@cleanslop/cli 0.0.0-stage → 0.1.0-beta.1.2

package/dist/http.js

@@ -0,0 +1,210 @@
+import { USER_AGENT } from "./config.js";
+import { actionError, CliError, EXIT_ACTION, EXIT_PAYMENT, EXIT_POLICY, EXIT_RUNNING, EXIT_SCAN_FAILED, EXIT_SOURCE, EXIT_UNEXPECTED, EXIT_USAGE, } from "./exit.js";
+export function hasIdentityPresentationChallenge(result) {
+    if (result.status !== 401)
+        return false;
+    const body = asErrorBody(result.json);
+    if (body.error === "identity_presentation_required")
+        return true;
+    const www = result.headers.get("www-authenticate") ?? "";
+    return /identity-presentation/i.test(www);
+}
+export function asRecord(value) {
+    if (value && typeof value === "object" && !Array.isArray(value)) {
+        return value;
+    }
+    return null;
+}
+export function asErrorBody(value) {
+    return (asRecord(value) ?? {});
+}
+export async function httpRequest(deps, origin, method, path, opts = {}) {
+    const url = `${origin}${path}`;
+    const headers = new Headers(opts.headers);
+    headers.set("User-Agent", USER_AGENT);
+    headers.set("Accept", opts.accept ?? "application/json");
+    if (opts.token) {
+        headers.set("Authorization", `Bearer ${opts.token}`);
+    }
+    if (opts.rawBody) {
+        headers.set("Content-Type", opts.contentType ?? "application/octet-stream");
+    }
+    else if (opts.body !== undefined) {
+        headers.set("Content-Type", opts.contentType ?? "application/json");
+    }
+    const init = {
+        method,
+        headers,
+        redirect: "manual",
+    };
+    if (opts.rawBody) {
+        init.body = Buffer.from(opts.rawBody);
+    }
+    else if (opts.body !== undefined) {
+        init.body = JSON.stringify(opts.body);
+    }
+    let response;
+    try {
+        response = await deps.request(url, init);
+    }
+    catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        throw new CliError(`Network error: ${message}`, EXIT_UNEXPECTED);
+    }
+    const text = await response.text();
+    let json = null;
+    if (text) {
+        try {
+            json = JSON.parse(text);
+        }
+        catch {
+            json = null;
+        }
+    }
+    return {
+        status: response.status,
+        headers: response.headers,
+        text,
+        json,
+    };
+}
+function actionFromBody(body, fallback) {
+    const kind = mapActionKind(body.action?.kind, fallback);
+    return {
+        kind,
+        humanPrompt: body.action?.humanPrompt ??
+            body.message ??
+            body.error_description ??
+            body.error ??
+            "A human action is required.",
+        url: body.action?.url,
+    };
+}
+function mapActionKind(raw, fallback) {
+    switch (raw) {
+        case "approve":
+        case "install":
+        case "top-up":
+        case "beta":
+        case "reauth":
+        case "present_identity":
+        case "link_existing":
+        case "ask_human":
+        case "ask_email":
+        case "wait":
+            return raw;
+        case "open_url":
+            return fallback;
+        default:
+            return fallback;
+    }
+}
+export function throwHttpError(result) {
+    const body = asErrorBody(result.json);
+    const code = body.error ?? "";
+    const message = body.message ?? body.error_description ?? code ?? `HTTP ${result.status}`;
+    if (hasIdentityPresentationChallenge(result)) {
+        throw new CliError(message, EXIT_ACTION, actionFromBody(body, "present_identity"));
+    }
+    switch (code) {
+        case "authorization_pending":
+        case "slow_down":
+            throw new CliError(message, EXIT_ACTION);
+        case "access_denied":
+        case "expired_token":
+        case "invalid_grant":
+            throw actionError(message, {
+                kind: "approve",
+                humanPrompt: message,
+            });
+        case "out_of_scans":
+            throw new CliError(message, EXIT_PAYMENT, actionFromBody(body, "top-up"));
+        case "repo_not_connected":
+            throw new CliError(message, EXIT_ACTION, actionFromBody(body, "install"));
+        case "github_reauth_required":
+        case "token_revoked":
+        case "token_expired":
+        case "invalid_token":
+            throw new CliError(message, EXIT_ACTION, actionFromBody(body, "reauth"));
+        case "account_exists":
+            throw new CliError(message, EXIT_ACTION, actionFromBody(body, "link_existing"));
+        case "link_pilot_required":
+        case "terms_required":
+        case "link_email_unverified":
+        case "link_email_mismatch":
+        case "link_email_in_use":
+        case "uploads_unavailable":
+        case "upload_quota":
+            throw new CliError(message, EXIT_POLICY, actionFromBody(body, "ask_human"));
+        case "link_unavailable":
+            throw new CliError(message, EXIT_UNEXPECTED);
+        case "beta_required":
+            throw new CliError(message, EXIT_POLICY, actionFromBody(body, "beta"));
+        case "waitlisted":
+        case "incomplete":
+        case "agent_daily_cap":
+        case "insufficient_scope":
+            throw new CliError(message, EXIT_POLICY, actionFromBody(body, "ask_human"));
+        case "commit_not_on_github":
+        case "unsupported_remote":
+            throw new CliError(message, EXIT_SOURCE, actionFromBody(body, "ask_human"));
+        case "scan_failed":
+            throw new CliError(message, EXIT_SCAN_FAILED, actionFromBody(body, "ask_human"));
+        case "rate_limited":
+        case "capacity":
+            throw new CliError(message, EXIT_RUNNING, actionFromBody(body, "wait"));
+        case "github_unavailable":
+            throw new CliError(message, EXIT_UNEXPECTED, actionFromBody(body, "wait"));
+        case "training_decision_required":
+            throw new CliError(message, EXIT_ACTION, actionFromBody(body, "ask_human"));
+        case "report_not_ready":
+        case "scan_in_progress":
+            throw new CliError(message, EXIT_RUNNING, actionFromBody(body, "wait"));
+        case "invalid_request":
+        case "invalid_client":
+        case "unsupported_grant_type":
+        case "prompt_must_quote_recipient":
+            throw new CliError(message, EXIT_USAGE);
+        case "no_verified_email":
+        case "done_alerts_disabled":
+        case "already_sent":
+        case "too_late":
+            throw new CliError(message, EXIT_POLICY, actionFromBody(body, "ask_human"));
+        default:
+            break;
+    }
+    if (result.status === 401) {
+        const www = result.headers.get("www-authenticate") ?? "";
+        if (/identity-presentation/i.test(www)) {
+            throw new CliError(message, EXIT_ACTION, actionFromBody(body, "present_identity"));
+        }
+        throw new CliError(message, EXIT_ACTION, actionFromBody(body, "reauth"));
+    }
+    if (result.status === 402) {
+        throw new CliError(message, EXIT_PAYMENT, actionFromBody(body, "top-up"));
+    }
+    if (result.status === 403) {
+        throw new CliError(message, EXIT_POLICY, actionFromBody(body, "ask_human"));
+    }
+    throw new CliError(message || `HTTP ${result.status}`, EXIT_UNEXPECTED);
+}
+export function requireOk(result) {
+    if (result.status >= 200 && result.status < 300)
+        return result;
+    throwHttpError(result);
+}
+export function retryAfterMs(result, fallback) {
+    const header = result.headers.get("retry-after");
+    if (header) {
+        const sec = Number(header);
+        if (Number.isFinite(sec) && sec >= 0)
+            return Math.max(sec * 1000, fallback);
+    }
+    const body = asErrorBody(result.json);
+    const retry = body.action?.retryAfterSec;
+    if (typeof retry === "number" && retry >= 0) {
+        return Math.max(retry * 1000, fallback);
+    }
+    return fallback;
+}
+//# sourceMappingURL=http.js.map

package/dist/http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.js","sourceRoot":"","sources":["../src/http.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EACL,WAAW,EACX,QAAQ,EACR,WAAW,EACX,YAAY,EACZ,WAAW,EACX,YAAY,EACZ,gBAAgB,EAChB,WAAW,EACX,eAAe,EACf,UAAU,GAGX,MAAM,WAAW,CAAC;AAGnB,MAAM,UAAU,gCAAgC,CAAC,MAAkB;IACjE,IAAI,MAAM,CAAC,MAAM,KAAK,GAAG;QAAE,OAAO,KAAK,CAAC;IACxC,MAAM,IAAI,GAAG,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACtC,IAAI,IAAI,CAAC,KAAK,KAAK,gCAAgC;QAAE,OAAO,IAAI,CAAC;IACjE,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,IAAI,EAAE,CAAC;IACzD,OAAO,wBAAwB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC5C,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,KAAc;IACrC,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAChE,OAAO,KAAgC,CAAC;IAC1C,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,KAAc;IACxC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAmB,CAAC;AACnD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,IAAa,EACb,MAAc,EACd,MAAc,EACd,IAAY,EACZ,OAOI,EAAE;IAEN,MAAM,GAAG,GAAG,GAAG,MAAM,GAAG,IAAI,EAAE,CAAC;IAC/B,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC1C,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;IACtC,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,IAAI,kBAAkB,CAAC,CAAC;IACzD,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,UAAU,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;IACvD,CAAC;IACD,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QACjB,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,IAAI,CAAC,WAAW,IAAI,0BAA0B,CAAC,CAAC;IAC9E,CAAC;SAAM,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QACnC,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,IAAI,CAAC,WAAW,IAAI,kBAAkB,CAAC,CAAC;IACtE,CAAC;IACD,MAAM,IAAI,GAAgB;QACxB,MAAM;QACN,OAAO;QACP,QAAQ,EAAE,QAAQ;KACnB,CAAC;IACF,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QACjB,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAwB,CAAC;IAC/D,CAAC;SAAM,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QACnC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACxC,CAAC;IACD,IAAI,QAAkB,CAAC;IACvB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC3C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,MAAM,IAAI,QAAQ,CAAC,kBAAkB,OAAO,EAAE,EAAE,eAAe,CAAC,CAAC;IACnE,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IACnC,IAAI,IAAI,GAAmB,IAAI,CAAC;IAChC,IAAI,IAAI,EAAE,CAAC;QACT,IAAI,CAAC;YACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,CAAC;QACrC,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,GAAG,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IACD,OAAO;QACL,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,IAAI;QACJ,IAAI;KACL,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CACrB,IAAoB,EACpB,QAAoB;IAEpB,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;IACxD,OAAO;QACL,IAAI;QACJ,WAAW,EACT,IAAI,CAAC,MAAM,EAAE,WAAW;YACxB,IAAI,CAAC,OAAO;YACZ,IAAI,CAAC,iBAAiB;YACtB,IAAI,CAAC,KAAK;YACV,6BAA6B;QAC/B,GAAG,EAAE,IAAI,CAAC,MAAM,EAAE,GAAG;KACtB,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,GAAuB,EAAE,QAAoB;IAClE,QAAQ,GAAG,EAAE,CAAC;QACZ,KAAK,SAAS,CAAC;QACf,KAAK,SAAS,CAAC;QACf,KAAK,QAAQ,CAAC;QACd,KAAK,MAAM,CAAC;QACZ,KAAK,QAAQ,CAAC;QACd,KAAK,kBAAkB,CAAC;QACxB,KAAK,eAAe,CAAC;QACrB,KAAK,WAAW,CAAC;QACjB,KAAK,WAAW,CAAC;QACjB,KAAK,MAAM;YACT,OAAO,GAAG,CAAC;QACb,KAAK,UAAU;YACb,OAAO,QAAQ,CAAC;QAClB;YACE,OAAO,QAAQ,CAAC;IACpB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,MAAkB;IAC/C,MAAM,IAAI,GAAG,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACtC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;IAC9B,MAAM,OAAO,GACX,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,iBAAiB,IAAI,IAAI,IAAI,QAAQ,MAAM,CAAC,MAAM,EAAE,CAAC;IAE5E,IAAI,gCAAgC,CAAC,MAAM,CAAC,EAAE,CAAC;QAC7C,MAAM,IAAI,QAAQ,CAChB,OAAO,EACP,WAAW,EACX,cAAc,CAAC,IAAI,EAAE,kBAAkB,CAAC,CACzC,CAAC;IACJ,CAAC;IAED,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,uBAAuB,CAAC;QAC7B,KAAK,WAAW;YACd,MAAM,IAAI,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QAC3C,KAAK,eAAe,CAAC;QACrB,KAAK,eAAe,CAAC;QACrB,KAAK,eAAe;YAClB,MAAM,WAAW,CAAC,OAAO,EAAE;gBACzB,IAAI,EAAE,SAAS;gBACf,WAAW,EAAE,OAAO;aACrB,CAAC,CAAC;QACL,KAAK,cAAc;YACjB,MAAM,IAAI,QAAQ,CAAC,OAAO,EAAE,YAAY,EAAE,cAAc,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;QAC5E,KAAK,oBAAoB;YACvB,MAAM,IAAI,QAAQ,CAAC,OAAO,EAAE,WAAW,EAAE,cAAc,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC;QAC5E,KAAK,wBAAwB,CAAC;QAC9B,KAAK,eAAe,CAAC;QACrB,KAAK,eAAe,CAAC;QACrB,KAAK,eAAe;YAClB,MAAM,IAAI,QAAQ,CAAC,OAAO,EAAE,WAAW,EAAE,cAAc,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;QAC3E,KAAK,gBAAgB;YACnB,MAAM,IAAI,QAAQ,CAChB,OAAO,EACP,WAAW,EACX,cAAc,CAAC,IAAI,EAAE,eAAe,CAAC,CACtC,CAAC;QACJ,KAAK,qBAAqB,CAAC;QAC3B,KAAK,gBAAgB,CAAC;QACtB,KAAK,uBAAuB,CAAC;QAC7B,KAAK,qBAAqB,CAAC;QAC3B,KAAK,mBAAmB,CAAC;QACzB,KAAK,qBAAqB,CAAC;QAC3B,KAAK,cAAc;YACjB,MAAM,IAAI,QAAQ,CAAC,OAAO,EAAE,WAAW,EAAE,cAAc,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC;QAC9E,KAAK,kBAAkB;YACrB,MAAM,IAAI,QAAQ,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;QAC/C,KAAK,eAAe;YAClB,MAAM,IAAI,QAAQ,CAAC,OAAO,EAAE,WAAW,EAAE,cAAc,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;QACzE,KAAK,YAAY,CAAC;QAClB,KAAK,YAAY,CAAC;QAClB,KAAK,iBAAiB,CAAC;QACvB,KAAK,oBAAoB;YACvB,MAAM,IAAI,QAAQ,CAAC,OAAO,EAAE,WAAW,EAAE,cAAc,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC;QAC9E,KAAK,sBAAsB,CAAC;QAC5B,KAAK,oBAAoB;YACvB,MAAM,IAAI,QAAQ,CAAC,OAAO,EAAE,WAAW,EAAE,cAAc,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC;QAC9E,KAAK,aAAa;YAChB,MAAM,IAAI,QAAQ,CAChB,OAAO,EACP,gBAAgB,EAChB,cAAc,CAAC,IAAI,EAAE,WAAW,CAAC,CAClC,CAAC;QACJ,KAAK,cAAc,CAAC;QACpB,KAAK,UAAU;YACb,MAAM,IAAI,QAAQ,CAAC,OAAO,EAAE,YAAY,EAAE,cAAc,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;QAC1E,KAAK,oBAAoB;YACvB,MAAM,IAAI,QAAQ,CAAC,OAAO,EAAE,eAAe,EAAE,cAAc,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;QAC7E,KAAK,4BAA4B;YAC/B,MAAM,IAAI,QAAQ,CAAC,OAAO,EAAE,WAAW,EAAE,cAAc,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC;QAC9E,KAAK,kBAAkB,CAAC;QACxB,KAAK,kBAAkB;YACrB,MAAM,IAAI,QAAQ,CAAC,OAAO,EAAE,YAAY,EAAE,cAAc,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;QAC1E,KAAK,iBAAiB,CAAC;QACvB,KAAK,gBAAgB,CAAC;QACtB,KAAK,wBAAwB,CAAC;QAC9B,KAAK,6BAA6B;YAChC,MAAM,IAAI,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QAC1C,KAAK,mBAAmB,CAAC;QACzB,KAAK,sBAAsB,CAAC;QAC5B,KAAK,cAAc,CAAC;QACpB,KAAK,UAAU;YACb,MAAM,IAAI,QAAQ,CAAC,OAAO,EAAE,WAAW,EAAE,cAAc,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC;QAC9E;YACE,MAAM;IACV,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC1B,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,IAAI,EAAE,CAAC;QACzD,IAAI,wBAAwB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACvC,MAAM,IAAI,QAAQ,CAChB,OAAO,EACP,WAAW,EACX,cAAc,CAAC,IAAI,EAAE,kBAAkB,CAAC,CACzC,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,QAAQ,CAAC,OAAO,EAAE,WAAW,EAAE,cAAc,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC3E,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC1B,MAAM,IAAI,QAAQ,CAAC,OAAO,EAAE,YAAY,EAAE,cAAc,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC5E,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC1B,MAAM,IAAI,QAAQ,CAAC,OAAO,EAAE,WAAW,EAAE,cAAc,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC;IAC9E,CAAC;IACD,MAAM,IAAI,QAAQ,CAAC,OAAO,IAAI,QAAQ,MAAM,CAAC,MAAM,EAAE,EAAE,eAAe,CAAC,CAAC;AAC1E,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,MAAkB;IAC1C,IAAI,MAAM,CAAC,MAAM,IAAI,GAAG,IAAI,MAAM,CAAC,MAAM,GAAG,GAAG;QAAE,OAAO,MAAM,CAAC;IAC/D,cAAc,CAAC,MAAM,CAAC,CAAC;AACzB,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,MAAkB,EAAE,QAAgB;IAC/D,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IACjD,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;QAC3B,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC9E,CAAC;IACD,MAAM,IAAI,GAAG,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACtC,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,aAAa,CAAC;IACzC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;QAC5C,OAAO,IAAI,CAAC,GAAG,CAAC,KAAK,GAAG,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC1C,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+export {};

package/dist/index.js

@@ -0,0 +1,10 @@
+#!/usr/bin/env node
+import { runCli } from "./main.js";
+runCli(process.argv.slice(2)).then((code) => {
+    process.exitCode = code;
+}, (err) => {
+    const message = err instanceof Error ? err.message : String(err);
+    process.stderr.write(`${message}\n`);
+    process.exitCode = 1;
+});
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAEnC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAChC,CAAC,IAAI,EAAE,EAAE;IACP,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC;AAC1B,CAAC,EACD,CAAC,GAAY,EAAE,EAAE;IACf,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACjE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,OAAO,IAAI,CAAC,CAAC;IACrC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;AACvB,CAAC,CACF,CAAC"}

package/dist/link.d.ts

@@ -0,0 +1,106 @@
+import type { CliDeps, GitResult } from "./deps.js";
+import type { ParsedArgs } from "./types.js";
+/**
+ * Spend-request / SPT grant. Login never requests this. `credits buy` adds it
+ * with `auth upgrade` (or `auth login` when there is no session yet).
+ */
+export declare const LINK_PAYMENT_SCOPE = "payment_methods.agentic";
+/**
+ * link-cli 0.27 defaults to `userinfo:read payment_methods.agentic` when
+ * `--scope` is omitted. Login must pass a non-empty non-payment scope.
+ * Email still comes from the identity presentation; we never call
+ * `user-info retrieve`.
+ */
+export declare const LINK_LOGIN_SCOPE = "userinfo:read";
+export declare const LINK_IDENTITY_CLAIMS: readonly ["email", "email_verified"];
+export type LinkAttestation = {
+    authorization: string;
+};
+export type LinkPresentation = {
+    presentation: string;
+};
+export type LinkClaimsChallenge = {
+    aud: string;
+    nonce: string;
+    claims: string[];
+    interactionId: string;
+};
+/**
+ * `CLEANSLOP_LINK_CLI`, else `link-cli` on PATH, else the pinned
+ * `@stripe/link-cli` through npx, so `npx @cleanslop/cli` needs nothing else
+ * installed.
+ */
+export declare function runLinkCli(deps: CliDeps, args: string[], opts?: {
+    timeout?: number;
+}): Promise<GitResult>;
+export declare function linkScopeTokens(scope: unknown): string[];
+export type LinkAuthMode = "wait" | "no-wait" | "resume";
+export declare function linkAuthMode(args: ParsedArgs): LinkAuthMode;
+/**
+ * Starts Link's device sign-in when link-cli has no session (a fresh machine or
+ * cloud sandbox). Does not request `payment_methods.agentic`.
+ */
+export declare function ensureLinkAuth(deps: CliDeps, opts?: {
+    mode?: LinkAuthMode;
+    command?: string;
+}): Promise<void>;
+/**
+ * Ensures the Link session can create spend requests. Existing sessions that
+ * already granted `payment_methods.agentic` are left as-is. A session without
+ * that grant is widened with `auth upgrade`. No session logs in with the
+ * payment scope so a cold `credits buy` is one approval, not login + upgrade.
+ */
+export declare function ensureLinkPaymentScope(deps: CliDeps, opts?: {
+    mode?: LinkAuthMode;
+    command?: string;
+}): Promise<void>;
+/** Refills an empty pool. Link issues attestations without a per-request approval. */
+export declare function popAttestation(deps: CliDeps): Promise<LinkAttestation>;
+export declare function requestLinkCredentials(deps: CliDeps): Promise<void>;
+export declare function presentLinkIdentity(deps: CliDeps, input: {
+    aud: string;
+    nonce: string;
+}): Promise<LinkPresentation>;
+export declare function readLinkClaimsChallenge(body: unknown, origin: string): LinkClaimsChallenge;
+export type LinkConsentSource = "flag" | "tty";
+export declare function linkTermsUrl(origin: string): string;
+export declare function linkTermsQuestion(termsUrl: string): string;
+export declare function linkShareEmailQuestion(origin: string): string;
+export declare function linkBridgeEmailQuestion(origin: string): string;
+export declare function requireLinkSignupConsent(deps: CliDeps, args: ParsedArgs, origin: string): Promise<LinkConsentSource>;
+export declare function requireLinkBridgeConsent(deps: CliDeps, args: ParsedArgs, origin: string): Promise<LinkConsentSource>;
+/** Same schedule as link-cli `runMppPayWithSpendRequest`. */
+export declare const SPT_RETRIEVAL_DELAYS_MS: number[];
+export type SpendRequestStatus = "pending" | "approved" | "denied" | "expired" | "requires_action" | "canceled" | "unknown";
+export type SpendRequestSnapshot = {
+    id: string;
+    status: SpendRequestStatus;
+    displayMessage: string | null;
+    resolution: string | null;
+    sharedPaymentToken: string | null;
+    approvalUrl: string | null;
+};
+export declare function parseSpendRequestJson(stdout: string): SpendRequestSnapshot | null;
+/** Hidden test override. Exact `"1"` appends `--test` on spend-request create. */
+export declare function linkSpendRequestTestArgs(deps: CliDeps): string[];
+export declare function isLinkSpendRequestNotFound(result: GitResult): boolean;
+export declare function createLinkSpendRequest(deps: CliDeps, input: {
+    networkId: string;
+    amount: number;
+    currency: string;
+    context: string;
+    lineItem: string;
+    total: string;
+    idempotencyKey: string;
+}): Promise<SpendRequestSnapshot>;
+export declare function retrieveLinkSpendRequest(deps: CliDeps, spendRequestId: string, opts?: {
+    includeSpt?: boolean;
+}): Promise<SpendRequestSnapshot>;
+export declare function retrieveSharedPaymentToken(deps: CliDeps, spendRequestId: string): Promise<string | null>;
+export declare function linkSignupBody(deps: CliDeps, acceptTerms: string, consentSource: LinkConsentSource): {
+    client: string;
+    agentHint: string;
+    hostHint: string;
+    acceptTerms: string;
+    consentSource: LinkConsentSource;
+};