}

package/dist/commands/cancel.d.ts

@@ -0,0 +1,14 @@
+import type { CliConfig } from "../config.js";
+import type { FetchLike } from "../auth/pkce.js";
+export interface CancelOptions {
+    runId: string;
+    token?: string | undefined;
+}
+export interface CancelDeps {
+    config: CliConfig;
+    fetchImpl?: FetchLike;
+    log?: (line: string) => void;
+}
+export declare function runCancel(opts: CancelOptions, deps: CancelDeps): Promise<void>;
+/** Human-readable line describing a run's status right after a cancel request. */
+export declare function cancelMessage(status: string, runId: string): string;

package/dist/commands/cancel.js

@@ -0,0 +1,53 @@
+// `boardwalk cancel <runId>` — stop a queued or in-flight run.
+//
+// Thin front-end over POST /v1/runs/:id/cancel (idempotent server-side). The endpoint resolves the
+// org from the run id, so no --org / project link is needed — just a run id + a token. After the
+// cancel we read the run back to report what actually happened, since cancellation is async:
+//   • `cancelling` — a running worker is being signalled; it will finalize as `cancelled`.
+//   • `cancelled`  — a queued/sleeping run flipped straight to terminal.
+//   • already terminal (`completed`/`failed`) — the cancel was a harmless no-op.
+import { CliError } from "../errors.js";
+import { CredentialStore } from "../credentials.js";
+import { resolveToken } from "../auth/resolve.js";
+import { BoardwalkClient } from "../client.js";
+export async function runCancel(opts, deps) {
+    const log = deps.log ??
+        ((line) => {
+            console.log(line);
+        });
+    const runId = opts.runId.trim();
+    if (runId.length === 0) {
+        throw new CliError("A run id is required.", "Usage: boardwalk cancel <runId>");
+    }
+    const store = CredentialStore.atConfigDir(deps.config.configDir);
+    const token = await resolveToken({
+        config: deps.config,
+        store,
+        tokenFlag: opts.token,
+        ...(deps.fetchImpl !== undefined ? { fetchImpl: deps.fetchImpl } : {}),
+    });
+    const client = new BoardwalkClient({
+        baseUrl: deps.config.apiBaseUrl,
+        token,
+        ...(deps.fetchImpl !== undefined ? { fetchImpl: deps.fetchImpl } : {}),
+    });
+    await client.cancelRun(runId);
+    // Read the run back so we can report the resulting status (cancel is async + idempotent).
+    const run = await client.getRun(runId);
+    log(cancelMessage(run.status, runId));
+}
+/** Human-readable line describing a run's status right after a cancel request. */
+export function cancelMessage(status, runId) {
+    switch (status) {
+        case "cancelled":
+            return `✓ run ${runId} cancelled.`;
+        case "cancelling":
+            return `… run ${runId} is cancelling — the worker is being stopped; it will finalize as cancelled.`;
+        case "completed":
+        case "failed":
+            return `• run ${runId} already finished (${status}) — nothing to cancel.`;
+        default:
+            return `… cancel requested for run ${runId} (status: ${status}).`;
+    }
+}
+//# sourceMappingURL=cancel.js.map

package/dist/commands/cancel.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cancel.js","sourceRoot":"","sources":["../../src/commands/cancel.ts"],"names":[],"mappings":"AAAA,+DAA+D;AAC/D,EAAE;AACF,mGAAmG;AACnG,iGAAiG;AACjG,6FAA6F;AAC7F,2FAA2F;AAC3F,yEAAyE;AACzE,iFAAiF;AAEjF,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAExC,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAc/C,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,IAAmB,EAAE,IAAgB;IACnE,MAAM,GAAG,GACP,IAAI,CAAC,GAAG;QACR,CAAC,CAAC,IAAY,EAAQ,EAAE;YACtB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACpB,CAAC,CAAC,CAAC;IAEL,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;IAChC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,QAAQ,CAAC,uBAAuB,EAAE,iCAAiC,CAAC,CAAC;IACjF,CAAC;IAED,MAAM,KAAK,GAAG,eAAe,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACjE,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC;QAC/B,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,KAAK;QACL,SAAS,EAAE,IAAI,CAAC,KAAK;QACrB,GAAG,CAAC,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACvE,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;QACjC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU;QAC/B,KAAK;QACL,GAAG,CAAC,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACvE,CAAC,CAAC;IAEH,MAAM,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAE9B,0FAA0F;IAC1F,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvC,GAAG,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;AACxC,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,aAAa,CAAC,MAAc,EAAE,KAAa;IACzD,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,WAAW;YACd,OAAO,SAAS,KAAK,aAAa,CAAC;QACrC,KAAK,YAAY;YACf,OAAO,SAAS,KAAK,8EAA8E,CAAC;QACtG,KAAK,WAAW,CAAC;QACjB,KAAK,QAAQ;YACX,OAAO,SAAS,KAAK,sBAAsB,MAAM,wBAAwB,CAAC;QAC5E;YACE,OAAO,8BAA8B,KAAK,aAAa,MAAM,IAAI,CAAC;IACtE,CAAC;AACH,CAAC"}

package/dist/commands/check.d.ts

@@ -0,0 +1,7 @@
+export interface CheckOptions {
+    file: string;
+}
+export interface CheckDeps {
+    log?: (line: string) => void;
+}
+export declare function runCheck(opts: CheckOptions, deps?: CheckDeps): Promise<void>;

package/dist/commands/check.js

@@ -0,0 +1,34 @@
+// `boardwalk check <file|dir>` — validate a workflow locally (no auth, no network).
+//
+// A fast pre-flight, all local:
+//   1. extract the pure-literal `meta` and validate it against the FULL manifest schema — the
+//      same schema every engine enforces, so a green `check` means the manifest is the contract;
+//   2. esbuild-bundle the program (proves it compiles, has no syntax errors, and that every
+//      non-SDK import resolves).
+// Anything wrong throws a precise CliError before any deploy or run.
+import { readFileSync } from "node:fs";
+import { buildArtifact } from "../artifact.js";
+import { resolveEntry } from "../bundle.js";
+import { extractValidatedManifest } from "../manifest.js";
+export async function runCheck(opts, deps = {}) {
+    const log = deps.log ??
+        ((line) => {
+            console.log(line);
+        });
+    // Validate the manifest from the author's ORIGINAL entry source (errors point at real lines).
+    const entry = resolveEntry(opts.file);
+    const manifest = extractValidatedManifest(readFileSync(entry, "utf8"), entry);
+    // Build the artifact (esbuild bundle + assets) — proves the program compiles end-to-end.
+    const artifact = await buildArtifact(opts.file);
+    const assets = artifact.assetPaths.length;
+    log(`✓ "${manifest.name}" is valid`);
+    log(`  entry:    ${artifact.entry}`);
+    log(`  triggers: ${manifest.triggers.map((t) => t.kind).join(", ")}`);
+    if (manifest.secrets !== undefined && manifest.secrets.length > 0) {
+        log(`  secrets:  ${manifest.secrets.map((s) => s.name).join(", ")}`);
+    }
+    log(`  artifact: ${String(artifact.size)} bytes (sha256 ${artifact.digest.slice(0, 12)}…)`);
+    if (assets > 0)
+        log(`  assets:   ${artifact.assetPaths.join(", ")}`);
+}
+//# sourceMappingURL=check.js.map

package/dist/commands/check.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"check.js","sourceRoot":"","sources":["../../src/commands/check.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,EAAE;AACF,gCAAgC;AAChC,8FAA8F;AAC9F,iGAAiG;AACjG,4FAA4F;AAC5F,iCAAiC;AACjC,qEAAqE;AAErE,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,wBAAwB,EAAE,MAAM,gBAAgB,CAAC;AAU1D,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,IAAkB,EAAE,OAAkB,EAAE;IACrE,MAAM,GAAG,GACP,IAAI,CAAC,GAAG;QACR,CAAC,CAAC,IAAY,EAAQ,EAAE;YACtB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACpB,CAAC,CAAC,CAAC;IAEL,8FAA8F;IAC9F,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtC,MAAM,QAAQ,GAAG,wBAAwB,CAAC,YAAY,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,KAAK,CAAC,CAAC;IAE9E,yFAAyF;IACzF,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChD,MAAM,MAAM,GAAG,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC;IAE1C,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,YAAY,CAAC,CAAC;IACrC,GAAG,CAAC,eAAe,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC;IACrC,GAAG,CAAC,eAAe,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACtE,IAAI,QAAQ,CAAC,OAAO,KAAK,SAAS,IAAI,QAAQ,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClE,GAAG,CAAC,eAAe,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACvE,CAAC;IACD,GAAG,CAAC,eAAe,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,kBAAkB,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;IAC5F,IAAI,MAAM,GAAG,CAAC;QAAE,GAAG,CAAC,eAAe,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACvE,CAAC"}

package/dist/commands/deploy.d.ts

@@ -0,0 +1,15 @@
+import type { CliConfig } from "../config.js";
+import type { FetchLike } from "../auth/pkce.js";
+export interface DeployOptions {
+    file: string;
+    org?: string | undefined;
+    check: boolean;
+    /** Force esbuild bundling even for a single file (auto-on for a package directory). */
+    token?: string | undefined;
+}
+export interface DeployDeps {
+    config: CliConfig;
+    fetchImpl?: FetchLike;
+    log?: (line: string) => void;
+}
+export declare function runDeploy(opts: DeployOptions, deps: DeployDeps): Promise<void>;

package/dist/commands/deploy.js

@@ -0,0 +1,56 @@
+// `boardwalk deploy <file|dir> [--org <slug>]` — ship a workflow program.
+//
+// Thin front-end over the REST create/update (which derives the manifest + reconciles triggers
+// server-side). Identity is the project link (.boardwalk/project.json): once linked, --org is
+// optional and the workflow is updated by id (rename-safe). `--dry-run` prints the plan only.
+import { CredentialStore } from "../credentials.js";
+import { resolveToken } from "../auth/resolve.js";
+import { BoardwalkClient } from "../client.js";
+import { deployWithLink, loadProgram, planDeploy } from "../deployment.js";
+import { projectDirFor, readLink } from "../project.js";
+export async function runDeploy(opts, deps) {
+    const log = deps.log ??
+        ((line) => {
+            console.log(line);
+        });
+    const prog = await loadProgram(opts.file);
+    const assets = prog.artifact.assetPaths.length;
+    log(`  built ${prog.entry} (${String(prog.artifact.size)} bytes${assets > 0 ? `, ${String(assets)} asset${assets === 1 ? "" : "s"}` : ""})`);
+    const store = CredentialStore.atConfigDir(deps.config.configDir);
+    const token = await resolveToken({
+        config: deps.config,
+        store,
+        tokenFlag: opts.token,
+        ...(deps.fetchImpl !== undefined ? { fetchImpl: deps.fetchImpl } : {}),
+    });
+    const client = new BoardwalkClient({
+        baseUrl: deps.config.apiBaseUrl,
+        token,
+        ...(deps.fetchImpl !== undefined ? { fetchImpl: deps.fetchImpl } : {}),
+    });
+    if (opts.check) {
+        await printPlan(client, opts, prog, log);
+        return;
+    }
+    const dep = await deployWithLink(client, { orgSlug: opts.org, target: opts.file, prog });
+    if (dep.gitignoreUpdated)
+        log("  linked → .boardwalk/project.json (added .boardwalk/ to .gitignore)");
+    log(`✓ ${dep.outcome} "${prog.name}" version ${String(dep.versionNumber)} (${dep.workflowId})`);
+}
+/** Read-only preview of what `deploy` would do (no writes). */
+async function printPlan(client, opts, prog, log) {
+    const link = readLink(projectDirFor(opts.file));
+    if (link !== null) {
+        log(`plan: UPDATE linked workflow ${link.workflowId} (org ${link.orgSlug}) → new version`);
+        return;
+    }
+    if (opts.org === undefined || opts.org.length === 0) {
+        log(`plan: CREATE "${prog.name}" (unlinked — pass --org to check for an existing match)`);
+        return;
+    }
+    const plan = planDeploy(await client.listWorkflows(opts.org), prog.name);
+    log(plan.action === "create"
+        ? `plan: CREATE "${prog.name}" in org ${opts.org}`
+        : `plan: ADOPT existing "${prog.name}" (${plan.workflowId ?? "?"}) → new version`);
+}
+//# sourceMappingURL=deploy.js.map

package/dist/commands/deploy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deploy.js","sourceRoot":"","sources":["../../src/commands/deploy.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,EAAE;AACF,+FAA+F;AAC/F,8FAA8F;AAC9F,8FAA8F;AAG9F,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,UAAU,EAAwB,MAAM,kBAAkB,CAAC;AACjG,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAiBxD,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,IAAmB,EAAE,IAAgB;IACnE,MAAM,GAAG,GACP,IAAI,CAAC,GAAG;QACR,CAAC,CAAC,IAAY,EAAQ,EAAE;YACtB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACpB,CAAC,CAAC,CAAC;IAEL,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC;IAC/C,GAAG,CACD,WAAW,IAAI,CAAC,KAAK,KAAK,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,MAAM,CAAC,SAAS,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,CACxI,CAAC;IAEF,MAAM,KAAK,GAAG,eAAe,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACjE,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC;QAC/B,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,KAAK;QACL,SAAS,EAAE,IAAI,CAAC,KAAK;QACrB,GAAG,CAAC,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACvE,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;QACjC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU;QAC/B,KAAK;QACL,GAAG,CAAC,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACvE,CAAC,CAAC;IAEH,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QACf,MAAM,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;QACzC,OAAO;IACT,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,cAAc,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IACzF,IAAI,GAAG,CAAC,gBAAgB;QACtB,GAAG,CAAC,sEAAsE,CAAC,CAAC;IAC9E,GAAG,CAAC,KAAK,GAAG,CAAC,OAAO,KAAK,IAAI,CAAC,IAAI,aAAa,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,KAAK,GAAG,CAAC,UAAU,GAAG,CAAC,CAAC;AAClG,CAAC;AAED,+DAA+D;AAC/D,KAAK,UAAU,SAAS,CACtB,MAAuB,EACvB,IAAmB,EACnB,IAAqB,EACrB,GAA2B;IAE3B,MAAM,IAAI,GAAG,QAAQ,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAChD,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QAClB,GAAG,CAAC,gCAAgC,IAAI,CAAC,UAAU,SAAS,IAAI,CAAC,OAAO,iBAAiB,CAAC,CAAC;QAC3F,OAAO;IACT,CAAC;IACD,IAAI,IAAI,CAAC,GAAG,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpD,GAAG,CAAC,iBAAiB,IAAI,CAAC,IAAI,0DAA0D,CAAC,CAAC;QAC1F,OAAO;IACT,CAAC;IACD,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IACzE,GAAG,CACD,IAAI,CAAC,MAAM,KAAK,QAAQ;QACtB,CAAC,CAAC,iBAAiB,IAAI,CAAC,IAAI,YAAY,IAAI,CAAC,GAAG,EAAE;QAClD,CAAC,CAAC,yBAAyB,IAAI,CAAC,IAAI,MAAM,IAAI,CAAC,UAAU,IAAI,GAAG,iBAAiB,CACpF,CAAC;AACJ,CAAC"}

package/dist/commands/dev.d.ts

@@ -0,0 +1,14 @@
+export interface DevOptions {
+    file: string;
+    input?: string | undefined;
+    envFile?: string | undefined;
+    verbose: boolean;
+    stream?: string | undefined;
+}
+export interface DevDeps {
+    /** Raw event-stream writer (defaults to process.stdout). */
+    write?: (text: string) => void;
+    /** SIGINT hook installer — injected so tests don't touch real process signals. */
+    onSigint?: (handler: () => void) => () => void;
+}
+export declare function runDev(opts: DevOptions, deps?: DevDeps): Promise<void>;

package/dist/commands/dev.js

@@ -0,0 +1,128 @@
+// `boardwalk dev <file|dir>` — run the workflow NOW, locally, no account.
+//
+// The tightest possible author loop: derive + validate the manifest (precise errors before
+// anything runs), bundle the program, execute it in-process against the minimal dev host
+// (secrets from .env, real sleeps, Phase/output events), and stream the run-event log through
+// the channel-filtered renderer — the same flags and frames every engine speaks.
+//
+// Exit codes: 0 completed · 1 failed · 130 cancelled (Ctrl-C).
+import { mkdtempSync, readFileSync, rmSync, writeFileSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import { pathToFileURL } from "node:url";
+import { parseEnv } from "node:util";
+import { installConfig, installHost, installInput, resetRuntime, takeDeclaredOutput, } from "@boardwalk-labs/workflow/runtime";
+import { CliError } from "../errors.js";
+import { bundleForDev, resolveEntry } from "../bundle.js";
+import { extractValidatedManifest } from "../manifest.js";
+import { projectDirFor } from "../project.js";
+import { createDevHost } from "../dev/host.js";
+import { createRenderer, parseChannels } from "../render/renderer.js";
+import { parseInput } from "./run.js";
+export async function runDev(opts, deps = {}) {
+    const write = deps.write ??
+        ((text) => {
+            process.stdout.write(text);
+        });
+    const channels = parseChannels({ verbose: opts.verbose, stream: opts.stream });
+    const renderer = createRenderer(channels, write);
+    // 1. Validate before anything runs — errors point at the author's real file.
+    const entry = resolveEntry(opts.file);
+    const manifest = extractValidatedManifest(readFileSync(entry, "utf8"), entry);
+    const input = parseInput(opts.input);
+    // 2. The local secret store: the project's env file (explicit --env must exist).
+    const projectDir = projectDirFor(opts.file);
+    const envPath = opts.envFile ?? join(projectDir, ".env");
+    const envVars = loadEnvFile(envPath, opts.envFile !== undefined);
+    // 3. The run-event emitter: a single dev turn, 1-based seq, rendered through the channel filter.
+    const runId = `dev-${Date.now().toString(36)}`;
+    let seq = 0;
+    const emit = (body) => {
+        seq += 1;
+        renderer.render({ ...body, runId, turnId: runId, seq, t: Date.now() });
+    };
+    // 4. Install the host + run inputs, bundle, and execute the program in-process.
+    const runsDir = join(projectDir, ".bw-runs", runId);
+    resetRuntime();
+    installHost(createDevHost({
+        manifest,
+        envVars,
+        envLabel: envPath,
+        artifactsDir: join(runsDir, "artifacts"),
+        emit,
+    }));
+    installInput(input);
+    installConfig({});
+    const staging = mkdtempSync(join(tmpdir(), "bw-dev-"));
+    const restoreSigint = (deps.onSigint ?? defaultOnSigint)(() => {
+        emit({ kind: "run_status", status: "cancelled" });
+        process.exit(130);
+    });
+    try {
+        const bundlePath = join(staging, "index.mjs");
+        writeFileSync(bundlePath, await bundleForDev(entry), "utf8");
+        emit({ kind: "run_status", status: "running" });
+        // A workflow program is a SCRIPT: importing the module IS running it (top-level body +
+        // top-level awaits). The import settles when the run completes; a top-level throw rejects it.
+        let mod;
+        try {
+            mod = (await import(pathToFileURL(bundlePath).href));
+        }
+        catch (err) {
+            // Output declared BEFORE the failure still counts — a failed watch/check often output()s
+            // its verdict and then throws to mark the run failed.
+            const declaredBeforeFailure = takeDeclaredOutput();
+            if (declaredBeforeFailure !== null) {
+                emit({ kind: "output", value: declaredBeforeFailure.value });
+            }
+            const message = err instanceof Error ? err.message : String(err);
+            emit({
+                kind: "run_status",
+                status: "failed",
+                error: { code: "PROGRAM_ERROR", message },
+            });
+            const hint = err instanceof CliError ? err.hint : undefined;
+            throw new CliError(`Run failed: ${message}`, hint, undefined, 1);
+        }
+        if (typeof mod.default === "function") {
+            console.error("warning: the program has a default export, which Boardwalk does not call — a workflow " +
+                "runs top-to-bottom as a script. Move the body to the top level (top-level await is fine).");
+        }
+        const declared = takeDeclaredOutput();
+        if (declared !== null)
+            emit({ kind: "output", value: declared.value });
+        emit({ kind: "run_status", status: "completed" });
+    }
+    finally {
+        restoreSigint();
+        resetRuntime();
+        rmSync(staging, { recursive: true, force: true });
+    }
+}
+/** Parse the env file into a map. A missing file is only an error when it was named explicitly. */
+function loadEnvFile(path, explicit) {
+    let raw;
+    try {
+        raw = readFileSync(path, "utf8");
+    }
+    catch {
+        if (explicit) {
+            throw new CliError(`Env file not found: ${path}`);
+        }
+        return new Map();
+    }
+    const parsed = parseEnv(raw);
+    const out = new Map();
+    for (const [key, value] of Object.entries(parsed)) {
+        if (typeof value === "string")
+            out.set(key, value);
+    }
+    return out;
+}
+function defaultOnSigint(handler) {
+    process.once("SIGINT", handler);
+    return () => {
+        process.removeListener("SIGINT", handler);
+    };
+}
+//# sourceMappingURL=dev.js.map

package/dist/commands/dev.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dev.js","sourceRoot":"","sources":["../../src/commands/dev.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,EAAE;AACF,2FAA2F;AAC3F,yFAAyF;AACzF,8FAA8F;AAC9F,iFAAiF;AACjF,EAAE;AACF,+DAA+D;AAE/D,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC3E,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACrC,OAAO,EACL,aAAa,EACb,WAAW,EACX,YAAY,EACZ,YAAY,EACZ,kBAAkB,GACnB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AACxC,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC1D,OAAO,EAAE,wBAAwB,EAAE,MAAM,gBAAgB,CAAC;AAC1D,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAqB,MAAM,gBAAgB,CAAC;AAClE,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtE,OAAO,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AAiBtC,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,IAAgB,EAAE,OAAgB,EAAE;IAC/D,MAAM,KAAK,GACT,IAAI,CAAC,KAAK;QACV,CAAC,CAAC,IAAY,EAAQ,EAAE;YACtB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC7B,CAAC,CAAC,CAAC;IAEL,MAAM,QAAQ,GAAG,aAAa,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IAC/E,MAAM,QAAQ,GAAG,cAAc,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAEjD,6EAA6E;IAC7E,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtC,MAAM,QAAQ,GAAG,wBAAwB,CAAC,YAAY,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,KAAK,CAAC,CAAC;IAC9E,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAErC,iFAAiF;IACjF,MAAM,UAAU,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC5C,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IACzD,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC;IAEjE,iGAAiG;IACjG,MAAM,KAAK,GAAG,OAAO,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;IAC/C,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,MAAM,IAAI,GAAG,CAAC,IAAkB,EAAQ,EAAE;QACxC,GAAG,IAAI,CAAC,CAAC;QACT,QAAQ,CAAC,MAAM,CAAC,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IACzE,CAAC,CAAC;IAEF,gFAAgF;IAChF,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC;IACpD,YAAY,EAAE,CAAC;IACf,WAAW,CACT,aAAa,CAAC;QACZ,QAAQ;QACR,OAAO;QACP,QAAQ,EAAE,OAAO;QACjB,YAAY,EAAE,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC;QACxC,IAAI;KACL,CAAC,CACH,CAAC;IACF,YAAY,CAAC,KAAK,CAAC,CAAC;IACpB,aAAa,CAAC,EAAE,CAAC,CAAC;IAElB,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC;IACvD,MAAM,aAAa,GAAG,CAAC,IAAI,CAAC,QAAQ,IAAI,eAAe,CAAC,CAAC,GAAG,EAAE;QAC5D,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;QAClD,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACpB,CAAC,CAAC,CAAC;IACH,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QAC9C,aAAa,CAAC,UAAU,EAAE,MAAM,YAAY,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,CAAC;QAE7D,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;QAEhD,uFAAuF;QACvF,8FAA8F;QAC9F,IAAI,GAA0B,CAAC;QAC/B,IAAI,CAAC;YACH,GAAG,GAAG,CAAC,MAAM,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,CAA0B,CAAC;QAChF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,yFAAyF;YACzF,sDAAsD;YACtD,MAAM,qBAAqB,GAAG,kBAAkB,EAAE,CAAC;YACnD,IAAI,qBAAqB,KAAK,IAAI,EAAE,CAAC;gBACnC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,qBAAqB,CAAC,KAAK,EAAE,CAAC,CAAC;YAC/D,CAAC;YACD,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjE,IAAI,CAAC;gBACH,IAAI,EAAE,YAAY;gBAClB,MAAM,EAAE,QAAQ;gBAChB,KAAK,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE;aAC1C,CAAC,CAAC;YACH,MAAM,IAAI,GAAG,GAAG,YAAY,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,MAAM,IAAI,QAAQ,CAAC,eAAe,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;QACnE,CAAC;QAED,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,UAAU,EAAE,CAAC;YACtC,OAAO,CAAC,KAAK,CACX,wFAAwF;gBACtF,2FAA2F,CAC9F,CAAC;QACJ,CAAC;QAED,MAAM,QAAQ,GAAG,kBAAkB,EAAE,CAAC;QACtC,IAAI,QAAQ,KAAK,IAAI;YAAE,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC;QACvE,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;IACpD,CAAC;YAAS,CAAC;QACT,aAAa,EAAE,CAAC;QAChB,YAAY,EAAE,CAAC;QACf,MAAM,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACpD,CAAC;AACH,CAAC;AAED,mGAAmG;AACnG,SAAS,WAAW,CAAC,IAAY,EAAE,QAAiB;IAClD,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,IAAI,QAAQ,CAAC,uBAAuB,IAAI,EAAE,CAAC,CAAC;QACpD,CAAC;QACD,OAAO,IAAI,GAAG,EAAE,CAAC;IACnB,CAAC;IACD,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC7B,MAAM,GAAG,GAAG,IAAI,GAAG,EAAkB,CAAC;IACtC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAClD,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACrD,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,eAAe,CAAC,OAAmB;IAC1C,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAChC,OAAO,GAAS,EAAE;QAChB,OAAO,CAAC,cAAc,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC5C,CAAC,CAAC;AACJ,CAAC"}

package/dist/commands/init.d.ts

@@ -0,0 +1,12 @@
+export interface InitOptions {
+    dir: string;
+    template: string;
+}
+export interface InitDeps {
+    log?: (line: string) => void;
+    fetchImpl?: typeof fetch;
+    env?: NodeJS.ProcessEnv;
+}
+export declare function runInit(opts: InitOptions, deps?: InitDeps): Promise<void>;
+/** Derive a manifest-legal workflow name from the target directory's basename. */
+export declare function workflowNameFor(absDir: string): string;