@cat-factory/cli 0.2.1

package/dist/secrets.js

@@ -0,0 +1,9 @@
+import { randomBytes as nodeRandomBytes } from 'node:crypto';
+/** Generate a fresh {@link GeneratedSecrets} pair in the server's required formats. */
+export function generateSecrets(randomBytes = nodeRandomBytes) {
+    return {
+        authSessionSecret: randomBytes(32).toString('hex'),
+        encryptionKey: randomBytes(32).toString('base64'),
+    };
+}
+//# sourceMappingURL=secrets.js.map

package/dist/secrets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets.js","sourceRoot":"","sources":["../src/secrets.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,IAAI,eAAe,EAAE,MAAM,aAAa,CAAA;AA0B5D,uFAAuF;AACvF,MAAM,UAAU,eAAe,CAAC,WAAW,GAAgB,eAAe;IACxE,OAAO;QACL,iBAAiB,EAAE,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;QAClD,aAAa,EAAE,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;KAClD,CAAA;AACH,CAAC"}

package/dist/slug.d.ts

@@ -0,0 +1,3 @@
+/** Coerce arbitrary text into a valid npm-name slug. Returns `fallback` if nothing usable remains. */
+export declare function slugifyProjectName(input: string, fallback?: string): string;
+//# sourceMappingURL=slug.d.ts.map

package/dist/slug.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"slug.d.ts","sourceRoot":"","sources":["../src/slug.ts"],"names":[],"mappings":"AAMA,sGAAsG;AACtG,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,SAAgB,GAAG,MAAM,CAWlF"}

package/dist/slug.js

@@ -0,0 +1,19 @@
+// The project name is interpolated verbatim into the generated `local/`/`frontend/` package
+// `name` fields (`<name>-local` / `<name>-frontend`), so it has to be a valid npm package name:
+// lowercase, no spaces, and not starting with `.`/`_`. A free-text answer like "My Cats" would
+// otherwise produce `"My Cats-local"`, which `npm install` rejects. This coerces any input into a
+// safe slug, falling back to a default when nothing usable survives.
+/** Coerce arbitrary text into a valid npm-name slug. Returns `fallback` if nothing usable remains. */
+export function slugifyProjectName(input, fallback = 'cat-factory') {
+    const slug = input
+        .trim()
+        .toLowerCase()
+        // Anything not a safe npm-name char becomes a hyphen.
+        .replace(/[^a-z0-9._-]+/g, '-')
+        // Collapse runs of separators, then strip leading/trailing separators and leading `.`/`_`.
+        .replace(/-+/g, '-')
+        .replace(/^[._-]+/, '')
+        .replace(/[._-]+$/, '');
+    return slug.length > 0 ? slug : fallback;
+}
+//# sourceMappingURL=slug.js.map

package/dist/slug.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"slug.js","sourceRoot":"","sources":["../src/slug.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,gGAAgG;AAChG,+FAA+F;AAC/F,kGAAkG;AAClG,qEAAqE;AAErE,sGAAsG;AACtG,MAAM,UAAU,kBAAkB,CAAC,KAAa,EAAE,QAAQ,GAAG,aAAa;IACxE,MAAM,IAAI,GAAG,KAAK;SACf,IAAI,EAAE;SACN,WAAW,EAAE;QACd,sDAAsD;SACrD,OAAO,CAAC,gBAAgB,EAAE,GAAG,CAAC;QAC/B,2FAA2F;SAC1F,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;SACnB,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC;SACtB,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAA;IACzB,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAA;AAC1C,CAAC"}

package/dist/templates.d.ts

@@ -0,0 +1,29 @@
+export declare const LOCAL_SERVER_VERSION = "^0.19.5";
+export declare const APP_VERSION = "^0.47.7";
+export declare const NUXT_VERSION = "^4.4.8";
+export declare const TYPES_NODE_VERSION = "^26.0.1";
+export declare const TYPESCRIPT_VERSION = "7.0.1-rc";
+export declare const WRANGLER_VERSION = "^4.105.0";
+/** Default executor-harness image agent jobs run as per-run containers. */
+export declare const DEFAULT_HARNESS_IMAGE = "ghcr.io/kibertoad/cat-factory-executor:latest";
+/** The container runtimes the local facade understands (`LOCAL_CONTAINER_RUNTIME`). */
+export declare const CONTAINER_RUNTIMES: readonly ['docker', 'podman', 'orbstack', 'colima', 'apple'];
+export type ContainerRuntime = (typeof CONTAINER_RUNTIMES)[number];
+export declare const localPackageJson: (projectName: string) => string;
+export declare const localMainTs = "// Local-mode backend entry point.\n//\n// Calls the reusable @cat-factory/local-server library's startLocal(): connect to the local\n// Postgres (DATABASE_URL), run the schema migration, boot pg-boss + the durable execution\n// worker, and serve the shared Hono app. Agent jobs run as per-run local containers and GitHub\n// is reached via the PAT in .env. Node 24+ runs this TypeScript directly via type stripping\n// (npm start = `node --env-file-if-exists=.env src/main.ts`), so edits here take effect with no\n// build step.\nimport { startLocal } from '@cat-factory/local-server'\n\nstartLocal().catch((err: unknown) => {\n  console.error('failed to start cat-factory local server:', err)\n  process.exit(1)\n})\n";
+export declare const dockerCompose: (dbUrl: string) => string;
+/** Non-secret inputs shown in `local/.env.example`, kept in sync with the populated `.env`. */
+export interface LocalEnvExampleInput {
+    provider?: 'github' | 'gitlab';
+    containerRuntime?: ContainerRuntime;
+    databaseUrl?: string;
+    port?: number;
+    harnessImage?: string;
+}
+export declare const localEnvExample: (input?: LocalEnvExampleInput) => string;
+export declare const frontendPackageJson: (projectName: string) => string;
+export declare const frontendNuxtConfig: (title: string) => string;
+export declare const frontendWranglerToml: (projectName: string) => string;
+export declare const frontendEnvExample: (apiBase?: string) => string;
+export declare const tsconfigJson = "{\n  \"compilerOptions\": {\n    \"target\": \"ES2022\",\n    \"module\": \"ESNext\",\n    \"moduleResolution\": \"Bundler\",\n    \"strict\": true,\n    \"skipLibCheck\": true,\n    \"noEmit\": true\n  }\n}\n";
+//# sourceMappingURL=templates.d.ts.map

package/dist/templates.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"templates.d.ts","sourceRoot":"","sources":["../src/templates.ts"],"names":[],"mappings":"AAQA,eAAO,MAAM,oBAAoB,YAAY,CAAA;AAC7C,eAAO,MAAM,WAAW,YAAY,CAAA;AACpC,eAAO,MAAM,YAAY,WAAW,CAAA;AACpC,eAAO,MAAM,kBAAkB,YAAY,CAAA;AAC3C,eAAO,MAAM,kBAAkB,aAAa,CAAA;AAC5C,eAAO,MAAM,gBAAgB,aAAa,CAAA;AAE1C,2EAA2E;AAC3E,eAAO,MAAM,qBAAqB,kDAAkD,CAAA;AAEpF,uFAAuF;AACvF,eAAO,MAAM,kBAAkB,YAAI,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,CAAU,CAAA;AAC9F,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,kBAAkB,CAAC,CAAC,MAAM,CAAC,CAAA;AAElE,eAAO,MAAM,gBAAgB,gBAAiB,MAAM,KAAG,MA6BhD,CAAA;AAEP,eAAO,MAAM,WAAW,otBAcvB,CAAA;AAED,eAAO,MAAM,aAAa,UAAW,MAAM,KAAG,MAuC7C,CAAA;AAED,+FAA+F;AAC/F,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,EAAE,QAAQ,GAAG,QAAQ,CAAA;IAC9B,gBAAgB,CAAC,EAAE,gBAAgB,CAAA;IACnC,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,YAAY,CAAC,EAAE,MAAM,CAAA;CACtB;AAED,eAAO,MAAM,eAAe,WAAW,oBAAoB,KAAQ,MAmClE,CAAA;AAED,eAAO,MAAM,mBAAmB,gBAAiB,MAAM,KAAG,MA4BnD,CAAA;AAEP,eAAO,MAAM,kBAAkB,UAAW,MAAM,KAAG,MAalD,CAAA;AAED,eAAO,MAAM,oBAAoB,gBAAiB,MAAM,KAAG,MAS1D,CAAA;AAED,eAAO,MAAM,kBAAkB,wBAAwC,MAItE,CAAA;AAED,eAAO,MAAM,YAAY,sNAUxB,CAAA"}

package/dist/templates.js

@@ -0,0 +1,189 @@
+// Static file templates for the scaffolded deployment. These mirror `deploy/local` and
+// `deploy/frontend` in this repo, but depend on the PUBLISHED libraries (not `workspace:*`) so
+// the generated project works standalone outside the monorepo.
+// Pinned library versions the scaffolded project depends on. Pinned (not the `latest` dist-tag)
+// so a scaffold is reproducible and the backend/frontend can't resolve to skewed releases; the
+// caret allows in-range patch/minor pickups. Bump these when cutting a CLI release against newer
+// libraries. (`@cat-factory/local-server` and `@cat-factory/app` version independently.)
+export const LOCAL_SERVER_VERSION = '^0.19.5';
+export const APP_VERSION = '^0.47.7';
+export const NUXT_VERSION = '^4.4.8';
+export const TYPES_NODE_VERSION = '^26.0.1';
+export const TYPESCRIPT_VERSION = '7.0.1-rc';
+export const WRANGLER_VERSION = '^4.105.0';
+/** Default executor-harness image agent jobs run as per-run containers. */
+export const DEFAULT_HARNESS_IMAGE = 'ghcr.io/kibertoad/cat-factory-executor:latest';
+/** The container runtimes the local facade understands (`LOCAL_CONTAINER_RUNTIME`). */
+export const CONTAINER_RUNTIMES = ['docker', 'podman', 'orbstack', 'colima', 'apple'];
+export const localPackageJson = (projectName) => `${JSON.stringify({
+    name: `${projectName}-local`,
+    version: '0.1.0',
+    private: true,
+    description: 'Local-mode backend deployment of @cat-factory/local-server.',
+    type: 'module',
+    engines: {
+        // The entry (src/main.ts) runs via Node's TypeScript type stripping; --env-file-if-exists
+        // also needs a recent Node. 24+ covers both.
+        node: '>=24',
+    },
+    scripts: {
+        start: 'node --env-file-if-exists=.env src/main.ts',
+        dev: 'node --watch --env-file-if-exists=.env src/main.ts',
+        'db:up': 'docker compose up -d postgres',
+        'db:down': 'docker compose down',
+    },
+    dependencies: {
+        '@cat-factory/local-server': LOCAL_SERVER_VERSION,
+    },
+    devDependencies: {
+        '@types/node': TYPES_NODE_VERSION,
+        typescript: TYPESCRIPT_VERSION,
+    },
+}, null, 2)}\n`;
+export const localMainTs = `// Local-mode backend entry point.
+//
+// Calls the reusable @cat-factory/local-server library's startLocal(): connect to the local
+// Postgres (DATABASE_URL), run the schema migration, boot pg-boss + the durable execution
+// worker, and serve the shared Hono app. Agent jobs run as per-run local containers and GitHub
+// is reached via the PAT in .env. Node 24+ runs this TypeScript directly via type stripping
+// (npm start = \`node --env-file-if-exists=.env src/main.ts\`), so edits here take effect with no
+// build step.
+import { startLocal } from '@cat-factory/local-server'
+
+startLocal().catch((err: unknown) => {
+  console.error('failed to start cat-factory local server:', err)
+  process.exit(1)
+})
+`;
+export const dockerCompose = (dbUrl) => {
+    // Derive the compose credentials/db from the DATABASE_URL so the two always agree.
+    let user = 'cat';
+    let password = 'cat';
+    let db = 'catfactory';
+    let port = '5432';
+    try {
+        const u = new URL(dbUrl);
+        user = decodeURIComponent(u.username) || user;
+        password = decodeURIComponent(u.password) || password;
+        db = u.pathname.replace(/^\//, '') || db;
+        port = u.port || port;
+    }
+    catch {
+        // Keep the defaults if the URL doesn't parse.
+    }
+    return `# Local Postgres for the cat-factory backend. The orchestrator itself runs on the host
+# (so it can drive the container runtime to spawn agent containers), so only Postgres lives here.
+#
+#   docker compose up -d postgres   # or: pnpm db:up
+services:
+  postgres:
+    image: postgres:18
+    environment:
+      POSTGRES_USER: ${user}
+      POSTGRES_PASSWORD: ${password}
+      POSTGRES_DB: ${db}
+    ports:
+      - '${port}:5432'
+    volumes:
+      - cat-factory-pg:/var/lib/postgresql
+    healthcheck:
+      test: ['CMD-SHELL', 'pg_isready -U ${user} -d ${db}']
+      interval: 5s
+      timeout: 5s
+      retries: 10
+
+volumes:
+  cat-factory-pg:
+`;
+};
+export const localEnvExample = (input = {}) => {
+    const { provider = 'github', containerRuntime = 'docker', databaseUrl = 'postgres://cat:cat@localhost:5432/catfactory', port = 8787, harnessImage = DEFAULT_HARNESS_IMAGE, } = input;
+    // Show the chosen provider's PAT var active and the other commented, so the example matches
+    // the populated `.env` the CLI writes for that provider.
+    const tokenLines = provider === 'gitlab' ? ['# GITHUB_PAT=', 'GITLAB_PAT='] : ['GITHUB_PAT=', '# GITLAB_PAT='];
+    return `# Example env for the local-mode backend. Copy to \`.env\` (gitignored) and fill in.
+# \`cat-factory init\` generates a populated \`.env\` for you; this is the documented template
+# (the non-secret values below mirror the ones you chose at scaffold time).
+DATABASE_URL=${databaseUrl}
+PORT=${port}
+CORS_ALLOWED_ORIGINS=http://localhost:3000
+# Generate with: node -e "console.log(require('crypto').randomBytes(32).toString('hex'))"
+AUTH_SESSION_SECRET=
+# Generate with: openssl rand -base64 32
+ENCRYPTION_KEY=
+# A GitHub (classic, scopes: repo,workflow) or GitLab (scope: api,read_user) personal access token.
+${tokenLines.join('\n')}
+# For a self-managed GitLab instance, also set GITLAB_API_BASE (e.g. https://gitlab.example.com/api/v4).
+# GITLAB_API_BASE=
+LOCAL_HARNESS_IMAGE=${harnessImage}
+# Container runtime that spawns agent jobs: ${CONTAINER_RUNTIMES.join(' | ')}.
+LOCAL_CONTAINER_RUNTIME=${containerRuntime}
+# At least one model provider (Cloudflare Workers AI over REST shown; or a direct vendor key):
+# CLOUDFLARE_ACCOUNT_ID=
+# CLOUDFLARE_API_TOKEN=
+# ANTHROPIC_API_KEY=
+# OPENAI_API_KEY=
+`;
+};
+export const frontendPackageJson = (projectName) => `${JSON.stringify({
+    name: `${projectName}-frontend`,
+    version: '0.1.0',
+    private: true,
+    description: 'Frontend SPA deployment — extends the @cat-factory/app Nuxt layer.',
+    type: 'module',
+    scripts: {
+        postinstall: 'nuxt prepare',
+        dev: 'nuxt dev',
+        build: 'nuxt build',
+        generate: 'nuxt generate',
+        preview: 'nuxt preview',
+        deploy: 'wrangler pages deploy',
+    },
+    dependencies: {
+        '@cat-factory/app': APP_VERSION,
+        nuxt: NUXT_VERSION,
+    },
+    devDependencies: {
+        typescript: '^6.0.3',
+        'vue-tsc': '^3.3.5',
+        wrangler: WRANGLER_VERSION,
+    },
+}, null, 2)}\n`;
+export const frontendNuxtConfig = (title) => `// Frontend deployment — a thin Nuxt app that consumes the @cat-factory/app layer.
+// All SPA logic lives in the layer; this app only \`extends\` it and applies branding.
+// The backend URL is baked in at BUILD time from NUXT_PUBLIC_API_BASE (the SPA is ssr: false).
+export default defineNuxtConfig({
+  extends: ['@cat-factory/app'],
+
+  app: {
+    head: {
+      title: ${JSON.stringify(title)},
+    },
+  },
+})
+`;
+export const frontendWranglerToml = (projectName) => `# Cloudflare Pages config for the frontend SPA.
+#
+# The SPA's backend URL is baked in at BUILD time (NUXT_PUBLIC_API_BASE), NOT here — Pages
+# [vars] only reach Functions at runtime and this is a pure static SPA. Change \`name\` to your
+# own Pages project.
+name = "${projectName}-frontend"
+pages_build_output_dir = ".output/public"
+compatibility_date = "2025-06-01"
+`;
+export const frontendEnvExample = (apiBase = 'http://localhost:8787') => `# Example env for the frontend SPA. Copy to \`.env\` (gitignored).
+# Base URL of the backend API, baked in at build time (mirrors your chosen --api-base/--port).
+NUXT_PUBLIC_API_BASE=${apiBase}
+`;
+export const tsconfigJson = `{
+  "compilerOptions": {
+    "target": "ES2022",
+    "module": "ESNext",
+    "moduleResolution": "Bundler",
+    "strict": true,
+    "skipLibCheck": true,
+    "noEmit": true
+  }
+}
+`;
+//# sourceMappingURL=templates.js.map

package/dist/templates.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"templates.js","sourceRoot":"","sources":["../src/templates.ts"],"names":[],"mappings":"AAAA,uFAAuF;AACvF,+FAA+F;AAC/F,+DAA+D;AAE/D,gGAAgG;AAChG,+FAA+F;AAC/F,iGAAiG;AACjG,yFAAyF;AACzF,MAAM,CAAC,MAAM,oBAAoB,GAAG,SAAS,CAAA;AAC7C,MAAM,CAAC,MAAM,WAAW,GAAG,SAAS,CAAA;AACpC,MAAM,CAAC,MAAM,YAAY,GAAG,QAAQ,CAAA;AACpC,MAAM,CAAC,MAAM,kBAAkB,GAAG,SAAS,CAAA;AAC3C,MAAM,CAAC,MAAM,kBAAkB,GAAG,UAAU,CAAA;AAC5C,MAAM,CAAC,MAAM,gBAAgB,GAAG,UAAU,CAAA;AAE1C,2EAA2E;AAC3E,MAAM,CAAC,MAAM,qBAAqB,GAAG,+CAA+C,CAAA;AAEpF,uFAAuF;AACvF,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,CAAU,CAAA;AAG9F,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,WAAmB,EAAU,EAAE,CAC9D,GAAG,IAAI,CAAC,SAAS,CACf;IACE,IAAI,EAAE,GAAG,WAAW,QAAQ;IAC5B,OAAO,EAAE,OAAO;IAChB,OAAO,EAAE,IAAI;IACb,WAAW,EAAE,6DAA6D;IAC1E,IAAI,EAAE,QAAQ;IACd,OAAO,EAAE;QACP,0FAA0F;QAC1F,6CAA6C;QAC7C,IAAI,EAAE,MAAM;KACb;IACD,OAAO,EAAE;QACP,KAAK,EAAE,4CAA4C;QACnD,GAAG,EAAE,oDAAoD;QACzD,OAAO,EAAE,+BAA+B;QACxC,SAAS,EAAE,qBAAqB;KACjC;IACD,YAAY,EAAE;QACZ,2BAA2B,EAAE,oBAAoB;KAClD;IACD,eAAe,EAAE;QACf,aAAa,EAAE,kBAAkB;QACjC,UAAU,EAAE,kBAAkB;KAC/B;CACF,EACD,IAAI,EACJ,CAAC,CACF,IAAI,CAAA;AAEP,MAAM,CAAC,MAAM,WAAW,GAAG;;;;;;;;;;;;;;CAc1B,CAAA;AAED,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,KAAa,EAAU,EAAE;IACrD,mFAAmF;IACnF,IAAI,IAAI,GAAG,KAAK,CAAA;IAChB,IAAI,QAAQ,GAAG,KAAK,CAAA;IACpB,IAAI,EAAE,GAAG,YAAY,CAAA;IACrB,IAAI,IAAI,GAAG,MAAM,CAAA;IACjB,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAA;QACxB,IAAI,GAAG,kBAAkB,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAA;QAC7C,QAAQ,GAAG,kBAAkB,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAA;QACrD,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,EAAE,CAAA;QACxC,IAAI,GAAG,CAAC,CAAC,IAAI,IAAI,IAAI,CAAA;IACvB,CAAC;IAAC,MAAM,CAAC;QACP,8CAA8C;IAChD,CAAC;IACD,OAAO;;;;;;;;uBAQc,IAAI;2BACA,QAAQ;qBACd,EAAE;;WAEZ,IAAI;;;;2CAI4B,IAAI,OAAO,EAAE;;;;;;;CAOvD,CAAA;AACD,CAAC,CAAA;AAWD,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,KAAK,GAAyB,EAAE,EAAU,EAAE;IAC1E,MAAM,EACJ,QAAQ,GAAG,QAAQ,EACnB,gBAAgB,GAAG,QAAQ,EAC3B,WAAW,GAAG,8CAA8C,EAC5D,IAAI,GAAG,IAAI,EACX,YAAY,GAAG,qBAAqB,GACrC,GAAG,KAAK,CAAA;IACT,4FAA4F;IAC5F,yDAAyD;IACzD,MAAM,UAAU,GACd,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,eAAe,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,EAAE,eAAe,CAAC,CAAA;IAC7F,OAAO;;;eAGM,WAAW;OACnB,IAAI;;;;;;;EAOT,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC;;;sBAGD,YAAY;8CACY,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC;0BAClD,gBAAgB;;;;;;CAMzC,CAAA;AACD,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,WAAmB,EAAU,EAAE,CACjE,GAAG,IAAI,CAAC,SAAS,CACf;IACE,IAAI,EAAE,GAAG,WAAW,WAAW;IAC/B,OAAO,EAAE,OAAO;IAChB,OAAO,EAAE,IAAI;IACb,WAAW,EAAE,oEAAoE;IACjF,IAAI,EAAE,QAAQ;IACd,OAAO,EAAE;QACP,WAAW,EAAE,cAAc;QAC3B,GAAG,EAAE,UAAU;QACf,KAAK,EAAE,YAAY;QACnB,QAAQ,EAAE,eAAe;QACzB,OAAO,EAAE,cAAc;QACvB,MAAM,EAAE,uBAAuB;KAChC;IACD,YAAY,EAAE;QACZ,kBAAkB,EAAE,WAAW;QAC/B,IAAI,EAAE,YAAY;KACnB;IACD,eAAe,EAAE;QACf,UAAU,EAAE,QAAQ;QACpB,SAAS,EAAE,QAAQ;QACnB,QAAQ,EAAE,gBAAgB;KAC3B;CACF,EACD,IAAI,EACJ,CAAC,CACF,IAAI,CAAA;AAEP,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,KAAa,EAAU,EAAE,CAC1D;;;;;;;;eAQa,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;;;;CAInC,CAAA;AAED,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,WAAmB,EAAU,EAAE,CAClE;;;;;UAKQ,WAAW;;;CAGpB,CAAA;AAED,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,OAAO,GAAG,uBAAuB,EAAU,EAAE,CAC9E;;uBAEqB,OAAO;CAC7B,CAAA;AAED,MAAM,CAAC,MAAM,YAAY,GAAG;;;;;;;;;;CAU3B,CAAA"}

package/dist/vcs.d.ts

@@ -0,0 +1,20 @@
+export type VcsProvider = 'github' | 'gitlab';
+export declare const VCS_PROVIDERS: readonly VcsProvider[];
+/**
+ * A GitHub "new personal access token (classic)" URL with the local-mode scopes pre-selected.
+ * Classic tokens (not fine-grained) are used because only the classic form accepts the `scopes`
+ * query param for pre-selection.
+ */
+export declare function githubPatCreationUrl(): string;
+/**
+ * A GitLab "new personal access token" URL with the `api` scope pre-selected, so a developer
+ * without a GitLab PAT can click straight through to create one.
+ */
+export declare function gitlabPatCreationUrl(): string;
+/** The pre-scoped token-creation URL for a provider. */
+export declare function patCreationUrl(provider: VcsProvider): string;
+/** The `.env` variable name a provider's PAT is written under (read by the local-mode facade). */
+export declare function patEnvVar(provider: VcsProvider): 'GITHUB_PAT' | 'GITLAB_PAT';
+/** Human label for prompts/output. */
+export declare function providerLabel(provider: VcsProvider): string;
+//# sourceMappingURL=vcs.d.ts.map

package/dist/vcs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"vcs.d.ts","sourceRoot":"","sources":["../src/vcs.ts"],"names":[],"mappings":"AAQA,MAAM,MAAM,WAAW,GAAG,QAAQ,GAAG,QAAQ,CAAA;AAE7C,eAAO,MAAM,aAAa,EAAE,SAAS,WAAW,EAAyB,CAAA;AAYzE;;;;GAIG;AACH,wBAAgB,oBAAoB,IAAI,MAAM,CAM7C;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,IAAI,MAAM,CAM7C;AAED,wDAAwD;AACxD,wBAAgB,cAAc,CAAC,QAAQ,EAAE,WAAW,GAAG,MAAM,CAE5D;AAED,kGAAkG;AAClG,wBAAgB,SAAS,CAAC,QAAQ,EAAE,WAAW,GAAG,YAAY,GAAG,YAAY,CAE5E;AAED,sCAAsC;AACtC,wBAAgB,aAAa,CAAC,QAAQ,EAAE,WAAW,GAAG,MAAM,CAE3D"}

package/dist/vcs.js

@@ -0,0 +1,52 @@
+// Source-control provider helpers: the pre-scoped "create a personal access token" URLs the
+// CLI opens in the browser, and the env-var name each provider's token is written under.
+//
+// These mirror `@cat-factory/local-server`'s `githubPatCreationUrl` / `gitlabPatCreationUrl`
+// (backend/runtimes/local/src/github.ts) so the token the developer mints here carries exactly
+// the scopes the local-mode agent containers need. They are duplicated rather than imported to
+// keep the backend stack out of a scaffolder (the CLI's only runtime dep is @clack/prompts).
+export const VCS_PROVIDERS = ['github', 'gitlab'];
+/**
+ * The classic-token scopes local mode needs: agent containers clone/push branches and open PRs
+ * (`repo`, which also covers reading the PR head's Actions check runs for the CI gate and
+ * merging the PR), and the coder/ci-fixer may touch `.github/workflows/*` files (`workflow`).
+ */
+const GITHUB_PAT_SCOPES = ['repo', 'workflow'];
+/** The GitLab scope a coding agent needs: `api` covers repo read/write + merge. */
+const GITLAB_PAT_SCOPES = ['api'];
+/**
+ * A GitHub "new personal access token (classic)" URL with the local-mode scopes pre-selected.
+ * Classic tokens (not fine-grained) are used because only the classic form accepts the `scopes`
+ * query param for pre-selection.
+ */
+export function githubPatCreationUrl() {
+    const params = new URLSearchParams({
+        description: 'cat-factory local mode',
+        scopes: GITHUB_PAT_SCOPES.join(','),
+    });
+    return `https://github.com/settings/tokens/new?${params.toString()}`;
+}
+/**
+ * A GitLab "new personal access token" URL with the `api` scope pre-selected, so a developer
+ * without a GitLab PAT can click straight through to create one.
+ */
+export function gitlabPatCreationUrl() {
+    const params = new URLSearchParams({
+        name: 'cat-factory local mode',
+        'scopes[]': GITLAB_PAT_SCOPES.join(','),
+    });
+    return `https://gitlab.com/-/user_settings/personal_access_tokens?${params.toString()}`;
+}
+/** The pre-scoped token-creation URL for a provider. */
+export function patCreationUrl(provider) {
+    return provider === 'github' ? githubPatCreationUrl() : gitlabPatCreationUrl();
+}
+/** The `.env` variable name a provider's PAT is written under (read by the local-mode facade). */
+export function patEnvVar(provider) {
+    return provider === 'github' ? 'GITHUB_PAT' : 'GITLAB_PAT';
+}
+/** Human label for prompts/output. */
+export function providerLabel(provider) {
+    return provider === 'github' ? 'GitHub' : 'GitLab';
+}
+//# sourceMappingURL=vcs.js.map

package/dist/vcs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vcs.js","sourceRoot":"","sources":["../src/vcs.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,yFAAyF;AACzF,EAAE;AACF,6FAA6F;AAC7F,+FAA+F;AAC/F,+FAA+F;AAC/F,6FAA6F;AAI7F,MAAM,CAAC,MAAM,aAAa,GAA2B,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAA;AAEzE;;;;GAIG;AACH,MAAM,iBAAiB,GAAG,CAAC,MAAM,EAAE,UAAU,CAAU,CAAA;AAEvD,mFAAmF;AACnF,MAAM,iBAAiB,GAAG,CAAC,KAAK,CAAU,CAAA;AAE1C;;;;GAIG;AACH,MAAM,UAAU,oBAAoB;IAClC,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;QACjC,WAAW,EAAE,wBAAwB;QACrC,MAAM,EAAE,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC;KACpC,CAAC,CAAA;IACF,OAAO,0CAA0C,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAA;AACtE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB;IAClC,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;QACjC,IAAI,EAAE,wBAAwB;QAC9B,UAAU,EAAE,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC;KACxC,CAAC,CAAA;IACF,OAAO,6DAA6D,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAA;AACzF,CAAC;AAED,wDAAwD;AACxD,MAAM,UAAU,cAAc,CAAC,QAAqB;IAClD,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,oBAAoB,EAAE,CAAC,CAAC,CAAC,oBAAoB,EAAE,CAAA;AAChF,CAAC;AAED,kGAAkG;AAClG,MAAM,UAAU,SAAS,CAAC,QAAqB;IAC7C,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,YAAY,CAAA;AAC5D,CAAC;AAED,sCAAsC;AACtC,MAAM,UAAU,aAAa,CAAC,QAAqB;IACjD,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAA;AACpD,CAAC"}

package/package.json

@@ -0,0 +1,51 @@
+{
+  "name": "@cat-factory/cli",
+  "version": "0.2.1",
+  "description": "Bootstrap CLI for the Agent Architecture Board: scaffold a local-mode deployment (Node/local backend + frontend SPA) on your own machine — generates the crypto secrets, populates and gitignores the .env files, and mints a GitHub/GitLab personal access token by opening the browser at the right pre-scoped URL.",
+  "keywords": [
+    "bootstrap",
+    "cat-factory",
+    "cli",
+    "scaffold",
+    "self-host"
+  ],
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/kibertoad/cat-factory.git",
+    "directory": "backend/packages/cli"
+  },
+  "bin": {
+    "cat-factory": "./dist/bin.js"
+  },
+  "files": [
+    "dist"
+  ],
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    },
+    "./package.json": "./package.json"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "dependencies": {
+    "@clack/prompts": "^1.6.0"
+  },
+  "devDependencies": {
+    "@types/node": "^26.0.1",
+    "typescript": "7.0.1-rc",
+    "vitest": "^4.1.9"
+  },
+  "scripts": {
+    "build": "tsc -b tsconfig.build.json",
+    "start": "node dist/bin.js",
+    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "test": "vitest",
+    "test:run": "vitest run"
+  }
+}