@cleanslop/cli 0.0.0-stage → 0.1.0-beta.1.2

package/dist/commands/login.js

@@ -0,0 +1,198 @@
+import { CLIENT_ID, DEVICE_GRANT_TYPE, PACKAGE_VERSION } from "../config.js";
+import { deletePendingLogin, peekStoredCreds, readPendingLogin, resolveOrigin, storeToken, writePendingLogin, } from "../credentials.js";
+import { actionError, CliError, EXIT_ACTION, EXIT_OK, EXIT_UNEXPECTED, usageError, } from "../exit.js";
+import { detectAgentHint, gitToplevel, parseGithubRemote } from "../git.js";
+import { asErrorBody, httpRequest } from "../http.js";
+import { runLinkLogin } from "./link-login.js";
+/** Matches server DEVICE_EXTEND_TTL_MS — first /connect view extends the code. */
+export const DEVICE_POLL_GRACE_MS = 30 * 60 * 1000;
+export function devicePollDeadline(expiresAt) {
+    return expiresAt + DEVICE_POLL_GRACE_MS;
+}
+async function repoHint(deps) {
+    const top = await gitToplevel(deps, deps.env.cwd());
+    if (!top)
+        return undefined;
+    const remote = await deps.git(["remote", "get-url", "origin"], top);
+    if (!remote.ok)
+        return undefined;
+    return parseGithubRemote(remote.stdout)?.fullName;
+}
+function printApproval(deps, device) {
+    deps.io.stderr(`${device.verificationUriComplete}\n`);
+    deps.io.stderr(`${device.userCode}\n`);
+    deps.io.stderr([
+        "CLEANSLOP_ACTION_REQUIRED: approve",
+        "",
+        `Ask the human to open ${device.verificationUriComplete} and confirm code ${device.userCode}.`,
+        "Do not open or approve it yourself.",
+        "",
+    ].join("\n"));
+}
+async function pollDeviceToken(deps, origin, device) {
+    let intervalMs = Math.max(3, device.interval) * 1000;
+    const deadline = devicePollDeadline(device.expiresAt);
+    while (deps.clock.now() < deadline) {
+        await deps.clock.sleep(intervalMs);
+        let tokenRes;
+        try {
+            tokenRes = await httpRequest(deps, origin, "POST", "/oauth/token", {
+                body: {
+                    grant_type: DEVICE_GRANT_TYPE,
+                    device_code: device.deviceCode,
+                    client_id: CLIENT_ID,
+                },
+            });
+        }
+        catch (err) {
+            if (err instanceof CliError && err.exitCode === EXIT_UNEXPECTED) {
+                continue;
+            }
+            throw err;
+        }
+        if (tokenRes.status >= 500) {
+            continue;
+        }
+        const body = asErrorBody(tokenRes.json);
+        const err = body.error;
+        if (tokenRes.status >= 200 && tokenRes.status < 300) {
+            const issued = tokenRes.json;
+            if (!issued || typeof issued.access_token !== "string") {
+                throw new CliError("Token response was missing access_token.", EXIT_UNEXPECTED);
+            }
+            const login = issued.account?.github_login ?? null;
+            const prior = peekStoredCreds(deps, origin);
+            await storeToken(deps, origin, {
+                token: issued.access_token,
+                githubLogin: login,
+                grantId: issued.grant_id ?? null,
+            });
+            if (prior?.token) {
+                try {
+                    await httpRequest(deps, origin, "POST", "/oauth/revoke", {
+                        token: prior.token,
+                        body: { token: prior.token },
+                    });
+                }
+                catch {
+                    // Best-effort; the new login is already stored.
+                }
+            }
+            deletePendingLogin(deps);
+            const label = login ? `@${login}` : "your GitHub account";
+            deps.io.stdout(`Connected as ${label}\n`);
+            return EXIT_OK;
+        }
+        if (err === "authorization_pending") {
+            continue;
+        }
+        if (err === "slow_down") {
+            intervalMs += 5000;
+            continue;
+        }
+        if (err === "access_denied" || err === "expired_token" || err === "invalid_grant") {
+            deletePendingLogin(deps);
+            throw actionError(body.error_description ?? body.message ?? err, {
+                kind: "approve",
+                humanPrompt: body.error_description ??
+                    "The human denied or the code expired. Run `cleanslop login` again.",
+                url: device.verificationUriComplete,
+                code: device.userCode,
+            });
+        }
+        throw new CliError(body.error_description ?? body.message ?? "Token poll failed.", EXIT_ACTION);
+    }
+    deletePendingLogin(deps);
+    throw actionError("Device login timed out.", {
+        kind: "approve",
+        humanPrompt: "The device code expired. Run `cleanslop login` again.",
+        url: device.verificationUriComplete,
+        code: device.userCode,
+    });
+}
+export async function runLogin(deps, args) {
+    if (args.link) {
+        return runLinkLogin(deps, args);
+    }
+    if (args.noWait && args.resume) {
+        throw usageError("Use either --no-wait or --resume, not both.");
+    }
+    const origin = resolveOrigin(deps);
+    if (args.resume) {
+        const pending = readPendingLogin(deps);
+        if (!pending || pending.origin !== origin) {
+            throw actionError("No pending device login for this origin.", {
+                kind: "approve",
+                humanPrompt: "Run `cleanslop login --no-wait` and ask the human to approve the code.",
+            });
+        }
+        if (deps.clock.now() >= devicePollDeadline(pending.expiresAt)) {
+            deletePendingLogin(deps);
+            throw actionError("The pending device code expired.", {
+                kind: "approve",
+                humanPrompt: "Run `cleanslop login` again.",
+                url: pending.verificationUriComplete,
+                code: pending.userCode,
+            });
+        }
+        printApproval(deps, {
+            verificationUriComplete: pending.verificationUriComplete,
+            userCode: pending.userCode,
+        });
+        return pollDeviceToken(deps, origin, {
+            deviceCode: pending.deviceCode,
+            userCode: pending.userCode,
+            verificationUriComplete: pending.verificationUriComplete,
+            interval: pending.interval,
+            expiresAt: pending.expiresAt,
+        });
+    }
+    const started = await httpRequest(deps, origin, "POST", "/oauth/device_authorization", {
+        body: {
+            client_id: CLIENT_ID,
+            client: { name: CLIENT_ID, version: PACKAGE_VERSION },
+            agent: detectAgentHint(deps.env),
+            host: deps.env.hostname().slice(0, 64),
+            repo: await repoHint(deps),
+        },
+    });
+    if (started.status >= 400) {
+        const body = asErrorBody(started.json);
+        throw new CliError(body.message ?? body.error_description ?? "Could not start device login.", started.status === 503 ? EXIT_UNEXPECTED : EXIT_ACTION);
+    }
+    const device = started.json;
+    if (!device ||
+        typeof device.device_code !== "string" ||
+        typeof device.user_code !== "string" ||
+        typeof device.verification_uri_complete !== "string") {
+        throw new CliError("Device authorization response was invalid.", EXIT_UNEXPECTED);
+    }
+    const intervalSec = Math.max(3, Number(device.interval) || 5);
+    const expiresSec = Number(device.expires_in);
+    const ttlSec = Number.isFinite(expiresSec) ? expiresSec : 600;
+    const expiresAt = deps.clock.now() + ttlSec * 1000;
+    printApproval(deps, {
+        verificationUriComplete: device.verification_uri_complete,
+        userCode: device.user_code,
+    });
+    if (args.noWait) {
+        await writePendingLogin(deps, {
+            version: 1,
+            origin,
+            deviceCode: device.device_code,
+            userCode: device.user_code,
+            verificationUriComplete: device.verification_uri_complete,
+            expiresAt,
+            interval: intervalSec,
+        });
+        return EXIT_ACTION;
+    }
+    return pollDeviceToken(deps, origin, {
+        deviceCode: device.device_code,
+        userCode: device.user_code,
+        verificationUriComplete: device.verification_uri_complete,
+        interval: intervalSec,
+        expiresAt,
+    });
+}
+//# sourceMappingURL=login.js.map

package/dist/commands/login.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"login.js","sourceRoot":"","sources":["../../src/commands/login.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC7E,OAAO,EACL,kBAAkB,EAClB,eAAe,EACf,gBAAgB,EAChB,aAAa,EACb,UAAU,EACV,iBAAiB,GAClB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,WAAW,EACX,QAAQ,EACR,WAAW,EACX,OAAO,EACP,eAAe,EACf,UAAU,GACX,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAC5E,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAEtD,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAE/C,kFAAkF;AAClF,MAAM,CAAC,MAAM,oBAAoB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAEnD,MAAM,UAAU,kBAAkB,CAAC,SAAiB;IAClD,OAAO,SAAS,GAAG,oBAAoB,CAAC;AAC1C,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,IAAa;IACnC,MAAM,GAAG,GAAG,MAAM,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC;IACpD,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC3B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,QAAQ,CAAC,EAAE,GAAG,CAAC,CAAC;IACpE,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,SAAS,CAAC;IACjC,OAAO,iBAAiB,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC;AACpD,CAAC;AAED,SAAS,aAAa,CAAC,IAAa,EAAE,MAGrC;IACC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC,uBAAuB,IAAI,CAAC,CAAC;IACtD,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC,QAAQ,IAAI,CAAC,CAAC;IACvC,IAAI,CAAC,EAAE,CAAC,MAAM,CACZ;QACE,oCAAoC;QACpC,EAAE;QACF,yBAAyB,MAAM,CAAC,uBAAuB,qBAAqB,MAAM,CAAC,QAAQ,GAAG;QAC9F,qCAAqC;QACrC,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,eAAe,CAC5B,IAAa,EACb,MAAc,EACd,MAMC;IAED,IAAI,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC;IACrD,MAAM,QAAQ,GAAG,kBAAkB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAEtD,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;QACnC,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACnC,IAAI,QAAQ,CAAC;QACb,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE;gBACjE,IAAI,EAAE;oBACJ,UAAU,EAAE,iBAAiB;oBAC7B,WAAW,EAAE,MAAM,CAAC,UAAU;oBAC9B,SAAS,EAAE,SAAS;iBACrB;aACF,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,QAAQ,IAAI,GAAG,CAAC,QAAQ,KAAK,eAAe,EAAE,CAAC;gBAChE,SAAS;YACX,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;QACD,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;YAC3B,SAAS;QACX,CAAC;QACD,MAAM,IAAI,GAAG,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACxC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC;QACvB,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;YACpD,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAkC,CAAC;YAC3D,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,CAAC,YAAY,KAAK,QAAQ,EAAE,CAAC;gBACvD,MAAM,IAAI,QAAQ,CAAC,0CAA0C,EAAE,eAAe,CAAC,CAAC;YAClF,CAAC;YACD,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,EAAE,YAAY,IAAI,IAAI,CAAC;YACnD,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YAC5C,MAAM,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE;gBAC7B,KAAK,EAAE,MAAM,CAAC,YAAY;gBAC1B,WAAW,EAAE,KAAK;gBAClB,OAAO,EAAE,MAAM,CAAC,QAAQ,IAAI,IAAI;aACjC,CAAC,CAAC;YACH,IAAI,KAAK,EAAE,KAAK,EAAE,CAAC;gBACjB,IAAI,CAAC;oBACH,MAAM,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,EAAE;wBACvD,KAAK,EAAE,KAAK,CAAC,KAAK;wBAClB,IAAI,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE;qBAC7B,CAAC,CAAC;gBACL,CAAC;gBAAC,MAAM,CAAC;oBACP,gDAAgD;gBAClD,CAAC;YACH,CAAC;YACD,kBAAkB,CAAC,IAAI,CAAC,CAAC;YACzB,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,qBAAqB,CAAC;YAC1D,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,gBAAgB,KAAK,IAAI,CAAC,CAAC;YAC1C,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,IAAI,GAAG,KAAK,uBAAuB,EAAE,CAAC;YACpC,SAAS;QACX,CAAC;QACD,IAAI,GAAG,KAAK,WAAW,EAAE,CAAC;YACxB,UAAU,IAAI,IAAI,CAAC;YACnB,SAAS;QACX,CAAC;QACD,IAAI,GAAG,KAAK,eAAe,IAAI,GAAG,KAAK,eAAe,IAAI,GAAG,KAAK,eAAe,EAAE,CAAC;YAClF,kBAAkB,CAAC,IAAI,CAAC,CAAC;YACzB,MAAM,WAAW,CACf,IAAI,CAAC,iBAAiB,IAAI,IAAI,CAAC,OAAO,IAAI,GAAG,EAC7C;gBACE,IAAI,EAAE,SAAS;gBACf,WAAW,EACT,IAAI,CAAC,iBAAiB;oBACtB,oEAAoE;gBACtE,GAAG,EAAE,MAAM,CAAC,uBAAuB;gBACnC,IAAI,EAAE,MAAM,CAAC,QAAQ;aACtB,CACF,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,QAAQ,CAChB,IAAI,CAAC,iBAAiB,IAAI,IAAI,CAAC,OAAO,IAAI,oBAAoB,EAC9D,WAAW,CACZ,CAAC;IACJ,CAAC;IAED,kBAAkB,CAAC,IAAI,CAAC,CAAC;IACzB,MAAM,WAAW,CAAC,yBAAyB,EAAE;QAC3C,IAAI,EAAE,SAAS;QACf,WAAW,EAAE,uDAAuD;QACpE,GAAG,EAAE,MAAM,CAAC,uBAAuB;QACnC,IAAI,EAAE,MAAM,CAAC,QAAQ;KACtB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,IAAa,EACb,IAAgB;IAEhB,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACd,OAAO,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAClC,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAC/B,MAAM,UAAU,CAAC,6CAA6C,CAAC,CAAC;IAClE,CAAC;IAED,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IAEnC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAChB,MAAM,OAAO,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;QACvC,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC1C,MAAM,WAAW,CAAC,0CAA0C,EAAE;gBAC5D,IAAI,EAAE,SAAS;gBACf,WAAW,EAAE,wEAAwE;aACtF,CAAC,CAAC;QACL,CAAC;QACD,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,kBAAkB,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;YAC9D,kBAAkB,CAAC,IAAI,CAAC,CAAC;YACzB,MAAM,WAAW,CAAC,kCAAkC,EAAE;gBACpD,IAAI,EAAE,SAAS;gBACf,WAAW,EAAE,8BAA8B;gBAC3C,GAAG,EAAE,OAAO,CAAC,uBAAuB;gBACpC,IAAI,EAAE,OAAO,CAAC,QAAQ;aACvB,CAAC,CAAC;QACL,CAAC;QACD,aAAa,CAAC,IAAI,EAAE;YAClB,uBAAuB,EAAE,OAAO,CAAC,uBAAuB;YACxD,QAAQ,EAAE,OAAO,CAAC,QAAQ;SAC3B,CAAC,CAAC;QACH,OAAO,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE;YACnC,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,uBAAuB,EAAE,OAAO,CAAC,uBAAuB;YACxD,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,SAAS,EAAE,OAAO,CAAC,SAAS;SAC7B,CAAC,CAAC;IACL,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,WAAW,CAC/B,IAAI,EACJ,MAAM,EACN,MAAM,EACN,6BAA6B,EAC7B;QACE,IAAI,EAAE;YACJ,SAAS,EAAE,SAAS;YACpB,MAAM,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,eAAe,EAAE;YACrD,KAAK,EAAE,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC;YAChC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;YACtC,IAAI,EAAE,MAAM,QAAQ,CAAC,IAAI,CAAC;SAC3B;KACF,CACF,CAAC;IACF,IAAI,OAAO,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;QAC1B,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACvC,MAAM,IAAI,QAAQ,CAChB,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,iBAAiB,IAAI,+BAA+B,EACzE,OAAO,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,WAAW,CACvD,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,OAAO,CAAC,IAAkC,CAAC;IAC1D,IACE,CAAC,MAAM;QACP,OAAO,MAAM,CAAC,WAAW,KAAK,QAAQ;QACtC,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ;QACpC,OAAO,MAAM,CAAC,yBAAyB,KAAK,QAAQ,EACpD,CAAC;QACD,MAAM,IAAI,QAAQ,CAAC,4CAA4C,EAAE,eAAe,CAAC,CAAC;IACpF,CAAC;IAED,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9D,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAC7C,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC;IAC9D,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,MAAM,GAAG,IAAI,CAAC;IAEnD,aAAa,CAAC,IAAI,EAAE;QAClB,uBAAuB,EAAE,MAAM,CAAC,yBAAyB;QACzD,QAAQ,EAAE,MAAM,CAAC,SAAS;KAC3B,CAAC,CAAC;IAEH,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAChB,MAAM,iBAAiB,CAAC,IAAI,EAAE;YAC5B,OAAO,EAAE,CAAC;YACV,MAAM;YACN,UAAU,EAAE,MAAM,CAAC,WAAW;YAC9B,QAAQ,EAAE,MAAM,CAAC,SAAS;YAC1B,uBAAuB,EAAE,MAAM,CAAC,yBAAyB;YACzD,SAAS;YACT,QAAQ,EAAE,WAAW;SACtB,CAAC,CAAC;QACH,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,OAAO,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE;QACnC,UAAU,EAAE,MAAM,CAAC,WAAW;QAC9B,QAAQ,EAAE,MAAM,CAAC,SAAS;QAC1B,uBAAuB,EAAE,MAAM,CAAC,yBAAyB;QACzD,QAAQ,EAAE,WAAW;QACrB,SAAS;KACV,CAAC,CAAC;AACL,CAAC"}

package/dist/commands/logout.d.ts

@@ -0,0 +1,2 @@
+import type { CliDeps } from "../deps.js";
+export declare function runLogout(deps: CliDeps): Promise<number>;

package/dist/commands/logout.js

@@ -0,0 +1,40 @@
+import { deleteOriginCreds, deletePendingLogin, resolveOrigin, resolveToken, } from "../credentials.js";
+import { EXIT_OK, EXIT_UNEXPECTED } from "../exit.js";
+import { httpRequest } from "../http.js";
+export async function runLogout(deps) {
+    const origin = resolveOrigin(deps);
+    const creds = resolveToken(deps, origin);
+    let revokeFailed = false;
+    if (creds) {
+        try {
+            const result = await httpRequest(deps, origin, "POST", "/oauth/revoke", {
+                token: creds.token,
+                body: { token: creds.token },
+            });
+            if (result.status < 200 || result.status >= 300) {
+                deps.io.stderr(`Could not revoke the token (HTTP ${result.status}).\n`);
+                revokeFailed = true;
+            }
+        }
+        catch (err) {
+            const message = err instanceof Error ? err.message : String(err);
+            deps.io.stderr(`Could not revoke the token: ${message}\n`);
+            revokeFailed = true;
+        }
+    }
+    if (creds?.source !== "env") {
+        await deleteOriginCreds(deps, origin);
+    }
+    deletePendingLogin(deps);
+    if (creds?.source === "env") {
+        deps.io.stdout("Disconnected. File credentials were left in place because CLEANSLOP_TOKEN is set.\n");
+        return EXIT_OK;
+    }
+    if (revokeFailed) {
+        deps.io.stdout("Removed local credentials, but the server did not confirm revocation. Revoke this agent under Account → Connected agents.\n");
+        return EXIT_UNEXPECTED;
+    }
+    deps.io.stdout("Disconnected.\n");
+    return EXIT_OK;
+}
+//# sourceMappingURL=logout.js.map

package/dist/commands/logout.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logout.js","sourceRoot":"","sources":["../../src/commands/logout.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,iBAAiB,EACjB,kBAAkB,EAClB,aAAa,EACb,YAAY,GACb,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAAE,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AACtD,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAEzC,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,IAAa;IAC3C,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IACnC,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACzC,IAAI,YAAY,GAAG,KAAK,CAAC;IACzB,IAAI,KAAK,EAAE,CAAC;QACV,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,EAAE;gBACtE,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,IAAI,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE;aAC7B,CAAC,CAAC;YACH,IAAI,MAAM,CAAC,MAAM,GAAG,GAAG,IAAI,MAAM,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;gBAChD,IAAI,CAAC,EAAE,CAAC,MAAM,CACZ,oCAAoC,MAAM,CAAC,MAAM,MAAM,CACxD,CAAC;gBACF,YAAY,GAAG,IAAI,CAAC;YACtB,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjE,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,+BAA+B,OAAO,IAAI,CAAC,CAAC;YAC3D,YAAY,GAAG,IAAI,CAAC;QACtB,CAAC;IACH,CAAC;IACD,IAAI,KAAK,EAAE,MAAM,KAAK,KAAK,EAAE,CAAC;QAC5B,MAAM,iBAAiB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACxC,CAAC;IACD,kBAAkB,CAAC,IAAI,CAAC,CAAC;IACzB,IAAI,KAAK,EAAE,MAAM,KAAK,KAAK,EAAE,CAAC;QAC5B,IAAI,CAAC,EAAE,CAAC,MAAM,CACZ,qFAAqF,CACtF,CAAC;QACF,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,IAAI,YAAY,EAAE,CAAC;QACjB,IAAI,CAAC,EAAE,CAAC,MAAM,CACZ,6HAA6H,CAC9H,CAAC;QACF,OAAO,eAAe,CAAC;IACzB,CAAC;IACD,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;IAClC,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/commands/report.d.ts

@@ -0,0 +1,8 @@
+import type { CliDeps } from "../deps.js";
+import type { ParsedArgs } from "../types.js";
+export declare function resolveScanId(deps: CliDeps, origin: string, id: string | null): string;
+export declare function fetchReport(deps: CliDeps, origin: string, token: string, scanId: string, format: "md" | "json", preview: boolean): Promise<{
+    markdown: string | null;
+    report: unknown | null;
+}>;
+export declare function runReport(deps: CliDeps, args: ParsedArgs): Promise<number>;

package/dist/commands/report.js

@@ -0,0 +1,55 @@
+import { requireToken, resolveOrigin, peekStoredCreds, } from "../credentials.js";
+import { CliError, EXIT_OK, EXIT_RUNNING, usageError } from "../exit.js";
+import { asErrorBody, httpRequest, requireOk } from "../http.js";
+import { writeJson, writeMarkdownReport } from "../output.js";
+import { writeResume } from "../action.js";
+export function resolveScanId(deps, origin, id) {
+    if (id)
+        return id;
+    const stored = peekStoredCreds(deps, origin);
+    if (stored?.lastScanId)
+        return stored.lastScanId;
+    throw usageError("Pass a scan id or run a scan first.");
+}
+export async function fetchReport(deps, origin, token, scanId, format, preview) {
+    const params = new URLSearchParams({ format });
+    if (preview)
+        params.set("preview", "1");
+    const result = await httpRequest(deps, origin, "GET", `/api/agent/v1/scans/${encodeURIComponent(scanId)}/report?${params.toString()}`, {
+        token,
+        accept: format === "md" ? "text/markdown, application/json" : "application/json",
+    });
+    if (result.status === 409) {
+        const body = asErrorBody(result.json);
+        if (body.error === "report_not_ready") {
+            throw new CliError(body.message ?? "Report is not ready yet.", EXIT_RUNNING);
+        }
+    }
+    requireOk(result);
+    if (format === "md") {
+        return { markdown: result.text, report: result.json };
+    }
+    return { markdown: null, report: result.json };
+}
+export async function runReport(deps, args) {
+    const origin = resolveOrigin(deps);
+    const creds = requireToken(deps, origin);
+    const scanId = resolveScanId(deps, origin, args.id);
+    try {
+        const fetched = await fetchReport(deps, origin, creds.token, scanId, args.json ? "json" : args.format, args.preview);
+        if (args.json) {
+            writeJson(deps, fetched.report);
+        }
+        else {
+            writeMarkdownReport(deps, fetched.markdown ?? "");
+        }
+        return EXIT_OK;
+    }
+    catch (err) {
+        if (err instanceof CliError && err.exitCode === EXIT_RUNNING) {
+            writeResume(deps, scanId);
+        }
+        throw err;
+    }
+}
+//# sourceMappingURL=report.js.map

package/dist/commands/report.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"report.js","sourceRoot":"","sources":["../../src/commands/report.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,YAAY,EACZ,aAAa,EACb,eAAe,GAChB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AACzE,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACjE,OAAO,EAAE,SAAS,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAC9D,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAG3C,MAAM,UAAU,aAAa,CAC3B,IAAa,EACb,MAAc,EACd,EAAiB;IAEjB,IAAI,EAAE;QAAE,OAAO,EAAE,CAAC;IAClB,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC7C,IAAI,MAAM,EAAE,UAAU;QAAE,OAAO,MAAM,CAAC,UAAU,CAAC;IACjD,MAAM,UAAU,CAAC,qCAAqC,CAAC,CAAC;AAC1D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,IAAa,EACb,MAAc,EACd,KAAa,EACb,MAAc,EACd,MAAqB,EACrB,OAAgB;IAEhB,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;IAC/C,IAAI,OAAO;QAAE,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;IACxC,MAAM,MAAM,GAAG,MAAM,WAAW,CAC9B,IAAI,EACJ,MAAM,EACN,KAAK,EACL,uBAAuB,kBAAkB,CAAC,MAAM,CAAC,WAAW,MAAM,CAAC,QAAQ,EAAE,EAAE,EAC/E;QACE,KAAK;QACL,MAAM,EAAE,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,iCAAiC,CAAC,CAAC,CAAC,kBAAkB;KACjF,CACF,CAAC;IACF,IAAI,MAAM,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC1B,MAAM,IAAI,GAAG,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACtC,IAAI,IAAI,CAAC,KAAK,KAAK,kBAAkB,EAAE,CAAC;YACtC,MAAM,IAAI,QAAQ,CAChB,IAAI,CAAC,OAAO,IAAI,0BAA0B,EAC1C,YAAY,CACb,CAAC;QACJ,CAAC;IACH,CAAC;IACD,SAAS,CAAC,MAAM,CAAC,CAAC;IAClB,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACpB,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;IACxD,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;AACjD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,IAAa,EACb,IAAgB;IAEhB,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IACnC,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACzC,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;IACpD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,WAAW,CAC/B,IAAI,EACJ,MAAM,EACN,KAAK,CAAC,KAAK,EACX,MAAM,EACN,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,EAChC,IAAI,CAAC,OAAO,CACb,CAAC;QACF,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,SAAS,CAAC,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QAClC,CAAC;aAAM,CAAC;YACN,mBAAmB,CAAC,IAAI,EAAE,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;QACpD,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,QAAQ,IAAI,GAAG,CAAC,QAAQ,KAAK,YAAY,EAAE,CAAC;YAC7D,WAAW,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC5B,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC"}

package/dist/commands/scan-upload.d.ts

@@ -0,0 +1,3 @@
+import type { CliDeps } from "../deps.js";
+import type { ParsedArgs } from "../types.js";
+export declare function runUploadScan(deps: CliDeps, args: ParsedArgs): Promise<number>;

package/dist/commands/scan-upload.js

@@ -0,0 +1,85 @@
+import { writeAction, writeResume } from "../action.js";
+import { requireToken, resolveOrigin, storeLastScanId, } from "../credentials.js";
+import { CliError, EXIT_OK, EXIT_RUNNING, EXIT_SCAN_FAILED, EXIT_UNEXPECTED } from "../exit.js";
+import { recoverOutOfScansIfOffered } from "./credits.js";
+import { httpRequest, requireOk } from "../http.js";
+import { writeJson, writeMarkdownReport, writeScanProgress } from "../output.js";
+import { formatPackSummary, packManifest, planPack, writePackArchive, } from "../pack.js";
+import { fetchReport } from "./report.js";
+import { isScanFinal, waitForScan } from "../wait.js";
+export async function runUploadScan(deps, args) {
+    const origin = resolveOrigin(deps);
+    const creds = requireToken(deps, origin);
+    const plan = await planPack(deps);
+    deps.io.stderr(formatPackSummary(plan, args.dryRun));
+    if (args.dryRun)
+        return EXIT_OK;
+    const archive = await writePackArchive(plan);
+    const uploaded = await httpRequest(deps, origin, "POST", "/api/agent/v1/uploads", {
+        token: creds.token,
+        rawBody: new Uint8Array(archive.bytes),
+        contentType: "application/gzip",
+        headers: {
+            "CleanSlop-Upload-Manifest": JSON.stringify(packManifest(plan, archive.sha256)),
+        },
+    });
+    requireOk(uploaded);
+    const rec = uploaded.json;
+    if (!rec || typeof rec.uploadId !== "string") {
+        throw new CliError("Upload response was missing uploadId.", EXIT_UNEXPECTED);
+    }
+    const headers = {};
+    if (args.force)
+        headers["Idempotency-Key"] = deps.randomId();
+    const startBody = {
+        uploadId: rec.uploadId,
+        force: args.force || undefined,
+        surface: "cli",
+    };
+    const postStart = () => httpRequest(deps, origin, "POST", "/api/agent/v1/scans", {
+        token: creds.token,
+        headers,
+        body: startBody,
+    });
+    const started = await recoverOutOfScansIfOffered(deps, args, await postStart(), postStart);
+    requireOk(started);
+    const payload = started.json;
+    if (!payload?.scan?.id) {
+        throw new CliError("Scan create response was invalid.", EXIT_UNEXPECTED);
+    }
+    const scan0 = payload.scan;
+    await storeLastScanId(deps, origin, scan0.id);
+    writeScanProgress(deps, scan0);
+    let scan = scan0;
+    if (!isScanFinal(scan) && args.wait) {
+        scan = await waitForScan(deps, origin, creds.token, scan0.id, args.waitMs);
+        writeScanProgress(deps, scan);
+    }
+    if (scan.status === "failed") {
+        throw new CliError(scan.error?.message ?? "Scan failed.", EXIT_SCAN_FAILED);
+    }
+    const wantReport = isScanFinal(scan) || args.preview;
+    if (!wantReport) {
+        writeResume(deps, scan.id);
+        throw new CliError("Scan is still running.", EXIT_RUNNING);
+    }
+    try {
+        const fetched = await fetchReport(deps, origin, creds.token, scan.id, args.json ? "json" : "md", args.preview && !scan.final);
+        if (args.json) {
+            writeJson(deps, { scan, report: fetched.report });
+        }
+        else if (fetched.markdown) {
+            writeMarkdownReport(deps, fetched.markdown);
+        }
+    }
+    catch (err) {
+        if (err instanceof CliError && err.exitCode === EXIT_RUNNING) {
+            writeResume(deps, scan.id);
+            if (err.action)
+                writeAction(deps, err.action);
+        }
+        throw err;
+    }
+    return EXIT_OK;
+}
+//# sourceMappingURL=scan-upload.js.map

package/dist/commands/scan-upload.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scan-upload.js","sourceRoot":"","sources":["../../src/commands/scan-upload.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AACxD,OAAO,EACL,YAAY,EACZ,aAAa,EACb,eAAe,GAChB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAChG,OAAO,EAAE,0BAA0B,EAAE,MAAM,cAAc,CAAC;AAC1D,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACpD,OAAO,EAAE,SAAS,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACjF,OAAO,EACL,iBAAiB,EACjB,YAAY,EACZ,QAAQ,EACR,gBAAgB,GACjB,MAAM,YAAY,CAAC;AAEpB,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAEtD,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,IAAa,EACb,IAAgB;IAEhB,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IACnC,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACzC,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;IAClC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,iBAAiB,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;IACrD,IAAI,IAAI,CAAC,MAAM;QAAE,OAAO,OAAO,CAAC;IAEhC,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,CAAC;IAC7C,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,uBAAuB,EAAE;QAChF,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,OAAO,EAAE,IAAI,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC;QACtC,WAAW,EAAE,kBAAkB;QAC/B,OAAO,EAAE;YACP,2BAA2B,EAAE,IAAI,CAAC,SAAS,CACzC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,CACnC;SACF;KACF,CAAC,CAAC;IACH,SAAS,CAAC,QAAQ,CAAC,CAAC;IACpB,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAoC,CAAC;IAC1D,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC7C,MAAM,IAAI,QAAQ,CAAC,uCAAuC,EAAE,eAAe,CAAC,CAAC;IAC/E,CAAC;IAED,MAAM,OAAO,GAA2B,EAAE,CAAC;IAC3C,IAAI,IAAI,CAAC,KAAK;QAAE,OAAO,CAAC,iBAAiB,CAAC,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;IAC7D,MAAM,SAAS,GAAG;QAChB,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,SAAS;QAC9B,OAAO,EAAE,KAAK;KACf,CAAC;IACF,MAAM,SAAS,GAAG,GAAG,EAAE,CACrB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,qBAAqB,EAAE;QACvD,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,OAAO;QACP,IAAI,EAAE,SAAS;KAChB,CAAC,CAAC;IACL,MAAM,OAAO,GAAG,MAAM,0BAA0B,CAC9C,IAAI,EACJ,IAAI,EACJ,MAAM,SAAS,EAAE,EACjB,SAAS,CACV,CAAC;IACF,SAAS,CAAC,OAAO,CAAC,CAAC;IACnB,MAAM,OAAO,GAAG,OAAO,CAAC,IAAgC,CAAC;IACzD,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;QACvB,MAAM,IAAI,QAAQ,CAAC,mCAAmC,EAAE,eAAe,CAAC,CAAC;IAC3E,CAAC;IACD,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC;IAC3B,MAAM,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;IAC9C,iBAAiB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAE/B,IAAI,IAAI,GAAG,KAAK,CAAC;IACjB,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACpC,IAAI,GAAG,MAAM,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAC3E,iBAAiB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAChC,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC7B,MAAM,IAAI,QAAQ,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,IAAI,cAAc,EAAE,gBAAgB,CAAC,CAAC;IAC9E,CAAC;IACD,MAAM,UAAU,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC;IACrD,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;QAC3B,MAAM,IAAI,QAAQ,CAAC,wBAAwB,EAAE,YAAY,CAAC,CAAC;IAC7D,CAAC;IACD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,WAAW,CAC/B,IAAI,EACJ,MAAM,EACN,KAAK,CAAC,KAAK,EACX,IAAI,CAAC,EAAE,EACP,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EACzB,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,CAC5B,CAAC;QACF,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,SAAS,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QACpD,CAAC;aAAM,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;YAC5B,mBAAmB,CAAC,IAAI,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,QAAQ,IAAI,GAAG,CAAC,QAAQ,KAAK,YAAY,EAAE,CAAC;YAC7D,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;YAC3B,IAAI,GAAG,CAAC,MAAM;gBAAE,WAAW,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;QAChD,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/commands/scan.d.ts

@@ -0,0 +1,3 @@
+import type { CliDeps } from "../deps.js";
+import type { ParsedArgs } from "../types.js";
+export declare function runScan(deps: CliDeps, args: ParsedArgs): Promise<number>;

package/dist/commands/scan.js

@@ -0,0 +1,81 @@
+import { writeAction, writeResume } from "../action.js";
+import { requireToken, resolveOrigin, storeLastScanId, } from "../credentials.js";
+import { CliError, EXIT_OK, EXIT_RUNNING, EXIT_SCAN_FAILED, EXIT_UNEXPECTED, } from "../exit.js";
+import { assertGithubReady, inspectGit } from "../git.js";
+import { recoverOutOfScansIfOffered } from "./credits.js";
+import { httpRequest, requireOk } from "../http.js";
+import { writeJson, writeMarkdownReport, writeScanProgress } from "../output.js";
+import { fetchReport } from "./report.js";
+import { runUploadScan } from "./scan-upload.js";
+import { isScanFinal, waitForScan } from "../wait.js";
+export async function runScan(deps, args) {
+    const origin = resolveOrigin(deps);
+    const creds = requireToken(deps, origin);
+    const meRes = await httpRequest(deps, origin, "GET", "/api/agent/v1/me", {
+        token: creds.token,
+    });
+    requireOk(meRes);
+    const me = (meRes.json ?? {});
+    if (me.uploads === true) {
+        return runUploadScan(deps, args);
+    }
+    const git = await inspectGit(deps);
+    assertGithubReady(git);
+    const headers = {};
+    if (args.force) {
+        headers["Idempotency-Key"] = deps.randomId();
+    }
+    const startBody = {
+        remote: git.remote,
+        commitSha: git.commitSha,
+        branch: git.branch,
+        force: args.force || undefined,
+        surface: "cli",
+    };
+    const postStart = () => httpRequest(deps, origin, "POST", "/api/agent/v1/scans", {
+        token: creds.token,
+        headers,
+        body: startBody,
+    });
+    const started = await recoverOutOfScansIfOffered(deps, args, await postStart(), postStart);
+    requireOk(started);
+    const payload = started.json;
+    if (!payload?.scan?.id) {
+        throw new CliError("Scan create response was invalid.", EXIT_UNEXPECTED);
+    }
+    const scan0 = payload.scan;
+    await storeLastScanId(deps, origin, scan0.id);
+    writeScanProgress(deps, scan0);
+    let scan = scan0;
+    if (!isScanFinal(scan) && args.wait) {
+        scan = await waitForScan(deps, origin, creds.token, scan0.id, args.waitMs);
+        writeScanProgress(deps, scan);
+    }
+    if (scan.status === "failed") {
+        throw new CliError(scan.error?.message ?? "Scan failed.", EXIT_SCAN_FAILED);
+    }
+    const wantReport = isScanFinal(scan) || args.preview;
+    if (!wantReport) {
+        writeResume(deps, scan.id, scan);
+        throw new CliError("Scan is still running.", EXIT_RUNNING);
+    }
+    try {
+        const fetched = await fetchReport(deps, origin, creds.token, scan.id, args.json ? "json" : "md", args.preview && !scan.final);
+        if (args.json) {
+            writeJson(deps, { scan, report: fetched.report });
+        }
+        else if (fetched.markdown) {
+            writeMarkdownReport(deps, fetched.markdown);
+        }
+    }
+    catch (err) {
+        if (err instanceof CliError && err.exitCode === EXIT_RUNNING) {
+            writeResume(deps, scan.id, scan);
+            if (err.action)
+                writeAction(deps, err.action);
+        }
+        throw err;
+    }
+    return EXIT_OK;
+}
+//# sourceMappingURL=scan.js.map

package/dist/commands/scan.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scan.js","sourceRoot":"","sources":["../../src/commands/scan.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AACxD,OAAO,EACL,YAAY,EACZ,aAAa,EACb,eAAe,GAChB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,QAAQ,EACR,OAAO,EACP,YAAY,EACZ,gBAAgB,EAChB,eAAe,GAChB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAC1D,OAAO,EAAE,0BAA0B,EAAE,MAAM,cAAc,CAAC;AAC1D,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACpD,OAAO,EAAE,SAAS,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAEjF,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAEtD,MAAM,CAAC,KAAK,UAAU,OAAO,CAC3B,IAAa,EACb,IAAgB;IAEhB,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IACnC,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACzC,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,kBAAkB,EAAE;QACvE,KAAK,EAAE,KAAK,CAAC,KAAK;KACnB,CAAC,CAAC;IACH,SAAS,CAAC,KAAK,CAAC,CAAC;IACjB,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAe,CAAC;IAC5C,IAAI,EAAE,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;QACxB,OAAO,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACnC,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC;IACnC,iBAAiB,CAAC,GAAG,CAAC,CAAC;IAEvB,MAAM,OAAO,GAA2B,EAAE,CAAC;IAC3C,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,iBAAiB,CAAC,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;IAC/C,CAAC;IAED,MAAM,SAAS,GAAG;QAChB,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,SAAS;QAC9B,OAAO,EAAE,KAAK;KACf,CAAC;IACF,MAAM,SAAS,GAAG,GAAG,EAAE,CACrB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,qBAAqB,EAAE;QACvD,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,OAAO;QACP,IAAI,EAAE,SAAS;KAChB,CAAC,CAAC;IACL,MAAM,OAAO,GAAG,MAAM,0BAA0B,CAC9C,IAAI,EACJ,IAAI,EACJ,MAAM,SAAS,EAAE,EACjB,SAAS,CACV,CAAC;IACF,SAAS,CAAC,OAAO,CAAC,CAAC;IACnB,MAAM,OAAO,GAAG,OAAO,CAAC,IAAgC,CAAC;IACzD,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;QACvB,MAAM,IAAI,QAAQ,CAAC,mCAAmC,EAAE,eAAe,CAAC,CAAC;IAC3E,CAAC;IACD,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC;IAC3B,MAAM,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;IAC9C,iBAAiB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAE/B,IAAI,IAAI,GAAG,KAAK,CAAC;IACjB,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACpC,IAAI,GAAG,MAAM,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAC3E,iBAAiB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAChC,CAAC;IAED,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC7B,MAAM,IAAI,QAAQ,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,IAAI,cAAc,EAAE,gBAAgB,CAAC,CAAC;IAC9E,CAAC;IAED,MAAM,UAAU,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC;IACrD,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QACjC,MAAM,IAAI,QAAQ,CAAC,wBAAwB,EAAE,YAAY,CAAC,CAAC;IAC7D,CAAC;IAED,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,WAAW,CAC/B,IAAI,EACJ,MAAM,EACN,KAAK,CAAC,KAAK,EACX,IAAI,CAAC,EAAE,EACP,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EACzB,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,CAC5B,CAAC;QACF,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,SAAS,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QACpD,CAAC;aAAM,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;YAC5B,mBAAmB,CAAC,IAAI,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,QAAQ,IAAI,GAAG,CAAC,QAAQ,KAAK,YAAY,EAAE,CAAC;YAC7D,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;YACjC,IAAI,GAAG,CAAC,MAAM;gBAAE,WAAW,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;QAChD,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/commands/setup.d.ts

@@ -0,0 +1,19 @@
+import type { CliDeps } from "../deps.js";
+export type SetupTarget = {
+    id: "claude" | "cursor" | "codex" | "agents";
+    label: string;
+    path: string;
+    kind: "owned" | "marker";
+    render: (core: string) => string;
+};
+export declare function setupTargets(deps: CliDeps, project: boolean): SetupTarget[];
+export declare function runSetup(deps: CliDeps, args: {
+    dryRun: boolean;
+    uninstall: boolean;
+    project: boolean;
+    yes: boolean;
+}): Promise<number>;
+export declare const SETUP_MARKERS: {
+    begin: string;
+    end: string;
+};