@cognite/cli 1.10.0-alpha.1 → 1.10.0-alpha.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/_templates/agents/create/AGENTS_TEMPLATE.md +5 -2
- package/dist/chunk-NZKQBLAX.js +12 -0
- package/dist/cli/cli.js +148 -139
- package/dist/deploy/index.js +1 -1
- package/dist/index.js +1 -1
- package/package.json +1 -1
- package/dist/chunk-EDXZK2T4.js +0 -12
package/dist/cli/cli.js
CHANGED
|
@@ -1,16 +1,16 @@
|
|
|
1
1
|
#!/usr/bin/env node
|
|
2
|
-
var
|
|
3
|
-
Cancelled.`),process.exit(130)),console.error(e),process.exit(1)}),process.on("unhandledRejection",e=>{
|
|
4
|
-
Cancelled.`),process.exit(130)),console.error(e),process.exit(1)}))}r(Dt,"installCancelHandler");import{readdir as
|
|
5
|
-
${e}`,{hint:"Run this command from an agent project directory, or pass the directory as an argument.",shouldReport:!1});if(t.length===1)return
|
|
2
|
+
var Rl=Object.defineProperty;var Vr=e=>{throw TypeError(e)};var r=(e,t)=>Rl(e,"name",{value:t,configurable:!0});var Gr=(e,t,n)=>t.has(e)||Vr("Cannot "+n);var xt=(e,t,n)=>(Gr(e,t,"read from private field"),n?n.call(e):t.get(e)),Yr=(e,t,n)=>t.has(e)?Vr("Cannot add the same private member more than once"):t instanceof WeakSet?t.add(e):t.set(e,n),zr=(e,t,n,o)=>(Gr(e,t,"write to private field"),o?o.call(e,n):t.set(e,n),n);import{writeSync as qS}from"fs";import{Command as JS}from"commander";var qn=class qn extends Error{constructor(t,n={}){super(t),this.name="HintedError",n.cause!==void 0&&(this.cause=n.cause);let o=this.deriveDefaults(n);this.hint=n.hint??o.hint,this.helpUrl=n.helpUrl??o.helpUrl,this.shouldReport=n.shouldReport??!0}deriveDefaults(t){return{hint:Ol(t.cause)}}};r(qn,"HintedError");var m=qn;function ue(e){return e instanceof m}r(ue,"isHintedError");var qr="https://docs.cognite.com/cdf/access/",Il="https://status.cognite.com";function Dl(e){switch(e){case 401:return{hint:"Your credentials are invalid or expired. Check your client ID and secret.",helpUrl:qr};case 403:return{hint:"You don't have the required CDF capabilities. Please contact your CDF admin.",helpUrl:qr};case 413:return{hint:"The deployment exceeds the App Hosting size limit. Reduce the build output \u2014 remove unused assets, code-split bundles, or strip source maps."};case 429:return{hint:"You are being rate limited. Wait a few moments and retry. If this persists, contact CDF support."};case 500:case 502:case 503:case 504:return{hint:"CDF service error. The issue is on the server side. Check the status page and retry shortly.",helpUrl:Il};default:return{}}}r(Dl,"defaultHintForStatus");var Jn=class Jn extends m{constructor(t,n){super(t,n),this.name="HintedHttpError",this.httpStatusCode=n.httpStatusCode,this.requestUrl=n.requestUrl,this.responseBody=n.responseBody}deriveDefaults(t){let{httpStatusCode:n}=t,o=Dl(n),i=super.deriveDefaults(t);return{hint:o.hint??i.hint,helpUrl:o.helpUrl}}};r(Jn,"HintedHttpError");var ie=Jn;function kt(e){return e instanceof ie}r(kt,"isHintedHttpError");function $l(e,t){if(e)switch(e){case"ENOTFOUND":return t.hostname?`DNS lookup failed for ${t.hostname}. Check your network, VPN, or proxy settings.`:"DNS lookup failed. Check your network, VPN, or proxy settings.";case"ECONNREFUSED":return t.hostname&&t.port?`Connection refused by ${t.hostname}:${t.port}. The service may be down or the port may be wrong.`:"Connection refused. The service may be down or the port may be wrong.";case"ECONNRESET":return"Connection was reset. The server closed the connection unexpectedly; check for proxy/firewall interference and retry.";case"ETIMEDOUT":return"Connection timed out. Check your network, VPN, or proxy settings, and retry.";case"EAI_AGAIN":return"Temporary DNS failure. Retry shortly; if it persists, check your DNS configuration.";case"CERT_HAS_EXPIRED":case"UNABLE_TO_VERIFY_LEAF_SIGNATURE":case"SELF_SIGNED_CERT_IN_CHAIN":return"TLS certificate validation failed. Check system clock and CA trust store; if you use a corporate proxy, ensure its root cert is trusted.";case"EACCES":return t.path?`Permission denied: ${t.path}. Check file ownership and permissions.`:"Permission denied. Check file ownership and permissions.";case"ENOENT":return t.path?`File or directory not found: ${t.path}.`:"File or directory not found.";case"EISDIR":return t.path?`Expected a file but found a directory: ${t.path}.`:"Expected a file but found a directory.";case"ENOSPC":return"No space left on device. Free up disk space and retry.";case"EADDRINUSE":return t.port?`Port ${t.port} is already in use. Stop the process using it or pick a different port.`:"Address is already in use. Stop the conflicting process or change the port.";case"EMFILE":case"ENFILE":return"Too many open files. Close other programs or raise the file descriptor limit.";default:return}}r($l,"hintForErrno");function Ol(e){let t=e,n=new Set;for(;t!=null&&!n.has(t)&&(n.add(t),typeof t=="object");){let o=t,i=$l(o.code,o);if(i!==void 0)return i;t=o.cause}}r(Ol,"hintForCause");import{Command as Fl,Option as Pt}from"commander";var Jr=Object.freeze({interactive:new Pt("--interactive","Use browser-based authentication instead of env-var credentials").default(!1),baseUrl:new Pt("--base-url <url>","CDF base URL (only with --interactive)"),project:new Pt("--project <project>","CDF project name (only with --interactive)"),org:new Pt("--org <org>","Organization hint for login (only with --interactive)")}),nw=Object.values(Jr).map(e=>e.long),Rt=class Rt extends Fl{constructor(t){super(t);for(let n of Object.values(Jr))this.addOption(n)}createCommand(t){return new Rt(t)}};r(Rt,"BaseCommand");var be=Rt,Wn=class Wn extends be{constructor(t){super(t),this.configure()}};r(Wn,"CommandGroup");var Tt=Wn;import{performance as Qr}from"perf_hooks";import{existsSync as Vl,readFileSync as Gl}from"fs";import{resolve as Yl}from"path";import{array as Wr,boolean as Ll,check as Ge,forward as Ye,literal as Ml,maxLength as Ul,minLength as Nl,nonEmpty as Ie,object as Zr,optional as xe,picklist as _l,pipe as me,safeParse as jl,string as Q,url as Xr}from"valibot";var Zn=me(Q(),Ie("must not be empty")),Xn=me(Q(),Ie("must not be empty"),Ul(256,"must be 256 characters or fewer")),Qn=me(Q(),Ie("must not be empty"),Xr("must be a valid URL")),Hl=me(Q(),Ie("must not be empty"),Xr("must be a valid URL")),eo=me(Q(),Ie("must not be empty")),to=me(Q(),Ie("must not be empty")),Bl=me(Zr({org:eo,project:to,baseUrl:Qn,deployClientId:xe(Q(),""),deploySecretName:xe(Q(),""),published:xe(Ll(),!1),idpType:xe(_l(["cdf","entra_id","oauth"]),"cdf"),tenantId:xe(Q()),scopes:xe(Wr(me(Q(),Ie("must not be empty")))),tokenUrl:xe(Hl)}),Ye(Ge(e=>e.idpType!=="entra_id"||!!e.tenantId,'must be set when idpType is "entra_id"'),["tenantId"]),Ye(Ge(e=>e.idpType!=="oauth"||!!e.tokenUrl,'must be set when idpType is "oauth"'),["tokenUrl"]),Ye(Ge(e=>!e.tokenUrl||e.idpType==="oauth",'must only be set when idpType is "oauth"'),["tokenUrl"]),Ye(Ge(e=>e.idpType!=="oauth"||!!e.deployClientId,'must be set when idpType is "oauth"'),["deployClientId"]),Ye(Ge(e=>e.idpType!=="oauth"||!!e.deploySecretName,'must be set when idpType is "oauth"'),["deploySecretName"]),Ye(Ge(e=>!e.deployClientId||!!e.deploySecretName,"must be set when deployClientId is set"),["deploySecretName"])),Kl=Zr({name:Zn,externalId:Xn,versionTag:me(Q(),Ie("must not be empty")),description:xe(Q(),""),deployments:me(Wr(Bl),Nl(1,"must contain at least one deployment")),infra:xe(Ml("appsApi"))});function no(e){let t=jl(Kl,e);if(t.success)return t.output;let n=t.issues[0],o=n.path?.map(s=>s.key).join(".")??"",i=o?`"${o}" `:"";throw new Error(`app.json: ${i}${n.message}`)}r(no,"validateAppConfig");function k(e,t={}){let{validator:n=no,existsSync:o=Vl,readFileSync:i=Gl}=t,s=Yl(e,"app.json");if(!o(s))throw new Error(`No app.json found at ${s}. Make sure you're running this command from your app's root directory.`);let a=i(s,"utf-8"),c;try{c=JSON.parse(a)}catch{throw new Error("Failed to parse app.json \u2014 check that it contains valid JSON.")}return n(c)}r(k,"loadAppConfig");var ze=1e3,It;function zl(){It=Qr.now()}r(zl,"markActionStart");function ql(){It=void 0}r(ql,"resetActionStart");function oo(){if(It!==void 0)return Math.max(0,Math.round(Qr.now()-It))}r(oo,"snapshotActionDurationMs");function ei(){let e=oo();return ql(),{...e!==void 0&&{actionDurationMs:e}}}r(ei,"takePerformanceFields");var Jl=new Set(["baseUrl","url","project","deployment","source","path","name","displayName","description","externalId"]);function ro(e){return Object.fromEntries(Object.entries(e).map(([t,n])=>typeof n=="boolean"?[t,n]:Jl.has(t)?[t,n]:[t,"[REDACTED]"]))}r(ro,"sanitizeOptions");function Wl(e){let t=[],n=e;for(;n;)n.parent&&t.unshift(n.name()),n=n.parent;return t.join(" ")}r(Wl,"getCommandPath");function ti(e){try{let t=e(process.cwd()),n=t.deployments[0];return{appName:t.name,appExternalId:t.externalId,appVersionTag:t.versionTag,...n&&{cogniteOrg:n.org,cogniteProject:n.project}}}catch{return{}}}r(ti,"tryLoadAppConfig");function io(e){return e.filter(t=>!t.startsWith("-")).join(" ")||"unknown"}r(io,"commandFromArgv");function ni(e,t,n=k){e.hook("preAction",()=>{zl()}),e.hook("postAction",async(o,i)=>{try{let s={command:Wl(i),options:ro(i.opts()),success:!0,...ti(n),...ei()};t.track("Flows.CLI.Command",{...s}),await t.flush(ze)}catch{}})}r(ni,"instrument");async function oi(e,t,n=k){try{let o={command:io(t),options:{},success:!1,...ti(n),...ei()};e.track("Flows.CLI.Command",{...o}),await e.flush(ze)}catch{}}r(oi,"trackFailure");var Zl=Object.freeze({create:"Flows.CLI.Agents.Create",push:"Flows.CLI.Agents.Push",open:"Flows.CLI.Agents.Open",publish:"Flows.CLI.Agents.Publish",unpublish:"Flows.CLI.Agents.Unpublish",pull:"Flows.CLI.Agents.Pull",list:"Flows.CLI.Agents.List",status:"Flows.CLI.Agents.Status",eval:"Flows.CLI.Agents.Eval"});async function ri(e,t){if(!e||t.name()==="eval")return;let n=Zl[t.name()];if(n)try{e.track(n,{command:t.name(),options:ro(t.optsWithGlobals()),success:!0}),await e.flush(ze)}catch{}}r(ri,"trackAgentsCommand");import{existsSync as us}from"fs";import{cp as lu,mkdir as ms,readFile as $o,writeFile as on}from"fs/promises";import{basename as Oo,dirname as pu,join as he,resolve as Fo}from"path";import{fileURLToPath as du}from"url";import{Option as He}from"commander";import Xl,{Chalk as Ql}from"chalk";var ot=new Ql({level:0});function P(e){return e.isTTY?Xl:ot}r(P,"chalkForStream");var ep="ERR_USE_AFTER_CLOSE";function si(e){return e instanceof Error&&"code"in e&&e.code===ep}r(si,"isReadlineClosedError");function tp(e){let t=Object.getPrototypeOf(e);return t===Object.prototype||t===null}r(tp,"isPlainObject");function so(e){return e==null||si(e)?!0:e instanceof Error?!1:!!(typeof e=="object"&&e!==null&&tp(e)&&Object.keys(e).length===0)}r(so,"isPromptCancel");var ii=!1;function Dt(){ii||(ii=!0,process.on("uncaughtException",e=>{si(e)&&(console.error(`
|
|
3
|
+
Cancelled.`),process.exit(130)),console.error(e),process.exit(1)}),process.on("unhandledRejection",e=>{so(e)&&(console.error(`
|
|
4
|
+
Cancelled.`),process.exit(130)),console.error(e),process.exit(1)}))}r(Dt,"installCancelHandler");import{readdir as np,readFile as op}from"fs/promises";import{basename as pi,join as di}from"path";import{array as it,looseObject as ui,nullable as rp,object as mi,optional as se,parse as gi,record as ip,string as G,unknown as sp}from"valibot";import{parse as ap,stringify as cp}from"yaml";var v=Object.freeze({configSuffix:".agent.yaml",configGlob:"*.agent.yaml",readme:"README.md",readmeTemplate:"README_TEMPLATE.md",agentsMd:"AGENTS.md",agentsMdTemplate:"AGENTS_TEMPLATE.md",evalDir:"eval",evalCases:"eval.yaml",evalCasesTemplate:"EVAL_CASES_TEMPLATE.yaml"});function De(e){return`${e.replace(/[^A-Za-z0-9._-]/g,"_")}${v.configSuffix}`}r(De,"agentConfigFileName");var rt=`${v.evalDir}/${v.evalCases}`,ai={dirName:"my-agent"},ci=[".cursor/skills",".claude/skills"];var li="cdf_industrial_v4";var lp=mi({agentExternalId:G()}),pp=mi({question:G()}),dp=ui({name:G(),type:G(),description:G(),instructions:se(G()),configuration:se(rp(ip(G(),sp())))}),fi=ui({externalId:G(),name:G(),description:se(G()),instructions:se(G()),model:se(G()),runtimeVersion:se(G()),labels:se(it(G())),exampleQuestions:se(it(pp)),skills:se(it(G())),subagents:se(it(lp)),tools:se(it(dp),[])});function up(e){let t=ap(e);return gi(fi,t)}r(up,"parseAgentYaml");function ge(e){let t=gi(fi,e);return cp(t,{lineWidth:0})}r(ge,"serializeAgentYaml");async function st(e){let t;try{t=await np(e,{withFileTypes:!0})}catch{return[]}let n=v.configSuffix.toLowerCase();return t.filter(o=>o.name.toLowerCase().endsWith(n)&&!o.isDirectory()).map(o=>o.name).sort()}r(st,"findAgentYamlNames");async function mp(e){let t=await st(e);if(t.length===0)throw new m(`No ${v.configGlob} found in:
|
|
5
|
+
${e}`,{hint:"Run this command from an agent project directory, or pass the directory as an argument.",shouldReport:!1});if(t.length===1)return di(e,t[0]);let n=De(pi(e)).toLowerCase(),o=t.find(i=>i.toLowerCase()===n);if(o!==void 0)return di(e,o);throw new m(`Found multiple ${v.configGlob} files in:
|
|
6
6
|
${e}
|
|
7
7
|
${t.map(i=>` - ${i}`).join(`
|
|
8
|
-
`)}`,{hint:`Each agent needs its own directory. Move the extra definitions elsewhere, or name the one you want after its folder (${
|
|
9
|
-
`);function
|
|
10
|
-
`,{mode:384});try{n.renameSync(i,n.sessionFile)}catch(s){throw n.rmSync(i,{force:!0}),s}}r(Nt,"writeSession");function
|
|
11
|
-
`),
|
|
12
|
-
`);let g=r(()=>{},"finish"),
|
|
13
|
-
`)}}}r(jt,"createTelemetry");var Ht={min:3100,max:3110},
|
|
8
|
+
`)}`,{hint:`Each agent needs its own directory. Move the extra definitions elsewhere, or name the one you want after its folder (${De(pi(e))}).`,shouldReport:!1})}r(mp,"resolveAgentYamlPath");async function $e(e){return(await at(e)).agent}r($e,"readAgentYaml");async function at(e){let t=await mp(e),n=await op(t,"utf8");return{path:t,agent:up(n)}}r(at,"loadAgentYaml");function Me(e){let{createdTime:t,lastUpdatedTime:n,ownerId:o,...i}=e;return i}r(Me,"toAgentCreate");import hi from"enquirer";var ao=class ao{constructor(t,n,o,i=[],s=hi.prompt.bind(hi)){this.dirArg=t;this.flags=n;this.isInteractive=o;this.availableModels=i;this.promptFn=s}async resolve(){let t=await this.getDirName();return{dirName:t,externalId:this.flags.externalId?.trim()||t,name:await this.getDisplayName(t),description:await this.getDescription(),model:await this.getModel(),instructions:await this.getInstructions(),runtimeVersion:this.flags.runtimeVersion?.trim()||void 0}}async getDirName(){return this.dirArg?this.dirArg:this.isInteractive?ct(this.promptFn,{message:"Agent name (used as directory and externalId)",initial:"my-agent",validate:yi("Agent name")}):ai.dirName}async getDisplayName(t){let n=this.flags.displayName?.trim();return n||(this.isInteractive?ct(this.promptFn,{message:"Display name",initial:t,validate:yi("Display name")}):t)}async getDescription(){let t=this.flags.description?.trim();if(t)return t;if(this.isInteractive){let n=await ct(this.promptFn,{message:"Description (optional)",initial:"",validate:r(()=>!0,"validate")});if(n)return n}}async getModel(){let t=this.flags.model?.trim();if(t)return t;if(this.isInteractive&&this.availableModels.length>0)return ct(this.promptFn,{message:"Model",choices:this.availableModels,initial:0})}async getInstructions(){let t=this.flags.instructions?.trim();if(t)return t;if(this.isInteractive){let n=await ct(this.promptFn,{message:"Agent instructions (custom behavior; built-in platform guidance applies automatically)",initial:"",validate:r(()=>!0,"validate")});if(n)return n}return gp}};r(ao,"AgentCreateResolver");var $t=ao,gp=["Help users explore and understand the data in this project.","Use the available tools to retrieve data before answering.","When the data is insufficient, say so rather than guessing."].join(`
|
|
9
|
+
`);function yi(e){return r(function(n){return n.trim()?!0:`${e} is required`},"_requiredInner")}r(yi,"required");async function ct(e,t){if("choices"in t){let{value:o}=await e({type:"select",name:"value",...t});return o.trim()}let{value:n}=await e({type:"input",name:"value",...t});return n.trim()}r(ct,"ask");var Ot={"cdf-version":"beta"};function ee(e){async function t(l){let p=c(e.project).concat("/ai/agents");return(await e.post(p,{data:{items:[l]},headers:Ot})).data.items[0]}r(t,"upsert");async function n(l){let p=c(e.project).concat("/ai/agents/byids"),d;try{d=await e.post(p,{data:{items:[{externalId:l}]},headers:Ot})}catch(f){throw o(f)&&f.status===422?new m(`Agent "${l}" not found.`,{hint:"Check the externalId and try again.",shouldReport:!1}):f}let u=d.data?.items??[];if(!u.length)throw new m(`Agent "${l}" not found.`,{hint:"Check the externalId and try again.",shouldReport:!1});return u[0]}r(n,"getByExternalId");function o(l){return typeof l=="object"&&l!==null&&"status"in l&&typeof l.status=="number"}r(o,"isHttpError");async function i(){let l=c(e.project).concat("/ai/agents");return(await e.get(l,{headers:Ot})).data}r(i,"list");async function s(){let l=c(e.project).concat("/ai/availability");return(await e.get(l,{headers:Ot})).data}r(s,"getServiceAvailability");async function a(){return(await s()).items.find(d=>d.path==="/ai/agents")?.supportedLanguageModels??[]}r(a,"getAvailableModels");function c(l){return`/api/v1/projects/${encodeURIComponent(l)}`}return r(c,"getBaseUrl"),{upsert:t,getByExternalId:n,list:i,getServiceAvailability:s,getAvailableModels:a}}r(ee,"getAgentsService");import{CogniteClient as iu}from"@cognite/sdk";import{existsSync as vp,mkdirSync as Cp,readFileSync as Ap,renameSync as Ep,rmSync as bp,writeFileSync as xp}from"fs";import{dirname as kp}from"path";import{isoTimestamp as Pp,literal as Tp,nonEmpty as Ai,object as Rp,pipe as Ei,safeParse as Ip,string as bi}from"valibot";import{homedir as fp}from"os";import{join as co}from"path";function D(e={}){let{env:t=process.env,homedir:n=fp}=e,o=t.COGNITE_CLI_HOME?.trim()||co(n(),".cognite-cli");return{home:o,keysDir:co(o,"keys"),sessionFile:co(o,"session.json")}}r(D,"getConfig");import{inspect as hp}from"util";var lo="[REDACTED]",Ue,Ft=class Ft{constructor(t){Yr(this,Ue);zr(this,Ue,t)}toString(){return lo}toJSON(){return lo}[hp.custom](){return lo}expose(){return xt(this,Ue)}equals(t){return xt(this,Ue)===xt(t,Ue)}static from(t){return new Ft(t)}};Ue=new WeakMap,r(Ft,"SensitiveString");var b=Ft;var Ne="cognite-cli-session",yp=1280,Sp=process.platform==="win32"?yp:1/0,po="cognite-session/chunks=";function Lt(e,t){return`${e}/chunk/${t}`}r(Lt,"chunkAccount");function uo(e){if(!e.startsWith(po))return null;let t=Number(e.slice(po.length));return Number.isFinite(t)&&t>0?t:null}r(uo,"parseChunkCount");async function wp(e,t){let{Entry:n}=await import("@napi-rs/keyring"),o=new n(e,t);return{setPassword:r(i=>o.setPassword(i),"setPassword"),getPassword:r(()=>o.getPassword(),"getPassword"),deleteCredential:r(()=>o.deleteCredential(),"deleteCredential")}}r(wp,"defaultCreateEntry");function mo(e){return{createEntry:e.createEntry??wp,chunkSize:e.chunkSize??Sp}}r(mo,"resolveDeps");async function Si(e,t,n={}){let{createEntry:o,chunkSize:i}=mo(n),s=await o(Ne,e),a=s.getPassword();if(a!==null){let p=uo(a);if(p!==null)for(let d=0;d<p;d++)(await o(Ne,Lt(e,d))).deleteCredential()}let c=t.expose();if(c.length<=i){s.setPassword(c);return}let l=[];for(let p=0;p<c.length;p+=i)l.push(c.slice(p,p+i));s.setPassword(`${po}${l.length}`);for(let p=0;p<l.length;p++)(await o(Ne,Lt(e,p))).setPassword(l[p])}r(Si,"storeSessionToken");async function wi(e,t={}){let{createEntry:n}=mo(t),o=(await n(Ne,e)).getPassword();if(o===null)return null;let i=uo(o);if(i===null)return b.from(o);let s=[];for(let a=0;a<i;a++){let c=(await n(Ne,Lt(e,a))).getPassword();if(c===null)return null;s.push(c)}return b.from(s.join(""))}r(wi,"readSessionToken");async function vi(e,t={}){let{createEntry:n}=mo(t),o=await n(Ne,e),i=o.getPassword();if(i!==null){let s=uo(i);if(s!==null)for(let a=0;a<s;a++)(await n(Ne,Lt(e,a))).deleteCredential()}o.deleteCredential()}r(vi,"deleteSessionToken");var Mt=1,fo=r(e=>`${e}/accessToken`,"accessTokenAccount"),ho=r(e=>`${e}/refreshToken`,"refreshTokenAccount"),Ci=Ei(bi(),Ai("must not be empty"),Pp("must be an ISO 8601 timestamp")),Dp=Rp({version:Tp(Mt),org:Ei(bi(),Ai("must not be empty")),accessTokenExpiresAt:Ci,refreshTokenExpiresAt:Ci});function Ut(e){return{sessionFile:e.sessionFile??D().sessionFile,existsSync:e.existsSync??vp,readFileSync:e.readFileSync??Ap,writeFileSync:e.writeFileSync??xp,mkdirSync:e.mkdirSync??Cp,renameSync:e.renameSync??Ep,rmSync:e.rmSync??bp,storeSecret:e.storeSecret??Si,readSecret:e.readSecret??wi,deleteSecret:e.deleteSecret??vi}}r(Ut,"resolveDeps");var go="Run `npx @cognite/cli auth logout` to clear it, then `npx @cognite/cli auth login` to sign in again.";function ke(e={}){let t=Ut(e);if(!t.existsSync(t.sessionFile))return null;let n=t.readFileSync(t.sessionFile,"utf-8"),o;try{o=JSON.parse(n)}catch{throw new Error(`Session file at ${t.sessionFile} is not valid JSON. ${go}`)}let i=Ip(Dp,o);if(!i.success){let s=i.issues[0],a=s.path?.map(l=>l.key).join(".")??"",c=a?`"${a}" `:"";throw new Error(`Session file is invalid: ${c}${s.message}. ${go}`)}return i.output}r(ke,"readSessionMetadata");async function lt(e={}){let t=Ut(e),n=ke(e);if(!n)return null;let[o,i]=await Promise.all([t.readSecret(fo(n.org)),t.readSecret(ho(n.org))]);if(!o||!i)throw new Error(`Session metadata exists but its tokens are missing from the keychain. ${go}`);return{...n,accessToken:o,refreshToken:i}}r(lt,"readSession");async function Nt(e,t={}){let n=Ut(t);await n.storeSecret(fo(e.org),e.accessToken),await n.storeSecret(ho(e.org),e.refreshToken);let o={version:Mt,org:e.org,accessTokenExpiresAt:e.accessTokenExpiresAt,refreshTokenExpiresAt:e.refreshTokenExpiresAt};n.mkdirSync(kp(n.sessionFile),{recursive:!0,mode:448});let i=`${n.sessionFile}.tmp`;n.writeFileSync(i,`${JSON.stringify(o,null,2)}
|
|
10
|
+
`,{mode:384});try{n.renameSync(i,n.sessionFile)}catch(s){throw n.rmSync(i,{force:!0}),s}}r(Nt,"writeSession");function $p(e){if(!e.existsSync(e.sessionFile))return null;try{let t=JSON.parse(e.readFileSync(e.sessionFile,"utf-8"));if(t&&typeof t=="object"&&"org"in t){let n=t.org;return typeof n=="string"&&n.length>0?n:null}}catch{}return null}r($p,"readOrgLoosely");async function _t(e={}){let t=Ut(e),n=$p(t);t.rmSync(t.sessionFile,{force:!0}),n&&(await t.deleteSecret(fo(n)),await t.deleteSecret(ho(n)))}r(_t,"clearSession");var Op=300*1e3;function _e(e,t=new Date){let n=t.getTime();return Date.parse(e.refreshTokenExpiresAt)<=n?"EXPIRED":Date.parse(e.accessTokenExpiresAt)-n<=Op?"EXPIRING":"VALID"}r(_e,"tokenState");import Sd from"path";import{lock as wd}from"proper-lockfile";import{None as ad,discovery as cd,tokenRevocation as ld,refreshTokenGrant as pd}from"openid-client";import{buildAuthorizationUrl as Xp,calculatePKCECodeChallenge as Qp,discovery as ed,None as td,randomPKCECodeVerifier as nd,randomState as od}from"openid-client";import xi from"mixpanel";var Fp="5c4d853e7c3b77b1eb4468d5329b278c",Lp="api-eu.mixpanel.com",pt="cognite-cli",Mp=2e3,ki={env:process.env,init:xi.init.bind(xi)},Up={track:r(()=>{},"track"),flush:r(async()=>{},"flush")};function yo(e=process.env){return e.COGNITE_TELEMETRY_DISABLED==="1"||e.DO_NOT_TRACK==="1"}r(yo,"isTelemetryDisabled");function Np(e=process.env){if(e.GITHUB_ACTIONS)return"github-actions";if(e.TF_BUILD)return"azure-devops";if(e.GITLAB_CI)return"gitlab-ci";if(e.CIRCLECI)return"circleci";if(e.TRAVIS)return"travis-ci";if(e.BUILDKITE)return"buildkite";if(e.DRONE)return"drone";if(e.SEMAPHORE)return"semaphore";if(e.TEAMCITY_VERSION)return"teamcity";if(e.APPVEYOR)return"appveyor";if(e.CODEBUILD_BUILD_ID)return"aws-codebuild";if(e.HEROKU_TEST_RUN_ID)return"heroku-ci";if(e.BITBUCKET_BUILD_NUMBER)return"bitbucket-pipelines";if(e.JENKINS_URL||e.JENKINS_HOME)return"jenkins";if(e.CI&&e.CI!=="false"&&e.CI!=="0")return"ci-generic"}r(Np,"detectCiEnvironment");function _p(e){return e.COGNITE_TELEMETRY_DEBUG==="1"}r(_p,"isDebug");function jt(e={}){let t=e.env??ki.env,n=e.init??ki.init,o=e.packageName,i=e.cliVersion,s=_p(t),a=Np(t);if(yo(t))return s&&process.stderr.write(`[telemetry] disabled \u2014 noop tracker
|
|
11
|
+
`),Up;let c,l=new Set;function p(){if(c)return c;try{return c=n(Fp,{geolocate:!1,keepAlive:!1,host:Lp}),c}catch{return}}return r(p,"getClient"),{track(d,u={}){let f=p();if(!f)return;let y={...u,applicationId:pt,...o&&{packageName:o},...i&&{cliVersion:i},nodeVersion:process.version,platform:process.platform,...a&&{ciEnvironment:a}};s&&process.stderr.write(`[telemetry] track ${d} ${JSON.stringify(y)}
|
|
12
|
+
`);let g=r(()=>{},"finish"),h=new Promise(w=>{g=w});l.add(h);try{f.track(d,y,g)}catch{g()}h.finally(()=>l.delete(h))},async flush(d=Mp){if(l.size===0)return;let u,f=new Promise(y=>{u=setTimeout(y,d),u.unref?.()});try{await Promise.race([Promise.allSettled([...l]),f])}finally{u&&clearTimeout(u)}s&&process.stderr.write(`[telemetry] flush done (${l.size} still pending)
|
|
13
|
+
`)}}}r(jt,"createTelemetry");var Ht={min:3100,max:3110},jp=`${Ht.min}-${Ht.max}`,dt=`3000, or ${jp}`;function Bt(e){return Number.isInteger(e)?e===3e3||e>=Ht.min&&e<=Ht.max:!1}r(Bt,"isAllowedCallbackPort");function Kt(e){return`Unsupported callback port ${typeof e=="string"?`"${e}"`:e} \u2014 only ${dt} are supported.`}r(Kt,"formatUnsupportedCallbackPort");import Bp from"http";import{authorizationCodeGrant as Kp}from"openid-client";function Pi(e){return e.replace(/[&<>"']/g,t=>({"&":"&","<":"<",">":">",'"':""","'":"'"})[t]??t)}r(Pi,"escapeHtml");function So(e,t,n){let o=Pi(t),i=Pi(n);return`<html><body style="font-family: system-ui; padding: 40px; text-align: center;">
|
|
14
14
|
<h1>${o}</h1><p>${i}</p><p>You can close this window.</p>${e==="success"?`<style>
|
|
15
15
|
@keyframes checkmark {
|
|
16
16
|
0% { transform: scale(0); }
|
|
@@ -19,20 +19,20 @@ ${t.map(i=>` - ${i}`).join(`
|
|
|
19
19
|
}
|
|
20
20
|
h1 { animation: checkmark 0.5s ease-out; }
|
|
21
21
|
</style>`:""}
|
|
22
|
-
</body></html>`}r(
|
|
23
|
-
`),s.log(`\u{1F4E1} Fetching OpenID configuration from ${t.authority}...`);let
|
|
24
|
-
`);try{await d(
|
|
25
|
-
`),s.error(
|
|
26
|
-
See: ${
|
|
27
|
-
See: ${
|
|
28
|
-
${n}`),{cause:t}):null}r(fe,"enrichedHttpError");function
|
|
29
|
-
`)}r(
|
|
22
|
+
</body></html>`}r(So,"generateHtml");import Hp from"net";function Ti(e,t){return new Promise(n=>{let o=new Hp.Socket,i=r(s=>{o.removeAllListeners(),o.destroy(),n(s)},"done");o.setTimeout(500),o.once("connect",()=>i(!1)),o.once("timeout",()=>i(!0)),o.once("error",()=>i(!0)),o.connect(e,t)})}r(Ti,"isHostPortFree");function Vt(e){return`Port ${e} is already in use. Pin another callback port with --port <port> \u2014 supported ports are ${dt}.`}r(Vt,"freePortHint");async function Ri(e){if(e<0)throw new Error(`Invalid port: ${e}`);return e===0?!0:(await Promise.all([Ti(e,"127.0.0.1"),Ti(e,"::1")])).every(Boolean)}r(Ri,"isPortFree");async function Vp(e,t,n,o,i,s){let{authorizationCodeGrant:a,logger:c}=s,l=new URL(e.url??"/",`http://${e.headers.host??"localhost"}`);if(l.pathname!=="/")return t.writeHead(404),t.end("Not found"),{shouldClose:!1};try{c.log("\u{1F504} Exchanging authorization code for tokens...");let p=await a(n,l,{pkceCodeVerifier:o,expectedState:i});return t.writeHead(200,{"Content-Type":"text/html",Connection:"close"}),t.end(So("success","Login Successful!","You can close this window and return to the terminal.")),{shouldClose:!0,tokens:p}}catch(p){let d=p instanceof Error?p:new Error(String(p));return t.writeHead(400,{"Content-Type":"text/html",Connection:"close"}),t.end(So("error","Authentication Error",d.message)),{shouldClose:!0,error:d}}}r(Vp,"handleCallback");function Gp(e){let t=e/6e4,n=Math.round(t*10)/10;return`${n} ${n===1?"minute":"minutes"}`}r(Gp,"formatTimeoutMinutes");function Ii(e,t,n,o,i={createServer:Bp.createServer,setTimeout:globalThis.setTimeout,clearTimeout:globalThis.clearTimeout,authorizationCodeGrant:Kp,logger:console}){let{createServer:s,setTimeout:a,clearTimeout:c,logger:l}=i;return new Promise((p,d)=>{let u=s(async(g,h)=>{try{let w=await Vp(g,h,t,n,o,i);w.shouldClose&&(y(),w.error?d(w.error):w.tokens?p(w.tokens):d(new Error("No tokens received")))}catch(w){y(),d(w instanceof Error?w:new Error(String(w)))}}),f=a(()=>{y(),d(new Error(`Login timeout - no response received within ${Gp(e.loginTimeout)}`))},e.loginTimeout);function y(){c(f),u.close(),u.closeIdleConnections?.()}r(y,"cleanup"),u.on("error",g=>{y(),g.code==="EADDRINUSE"||g.code==="EACCES"?d(new m(`Port ${e.port} is already in use \u2014 the login callback server cannot start`,{cause:g,hint:Vt(e.port)})):d(new m(`Login callback server failed: ${g.message}`,{cause:g}))}),u.listen(e.port,"127.0.0.1",()=>{l.log(`\u{1F310} Local HTTP server started on http://localhost:${e.port}`)})})}r(Ii,"startCallbackServer");import{spawn as zp}from"child_process";import qp from"open";import{parseArgsStringToArgv as Jp}from"string-argv";function Yp(e){try{return new URL(e),!0}catch{return!1}}r(Yp,"isValidUrl");function Di(e,t="url"){if(!Yp(e))throw new Error(`${t} must be a valid URL, got: ${e}`);return e}r(Di,"parseUrl");var Wp=5e3;async function $i(e,t={}){let{open:n=qp,spawn:o=r((p,d)=>{let u=zp(p,d,{stdio:"ignore",detached:!0});return u.unref(),u},"spawn"),platform:i=process.platform,env:s=process.env,setTimeout:a=globalThis.setTimeout,clearTimeout:c=globalThis.clearTimeout}=t,l=s.BROWSER?.trim();if(i==="win32"&&l){let[p,...d]=Jp(l);if(!p){await n(e);return}Di(e,"openBrowser target"),await Zp(o,p,[...d,e],a,c);return}await n(e)}r($i,"openBrowser");function Zp(e,t,n,o,i){return new Promise((s,a)=>{let c=e(t,n),l=o(()=>{a(new Error(`Timed out waiting for "${t}" to spawn`))},Wp);c.once("error",p=>{i(l),a(p)}),c.once("spawn",()=>{i(l),s()})})}r(Zp,"spawnBrowser");var wo="openid profile email";function vo(e){return`http://localhost:${e}/`}r(vo,"callbackRedirectUri");function rd(e=process.env){let t=e.COGNITE_IDP_BASE_URL?.trim();return t?t.replace(/\/+$/,""):"https://auth.cognite.com"}r(rd,"resolveIdpBaseUrl");var Co=rd(),Ao={authority:Co,clientId:"0404baaa-0a90-43a2-aba7-a110b53fb41c",redirectUri:vo(3e3),port:3e3,loginTimeout:300*1e3},id={open:$i,startCallbackServer:Ii,isPortFree:Ri,discovery:ed,buildAuthorizationUrl:Xp,randomPKCECodeVerifier:nd,calculatePKCECodeChallenge:Qp,randomState:od,logger:console,telemetry:jt()};async function Gt(e,t=Ao,n){return n===void 0?Fi(e,t,id):Fi(e,t,n)}r(Gt,"login");async function sd(e,t){let{discovery:n}=e;try{return await n(new URL(t.authority),t.clientId,void 0,td())}catch(o){throw new m(`Failed to fetch OpenID configuration from ${t.authority}`,{cause:o})}}r(sd,"fetchOpenIdConfig");async function Fi(e,t,n){let{isPortFree:o,telemetry:i,logger:s,randomPKCECodeVerifier:a,calculatePKCECodeChallenge:c,randomState:l,buildAuthorizationUrl:p,open:d,startCallbackServer:u}=n;if(!await o(t.port))throw i?.track("Flows.CLI.PortInUse",{port:t.port}),new m(`Port ${t.port} is already in use \u2014 the login callback server cannot start`,{hint:Vt(t.port)});s.log(`\u{1F510} Starting CDF login flow...
|
|
23
|
+
`),s.log(`\u{1F4E1} Fetching OpenID configuration from ${t.authority}...`);let y=await sd(n,t),g=a(),h=await c(g),w=l(),S={redirect_uri:t.redirectUri,scope:t.scope??wo,code_challenge:h,code_challenge_method:"S256",state:w};e&&(S.organization_hint=e);let C=p(y,S).toString();e&&s.log(`\u{1F3E2} Organization: ${e}`),s.log(`\u{1F680} Opening browser for authentication...
|
|
24
|
+
`);try{await d(C)}catch(A){let x=A instanceof Error?A.message:String(A);s.error("\u274C Failed to open browser automatically."),s.error(` Reason: ${x}`),s.error(`Please open this URL manually:
|
|
25
|
+
`),s.error(C),s.error("")}return u(t,y,g,w)}r(Fi,"loginImpl");var Yt={...Ao,scope:`${wo} offline_access`},dd=3600,ud=1500*60;function Mi(e){return cd(new URL(e.authority),e.clientId,void 0,ad())}r(Mi,"discoverDefault");function Li(e){let t=typeof e=="string"?Number(e):e;return typeof t=="number"&&Number.isFinite(t)?t:void 0}r(Li,"asSeconds");function Ui(e,t,n=new Date,o={}){let i=t.access_token?b.from(t.access_token):null;if(!i)throw new m("Login succeeded but no access token was returned.",{hint:"The identity provider did not return an access token. Please try logging in again."});let s=t.refresh_token?b.from(t.refresh_token):o.previousRefreshToken;if(!s)throw new m("Login succeeded but no refresh token was returned.",{hint:"The identity provider may not support the `offline_access` scope, which is required for persisted sessions."});let a=n.getTime(),c=(Li(t.expires_in)??dd)*1e3,l=(Li(t.refresh_expires_in)??ud)*1e3;return{version:Mt,org:e.org,accessToken:i,refreshToken:s,accessTokenExpiresAt:new Date(a+c).toISOString(),refreshTokenExpiresAt:new Date(a+l).toISOString()}}r(Ui,"buildSession");async function Ni(e,t={}){if(e.port!==void 0&&!Bt(e.port))throw new m(Kt(e.port));let{login:n=r((a,c)=>Gt(a,c),"login"),now:o=r(()=>new Date,"now")}=t,i=e.port===void 0?Yt:{...Yt,port:e.port,redirectUri:vo(e.port)},s=await n(e.org,i);return Ui(e,s,o())}r(Ni,"loginForSession");async function _i(e,t={}){let{discovery:n=Mi,tokenRevocation:o=r((s,a)=>ld(s,a.expose()),"tokenRevocation")}=t,i=await n(Yt);await o(i,e)}r(_i,"revokeRefreshToken");async function ji(e,t={}){let n=t.discovery??Mi,o=t.refreshTokenGrant??((c,l)=>pd(c,l.expose())),i=t.now??(()=>new Date),s=await n(Yt),a=await o(s,e.refreshToken);return Ui({org:e.org},a,i(),{previousRefreshToken:e.refreshToken})}r(ji,"refreshSession");function Hi(e){if(typeof e!="object"||e===null)return!1;if("error"in e&&typeof e.error=="string"&&e.error==="invalid_grant")return!0;if(e instanceof Error)return/invalid_grant/i.test(e.message);let t="message"in e&&typeof e.message=="string"?e.message:"";return/invalid_grant/i.test(t)}r(Hi,"isInvalidGrant");var Eo=class Eo extends Error{constructor(n,o,i){super(o,i);this.kind=n;this.name="SessionVerificationError"}};r(Eo,"SessionVerificationError");var qe=Eo;function md(e){return e instanceof Error?"cause"in e&&e.cause instanceof Error?e.cause.message:e.message:String(e)}r(md,"describeTransportError");function gd(e){return!(typeof e!="object"||e===null||"sub"in e&&typeof e.sub!="string"||"email"in e&&typeof e.email!="string"||"name"in e&&typeof e.name!="string"||"preferred_username"in e&&typeof e.preferred_username!="string")}r(gd,"isJwtClaims");function fd(e){try{let t=e.expose().split(".");if(t.length!==3)return{};let n=JSON.parse(Buffer.from(t[1],"base64url").toString("utf-8"));return gd(n)?n:{}}catch{return{}}}r(fd,"decodeJwtClaims");function hd(e){return typeof e!="object"||e===null?!1:"items"in e?Array.isArray(e.items)?e.items.every(t=>typeof t=="object"&&t!==null&&"name"in t&&typeof t.name=="string"):!1:!0}r(hd,"isCogIdpProjectsResponse");function yd(e){if(e)try{return new URL(e).host}catch{return}}r(yd,"clusterFromApiUrl");async function zt(e,t={}){let n=t.fetch??globalThis.fetch,o=`${Co}/api/v0/orgs/${encodeURIComponent(e.org)}/projects`,i;try{i=await n(o,{headers:{Authorization:`Bearer ${e.accessToken.expose()}`}})}catch(p){throw new qe("unreachable",md(p),{cause:p})}if(!i.ok)throw new qe("rejected",`CogIdP rejected the token: ${i.status} ${i.statusText}`);let s=await i.json(),c=((hd(s)?s:{}).items??[]).map(p=>({name:p.name,cluster:yd(p.apiUrl),...p.isDefault?{isDefault:!0}:{}})),l=fd(e.accessToken);return{sub:l.sub??"unknown",email:l.email,name:l.name,preferredUsername:l.preferred_username,projects:c}}r(zt,"fetchSessionUserInfo");var vd=3e4,bo=class bo extends m{constructor(t){super("Your session has expired.",{hint:"Run `cognite auth login` to sign in again.",shouldReport:!1,...t===void 0?{}:{cause:t}}),this.name="SessionExpiredError"}};r(bo,"SessionExpiredError");var je=bo;function qt(e){return new je(e)}r(qt,"expiredError");async function Cd(e,t,n){let o=await e(Sd.dirname(t),{stale:vd,retries:{retries:10,factor:1.5,minTimeout:100,maxTimeout:1e3}});try{return await n()}finally{await o()}}r(Cd,"withSessionLock");async function Je(e={}){let t=e.readSession??(()=>lt()),n=e.now??(()=>new Date),o=e.sessionFile??D().sessionFile,i=e.lock??wd,s=await t();if(!s)return;let a=_e(s,n());if(a==="EXPIRED")throw qt();return a==="VALID"?s:Cd(i,o,async()=>{let c=await t()??s,l=_e(c,n());if(l==="EXPIRED")throw qt();return l==="VALID"?c:Ad(c,e)})}r(Je,"ensureFreshSession");async function Ad(e,t){let n=t.readSession??(()=>lt()),o=t.writeSession??(s=>Nt(s)),i=t.refreshSession??(s=>ji(s));try{let s=await i(e);return await o(s),s}catch(s){if(!Hi(s))throw s;let a=await n();if(a&&!a.refreshToken.equals(e.refreshToken))try{let c=await i(a);return await o(c),c}catch(c){throw qt(c)}throw qt(s)}}r(Ad,"refreshAndPersist");import{CogniteClient as ru}from"@cognite/sdk";var Bi="https://docs.cognite.com/cdf/access/";function U(e){return e!==null&&typeof e=="object"}r(U,"isRecord");function ae(e){return e instanceof Error&&"status"in e&&typeof e.status=="number"}r(ae,"isHttpError");function xo(e){return U(e.data)?e.data:void 0}r(xo,"httpErrorResponseBody");function Ki(e){let t=xo(e);if(!t)return;let n=t.error;if(U(n)&&typeof n.message=="string")return n.message;if(typeof t.message=="string")return t.message}r(Ki,"cdfApiErrorMessage");function Ed(e){switch(e){case 401:return`Your credentials are invalid or expired. Check your client ID and secret.
|
|
26
|
+
See: ${Bi}`;case 403:return`You don't have the required CDF capabilities. Please contact your CDF admin.
|
|
27
|
+
See: ${Bi}`;default:return}}r(Ed,"httpStatusHint");function fe(e){let t=e instanceof Error?e:new Error(String(e));if(!ae(t))return null;let n=Ed(t.status);return n?Object.assign(new Error(`${t.message}
|
|
28
|
+
${n}`),{cause:t}):null}r(fe,"enrichedHttpError");function bd(e){if(!U(e))return null;let t=e.missing;if(Array.isArray(t))return t;let n=e.data;if(U(n)){let o=n.error;if(U(o)&&Array.isArray(o.missing))return o.missing;if(Array.isArray(n.missing))return n.missing}return null}r(bd,"findMissingArray");function xd(e,t){if(!ae(e)||e.status!==400)return!1;let n=bd(e);return n?n.some(o=>U(o)&&typeof o.externalId=="string"&&t.includes(o.externalId)):!1}r(xd,"isMissingExternalIdError");function Jt(e,t){return ae(e)&&e.status===404||xd(e,t)}r(Jt,"isNotFoundError");var Gi=["DRAFT","PUBLISHED","DEPRECATED","ARCHIVED"],Yi=["ACTIVE","PREVIEW"],ko=class ko extends Error{constructor(t,n){super(`Version ${n} of app ${t} not found`),this.name="AppVersionNotFoundError",this.appExternalId=t,this.version=n}};r(ko,"AppVersionNotFoundError");var te=ko,Po=class Po extends Error{constructor(t){super(`App ${t} not found`),this.name="AppNotFoundError",this.appExternalId=t}};r(Po,"AppNotFoundError");var We=Po;function Wt(e,t){return e.includes(t)}r(Wt,"includesValue");function kd(e){return Wt(Gi,e)}r(kd,"isAppVersionLifecycleState");function Pd(e){return Wt(Yi,e)}r(Pd,"isAppVersionAlias");function Td(e){return typeof e.version=="string"&&kd(e.lifecycleState)&&typeof e.entrypoint=="string"&&typeof e.createdTime=="number"&&typeof e.createdBy=="string"&&typeof e.appExternalId=="string"&&(e.alias===void 0||Pd(e.alias))&&(e.comment===void 0||typeof e.comment=="string")}r(Td,"isAppVersion");function Vi(e){if(!U(e)){let t=JSON.stringify(e)?.slice(0,200)??String(e);throw new Error(`Invalid version response: expected object, got ${t}`)}if(!Td(e)){let t=JSON.stringify(e).slice(0,300);throw new Error(`Invalid version response: missing or malformed fields. Got: ${t}`)}return e}r(Vi,"parseAppVersion");function Rd(e){if(!U(e))throw new Error("Invalid app response: not an object");let{externalId:t,name:n,description:o}=e;if(typeof t!="string")throw new Error("Invalid app response: missing externalId");if(typeof n!="string")throw new Error("Invalid app response: missing name");if(o!=null&&typeof o!="string")throw new Error("Invalid app response: malformed description");return{externalId:t,name:n,description:typeof o=="string"?o:void 0}}r(Rd,"parseAppMetadata");var To=class To{constructor(t){this.client=t}get appsBasePath(){return`/api/v1/projects/${encodeURIComponent(this.client.project)}/apphosting/apps`}async createApp(t,n,o){try{await this.client.post(this.appsBasePath,{data:{items:[{externalId:t,name:n,description:o}]}})}catch(i){throw fe(i)??i}}async updateApps(t){try{await this.client.post(`${this.appsBasePath}/update`,{data:{items:t}})}catch(n){throw fe(n)??n}}async getApp(t){let n=`${this.appsBasePath}/${encodeURIComponent(t)}`;try{let o=await this.client.get(n);return Rd(o.data)}catch(o){throw Jt(o,[t])?new We(t):fe(o)??o}}async uploadVersion(t,n,o,i,s="index.html"){console.log(`\u{1F4E4} Uploading version ${n}...`);let a=new FormData;a.append("file",new Blob([new Uint8Array(o)]),i),a.append("version",n),a.append("entryPath",s);let c=encodeURIComponent(t),l=`${this.appsBasePath}/${c}/versions`,p=await this.client.authenticate();if(!p)throw new m("Failed to authenticate for upload",{hint:"Check your credentials and try again."});let d=b.from(p),u=`${this.client.getBaseUrl()}${l}`,f=new AbortController,y=setTimeout(()=>f.abort(),300*1e3),g;try{g=await fetch(u,{method:"POST",headers:{Authorization:`Bearer ${d.expose()}`},body:a,signal:f.signal})}catch(h){throw h instanceof Error&&h.name==="AbortError"?new m("Upload timed out after 5 minutes",{hint:"The upload took longer than 5 minutes. Try again \u2014 if it keeps timing out, check your network speed or bundle size."}):new m(`Failed to upload version to ${u}`,{cause:h,hint:"Check your network connection. Uploads can also fail behind a proxy that blocks multipart POST requests."})}finally{clearTimeout(y)}if(!g.ok){let h=await g.text(),w;try{w=JSON.parse(h)}catch{}let S=h;if(U(w)){let M=w.error;if(typeof M=="string")S=M;else if(U(M)){let K=M.message,R=M.code;S=typeof K=="string"?K:R!=null?`Unknown error (code: ${R})`:h}else{let K=w.message;S=typeof K=="string"?K:h}}let C=g.headers.get("x-request-id"),A=C?` | X-Request-ID: ${C}`:"",x=U(w)?w:h;throw new ie(`Upload failed: ${g.status} \u2014 ${S}${A}`,{httpStatusCode:g.status,requestUrl:u,responseBody:x})}console.log(`\u2705 Version ${n} uploaded`)}async getVersion(t,n){let o=encodeURIComponent(t),i=encodeURIComponent(n),s=`${this.appsBasePath}/${o}/versions/${i}`;try{let a=await this.client.get(s);return Vi(a.data)}catch(a){throw Jt(a,[t,n])?new te(t,n):fe(a)??a}}async getActiveVersion(t){let n=encodeURIComponent(t),o=`${this.appsBasePath}/${n}/versions/list`;try{let i=await this.client.post(o,{data:{filter:{aliases:["ACTIVE"]}}});if(!U(i.data)||!Array.isArray(i.data.items))throw new Error("Invalid versions/list response: expected an object with an items array");let{items:s}=i.data;if(s.length===0)return null;if(s.length>1)throw new Error(`Unexpected response: ${s.length} versions have the ACTIVE alias, expected at most 1`);return Vi(s[0])}catch(i){if(Jt(i,[t]))return null;throw fe(i)??i}}async deleteVersions(t,n){let o=encodeURIComponent(t),i=`${this.appsBasePath}/${o}/versions/delete`;try{await this.client.post(i,{data:{items:n.map(s=>({version:s}))}})}catch(s){throw fe(s)??s}}async updateVersions(t,n){let o=encodeURIComponent(t),i=`${this.appsBasePath}/${o}/versions/update`;try{await this.client.post(i,{data:{items:n}})}catch(s){throw fe(s)??s}}async submitSignatures(t,n,o){let i=encodeURIComponent(t),s=encodeURIComponent(n),a=`${this.appsBasePath}/${i}/versions/${s}/signatures`;try{await this.client.post(a,{data:{items:o}})}catch(c){throw fe(c)??c}}async listSignatures(t,n){let o=encodeURIComponent(t),i=encodeURIComponent(n),s=`${this.appsBasePath}/${o}/versions/${i}/signatures/list`;try{let a=await this.client.post(s,{data:{}});return $d(a.data)}catch(a){throw fe(a)??a}}};r(To,"AppHostingApi");var Zt=To,Id=["VALID","REVOKED","EXPIRED","SIGNED_BEFORE_KEY_ISSUED","IAT_IN_FUTURE","BUNDLE_TOO_OLD","KEY_NOT_IN_REGISTRY","SCOPE_MISMATCH","VERIFICATION_FAILED"],Dd=["developer","certifier"];function $d(e){if(!U(e))throw new Error("Invalid signatures response: expected an object with an items array");let{items:t}=e;if(!Array.isArray(t))throw new Error("Invalid signatures response: items property is missing or not an array");return t.flatMap(n=>{let o=Od(n);return o?[o]:[]})}r($d,"parseStoredSignatures");function Od(e){if(!U(e))return null;let{signerKid:t,signerRole:n,signatureIat:o,receivedAt:i,createdTime:s,status:a}=e;return typeof t!="string"||t===""||!Wt(Dd,n)||typeof o!="number"||typeof i!="number"||typeof s!="number"||!Wt(Id,a)?null:{signerKid:t,signerRole:n,signatureIat:o,receivedAt:i,createdTime:s,status:a}}r(Od,"parseStoredSignature");function Ro(e,t){let n=[];e.name!==t.name&&n.push({field:"name",remote:e.name,local:t.name});let o=e.description??"";return o!==t.description&&n.push({field:"description",remote:o,local:t.description}),n}r(Ro,"diffAppMetadata");function Fd(e){let t=["Cannot deploy: metadata in app.json differs from what's deployed:"];for(let{field:n,remote:o,local:i}of e){let s=`${n}:`.padEnd(14);t.push(` ${s}"${o}" \u2192 "${i}"`)}return t.join(`
|
|
29
|
+
`)}r(Fd,"formatMetadataDriftError");var Io=class Io{constructor(t){this.api=new Zt(t)}getVersion(t,n){return this.api.getVersion(t,n)}uploadVersion(t,n,o,i,s){return this.api.uploadVersion(t,n,o,i,s)}async ensureApp(t,n,o){console.log("\u{1F50D} Ensuring app exists...");try{await this.api.createApp(t,n,o),console.log(`\u2705 App '${t}' created`)}catch(i){if(ae(i)&&i.status===409){console.log(`\u2705 App '${t}' already exists`),await this.checkMetadataDrift(t,n,o);return}throw i}}async checkMetadataDrift(t,n,o){let i;try{i=await this.getApp(t)}catch{return}let s=Ro(i,{name:n,description:o});if(s.length!==0)throw new m(Fd(s),{hint:"Run npx @cognite/cli apps metadata update to sync before deploying",shouldReport:!1})}getApp(t){return this.api.getApp(t)}async updateAppMetadata(t,n,o){await this.api.updateApps([{externalId:t,update:{name:{set:n},description:o?{set:o}:{setNull:!0}}}])}async submitSignatures(t,n,o){o.length!==0&&(console.log(`\u{1F50F} Submitting ${o.length} signature${o.length===1?"":"s"} for version ${n}...`),await this.api.submitSignatures(t,n,o),console.log("\u2705 Signatures stored"))}listSignatures(t,n){return this.api.listSignatures(t,n)}async publishVersion(t,n){await this.api.updateVersions(t,[{version:n,update:{lifecycleState:{set:"PUBLISHED"}}}])}async publishAndActivate(t,n){console.log(`\u{1F680} Publishing and activating version ${n}...`),await this.api.updateVersions(t,[{version:n,update:{lifecycleState:{set:"PUBLISHED"},alias:{set:"ACTIVE"}}}]),console.log(`\u2705 Version ${n} is now PUBLISHED and ACTIVE`)}getActiveVersion(t){return this.api.getActiveVersion(t)}async deactivateVersion(t,n){await this.api.updateVersions(t,[{version:n,update:{alias:{setNull:!0}}}])}async deleteVersion(t,n){await this.api.deleteVersions(t,[n])}async deprecateVersion(t,n){await this.api.updateVersions(t,[{version:n,update:{lifecycleState:{set:"DEPRECATED"}}}])}async archiveVersion(t,n){await this.api.updateVersions(t,[{version:n,update:{lifecycleState:{set:"ARCHIVED"}}}])}async activateVersion(t,n){let o=null;try{o=await this.api.getActiveVersion(t)}catch{o=null}let i=o&&o.version!==n?o.version:void 0;return await this.api.updateVersions(t,[{version:n,update:{alias:{set:"ACTIVE"}}}]),{supersededVersion:i}}async deploy(t,n,o,i,s,a,c=!1){console.log(`
|
|
30
30
|
\u{1F680} Deploying application via App Hosting API...
|
|
31
31
|
`),await this.ensureApp(t,n,o),await this.uploadVersion(t,i,s,a),c&&await this.publishAndActivate(t,i),console.log(`
|
|
32
|
-
\u2705 Deployment successful!`)}};r(
|
|
33
|
-
Using session credentials \u2014 your token has access to all projects in the "${e.org}" organization.`),!i)throw new m("Session credentials detected but no TTY available for confirmation.",{shouldReport:!1,hint:"Pass --confirm-action-target <org/project> to skip the prompt, or configure deployClientId and deploySecretName in app.json."});let{confirmed:c}=await s(`Confirm ${n} to ${a}?`);if(!c)throw new m("Aborted.",{shouldReport:!1})},"confirmActionTarget");import Ld from"enquirer";var Md=r(e=>Ld.prompt(e),"defaultPrompt");function Ud(e){switch(e.method){case"client-credentials":return"Use client credentials from app.json";case"session":return`Reuse existing session for ${e.org}`;case"browser":return"One-off sign-in via browser (does not save a session; use `cognite auth login` for that)"}}r(Ud,"choiceLabel");async function Qt(e,t=Md){if(e.length===0)throw new m("No valid authentication method available.",{hint:"Run `cognite auth login` and authenticate to the correct organization, or set deployClientId/deploySecretName in app.json."});let n=e.map(a=>a.method);if(new Set(n).size!==n.length)throw new Error(`Cannot present a selection with duplicate method names (${n.join(", ")}).`);let o=Array.from(new Set(n)).join("|"),{choice:i}=await t({type:"select",name:"choice",message:`Multiple valid authentication methods detected (skip with --auth-method <${o}>). Authenticate with`,choices:e.map(a=>({name:a.method,message:Ud(a)}))}),s=e.find(a=>a.method===i);if(!s)throw new m(`Selected authentication method "${i}" was not offered.`,{hint:"Pass --auth-method to choose one of the offered methods explicitly."});return s}r(Qt,"promptAuthMethod");async function Gi(e,t,n,o={confirmActionTarget:Xt,promptAuthMethod:Qt,isTTY:process.stdin.isTTY??!1}){let{valid:i}=e;if(i.length===0)throw Nd(e,t);let s;if(n.authMethod){let a=i.find(c=>c.method===n.authMethod);if(!a)throw new m(`Pass --auth-method ${i.map(c=>c.method).join(" or --auth-method ")} \u2014 "${n.authMethod}" is not currently valid for ${t.project} @ ${t.baseUrl}.`,{hint:"Run `cognite auth login` for a session, set deployClientId/deploySecretName in app.json for client credentials, or pass --interactive for browser login."});s=a}else if(i.length===1)[s]=i;else if(o.isTTY)s=await o.promptAuthMethod(i);else throw new m(`Pass --auth-method ${i.map(a=>a.method).join("|")} to choose non-interactively \u2014 several are valid for ${t.project} @ ${t.baseUrl} and there is no TTY to prompt.`,{shouldReport:!1,hint:"Or re-run in an interactive terminal to pick from the prompt."});if(s.method==="session"&&n.action&&!n.interactive)await o.confirmActionTarget(t,{confirmActionTarget:n.confirmActionTarget},n.action);else if(n.confirmActionTarget!==void 0&&s.method!=="session")throw new m(`Remove --confirm-action-target \u2014 it only guards session credentials and is never validated against the selected deployment with ${s.method} authentication.`,{shouldReport:!1,hint:"Pass --auth-method session (or pick the session option at the prompt) if you meant to acknowledge a session target."});return s}r(Gi,"chooseAuthMethod");function Nd(e,t){let{invalidSession:n}=e;if(!n)return new m(`No credentials available for ${t.project} @ ${t.baseUrl}.`,{hint:"Run `cognite auth login`, set deployClientId/deploySecretName in app.json, or pass --interactive."});let o=`Run \`cognite auth login\` for "${t.org}", or pass --interactive.`;return n.reason==="SESSION_EXPIRED"?new m(`Your session for organization "${n.org}" has expired.`,{hint:o}):new m(`Your active session is for organization "${n.org}", but this command targets "${t.org}".`,{hint:o})}r(Nd,"createNoCredentialsError");function Yi(e,t,n){return e?t.org&&e.org!==t.org?{reason:"DIFFERENT_ORG",org:void 0}:je(e,n)==="EXPIRED"?{reason:"SESSION_EXPIRED",org:void 0}:{org:e.org,reason:"VALID"}:{reason:"SESSION_MISSING",org:void 0}}r(Yi,"getSessionOrgIfValid");function zi(e,t,n){let o=[];e.deployClientId&&o.push({method:"client-credentials",org:e.org});let i=n.readSessionMetadata(),s=Yi(i,e,n.now());return s.reason==="VALID"&&o.push({method:"session",org:s.org}),t.interactive&&o.push({method:"browser"}),i&&(s.reason==="SESSION_EXPIRED"||s.reason==="DIFFERENT_ORG")?{valid:o,invalidSession:{reason:s.reason,org:i.org}}:{valid:o}}r(zi,"validAuthMethods");import{CogniteClient as qd}from"@cognite/sdk";function _d(e){return Math.floor(Math.random()*Math.min(2**e*250,15e3))}r(_d,"exponentialBackoffWithJitter");function jd(e){return new Promise(t=>setTimeout(t,e))}r(jd,"sleep");async function qi(e,t={}){let n=t.maxAttempts??5,o=t.shouldRetry??(()=>!0),i=t.delayInMsCalculator??_d;if(n<1)throw new Error("`maxAttempts` must be 1 or greater");if(n>100)throw new Error("`maxAttempts` must be 100 or less");let s=1;for(;;)try{return await e()}catch(a){if(s>=n||!o(a))throw a;let c=i(s);t.onAttemptFail?.(a,s,c),await jd(c),s++}}r(qi,"retryAsync");var Hd="https://auth.cognite.com/oauth2/token",Bd=r(e=>typeof e=="object"&&e!==null&&"access_token"in e&&typeof e.access_token=="string","hasAccessToken");async function Ji({idp:e,tokenUrl:t,init:n,missingTokenHint:o}){let i;try{i=await qi(()=>fetch(t,n),{maxAttempts:3})}catch(c){throw new m(`Failed to fetch access token from ${t}`,{cause:c})}if(!i.ok){let c=await i.text();throw new de(`Failed to get token from ${e}: ${i.status} ${i.statusText}`,{httpStatusCode:i.status,requestUrl:t,responseBody:c})}let s=await i.text(),a;try{a=JSON.parse(s)}catch{throw new m(`Unexpected response from ${e} authentication (invalid JSON)`,{hint:o})}if(!Bd(a))throw new m(`No access token in ${e} authentication response`,{hint:o});return b.from(a.access_token)}r(Ji,"fetchOAuthToken");var Kd=r(e=>{let t=e.DEPLOYMENT_SECRETS;if(!t)return{};try{let n=JSON.parse(t),o={};for(let[i,s]of Object.entries(n))if(typeof s=="string"){let a=i.toLowerCase().replace(/_/g,"-");o[a]=s}return o}catch(n){return console.error("Error parsing DEPLOYMENT_SECRETS:",n),{}}},"loadSecretsFromEnv"),Vd=r((e,t)=>{let n;if(t.DEPLOYMENT_SECRET&&(n=t.DEPLOYMENT_SECRET),n||(n=Kd(t)[e]),n||(n=t[e]),!n)throw new m(`Set the ${e} environment variable (named by deploySecretName in app.json) to your deploy client secret, e.g. in a .env file.`,{shouldReport:!1,hint:"Alternatively, run `cognite auth login` to use your session, or pass --interactive for a one-off browser login."});return b.from(n)},"getSecretFromEnv"),Gd=r((e,t)=>{let n=t.expose();return Ji({idp:"CDF",tokenUrl:Hd,init:{method:"POST",headers:{Authorization:`Basic ${btoa(`${e}:${n}`)}`,"Content-Type":"application/x-www-form-urlencoded"},body:new URLSearchParams({grant_type:"client_credentials"})},missingTokenHint:"Check the client ID in app.json and the deployment secret in your environment."})},"getTokenCdf"),Wi=r(({idp:e,tokenUrl:t,clientId:n,clientSecret:o,scopes:i,missingTokenHint:s})=>Ji({idp:e,tokenUrl:t,init:{method:"POST",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:new URLSearchParams({client_id:n,client_secret:o,grant_type:"client_credentials",...i!==void 0?{scope:i.join(" ")}:{}})},missingTokenHint:s}),"getTokenWithClientCredentials"),Yd=r((e,t)=>{if(t!==void 0)return t.join(" ");if(!e)throw new Error("Entra ID authentication requires 'baseUrl' to be set in deployment configuration");try{return`${new URL(e).origin}/.default`}catch{throw new Error(`Entra ID authentication requires 'baseUrl' to be a valid CDF URL (e.g., https://cluster.cognitedata.com), got: ${e}`)}},"resolveEntraScope"),zd=r((e,t,n,o,i)=>Wi({idp:"Entra ID",tokenUrl:`https://login.microsoftonline.com/${n}/oauth2/v2.0/token`,clientId:e,clientSecret:t.expose(),scopes:i!==void 0?i:[Yd(o)],missingTokenHint:"Check the client ID and tenant ID in app.json and the deployment secret in your environment."}),"getTokenEntra"),To=r(async(e,t=process.env)=>{if(t.COGNITE_TOKEN)return b.from(t.COGNITE_TOKEN);let{deployClientId:n,deploySecretName:o,idpType:i="cdf",tenantId:s,baseUrl:a,scopes:c,tokenUrl:l}=e,p=Vd(o,t);if(i==="oauth"){if(!l)throw new Error("OAuth authentication requires 'tokenUrl' in deployment configuration");return Wi({idp:"OAuth",tokenUrl:l,clientId:n,clientSecret:p.expose(),scopes:c,missingTokenHint:"Check the tokenUrl, client ID, scopes, and deployment secret in app.json and your environment."})}if(i==="entra_id"){if(!s)throw new Error("Entra ID authentication requires 'tenantId' in deployment configuration");return zd(n,p,s,a,c)}return Gd(n,p)},"getToken");async function en(e,t,n=process.env,o){let i=await To(e,n),s=n.COGNITE_BASE_URL??e.baseUrl,a=(o??(c=>new qd(c)))({appId:t,project:e.project,baseUrl:s,oidcTokenProvider:r(async()=>i.expose(),"oidcTokenProvider")});return await a.authenticate(),a}r(en,"getSdk");async function tn(e,t,n,o){let i=o({appId:t,project:e.project,baseUrl:e.baseUrl,oidcTokenProvider:r(async()=>n.expose(),"oidcTokenProvider")});return await i.authenticate(),i}r(tn,"buildAuthenticatedClient");async function Zi(e,t,n){let{loginFn:o,createClient:i}=n,s=t.orgHint||e.org||void 0,a=await o(s);return tn(e,t.appId,b.from(a.access_token),i)}r(Zi,"resolveViaBrowser");import{HttpError as Jd}from"@cognite/sdk";import{array as Xi,number as Wd,object as Qi,optional as Zd,safeParse as Xd,string as Qd}from"valibot";var eu=Qi({projects:Zd(Xi(Qi({projectUrlName:Qd(),groups:Xi(Wd())})))});function tu(e,t){switch(e){case 401:return"Run `cognite auth login` to log in.";case 403:return"The token is valid but lacks access to this project. Ask your CDF admin to grant its service account access.";default:return e>=500?`${t} returned a server error \u2014 this is usually transient, so try again shortly.`:"Check that the deployment base URL and project in app.json are correct."}}r(tu,"hintForStatus");var es=r(async function(e){let t=e.getBaseUrl(),n;try{({data:n}=await e.get("/api/v1/token/inspect"))}catch(i){throw i instanceof Jd?new m(`Could not verify project access against ${t} (${i.status}).`,{hint:tu(i.status,t),cause:i}):new m(`Could not connect to ${t} to verify project access.`,{hint:"Check your network connection and verify that the base URL is correct.",cause:i})}let o=Xd(eu,n);if(!o.success)throw new m(`Unexpected response from ${t}/api/v1/token/inspect.`,{hint:"Retry; if it persists, your CLI may be out of date or a proxy is altering responses.",cause:new Error(JSON.stringify(o.issues))});return o.output},"inspectDeploymentToken");async function ts(e,t,n,o){if(!((await(o?.inspectToken||es)(e)).projects??[]).some(c=>c.projectUrlName===t.project&&c.groups.length>0))throw new m(`Your session for organization "${n}" doesn't have access to project "${t.project}" on ${t.baseUrl}.`,{hint:`Check you signed in to the right organization, or have access to the project "${t.project}" within "${n}" organization; \`@cognite/cli auth status\` lists the projects you can reach within your already logged in session token.`})}r(ts,"assertProjectAccess");async function ns(e,t,n,o){let i=await o.ensureFreshSession();if(!i)throw new m(`No credentials available for ${e.project} @ ${e.baseUrl}.`,{hint:"Run `cognite auth login` to login."});let s=await tn(e,t,i.accessToken,o.createClient);return await ts(s,e,n),s}r(ns,"resolveViaSession");async function os(e,t,n,o){switch(e.method){case"client-credentials":return o.getSdkFn(t,n.appId);case"session":return ns(t,n.appId,e.org,o);case"browser":return Zi(t,n,o)}}r(os,"buildClientForAuthMethod");async function _(e,t,n={}){let{login:o=Gt,getSdk:i=en,createClient:s=r(g=>new nu(g),"createClient"),readSessionMetadata:a=xe,ensureFreshSession:c=We,promptAuthMethod:l=Qt,confirmActionTarget:p=Xt,isTTY:d=process.stdin?.isTTY??!1,now:u=r(()=>new Date,"now")}=n,f=zi(e,t,{readSessionMetadata:a,now:u}),h=await Gi(f,e,t,{promptAuthMethod:l,confirmActionTarget:p,isTTY:d});return os(h,e,t,{loginFn:o,getSdkFn:i,createClient:s,ensureFreshSession:c})}r(_,"buildAppHostingApiClient");async function nn(e,t,n={}){let o=await _(e,t,n);return new U(o)}r(nn,"buildAppHostingClient");import rs from"enquirer";var is="Enter custom target...";function ss(e,t){let n=t.map((o,i)=>` ${i}: ${o.org}/${o.project}`).join(`
|
|
32
|
+
\u2705 Deployment successful!`)}};r(Io,"AppHostingClient");var N=Io;import Ld from"enquirer";function Md(e){return`${e.org}/${e.project}`}r(Md,"targetLabel");var Xt=r(async function(e,t,n,o={isTTY:process.stdin.isTTY??!1,confirm:r(i=>Ld.prompt({type:"confirm",name:"confirmed",message:i,initial:!1}),"confirm")}){let{isTTY:i,confirm:s}=o,a=Md(e);if(t.confirmActionTarget!==void 0){if(t.confirmActionTarget===a)return;throw new m(`--confirm-action-target "${t.confirmActionTarget}" does not match the deployment this command resolved to ("${a}").`,{shouldReport:!1,hint:`Pass --confirm-action-target ${a} to ${n}.`})}if(console.warn(`
|
|
33
|
+
Using session credentials \u2014 your token has access to all projects in the "${e.org}" organization.`),!i)throw new m("Session credentials detected but no TTY available for confirmation.",{shouldReport:!1,hint:"Pass --confirm-action-target <org/project> to skip the prompt, or configure deployClientId and deploySecretName in app.json."});let{confirmed:c}=await s(`Confirm ${n} to ${a}?`);if(!c)throw new m("Aborted.",{shouldReport:!1})},"confirmActionTarget");import Ud from"enquirer";var Nd=r(e=>Ud.prompt(e),"defaultPrompt");function _d(e){switch(e.method){case"client-credentials":return"Use client credentials from app.json";case"session":return`Reuse existing session for ${e.org}`;case"browser":return"One-off sign-in via browser (does not save a session; use `cognite auth login` for that)"}}r(_d,"choiceLabel");async function Qt(e,t=Nd){if(e.length===0)throw new m("No valid authentication method available.",{hint:"Run `cognite auth login` and authenticate to the correct organization, or set deployClientId/deploySecretName in app.json."});let n=e.map(a=>a.method);if(new Set(n).size!==n.length)throw new Error(`Cannot present a selection with duplicate method names (${n.join(", ")}).`);let o=Array.from(new Set(n)).join("|"),{choice:i}=await t({type:"select",name:"choice",message:`Multiple valid authentication methods detected (skip with --auth-method <${o}>). Authenticate with`,choices:e.map(a=>({name:a.method,message:_d(a)}))}),s=e.find(a=>a.method===i);if(!s)throw new m(`Selected authentication method "${i}" was not offered.`,{hint:"Pass --auth-method to choose one of the offered methods explicitly."});return s}r(Qt,"promptAuthMethod");async function zi(e,t,n,o={confirmActionTarget:Xt,promptAuthMethod:Qt,isTTY:process.stdin.isTTY??!1}){let{valid:i}=e;if(i.length===0)throw jd(e,t);let s;if(n.authMethod){let a=i.find(c=>c.method===n.authMethod);if(!a)throw new m(`Pass --auth-method ${i.map(c=>c.method).join(" or --auth-method ")} \u2014 "${n.authMethod}" is not currently valid for ${t.project} @ ${t.baseUrl}.`,{hint:"Run `cognite auth login` for a session, or set deployClientId/deploySecretName in app.json for client credentials."});s=a}else if(i.length===1)[s]=i;else if(o.isTTY)s=await o.promptAuthMethod(i);else throw new m(`Pass --auth-method ${i.map(a=>a.method).join("|")} to choose non-interactively \u2014 several are valid for ${t.project} @ ${t.baseUrl} and there is no TTY to prompt.`,{shouldReport:!1,hint:"Or re-run in an interactive terminal to pick from the prompt."});if(s.method==="session"&&n.action&&!n.interactive)await o.confirmActionTarget(t,{confirmActionTarget:n.confirmActionTarget},n.action);else if(n.confirmActionTarget!==void 0&&s.method!=="session")throw new m(`Remove --confirm-action-target \u2014 it only guards session credentials and is never validated against the selected deployment with ${s.method} authentication.`,{shouldReport:!1,hint:"Pass --auth-method session (or pick the session option at the prompt) if you meant to acknowledge a session target."});return s}r(zi,"chooseAuthMethod");function jd(e,t){let{invalidSession:n}=e;if(!n)return new m(`No credentials available for ${t.project} @ ${t.baseUrl}.`,{hint:"Run `cognite auth login`, or set deployClientId/deploySecretName in app.json."});let o=`Run \`cognite auth login\` for "${t.org}".`;return n.reason==="SESSION_EXPIRED"?new m(`Your session for organization "${n.org}" has expired.`,{hint:o}):new m(`Your active session is for organization "${n.org}", but this command targets "${t.org}".`,{hint:o})}r(jd,"createNoCredentialsError");function qi(e,t,n){return e?t.org&&e.org!==t.org?{reason:"DIFFERENT_ORG",org:void 0}:_e(e,n)==="EXPIRED"?{reason:"SESSION_EXPIRED",org:void 0}:{org:e.org,reason:"VALID"}:{reason:"SESSION_MISSING",org:void 0}}r(qi,"getSessionOrgIfValid");function Ji(e,t,n){let o=[];e.deployClientId&&o.push({method:"client-credentials",org:e.org});let i=n.readSessionMetadata(),s=qi(i,e,n.now());return s.reason==="VALID"&&o.push({method:"session",org:s.org}),t.interactive&&o.push({method:"browser"}),i&&(s.reason==="SESSION_EXPIRED"||s.reason==="DIFFERENT_ORG")?{valid:o,invalidSession:{reason:s.reason,org:i.org}}:{valid:o}}r(Ji,"validAuthMethods");import{CogniteClient as Wd}from"@cognite/sdk";function Hd(e){return Math.floor(Math.random()*Math.min(2**e*250,15e3))}r(Hd,"exponentialBackoffWithJitter");function Bd(e){return new Promise(t=>setTimeout(t,e))}r(Bd,"sleep");async function Wi(e,t={}){let n=t.maxAttempts??5,o=t.shouldRetry??(()=>!0),i=t.delayInMsCalculator??Hd;if(n<1)throw new Error("`maxAttempts` must be 1 or greater");if(n>100)throw new Error("`maxAttempts` must be 100 or less");let s=1;for(;;)try{return await e()}catch(a){if(s>=n||!o(a))throw a;let c=i(s);t.onAttemptFail?.(a,s,c),await Bd(c),s++}}r(Wi,"retryAsync");var Kd="https://auth.cognite.com/oauth2/token",Vd=r(e=>typeof e=="object"&&e!==null&&"access_token"in e&&typeof e.access_token=="string","hasAccessToken");async function Zi({idp:e,tokenUrl:t,init:n,missingTokenHint:o}){let i;try{i=await Wi(()=>fetch(t,n),{maxAttempts:3})}catch(c){throw new m(`Failed to fetch access token from ${t}`,{cause:c})}if(!i.ok){let c=await i.text();throw new ie(`Failed to get token from ${e}: ${i.status} ${i.statusText}`,{httpStatusCode:i.status,requestUrl:t,responseBody:c})}let s=await i.text(),a;try{a=JSON.parse(s)}catch{throw new m(`Unexpected response from ${e} authentication (invalid JSON)`,{hint:o})}if(!Vd(a))throw new m(`No access token in ${e} authentication response`,{hint:o});return b.from(a.access_token)}r(Zi,"fetchOAuthToken");var Gd=r(e=>{let t=e.DEPLOYMENT_SECRETS;if(!t)return{};try{let n=JSON.parse(t),o={};for(let[i,s]of Object.entries(n))if(typeof s=="string"){let a=i.toLowerCase().replace(/_/g,"-");o[a]=s}return o}catch(n){return console.error("Error parsing DEPLOYMENT_SECRETS:",n),{}}},"loadSecretsFromEnv"),Yd=r((e,t)=>{let n;if(t.DEPLOYMENT_SECRET&&(n=t.DEPLOYMENT_SECRET),n||(n=Gd(t)[e]),n||(n=t[e]),!n)throw new m(`Set the ${e} environment variable (named by deploySecretName in app.json) to your deploy client secret, e.g. in a .env file.`,{shouldReport:!1,hint:"Alternatively, run `cognite auth login` to use your session, or pass --interactive for a one-off browser login."});return b.from(n)},"getSecretFromEnv"),zd=r((e,t)=>{let n=t.expose();return Zi({idp:"CDF",tokenUrl:Kd,init:{method:"POST",headers:{Authorization:`Basic ${btoa(`${e}:${n}`)}`,"Content-Type":"application/x-www-form-urlencoded"},body:new URLSearchParams({grant_type:"client_credentials"})},missingTokenHint:"Check the client ID in app.json and the deployment secret in your environment."})},"getTokenCdf"),Xi=r(({idp:e,tokenUrl:t,clientId:n,clientSecret:o,scopes:i,missingTokenHint:s})=>Zi({idp:e,tokenUrl:t,init:{method:"POST",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:new URLSearchParams({client_id:n,client_secret:o,grant_type:"client_credentials",...i!==void 0?{scope:i.join(" ")}:{}})},missingTokenHint:s}),"getTokenWithClientCredentials"),qd=r((e,t)=>{if(t!==void 0)return t.join(" ");if(!e)throw new Error("Entra ID authentication requires 'baseUrl' to be set in deployment configuration");try{return`${new URL(e).origin}/.default`}catch{throw new Error(`Entra ID authentication requires 'baseUrl' to be a valid CDF URL (e.g., https://cluster.cognitedata.com), got: ${e}`)}},"resolveEntraScope"),Jd=r((e,t,n,o,i)=>Xi({idp:"Entra ID",tokenUrl:`https://login.microsoftonline.com/${n}/oauth2/v2.0/token`,clientId:e,clientSecret:t.expose(),scopes:i!==void 0?i:[qd(o)],missingTokenHint:"Check the client ID and tenant ID in app.json and the deployment secret in your environment."}),"getTokenEntra"),Do=r(async(e,t=process.env)=>{if(t.COGNITE_TOKEN)return b.from(t.COGNITE_TOKEN);let{deployClientId:n,deploySecretName:o,idpType:i="cdf",tenantId:s,baseUrl:a,scopes:c,tokenUrl:l}=e,p=Yd(o,t);if(i==="oauth"){if(!l)throw new Error("OAuth authentication requires 'tokenUrl' in deployment configuration");return Xi({idp:"OAuth",tokenUrl:l,clientId:n,clientSecret:p.expose(),scopes:c,missingTokenHint:"Check the tokenUrl, client ID, scopes, and deployment secret in app.json and your environment."})}if(i==="entra_id"){if(!s)throw new Error("Entra ID authentication requires 'tenantId' in deployment configuration");return Jd(n,p,s,a,c)}return zd(n,p)},"getToken");async function en(e,t,n=process.env,o){let i=await Do(e,n),s=n.COGNITE_BASE_URL??e.baseUrl,a=(o??(c=>new Wd(c)))({appId:t,project:e.project,baseUrl:s,oidcTokenProvider:r(async()=>i.expose(),"oidcTokenProvider")});return await a.authenticate(),a}r(en,"getSdk");async function tn(e,t,n,o){let i=o({appId:t,project:e.project,baseUrl:e.baseUrl,oidcTokenProvider:r(async()=>n.expose(),"oidcTokenProvider")});return await i.authenticate(),i}r(tn,"buildAuthenticatedClient");async function Qi(e,t,n){let{loginFn:o,createClient:i}=n,s=t.orgHint||e.org||void 0,a=await o(s);return tn(e,t.appId,b.from(a.access_token),i)}r(Qi,"resolveViaBrowser");import{HttpError as Zd}from"@cognite/sdk";import{array as es,number as Xd,object as ts,optional as Qd,safeParse as eu,string as tu}from"valibot";var nu=ts({projects:Qd(es(ts({projectUrlName:tu(),groups:es(Xd())})))});function ou(e,t){switch(e){case 401:return"Run `cognite auth login` to log in.";case 403:return"The token is valid but lacks access to this project. Ask your CDF admin to grant its service account access.";default:return e>=500?`${t} returned a server error \u2014 this is usually transient, so try again shortly.`:"Check that the deployment base URL and project in app.json are correct."}}r(ou,"hintForStatus");var ns=r(async function(e){let t=e.getBaseUrl(),n;try{({data:n}=await e.get("/api/v1/token/inspect"))}catch(i){throw i instanceof Zd?new m(`Could not verify project access against ${t} (${i.status}).`,{hint:ou(i.status,t),cause:i}):new m(`Could not connect to ${t} to verify project access.`,{hint:"Check your network connection and verify that the base URL is correct.",cause:i})}let o=eu(nu,n);if(!o.success)throw new m(`Unexpected response from ${t}/api/v1/token/inspect.`,{hint:"Retry; if it persists, your CLI may be out of date or a proxy is altering responses.",cause:new Error(JSON.stringify(o.issues))});return o.output},"inspectDeploymentToken");async function os(e,t,n,o){if(!((await(o?.inspectToken||ns)(e)).projects??[]).some(c=>c.projectUrlName===t.project&&c.groups.length>0))throw new m(`Your session for organization "${n}" doesn't have access to project "${t.project}" on ${t.baseUrl}.`,{hint:`Check you signed in to the right organization, or have access to the project "${t.project}" within "${n}" organization; \`@cognite/cli auth status\` lists the projects you can reach within your already logged in session token.`})}r(os,"assertProjectAccess");async function rs(e,t,n,o){let i=await o.ensureFreshSession();if(!i)throw new m(`No credentials available for ${e.project} @ ${e.baseUrl}.`,{hint:"Run `cognite auth login` to login."});let s=await tn(e,t,i.accessToken,o.createClient);return await os(s,e,n),s}r(rs,"resolveViaSession");async function is(e,t,n,o){switch(e.method){case"client-credentials":return o.getSdkFn(t,n.appId);case"session":return rs(t,n.appId,e.org,o);case"browser":return Qi(t,n,o)}}r(is,"buildClientForAuthMethod");async function j(e,t,n={}){let{login:o=Gt,getSdk:i=en,createClient:s=r(g=>new ru(g),"createClient"),readSessionMetadata:a=ke,ensureFreshSession:c=Je,promptAuthMethod:l=Qt,confirmActionTarget:p=Xt,isTTY:d=process.stdin?.isTTY??!1,now:u=r(()=>new Date,"now")}=n,f=Ji(e,t,{readSessionMetadata:a,now:u}),y=await zi(f,e,t,{promptAuthMethod:l,confirmActionTarget:p,isTTY:d});return is(y,e,t,{loginFn:o,getSdkFn:i,createClient:s,ensureFreshSession:c})}r(j,"buildAppHostingApiClient");async function nn(e,t,n={}){let o=await j(e,t,n);return new N(o)}r(nn,"buildAppHostingClient");import ss from"enquirer";var as="Enter custom target...";function cs(e,t){let n=t.map((o,i)=>` ${i}: ${o.org}/${o.project}`).join(`
|
|
34
34
|
`);throw new Error(`Deployment "${e}" not found. Available deployments:
|
|
35
|
-
${n}`)}r(
|
|
35
|
+
${n}`)}r(cs,"deploymentNotFoundError");function $(e,t){if(e.length===0)throw new Error("No deployments configured in app.json");if(t===void 0)return e[0];if(/^\d+$/.test(t)){let o=e[Number.parseInt(t)];if(o)return o;cs(t,e)}let n=e.find(o=>o.project===t||`${o.org}/${o.project}`===t);if(n)return n;cs(t,e)}r($,"findDeployment");async function L(e,t){if(t.confirmActionTarget!==void 0)throw new m("Pass -d/--deployment <target> to choose a target non-interactively \u2014 --confirm-action-target cannot be combined with --interactive.",{shouldReport:!1,hint:"--interactive already prompts for the target, so there is nothing for --confirm-action-target to acknowledge."});if(t.baseUrl&&t.project)return{org:t.org??"",project:t.project,baseUrl:t.baseUrl,deployClientId:"",deploySecretName:"",published:!1,idpType:"cdf"};if(t.deployment!==void 0)return $(e.deployments,t.deployment);let n=[...e.deployments.map(s=>`${s.org}/${s.project}`),as],{selected:o}=await ss.prompt({type:"select",name:"selected",message:"Select deployment target",choices:n});if(o!==as){let s=e.deployments.find(a=>`${a.org}/${a.project}`===o);if(s)return s;throw new Error(`Deployment "${o}" could not be resolved from app.json.`)}let i=await ss.prompt([{type:"input",name:"baseUrl",message:"CDF Base URL",initial:"https://api.cognitedata.com"},{type:"input",name:"project",message:"CDF Project",validate:r(s=>s?!0:"Project is required","validate")},{type:"input",name:"org",message:"Organization (for login hint)",initial:""}]);return{org:i.org||"",project:i.project,baseUrl:i.baseUrl,deployClientId:"",deploySecretName:"",published:!1,idpType:"cdf"}}r(L,"resolveDeployment");function ls(e,t=process.cwd(),n={}){let o=n.readSessionMetadata??ke,i=n.loadAppConfig??k;if(e.org)return e.org;let s=o();if(s?.org)return s.org;try{let a=i(t),c=$(a.deployments,void 0);if(c.org)return c.org}catch{}throw new m("Could not determine org.",{hint:"Pass --org <org>, run `cognite auth login`, or run from an agent directory with app.json.",shouldReport:!1})}r(ls,"resolveOrg");function T(e,t=1){return" ".repeat(t).concat(e)}r(T,"indent");async function z(e,t=process.cwd(),n={}){let o=n.ensureFreshSession??Je,i=n.fetchUserInfo??zt,s=n.loadAppConfig??k,a=n.createClient??(l=>new iu(l));if(e.interactive&&e.baseUrl&&e.project)return await j(cu(e),{interactive:!0,appId:"cognite-cli",orgHint:e.org},n.getClient);let c=await su(e,o,i,a);if(c)return c;try{let l=s(t),p=e.interactive?await L(l,e):$(l.deployments,void 0);return await j(p,{interactive:e.interactive,appId:"cognite-cli",orgHint:e.org},n.getClient)}catch{}throw new m("Not signed in.",{hint:"Run `cognite auth login` to start a session, or pass --interactive --base-url <url> --project <project>.",shouldReport:!1})}r(z,"getAgentClient");async function su(e,t,n,o){let i;try{i=await t()}catch(p){if(p instanceof je)throw new m("Your session has expired.",{hint:"Run `cognite auth login` to sign in again.",shouldReport:!1,cause:p});return null}if(!i)return null;let s=await n(i),a=au(e.project,s.projects),c=`https://${a.cluster}`,l=o({appId:"cognite-cli",project:a.name,baseUrl:c,oidcTokenProvider:r(async()=>((await t())?.accessToken??i.accessToken).expose(),"oidcTokenProvider")});return await l.authenticate(),l}r(su,"trySessionClient");function au(e,t){if(e){let o=t.find(i=>i.name===e);if(!o?.cluster)throw new m(`Project "${e}" not found in your session.`,{hint:t.length?`Available projects: ${t.map(i=>i.name).join(", ")}`:"Your session has no reachable projects. Check your org and permissions.",shouldReport:!1});return{...o,cluster:o.cluster}}let n=t.find(o=>o.isDefault);if(n?.cluster)return{...n,cluster:n.cluster};if(t.length===1&&t[0].cluster)return{...t[0],cluster:t[0].cluster};throw t.length===0?new m("No reachable projects found in your session.",{hint:"Check your org and permissions, or pass --project <project>.",shouldReport:!1}):new m("Multiple projects available \u2014 specify which one to use.",{hint:`Pass --project <name>. Available: ${t.map(o=>o.name).join(", ")}`,shouldReport:!1})}r(au,"resolveSessionProject");function cu(e){return{org:e.org??"",project:e.project??"",baseUrl:e.baseUrl??"",deployClientId:"",deploySecretName:"",published:!1,idpType:"cdf"}}r(cu,"getDeployment");var Lo=class Lo extends be{constructor(){super("create");this.handle=r(async(n,o,i)=>{let s=i.optsWithGlobals(),a=s.prompt;a&&Dt();let c={externalId:s.externalId,displayName:s.displayName,description:s.description,model:s.model,instructions:s.instructions,runtimeVersion:s.runtimeVersion},l=n==="."||n==="./",p=gu(n,l),d=[];if(a&&!c.model?.trim())try{let y=await z(s);d=await ee(y).getAvailableModels()}catch{}let u=await new $t(p,c,a,d).resolve(),f=fu(l,u.dirName);await hu(f,l,u.dirName),await on(he(f,De(Oo(f))),this.buildAgentYaml(u)),await this.scaffoldEvalCases(f,u),await on(he(f,v.readme),await this.buildReadme(u)),await this.scaffoldAgentsMd(f),await this.scaffoldSkills(f),this.printSummary(u)},"handle");this.buildAgentYaml=r(({dirName:n,...o})=>ge(o),"buildAgentYaml");this.buildReadme=r(async n=>{let o=await $o(he(rn,"agents","create",v.readmeTemplate),"utf8");return ds(o,{displayName:n.name})},"buildReadme");this.scaffoldAgentsMd=r(async n=>{let o=await $o(he(rn,"agents","create",v.agentsMdTemplate),"utf8");await on(he(n,v.agentsMd),o)},"scaffoldAgentsMd");this.scaffoldSkills=r(async n=>{let o=he(rn,"agents","create","skills");for(let i of ci){let s=he(n,i);await lu(o,s,{recursive:!0})}},"scaffoldSkills");this.scaffoldEvalCases=r(async(n,o)=>{let i=he(n,v.evalDir);await ms(i,{recursive:!0});let s=await $o(he(rn,"agents","create",v.evalCasesTemplate),"utf8"),a=ds(s,{displayName:o.name});await on(he(i,v.evalCases),a)},"scaffoldEvalCases");this.printSummary=r(n=>{let o=P(process.stdout),i=n.dirName;console.log(),console.log(o.green(`Created agent project at ${i}/`)),console.log(),console.log(T(`directory: ${i}/`)),console.log(T(`externalId: ${n.externalId}`)),console.log(T(`display name: ${n.name}`)),n.model&&console.log(T(`model: ${n.model}`)),console.log(),console.log("Next steps:"),console.log(T(`1. Edit ${i}/${De(Oo(i))} \u2014 add tools and refine instructions`)),console.log(T(`2. cognite agents push ${i}`)),console.log(T(`3. cognite agents open ${i}`)),console.log(T(`4. Edit ${i}/${rt} and run: cognite agents eval ${i}`)),console.log()},"printSummary");this.description("Scaffold a new agent project").argument("[dir]","Agent name / directory").addHelpText("after",uu);for(let n of Object.values(gs))this.addOption(n);this.action(this.handle)}};r(Lo,"CreateCommand");var sn=Lo,gs=Object.freeze({externalId:new He("--external-id <id>","Agent externalId"),displayName:new He("--display-name <name>","Agent display name"),description:new He("--description <text>","Agent description"),model:new He("--model <model>","Language model (e.g. azure/gpt-4.1)"),instructions:new He("--instructions <text>","Agent instructions"),runtimeVersion:new He("--runtime-version <version>","Agent runtime version"),noPrompt:new He("--no-prompt","Skip interactive prompts, use defaults")}),nE=Object.values(gs).map(e=>e.long),uu=`
|
|
36
36
|
Examples:
|
|
37
37
|
cognite agents create Interactive scaffold
|
|
38
38
|
cognite agents create my-agent Scaffold with name "my-agent"
|
|
@@ -40,31 +40,40 @@ Examples:
|
|
|
40
40
|
--description "Helps with maintenance" \\
|
|
41
41
|
--model azure/gpt-4.1 \\
|
|
42
42
|
--no-prompt Fully non-interactive
|
|
43
|
-
`,
|
|
43
|
+
`,fs=pu(du(import.meta.url)),ps=Fo(fs,"..","..","_templates"),mu=Fo(fs,"..","..","..","_templates"),rn=us(ps)?ps:mu;function gu(e,t){return t?Oo(process.cwd()):e}r(gu,"normalizeDirArg");function fu(e,t){return e?process.cwd():Fo(process.cwd(),t)}r(fu,"resolveTargetDir");async function hu(e,t,n){if(t){let o=await st(e);if(o.length>0){let i=o.length===1?"an agent definition":"agent definitions";throw new m(`This directory already contains ${i}:
|
|
44
44
|
${o.map(s=>` - ${s}`).join(`
|
|
45
|
-
`)}`,{hint:"Scaffold into a new directory instead, or use `cognite agents pull <external-id> --force` to overwrite.",shouldReport:!1})}return}if(
|
|
46
|
-
${e}`,{hint:"Use a different agent name or remove the existing directory.",shouldReport:!1});await
|
|
47
|
-
${e}
|
|
45
|
+
`)}`,{hint:"Scaffold into a new directory instead, or use `cognite agents pull <external-id> --force` to overwrite.",shouldReport:!1})}return}if(us(e))throw new m(`An agent folder named "${n}" already exists at:
|
|
46
|
+
${e}`,{hint:"Use a different agent name or remove the existing directory.",shouldReport:!1});await ms(e)}r(hu,"ensureTargetDir");function ds(e,t){return e.replace(/\{\{(\w+)\}\}/g,(n,o)=>t[o]??"")}r(ds,"renderTemplate");import{resolve as sa}from"path";import{isDeepStrictEqual as Mm}from"util";import{Option as ve}from"commander";function ye(e){return e.invokeError??e.scoreError?!1:e.evalCase.expectPass!==!1?e.passed:!e.passed}r(ye,"caseVerdictPassed");function Mo(e){return e.some(t=>!ye(t))}r(Mo,"hasCaseVerdictFailures");function ut(e){return e.filter(t=>!ye(t)).length}r(ut,"countCaseVerdictFailures");function mt(e){return e.filter(ye).length}r(mt,"countCaseVerdictPasses");function gt(e){return e.filter(t=>t.evalCase.expectPass===!1&&!t.invokeError&&!t.scoreError&&t.passed).length}r(gt,"countUnexpectedPasses");import{readFile as Pu,stat as Tu}from"fs/promises";import{join as cn,relative as Ru,sep as Iu}from"path";import{safeParse as Cs}from"valibot";import{parse as Du}from"yaml";import{array as we,boolean as yu,literal as an,minLength as Ze,nonEmpty as q,object as ce,optional as Se,pipe as O,string as J,variant as Su}from"valibot";var wu=ce({type:an("correctness"),criteria:O(J(),q("must not be empty"))}),vu=ce({type:an("faithfulness"),groundTruth:O(J(),q("must not be empty"))}),Cu=ce({name:O(J(),q("must not be empty")),description:O(J(),q("must not be empty"))}),ft=Se(O(we(Cu),Ze(1,"must contain at least one tool"))),Au=ce({type:an("toolSelection"),tools:ft}),Eu=ce({type:an("toolInvocation"),tools:ft}),bu=Su("type",[wu,vu,Au,Eu]),hs=["correctness","faithfulness","toolSelection","toolInvocation"],xu=ce({input:O(J(),q("must not be empty")),scorers:Se(O(we(bu),Ze(1,"must contain at least one scorer")))}),ku=ce({space:O(J(),q("must not be empty")),externalId:O(J(),q("must not be empty")),version:O(J(),q("must not be empty"))}),Uo=ce({dataModels:Se(O(we(ku),Ze(1,"must contain at least one data model"))),instanceSpaces:Se(O(we(O(J(),q("must not be empty"))),Ze(1,"must contain at least one instance space"))),appContext:Se(O(J(),q("must not be empty")))}),ys=ce({id:O(J(),q("must not be empty")),tags:Se(we(O(J(),q("tag must not be empty")))),expectPass:Se(yu(),!0),turns:O(we(xu),Ze(1,"must contain at least one turn")),...Uo.entries,tools:ft}),Ss=ce({include:Se(we(O(J(),q("include path must not be empty")))),cases:Se(we(ys)),...Uo.entries,tools:ft}),ws=ce({tags:Se(we(O(J(),q("tag must not be empty")))),cases:O(we(ys),Ze(1,"must contain at least one case")),...Uo.entries,tools:ft});function As(e,t){let n=e,{caseFilter:o,tagFilter:i}=t??{};if(o&&o.length>0&&(n=n.filter(s=>o.includes(s.id))),i&&i.length>0){let s=new Set(i);n=n.filter(a=>a.tags?.some(c=>s.has(c)))}if(n.length===0)throw new m("No eval cases matched the filter.",{hint:"Check the --case and --tag flag values against the loaded eval suite.",shouldReport:!1});return n}r(As,"filterEvalCases");function Es(e,t){return Ru(e,t).split(Iu).join("/")}r(Es,"displaySource");function $u(e){if(e&&typeof e=="object"&&"code"in e&&typeof e.code=="string")return e.code}r($u,"nodeErrorCode");async function vs(e){try{return(await Tu(e)).isFile()}catch(t){if($u(t)==="ENOENT")return!1;let n=t instanceof Error?t.message:String(t);throw new m(`Cannot access eval suite file:
|
|
47
|
+
${e}
|
|
48
|
+
${n}`,{cause:t,shouldReport:!1})}}r(vs,"isRegularFile");async function Ou(e){let t=cn(e,v.evalCases),n=cn(e,v.evalDir,v.evalCases),[o,i]=await Promise.all([vs(t),vs(n)]);if(o&&i)throw new m(`Found both eval suite layouts in:
|
|
49
|
+
${e}
|
|
50
|
+
- ${t}
|
|
51
|
+
- ${n}`,{hint:`Keep one eval suite config: either ${v.evalCases} in the directory you pass, or ${rt} for an agent project. Remove the other.`,shouldReport:!1});if(o)return{evalDir:e,rootPath:t};if(i)return{evalDir:cn(e,v.evalDir),rootPath:n};throw new m(`No eval suite config found in:
|
|
52
|
+
${e}
|
|
53
|
+
Attempted:
|
|
54
|
+
- ${t}
|
|
55
|
+
- ${n}`,{hint:`Add ${v.evalCases} to the directory you pass, or ${rt} for an agent project.`,shouldReport:!1})}r(Ou,"resolveEvalSuite");async function bs(e){let{evalDir:t,rootPath:n}=await Ou(e),o=Es(e,n),{cases:i,include:s,rootContext:a,rootTools:c}=await Fu(n,o),l=await Lu(s,t,e,a,c),p=[...i,...l];if(p.length===0)throw new m("No eval cases found.",{hint:`Add a cases list or an include field to ${o}.`,shouldReport:!1});return Nu(p),_u(p),p}r(bs,"loadEvalCases");async function Fu(e,t){let n=await xs(e),o=Cs(Ss,n);if(!o.success)throw new m(`Invalid ${e}: ${ks(o.issues)}`,{shouldReport:!1});let{include:i,cases:s,tools:a,...c}=o.output;return{cases:(s??[]).map(p=>Ps(p,t,c,a)),include:i,rootContext:c,rootTools:a}}r(Fu,"loadRootCasesFile");async function Lu(e,t,n,o,i){return!e||e.length===0?[]:(await Promise.all(e.map(async a=>{let c=cn(t,a),l=Es(n,c),p=await xs(c),d=Cs(ws,p);if(!d.success)throw new m(`Invalid ${c}: ${ks(d.issues)}`,{shouldReport:!1});let{tags:u,cases:f,tools:y,...g}=d.output;return f.map(h=>Ps(h,l,o,i,{fileContext:g,fileTags:u,fileTools:y}))}))).flat()}r(Lu,"loadIncludedFiles");async function xs(e){let t;try{t=await Pu(e,"utf8")}catch{throw new m(`Eval file not found:
|
|
56
|
+
${e}`,{shouldReport:!1})}try{return Du(t)}catch(n){throw new m(`Failed to parse ${e}: ${n instanceof Error?n.message:String(n)}`,{hint:"Check the YAML syntax of the file.",shouldReport:!1})}}r(xs,"readAndParseYaml");function ks(e){return e.map(t=>{let n=t.path?.map(o=>String(o.key)).join(".")??"";return n?`${n}: ${t.message}`:t.message}).join("; ")}r(ks,"formatValidationIssues");function Mu(e,t,n){let o=n?.dataModels??t?.dataModels??e.dataModels,i=n?.instanceSpaces??t?.instanceSpaces??e.instanceSpaces,s=n?.appContext??t?.appContext??e.appContext;if(!o&&!i&&!s)return;let a={};return o&&(a.dataModels=o),i&&(a.instanceSpaces=i),s&&(a.appContext=s),a}r(Mu,"mergeSessionContext");function Uu(e,t){if(t){if(t.dataModels&&!t.instanceSpaces)throw new m(`Case "${e}" declares dataModels without instanceSpaces`,{hint:"Add instanceSpaces alongside dataModels in your session context.",shouldReport:!1});if(t.instanceSpaces&&!t.dataModels)throw new m(`Case "${e}" declares instanceSpaces without dataModels`,{hint:"Add dataModels alongside instanceSpaces in your session context.",shouldReport:!1})}}r(Uu,"assertDataModelScopePairing");function Ps(e,t,n,o,i){let{id:s,turns:a,tags:c,expectPass:l,dataModels:p,instanceSpaces:d,appContext:u,tools:f}=e,y=i?.fileTags&&i.fileTags.length>0?[...new Set([...i.fileTags,...c??[]])]:c,g=Mu(n,i?.fileContext,{dataModels:p,instanceSpaces:d,appContext:u});Uu(s,g);let h=f??i?.fileTools??o;return{id:s,turns:a,expectPass:l,...y?{tags:y}:{},source:t,contextInformation:g,...h?{tools:h}:{}}}r(Ps,"buildEvalCase");function Nu(e){let t=new Map;for(let{id:n,source:o}of e){let i=t.get(n)??[];i.push(o),t.set(n,i)}for(let[n,o]of t){if(o.length<=1)continue;let s=[...new Set(o)].map(a=>` - ${a}`).join(`
|
|
48
57
|
`);throw new m(`Duplicate case id "${n}"
|
|
49
58
|
Defined in:
|
|
50
|
-
${s}`,{hint:"Each case must have a unique id.",shouldReport:!1})}}r(
|
|
51
|
-
`)}r(
|
|
52
|
-
`).trim()}r(
|
|
59
|
+
${s}`,{hint:"Each case must have a unique id.",shouldReport:!1})}}r(Nu,"assertUniqueCaseIds");function _u(e){for(let t of e)if(!t.turns.some(o=>o.scorers&&o.scorers.length>0))throw new m(`Case "${t.id}" (${t.source}) has no scored turns`,{hint:"Add scorers to at least one turn in each case.",shouldReport:!1})}r(_u,"assertCaseHasScoredTurn");function Oe(e){if(e===null||typeof e!="object")return JSON.stringify(e);let t=e.toJSON;if(typeof t=="function")return Oe(t.call(e));if(Array.isArray(e))return`[${e.map(Oe).join(",")}]`;let n=e;return`{${Object.keys(n).filter(i=>n[i]!==void 0).sort().map(i=>`${JSON.stringify(i)}:${Oe(n[i])}`).join(",")}}`}r(Oe,"stableStringify");function No(e){try{return Oe(e)}catch{return String(e)}}r(No,"safeStableStringify");var ju=["name","description","instructions","model","runtimeVersion"],Hu=["labels","tools","skills","subagents","exampleQuestions"];function Ds(e,t){let n=Me(e),o=Me(t),i=[];for(let s of ju){let a=n[s],c=o[s];Bu(a,c)||i.push({field:s,local:Ts(a),remote:Ts(c)})}for(let s of Hu){let a=n[s],c=o[s];Ku(s,a,c)||i.push({field:s,local:Rs(s,a),remote:Rs(s,c)})}return i}r(Ds,"detectDrift");function $s(e,t){let n=e.map(i=>i.field).join(", "),o=[`Warning: local ${v.configGlob} differs from deployed config.`,` Fields: ${n}`];if(t?.verbose)for(let{field:i,remote:s,local:a}of e){let c=`${i}:`.padEnd(18);o.push(` ${c}"${s}" \u2192 "${a}"`)}return o.push(" Run with --upsert to push local changes before evaluating."),o.join(`
|
|
60
|
+
`)}r($s,"formatAgentDriftWarning");function Bu(e,t){return _o(e)===_o(t)}r(Bu,"scalarValuesEqual");function Ku(e,t,n){return Ho(jo(t),e)===Ho(jo(n),e)}r(Ku,"arrayValuesEqual");function _o(e){return e??""}r(_o,"normalizeOptionalString");function Ts(e){return _o(e)}r(Ts,"formatScalarValue");function Rs(e,t){return Ho(jo(t),e)}r(Rs,"formatArrayValue");function jo(e){return e??[]}r(jo,"normalizeArray");function Ho(e,t){let n=[...e].sort((o,i)=>Is(t,o).localeCompare(Is(t,i)));return Oe(n)}r(Ho,"stableArrayStringify");function Is(e,t){if(typeof t!="object"||t===null)return Oe(t);let n=t;switch(e){case"tools":return String(n.name??"");case"subagents":return String(n.agentExternalId??"");case"exampleQuestions":return String(n.question??"");default:return Oe(t)}}r(Is,"arrayItemSortKey");async function Os(e,t){if(e)try{e.track("Flows.CLI.Agents.Eval",{...t}),await e.flush(ze)}catch{}}r(Os,"trackAgentsEval");function Vu(e){return typeof e=="object"&&e!==null&&e.type==="result"&&Array.isArray(e.messages)}r(Vu,"isSessionResult");function Bo(e){let t=e.content?.text;if(typeof t=="string"&&t.length>0)return t;let n=[];for(let o of e.reasoning??[])for(let i of o.content??[])typeof i.text=="string"&&i.text.length>0&&n.push(i.text);return n.join(`
|
|
61
|
+
`).trim()}r(Bo,"messageText");function ln(e){return e.map(t=>t.name).join(", ")}r(ln,"formatToolNameList");var Xe=500;function Fs(e,t){return e.length<=t?e:`${e.slice(0,t)}\u2026 (${e.length-t} more chars)`}r(Fs,"truncate");function Ko(e){try{return JSON.stringify(e)??String(e)}catch{return String(e)}}r(Ko,"safeJsonEncode");function Qe(e,t=1/0){if(e.input===void 0||e.input===null)return`${e.name}()`;let n;if(typeof e.input=="object"&&!Array.isArray(e.input)){let o=Object.entries(e.input);if(o.length===0)return`${e.name}()`;n=o.map(([i,s])=>`${i}=${Ko(s)}`).join(", ")}else n=Ko(e.input);return`${e.name}(${Fs(n,t)})`}r(Qe,"formatToolInvocation");function pn(e,t=Xe){let n=typeof e=="string"?e:Ko(e);return n=n.replace(/\s+/g," ").trim(),Fs(n,t)}r(pn,"formatToolResultPreview");function Gu(e){let t=[];for(let n of e)for(let o of n.reasoning??[])for(let i of o.data??[]){let s=i.toolCall;typeof s?.name=="string"&&s.name.length>0&&t.push({name:s.name,input:s.input,result:s.result})}return t}r(Gu,"extractToolCalls");function Yu(e){let t=[];for(let n of e){let o=!1;for(let i of n.reasoning??[]){for(let s of i.data??[]){let a=s.toolCall;if(typeof a?.name=="string"&&a.name.length>0){o=!0;break}}if(o)break}if(!o)for(let i of n.actions??[]){let s=i.toolConfirmation;typeof s?.toolName=="string"&&s.toolName.length>0&&t.push({name:s.toolName,input:s.toolArguments,synthesized:!0})}}return t}r(Yu,"synthesizeToolConfirmationCalls");function Ls(e,t){for(let n of t){if(n.synthesized){e.push(n);continue}let o=e.findIndex(i=>i.synthesized===!0&&i.name===n.name&&No(i.input)===No(n.input));o!==-1?e[o]=n:e.push(n)}}r(Ls,"mergeToolCalls");function Ms(e){let t=e.response;if(!Vu(t))throw new Error("Unexpected agent chat response shape");let n=t.messages,o=n[n.length-1];if(!o)throw new Error("Agent returned no messages");let i=[...Gu(n),...Yu(n)],s=o.actions?.find(c=>c.type==="toolConfirmation");if(s){let c=s.actionId??s.id;if(!c)throw new Error("Tool confirmation action missing actionId (both actionId and id are absent)");return{output:Bo(o),toolCalls:i,cursor:t.cursor,pendingToolConfirmation:{actionId:c,toolName:s.toolConfirmation?.toolName}}}let a=o.actions?.find(c=>c.type==="userSession");if(a){let c=a.actionId??a.id;if(!c)throw new Error("User session action missing actionId (both actionId and id are absent)");return{output:Bo(o),toolCalls:i,cursor:t.cursor,pendingUserSession:{actionId:c}}}return{output:Bo(o),toolCalls:i,cursor:t.cursor}}r(Ms,"extractAgentTurn");function Ns(e){let{modelId:t,service:n,verbose:o}=e;return{specificationVersion:"v2",provider:"cdf",modelId:t,supportedUrls:{},async doGenerate(i){return zu(i,{modelId:t,service:n,verbose:o})},async doStream(i){throw new Error("CDF chat completions judge does not support streaming")}}}r(Ns,"createCdfChatCompletionsModel");async function zu(e,t){let{modelId:n,service:o,verbose:i}=t,s=qu(e.responseFormat),a=Ju(e.prompt,s),c={model:n,messages:a,stream:!1,temperature:e.temperature,maxTokens:e.maxOutputTokens};i?.logJson("chat/completions request",c),i?.log("judge POST /ai/chat/completions");let l=performance.now(),p=await o.postChatCompletions(c);i?.log(`judge chat/completions HTTP 200 in ${((performance.now()-l)/1e3).toFixed(1)}s`),i?.logJson("chat/completions response",p);let d=p.choices[0]?.message?.content??"",u=p.choices[0]?.finishReason??"stop";return{content:[{type:"text",text:d}],finishReason:Wu(u),usage:{inputTokens:void 0,outputTokens:void 0,totalTokens:void 0},warnings:[],request:{body:c},response:{modelId:p.model??n,body:p}}}r(zu,"generateWithCdf");function qu(e){if(!e||e.type==="text")return;let t=e.schema?JSON.stringify(e.schema):'{"label":"string","explanation":"string"}',n=e.name?` (${e.name})`:"";return`Respond with a single valid JSON object only. No markdown code fences or extra text.${e.description?`
|
|
53
62
|
${e.description}`:""}
|
|
54
|
-
The JSON must conform to this schema${n}: ${t}`}r(
|
|
55
|
-
`)}r(
|
|
63
|
+
The JSON must conform to this schema${n}: ${t}`}r(qu,"jsonResponseInstruction");function Ju(e,t){let n=[];t&&n.push({role:"system",content:t});for(let o of e){if(o.role==="system"){n.push({role:"system",content:o.content});continue}if(o.role==="user"){let i=Us(o.content);i&&n.push({role:"user",content:i});continue}if(o.role==="assistant"){let i=Us(o.content);i&&n.push({role:"assistant",content:i})}}return n}r(Ju,"toCdfMessages");function Us(e){return e.filter(t=>t.type==="text"&&typeof t.text=="string").map(t=>t.text).join(`
|
|
64
|
+
`)}r(Us,"extractTextParts");function Wu(e){switch(e){case"stop":return"stop";case"length":return"length";case"content_filter":case"content-filter":return"content-filter";case"tool_calls":case"tool-calls":return"tool-calls";default:return"other"}}r(Wu,"mapFinishReason");var Zu="azure/gpt-5";function Vo(e={}){return e.cliModelId?.trim()||process.env.EVAL_JUDGE_MODEL?.trim()||e.agentModelFallback?.trim()||Zu}r(Vo,"resolveJudgeModelId");function _s(e){let t=e.modelId??Vo({cliModelId:e.cliModelId,agentModelFallback:e.agentModelFallback});return Ns({modelId:t,service:e.service,verbose:e.verbose})}r(_s,"createJudgeModel");import{mkdir as am,writeFile as cm}from"fs/promises";import{join as Vs}from"path";var Be="report.json",Go="report.md";var dn="eval-report";function un(e){let t={name:e.name,message:e.message};ue(e)&&(e.hint&&(t.hint=e.hint),e.helpUrl&&(t.helpUrl=e.helpUrl)),kt(e)&&(t.http={status:e.httpStatusCode,...e.requestUrl!==void 0&&{url:e.requestUrl},...e.responseBody!==void 0&&{responseBody:e.responseBody}});let n=e.cause;return n instanceof Error&&(t.cause=un(n)),t}r(un,"serializeError");function Yo(e,t,n){return{version:1,meta:n,summary:{totalCases:e.totalCases,passedCases:e.passedCases,failedCases:e.failedCases,skippedCases:e.skippedCases,metExpectations:mt(e.results),verdictFailures:ut(e.results),unexpectedPassCount:gt(e.results)},cases:e.results.map(Hs),traces:t}}r(Yo,"buildEvalReportDocument");function Hs(e){let t=e.evalCase;return{id:t.id,source:t.source,...t.tags!==void 0&&t.tags.length>0&&{tags:t.tags},expectPass:t.expectPass!==!1,scorersPassed:e.passed,verdictPassed:ye(e),...t.contextInformation!==void 0&&{contextInformation:t.contextInformation},...e.run&&{turns:e.run.turns.map(n=>({input:n.input,output:n.output,toolCalls:n.toolCalls.map(o=>({name:o.name,...o.input!==void 0&&{input:o.input},...o.result!==void 0&&{result:o.result}})),apiRoundTrips:n.apiRoundTrips}))},scores:e.scores.map(n=>({turnIndex:n.turnIndex,scorerType:n.scorerType,score:n.score,...n.label!==void 0&&{label:n.label},...n.explanation!==void 0&&{explanation:n.explanation},passed:n.passed})),...e.invokeError&&{invokeError:un(e.invokeError)},...e.scoreError&&{scoreError:un(e.scoreError)}}}r(Hs,"serializeCaseResult");function qo(e){let t=e.summary.skippedCases>0?` (${e.summary.skippedCases} skipped)`:"";return im(`
|
|
56
65
|
# Agent eval report
|
|
57
66
|
|
|
58
67
|
- Agent: \`${e.meta.agentExternalId}\`
|
|
59
68
|
- Judge model: \`${e.meta.judgeModelId}\`
|
|
60
69
|
- Chat route: \`${e.meta.route}\`
|
|
61
70
|
- Summary: **${e.summary.metExpectations}/${e.cases.length}** cases met expectations${t}
|
|
62
|
-
- Full verbose-equivalent traces: \`${
|
|
71
|
+
- Full verbose-equivalent traces: \`${Be}\` (${e.traces.length} event(s))
|
|
63
72
|
|
|
64
|
-
${e.cases.map(
|
|
73
|
+
${e.cases.map(Xu).join(`
|
|
65
74
|
`)}
|
|
66
|
-
${
|
|
67
|
-
`)}r(
|
|
75
|
+
${nm(e.traces)}
|
|
76
|
+
`)}r(qo,"formatEvalReportMarkdown");function Xu(e){let t=e.verdictPassed?"PASS":"FAIL",n=e.expectPass===!1?" (expected fail)":"",o=e.tags&&e.tags.length>0?`- Tags: ${e.tags.map(i=>`\`${i}\``).join(", ")}
|
|
68
77
|
`:"";return`
|
|
69
78
|
## ${t}: \`${e.id}\`${n}
|
|
70
79
|
|
|
@@ -72,112 +81,112 @@ ${Ju(e.traces)}
|
|
|
72
81
|
- Verdict: ${e.verdictPassed?"met expectations":"did not meet expectations"}
|
|
73
82
|
- Scorers: ${e.scorersPassed?"all passed":"failed or missing"}
|
|
74
83
|
${o}
|
|
75
|
-
${e.invokeError?
|
|
76
|
-
`}r(
|
|
77
|
-
`):e.scores.length>0?
|
|
84
|
+
${e.invokeError?Bs("Invoke error",e.invokeError):""}${e.scoreError?Bs("Score error",e.scoreError):""}${Qu(e)}
|
|
85
|
+
`}r(Xu,"formatCaseMarkdown");function Qu(e){return e.turns?e.turns.map((t,n)=>em(t,n,e)).join(`
|
|
86
|
+
`):e.scores.length>0?Ks(e.scores,{showTurnIndex:!0}):""}r(Qu,"formatCaseBodyMarkdown");function em(e,t,n){let i=(n.turns?.length??0)>1?`### Turn ${t+1}`:"### Turn",s=n.scores.filter(a=>a.turnIndex===t);return`
|
|
78
87
|
${i}
|
|
79
88
|
|
|
80
89
|
**Prompt**
|
|
81
90
|
|
|
82
|
-
${
|
|
91
|
+
${zo(e.input)}
|
|
83
92
|
|
|
84
93
|
**Response**
|
|
85
94
|
|
|
86
|
-
${
|
|
95
|
+
${zo(e.output||"(empty)")}
|
|
87
96
|
|
|
88
|
-
${
|
|
89
|
-
`}r(
|
|
97
|
+
${tm(e.toolCalls)}${s.length>0?Ks(s):""}
|
|
98
|
+
`}r(em,"formatTurnMarkdown");function tm(e){return e.length===0?"":`
|
|
90
99
|
**Tool calls**
|
|
91
100
|
|
|
92
|
-
${e.map(n=>{let o=
|
|
101
|
+
${e.map(n=>{let o=Qe(n,Xe),i=n.result!==void 0?` \u2192 ${pn(n.result,Xe)}`:"";return`- ${sm(`${o}${i}`)}`}).join(`
|
|
93
102
|
`)}
|
|
94
|
-
`}r(
|
|
103
|
+
`}r(tm,"formatToolCallsMarkdown");function Ks(e,t={}){return`
|
|
95
104
|
**Scorers**
|
|
96
105
|
|
|
97
106
|
${e.map(o=>{let i=t.showTurnIndex===!0?` (turn ${o.turnIndex+1})`:"",s=[o.label?`label=${o.label}`:void 0,`score=${o.score}`].filter(Boolean).join(", "),a=o.explanation?`
|
|
98
107
|
- ${o.explanation}`:"";return`- \`${o.scorerType}\`${i}: **${o.passed?"pass":"fail"}** (${s})${a}`}).join(`
|
|
99
108
|
`)}
|
|
100
|
-
`}r(
|
|
109
|
+
`}r(Ks,"formatScoresMarkdown");function nm(e){if(e.length===0)return"";let t=e.slice(0,40),n=t.map(i=>i.type==="log"?`- ${i.message}`:`- JSON: ${i.label}`).join(`
|
|
101
110
|
`),o=e.length>t.length?`
|
|
102
|
-
- \u2026 ${e.length-t.length} more event(s) in \`${
|
|
111
|
+
- \u2026 ${e.length-t.length} more event(s) in \`${Be}\``:"";return`
|
|
103
112
|
## Debug traces (summary)
|
|
104
113
|
|
|
105
|
-
Captured ${e.length} verbose-equivalent event(s). See \`${
|
|
114
|
+
Captured ${e.length} verbose-equivalent event(s). See \`${Be}\` for full payloads (agent chat request/response, judge inputs, chat/completions I/O).
|
|
106
115
|
|
|
107
116
|
${n}${o}
|
|
108
|
-
`}r(
|
|
117
|
+
`}r(nm,"formatTracesMarkdown");function Bs(e,t){return`
|
|
109
118
|
### ${e}
|
|
110
119
|
|
|
111
|
-
${
|
|
112
|
-
`}r(
|
|
120
|
+
${Jo(`- Message: ${t.message}`,t.hint&&`- Hint: ${t.hint}`,t.helpUrl&&`- Help: ${t.helpUrl}`,t.http&&om(t.http),t.cause&&rm(t.cause))}
|
|
121
|
+
`}r(Bs,"formatErrorMarkdown");function om(e){let t=e.responseBody===void 0?void 0:`- Response body:
|
|
113
122
|
|
|
114
|
-
${
|
|
115
|
-
`)}r(
|
|
123
|
+
${zo(typeof e.responseBody=="string"?e.responseBody:JSON.stringify(e.responseBody,null,2))}`;return Jo(`- HTTP status: \`${e.status}\``,e.url&&`- URL: \`${e.url}\``,t)}r(om,"formatHttpErrorMarkdown");function rm(e){return Jo(`- Cause: ${e.name}: ${e.message}`,e.http&&` - HTTP status: \`${e.http.status}\``,e.http?.url&&` - URL: \`${e.http.url}\``)}r(rm,"formatCauseMarkdown");function Jo(...e){return e.filter(t=>!!t).join(`
|
|
124
|
+
`)}r(Jo,"lines");function im(e){return`${e.replace(/^\n+/,"").replace(/\n{3,}/g,`
|
|
116
125
|
|
|
117
126
|
`).trimEnd()}
|
|
118
|
-
`}r(
|
|
127
|
+
`}r(im,"trimBlankLines");function zo(e){return`\`\`\`
|
|
119
128
|
${e.replace(/```/g,"``\\`")}
|
|
120
|
-
\`\`\``}r(
|
|
121
|
-
`,"utf8"),await n(a,
|
|
122
|
-
${
|
|
123
|
-
\u2026 (${n.length-t} more chars)`}r(
|
|
124
|
-
`)}r(
|
|
125
|
-
`):"No tools called"}r(
|
|
129
|
+
\`\`\``}r(zo,"fence");function sm(e){let t=Math.max(0,...(e.match(/`+/g)??[]).map(i=>i.length)),n="`".repeat(t+1),o=e.startsWith("`")||e.endsWith("`")||e.startsWith(" ")||e.endsWith(" ")?" ":"";return`${n}${o}${e}${o}${n}`}r(sm,"inlineCode");async function Gs(e){let t=e.mkdir??am,n=e.writeFile??cm,o=e.reportDir;await t(o,{recursive:!0});let i=Yo(e.summary,e.traces,{...e.meta,reportDir:o}),s=Vs(o,Be),a=Vs(o,Go);return await n(s,`${JSON.stringify(i,null,2)}
|
|
130
|
+
`,"utf8"),await n(a,qo(i),"utf8"),{jsonPath:s,mdPath:a}}r(Gs,"writeEvalReport");async function Ys(e,t,n){let o=(e.externalId!==void 0?e.externalId.trim():void 0)??(e.systemAgent?li:void 0);if(e.externalId!==void 0&&o==="")throw new m("--external-id cannot be empty.",{hint:`Provide a valid agent external ID, or omit the flag to read from ${v.configGlob}.`,shouldReport:!1});if(o!==void 0)return{externalId:o,agentYaml:void 0};let i=await n(t);if(!i.externalId)throw new m("No agent specified.",{hint:`Provide --external-id, --system-agent, or run from a directory with ${v.configGlob}.`,shouldReport:!1});return{externalId:i.externalId,agentYaml:i}}r(Ys,"resolveAgentIdentity");var lm=new Set(["localhost","127.0.0.1"]),pm="Pass an origin only, e.g. http://127.0.0.1:5000. Do not set COGNITE_BASE_URL to localhost \u2014 use AGENT_CHAT_BASE_URL instead.",dm="Use a loopback origin for local cog-ai. Override chat POSTs include the CLI CDF access token; they are only sent to loopback origins.";function um(){let e=process.env.AGENT_CHAT_ROUTE?.trim().toLowerCase();return e==="public"||e==="agents"?"public":e==="internal"||e==="fusion"?"internal":"public"}r(um,"resolveAgentChatRoute");function zs(){let e=process.env.AGENT_CHAT_BASE_URL?.trim();if(!e)return;let t;try{t=new URL(e)}catch{throw ht(e,"must be a valid URL")}if(t.protocol!=="http:"&&t.protocol!=="https:")throw ht(e,"must use http or https");if(t.pathname!=="/"&&t.pathname!=="")throw ht(e,"must be an origin only (e.g. http://127.0.0.1:5000), not a full API path");if(t.search||t.hash)throw ht(e,"must not include query or fragment");if(!lm.has(t.hostname))throw ht(e,"must target a loopback host (localhost or 127.0.0.1)",dm);return t.origin}r(zs,"resolveAgentChatBaseUrl");function qs(e){return e?"internal":um()}r(qs,"resolveEffectiveAgentChatRoute");function Js(e,t){let n=t==="internal"?"internal/agents/chat":"agents/chat";return`/api/v1/projects/${encodeURIComponent(e)}/ai/${n}`}r(Js,"formatAgentChatPath");function Ws(e){return`/api/v1/projects/${encodeURIComponent(e)}/ai/chat/completions`}r(Ws,"formatChatCompletionsPath");function mn(e,t){return`${e.replace(/\/+$/,"")}${t.startsWith("/")?t:`/${t}`}`}r(mn,"joinClientUrl");function ht(e,t,n=pm){return new m(`Invalid agent chat base URL "${e}": ${t}.`,{hint:n,shouldReport:!1})}r(ht,"invalidChatBaseUrl");function mm(e){return{...e,messages:e.messages.map(t=>t.role==="action"&&t.type==="userSession"?{...t,nonce:"<redacted>"}:t)}}r(mm,"redactNonces");async function Zs(e){let t=e.allowToolConfirmation!==!1,n=e.maxTurns??8,o=e.verbose;o?.log(`agentExternalId=${e.agentExternalId} | auto-allow tools=${t}`);let i=e.cursor,s,a,c,l,p=[],d="",u=0;for(let f=0;f<n;f+=1){u+=1;let y=`turn ${u}/${n}`,g;a&&c&&i?(g={agentExternalId:e.agentExternalId,cursor:i,messages:[{role:"action",type:"userSession",actionId:a,nonce:c}]},a=void 0,c=void 0):s&&i?(g={agentExternalId:e.agentExternalId,cursor:i,messages:[{role:"action",type:"toolConfirmation",actionId:s,status:"ALLOW"}]},s=void 0):g={agentExternalId:e.agentExternalId,...e.contextInformation?{contextInformation:e.contextInformation}:{},...i?{cursor:i}:{},messages:[{role:"user",content:{type:"text",text:e.input}}]},o?.log(`${y}: sending chat request\u2026`),o?.logJson(`${y} request body`,mm(g)),l=await e.service.postAgentChat(g),o?.logJson(`${y} response`,l);let h;try{h=Ms(l)}catch(w){throw new m(`Failed to parse agent response on turn ${u}/${n}`,{hint:"The CDF agent API returned an unexpected response shape. Run with --verbose to see the raw response.",cause:w})}if(Ls(p,h.toolCalls),o?.log(`${y}: extracted output length=${h.output.length}, tools=[${ln(h.toolCalls)}]`),h.output&&(d=h.output),h.pendingToolConfirmation){if(o?.log(`${y}: tool confirmation requested \u2014 tool=${h.pendingToolConfirmation.toolName??"?"} actionId=${h.pendingToolConfirmation.actionId}`),!t)throw new m(`Agent requested tool confirmation (${h.pendingToolConfirmation.toolName??"unknown"}) but allowToolConfirmation is false`,{hint:"Re-run with tool confirmation enabled, or adjust the agent to avoid confirmation prompts."});if(!h.cursor||!h.pendingToolConfirmation.actionId)throw new m("Tool confirmation missing cursor or actionId",{hint:"The agent API returned an incomplete tool-confirmation action. This may be an API bug \u2014 retry or report to CDF support."});i=h.cursor,s=h.pendingToolConfirmation.actionId,o?.log(`${y}: auto-ALLOW, continuing with cursor\u2026`);continue}if(h.pendingUserSession){if(o?.log(`${y}: userSession requested \u2014 actionId=${h.pendingUserSession.actionId}, creating nonce\u2026`),!h.cursor||!h.pendingUserSession.actionId)throw new m("User session missing cursor or actionId",{hint:"The agent API returned an incomplete user-session action. This may be an API bug \u2014 retry or report to CDF support."});let w=await e.service.createSessionNonce();i=h.cursor,a=h.pendingUserSession.actionId,c=w,o?.log(`${y}: created nonce, continuing with cursor\u2026`);continue}return o?.log(`${y}: conversation complete`),{output:d,toolCalls:p,turns:u,cursor:h.cursor??i,lastResponse:l}}throw new m(`Agent chat exceeded ${n} turns (action loop?)`,{hint:"The agent may be stuck in a tool-confirmation or user-session loop. Increase maxTurns or inspect the agent configuration."})}r(Zs,"invokeAgentCase");import{createCorrectnessEvaluator as wm}from"@arizeai/phoenix-evals/llm/createCorrectnessEvaluator";import{createFaithfulnessEvaluator as vm}from"@arizeai/phoenix-evals/llm/createFaithfulnessEvaluator";import{createToolInvocationEvaluator as Cm}from"@arizeai/phoenix-evals/llm/createToolInvocationEvaluator";import{createToolSelectionEvaluator as Am}from"@arizeai/phoenix-evals/llm/createToolSelectionEvaluator";function Xs(e){return{log(t){e(t)},logJson(t,n,o=6e3){e(`${t}:
|
|
131
|
+
${gm(n,o)}`)}}}r(Xs,"createEvalLogger");function Qs(){let e=[];return{events:e,logger:{log(t){e.push({type:"log",message:t})},logJson(t,n){e.push({type:"json",label:t,value:fm(n)})}}}}r(Qs,"createTraceCapture");function ea(e,t){return{log(n){e.log(n),t.log(n)},logJson(n,o,i){e.logJson(n,o,i),t.logJson(n,o,i)}}}r(ea,"teeEvalLogger");function gm(e,t=6e3){let n;try{n=JSON.stringify(e,null,2)??String(e)}catch{n=String(e)}return n.length<=t?n:`${n.slice(0,t)}
|
|
132
|
+
\u2026 (${n.length-t} more chars)`}r(gm,"formatJson");function ta(e){return e<1e3?`${Math.round(e)}ms`:`${(e/1e3).toFixed(1)}s`}r(ta,"formatDurationMs");function fm(e){try{return JSON.parse(JSON.stringify(e)??"null")}catch{return String(e)}}r(fm,"cloneForTrace");var hm=.5,ym={correctness:{pass:"correct",fail:"incorrect"},faithfulness:{pass:"faithful",fail:"unfaithful"},toolSelection:{pass:"correct",fail:"incorrect"},toolInvocation:{pass:"correct",fail:"incorrect"}};function Sm(e,t){let n=ym[e];if(n){if(t.label===n.pass)return!0;if(t.label===n.fail)return!1}return(t.score??0)>=hm}r(Sm,"scorerPassed");async function yt(e,t,n,o,i,s){s?.log(`scoring ${n.type} (Phoenix + CDF /ai/chat/completions)\u2026`),s?.logJson(`${n.type} judge input`,i);let a=performance.now(),c;try{c=await o.evaluate(i)}catch(d){if(ue(d))throw d;let u=d instanceof Error?d.message:String(d);throw new m(`Phoenix ${n.type} judge failed (${u}). Judge uses CDF POST .../ai/chat/completions.`,{cause:d})}s?.log(`${n.type} judge finished in ${ta(performance.now()-a)}`),s?.logJson(`${n.type} judge result`,c);let l=Sm(n.type,c),p=typeof c.score=="number"?c.score:l?1:0;return{caseId:e,turnIndex:t,scorerType:n.type,score:p,label:c.label,explanation:c.explanation,passed:l}}r(yt,"runPhoenixLlmScorer");function na(e=[]){return e.map(t=>`${t.name}: ${t.description}`).join(`
|
|
133
|
+
`)}r(na,"formatAvailableTools");function Em(e){return e.length>0?ln(e):"No tools called"}r(Em,"formatToolSelection");function bm(e){return e.length>0?e.map(t=>Qe(t)).join(`
|
|
134
|
+
`):"No tools called"}r(bm,"formatToolInvocations");function xm(e){let t=e.map(n=>`"${n}"`);return t.length<=1?t.join(""):`${t.slice(0,-1).join(", ")}, and ${t[t.length-1]}`}r(xm,"formatScorerTypeList");function km(e,t){let n=e.turns.slice(0,t);return n.length===0?"":`Conversation so far:
|
|
126
135
|
`+n.map(o=>`User: ${o.input}
|
|
127
136
|
Assistant: ${o.output}`).join(`
|
|
128
137
|
`)+`
|
|
129
138
|
|
|
130
|
-
`}r(
|
|
139
|
+
`}r(km,"conversationContext");async function Pm(e,t,n,o,i,s){let a=o.turns[t];if(!a)throw new m(`No agent response recorded for turn ${t+1} of case "${e.id}" (${e.source}).`,{hint:"This is an internal mismatch between scored turns and executed turns."});let c=km(o,t),l=s?.verbose;if(n.type==="correctness"){let d=wm({model:i});return yt(e.id,t,n,d,{input:`${c}User question:
|
|
131
140
|
${a.input}
|
|
132
141
|
|
|
133
142
|
Criteria:
|
|
134
|
-
${n.criteria}`,output:a.output},l)}if(n.type==="faithfulness"){let d=
|
|
135
|
-
${a.input}`:a.input,output:a.output,context:n.groundTruth},l)}if(n.type==="toolSelection"||n.type==="toolInvocation"){let d=n.tools??e.tools??s?.tools??[];if(d.length===0){let f=s?.tools===void 0?`Add a tools field to the scorer, case, or eval.yaml root (${
|
|
136
|
-
${a.input}`:a.input,availableTools:
|
|
137
|
-
${a.input}`:a.input,availableTools:Xs(d),toolSelection:ym(a.toolCalls)},l)}let p=n;throw new m(`Scorer type "${p.type}" is not supported yet.`,{hint:`The CLI eval schema currently supports only ${Sm(gs)} scorers.`,shouldReport:!1})}r(vm,"evaluateScorer");async function Cm(e,t,n,o,i){let s=e.turns[t]?.scorers??[];return(await Promise.all(s.map(c=>vm(e,t,c,n,o,i)))).filter(c=>c!==null)}r(Cm,"scoreTurn");async function Qs(e,t,n,o){return(await Promise.all(e.turns.map((s,a)=>Cm(e,a,t,n,o)))).flat()}r(Qs,"scoreCase");function Am(e){return e.length>0&&e.every(t=>t.passed)}r(Am,"casePassed");function Em(e,t,n){if(n<=1)return e;let o=e instanceof Error?e.message:String(e);return new m(`turn ${t+1}/${n}: ${o}`,{hint:ue(e)?e.hint:void 0,helpUrl:ue(e)?e.helpUrl:void 0,shouldReport:ue(e)?e.shouldReport:void 0,cause:e})}r(Em,"annotateTurnFailure");async function bm(e,t){let{service:n,agentExternalId:o,judgeModel:i,verbose:s}=t;s?.log(`--- case "${e.id}" (${e.source}) invoke ---`);let a;try{let c=[],l;for(let[p,d]of e.turns.entries()){s?.log(` turn ${p+1}/${e.turns.length}: "${d.input}"`);let u;try{u=await zs({service:n,agentExternalId:o,input:d.input,cursor:l,contextInformation:e.contextInformation,allowToolConfirmation:t.allowToolConfirmation,verbose:s})}catch(f){throw Em(f,p,e.turns.length)}l=u.cursor,c.push({input:d.input,output:u.output,toolCalls:u.toolCalls,apiRoundTrips:u.turns})}a={caseId:e.id,turns:c}}catch(c){return{evalCase:e,scores:[],passed:!1,invokeError:c instanceof Error?c:new Error(String(c))}}s?.log(`--- case "${e.id}" (${e.source}) score (Phoenix) ---`);try{let c=await Qs(e,a,i,{verbose:s,tools:t.tools,warn:t.warn});return{evalCase:e,run:a,scores:c,passed:Am(c)}}catch(c){return{evalCase:e,run:a,scores:[],passed:!1,scoreError:c instanceof Error?c:new Error(String(c))}}}r(bm,"runCase");async function ea(e){let{cases:t,verbose:n}=e,o=[];for(let s of t){let a=await bm(s,e);if(o.push(a),e.failFast&&!ye(a)){n?.log(`--- fail-fast: stopping after failed case "${s.id}" (${s.source}) ---`);break}}let i=o.filter(s=>s.passed).length;return{totalCases:t.length,passedCases:i,failedCases:o.length-i,skippedCases:t.length-o.length,results:o}}r(ea,"runEval");var ta={"cdf-version":"20230101-alpha"};function na(e,t,n={}){let{chatBaseUrl:o}=n,i=Gs(e.project,t),s=Ys(e.project),a=o?un(o,i):i,c=o?a:un(e.getBaseUrl(),i),l=un(e.getBaseUrl(),s);async function p(h){try{return(await e.post(a,{data:h,headers:ta})).data}catch(g){if(!se(g))throw xm(g,o);let y=!o&&t==="internal"&&g.status===404?" Try the public route: set AGENT_CHAT_ROUTE=public.":"";throw qo(g,"Agent chat",c,y||void 0)}}r(p,"postAgentChat");async function d(h){try{return(await e.post(s,{data:h,headers:ta})).data}catch(g){throw qo(g,"Chat completions",l)}}r(d,"postChatCompletions");async function u(){let h=`/api/v1/projects/${encodeURIComponent(e.project)}/sessions`;try{return await f({oneshotTokenExchange:!0},h)}catch(g){if(Pm(g))return await f({tokenExchange:!0},h);throw g}}r(u,"createSessionNonce");async function f(h,g){try{let y=await e.sessions.create([h]),S=y?.[0]?.nonce;if(!S)throw new m("Session creation returned no nonce",{hint:"The Sessions API returned an empty items list. Retry, or check IdP configuration for this project.",cause:new Error(`Response items: ${JSON.stringify(y)}`)});return S}catch(y){throw y instanceof m?y:qo(y,"Session creation",g)}}return r(f,"requestSessionNonce"),{postAgentChat:p,postChatCompletions:d,createSessionNonce:u,agentChatUrl:c,chatCompletionsUrl:l}}r(na,"getEvalService");function xm(e,t){return e instanceof Error?!t||!km(e)?e:new m(`Agent chat failed: could not connect to ${t}`,{hint:`Is cog-ai running? Try GET ${t}/health`,cause:e,shouldReport:!1}):new Error(String(e))}r(xm,"wrapConnectError");function km(e){let t=e,n=new Set;for(;t!=null&&!n.has(t)&&(n.add(t),typeof t=="object");){let o=t.code;if(o==="ECONNREFUSED"||o==="ENOTFOUND"||o==="ECONNRESET")return!0;t=t.cause}return!1}r(km,"isConnectError");function Pm(e){let t=e instanceof de?e.httpStatusCode:se(e)?e.status:void 0;return t===400||t===401||t===403}r(Pm,"isSessionTypeRejected");function qo(e,t,n,o){if(!se(e))return e instanceof Error?e:new Error(String(e));let i=Hi(e),s=i?`: ${i}`:"",a=o??"";return new de(`${t} failed (${e.status})${s}${a}`,{httpStatusCode:e.status,requestUrl:n,responseBody:Ao(e),cause:e})}r(qo,"wrapCdfApiError");function ia(e){if(!e)return"(none)";let t=[],n=e.dataModels?.length??0,o=e.instanceSpaces?.length??0;return(n>0||o>0)&&t.push(`${n} data model(s), ${o} space(s)`),e.appContext&&t.push("app context"),t.length>0?t.join(", "):"(none)"}r(ia,"formatSessionContextSummary");function Rm(e){let t=e.filter(s=>s.contextInformation!==void 0);if(t.length===0)return;let n=t.map(s=>s.contextInformation),o=n[0];return t.length===e.length&&n.every(s=>Tm(s,o))?ia(o):`varies by case (${t.length}/${e.length})`}r(Rm,"summarizeSessionContextForStdout");function ra(e,t){return t?[...t,e]:[e]}r(ra,"collectRepeatableValues");var Jo=Object.freeze({case:new ve("--case <id>","Run only cases with this id (repeatable)").argParser(ra),tag:new ve("--tag <tag>","Run only cases with this tag (repeatable)").argParser(ra),judgeModel:new ve("--judge-model <model>","LLM model for scoring eval cases (e.g. azure/gpt-5)"),externalId:new ve("--external-id <id>",`Agent external ID (alternative to reading from ${A.configGlob})`).conflicts("systemAgent"),systemAgent:new ve("--system-agent","Evaluate the Cognite system agent (currently cdf_industrial_v4)").conflicts("externalId"),upsert:new ve("--upsert",`Push the local ${A.configGlob} to CDF before running evals`).conflicts("externalId").conflicts("systemAgent"),failFast:new ve("--fail-fast","Stop after the first failing case; skip the rest"),verbose:new ve("-v, --verbose","Log request/response traces to stderr"),failOnToolConfirmation:new ve("--fail-on-tool-confirmation","Fail a case instead of auto-approving when the agent requests tool confirmation"),reportDir:new ve("--report-dir [path]",`Write structured eval reports (report.json + report.md); defaults to ${pn} when the path is omitted`).preset(pn)}),tx=Object.values(Jo).map(e=>e.long).filter(e=>e!=null);function Im(e,t){return e.expectPass===!1?t.dim(" (expected fail)"):""}r(Im,"formatExpectedFailSuffix");function Dm(e,t,n,o,i){if(e.length!==0){t(T(n.dim("toolsCalled:"),o));for(let s of e){let a=et(s,Qe);!i||s.result===void 0||s.result===null?t(T(a,o+1)):t(T(`${a} ${n.dim(`\u2192 ${ln(s.result)}`)}`,o+1))}}}r(Dm,"formatToolCalls");function $m(e,t,n,o,i){let a=ye(e)?n.green("\u2713"):n.red("\u2717"),c=Im(e.evalCase,n),l=o&&e.evalCase.source?`${e.evalCase.id} (${e.evalCase.source})`:e.evalCase.id;if(t(`${a} ${l}${c}`),e.invokeError){t(T(n.red("invoke: fail"))),t(T(e.invokeError.message,2)),e.invokeError instanceof m&&e.invokeError.hint&&t(T(n.yellow(`\u{1F4A1} ${e.invokeError.hint}`),2));return}e.scoreError&&(t(T(n.red("score: fail"))),t(T(e.scoreError.message,2)),e.scoreError instanceof m&&e.scoreError.hint&&t(T(n.yellow(`\u{1F4A1} ${e.scoreError.hint}`),2)));let p=e.run?.turns.length??0,d=[...new Set([...Array.from({length:p},(f,h)=>h),...e.scores.map(f=>f.turnIndex)])].sort((f,h)=>f-h),u=d.length>1;for(let f of d){let h=u?2:1;u&&t(T(n.dim(`turn ${f+1}`)));let g=e.run?.turns[f];g&&Dm(g.toolCalls,t,n,h,i);for(let y of e.scores.filter(S=>S.turnIndex===f)){let S=y.passed?n.green("pass"):n.red("fail");t(T(`${y.scorerType}: ${S}`,h)),y.explanation&&t(T(n.dim(y.explanation),h+1))}}}r($m,"formatCaseResult");async function Om(e,t,n,o){if(n.upsert){await t.upsert(Ue(e)),o.writeStdout(o.c.green(`Pushed agent "${e.externalId}" to project "${o.project}"`));return}try{let i=await t.getByExternalId(e.externalId),s=Ps(e,i);s.length>0&&o.writeStderr(o.c.yellow(Ts(s,{verbose:n.verbose})))}catch(i){if(i instanceof m&&i.message.includes("not found"))o.writeStderr(o.c.yellow(`Warning: agent "${e.externalId}" is not deployed in CDF. Run with --upsert to push local config before evaluating.`));else{let s=i instanceof Error?i.message:String(i);o.writeStderr(o.c.yellow(`Warning: failed to fetch deployed agent "${e.externalId}": ${s}`))}}}r(Om,"ensureAgentConfigBeforeEval");async function sa(e,t,n={}){let o=n.readAgentYaml??De,i=n.loadEvalCases??vs,s=n.writeStdout??(E=>console.log(E)),a=n.writeStderr??(E=>console.error(E)),c=n.chalk??P(process.stdout),l=n.getAgentClient??z,p=n.getAgentsService??ee,d=n.getEvalService??na,u=n.runEval??ea,f=n.writeEvalReport??Hs,h=oa(e??"."),{externalId:g,agentYaml:y}=await Bs(t,h,o);if(t.upsert&&y===void 0)throw new m(`--upsert requires a local ${A.configGlob} to push.`,{hint:`Remove --upsert, or add an agent definition (${A.configGlob}) to this directory.`,shouldReport:!1});let S=await i(h),w=ws(S,{caseFilter:t.case,tagFilter:t.tag}),v=[...new Set(S.map(E=>E.source))],C=v.length>1,x=await l(t,h),M=p(x);y!==void 0&&await Om(y,M,t,{project:x.project,writeStdout:s,writeStderr:a,c});let B=Ks(),R=Vs(B),Y=d(x,R,B?{chatBaseUrl:B}:{}),ce=t.reportDir!==void 0&&t.reportDir.length>0?oa(t.reportDir):void 0,I=ce!==void 0?Js():void 0,oe=t.verbose?qs(E=>a(E)):void 0,F=I&&oe?Ws(oe,I.logger):I?.logger??oe,re=Bo({cliModelId:t.judgeModel,agentModelFallback:y?.model});C&&s(`Matched ${w.length} of ${S.length} case(s) across ${v.length} file(s)`);let K=Rm(w);K!==void 0&&s(`Session context: ${K}`),s(`Judge model: ${c.cyan(re)}`),F?.log(`Agent: ${g}`);for(let E of w)F?.log(` ${E.id}: ${ia(E.contextInformation)}`);for(let E of v){let pe=S.filter(Vn=>Vn.source===E).length;F?.log(` ${E} (${pe} case(s))`)}F?.log(`Loaded ${w.length} case(s): ${w.map(E=>E.id).join(", ")}`),F?.log(`judge model: ${re} (source: ${t.judgeModel?"--judge-model flag":process.env.EVAL_JUDGE_MODEL?"EVAL_JUDGE_MODEL env":y?.model?`${A.configGlob} model fallback`:"default"})`),F?.log(`agent chat route: ${R}`),F?.log(`agent chat URL: ${Y.agentChatUrl}`),F?.log(`chat completions URL: ${Y.chatCompletionsUrl}`);let Bn=Ls({cliModelId:t.judgeModel,agentModelFallback:y?.model,service:Y,verbose:F}),le=await u({cases:w,service:Y,agentExternalId:g,judgeModel:Bn,verbose:F,tools:y?.tools,warn:r((E,pe)=>{a(c.yellow(pe?`${E}
|
|
138
|
-
hint: ${
|
|
139
|
-
${
|
|
143
|
+
${n.criteria}`,output:a.output},l)}if(n.type==="faithfulness"){let d=vm({model:i});return yt(e.id,t,n,d,{input:c?`${c}Current question:
|
|
144
|
+
${a.input}`:a.input,output:a.output,context:n.groundTruth},l)}if(n.type==="toolSelection"||n.type==="toolInvocation"){let d=n.tools??e.tools??s?.tools??[];if(d.length===0){let f=s?.tools===void 0?`Add a tools field to the scorer, case, or eval.yaml root (${v.configGlob} is not used with --external-id/--system-agent).`:`Add a tools field to the scorer, case, or eval.yaml root, or declare tools in ${v.configGlob}.`,y=`Warning: Skipping ${n.type} scorer on case "${e.id}": no tools available.`;return l?.log(y),s?.warn?.(y,f),null}if(n.type==="toolSelection"){let f=Am({model:i});return yt(e.id,t,n,f,{input:c?`${c}Current question:
|
|
145
|
+
${a.input}`:a.input,availableTools:na(d),toolSelection:Em(a.toolCalls)},l)}let u=Cm({model:i});return yt(e.id,t,n,u,{input:c?`${c}Current question:
|
|
146
|
+
${a.input}`:a.input,availableTools:na(d),toolSelection:bm(a.toolCalls)},l)}let p=n;throw new m(`Scorer type "${p.type}" is not supported yet.`,{hint:`The CLI eval schema currently supports only ${xm(hs)} scorers.`,shouldReport:!1})}r(Pm,"evaluateScorer");async function Tm(e,t,n,o,i){let s=e.turns[t]?.scorers??[];return(await Promise.all(s.map(c=>Pm(e,t,c,n,o,i)))).filter(c=>c!==null)}r(Tm,"scoreTurn");async function oa(e,t,n,o){return(await Promise.all(e.turns.map((s,a)=>Tm(e,a,t,n,o)))).flat()}r(oa,"scoreCase");function Rm(e){return e.length>0&&e.every(t=>t.passed)}r(Rm,"casePassed");function Im(e,t,n){if(n<=1)return e;let o=e instanceof Error?e.message:String(e);return new m(`turn ${t+1}/${n}: ${o}`,{hint:ue(e)?e.hint:void 0,helpUrl:ue(e)?e.helpUrl:void 0,shouldReport:ue(e)?e.shouldReport:void 0,cause:e})}r(Im,"annotateTurnFailure");async function Dm(e,t){let{service:n,agentExternalId:o,judgeModel:i,verbose:s}=t;s?.log(`--- case "${e.id}" (${e.source}) invoke ---`);let a;try{let c=[],l;for(let[p,d]of e.turns.entries()){s?.log(` turn ${p+1}/${e.turns.length}: "${d.input}"`);let u;try{u=await Zs({service:n,agentExternalId:o,input:d.input,cursor:l,contextInformation:e.contextInformation,allowToolConfirmation:t.allowToolConfirmation,verbose:s})}catch(f){throw Im(f,p,e.turns.length)}l=u.cursor,c.push({input:d.input,output:u.output,toolCalls:u.toolCalls,apiRoundTrips:u.turns})}a={caseId:e.id,turns:c}}catch(c){return{evalCase:e,scores:[],passed:!1,invokeError:c instanceof Error?c:new Error(String(c))}}s?.log(`--- case "${e.id}" (${e.source}) score (Phoenix) ---`);try{let c=await oa(e,a,i,{verbose:s,tools:t.tools,warn:t.warn});return{evalCase:e,run:a,scores:c,passed:Rm(c)}}catch(c){return{evalCase:e,run:a,scores:[],passed:!1,scoreError:c instanceof Error?c:new Error(String(c))}}}r(Dm,"runCase");async function ra(e){let{cases:t,verbose:n}=e,o=[];for(let s of t){let a=await Dm(s,e);if(o.push(a),e.failFast&&!ye(a)){n?.log(`--- fail-fast: stopping after failed case "${s.id}" (${s.source}) ---`);break}}let i=o.filter(s=>s.passed).length;return{totalCases:t.length,passedCases:i,failedCases:o.length-i,skippedCases:t.length-o.length,results:o}}r(ra,"runEval");var Wo={"cdf-version":"20230101-alpha"};function ia(e,t,n={}){let{chatBaseUrl:o}=n,i=Js(e.project,t),s=Ws(e.project),a=o?mn(o,i):i,c=o?a:mn(e.getBaseUrl(),i),l=mn(e.getBaseUrl(),s);async function p(g){if(o)return d(g);try{return(await e.post(a,{data:g,headers:Wo})).data}catch(h){if(!ae(h))throw h;let w=t==="internal"&&h.status===404?" Try the public route: set AGENT_CHAT_ROUTE=public.":"";throw gn(h,"Agent chat",c,w||void 0)}}r(p,"postAgentChat");async function d(g){let h=await e.authenticate();if(!h)throw new m("Agent chat requires a CDF access token for local cog-ai.",{hint:"Run `cognite auth login` or pass --interactive with --base-url and --project.",shouldReport:!1});let w={...Wo,Authorization:`Bearer ${h}`};try{let S=await fetch(a,{method:"POST",headers:{"Content-Type":"application/json",...w},body:JSON.stringify(g)});if(!S.ok)throw gn($m(S.status,await S.text()),"Agent chat",c);return await S.json()}catch(S){throw S instanceof ie||S instanceof m?S:Om(S,o)}}r(d,"postLoopbackAgentChat");async function u(g){try{return(await e.post(s,{data:g,headers:Wo})).data}catch(h){throw gn(h,"Chat completions",l)}}r(u,"postChatCompletions");async function f(){let g=`/api/v1/projects/${encodeURIComponent(e.project)}/sessions`;try{return await y({oneshotTokenExchange:!0},g)}catch(h){if(Lm(h))return await y({tokenExchange:!0},g);throw h}}r(f,"createSessionNonce");async function y(g,h){try{let w=await e.sessions.create([g]),S=w?.[0]?.nonce;if(!S)throw new m("Session creation returned no nonce",{hint:"The Sessions API returned an empty items list. Retry, or check IdP configuration for this project.",cause:new Error(`Response items: ${JSON.stringify(w)}`)});return S}catch(w){throw w instanceof m?w:gn(w,"Session creation",h)}}return r(y,"requestSessionNonce"),{postAgentChat:p,postChatCompletions:u,createSessionNonce:f,agentChatUrl:c,chatCompletionsUrl:l}}r(ia,"getEvalService");function $m(e,t){let n;try{n=JSON.parse(t)}catch{n={error:{message:t}}}return Object.assign(new Error(t),{status:e,data:U(n)?n:void 0})}r($m,"httpErrorFromFetchBody");function Om(e,t){return e instanceof Error?!t||!Fm(e)?e:new m(`Agent chat failed: could not connect to ${t}`,{hint:`Is cog-ai running? Try GET ${t}/health`,cause:e,shouldReport:!1}):new Error(String(e))}r(Om,"wrapConnectError");function Fm(e){let t=e,n=new Set;for(;t!=null&&!n.has(t)&&(n.add(t),typeof t=="object");){let o=t.code;if(o==="ECONNREFUSED"||o==="ENOTFOUND"||o==="ECONNRESET")return!0;t=t.cause}return!1}r(Fm,"isConnectError");function Lm(e){let t=e instanceof ie?e.httpStatusCode:ae(e)?e.status:void 0;return t===400||t===401||t===403}r(Lm,"isSessionTypeRejected");function gn(e,t,n,o){if(!ae(e))return e instanceof Error?e:new Error(String(e));let i=Ki(e),s=i?`: ${i}`:"",a=o??"";return new ie(`${t} failed (${e.status})${s}${a}`,{httpStatusCode:e.status,requestUrl:n,responseBody:xo(e),cause:e})}r(gn,"wrapCdfApiError");function ca(e){if(!e)return"(none)";let t=[],n=e.dataModels?.length??0,o=e.instanceSpaces?.length??0;return(n>0||o>0)&&t.push(`${n} data model(s), ${o} space(s)`),e.appContext&&t.push("app context"),t.length>0?t.join(", "):"(none)"}r(ca,"formatSessionContextSummary");function Um(e){let t=e.filter(s=>s.contextInformation!==void 0);if(t.length===0)return;let n=t.map(s=>s.contextInformation),o=n[0];return t.length===e.length&&n.every(s=>Mm(s,o))?ca(o):`varies by case (${t.length}/${e.length})`}r(Um,"summarizeSessionContextForStdout");function aa(e,t){return t?[...t,e]:[e]}r(aa,"collectRepeatableValues");var Zo=Object.freeze({case:new ve("--case <id>","Run only cases with this id (repeatable)").argParser(aa),tag:new ve("--tag <tag>","Run only cases with this tag (repeatable)").argParser(aa),judgeModel:new ve("--judge-model <model>","LLM model for scoring eval cases (e.g. azure/gpt-5)"),externalId:new ve("--external-id <id>",`Agent external ID (alternative to reading from ${v.configGlob})`).conflicts("systemAgent"),systemAgent:new ve("--system-agent","Evaluate the Cognite system agent (currently cdf_industrial_v4)").conflicts("externalId"),upsert:new ve("--upsert",`Push the local ${v.configGlob} to CDF before running evals`).conflicts("externalId").conflicts("systemAgent"),failFast:new ve("--fail-fast","Stop after the first failing case; skip the rest"),verbose:new ve("-v, --verbose","Log request/response traces to stderr"),failOnToolConfirmation:new ve("--fail-on-tool-confirmation","Fail a case instead of auto-approving when the agent requests tool confirmation"),reportDir:new ve("--report-dir [path]",`Write structured eval reports (report.json + report.md); defaults to ${dn} when the path is omitted`).preset(dn)}),px=Object.values(Zo).map(e=>e.long).filter(e=>e!=null);function Nm(e,t){return e.expectPass===!1?t.dim(" (expected fail)"):""}r(Nm,"formatExpectedFailSuffix");function _m(e,t,n,o,i){if(e.length!==0){t(T(n.dim("toolsCalled:"),o));for(let s of e){let a=Qe(s,Xe);!i||s.result===void 0||s.result===null?t(T(a,o+1)):t(T(`${a} ${n.dim(`\u2192 ${pn(s.result)}`)}`,o+1))}}}r(_m,"formatToolCalls");function jm(e,t,n,o,i){let a=ye(e)?n.green("\u2713"):n.red("\u2717"),c=Nm(e.evalCase,n),l=o&&e.evalCase.source?`${e.evalCase.id} (${e.evalCase.source})`:e.evalCase.id;if(t(`${a} ${l}${c}`),e.invokeError){t(T(n.red("invoke: fail"))),t(T(e.invokeError.message,2)),e.invokeError instanceof m&&e.invokeError.hint&&t(T(n.yellow(`\u{1F4A1} ${e.invokeError.hint}`),2));return}e.scoreError&&(t(T(n.red("score: fail"))),t(T(e.scoreError.message,2)),e.scoreError instanceof m&&e.scoreError.hint&&t(T(n.yellow(`\u{1F4A1} ${e.scoreError.hint}`),2)));let p=e.run?.turns.length??0,d=[...new Set([...Array.from({length:p},(f,y)=>y),...e.scores.map(f=>f.turnIndex)])].sort((f,y)=>f-y),u=d.length>1;for(let f of d){let y=u?2:1;u&&t(T(n.dim(`turn ${f+1}`)));let g=e.run?.turns[f];g&&_m(g.toolCalls,t,n,y,i);for(let h of e.scores.filter(w=>w.turnIndex===f)){let w=h.passed?n.green("pass"):n.red("fail");t(T(`${h.scorerType}: ${w}`,y)),h.explanation&&t(T(n.dim(h.explanation),y+1))}}}r(jm,"formatCaseResult");async function Hm(e,t,n,o){if(n.upsert){await t.upsert(Me(e)),o.writeStdout(o.c.green(`Pushed agent "${e.externalId}" to project "${o.project}"`));return}try{let i=await t.getByExternalId(e.externalId),s=Ds(e,i);s.length>0&&o.writeStderr(o.c.yellow($s(s,{verbose:n.verbose})))}catch(i){if(i instanceof m&&i.message.includes("not found"))o.writeStderr(o.c.yellow(`Warning: agent "${e.externalId}" is not deployed in CDF. Run with --upsert to push local config before evaluating.`));else{let s=i instanceof Error?i.message:String(i);o.writeStderr(o.c.yellow(`Warning: failed to fetch deployed agent "${e.externalId}": ${s}`))}}}r(Hm,"ensureAgentConfigBeforeEval");async function la(e,t,n={}){let o=n.readAgentYaml??$e,i=n.loadEvalCases??bs,s=n.writeStdout??(E=>console.log(E)),a=n.writeStderr??(E=>console.error(E)),c=n.chalk??P(process.stdout),l=n.getAgentClient??z,p=n.getAgentsService??ee,d=n.getEvalService??ia,u=n.runEval??ra,f=n.writeEvalReport??Gs,y=sa(e??"."),{externalId:g,agentYaml:h}=await Ys(t,y,o);if(t.upsert&&h===void 0)throw new m(`--upsert requires a local ${v.configGlob} to push.`,{hint:`Remove --upsert, or add an agent definition (${v.configGlob}) to this directory.`,shouldReport:!1});let w=await i(y),S=As(w,{caseFilter:t.case,tagFilter:t.tag}),C=[...new Set(w.map(E=>E.source))],A=C.length>1,x=await l(t,y),M=p(x);h!==void 0&&await Hm(h,M,t,{project:x.project,writeStdout:s,writeStderr:a,c});let K=zs(),R=qs(K),Y=d(x,R,K?{chatBaseUrl:K}:{}),le=t.reportDir!==void 0&&t.reportDir.length>0?sa(t.reportDir):void 0,I=le!==void 0?Qs():void 0,oe=t.verbose?Xs(E=>a(E)):void 0,F=I&&oe?ea(oe,I.logger):I?.logger??oe,re=Vo({cliModelId:t.judgeModel,agentModelFallback:h?.model});A&&s(`Matched ${S.length} of ${w.length} case(s) across ${C.length} file(s)`);let V=Um(S);V!==void 0&&s(`Session context: ${V}`),s(`Judge model: ${c.cyan(re)}`),F?.log(`Agent: ${g}`);for(let E of S)F?.log(` ${E.id}: ${ca(E.contextInformation)}`);for(let E of C){let de=w.filter(zn=>zn.source===E).length;F?.log(` ${E} (${de} case(s))`)}F?.log(`Loaded ${S.length} case(s): ${S.map(E=>E.id).join(", ")}`),F?.log(`judge model: ${re} (source: ${t.judgeModel?"--judge-model flag":process.env.EVAL_JUDGE_MODEL?"EVAL_JUDGE_MODEL env":h?.model?`${v.configGlob} model fallback`:"default"})`),F?.log(`agent chat route: ${R}`),F?.log(`agent chat URL: ${Y.agentChatUrl}`),F?.log(`chat completions URL: ${Y.chatCompletionsUrl}`);let Gn=_s({cliModelId:t.judgeModel,agentModelFallback:h?.model,service:Y,verbose:F}),pe=await u({cases:S,service:Y,agentExternalId:g,judgeModel:Gn,verbose:F,tools:h?.tools,warn:r((E,de)=>{a(c.yellow(de?`${E}
|
|
147
|
+
hint: ${de}`:E))},"warn"),allowToolConfirmation:!t.failOnToolConfirmation,failFast:t.failFast});for(let E of pe.results)jm(E,s,c,A,t.verbose??!1),E.evalCase.expectPass===!1&&!E.invokeError&&!E.scoreError&&E.passed&&a(c.yellow(`Warning: case "${E.evalCase.id}" expected scorers to fail but they passed.`));let Yn=Mo(pe.results),Hr=mt(pe.results),Br=`${Hr}/${pe.results.length} cases met expectations`,Pl=Yn?c.bold(c.red(Br)):c.bold(c.green(Br));if(s(`
|
|
148
|
+
${Pl}`),pe.skippedCases>0&&s(c.yellow(`Stopped early (--fail-fast): ${pe.skippedCases} case(s) not run.`)),le!==void 0&&I!==void 0)try{let{jsonPath:E,mdPath:de}=await f({reportDir:le,summary:pe,traces:I.events,meta:{agentExternalId:g,judgeModelId:re,route:R}});s(`Wrote eval report: ${E}`),s(`Wrote eval report: ${de}`)}catch(E){let de=E instanceof Error?E.message:String(E);a(c.yellow(`Warning: failed to write eval report: ${de}`))}Yn&&(process.exitCode=1);let Tl=Array.from(new Set(S.flatMap(E=>E.turns.flatMap(de=>de.scorers?.map(zn=>zn.type)??[])))),Kr=oo();await Os(n.telemetry,{caseCount:pe.totalCases,passCount:Hr,failCount:ut(pe.results),unexpectedPassCount:gt(pe.results),scorersUsed:Tl,success:!Yn,...Kr!==void 0&&{actionDurationMs:Kr}})}r(la,"handleAgentsEval");import{Option as Gm}from"commander";function fn(e,t){return e.map((n,o)=>Math.max(n.length,...t.map(i=>i[o].length)))}r(fn,"computeColumnWidths");function St(e,t,n=e){return e.map((o,i)=>n[i]+" ".repeat(Math.max(0,t[i]-o.length))).join(" ").trimEnd()}r(St,"formatTableRow");import{writeFile as pa}from"fs/promises";import{resolve as Km}from"path";import{resolve as Bm}from"path";async function Ce(e,t,n={}){let o=n.readAgentYaml??$e,i=n.getAgentClient??z,s=n.getAgentsService??ee,a=Bm(e??"."),c=await o(a),l=await i(t,a);await s(l).upsert(Me(c));let d=P(process.stdout);return console.log(d.green(`Pushed agent "${c.externalId}" to project "${l.project}"`)),{client:l,agentYaml:c}}r(Ce,"handleAgentsPush");var Pe="published",Xo=class Xo extends be{constructor(){super("publish");this.handle=r(async(n,o,i)=>{let s=i.optsWithGlobals(),a=Km(n??"."),{path:c,agent:l}=await at(a),p=l.labels??[];if(p.includes(Pe))await Ce(n,s);else{let u={...l,labels:[...p,Pe]};await pa(c,ge(u));try{await Ce(n,s)}catch(f){throw await pa(c,ge(l)),f}}let d=P(process.stdout);console.log(d.green(`Published agent "${l.externalId}"`))},"handle");this.description("Promote a draft agent to production").argument("[dir]","Agent project directory").addHelpText("after",Vm),this.action(this.handle)}};r(Xo,"PublishCommand");var hn=Xo,Vm=`
|
|
140
149
|
Examples:
|
|
141
150
|
cognite agents publish Publish agent in current directory
|
|
142
151
|
cognite agents publish ./my-agent Publish agent in my-agent directory
|
|
143
|
-
`;var
|
|
144
|
-
${e}`),!1}}r(
|
|
145
|
-
${e}`)}}r(
|
|
146
|
-
${p}`,{hint:"Use --force to overwrite the existing file.",shouldReport:!1});await
|
|
152
|
+
`;var da=Object.freeze({json:new Gm("--json","Output as JSON")});async function ua(e,t={}){let n=t.getAgentClient??z,o=t.getAgentsService??ee,i=await n(e,process.cwd()),c=(await o(i).list()).items;if(e.json){console.log(JSON.stringify(c,null,2));return}if(c.length===0){console.log(`No agents found in project "${i.project}".`);return}let l=P(process.stdout),p=c.map(S=>({externalId:S.externalId,name:S.name,status:S.labels?.includes(Pe)?"published":"draft",model:S.model,updated:Qo(S.lastUpdatedTime)})),d=["externalId","name","status","model","updated"],u=["External ID","Name","Status","Model","Updated"],f=p.map(S=>d.map(C=>S[C])),y=fn(u,f);console.log(),console.log(l.bold(St(u,y))),console.log(l.dim(y.map(S=>"\u2500".repeat(S)).join(" ")));for(let S of p){let C=S.status==="published"?l.green(S.status):l.yellow(S.status),A=d.map(M=>S[M]),x=d.map(M=>M==="status"?C:S[M]);console.log(St(A,y,x))}console.log();let g=p.filter(S=>S.status==="published").length,h=p.length-g,w=[`${p.length} agent${p.length===1?"":"s"}`];g>0&&w.push(`${g} published`),h>0&&w.push(`${h} draft`),console.log(w.join(", "))}r(ua,"handleAgentsList");function Qo(e,t=Date.now()){let n=t-e;if(n<0)return"just now";let o=Math.floor(n/1e3);if(o<60)return"just now";let i=Math.floor(o/60);if(i<60)return`${i}m ago`;let s=Math.floor(i/60);return s<24?`${s}h ago`:`${Math.floor(s/24)}d ago`}r(Qo,"formatRelativeTime");import{resolve as qm}from"path";import{Option as Jm}from"commander";function ma(e,t){let{org:n,project:o,baseUrl:i}=e,s;try{s=new URL(i).hostname}catch{return null}let{externalId:a,versionTag:c}=t,l=new URLSearchParams({cluster:s,customAppVersion:c,workspace:"industrial-tools"});return`https://${n}.fusion.cognite.com/${o}/flows-apps/app/${encodeURIComponent(a)}?${l}`}r(ma,"generateFusionUrl");function ga(e){let{org:t,project:n,cluster:o,agentExternalId:i}=e,s=new URLSearchParams({cluster:o,atlasOverride:i});return`https://${t}.fusion.cognite.com/${n}?${s}`}r(ga,"generateAtlasAgentUrl");import{execFileSync as fa}from"child_process";import{platform as Ym}from"os";import zm from"path";function X(e,t={}){let{platform:n=Ym}=t;switch(n()){case"darwin":return e==="macos";case"win32":return e==="windows";default:return e==="other"}}r(X,"isOS");function yn(e,t={}){let{exec:n=fa,log:o=console.log}=t,[i,s]=X("macos",t)?["open",[e]]:X("windows",t)?["rundll32",["url.dll,FileProtocolHandler",e]]:["xdg-open",[e]];try{return n(i,s),!0}catch{return o(`Could not open browser \u2014 open manually:
|
|
153
|
+
${e}`),!1}}r(yn,"openInBrowser");function ha(e,t={}){let{exec:n=fa,log:o=console.log}=t,[i,s]=X("macos",t)?["open",["-R",e]]:X("windows",t)?["explorer",[`/select,${e}`]]:["xdg-open",[zm.dirname(e)]];try{n(i,s)}catch{o(`Could not open file manager \u2014 files are at:
|
|
154
|
+
${e}`)}}r(ha,"revealInFileManager");var er=Object.freeze({upsert:new Jm("--upsert","Push the agent to CDF before opening (upsert draft)").default(!1)}),tk=Object.values(er).map(e=>e.long).filter(e=>e!=null);function Wm(e){try{return new URL(e.getBaseUrl()).hostname}catch{throw new m("Could not determine cluster from client base URL.",{hint:"Check your --base-url or session project configuration.",shouldReport:!1})}}r(Wm,"clusterFromBaseUrl");async function ya(e,t,n={}){let o=n.handleAgentsPush??Ce,i=n.readAgentYaml??$e,s=n.getAgentClient??z,a=n.resolveOrg??ls,c=n.openInBrowser??yn,l=qm(e??"."),{client:p,agentYaml:d}=t.upsert?await o(e,t):{agentYaml:await i(l),client:await s(t,l)},u=a(t,l),f=p.project,y=Wm(p),g=ga({org:u,project:f,cluster:y,agentExternalId:d.externalId}),h=P(process.stdout);console.log(h.cyan(`Opening ${g}`)),c(g)}r(ya,"handleAgentsOpen");import{mkdir as Zm,writeFile as Xm}from"fs/promises";import{basename as Qm,join as eg,resolve as tg}from"path";import{Option as ng}from"commander";async function Sa(e,t,n,o={getAgentClient:{}}){let i=await z(n,process.cwd(),o.getAgentClient),s=await ee(i).getByExternalId(e),a=tg(t??"."),c=De(Qm(a)),l=(await st(a)).find(u=>u.toLowerCase()===c.toLowerCase()),p=eg(a,l??c);if(l!==void 0&&!n.force)throw new m(`${l} already exists at:
|
|
155
|
+
${p}`,{hint:"Use --force to overwrite the existing file.",shouldReport:!1});await Zm(a,{recursive:!0}),await Xm(p,ge(s));let d=P(process.stdout);console.log(d.green(`Pulled agent "${s.name}" (${e}) to ${p}`))}r(Sa,"handleAgentsPull");var wt=Object.freeze({externalId:{name:"external-id",description:"externalId of the agent to pull"},dir:{name:"dir",description:"Agent project directory"}}),tr=Object.freeze({force:new ng("--force","Overwrite the existing agent definition without prompting")}),mk=Object.values(tr).map(e=>e.long).filter(e=>e!=null);import{resolve as og}from"path";import{Option as wa}from"commander";var va=Object.freeze({externalId:new wa("--external-id <id>",`Agent external ID (alternative to reading from ${v.configGlob})`),json:new wa("--json","Output as JSON")});function rg(e){return e.labels?.includes(Pe)?"published":"draft"}r(rg,"describeAgentStatus");function ig(e,t=Date.now()){return e==null||isNaN(e)?"unknown":`${new Date(e).toISOString()} (${Qo(e,t)})`}r(ig,"formatUpdatedAt");function sg(e){let t=e.tools??[];if(t.length===0)return["Tools: none"];let n=[`Tools (${t.length}):`];for(let o of t)n.push(T(`- ${o.type}: ${o.description}`));return n}r(sg,"formatTools");function ag(e){let t=e.skills??[];if(t.length===0)return["Skills: none"];let n=[`Skills (${t.length}):`];for(let o of t)n.push(T(`- ${o}`));return n}r(ag,"formatSkills");function cg(e){let t=e.subagents??[];if(t.length===0)return["Sub-agents: none"];let n=[`Sub-agents (${t.length}):`];for(let o of t)n.push(T(`- ${o.agentExternalId}`));return n}r(cg,"formatSubagents");function lg(e,t,n=Date.now()){let o=rg(e);return["",`Agent: ${t.bold(e.name)} (${t.dim(e.externalId)})`,`Status: ${o==="published"?t.green(o):t.yellow(o)}`,`Model: ${e.model}`,`Updated: ${t.dim(ig(e.lastUpdatedTime,n))}`,"",...sg(e),"",...ag(e),"",...cg(e),...o==="draft"?["","Run `npx @cognite/cli agents publish .` to publish this agent."]:[]]}r(lg,"renderAgentStatus");async function Ca(e,t,n={}){let o=n.readAgentYaml??$e,i=n.getAgentClient??z,s=n.getAgentsService??ee,a=og(e??"."),c;if(t.externalId!==void 0){let f=t.externalId.trim();if(!f)throw new m("--external-id cannot be empty.",{hint:`Provide a valid agent external ID, or omit the flag to read from ${v.configGlob}.`,shouldReport:!1});c=f}else c=(await o(a)).externalId;let l=await i(t,a),d=await s(l).getByExternalId(c);if(t.json){console.log(JSON.stringify(d,null,2));return}let u=lg(d,P(process.stdout));for(let f of u)console.log(f)}r(Ca,"handleAgentsStatus");import{writeFile as Aa}from"fs/promises";import{resolve as pg}from"path";var nr=class nr extends be{constructor(){super("unpublish");this.handle=r(async(n,o,i)=>{let s=i.optsWithGlobals(),a=pg(n??"."),{path:c,agent:l}=await at(a),p=l.labels??[];if(p.includes(Pe)){let u={...l,labels:p.filter(f=>f!==Pe)};await Aa(c,ge(u));try{await Ce(n,s)}catch(f){throw await Aa(c,ge(l)),f}}else await Ce(n,s);let d=P(process.stdout);console.log(d.green(`Unpublished agent "${l.externalId}"`))},"handle");this.description("Retract a published agent back to draft").argument("[dir]","Agent project directory").addHelpText("after",dg),this.action(this.handle)}};r(nr,"UnpublishCommand");var Sn=nr,dg=`
|
|
147
156
|
Examples:
|
|
148
157
|
cognite agents unpublish Unpublish agent in current directory
|
|
149
158
|
cognite agents unpublish ./my-agent Unpublish agent in my-agent directory
|
|
150
|
-
`;var
|
|
151
|
-
`,"passphraseMismatchMsg"),Ia=`Passphrase confirmation failed after ${vn} attempts`,Da=r(e=>`A signing key with kid "${e}" already exists. Overwrite it?`,"confirmOverwriteMsg"),$a="How would you like to submit your key registration?",Oa="Open in browser",Fa="Copy link to clipboard";async function rr(e){return or.prompt(e)}r(rr,"defaultPrompt");function La(e){return t=>{try{return e(t),!0}catch(n){return n instanceof Error?n.message:"Invalid"}}}r(La,"parserAsValidator");var pg=/^[a-z0-9]([a-z0-9-]*[a-z0-9])?$/;function Ge(e){let t=e.trim();if(!t)throw new Error("--kid must not be empty");if(t.length>64)throw new Error("--kid must be 64 characters or fewer");if(!pg.test(t))throw new Error("--kid must contain only lowercase letters, digits, and hyphens, and must not start or end with a hyphen (e.g. jsmith-dev-001)");return t}r(Ge,"parseKid");async function Ma(e={}){let{prompt:t=rr}=e,{kid:n}=await t({type:"input",name:"kid",message:ba,validate:La(Ge)});return Ge(n)}r(Ma,"promptKid");async function Ua(e={}){let{prompt:t=r(o=>or.prompt(o),"prompt")}=e,{action:n}=await t({type:"select",name:"action",message:$a,choices:[{name:"browser",message:Oa},{name:"clipboard",message:Fa}]});if(n!=="browser"&&n!=="clipboard")throw new Error(`Unexpected Zendesk action: ${n}`);return n}r(Ua,"promptZendeskAction");async function Na(e={}){let{prompt:t=rr,gitUserEmail:n=Ea}=e,{email:o}=await t({type:"input",name:"email",message:xa,initial:n(),validate:La(i=>tt(i,"email"))});return tt(o,"email")}r(Na,"promptEmail");async function _a(e={}){let{prompt:t=rr,stderr:n=process.stderr}=e;for(let o=1;o<=vn;o+=1){let{passphrase:i}=await t({type:"password",name:"passphrase",message:ka,validate:r(a=>a.length>=15?!0:Ta(),"validate")}),{confirm:s}=await t({type:"password",name:"confirm",message:Pa});if(i===s)return b.from(i);n.write(Ra(o))}throw new Error(Ia)}r(_a,"promptPassphrase");async function ja(e,t={}){let{prompt:n=r(i=>or.prompt(i),"prompt")}=t,{confirmed:o}=await n({type:"confirm",name:"confirmed",message:Da(e),initial:!1});return o}r(ja,"promptConfirmOverwrite");import{existsSync as vg,readdirSync as Cg,readFileSync as Ag}from"fs";import{join as sr}from"path";import{execFile as dg}from"child_process";import{promisify as ug}from"util";var Ha="cognite-flows",mg=ug(dg),Ba=r((e,t)=>mg(e,t),"defaultExecFile"),gg=-25300,fg=gg&255;function hg(e){if(!(e instanceof Error)||!("code"in e)||e.code!==fg)return!1;let t="stderr"in e?String(e.stderr):"";return/could not be found/i.test(t)||t===""}r(hg,"isKeychainNotFoundError");async function Ka(e,t,n={}){let o=t.expose();if(!X("macos",n))throw new Error("Keychain storage is only supported on macOS");let{execFile:i=Ba}=n;await i("security",["add-generic-password","-a",e,"-s",Ha,"-w",Buffer.from(o,"utf-8").toString("base64"),"-U"])}r(Ka,"storeKeyInKeychain");async function Cn(e,t={}){if(!X("macos",t))return null;let{execFile:n=Ba}=t;try{let{stdout:o}=await n("security",["find-generic-password","-a",e,"-s",Ha,"-w"]);return b.from(Buffer.from(o.trim(),"base64").toString("utf-8"))}catch(o){if(hg(o))return null;throw o}}r(Cn,"readKeyFromKeychain");var Ga="cognite-cli-signing",yg="The native @napi-rs/keyring binary failed to load for this platform. Reinstall the CLI, or regenerate the key with `--output <path>` to use passphrase-encrypted file storage instead.",Sg="Multiple Windows Credential Manager entries match this kid. Open Credential Manager (Control Panel \u2192 User Accounts \u2192 Credential Manager \u2192 Windows Credentials) and remove the duplicates.",Va="Windows Credential Manager failed unexpectedly. Regenerate the key with `--output <path>` to fall back to passphrase-encrypted file storage.";function wg(e){if(!(e instanceof Error))return Va;let t=e.message.toLowerCase();return t.includes("cannot find module")||t.includes("module_not_found")||t.includes("failed to load native binding")?yg:t.includes("ambiguous")?Sg:Va}r(wg,"hintFor");function Ya(e,t,n){return new m(`Failed to ${e} signing key for kid "${t}" in Windows Credential Manager`,{cause:n,hint:wg(n),shouldReport:!1})}r(Ya,"wrapKeyringError");async function za(e,t){let{Entry:n}=await import("@napi-rs/keyring"),o=new n(e,t);return{setPassword:r(i=>o.setPassword(i),"setPassword"),getPassword:r(()=>o.getPassword(),"getPassword"),deleteCredential:r(()=>o.deleteCredential(),"deleteCredential")}}r(za,"defaultCreateEntry");async function qa(e,t,n={}){let{createEntry:o=za}=n,i=Buffer.from(t.expose(),"utf-8").toString("base64");try{(await o(Ga,e)).setPassword(i)}catch(s){throw Ya("store",e,s)}}r(qa,"storeSigningKey");async function An(e,t={}){let{createEntry:n=za}=t;try{let i=(await n(Ga,e)).getPassword();return i===null?null:b.from(Buffer.from(i,"base64").toString("utf-8"))}catch(o){throw Ya("read",e,o)}}r(An,"readSigningKey");var Oe=".pub.pem",ar=".key.jwe",cr=".meta.json";function En(e){switch(e.kind){case"keychain":return"OS credential store";case"encrypted-file":return e.path;case"public-only":return"public-only (private key missing)"}}r(En,"formatLocalKeySource");function Eg(e){return{existsSync:e.existsSync??vg,readdirSync:e.readdirSync??Cg,readFileSync:e.readFileSync??((t,n)=>Ag(t,n)),isOS:e.isOS??(t=>X(t)),readKeyFromKeychain:e.readKeyFromKeychain??(t=>Cn(t)),readSigningKey:e.readSigningKey??(t=>An(t))}}r(Eg,"resolveDeps");function bg(e){try{let t=JSON.parse(e);if(typeof t=="object"&&t!==null&&!Array.isArray(t)&&"email"in t&&typeof t.email=="string")return t.email}catch{}}r(bg,"readEmailFromMeta");function xg(e,t){return t.existsSync(e)?t.readdirSync(e).filter(n=>n.endsWith(Oe)):[]}r(xg,"publicKeyEntries");function kg(e){return e.slice(0,-Oe.length)}r(kg,"kidFromPublicKeyFilename");async function Pg(e,t,n){if(n.isOS("macos")&&await n.readKeyFromKeychain(e).catch(()=>null)!==null)return{kind:"keychain"};if(n.isOS("windows")&&await n.readSigningKey(e).catch(()=>null)!==null)return{kind:"keychain"};let o=sr(t,`${e}${ar}`);return n.existsSync(o)?{kind:"encrypted-file",path:o}:{kind:"public-only"}}r(Pg,"resolveSource");async function bn(e=D().keysDir,t={}){let n=Eg(t),o=new Set,i=xg(e,n).flatMap(s=>{let a=kg(s);return!a||o.has(a)?[]:(o.add(a),[{kid:a,entry:s}])});return Promise.all(i.map(async({kid:s,entry:a})=>{let c=await Pg(s,e,n),l=sr(e,`${s}${cr}`),p;try{p=bg(n.readFileSync(l,"utf8"))}catch{}return{kid:s,source:c,publicKeyPath:sr(e,a),email:p}}))}r(bn,"discoverLocalKeys");import{createReadStream as Tg}from"fs";function xn(e){let t=Tg(e);return new ReadableStream({start(n){t.on("data",o=>{let i=typeof o=="string"?Buffer.from(o):o;n.enqueue(new Uint8Array(i))}),t.on("end",()=>n.close()),t.on("error",o=>n.error(o))},cancel(){t.destroy()}})}r(xn,"createWebStreamFromFile");import Rg from"path";var Ja=".cognite-bundles";function Wa(e,t){return`${e}-${t}.zip`}r(Wa,"bundleFileName");function ne(e,t,n){return Rg.join(e,Ja,Wa(t,n))}r(ne,"bundlePath");var Za=[".dev.sig",".cert.sig",".sig"];function Lg(e){return{existsSync:e.existsSync??Ig,readFileSync:e.readFileSync??((t,n)=>Dg(t,n)),createBundleStream:e.createBundleStream??xn,verifyBundle:e.verifyBundle??Og,loadAppConfig:e.loadAppConfig??k,defaultKeyDir:e.defaultKeyDir??(()=>D().keysDir)}}r(Lg,"resolveDeps");function Mg(e,t){return Za.map(n=>`${e}${n}`).find(n=>t(n))}r(Mg,"findSiblingSignature");function Ug(e){let t=e.split(".");return t.length===3&&t.every(n=>n.length>0)}r(Ug,"isCompactJws");function Ng(e){try{let t=Fg(e);return typeof t.kid=="string"?t.kid:void 0}catch{return}}r(Ng,"readKidFromToken");function _g(e,t,n){let{existsSync:o,readFileSync:i}=n;try{Ge(e)}catch(a){throw new m(a instanceof Error?a.message:String(a),{shouldReport:!1})}if(!o(t))throw new m(`Key directory not found: ${t}`,{shouldReport:!1});let s=$g(t,`${e}${Oe}`);if(!o(s))throw new m(`No public key found for kid "${e}" in ${t}`,{shouldReport:!1});try{return i(s,"utf-8")}catch(a){throw new m(`Failed to read public key file: ${s}`,{cause:a,shouldReport:!1})}}r(_g,"resolvePublicKeyForKid");function jg(e,t){let{payload:n,kid:o}=e;if(console.log(`Verified ${n.appId}@${n.version}`),console.log(` kid: ${o}`),console.log(` hash: ${n.bundleSha256}`),n.scopes&&n.scopes.length>0){let i=n.scopes.map(s=>`${s.org}/${s.project}`).join(", ");console.log(` scopes: ${i}`)}t&&console.log(JSON.stringify(n,null,2))}r(jg,"printResult");async function Xa(e,t,n={},o=process.cwd()){let{existsSync:i,readFileSync:s,loadAppConfig:a,createBundleStream:c,verifyBundle:l,defaultKeyDir:p}=Lg(n),d;if(e)d=kn(o,e);else{let g;try{g=a(o)}catch(y){let S=y instanceof Error?y.message:String(y);throw new m(S,{cause:y,hint:"Run this command from a Cognite app directory (one with app.json), or pass [bundle] explicitly.",shouldReport:!1})}d=ne(o,g.externalId,g.versionTag)}if(!i(d)){let g=e?void 0:"Default derived from app.json \u2014 pass [bundle] explicitly to override.";throw new m(`Bundle not found: ${d}`,{hint:g,shouldReport:!1})}let u=t.sig?kn(o,t.sig):Mg(d,i);if(!u)throw new m("No signature file found.",{hint:`Pass --sig <path> or place one of ${Za.map(g=>`${d}${g}`).join(", ")} next to the bundle.`,shouldReport:!1});if(!i(u))throw new m(`Signature file not found: ${u}`,{shouldReport:!1});let f;try{f=s(u,"utf-8").trim()}catch(g){throw new m(`Failed to read signature file: ${u}`,{cause:g,shouldReport:!1})}if(!Ug(f))throw new m(`Malformed JWS in ${u}`,{hint:"Expected a compact JWS (header.payload.signature \u2014 three base64url segments).",shouldReport:!1});let h;if(t.key){let g=kn(o,t.key);if(!i(g))throw new m(`Public key not found: ${g}`,{shouldReport:!1});try{h=s(g,"utf-8")}catch(y){throw new m(`Failed to read public key file: ${g}`,{cause:y,shouldReport:!1})}}else{let g=t.keyDir?kn(o,t.keyDir):p(),y=Ng(f);if(!y)throw new m("Token header has no kid.",{hint:"Pass --key <path> to a public key PEM.",shouldReport:!1});h=_g(y,g,{existsSync:i,readFileSync:s})}try{let g=await l({token:f,publicKeyPem:h,bundleStream:c(d)});jg(g,t.verbose??!1)}catch(g){let y=g instanceof Error?g.message:String(g);throw new m(`Bundle rejected: ${y}`,{shouldReport:!1})}}r(Xa,"handleVerify");function Qa(e,t={}){return e.command("verify [bundle]").description("Verify a signed app bundle locally (default: derived from app.json)").option("-s, --sig <path>","Path to the signature file (default: sibling .dev.sig / .cert.sig / .sig)").option("--key <path>","Path to a public key PEM file").option("--key-dir <path>","Directory of <kid>.pub.pem files \u2014 kid is read from the token header (default: $COGNITE_CLI_HOME/keys)").option("-v, --verbose","Print the full decoded payload after verification").addHelpText("after",`
|
|
159
|
+
`;var rr=class rr extends Tt{constructor(t,n){super(t),this.telemetry=n}configure(){this.description("Manage Atlas agents \u2014 create, iterate, and publish agents to Cognite Data Fusion"),this.hook("postAction",(t,n)=>ri(this.telemetry,n)),this.create(),this.push(),this.open(),this.publish(),this.unpublish(),this.pull(),this.list(),this.status(),this.eval()}create(){let t=new sn;return this.addCommand(t),t}push(){return this.command("push").description("Push a draft agent to CDF for interactive testing").argument("[dir]","Agent project directory").action(async(t,n,o)=>{await Ce(t,o.optsWithGlobals())})}open(){let t=this.command("open").description("Open the agent in Fusion for interactive testing").argument("[dir]","Agent project directory");for(let n of Object.values(er))t.addOption(n);return t.action((n,o,i)=>ya(n,i.optsWithGlobals()))}publish(){let t=new hn;return this.addCommand(t),t}unpublish(){let t=new Sn;return this.addCommand(t),t}pull(){let t=this.command("pull").description("Pull an existing agent from CDF into the local project").argument(`<${wt.externalId.name}>`,wt.externalId.description).argument(`[${wt.dir.name}]`,wt.dir.description);for(let n of Object.values(tr))t.addOption(n);return t.action((n,o,i,s)=>Sa(n,o,s.optsWithGlobals()))}list(){let t=this.command("list").description("List agents in the CDF project");for(let n of Object.values(da))t.addOption(n);return t.action((n,o)=>ua(o.optsWithGlobals()))}status(){let t=this.command("status").description("Show the current status of the agent in CDF").argument("[dir]","Agent project directory");for(let n of Object.values(va))t.addOption(n);return t.action(async(n,o,i)=>Ca(n,i.optsWithGlobals()))}eval(){let t=this.command("eval").description("Run eval cases for an agent").argument("[dir]","Agent directory");for(let n of Object.values(Zo))t.addOption(n);return t.action((n,o,i)=>la(n,i.optsWithGlobals(),{telemetry:this.telemetry}))}};r(rr,"AgentsCommand");var or=rr;function Ea(e,t={}){let n=new or("agents",t.telemetry);return e.addCommand(n),n}r(Ea,"registerAgentsCommand");import{existsSync as Ng,readFileSync as _g}from"fs";import{join as jg,resolve as Rn}from"path";import{verifyBundle as Hg}from"@cognite/app-sdk/codesigning";import{decodeProtectedHeader as Bg}from"jose";import ir from"enquirer";import{email as ug,pipe as mg,safeParse as gg,string as fg}from"valibot";var hg=mg(fg(),ug());function et(e,t="email"){let n=e.trim();if(!n)throw new Error(`${t} is required`);if(!gg(hg,n).success)throw new Error(`${t} must look like an email (user@example.com); got "${e}"`);return n}r(et,"parseEmail");import{execFileSync as vn}from"child_process";import{execFileSync as yg}from"child_process";function wn(e={}){let{execFileSync:t=yg}=e;try{return t("git",["--version"],{stdio:"ignore"}),!0}catch{return!1}}r(wn,"isGitInstalled");function Ae(e={}){if(!wn(e))throw new m("Git is not installed or not found on PATH.",{hint:"Install Git (https://git-scm.com) and ensure it is on your PATH, then try again.",shouldReport:!1})}r(Ae,"throwIfGitMissing");function Cn(e,t={}){let{execFileSync:n=vn}=t;try{return n("git",["-C",e,"status"],{stdio:"ignore"}),!0}catch{return!1}}r(Cn,"isInsideGitRepo");function ba(e,t={}){let{execFileSync:n=vn}=t;n("git",["-C",e,"init"],{stdio:"pipe"}),n("git",["-C",e,"add","."],{stdio:"pipe"}),n("git",["-C",e,"commit","-m","Initial commit","--no-gpg-sign","--no-verify"],{stdio:"pipe"})}r(ba,"gitInitAndCommit");function xa(e={}){let{execFileSync:t=vn}=e;try{return String(t("git",["config","--get","user.name"],{encoding:"utf-8",stdio:["ignore","pipe","ignore"]})).trim()||void 0}catch{return}}r(xa,"gitUserName");function ka(e={}){let{execFileSync:t=vn}=e;try{return String(t("git",["config","--get","user.email"],{encoding:"utf-8",stdio:["ignore","pipe","ignore"]})).trim()||void 0}catch{return}}r(ka,"gitUserEmail");var An=3,Pa="Signing identity (kid) \u2014 e.g. jsmith-dev-001 (lowercase letters, digits, hyphens)",Ta="Email address for the registry entry",Ra=`Passphrase for the encrypted private key (min ${15} chars)`,Ia="Confirm passphrase",Da=r(()=>`Passphrase must be at least ${15} characters`,"passphraseTooShortMsg"),$a=r(e=>`Passphrases do not match (attempt ${e}/${An}).
|
|
160
|
+
`,"passphraseMismatchMsg"),Oa=`Passphrase confirmation failed after ${An} attempts`,Fa=r(e=>`A signing key with kid "${e}" already exists. Overwrite it?`,"confirmOverwriteMsg"),La="How would you like to submit your key registration?",Ma="Open in browser",Ua="Copy link to clipboard";async function sr(e){return ir.prompt(e)}r(sr,"defaultPrompt");function Na(e){return t=>{try{return e(t),!0}catch(n){return n instanceof Error?n.message:"Invalid"}}}r(Na,"parserAsValidator");var Sg=/^[a-z0-9]([a-z0-9-]*[a-z0-9])?$/;function Ve(e){let t=e.trim();if(!t)throw new Error("--kid must not be empty");if(t.length>64)throw new Error("--kid must be 64 characters or fewer");if(!Sg.test(t))throw new Error("--kid must contain only lowercase letters, digits, and hyphens, and must not start or end with a hyphen (e.g. jsmith-dev-001)");return t}r(Ve,"parseKid");async function _a(e={}){let{prompt:t=sr}=e,{kid:n}=await t({type:"input",name:"kid",message:Pa,validate:Na(Ve)});return Ve(n)}r(_a,"promptKid");async function ja(e={}){let{prompt:t=r(o=>ir.prompt(o),"prompt")}=e,{action:n}=await t({type:"select",name:"action",message:La,choices:[{name:"browser",message:Ma},{name:"clipboard",message:Ua}]});if(n!=="browser"&&n!=="clipboard")throw new Error(`Unexpected Zendesk action: ${n}`);return n}r(ja,"promptZendeskAction");async function Ha(e={}){let{prompt:t=sr,gitUserEmail:n=ka}=e,{email:o}=await t({type:"input",name:"email",message:Ta,initial:n(),validate:Na(i=>et(i,"email"))});return et(o,"email")}r(Ha,"promptEmail");async function Ba(e={}){let{prompt:t=sr,stderr:n=process.stderr}=e;for(let o=1;o<=An;o+=1){let{passphrase:i}=await t({type:"password",name:"passphrase",message:Ra,validate:r(a=>a.length>=15?!0:Da(),"validate")}),{confirm:s}=await t({type:"password",name:"confirm",message:Ia});if(i===s)return b.from(i);n.write($a(o))}throw new Error(Oa)}r(Ba,"promptPassphrase");async function Ka(e,t={}){let{prompt:n=r(i=>ir.prompt(i),"prompt")}=t,{confirmed:o}=await n({type:"confirm",name:"confirmed",message:Fa(e),initial:!1});return o}r(Ka,"promptConfirmOverwrite");import{existsSync as Tg,readdirSync as Rg,readFileSync as Ig}from"fs";import{join as cr}from"path";import{execFile as wg}from"child_process";import{promisify as vg}from"util";var Va="cognite-flows",Cg=vg(wg),Ga=r((e,t)=>Cg(e,t),"defaultExecFile"),Ag=-25300,Eg=Ag&255;function bg(e){if(!(e instanceof Error)||!("code"in e)||e.code!==Eg)return!1;let t="stderr"in e?String(e.stderr):"";return/could not be found/i.test(t)||t===""}r(bg,"isKeychainNotFoundError");async function Ya(e,t,n={}){let o=t.expose();if(!X("macos",n))throw new Error("Keychain storage is only supported on macOS");let{execFile:i=Ga}=n;await i("security",["add-generic-password","-a",e,"-s",Va,"-w",Buffer.from(o,"utf-8").toString("base64"),"-U"])}r(Ya,"storeKeyInKeychain");async function En(e,t={}){if(!X("macos",t))return null;let{execFile:n=Ga}=t;try{let{stdout:o}=await n("security",["find-generic-password","-a",e,"-s",Va,"-w"]);return b.from(Buffer.from(o.trim(),"base64").toString("utf-8"))}catch(o){if(bg(o))return null;throw o}}r(En,"readKeyFromKeychain");var qa="cognite-cli-signing",xg="The native @napi-rs/keyring binary failed to load for this platform. Reinstall the CLI, or regenerate the key with `--output <path>` to use passphrase-encrypted file storage instead.",kg="Multiple Windows Credential Manager entries match this kid. Open Credential Manager (Control Panel \u2192 User Accounts \u2192 Credential Manager \u2192 Windows Credentials) and remove the duplicates.",za="Windows Credential Manager failed unexpectedly. Regenerate the key with `--output <path>` to fall back to passphrase-encrypted file storage.";function Pg(e){if(!(e instanceof Error))return za;let t=e.message.toLowerCase();return t.includes("cannot find module")||t.includes("module_not_found")||t.includes("failed to load native binding")?xg:t.includes("ambiguous")?kg:za}r(Pg,"hintFor");function Ja(e,t,n){return new m(`Failed to ${e} signing key for kid "${t}" in Windows Credential Manager`,{cause:n,hint:Pg(n),shouldReport:!1})}r(Ja,"wrapKeyringError");async function Wa(e,t){let{Entry:n}=await import("@napi-rs/keyring"),o=new n(e,t);return{setPassword:r(i=>o.setPassword(i),"setPassword"),getPassword:r(()=>o.getPassword(),"getPassword"),deleteCredential:r(()=>o.deleteCredential(),"deleteCredential")}}r(Wa,"defaultCreateEntry");async function Za(e,t,n={}){let{createEntry:o=Wa}=n,i=Buffer.from(t.expose(),"utf-8").toString("base64");try{(await o(qa,e)).setPassword(i)}catch(s){throw Ja("store",e,s)}}r(Za,"storeSigningKey");async function bn(e,t={}){let{createEntry:n=Wa}=t;try{let i=(await n(qa,e)).getPassword();return i===null?null:b.from(Buffer.from(i,"base64").toString("utf-8"))}catch(o){throw Ja("read",e,o)}}r(bn,"readSigningKey");var Fe=".pub.pem",lr=".key.jwe",pr=".meta.json";function xn(e){switch(e.kind){case"keychain":return"OS credential store";case"encrypted-file":return e.path;case"public-only":return"public-only (private key missing)"}}r(xn,"formatLocalKeySource");function Dg(e){return{existsSync:e.existsSync??Tg,readdirSync:e.readdirSync??Rg,readFileSync:e.readFileSync??((t,n)=>Ig(t,n)),isOS:e.isOS??(t=>X(t)),readKeyFromKeychain:e.readKeyFromKeychain??(t=>En(t)),readSigningKey:e.readSigningKey??(t=>bn(t))}}r(Dg,"resolveDeps");function $g(e){try{let t=JSON.parse(e);if(typeof t=="object"&&t!==null&&!Array.isArray(t)&&"email"in t&&typeof t.email=="string")return t.email}catch{}}r($g,"readEmailFromMeta");function Og(e,t){return t.existsSync(e)?t.readdirSync(e).filter(n=>n.endsWith(Fe)):[]}r(Og,"publicKeyEntries");function Fg(e){return e.slice(0,-Fe.length)}r(Fg,"kidFromPublicKeyFilename");async function Lg(e,t,n){if(n.isOS("macos")&&await n.readKeyFromKeychain(e).catch(()=>null)!==null)return{kind:"keychain"};if(n.isOS("windows")&&await n.readSigningKey(e).catch(()=>null)!==null)return{kind:"keychain"};let o=cr(t,`${e}${lr}`);return n.existsSync(o)?{kind:"encrypted-file",path:o}:{kind:"public-only"}}r(Lg,"resolveSource");async function kn(e=D().keysDir,t={}){let n=Dg(t),o=new Set,i=Og(e,n).flatMap(s=>{let a=Fg(s);return!a||o.has(a)?[]:(o.add(a),[{kid:a,entry:s}])});return Promise.all(i.map(async({kid:s,entry:a})=>{let c=await Lg(s,e,n),l=cr(e,`${s}${pr}`),p;try{p=$g(n.readFileSync(l,"utf8"))}catch{}return{kid:s,source:c,publicKeyPath:cr(e,a),email:p}}))}r(kn,"discoverLocalKeys");import{createReadStream as Mg}from"fs";function Pn(e){let t=Mg(e);return new ReadableStream({start(n){t.on("data",o=>{let i=typeof o=="string"?Buffer.from(o):o;n.enqueue(new Uint8Array(i))}),t.on("end",()=>n.close()),t.on("error",o=>n.error(o))},cancel(){t.destroy()}})}r(Pn,"createWebStreamFromFile");import Ug from"path";var Tn=".cognite-bundles";function Xa(e,t){return`${e}-${t}.zip`}r(Xa,"bundleFileName");function ne(e,t,n){return Ug.join(e,Tn,Xa(t,n))}r(ne,"bundlePath");var Qa=[".dev.sig",".cert.sig",".sig"];function Kg(e){return{existsSync:e.existsSync??Ng,readFileSync:e.readFileSync??((t,n)=>_g(t,n)),createBundleStream:e.createBundleStream??Pn,verifyBundle:e.verifyBundle??Hg,loadAppConfig:e.loadAppConfig??k,defaultKeyDir:e.defaultKeyDir??(()=>D().keysDir)}}r(Kg,"resolveDeps");function Vg(e,t){return Qa.map(n=>`${e}${n}`).find(n=>t(n))}r(Vg,"findSiblingSignature");function Gg(e){let t=e.split(".");return t.length===3&&t.every(n=>n.length>0)}r(Gg,"isCompactJws");function Yg(e){try{let t=Bg(e);return typeof t.kid=="string"?t.kid:void 0}catch{return}}r(Yg,"readKidFromToken");function zg(e,t,n){let{existsSync:o,readFileSync:i}=n;try{Ve(e)}catch(a){throw new m(a instanceof Error?a.message:String(a),{shouldReport:!1})}if(!o(t))throw new m(`Key directory not found: ${t}`,{shouldReport:!1});let s=jg(t,`${e}${Fe}`);if(!o(s))throw new m(`No public key found for kid "${e}" in ${t}`,{shouldReport:!1});try{return i(s,"utf-8")}catch(a){throw new m(`Failed to read public key file: ${s}`,{cause:a,shouldReport:!1})}}r(zg,"resolvePublicKeyForKid");function qg(e,t){let{payload:n,kid:o}=e;if(console.log(`Verified ${n.appId}@${n.version}`),console.log(` kid: ${o}`),console.log(` hash: ${n.bundleSha256}`),n.scopes&&n.scopes.length>0){let i=n.scopes.map(s=>`${s.org}/${s.project}`).join(", ");console.log(` scopes: ${i}`)}t&&console.log(JSON.stringify(n,null,2))}r(qg,"printResult");async function ec(e,t,n={},o=process.cwd()){let{existsSync:i,readFileSync:s,loadAppConfig:a,createBundleStream:c,verifyBundle:l,defaultKeyDir:p}=Kg(n),d;if(e)d=Rn(o,e);else{let g;try{g=a(o)}catch(h){let w=h instanceof Error?h.message:String(h);throw new m(w,{cause:h,hint:"Run this command from a Cognite app directory (one with app.json), or pass [bundle] explicitly.",shouldReport:!1})}d=ne(o,g.externalId,g.versionTag)}if(!i(d)){let g=e?void 0:"Default derived from app.json \u2014 pass [bundle] explicitly to override.";throw new m(`Bundle not found: ${d}`,{hint:g,shouldReport:!1})}let u=t.sig?Rn(o,t.sig):Vg(d,i);if(!u)throw new m("No signature file found.",{hint:`Pass --sig <path> or place one of ${Qa.map(g=>`${d}${g}`).join(", ")} next to the bundle.`,shouldReport:!1});if(!i(u))throw new m(`Signature file not found: ${u}`,{shouldReport:!1});let f;try{f=s(u,"utf-8").trim()}catch(g){throw new m(`Failed to read signature file: ${u}`,{cause:g,shouldReport:!1})}if(!Gg(f))throw new m(`Malformed JWS in ${u}`,{hint:"Expected a compact JWS (header.payload.signature \u2014 three base64url segments).",shouldReport:!1});let y;if(t.key){let g=Rn(o,t.key);if(!i(g))throw new m(`Public key not found: ${g}`,{shouldReport:!1});try{y=s(g,"utf-8")}catch(h){throw new m(`Failed to read public key file: ${g}`,{cause:h,shouldReport:!1})}}else{let g=t.keyDir?Rn(o,t.keyDir):p(),h=Yg(f);if(!h)throw new m("Token header has no kid.",{hint:"Pass --key <path> to a public key PEM.",shouldReport:!1});y=zg(h,g,{existsSync:i,readFileSync:s})}try{let g=await l({token:f,publicKeyPem:y,bundleStream:c(d)});qg(g,t.verbose??!1)}catch(g){let h=g instanceof Error?g.message:String(g);throw new m(`Bundle rejected: ${h}`,{shouldReport:!1})}}r(ec,"handleVerify");function tc(e,t={}){return e.command("verify [bundle]").description("Verify a signed app bundle locally (default: derived from app.json)").option("-s, --sig <path>","Path to the signature file (default: sibling .dev.sig / .cert.sig / .sig)").option("--key <path>","Path to a public key PEM file").option("--key-dir <path>","Directory of <kid>.pub.pem files \u2014 kid is read from the token header (default: $COGNITE_CLI_HOME/keys)").option("-v, --verbose","Print the full decoded payload after verification").addHelpText("after",`
|
|
152
161
|
Bundles are stored in .cognite-bundles/<externalId>-<versionTag>.zip by default.
|
|
153
162
|
|
|
154
163
|
Examples:
|
|
155
164
|
cognite apps verify Verify default bundle (path from app.json)
|
|
156
165
|
cognite apps verify .cognite-bundles/my-app-1.0.0.zip Verify a specific bundle
|
|
157
166
|
cognite apps verify .cognite-bundles/my-app-1.0.0.zip --sig my-app-1.0.0.zip.dev.sig Verify with explicit signature
|
|
158
|
-
cognite apps verify .cognite-bundles/my-app-1.0.0.zip --key /path/to/pub.pem Verify with explicit public key`).action((n,o)=>
|
|
167
|
+
cognite apps verify .cognite-bundles/my-app-1.0.0.zip --key /path/to/pub.pem Verify with explicit public key`).action((n,o)=>ec(n,o,t))}r(tc,"registerVerifyCommand");import{existsSync as Jg}from"fs";import{resolve as Wg}from"path";import{config as Zg}from"dotenv";function H(e,t={existsSync:Jg,config:Zg}){let n=Wg(e,".env");t.existsSync(n)&&(console.log(`Loading environment variables from ${n}`),t.config({path:n}))}r(H,"loadEnvFile");function B(e){e.infra!=="appsApi"&&(console.error(`
|
|
159
168
|
\u26A0\uFE0F Legacy infrastructure is no longer supported.
|
|
160
169
|
|
|
161
170
|
Your app.json is missing \`"infra": "appsApi"\`, which means it was created for
|
|
162
171
|
the old CDF Application Registry. This deploy path has been removed.
|
|
163
172
|
|
|
164
173
|
To migrate: add \`"infra": "appsApi"\` to your app.json, wire up the correct authentication and re-deploy.
|
|
165
|
-
`),process.exit(1))}r(
|
|
174
|
+
`),process.exit(1))}r(B,"assertAppHostingInfra");import{Option as nc}from"commander";var Xg={"client-credentials":!0,session:!0,browser:!0};function dr(){return new nc("--auth-method <method>","Authentication method to use when several are valid, skipping the selection prompt").choices(Object.keys(Xg))}r(dr,"authMethodOption");function Qg(){return new nc("--confirm-action-target <target>","Acknowledge the org/project this command will act on, skipping the interactive prompt (value must match the resolved target)")}r(Qg,"confirmActionTargetOption");function W(){return[Qg(),dr()]}r(W,"sessionAuthOptions");async function ef(e,t,n){let o=await j(e,{interactive:t.interactive,appId:n,orgHint:t.org,authMethod:t.authMethod,confirmActionTarget:t.confirmActionTarget,action:"activate"});return new N(o)}r(ef,"defaultBuildApiClient");async function tf(e,t={}){let{loadEnvFile:n=H,loadAppConfig:o=k,getApiClient:i=ef}=t,s=process.cwd();n(s);let a=o(s);B(a);let c=e.interactive?await L(a,e):$(a.deployments,e.deployment),l=await i(c,e,a.externalId),{externalId:p,versionTag:d}=a,u;try{u=await l.getVersion(p,d)}catch(y){throw y instanceof te?new Error(`Version ${d} of ${p} has not been deployed yet. Run \`npx @cognite/cli apps deploy\` first.`):y}if(u.alias==="ACTIVE"){console.log(` ${p} @ ${d} is already ACTIVE \u2014 nothing to do.`);return}if(u.lifecycleState==="DEPRECATED"||u.lifecycleState==="ARCHIVED")throw new Error(`Cannot activate ${p} @ ${d}: version is ${u.lifecycleState} (terminal).`);u.lifecycleState==="DRAFT"&&(await l.publishVersion(p,d),console.log(`\u2713 Published ${p} @ ${d} is now PUBLISHED`));let{supersededVersion:f}=await l.activateVersion(p,d);console.log(`\u2713 Activated ${p} @ ${d} is now ACTIVE`),f&&console.log(` Superseded ${f} \u2192 PUBLISHED`)}r(tf,"handleActivate");function oc(e){let t=e.command("activate").description("Activate the current app version (publish if needed, then set ACTIVE alias)").argument("[path]","Path to the app folder (only `.` is currently supported)",".").option("-d, --deployment <target>","Deployment target from app.json (index or name)").option("--interactive","Use browser-based authentication instead of env-var credentials",!1).option("--base-url <url>","CDF base URL (only with --interactive)").option("--project <project>","CDF project name (only with --interactive)").option("--org <org>","Organization hint for login (only with --interactive)");return W().forEach(n=>t.addOption(n)),t.addHelpText("after",`
|
|
166
175
|
Examples:
|
|
167
176
|
npx @cognite/cli apps activate . Activate using env-var auth
|
|
168
|
-
npx @cognite/cli apps activate . --interactive Activate using browser auth (no secrets needed)`).action((n,o)=>
|
|
169
|
-
`),initial:!1};async function
|
|
170
|
-
agent: ${
|
|
177
|
+
npx @cognite/cli apps activate . --interactive Activate using browser auth (no secrets needed)`).action((n,o)=>tf(o))}r(oc,"registerActivateCommand");import{basename as wc,dirname as Uf,normalize as Nf,resolve as Fn}from"path";import{fileURLToPath as _f,pathToFileURL as jf}from"url";import{Logger as Hf,runner as Bf}from"hygen";import{safeParse as nf}from"valibot";function vt(e,t){return n=>{let o=nf(t,n);return o.success?!0:`${e} ${o.issues[0].message}`}}r(vt,"toPromptValidator");var rc={name:vt("App name",Xn),displayName:vt("Display name",Zn),baseUrl:vt("Base URL",Qn),org:vt("Org",eo),project:vt("Project",to)};function of(e,t){return e?async n=>{let o=t(n);return o===!0?e(n):o}:t}r(of,"composeValidators");function In(e){return e.map(t=>{if(!(t.name in rc))return t;let n=rc[t.name];return{...t,validate:of(t.validate,n)}})}r(In,"applySchemaValidators");import{basename as ic}from"path";import sc from"enquirer";function ur(e){return e.replace(/[A-Z]/g,(t,n)=>n===0?t.toLowerCase():`-${t.toLowerCase()}`)}r(ur,"kebabCase");var rf={type:"confirm",name:"useSpecKit",message:["Enable spec-driven development?"," Adds the github/spec-kit slash commands (/speckit.specify, .clarify, .plan, .tasks, .implement)"," to your app for use in Claude Code, Cursor, or GitHub Copilot. They walk you through writing SPEC.md and"," generating a plan, tasks, and implementation."].join(`
|
|
178
|
+
`),initial:!1};async function sf(e,t,n){return e!==void 0?e:t?!!(await n([rf])).useSpecKit:!1}r(sf,"resolveSpecKit");function af(e){return typeof e=="function"}r(af,"isFunctionInitial");function ac(e){return(e??"").trim().replace(/\/+$/,"")||"api"}r(ac,"normalizeCluster");function cc({isCurrentDir:e,dirName:t,onAppName:n,onUseSpecKit:o,presets:i={},specKit:s,prompt:a=sc.prompt.bind(sc)}){return()=>({prompt:r(async c=>{if(!Array.isArray(c))return a([c]);let l=Object.fromEntries(Object.entries(i).filter(R=>R[1]!==void 0)),p=Object.keys(l).length>0,d=e?ic(process.cwd()):t?ic(t):null,u=p&&d!==null,f=!u&&d?c.map(R=>R.name==="name"?{...R,initial:d}:R):c,y=In(f),g=u&&d?{...l,name:d}:l,h=new Set(Object.keys(g)),w=y.filter(R=>!h.has(R.name)),S=w.findIndex(R=>R.name==="baseUrl"),C;if(u){let R=ac(g.cluster),Y=r(I=>af(I.initial)?I.initial():I.initial,"resolveInitial"),le=r(I=>{if(I.name==="baseUrl")return`https://${R}.cognitedata.com`;let oe=Y(I);if(oe===void 0)throw new Error(`Non-interactive mode: --${ur(I.name)} has no default. Pass it as a flag.`);return oe},"deriveValue");C=Object.fromEntries(w.map(I=>[I.name,le(I)]))}else if(S!==-1){let R=w.filter(V=>V.name!=="baseUrl"),Y=R.length>0?await a(R):{},le=typeof Y.cluster=="string"?Y.cluster:"",oe=`https://${ac(le||g.cluster)}.cognitedata.com`,F=w[S],re=await a([{...F,initial:oe}]);C={...Y,...re}}else C=w.length>0?await a(w):{};let A={...g,...C},x=typeof A.name=="string"?A.name:"";x&&n(x);let K=await sf(s,!u&&w.length>0,a);return o?.(K),{...A,name:x,useCurrentDir:e,directoryName:e?void 0:t??void 0,useSpecKit:K}},"prompt")})}r(cc,"createAppPrompter");async function lc(e,t,n){let o=[];Object.values(t).some(s=>s!==void 0)&&n!==null&&o.push({key:"name",value:n,label:"directory"});for(let[s,a]of Object.entries(t))a!==void 0&&o.push({key:s,value:a,label:`--${ur(s)}`});for(let{key:s,value:a,label:c}of o){let l=e.find(d=>d.name===s)?.validate;if(!l)continue;let p=await l(a);if(p!==!0)throw new Error(`Invalid ${c}: ${p}`)}}r(lc,"validatePresets");import{cpSync as dc,existsSync as uc,mkdirSync as $n,readdirSync as mf,readFileSync as gf,writeFileSync as mr}from"fs";import{basename as ff,dirname as gr,posix as hf,resolve as _}from"path";import{fileURLToPath as mc}from"url";import{copyFileSync as cf,symlinkSync as lf}from"fs";import{dirname as pf,join as df}from"path";function uf(e){if(e&&typeof e=="object"&&"code"in e&&typeof e.code=="string")return e.code}r(uf,"errno");function pc(e){return e instanceof Error?e.message:String(e)}r(pc,"messageOf");function Dn({target:e,linkPath:t,label:n,symlink:o=lf,copyFile:i=cf}){try{return o(e,t),!0}catch(s){let a=uf(s);if(a==="EEXIST")return!0;let c=pc(s);if(a==="EPERM"||a==="EACCES")try{let l=df(pf(t),e);return i(l,t),console.log(`\u2139\uFE0F Wrote ${n} as a copy of ${e} (symlinks need Developer Mode or an elevated shell on Windows).`),!0}catch(l){return console.warn(`\u26A0\uFE0F Could not create ${n} symlink: ${c} (copy fallback also failed: ${pc(l)})`),!1}return console.warn(`\u26A0\uFE0F Could not create ${n} symlink:`,c),!1}}r(Dn,"linkOrCopyOrWarn");var yf=_(gr(mc(import.meta.url)),"..","..","_vendor","spec-kit"),Sf=_(gr(mc(import.meta.url)),"..","..","_cognite-spec-extensions"),wf=["claude-code","cursor","github-copilot"],vf={branch_numbering:"sequential"};function gc({appDir:e,vendorDir:t=yf,cogniteExtensionsDir:n=Sf,agents:o=wf}){let i=_(e,".specify"),s=_(i,"memory"),a=new Set(o),c=`prepare spec-kit install for appDir=${e}`,p=[{srcRoot:t,from:"templates",to:".specify/templates"},{srcRoot:t,from:"scripts/bash",to:".specify/scripts/bash"},{srcRoot:t,from:"commands",to:".claude/commands",agent:"claude-code"},{srcRoot:t,from:"commands",to:".cursor/commands",agent:"cursor"},{srcRoot:n,from:"commands",to:".claude/commands",agent:"claude-code"},{srcRoot:n,from:"commands",to:".cursor/commands",agent:"cursor"},{srcRoot:n,from:"templates",to:".specify/templates"}].filter(({agent:d})=>!d||a.has(d));try{for(let{srcRoot:u,from:f,to:y}of p){let g=_(e,y);c=`copy ${ff(u)}/${f} to ${y}`,$n(gr(g),{recursive:!0}),dc(_(u,f),g,{recursive:!0})}if(a.has("github-copilot")){let u=_(e,".github","agents"),f=_(e,".github","prompts");c="create .github/agents and .github/prompts dirs",$n(u,{recursive:!0}),$n(f,{recursive:!0});for(let y of[_(t,"commands"),_(n,"commands")])if(uc(y))for(let g of mf(y)){if(!g.endsWith(".md"))continue;let h=g.slice(0,-3);c=`copy ${g} to .github/agents/${h}.agent.md`,mr(_(u,`${h}.agent.md`),gf(_(y,g))),c=`write .github/prompts/${h}.prompt.md`,mr(_(f,`${h}.prompt.md`),`---
|
|
179
|
+
agent: ${h}
|
|
171
180
|
---
|
|
172
|
-
`)}}let d=
|
|
173
|
-
`),c=`link .specify/memory/constitution.md in specifyDir=${i}
|
|
181
|
+
`)}}let d=_(i,"extensions.yml");uc(d)||(c="write .specify/extensions.yml",dc(_(n,"extensions.yml"),d)),c=`write init-options.json under specifyDir=${i}`,mr(_(i,"init-options.json"),`${JSON.stringify(vf,null,2)}
|
|
182
|
+
`),c=`link .specify/memory/constitution.md in specifyDir=${i}`,$n(s,{recursive:!0}),Dn({target:hf.join("..","..","AGENTS.md"),linkPath:_(s,"constitution.md"),label:".specify/memory/constitution.md"})}catch(d){let u=d instanceof Error?d.message:String(d);throw new Error(`installSpecKit failed while ${c} (appDir=${e}, vendorDir=${t}): ${u}`,{cause:d})}}r(gc,"installSpecKit");import{execFileSync as On}from"child_process";import{mkdtempSync as Cf,readdirSync as Af,rmSync as Ef}from"fs";import{createRequire as bf}from"module";import{tmpdir as xf}from"os";import{join as kf,resolve as fc}from"path";import{InvalidArgumentError as Pf}from"commander";import Tf from"enquirer";var hc="cognitedata/builder-skills",fr=["claude-code","cursor","github-copilot","opencode","codex"],Rf=bf(import.meta.url).resolve("skills/bin/cli.mjs");function hr(e,t={}){try{On(process.execPath,[Rf,...e],{stdio:"inherit",cwd:process.cwd(),...t,env:{...process.env,...t.env,DISABLE_TELEMETRY:"1"}})}catch(n){throw Ae(),new m(`Skills CLI failed (${e.join(" ")})`,{cause:n,hint:"Check your internet connection and try again."})}}r(hr,"execSkillsCli");function If(){return fr.map(e=>["add",hc,"-a",e,"--skill","*","-y"])}r(If,"pullAllArgsPerAgent");var Df=1e4;async function yc(e,t={}){let n=t.exec??hr;Ae();let o=t.timeout??Df,i=t.readdir??(c=>Af(c));for(let c of If())try{n(c,{cwd:e,timeout:o,stdio:["pipe","pipe","inherit"]})}catch(l){let p=l instanceof Error?l.message:String(l);console.warn("\u26A0\uFE0F Could not pull skills for args ["+c.join(" ")+"]:",p)}let s=new Set;for(let c of[fc(e,".claude","skills"),fc(e,".agents","skills")])try{i(c).forEach(l=>s.add(l))}catch{}let a=s.size;a>0?console.log(`Installed ${a} skills successfully.`):console.log("No skills were installed.")}r(yc,"pullAllSkillsInto");function $f(e){if(!/^[\w.-]+\/[\w.-]+$/.test(e))throw new Pf("Expected owner/repo format (e.g., cognitedata/builder-skills)");return e}r($f,"validateSource");function Of(e){let t=Cf(kf(xf(),"skills-"));try{try{On("git",["clone","--depth","1","--filter=blob:none","--no-checkout","-q",`https://github.com/${e}.git`,t],{stdio:"ignore"})}catch(o){throw Ae(),new m(`Failed to clone skills repository "${e}".`,{hint:"Check your internet connection and try again.",shouldReport:!1,cause:o})}let n;try{n=On("git",["ls-tree","-d","--name-only","HEAD:skills"],{cwd:t})}catch{n=On("git",["ls-tree","-d","--name-only","HEAD"],{cwd:t})}return n.toString().trim().split(/\r?\n/).filter(o=>!!o&&!o.startsWith("."))}finally{Ef(t,{recursive:!0,force:!0})}}r(Of,"listRemoteSkills");async function Ff(e,t={}){let n=r(c=>Tf.prompt(c),"defaultPrompt"),{listSkills:o=Of,prompt:i=n}=t,s=o(e),{selected:a}=await i({type:"multiselect",name:"selected",message:"Select skills to install (space to toggle, a to toggle all, enter to confirm)",choices:s});return a}r(Ff,"pickSkillsInteractive");function Lf(e,t,n){let o=["add",e.source,"-a",t];return e.skill?o.push("--skill",e.skill):n&&n.length>0?o.push("--skill",...n,"-y"):o.push("--skill","*","-y"),e.global&&o.push("--global"),o}r(Lf,"buildPullArgs");async function Mf(e){Ae(),console.log(`Pulling skills from ${e.source}...`);let t;if(e.interactive&&!e.skill){try{t=await Ff(e.source)}catch(o){if(o instanceof m)throw o;let i=o instanceof Error?o.message:String(o);console.error(`Failed to resolve skills interactively: ${i}`),process.exitCode=1;return}if(t.length===0){console.log("No skills selected.");return}}let n=!1;for(let o of fr)try{hr(Lf(e,o,t))}catch(i){let s=i instanceof Error?i.message:String(i);console.warn(`\u26A0\uFE0F Could not pull skills for ${o}: ${s}`),n=!0}n?(console.log(`
|
|
174
183
|
Skills pulled with some errors (see warnings above)`),process.exitCode=1):console.log(`
|
|
175
|
-
Skills pulled successfully`)}r(
|
|
176
|
-
Supports: ${
|
|
184
|
+
Skills pulled successfully`)}r(Mf,"handlePull");function Sc(e){let t=e.command("skills").summary("Manage AI agent skills for your app").description(`Manage AI agent skills for your app.
|
|
185
|
+
Supports: ${fr.join(", ")}`).addHelpText("after",`
|
|
177
186
|
Examples:
|
|
178
187
|
npx @cognite/cli apps skills pull Pull all skills
|
|
179
188
|
npx @cognite/cli apps skills pull --skill create-client-tool Pull a specific skill
|
|
180
|
-
npx @cognite/cli apps skills list List installed skills`);return t.command("pull").description("Pull all skills into your project").option("--source <owner/repo>","Skills repository",
|
|
189
|
+
npx @cognite/cli apps skills list List installed skills`);return t.command("pull").description("Pull all skills into your project").option("--source <owner/repo>","Skills repository",$f,hc).option("--skill <name>","Pull a specific skill by name").option("-i, --interactive","Interactively select which skills to install",!1).option("--global","Install skills globally",!1).action(Mf),t.command("list").description("List installed skills").action(()=>{hr(["list"])}),t}r(Sc,"registerSkillsCommand");var vc=Fn(Uf(_f(import.meta.url)),"..","..","_templates");async function Kf(){let e=Fn(vc,"app","new","prompt.js");return(await import(jf(e).href)).default}r(Kf,"loadPromptDefs");function Vf(e,t){return!e||t?null:Nf(e)}r(Vf,"resolveDirName");function Gf(e,t,n){if(e)return{cwd:process.cwd(),display:"."};let o=t??n;if(!o)throw new Error("App creation completed without a target directory or name.");return{cwd:Fn(process.cwd(),o),display:o}}r(Gf,"resolveAppLocation");function Yf(e,t,n){let o=` npm install
|
|
181
190
|
npm run dev`,i="To deploy your app:",s="npx @cognite/cli apps deploy --interactive",a=n?`
|
|
182
191
|
To start spec-driven development:
|
|
183
192
|
Run /speckit.specify in Claude Code, Cursor, or GitHub Copilot and describe your app.
|
|
@@ -204,7 +213,7 @@ ${i}
|
|
|
204
213
|
cd "${t}"
|
|
205
214
|
${s}
|
|
206
215
|
${c}
|
|
207
|
-
`)}r(
|
|
216
|
+
`)}r(Yf,"printSuccessMessage");async function zf(e){try{console.log("\u{1F9E0} Pulling skills into your app..."),await yc(e)}catch(t){let n=t instanceof Error?t.message:String(t);console.warn("\u26A0\uFE0F Could not pull skills:",n)}}r(zf,"pullSkillsInto");function qf(e,t={}){let{isGitInstalled:n=wn,isInsideGitRepo:o=Cn,gitInitAndCommit:i=ba}=t;if(!n()){console.warn("git not found \u2014 skipping git repository initialisation");return}if(!o(e)){console.log("Initialising git repository...");try{i(e)}catch(s){let c=(s&&typeof s=="object"&&"stderr"in s&&s.stderr?String(s.stderr).trim():"")||(s instanceof Error?s.message:String(s));console.warn("Could not initialise git repository:",c)}}}r(qf,"maybeInitGit");async function Jf(e,t){let n=e==="."||e==="./",o=Vf(e,n),i=null,s=!1,a={displayName:t.displayName,description:t.description,org:t.org,project:t.project,cluster:t.cluster,baseUrl:t.baseUrl},c=await Kf(),l=In(c),p=n?wc(process.cwd()):o?wc(o):null;await lc(l,a,p);let d=cc({isCurrentDir:n,dirName:o,onAppName:r(f=>{i=f},"onAppName"),onUseSpecKit:r(f=>{s=f},"onUseSpecKit"),presets:a,specKit:t.specKit});await Bf(["app","new"],{templates:vc,cwd:process.cwd(),logger:new Hf(console.log.bind(console)),createPrompter:d,debug:!!process.env.DEBUG});let u=Gf(n,o,i);Dn({target:"AGENTS.md",linkPath:Fn(u.cwd,"CLAUDE.md"),label:"CLAUDE.md"}),s&&gc({appDir:u.cwd}),await zf(u.cwd),qf(u.cwd),Yf(n,u.display,s)}r(Jf,"handleCreate");function Cc(e){return e.command("create").description("Create a new application.").argument("[directory]","Target directory (. for current, or subdirectory name)").option("--display-name <name>","App display name (skips the prompt)").option("--description <description>","App description (skips the prompt)").option("--org <org>","Deployment org (skips the prompt)").option("--project <project>","Deployment project (skips the prompt)").option("--cluster <cluster>","CDF cluster, e.g. greenfield (skips the prompt)").option("--base-url <url>","CDF base URL, e.g. https://greenfield.cognitedata.com (skips the prompt; defaults to cluster-derived URL when omitted)").option("--spec-kit","Install spec-kit slash commands (skips the prompt)").option("--no-spec-kit","Skip spec-kit installation (skips the prompt)").addHelpText("after",`
|
|
208
217
|
Non-interactive use (CI, scripts, AI agents):
|
|
209
218
|
Pass [directory] plus --display-name, --description, --org, --project, --cluster, --base-url
|
|
210
219
|
to skip every prompt. Missing flags fall back to the interactive prompt.
|
|
@@ -217,30 +226,30 @@ Examples:
|
|
|
217
226
|
--display-name "My App" --description "My app" \\
|
|
218
227
|
--org cog-atlas --project atlas-greenfield --cluster greenfield \\
|
|
219
228
|
--base-url https://greenfield.cognitedata.com
|
|
220
|
-
Fully non-interactive`).action(
|
|
229
|
+
Fully non-interactive`).action(Jf)}r(Cc,"registerCreateCommand");import Wf from"path";async function Zf(e,t,n){return nn(e,{interactive:t.interactive,appId:n,orgHint:t.org,authMethod:t.authMethod,confirmActionTarget:t.confirmActionTarget,action:"deactivate"})}r(Zf,"defaultBuildApiClient");async function Xf(e,t,n={}){let{loadEnvFile:o=H,loadAppConfig:i=k,getApiClient:s=Zf}=n,a=Wf.resolve(process.cwd(),e);o(a);let c=i(a);B(c);let l=t.interactive?await L(c,t):$(c.deployments,t.deployment),{externalId:p}=c,d=await s(l,t,p),u=await d.getActiveVersion(p);if(!u){console.log(` ${p} has no active version \u2014 nothing to deactivate.`);return}await d.deactivateVersion(p,u.version),console.log(`\u2713 Deactivated ${p} @ ${u.version} \u2014 active alias removed`)}r(Xf,"handleDeactivate");function Ac(e){let t=e.command("deactivate").description("Deactivate the app by removing its active version from service").argument("[path]","Path to the app folder (only `.` is currently supported)",".").option("-d, --deployment <target>","Deployment target from app.json (index or name)").option("--interactive","Use browser-based authentication instead of env-var credentials",!1).option("--base-url <url>","CDF base URL (only with --interactive)").option("--project <project>","CDF project name (only with --interactive)").option("--org <org>","Organization hint for login (only with --interactive)");return W().forEach(n=>t.addOption(n)),t.addHelpText("after",`
|
|
221
230
|
Examples:
|
|
222
231
|
npx @cognite/cli apps deactivate . Deactivate using env-var auth
|
|
223
|
-
npx @cognite/cli apps deactivate . --interactive Deactivate using browser auth (no secrets needed)`).action((n,o)=>
|
|
224
|
-
`);return}if(
|
|
232
|
+
npx @cognite/cli apps deactivate . --interactive Deactivate using browser auth (no secrets needed)`).action((n,o)=>Xf(n,o))}r(Ac,"registerDeactivateCommand");import Qf from"path";import eh from"enquirer";async function th(e,t,n){return nn(e,{interactive:t.interactive,appId:n,orgHint:t.org,authMethod:t.authMethod,confirmActionTarget:t.confirmActionTarget,action:"delete"})}r(th,"defaultBuildApiClient");async function nh(e){let{confirmed:t}=await eh.prompt({type:"confirm",name:"confirmed",message:e,initial:!1});return t}r(nh,"defaultConfirm");async function oh(e,t,n={}){let{loadEnvFile:o=H,loadAppConfig:i=k,getApiClient:s=th,confirm:a=nh}=n,c=Qf.resolve(process.cwd(),e);o(c);let l=i(c);B(l);let p=t.interactive?await L(l,t):$(l.deployments,t.deployment),d=await s(p,t,l.externalId),{externalId:u,versionTag:f}=l,y;try{y=await d.getVersion(u,f)}catch(g){throw g instanceof te?new m(`Version ${f} of ${u} has not been deployed yet.`,{hint:"Run `npx @cognite/cli apps deploy` first."}):g}if(y.alias==="ACTIVE")throw new m(`Cannot archive ${u} @ ${f}: version is currently ACTIVE.`,{hint:"Run `npx @cognite/cli apps deactivate` first."});if(y.lifecycleState==="ARCHIVED"){console.log(` ${u} @ ${f} is already ARCHIVED \u2014 nothing to do.`);return}if(!t.force&&!await a(`Delete ${u} @ ${f}?`)){process.stderr.write(`Aborted.
|
|
233
|
+
`);return}if(y.lifecycleState==="DRAFT"){await d.deleteVersion(u,f),console.log(`\u2713 Deleted ${u} @ ${f} (DRAFT removed)`);return}y.lifecycleState==="PUBLISHED"&&(await d.deprecateVersion(u,f),console.log(`\u2713 Deprecated ${u} @ ${f} is now DEPRECATED`)),await d.archiveVersion(u,f),console.log(`\u2713 Archived ${u} @ ${f} is now ARCHIVED`)}r(oh,"handleDelete");function Ec(e){let t=e.command("delete").description("Archive the current app version").argument("[path]","Path to the app folder (only `.` is currently supported)",".").option("-d, --deployment <target>","Deployment target from app.json (index or name)").option("--interactive","Use browser-based authentication instead of env-var credentials",!1).option("--base-url <url>","CDF base URL (only with --interactive)").option("--project <project>","CDF project name (only with --interactive)").option("--org <org>","Organization hint for login (only with --interactive)").option("-f, --force","Skip confirmation prompt",!1);return W().forEach(n=>t.addOption(n)),t.addHelpText("after",`
|
|
225
234
|
Examples:
|
|
226
235
|
npx @cognite/cli apps delete . Archive using env-var auth
|
|
227
236
|
npx @cognite/cli apps delete . --interactive Archive using browser auth (no secrets needed)
|
|
228
|
-
npx @cognite/cli apps delete . --force Skip confirmation prompt`).action((n,o)=>
|
|
229
|
-
`).filter(Boolean),i=r(a=>a.split("/").some(
|
|
237
|
+
npx @cognite/cli apps delete . --force Skip confirmation prompt`).action((n,o)=>oh(n,o))}r(Ec,"registerDeleteCommand");import{existsSync as Sh}from"fs";import{rm as wh}from"fs/promises";import xc from"enquirer";import{existsSync as uh}from"fs";import{mkdir as mh,readFile as gh}from"fs/promises";import{basename as fh,dirname as hh}from"path";import{execFileSync as Ln}from"child_process";import Te from"fs";import Z from"path";import{parseAndValidateManifestConfig as sh}from"@cognite/app-sdk/vite";import{BlobReader as ah,Uint8ArrayWriter as ch,ZipWriter as lh}from"@zip.js/zip.js";import{existsSync as rh,readFileSync as ih}from"fs";var Ee=[".dev.sig",".cert.sig"];function Ct(e,t={}){let n=t.existsSync??rh,o=t.readFileSync??((s,a)=>ih(s,a)),i=[];for(let s of Ee){let a=`${e}${s}`;if(!n(a))continue;let c=o(a,"utf8").trim();c.length>0&&i.push(c)}return i}r(Ct,"discoverSignatures");var yr="package.json",Sr="package-lock.json",bc="manifest.json",wr=".cognite",ph=[/^\.env(\..+)?$/i,/^\.secrets?$/i,/^\.token/i,/^\.cognite/i,/\.(key|pem|p12|pfx|jks|crt)$/i];function dh(e){let[t,n,...o]=e.split("/");return t!==Tn||n===void 0||o.length>0?!1:n.endsWith(".zip")||Ee.some(i=>n.endsWith(`.zip${i}`))}r(dh,"isBundleArtifact");var vr=class vr{constructor(t="dist"){this.distPath=Z.isAbsolute(t)?t:Z.join(process.cwd(),t),this.appRoot=Z.dirname(this.distPath)}validateBuildDirectory(){if(!Te.existsSync(this.distPath))throw new Error(`Build directory "${this.distPath}" not found. Run build first.`);let t=Z.join(this.appRoot,yr);if(!Te.existsSync(t))throw new Error(`"${t}" not found. It is required for deployment.`);let n=Z.join(this.appRoot,Sr);if(!Te.existsSync(n))throw new Error(`"${n}" not found. It is required for deployment.`)}async createZip(t="app.zip",n=!1){this.validateBuildDirectory(),console.log("\u{1F4E6} Packaging application...");let o=new lh(new ch,{level:9}),i=r(async(l,p)=>{await o.add(p,new ah(await Te.openAsBlob(l))),n&&console.log(` \u{1F4C4} ${p}`)},"addFile"),s=r(async l=>{let p=await Te.promises.readdir(l,{withFileTypes:!0});for(let d of p){let u=Z.join(l,d.name);d.isDirectory()?await s(u):await i(u,Z.relative(this.distPath,u).replace(/\\/g,"/"))}},"addDir"),a;try{await s(this.distPath);let l=Z.join(this.appRoot,yr);await i(l,Z.posix.join(wr,yr));let p=Z.join(this.appRoot,bc);if(Te.existsSync(p)){let u=Te.readFileSync(p,"utf-8");sh(u,p),await i(p,Z.posix.join(wr,bc))}let d=Z.join(this.appRoot,Sr);await i(d,Z.posix.join(wr,Sr)),a=await o.close()}catch(l){let p=l instanceof Error?l.message:String(l);throw new Error(`Failed to create zip: ${p}`)}try{await Te.promises.writeFile(t,a)}catch(l){throw new m(`Failed to write bundle to ${t}`,{cause:l})}let c=(a.byteLength/1024/1024).toFixed(2);return console.log(`\u2705 App packaged: ${t} (${c} MB)`),t}async createSourceArchive(t){console.log("\u{1F4E6} Packaging source for review...");let n;try{n=Ln("git",["-C",this.appRoot,"rev-parse","--show-toplevel"],{encoding:"utf-8",stdio:["pipe","pipe","pipe"]}).trim()}catch(l){throw Ae(),new m("Source packaging requires a git repository.",{hint:"Run `git init` first.",shouldReport:!1,cause:l})}let o=Ln("git",["-C",this.appRoot,"rev-parse","--show-prefix"],{encoding:"utf-8",stdio:["pipe","pipe","pipe"]}).trim(),i=o?o.replace(/\/$/,""):".",s=i==="."?"HEAD":`HEAD:${i}`;this.validateNoSensitiveFiles(n,s);try{Ln("git",["-C",n,"archive","--format=zip",`--output=${t}`,s])}catch(l){let p=l instanceof Error?l.message:String(l);throw new Error(`Failed to create source archive: ${p}`)}let c=(Te.statSync(t).size/1024/1024).toFixed(2);return console.log(`\u2705 Source packaged: ${Z.basename(t)} (${c} MB)`),t}validateNoSensitiveFiles(t,n){let o=Ln("git",["-C",t,"ls-tree","-r","--name-only",n],{encoding:"utf-8",stdio:["pipe","pipe","pipe"]}).trim().split(`
|
|
238
|
+
`).filter(Boolean),i=r(a=>{let c=a.replace(/\\/g,"/");return!dh(c)&&c.split("/").some(l=>ph.some(p=>p.test(l)))},"isSensitive"),s=o.filter(i);if(s.length>0)throw new Error(`Source archive would include sensitive files \u2014 remove them from git tracking first:
|
|
230
239
|
`+s.map(a=>` ${a}`).join(`
|
|
231
240
|
`)+`
|
|
232
|
-
Hint: git rm --cached <file>`)}};r(
|
|
233
|
-
WARNING: this bundle is already signed.`)),console.warn(a.red(`Rebuilding overwrites the bundle and permanently discards its signatures (${
|
|
234
|
-
`)),!await t.confirm("Rebuild anyway and discard the existing signatures?"))return"cancel"}return s==="reuse"?"reuse":s==="rebuild"?"rebuild":"cancel"}r(
|
|
235
|
-
`))}r(
|
|
241
|
+
Hint: git rm --cached <file>`)}};r(vr,"ApplicationPackager");var Re=vr;async function Cr(e,t,{existsSync:n=uh,mkdir:o=mh,createZip:i=r((s,a)=>new Re(s).createZip(a,!0),"createZipFn")}={}){let{externalId:s,versionTag:a}=e,c=ne(t,s,a);if(n(c)){let p=Ee.some(d=>n(`${c}${d}`))?"A signed bundle already exists here. Re-deploying will invalidate the signing process. Bump versionTag in app.json to deploy as a new version, or delete the bundle and its .sig files then re-sign after deploying.":"Bump versionTag in app.json to deploy as a new version, or delete the existing bundle from .cognite-bundles/ to redeploy the same version.";throw new m(`Bundle already exists: ${c}`,{hint:p,shouldReport:!1})}await o(hh(c),{recursive:!0}),await i(`${t}/dist`,c)}r(Cr,"packageBundle");async function Ar(e,t,n,o,{readFile:i=gh,upload:s=r(async(a,c)=>new N(e).deploy(t.externalId,t.name,t.description,t.versionTag,a,c,o),"uploadFn")}={}){let a=ne(n,t.externalId,t.versionTag),c;try{c=await i(a)}catch(l){throw new m(`Failed to read bundle file: ${a}`,{cause:l})}await s(c,fh(a))}r(Ar,"uploadBundle");import{execSync as yh}from"child_process";function Mn(e,t=!0,n={execSync:yh}){console.log("\u{1F4E6} Building app with npm...");try{n.execSync("npm run build",{cwd:e,stdio:t?"inherit":"pipe"})}catch(o){throw new m(`npm run build failed in ${e}`,{cause:o,hint:"Check the build output above for errors."})}console.log("\u2705 Build successful")}r(Mn,"buildApp");async function vh(e){let{confirmed:t}=await xc.prompt({type:"confirm",name:"confirmed",message:e,initial:!1});return t}r(vh,"defaultConfirm");async function Ch(e,t){let{selected:n}=await xc.prompt({type:"select",name:"selected",message:e,choices:t});return n}r(Ch,"defaultSelect");async function Ah(e){await wh(e,{force:!0})}r(Ah,"defaultRm");function Eh(e,t,n){return n(e)?t.skipBuild?"use-existing":process.stdout.isTTY?"prompt":"package-fresh":"package-fresh"}r(Eh,"classifyExistingBundle");async function bh(e,t){let{versionTag:n,hasSigs:o}=e,i=o?`A signed bundle for v${n} already exists. What would you like to do?`:`A bundle for v${n} already exists. What would you like to do?`,s=await t.select(i,[{name:"reuse",message:"Deploy the existing bundle without rebuilding"},{name:"rebuild",message:"Rebuild and deploy (overwrites the existing bundle)",...o?{hint:"\u2014 discards existing signatures"}:{}},{name:"cancel",message:"Cancel \u2014 do nothing"}]);if(s==="rebuild"&&o){let a=P(process.stderr);if(console.warn(a.bold.red(`
|
|
242
|
+
WARNING: this bundle is already signed.`)),console.warn(a.red(`Rebuilding overwrites the bundle and permanently discards its signatures (${Ee.join(", ")}). You will have to re-sign before publishing.
|
|
243
|
+
`)),!await t.confirm("Rebuild anyway and discard the existing signatures?"))return"cancel"}return s==="reuse"?"reuse":s==="rebuild"?"rebuild":"cancel"}r(bh,"promptBundleAction");async function xh(e,t){for(let n of[e,...Ee.map(o=>`${e}${o}`)])t.existsSync(n)&&await t.rm(n)}r(xh,"removeBundleArtifacts");function kc(e){let{appConfig:t,deployment:n,interactive:o}=e,i=o?"Deploy (Interactive)":"Deploy",s=o?`${n.project} @ ${n.baseUrl}`:`${n.org}/${n.project}`;console.log(["",i,"=".repeat(i.length),`App: ${t.name} (${t.externalId})`,`Version: ${t.versionTag}`,`Target: ${s}`,""].join(`
|
|
244
|
+
`))}r(kc,"printDeployInfo");function Pc(e){let{appConfig:t,deployment:n}=e;console.log(`
|
|
236
245
|
Successfully deployed ${t.name} version ${t.versionTag} to ${n.org?`${n.org}/`:""}${n.project}`),console.log("App is deployed in draft mode");let o=t.deployments.length>1?` -d ${n.project}`:"";console.log(`
|
|
237
246
|
To sign: npx @cognite/cli apps sign --interactive${o}`),console.log(`To publish: npx @cognite/cli apps publish .${o}`),console.log(`To activate: npx @cognite/cli apps activate .${o}`),console.log(`
|
|
238
|
-
To submit for certification: npx @cognite/cli apps submit`);let i=
|
|
247
|
+
To submit for certification: npx @cognite/cli apps submit`);let i=ma(n,t);i&&console.log(`
|
|
239
248
|
Open your app:
|
|
240
|
-
${i}`)}r(
|
|
241
|
-
Deploying to ${o.org}/${o.project}...`);let f=
|
|
242
|
-
Deploying to ${o.project}...`);let f=
|
|
243
|
-
Deployment cancelled. Nothing was deployed.`);return}
|
|
249
|
+
${i}`)}r(Pc,"printDeployResult");function Tc(e){let{externalId:t,name:n,description:o,versionTag:i}=e;return{externalId:t,name:n,description:o,versionTag:i}}r(Tc,"toApp");async function kh(e,t){let{appConfig:n,deployment:o,cwd:i,options:s,useExistingBundle:a}=e,{buildApp:c,buildClient:l,packageBundle:p,uploadBundle:d}=t;kc({appConfig:n,deployment:o,interactive:!1});let u=await l(o,{interactive:!1,appId:n.externalId,orgHint:s.org,authMethod:s.authMethod,confirmActionTarget:s.confirmActionTarget,action:"deploy"});!s.skipBuild&&!a&&c(i),console.log(`
|
|
250
|
+
Deploying to ${o.org}/${o.project}...`);let f=Tc(n);a||await p(f,i),await d(u,f,i,!1),Pc({appConfig:n,deployment:o})}r(kh,"handleDeployNonInteractive");async function Ph(e,t){let{appConfig:n,deployment:o,cwd:i,options:s,useExistingBundle:a}=e,{buildApp:c,buildClient:l,packageBundle:p,uploadBundle:d}=t;kc({appConfig:n,deployment:o,interactive:!0}),!s.skipBuild&&!a&&c(i);let u=await l(o,{interactive:!0,appId:n.externalId,orgHint:s.org,authMethod:s.authMethod});console.log(`
|
|
251
|
+
Deploying to ${o.project}...`);let f=Tc(n);a||await p(f,i),await d(u,f,i,!1),Pc({appConfig:n,deployment:o})}r(Ph,"handleDeployInteractive");async function Th(e,t=process.cwd(),n={}){let{loadEnvFile:o=H,loadAppConfig:i=k,confirm:s=vh,select:a=Ch,existsSync:c=Sh,rm:l=Ah,buildApp:p=Mn,buildClient:d=j,packageBundle:u=Cr,uploadBundle:f=Ar}=n;o(t);let y=i(t);B(y);let g=ne(t,y.externalId,y.versionTag),h=Eh(g,e,c),w=h==="use-existing";if(h==="prompt"){let C=Ee.some(x=>c(`${g}${x}`)),A=await bh({versionTag:y.versionTag,hasSigs:C},{select:a,confirm:s});if(A==="cancel"){console.log(`
|
|
252
|
+
Deployment cancelled. Nothing was deployed.`);return}A==="reuse"?w=!0:await xh(g,{existsSync:c,rm:l})}if(e.interactive){let C=await L(y,e);await Ph({appConfig:y,deployment:C,cwd:t,options:e,useExistingBundle:w},{buildApp:p,buildClient:d,packageBundle:u,uploadBundle:f});return}let S=$(y.deployments,e.deployment);await kh({appConfig:y,deployment:S,cwd:t,options:e,useExistingBundle:w},{buildApp:p,buildClient:d,packageBundle:u,uploadBundle:f})}r(Th,"handleDeploy");function Rc(e){let t=e.command("deploy").description("Deploy your app to Cognite Data Fusion. Run `auth login` to sign in, or use --interactive for a one-off browser login (no env-var secrets required).").option("-d, --deployment <target>","Deployment target (index or project name)").option("--skip-build","Skip the build step",!1).option("--interactive","Use browser-based authentication instead of env-var credentials",!1).option("--base-url <url>","CDF base URL (only with --interactive)").option("--project <project>","CDF project name (only with --interactive)").option("--org <org>","Organization hint for login (only with --interactive)");return W().forEach(n=>t.addOption(n)),t.addHelpText("after",`
|
|
244
253
|
Environment (non-interactive):
|
|
245
254
|
deployClientId and deploySecretName are configured per deployment in app.json.
|
|
246
255
|
deploySecretName is the name of the environment variable that holds the client
|
|
@@ -254,10 +263,10 @@ Examples:
|
|
|
254
263
|
npx @cognite/cli apps deploy -d my-project Deploy to project by name
|
|
255
264
|
npx @cognite/cli apps deploy --skip-build Deploy without rebuilding
|
|
256
265
|
npx @cognite/cli apps deploy --interactive Browser auth, prompts for target
|
|
257
|
-
npx @cognite/cli apps deploy --interactive -d 0 Browser auth, target chosen non-interactively`).action(n=>
|
|
258
|
-
Extracting bundles...`),await a(S
|
|
266
|
+
npx @cognite/cli apps deploy --interactive -d 0 Browser auth, target chosen non-interactively`).action(n=>Th(n))}r(Rc,"registerDeployCommand");import _n from"fs";import Lh from"os";import Le from"path";import Mh from"enquirer";import Er from"fs";import Un from"path";import{BlobReader as Rh,Uint8ArrayWriter as Ih,ZipReader as Dh}from"@zip.js/zip.js";import At from"path";function Ic(e,t){let n=At.resolve(e),o=At.resolve(t),i=At.relative(n,o);return i===""||At.isAbsolute(i)?!1:i!==".."&&!i.startsWith(`..${At.sep}`)}r(Ic,"isSafePath");var $h=1e5,Oh=2*1024**3;async function Dc(e,t,n={}){let{openAsBlob:o=r(d=>Er.openAsBlob(d),"openAsBlob"),mkdir:i=r((d,u)=>Er.promises.mkdir(d,u),"mkdir"),writeFile:s=r((d,u)=>Er.promises.writeFile(d,u),"writeFile"),maxEntries:a=$h,maxTotalBytes:c=Oh}=n,l=await o(e),p=new Dh(new Rh(l));try{let d;try{d=await p.getEntries()}catch(y){throw new m(`Could not read bundle: ${Un.basename(e)} is not a valid zip file.`,{hint:"Make sure you are passing the correct bundle path.",shouldReport:!1,cause:y})}let u=0,f=0;for(let y of d){if(y.directory)continue;if(f++,f>a)throw new Error(`Zip contains too many entries (limit: ${a})`);if(u+=y.uncompressedSize,u>c)throw new Error(`Zip exceeds maximum allowed size (limit: ${Math.round(c/(1024*1024))} MB)`);if(Un.isAbsolute(y.filename))throw new Error(`Malicious zip entry rejected: ${y.filename}`);let g=Un.join(t,y.filename);if(!Ic(t,g))throw new Error(`Malicious zip entry rejected: ${y.filename}`);let h=await y.getData(new Ih);await i(Un.dirname(g),{recursive:!0}),await s(g,h)}}finally{await p.close()}}r(Dc,"extractZip");import{execFileSync as Fh}from"child_process";function Oc(e){return e instanceof Error&&"status"in e&&typeof e.status=="number"}r(Oc,"isExitError");function $c(e){if(!Oc(e)||e.status!==1)throw e}r($c,"swallowDiffExit");var br=class br{constructor(t={execFileSync:Fh}){this.deps=t}isSupported(){try{return this.deps.execFileSync("git",["--version"],{stdio:"pipe"}),!0}catch{return!1}}isIdentical(t,n){try{return this.deps.execFileSync("git",["diff","--no-index","--quiet","--ignore-cr-at-eol",t,n]),!0}catch(o){if(Oc(o)&&o.status===1)return!1;throw o}}showStat(t,n){try{this.deps.execFileSync("git",["--no-pager","diff","--stat","--no-index","--ignore-cr-at-eol",t,n],{stdio:"inherit"})}catch(o){$c(o)}}showDiff(t,n,{usePager:o=!0}={}){let i=[];o||i.push("--no-pager"),i.push("diff","--word-diff=color","--no-index","--ignore-cr-at-eol",t,n);try{this.deps.execFileSync("git",i,{stdio:"inherit"})}catch(s){$c(s)}}};r(br,"GitDiffer");var Nn=br;var Uh=r(async e=>(await Mh.prompt([{type:"confirm",name:"answer",message:e,initial:!1}])).answer,"defaultConfirm");async function Nh(e,t,n={}){let{cwd:o=process.cwd(),buildApp:i=Mn,createPackager:s=r(A=>new Re(A),"createPackager"),extractZip:a=Dc,differ:c=new Nn,existsSync:l=r(A=>_n.existsSync(A),"existsSync"),mkdtemp:p=r(A=>_n.promises.mkdtemp(A),"mkdtemp"),mkdir:d=r(async(A,x)=>{await _n.promises.mkdir(A,x)},"mkdir"),rm:u=r((A,x)=>_n.promises.rm(A,x),"rm"),isInteractive:f=r(()=>!!(process.stdin.isTTY&&process.stdout.isTTY),"isInteractive"),confirm:y=Uh,setExitCode:g=r(A=>{process.exitCode=A},"setExitCode")}=n;if(!c.isSupported())throw new m("git is required for the diff command",{hint:"Install git and ensure it is in your PATH.",shouldReport:!1});if(!l(e))throw new m(`Bundle not found: ${e}`,{hint:"Check the file path and try again.",shouldReport:!1});if(!t.skipBuild)await i(o);else{let A=Le.join(o,"dist");if(!l(A))throw new m("dist directory not found.",{hint:"Run without --skip-build to build the app first, or run `pnpm build` manually.",shouldReport:!1})}let h=await p(Le.join(Lh.tmpdir(),"cognite-diff-")),w=Le.join(h,"ours.zip"),S=Le.join(h,"ours"),C=Le.join(h,"theirs");try{if(await d(S,{recursive:!0}),await d(C,{recursive:!0}),await s(Le.join(o,"dist")).createZip(w),console.log(`
|
|
267
|
+
Extracting bundles...`),await a(w,S),await a(e,C),c.isIdentical(S,C)){console.log(`
|
|
259
268
|
Bundles are identical`);return}console.log(`
|
|
260
|
-
\u274C The local build at ${Le.join(o,"dist")} differs from ${Le.basename(e)}.`);let x=f();(t.showStat!==void 0?t.showStat:x&&await
|
|
269
|
+
\u274C The local build at ${Le.join(o,"dist")} differs from ${Le.basename(e)}.`);let x=f();(t.showStat!==void 0?t.showStat:x&&await y("Show stat summary?"))&&c.showStat(S,C),(t.showDiff!==void 0?t.showDiff:x&&await y("Show full diff?"))&&c.showDiff(S,C,{usePager:t.pager}),g(1)}finally{await u(h,{recursive:!0,force:!0})}}r(Nh,"handleDiff");function Fc(e){return e.command("diff <bundle>").description("Diff a trusted local build against an untrusted bundle zip").option("--skip-build","Skip rebuilding the app before diffing",!1).option("--no-pager","Disable the pager and print diff output directly").option("--show-stat","Show a compact stat summary when bundles differ").option("--show-diff","Show the full word diff when bundles differ").addHelpText("after",`
|
|
261
270
|
Builds the current source, packages it, then extracts both the local build
|
|
262
271
|
and the provided bundle to temporary directories and runs:
|
|
263
272
|
|
|
@@ -268,74 +277,74 @@ Exit code 0 means the bundles are identical; exit code 1 means they differ.
|
|
|
268
277
|
Examples:
|
|
269
278
|
npx @cognite/cli apps diff untrusted.zip
|
|
270
279
|
npx @cognite/cli apps diff untrusted.zip --skip-build
|
|
271
|
-
npx @cognite/cli apps diff untrusted.zip --show-stat --show-diff --no-pager`).action((t,n)=>
|
|
280
|
+
npx @cognite/cli apps diff untrusted.zip --show-stat --show-diff --no-pager`).action((t,n)=>Nh(t,n))}r(Fc,"registerDiffCommand");function _h(e,t){console.log(""),console.log(`Updating metadata for '${e}':`);for(let{field:n,remote:o,local:i}of t){let s=`${n}:`.padEnd(13);console.log(` ${s}"${o}" \u2192 "${i||"(none)"}"`)}}r(_h,"printMetadataDiff");async function jh(e,t=process.cwd(),n={}){let{loadEnvFile:o=H,loadAppConfig:i=k,buildApiClient:s=j,createMetadataClient:a=r(g=>new N(g),"createMetadataClient")}=n;o(t);let c=i(t);B(c);let l=e.interactive?await L(c,e):$(c.deployments,e.deployment),p=await s(l,{interactive:e.interactive,appId:c.externalId,orgHint:e.org,authMethod:e.authMethod,confirmActionTarget:e.confirmActionTarget,action:"metadata update"}),d=a(p),u;try{u=await d.getApp(c.externalId)}catch(g){throw g instanceof We?new Error(`App '${c.externalId}' is not deployed yet. Run \`npx @cognite/cli apps deploy\` first.`):g}let f={name:c.name,description:c.description||""},y=Ro(u,f);if(y.length===0){console.log(""),console.log(`Metadata for '${c.externalId}' already matches the deployed app \u2014 nothing to update.`),console.log("Edit name/description in app.json to change them.");return}_h(c.externalId,y),await d.updateAppMetadata(c.externalId,c.name,c.description),console.log(""),console.log(`\u2705 Metadata for '${c.externalId}' updated`)}r(jh,"handleUpdateMetadata");function Lc(e){let t=e.command("metadata").summary("Manage the deployed app's metadata").description("Manage the deployed app's metadata (name and description)."),n=t.command("update").description("Update the deployed app's name and description from app.json").argument("[path]","Path to the app folder (only `.` is currently supported)",".").option("-d, --deployment <target>","Deployment target from app.json (index or name)").option("--interactive","Use browser-based authentication instead of env-var credentials",!1).option("--base-url <url>","CDF base URL (only with --interactive)").option("--project <project>","CDF project name (only with --interactive)").option("--org <org>","Organization hint for login (only with --interactive)");return W().forEach(o=>n.addOption(o)),n.addHelpText("after",`
|
|
272
281
|
Examples:
|
|
273
282
|
npx @cognite/cli apps metadata update . Push name/description using env-var auth
|
|
274
|
-
npx @cognite/cli apps metadata update . --interactive Push using browser auth (no secrets needed)`).action((o,i)=>
|
|
283
|
+
npx @cognite/cli apps metadata update . --interactive Push using browser auth (no secrets needed)`).action((o,i)=>jh(i)),t}r(Lc,"registerMetadataCommand");async function Hh(e,t,n){let o=await j(e,{interactive:t.interactive,appId:n.externalId,orgHint:t.org,authMethod:t.authMethod,confirmActionTarget:t.confirmActionTarget,action:"publish"});return new N(o)}r(Hh,"defaultBuildApiClient");async function Bh(e,t={}){let n=t.loadEnvFile??H,o=t.loadAppConfig??k,i=t.buildApiClient??Hh,s=t.discoverSignatures??Ct,a=process.cwd();n(a);let c=o(a);B(c);let l=e.interactive?await L(c,e):$(c.deployments,e.deployment),p=await i(l,e,c),{externalId:d,versionTag:u}=c,f;try{f=await p.getVersion(d,u)}catch(g){throw g instanceof te?new Error(`Version ${u} of ${d} has not been deployed yet. Run \`npx @cognite/cli apps deploy\` first.`):g}if(f.alias==="ACTIVE"){console.log(` ${d} @ ${u} is already ACTIVE \u2014 nothing to do.`);return}if(f.lifecycleState==="PUBLISHED"){console.log(` ${d} @ ${u} is already PUBLISHED \u2014 nothing to do.`);return}if(f.lifecycleState==="DEPRECATED"||f.lifecycleState==="ARCHIVED")throw new Error(`Cannot publish ${d} @ ${u}: version is ${f.lifecycleState} (terminal).`);let y=s(ne(a,d,u));y.length>0&&await p.submitSignatures(d,u,y),await p.publishVersion(d,u),console.log(`\u2713 Published ${d} @ ${u} is now PUBLISHED`),console.log(""),console.log("Run `npx @cognite/cli apps activate .` to make it active.")}r(Bh,"handlePublish");function Mc(e){let t=e.command("publish").description("Publish the current app version (transition DRAFT \u2192 PUBLISHED)").argument("[path]","Path to the app folder (only `.` is currently supported)",".").option("-d, --deployment <target>","Deployment target from app.json (index or name)").option("--interactive","Use browser-based authentication instead of env-var credentials",!1).option("--base-url <url>","CDF base URL (only with --interactive)").option("--project <project>","CDF project name (only with --interactive)").option("--org <org>","Organization hint for login (only with --interactive)");return W().forEach(n=>t.addOption(n)),t.addHelpText("after",`
|
|
275
284
|
Examples:
|
|
276
285
|
npx @cognite/cli apps publish . Publish using env-var auth
|
|
277
|
-
npx @cognite/cli apps publish . --interactive Publish using browser auth (no secrets needed)`).action((n,o)=>
|
|
286
|
+
npx @cognite/cli apps publish . --interactive Publish using browser auth (no secrets needed)`).action((n,o)=>Bh(o))}r(Mc,"registerPublishCommand");import{spawnSync as Kh}from"child_process";import{mkdirSync as Vh}from"fs";import{join as Gh,resolve as Uc}from"path";var Yh=["localhost","local.cognite.ai","*.local.cognite.ai"],zh={info:r(e=>{process.stdout.write(`${e}
|
|
278
287
|
`)},"info"),error:r(e=>{process.stderr.write(`${e}
|
|
279
|
-
`)},"error")},
|
|
288
|
+
`)},"error")},qh={spawnSync:Kh,mkdirSync:Vh,logger:zh,getConfig:D};function Jh(e){let t=e("mkcert",["-help"],{stdio:"ignore"});return t.status===0||t.status===1}r(Jh,"hasMkcert");function Wh({certDir:e,domains:t=Yh,deps:n={}}={}){let o={...qh,...n},{spawnSync:i,mkdirSync:s,logger:a}=o,c=e??Gh(o.getConfig().home,"certificates","mkcert");if(!Jh(i))throw a.error("Error: mkcert is not installed."),a.error("Install it with: brew install mkcert (macOS, Linux, WSL)"),a.error("On Windows: choco install mkcert (or scoop install mkcert)"),a.error("See https://github.com/FiloSottile/mkcert#installation for other methods."),new Error("mkcert is not installed");if(a.info("\u2139\uFE0F Installing mkcert root CA into your local trust store."),a.info(" This allows your browser to trust locally-generated certificates."),a.info(" You may be prompted for your system password."),i("mkcert",["-install"],{stdio:"inherit"}).status!==0)throw new Error("`mkcert -install` failed");s(c,{recursive:!0});let p=Uc(c,"localhost.pem"),d=Uc(c,"localhost-key.pem");if(i("mkcert",["-cert-file",p,"-key-file",d,...t],{stdio:"inherit"}).status!==0)throw new Error("mkcert failed to generate certificates");return a.info(""),a.info("Certificates generated:"),a.info(` cert: ${p}`),a.info(` key: ${d}`),{certFile:p,keyFile:d}}r(Wh,"setupHttps");function Zh(e){Wh({certDir:e.certDir})}r(Zh,"handleSetupHttps");function Nc(e){return e.command("setup-https").description("Generate trusted local HTTPS certificates via mkcert").option("--cert-dir <path>","Directory to write certs into (default: ~/.cognite-cli/certificates/mkcert)").addHelpText("after",`
|
|
280
289
|
Examples:
|
|
281
290
|
npx @cognite/cli@latest apps setup-https Generate certs in ~/.cognite-cli/certificates/mkcert
|
|
282
|
-
npx @cognite/cli@latest apps setup-https --cert-dir certs Use a custom directory`).action(t=>
|
|
291
|
+
npx @cognite/cli@latest apps setup-https --cert-dir certs Use a custom directory`).action(t=>Zh(t))}r(Nc,"registerSetupHttpsCommand");import{existsSync as hy,writeFileSync as yy}from"fs";import{basename as Sy,dirname as wy,join as vy,resolve as Rr}from"path";import{parseScope as Cy,signBundle as Ay,validateScopes as Ey}from"@cognite/app-sdk/codesigning";import{existsSync as my,readFileSync as gy}from"fs";import{pbkdf2 as ey,randomBytes as ty}from"crypto";import{promisify as ny}from"util";import{CompactEncrypt as oy,base64url as _c,compactDecrypt as ry}from"jose";var Xh=new TextEncoder,Qh=new TextDecoder,xr={encode:r(e=>Xh.encode(e),"encode"),decode:r(e=>Qh.decode(e),"decode")};var iy=ny(ey),Tr=6e5,sy="sha512",kr="PBKDF2-HMAC-SHA512",Pr=16,jn="A256GCM",ay=32,Hn=2e6;async function jc(e,t,n){return await iy(e,t,n,ay,sy)}r(jc,"deriveKey");async function Hc(e,t,n=Tr){if(!Number.isInteger(n)||n<1||n>Hn)throw new Error(`Invalid iterations: must be an integer between 1 and ${Hn}`);let o=ty(Pr),i=await jc(t.expose(),o,n);return await new oy(xr.encode(e.expose())).setProtectedHeader({alg:"dir",enc:jn,kdf:kr,kdf_iter:n,kdf_salt:_c.encode(o)}).encrypt(i)}r(Hc,"encryptStringAsJwe");async function Bc(e,t){let{plaintext:n}=await ry(e,async o=>{if(!e.length)throw new Error("Unexpected JWE empty value");let i=t.expose();if(i.length<15)throw new Error(`Invalid passphrase: must be at least ${15} characters`);if(o.alg!=="dir")throw new Error(`Unexpected JWE alg "${String(o.alg)}"; only "dir" is supported`);if(o.enc!==jn)throw new Error(`Unexpected JWE enc "${String(o.enc)}"; only "${jn}" is supported`);if(o.kdf!==kr)throw new Error(`Unexpected KDF "${String(o.kdf)}"; only "${kr}" is supported`);let s=Number(o.kdf_iter);if(!Number.isInteger(s)||s<1||s>Hn)throw new Error(`Invalid kdf_iter in JWE header: must be an integer between 1 and ${Hn}`);if(typeof o.kdf_salt!="string")throw new Error("Missing kdf_salt in JWE header");let a=_c.decode(o.kdf_salt);if(a.length!==Pr)throw new Error(`Invalid kdf_salt length in JWE header: expected ${Pr} bytes, got ${a.length}`);return await jc(i,a,s)},{keyManagementAlgorithms:["dir"],contentEncryptionAlgorithms:[jn]});return xr.decode(n)}r(Bc,"decryptJweAsString");function Kc(e){let t=e.trim();return t.startsWith("eyJ")&&t.split(".").length===5}r(Kc,"isJweCompact");import cy from"enquirer";async function ly(e){return cy.prompt(e)}r(ly,"defaultPrompt");async function Vc(e,t={}){let{prompt:n=ly}=t,{passphrase:o}=await n({type:"password",name:"passphrase",message:e});return b.from(o)}r(Vc,"promptPassphrase");import dy from"enquirer";import{statSync as py}from"fs";function Gc(e,t=py){return e.map(n=>({key:n,mtime:t(n.publicKeyPath).mtimeMs})).sort((n,o)=>o.mtime-n.mtime).map(({key:n})=>n)}r(Gc,"sortByMtime");async function uy(e){return dy.prompt(e)}r(uy,"defaultPrompt");async function Yc(e,t={}){if(e.length===1)return e[0];let{prompt:n=uy,sortByMtime:o=Gc}=t,i=o(e),s=i[0],{choice:a}=await n({type:"select",name:"choice",message:"Select signing identity",choices:[{name:"latest",message:`Use latest: ${s.kid}`},{name:"pick",message:"Pick from list"}]});if(a==="latest")return s;if(a==="pick"){let{kid:c}=await n({type:"select",name:"kid",message:"Select signing identity",choices:i.map(p=>({name:p.kid,message:[p.kid,p.email,xn(p.source)].filter(Boolean).join(" \u2014 ")}))}),l=i.find(p=>p.kid===c);if(!l)throw new Error("No signing identity selected");return l}else throw new Error(`Unexpected choice: "${a}"`)}r(Yc,"promptSigningIdentity");function fy(e){return{existsSync:e.existsSync??my,readFileSync:e.readFileSync??((t,n)=>gy(t,n)),readKeyFromKeychain:e.readKeyFromKeychain??En,readSigningKey:e.readSigningKey??bn,isOS:e.isOS??(t=>X(t)),decryptJweAsString:e.decryptJweAsString??Bc,discoverLocalKeys:e.discoverLocalKeys??kn,keysDir:e.keysDir??D().keysDir,promptPassphrase:e.promptPassphrase??Vc,promptSigningIdentity:e.promptSigningIdentity??Yc}}r(fy,"resolveDeps");async function zc(e,t={}){let n=fy(t);if(e.keyPath){if(!n.existsSync(e.keyPath))throw new Error(`Key file not found: ${e.keyPath}`);if(!e.kid)throw new Error("--signing-identity <kid> is required when using --key");let s=n.readFileSync(e.keyPath,"utf-8").trim();if(Kc(s)){if(!e.interactive)throw new Error(`Key at ${e.keyPath} is passphrase-encrypted. Pass --interactive to enter the passphrase.`);let a=await n.promptPassphrase(`Passphrase for key ${e.kid}: `);return{privateKeyPem:b.from(await n.decryptJweAsString(s,a)),kid:e.kid}}return{privateKeyPem:b.from(s),kid:e.kid}}let o=await n.discoverLocalKeys(n.keysDir);if(o.length===0)throw new Error("No signing keys found. Run `cognite keys generate` or pass --key.");let i;if(e.kid)i=o.find(s=>s.kid===e.kid);else if(e.interactive)i=await n.promptSigningIdentity(o);else throw new Error("--signing-identity <kid> is required. Pass --interactive to select it interactively.");if(!i)throw new Error(`No key found with kid "${e.kid}"`);switch(i.source.kind){case"keychain":{let s=n.isOS("macos")?await n.readKeyFromKeychain(i.kid):await n.readSigningKey(i.kid);if(!s)throw new Error(`Key "${i.kid}" not found in OS credential store`);return{privateKeyPem:s,kid:i.kid}}case"encrypted-file":{if(!e.interactive)throw new Error(`Key "${i.kid}" is passphrase-encrypted. Pass --interactive to enter the passphrase, or store the key in macOS Keychain for non-interactive use.`);let s=await n.promptPassphrase(`Passphrase for key ${i.kid}: `);return{privateKeyPem:b.from(await n.decryptJweAsString(n.readFileSync(i.source.path,"utf-8"),s)),kid:i.kid}}case"public-only":throw new Error(`Key "${i.kid}" has no private key on this machine (public-only).`)}}r(zc,"resolvePrivateKey");var by=r(async(e,t,n,o,i)=>{let s=await j(e,{interactive:i.browserAuth??!1,appId:t,orgHint:i.org,authMethod:i.authMethod,confirmActionTarget:i.confirmActionTarget,action:"sign"});await new N(s).submitSignatures(t,n,o)},"defaultSubmitSignatures");function xy(e){return{existsSync:e.existsSync??hy,writeFileSync:e.writeFileSync??yy,createBundleStream:e.createBundleStream??Pn,signBundle:e.signBundle??Ay,parseScope:e.parseScope??Cy,validateScopes:e.validateScopes??Ey,loadAppConfig:e.loadAppConfig??k,resolvePrivateKey:e.resolvePrivateKey??(t=>zc(t)),submitSignatures:e.submitSignatures??by,discoverSignatures:e.discoverSignatures??Ct}}r(xy,"resolveDeps");async function qc(e,t,n={},o=process.cwd()){let i=xy(n),s=t.appid,a=t.appVersion,c=[],l=i.loadAppConfig(o);if(s=s??l.externalId,a=a??l.versionTag,t.scope&&t.scope.length>0?c=t.scope.map(i.parseScope):c=l.deployments.map(C=>({org:C.org,project:C.project})),!s)throw new Error("--appid is required (or set externalId in app.json)");if(!a)throw new Error("--app-version is required (or set versionTag in app.json)");let p=e?Rr(o,e):ne(o,s,a);if(!i.existsSync(p)){let C=e?"":" (default derived from app.json \u2014 pass [bundle] explicitly to override, or run `cognite apps deploy` first to populate .cognite-bundles/)";throw new Error(`Bundle not found: ${p}${C}`)}let d=i.validateScopes(c);if(d.length>0)throw new Error(`Invalid scopes:
|
|
283
292
|
${d.join(`
|
|
284
|
-
`)}`);let{privateKeyPem:u,kid:f}=await i.resolvePrivateKey({keyPath:t.key?
|
|
285
|
-
Payload:`,JSON.stringify(g.payload,null,2));let
|
|
286
|
-
To publish: npx @cognite/cli apps publish .`)}r(
|
|
293
|
+
`)}`);let{privateKeyPem:u,kid:f}=await i.resolvePrivateKey({keyPath:t.key?Rr(o,t.key):void 0,kid:t.signingIdentity,interactive:t.interactive}),y=i.createBundleStream(p),g=await i.signBundle({privateKeyPem:u.expose(),kid:f,appId:s,version:a,bundleStream:y,role:t.asCertifier?"certifier":"developer",scopes:c}),h=t.output?Rr(o,t.output):vy(wy(p),`${Sy(p)}.${t.asCertifier?"cert":"dev"}.sig`);i.writeFileSync(h,g.token,"utf-8"),console.log(`\u2705 Signed: ${h}`),console.log(` kid: ${g.kid}`),console.log(` bundle: ${g.payload.bundleSha256}`),console.log(` scopes: ${g.payload.scopes.map(C=>`${C.org}/${C.project}`).join(", ")}`),t.verbose&&console.log(`
|
|
294
|
+
Payload:`,JSON.stringify(g.payload,null,2));let w=Array.from(new Set([...i.discoverSignatures(p),g.token])),S=t.interactive?await L(l,{deployment:t.deployment,baseUrl:t.baseUrl,project:t.project,org:t.org}):$(l.deployments,t.deployment);await i.submitSignatures(S,s,a,w,t),console.log(`
|
|
295
|
+
To publish: npx @cognite/cli apps publish .`)}r(qc,"handleSign");function Jc(e,t={}){let n=e.command("sign [bundle]").description("Sign an app bundle (defaults to .cognite-bundles/<app>-<version>.zip)").option("--key <path>","Private key PEM file path").option("-s, --signing-identity <kid>","Key ID for Keychain or file lookup").option("--appid <id>","Application ID (default: externalId from app.json)").option("-i, --identifier <id>","Alias for --appid").option("--app-version <version>","App version (default: versionTag from app.json)").option("--scope <org/project...>","Deployment scope(s) (default: deployments from app.json)").option("-r, --requirements <org/project...>","Alias for --scope").option("-o, --output <path>","Output file path (default: <bundle>.<dev|cert>.sig)").option("-v, --verbose","Display full payload after signing").option("--as-certifier","Counter-sign a developer signature as certifier").option("--interactive","Enable interactive prompts (key selection, passphrase, deployment target selection)",!1).option("--browser-auth","Use browser-based PKCE auth when submitting the signature",!1).option("-d, --deployment <target>","Deployment target from app.json (index or name; submit step only)").option("--base-url <url>","CDF base URL (only with --interactive)").option("--project <project>","CDF project name (only with --interactive)").option("--org <org>","Organization hint for login (only with --interactive or --browser-auth)");return W().forEach(o=>n.addOption(o)),n.action((o,i)=>{let s={...i,appid:i.identifier??i.appid,scope:i.requirements??i.scope};return qc(o,s,t)})}r(Jc,"registerSignCommand");function ky(e){return e.alias==="ACTIVE"?"ACTIVE":e.lifecycleState}r(ky,"describeStatus");function Py(e){if(e.length===0)return["Signatures: none stored"];let t=["Signatures:"];for(let n of e){let o=n.status==="VALID"?"\u2705":"\u274C",i=new Date(n.signatureIat).toISOString();t.push(` ${o} ${n.signerKid} (${n.signerRole}, signed ${i}) \u2014 ${n.status}`)}return t}r(Py,"formatSignatures");async function Ty(e,t,n){let o=await j(e,{interactive:t.interactive,appId:n,orgHint:t.org,authMethod:t.authMethod});return new N(o)}r(Ty,"defaultBuildApiClient");async function Ry(e,t={}){let{loadEnvFile:n=H,loadAppConfig:o=k,getApiClient:i=Ty}=t,s=process.cwd();n(s);let a=o(s);B(a);let c=e.interactive?await L(a,e):$(a.deployments,e.deployment),l=await i(c,e,a.externalId);console.log(""),console.log(`App: ${a.name} (${a.externalId})`),console.log(`Version: ${a.versionTag} (local)`);try{let p=await l.getVersion(a.externalId,a.versionTag);console.log(`Status: ${ky(p)}`);let d=await Iy(l,a.externalId,a.versionTag);if(console.log(""),d==="endpoint-unavailable")console.log("Signatures: backend endpoint not available on this cluster yet");else for(let u of Py(d))console.log(u);p.lifecycleState==="DRAFT"&&(console.log(""),console.log("Run `npx @cognite/cli apps publish .` to publish this version."))}catch(p){if(p instanceof te){console.log("Status: not deployed yet"),console.log(""),console.log("Run `npx @cognite/cli apps deploy` to upload this version.");return}throw p}}r(Ry,"handleStatus");async function Iy(e,t,n){try{return await e.listSignatures(t,n)}catch(o){if(ae(o)&&o.status===404||o instanceof Error&&/status code: 404/.test(o.message))return"endpoint-unavailable";throw o}}r(Iy,"fetchSignatures");function Wc(e){return e.command("status").description("Show the deployment status and signatures of the current app version").argument("[path]","Path to the app folder (only `.` is currently supported)",".").option("-d, --deployment <target>","Deployment target from app.json (index or name)").option("--interactive","Use browser-based authentication instead of env-var credentials",!1).option("--base-url <url>","CDF base URL (only with --interactive)").option("--project <project>","CDF project name (only with --interactive)").option("--org <org>","Organization hint for login (only with --interactive)").addOption(dr()).addHelpText("after",`
|
|
287
296
|
Examples:
|
|
288
297
|
npx @cognite/cli apps status . Status using env-var auth
|
|
289
|
-
npx @cognite/cli apps status . --interactive Status using browser auth (no secrets needed)`).action((n,o)=>
|
|
290
|
-
`))}</pre>`,c=
|
|
291
|
-
Press Enter to open the Zendesk form in your browser and reveal dist/submit/ in your file manager...`,()=>{t.close(),e()})})}r(
|
|
298
|
+
npx @cognite/cli apps status . --interactive Status using browser auth (no secrets needed)`).action((n,o)=>Ry(o))}r(Wc,"registerStatusCommand");import{execFileSync as $r}from"child_process";import Dr from"fs";import Et from"path";import Fy from"readline";var Zc="https://cognite.zendesk.com",Dy="360001234312",$y="tf_360015295097",Oy="cognite_flows_certifications";function Xc(e,t,n){let o=new URLSearchParams({ticket_form_id:Dy,tf_priority:"normal",tf_subject:e,[$y]:Oy,tf_description:t});return`${n}/hc/en-us/requests/new?${o}`}r(Xc,"buildUrl");function Qc(e){return e.replace(/&/g,"&").replace(/</g,"<").replace(/>/g,">").replace(/"/g,""").replace(/'/g,"'")}r(Qc,"escapeHtml");function Ir(e){return e.map(Qc).join("<br>")}r(Ir,"toHtml");function el(e,t=Zc){let{appName:n,externalId:o,versionTag:i,archiveName:s,developerName:a,cdfProject:c,cdfCluster:l}=e,p=["Dear Cognite Platform Team,","","I would like to submit my Flows app for review and certification.","",`App name: ${n}`,`App external ID: ${o}`,`Version: ${i}`,c?`CDF project: ${c}`:void 0,l?`CDF cluster: ${l}`:void 0,"","`npx @cognite/cli apps submit` verified App-Brief.md,","code-review-report.md, and design-review-report.md are committed to git.","","Attached (all from dist/submit/):",`[ ] ${s??"src-<sha>.zip"} \u2014 source archive`,`[ ] ${o}-${i}.zip \u2014 deploy bundle`,"[ ] Screen recording of the application (required for design review)","","Best regards,",a??"[Your name]"];return Xc(`App Review Request: ${n}`,Ir(p.filter(d=>d!==void 0)),t)}r(el,"buildAppReviewUrl");function tl(e,t,n,o,i=Zc){let s=Ir(["Dear Cognite Platform Team,","","I would like to register my Flows app signing key for certified deployments.","",`Key ID (kid): ${e}`,`Developer email: ${t}`,`Expires: ${n}`,"","Please add the following entry to public_keys.yaml:"]),a=`<pre>${Qc(o.replace(/\r\n/g,`
|
|
299
|
+
`))}</pre>`,c=Ir(["","Best Regards,","[Your name]","","(This registration request was generated by `npx @cognite/cli keys generate`.)"]);return Xc(`Public Key Registration: ${t}`,`${s}<br>${a}${c}`,i)}r(tl,"buildKeyRegistrationUrl");function Ly(){return new Promise(e=>{let t=Fy.createInterface({input:process.stdin,output:process.stdout});t.question(`
|
|
300
|
+
Press Enter to open the Zendesk form in your browser and reveal dist/submit/ in your file manager...`,()=>{t.close(),e()})})}r(Ly,"defaultPressEnter");var My=[{pattern:"App-Brief.md",label:"App-Brief.md",skill:"flows-app-brief"},{pattern:"reviews/code-review/*/code-review-report.md",label:"reviews/code-review/feedback-round-<N>/code-review-report.md",skill:"flows-code-review"},{pattern:"reviews/design-review/*/design-review-report.md",label:"reviews/design-review/feedback-round-<N>/design-review-report.md",skill:"flows-design-review"}];function Uy(e){let t=My.filter(({pattern:n})=>$r("git",["-C",e,"ls-files","--",n],{encoding:"utf-8",stdio:["pipe","pipe","pipe"]}).trim().length===0);if(t.length>0){let n=t.map(({label:o,skill:i})=>` ${o} \u2192 /${i}`);throw new Error(`Certification files are missing or not committed. Run the required skills in Claude Code first:
|
|
292
301
|
|
|
293
302
|
`+n.join(`
|
|
294
|
-
`)+"\n\nAfter running the skills, commit the generated files and re-run `apps submit`.")}}r(
|
|
303
|
+
`)+"\n\nAfter running the skills, commit the generated files and re-run `apps submit`.")}}r(Uy,"assertArtifactsCommitted");var Ny="\u2197 Launched your browser \u2014 look for a new tab with the Zendesk form.";async function _y(e=process.cwd(),t={}){let{openInBrowser:n=yn,revealInFileManager:o=ha,pressEnter:i=Ly,isInteractive:s=r(()=>process.stdout.isTTY===!0,"isInteractive")}=t;if(Ae(),!Cn(e))throw new Error("Not a git repository. Run this command from your app's root directory.");H(e);let a=k(e);B(a),Uy(e);let c=Et.join(e,"dist","submit");Dr.mkdirSync(c,{recursive:!0});let l=$r("git",["-C",e,"rev-parse","--short","HEAD"],{encoding:"utf-8",stdio:["pipe","pipe","pipe"]}).trim();if($r("git",["-C",e,"status","--porcelain"],{encoding:"utf-8",stdio:["pipe","pipe","pipe"]}).trim().length>0)throw new Error(`Working tree has uncommitted changes. Commit or stash them before submitting for certification.
|
|
295
304
|
|
|
296
|
-
The source archive must exactly match the committed code so reviewers can verify what they receive.`);let d=`src-${l}.zip`,u=Et.join(c,d);await new
|
|
297
|
-
\u2705 Certification package ready: dist/submit/`),console.log(` ${d} \u2014 source archive (commit ${l})`),console.log(
|
|
298
|
-
Attach all files from dist/submit/ to the Zendesk ticket.`),s()){await i();let
|
|
299
|
-
${
|
|
300
|
-
\u{1F517} ${
|
|
305
|
+
The source archive must exactly match the committed code so reviewers can verify what they receive.`);let d=`src-${l}.zip`,u=Et.join(c,d);await new Re(Et.join(e,"dist")).createSourceArchive(u);let y=`${a.externalId}-${a.versionTag}.zip`,g=Et.join(e,".cognite-bundles",y),h=!1;Dr.existsSync(g)&&(Dr.copyFileSync(g,Et.join(c,y)),h=!0);let w=el({appName:a.name,externalId:a.externalId,versionTag:a.versionTag,archiveName:d,developerName:xa(),cdfProject:a.deployments[0].project,cdfCluster:a.deployments[0].baseUrl});if(console.log(`
|
|
306
|
+
\u2705 Certification package ready: dist/submit/`),console.log(` ${d} \u2014 source archive (commit ${l})`),console.log(h?` ${y} \u2014 deploy bundle`:" \u26A0 Deploy bundle missing \u2014 run `apps deploy` to generate it, then re-run submit"),console.log(" \u2190 add your screen recording to this folder"),console.log(`
|
|
307
|
+
Attach all files from dist/submit/ to the Zendesk ticket.`),s()){await i();let S=n(w);o(u),S&&(console.log(`
|
|
308
|
+
${Ny}`),console.log(" If nothing opened, submit here:"),console.log(` \u{1F517} ${w}`))}else console.log(`
|
|
309
|
+
\u{1F517} ${w}`)}r(_y,"handleSubmit");function nl(e){return e.command("submit").description("Package source and open a pre-filled Zendesk form for app certification submission").addHelpText("after",`
|
|
301
310
|
Examples:
|
|
302
|
-
npx @cognite/cli apps submit Package source, open browser + file manager`).action(()=>
|
|
311
|
+
npx @cognite/cli apps submit Package source, open browser + file manager`).action(()=>_y())}r(nl,"registerSubmitCommand");function ol(e){let t=e.command("apps").description("Manage Fusion Custom Apps \u2014 create, deploy, and manage version lifecycle");return Cc(t),Rc(t),Fc(t),Wc(t),Lc(t),Mc(t),oc(t),Ac(t),Ec(t),Nc(t),nl(t),Sc(t),Jc(t),tc(t),t}r(ol,"registerAppsCommand");import Or from"enquirer";function jy(e){return{loadAppConfig:e.loadAppConfig??k,cwd:e.cwd??(()=>process.cwd()),loginForSession:e.loginForSession??(t=>Ni(t)),writeSession:e.writeSession??(t=>Nt(t)),readSessionMetadata:e.readSessionMetadata??(()=>ke()),clearSession:e.clearSession??(()=>_t()),promptSelectOrg:e.promptSelectOrg??Hy,promptOrg:e.promptOrg??By,promptConfirm:e.promptConfirm??Ky,logger:e.logger??console,platform:e.platform??process.platform}}r(jy,"resolveDeps");async function Hy(e){let{selected:t}=await Or.prompt({type:"select",name:"selected",message:"Select the organization to sign in to",choices:e});return t}r(Hy,"defaultPromptSelectOrg");async function By(){let{org:e}=await Or.prompt({type:"input",name:"org",message:"Enter your organization name",validate:r(t=>t.trim().length>0?!0:"Organization name is required","validate")});return e.trim()}r(By,"defaultPromptOrg");async function Ky(e){let{confirmed:t}=await Or.prompt({type:"confirm",name:"confirmed",message:e,initial:!1});return t}r(Ky,"defaultPromptConfirm");function Vy(e){if(e.port===void 0)return;let t=Number(e.port);if(!Bt(t))throw new m(Kt(e.port));return t}r(Vy,"resolvePort");async function Gy(e,t){let{logger:n,promptSelectOrg:o,promptOrg:i}=t;if(e.org)return e.org;let s=Yy(t);if(s){let a=[...new Set(s.deployments.map(c=>c.org))];return a.length===1?(n.log(`Resolved organization from app.json: ${a[0]}`),a[0]):o(a)}return i()}r(Gy,"resolveOrg");function Yy(e){let{loadAppConfig:t,cwd:n}=e;try{return t(n())}catch(o){let i=o instanceof Error?o.message:String(o);if(/No app\.json found/.test(i))return null;throw o}}r(Yy,"tryLoadAppConfig");function zy(e){switch(e){case"darwin":return"macOS Keychain";case"win32":return"Windows Credential Manager";default:return"Secret Service (libsecret / KWallet)"}}r(zy,"keyringBackendLabel");function qy(e){let t=e,n=new Set;for(;t!=null&&!n.has(t)&&(n.add(t),typeof t=="object");){if("code"in t&&t.code==="ERR_DLOPEN_FAILED")return!0;let o="message"in t&&typeof t.message=="string"?t.message:null;if(o&&/cannot find native binding/i.test(o))return!0;t="cause"in t?t.cause:void 0}return!1}r(qy,"isNativeModuleLoadError");async function Jy(e,t){let{logger:n,loginForSession:o,writeSession:i,readSessionMetadata:s,clearSession:a,promptConfirm:c,platform:l}=t,p=Vy(e),d=s();if(d){if(!e.force&&_e(d)!=="EXPIRED"&&!await c(`A session for organization "${d.org}" already exists. Replace it?`)){n.error("Aborted.");return}await a()}let u=await Gy(e,t),f=await o({org:u,port:p});try{await i(f)}catch(g){if(qy(g)){let h=l==="win32"?"Install the Microsoft Visual C++ Redistributable from https://learn.microsoft.com/en-us/cpp/windows/latest-supported-vc-redist and restart your terminal, then run `cognite auth login` again.":"Ensure the required system libraries are installed for your platform, then run `cognite auth login` again.";throw new m("The keyring native module could not be loaded \u2014 tokens were not persisted.",{hint:h,cause:g})}throw new m("Login succeeded but tokens could not be saved to the credential store.",{hint:`Ensure a credential store (${zy(l)}) is available and unlocked, then run \`cognite auth login\` again.`,cause:g})}let y=P(process.stdout);n.log(""),n.log(`${y.green("\u2713")} Signed in to organization ${f.org}`)}r(Jy,"handleLogin");function Wy(e){return e.commands.find(t=>t.name()==="auth")??e.command("auth").description("Manage your persisted CDF login session")}r(Wy,"getOrCreateAuthGroup");function rl(e,t={}){let n=jy(t);Wy(e).command("login").description("Sign in via the browser and persist a refreshable session").option("--org <org>","Organization to sign in to (resolved from app.json or prompted when omitted)").option("--force","Replace an existing session without prompting").option("--port <port>",`Pin the local callback port for the OAuth redirect (${dt}). Defaults to 3000.`).action(i=>Jy(i,n))}r(rl,"registerAuthLoginCommand");function Zy(e){return{readSession:e.readSession??(()=>lt()),readSessionMetadata:e.readSessionMetadata??(()=>ke()),clearSession:e.clearSession??(()=>_t()),revokeRefreshToken:e.revokeRefreshToken??(t=>_i(t)),logger:e.logger??console}}r(Zy,"resolveDeps");async function Xy(e){let{readSessionMetadata:t,readSession:n,clearSession:o,revokeRefreshToken:i,logger:s}=e,a=null;try{a=t()}catch{await o(),s.log("Cleared corrupt session.");return}if(!a){s.log("No active session.");return}let c;try{c=(await n())?.refreshToken}catch{}if(await o(),c)try{await i(c)}catch{s.error("Logged out locally, but revoking the token at the identity provider failed. It may remain valid until it expires naturally."),s.log("Logged out.");return}s.log("Logged out.")}r(Xy,"handleLogout");function Qy(e){return e.commands.find(t=>t.name()==="auth")??e.command("auth").description("Manage your persisted CDF login session")}r(Qy,"getOrCreateAuthGroup");function il(e,t={}){let n=Zy(t);Qy(e).command("logout").description("Revoke and remove the persisted session").action(()=>Xy(n))}r(il,"registerAuthLogoutCommand");var eS="auth.cognite.com";function tS(e){return{ensureFreshSession:e.ensureFreshSession??Je,fetchUserInfo:e.fetchUserInfo??(t=>zt(t)),logger:e.logger??console}}r(tS,"resolveDeps");function nS(e){return e.email??e.preferredUsername??e.name??e.sub}r(nS,"describeUser");var oS="(unknown cluster)";function rS(e,t){if(e.length===0)return[" - Projects: (none)"];let n=new Map;for(let i of e){let s=i.cluster??oS,a=n.get(s);a?a.push(i):n.set(s,[i])}let o=[` - Projects (${e.length}):`];for(let[i,s]of n){o.push(` ${t.dim(i)}`);for(let a of s){let c=a.isDefault?` ${t.green("[default]")}`:"";o.push(` ${a.name}${c}`)}}return o}r(rS,"formatProjects");function iS(){switch(process.platform){case"darwin":return"macOS Keychain";case"win32":return"Windows Credential Manager";default:return"Secret Service (libsecret / KWallet)"}}r(iS,"keyringBackendLabel");async function sS(e){let{ensureFreshSession:t,fetchUserInfo:n,logger:o}=e,i;try{i=await t()}catch(s){if(s instanceof je){o.error(" Session expired. Run `npx @cognite/cli auth login` to sign in again."),process.exitCode=1;return}throw s}if(!i){o.error("Not signed in. Run `npx @cognite/cli auth login` to start a session."),process.exitCode=1;return}o.log(i.org);try{let s=await n(i),a=P(process.stdout);o.log(` ${a.green("\u2713")} Signed in as ${nS(s)}`);for(let c of rS(s.projects,a))o.log(c);o.log(` - Token storage: ${iS()}`)}catch(s){if(s instanceof qe&&s.kind==="unreachable")o.error(` \u2717 Couldn't reach Cognite (${eS}): ${s.message}`),o.error(" Check your network connection, or run `npx @cognite/cli auth login` to sign in again.");else{let a=s instanceof Error?s.message:String(s);o.error(` \u2717 ${a}`),o.error(" Run `npx @cognite/cli auth login` to sign in again.")}process.exitCode=1}}r(sS,"handleStatus");function aS(e){return e.commands.find(t=>t.name()==="auth")??e.command("auth").description("Manage your persisted CDF login session")}r(aS,"getOrCreateAuthGroup");function sl(e,t={}){let n=tS(t);aS(e).command("status").alias("whoami").description("Show the active session, verified against the identity provider").action(()=>sS(n))}r(sl,"registerAuthStatusCommand");import{existsSync as dS,mkdirSync as uS,writeFileSync as mS}from"fs";import{dirname as Mr,join as bt}from"path";import{generateSigningKeyPair as gS}from"@cognite/app-sdk/codesigning";import fS from"open";function al(e,t){let n=e.getUTCFullYear(),o=e.getUTCMonth()+t,i=new Date(Date.UTC(n,o+1,0)).getUTCDate(),s=Math.min(e.getUTCDate(),i);return new Date(Date.UTC(n,o,s))}r(al,"addMonthsClamped");function Fr(e){return e.toISOString().slice(0,10)}r(Fr,"formatIsoDate");function cl(e=new Date){return Fr(e)}r(cl,"todayIso");var Bn=Uint8Array.from([48,42,48,5,6,3,43,101,112,3,33,0]),ll=32,pl=44,dl=60,cS="services/app-hosting/src/kotlin/com/cognite/apphosting/signing/public_keys.yaml";function lS(e){let t=e.replace(/-----BEGIN [^-]+-----/g,"").replace(/-----END [^-]+-----/g,"").replace(/\s+/g,"");if(t.length!==pl&&t.length!==dl)throw new Error(`Unexpected Ed25519 public key base64 length: got ${t.length} chars, expected ${pl} (raw) or ${dl} (X.509-wrapped)`);let n=Buffer.from(t,"base64");if(n.length===Bn.length+ll&&n.subarray(0,Bn.length).equals(Bn))return n.subarray(Bn.length).toString("base64");if(n.length===ll)return n.toString("base64");throw new Error(`Unexpected Ed25519 public key length: got ${n.length} bytes, expected 32 (raw) or 44 (X.509-wrapped)`)}r(lS,"pemBodyOneLine");function Lr(e,t=ot,n=new Date){let o=ul(e.issuedAt??cl(n)),i=ul(e.expires),s=lS(e.publicKeyPem),a=" ",c=r((p,d)=>`${a}${t.cyan(p)}${t.dim(":")} ${d}
|
|
303
312
|
`,"kv"),l="";return l+=`
|
|
304
|
-
${t.bold("Add this entry to")} ${t.magenta(
|
|
313
|
+
${t.bold("Add this entry to")} ${t.magenta(cS)} ${t.bold("under")} ${t.cyan("publicKeys:")}
|
|
305
314
|
|
|
306
315
|
`,l+=` ${t.dim("-")} ${t.cyan("kid")}${t.dim(":")} ${t.green(e.kid)}
|
|
307
|
-
`,l+=c("publicKey",t.green(s)),l+=c("email",t.yellow(e.email)),l+=c("roles",`${t.dim("[")}${t.yellow("developer")}${t.dim("]")}`),l+=c("issuedAt",t.green(o)),l+=c("expiresAt",t.green(i)),l+=c("revokedAt",t.dim("null")),l}r(
|
|
316
|
+
`,l+=c("publicKey",t.green(s)),l+=c("email",t.yellow(e.email)),l+=c("roles",`${t.dim("[")}${t.yellow("developer")}${t.dim("]")}`),l+=c("issuedAt",t.green(o)),l+=c("expiresAt",t.green(i)),l+=c("revokedAt",t.dim("null")),l}r(Lr,"renderRegistryYamlBlock");function ul(e){let t=e.trim();if(/^\d{4}-\d{2}-\d{2}$/.test(t))return`${t}T00:00:00Z`;let n=new Date(t);if(Number.isNaN(n.getTime()))throw new Error(`Invalid date '${e}': expected YYYY-MM-DD or ISO-8601 instant`);return n.toISOString()}r(ul,"toIsoInstant");import pS from"clipboardy";function ml(e){return pS.write(e)}r(ml,"copyToClipboard");var gl=12;function hS(e){return{writeFileSync:e.writeFileSync??mS,mkdirSync:e.mkdirSync??uS,existsSync:e.existsSync??dS,generateSigningKeyPair:e.generateSigningKeyPair??gS,encryptStringAsJwe:e.encryptStringAsJwe??Hc,storeKeyInKeychain:e.storeKeyInKeychain??Ya,storeSigningKey:e.storeSigningKey??Za,isOS:e.isOS??(t=>X(t)),promptKid:e.promptKid??_a,promptEmail:e.promptEmail??Ha,promptPassphrase:e.promptPassphrase??Ba,promptConfirmOverwrite:e.promptConfirmOverwrite??Ka,discoverLocalKeys:e.discoverLocalKeys??(()=>kn()),promptZendeskAction:e.promptZendeskAction??ja,openUrl:e.openUrl??(t=>fS(t)),copyToClipboard:e.copyToClipboard??ml}}r(hS,"resolveDeps");function hl(e,t={}){let n=hS(t),o=e.command("keys").description("Manage code signing keys");o.command("generate").description("Generate an Ed25519 keypair for code signing").option("-o, --output <path>","Encrypted private key output path (forces file storage even on macOS)").option("--no-keychain",`Skip the OS credential store (macOS Keychain / Windows Credential Manager) and write a passphrase-encrypted private key under ${D().keysDir} instead`).option("--email <address>","Email address for the registry entry; skips the interactive prompt").option("--kid <identifier>","Signing identity name for the registry (e.g. jsmith-dev-001); skips the interactive prompt").option("--force","Overwrite an existing key without prompting for confirmation").option("--copy-link","Copy the Zendesk registration link to the clipboard without prompting").option("--interactive","Prompt for any required flags that are not supplied",!1).action(i=>vS(i,n)),o.command("list").description("List local signing identities and their storage location").action(()=>yS(n))}r(hl,"registerKeysCommand");async function yS(e){let t=await e.discoverLocalKeys();if(t.length===0){process.stdout.write(`No signing identities found.
|
|
308
317
|
`),process.stdout.write(`Run \`cognite keys generate\` to create one (storage: ${D().keysDir}).
|
|
309
|
-
`);return}let n=["KID","SOURCE","EMAIL"],o=t.map(a=>[a.kid,
|
|
318
|
+
`);return}let n=["KID","SOURCE","EMAIL"],o=t.map(a=>[a.kid,xn(a.source),a.email??"\u2014"]),i=fn(n,o),s=r(a=>St(a,i),"fmt");process.stdout.write(`${s(n)}
|
|
310
319
|
`);for(let a of o)process.stdout.write(`${s(a)}
|
|
311
|
-
`)}r(
|
|
312
|
-
`))}let
|
|
313
|
-
`);return}let x;e.email!==void 0?x=
|
|
320
|
+
`)}r(yS,"handleList");function fl(e,t,n){let o=bt(D().keysDir,`${e}${Fe}`);return n.mkdirSync(Mr(o),{recursive:!0}),n.writeFileSync(o,t),o}r(fl,"writePublicKey");async function SS(e,t,n,o,i,{force:s=!1}={}){let a=o??bt(D().keysDir,`${e}${lr}`);if(i.mkdirSync(Mr(a),{recursive:!0}),!s&&i.existsSync(a))throw new Error(`Refusing to overwrite existing key at ${a}. Delete it first if you really want to regenerate: rm ${a}`);let c=await i.encryptStringAsJwe(t,n);return i.writeFileSync(a,c,{mode:384}),a}r(SS,"writeEncryptedPrivateKey");function wS(e,t,n){let o=[];if(e.kid===void 0)o.push("--kid <identifier> is required. Pass --interactive to enter it interactively.");else try{let i=Ve(e.kid),s=bt(D().keysDir,`${i}${Fe}`);n(s)&&!e.force&&o.push(`Key "${i}" already exists. Use --force to overwrite without prompting.`)}catch(i){o.push(i instanceof Error?i.message:String(i))}if(e.email===void 0)o.push("--email <address> is required. Pass --interactive to enter it interactively.");else try{et(e.email,"--email")}catch(i){o.push(i instanceof Error?i.message:String(i))}return t||o.push("A passphrase is required for encrypted key storage. Pass --interactive to enter it interactively."),o}r(wS,"collectNonInteractiveErrors");async function vS(e,t,n=new Date){let{isOS:o,existsSync:i,mkdirSync:s,writeFileSync:a,generateSigningKeyPair:c,storeKeyInKeychain:l,storeSigningKey:p,promptKid:d,promptEmail:u,promptPassphrase:f,promptConfirmOverwrite:y}=t,g=e.interactive??!1,h=e.keychain!==!1&&!e.output&&(o("macos")||o("windows"));if(!g){let V=wS(e,h,i);if(V.length>0)throw new Error(V.join(`
|
|
321
|
+
`))}let w=Fr(al(n,gl)),S;e.kid!==void 0?S=Ve(e.kid):S=await d();let C=bt(D().keysDir,`${S}${Fe}`),A=i(C);if(A&&!e.force&&!await y(S)){process.stderr.write(`Aborted.
|
|
322
|
+
`);return}let x;e.email!==void 0?x=et(e.email,"--email"):x=await u();let M=h?{kind:"keychain"}:{kind:"file",passphrase:await f()};process.stderr.write(`
|
|
314
323
|
Generating Ed25519 keypair...
|
|
315
324
|
|
|
316
|
-
`);let{privateKeyPem:
|
|
317
|
-
`),process.stderr.write(`Private key: OS credential store (account: ${
|
|
318
|
-
`)}else{let
|
|
319
|
-
`),process.stderr.write(`Private key: ${
|
|
320
|
-
`)}let
|
|
321
|
-
Signing identity (kid): ${I.green(
|
|
322
|
-
`),process.stderr.write(`Expires: ${
|
|
323
|
-
`);let oe={kid:
|
|
325
|
+
`);let{privateKeyPem:K,publicKeyPem:R}=await c(S),Y=b.from(K);if(M.kind==="keychain"){o("macos")?await l(S,Y):await p(S,Y);let V=fl(S,R,t);process.stderr.write(`Public key: ${V}
|
|
326
|
+
`),process.stderr.write(`Private key: OS credential store (account: ${S})
|
|
327
|
+
`)}else{let V=await SS(S,Y,M.passphrase,e.output,t,{force:A}),Gn=fl(S,R,t);process.stderr.write(`Public key: ${Gn}
|
|
328
|
+
`),process.stderr.write(`Private key: ${V} (JWE, AES-256-GCM, PBKDF2-SHA512 x${Tr.toLocaleString()})
|
|
329
|
+
`)}let le=bt(D().keysDir,`${S}${pr}`);s(Mr(le),{recursive:!0}),a(le,JSON.stringify({email:x}));let I=P(process.stderr);process.stderr.write(`
|
|
330
|
+
Signing identity (kid): ${I.green(S)}
|
|
331
|
+
`),process.stderr.write(`Expires: ${w} (${gl} months from today)
|
|
332
|
+
`);let oe={kid:S,publicKeyPem:R,email:x,expires:w};g||(process.stderr.write(`
|
|
324
333
|
Key registration data:
|
|
325
334
|
|
|
326
|
-
`),process.stderr.write(
|
|
335
|
+
`),process.stderr.write(Lr(oe,I,n)));let F=tl(S,x,w,Lr(oe,ot,n));process.stderr.write(`
|
|
327
336
|
${I.bold("Next:")}
|
|
328
337
|
`),process.stderr.write(` 1. Register your signing key \u2014 submit this pre-filled Zendesk request:
|
|
329
338
|
`);let re;if(e.copyLink?re="clipboard":g?re=await t.promptZendeskAction():re=null,re==="browser")try{await t.openUrl(F),process.stderr.write(` Opening in browser...
|
|
330
339
|
`)}catch{process.stderr.write(` URL: ${F}
|
|
331
|
-
`)}else if(re==="clipboard"){let
|
|
340
|
+
`)}else if(re==="clipboard"){let V=!1;try{await t.copyToClipboard(F),V=!0}catch{}process.stderr.write(V&&!e.copyLink?` Link copied to clipboard.
|
|
332
341
|
`:` URL: ${F}
|
|
333
342
|
`)}else process.stderr.write(` URL: ${F}
|
|
334
343
|
`);process.stderr.write(`
|
|
335
344
|
2. Once your key is approved, sign your Dune app:
|
|
336
|
-
`),process.stderr.write(` ${I.cyan(`cognite sign -s ${
|
|
337
|
-
`)}r(
|
|
338
|
-
`);return
|
|
339
|
-
${
|
|
340
|
-
`)},"onOutdated")})});
|
|
341
|
-
Cancelled.`),process.exit(130)),(!(e instanceof m)||e.shouldReport)&&(await
|
|
345
|
+
`),process.stderr.write(` ${I.cyan(`cognite sign -s ${S}`)}
|
|
346
|
+
`)}r(vS,"handleGenerate");function yl(e){return ol(e),rl(e),il(e),sl(e),hl(e),e}r(yl,"registerCommands");import{homedir as CS,userInfo as AS}from"os";var ES=CS(),bS=(()=>{try{return AS().username}catch{return""}})();function tt(e,t=ES){if(!t||t==="/")return e;let n=e.replaceAll(t,"~"),o=t.replaceAll("\\","/");return o!==t&&(n=n.replaceAll(o,"~")),n=n.replace(/(?<![A-Za-z0-9_])[A-Za-z]:[/\\]Users[/\\][^\s/\\]+(?=[/\\]|$)/g,"~"),n=n.replace(/(?<![A-Za-z0-9_])\/(?:Users|home)\/[^\s/]+(?=[/\\]|$)/g,"~"),n}r(tt,"redactHomedir");function xS(e,t=bS){if(!t||t.length<3)return e;let n=t.replace(/[.*+?^${}()|[\]\\]/g,"\\$&"),o=new RegExp("(^|[\\/\\s:])"+n+"(?=[\\/\\s:.@]|$)","g");return e.replace(o,"$1<user>")}r(xS,"redactUsername");var kS=/(['"]?(?:access_token|accessToken|client_secret|clientSecret|refresh_token|refreshToken|password|token|passphrase)['"]?\s*:\s*)(?:"(?:\\.|[^\\"])*"|'(?:\\.|[^\\'])*')/gi;function Sl(e){return e.replace(kS,(t,n)=>{let o=t[n.length];return`${n}${o}[REDACTED]${o}`})}r(Sl,"redactCredentials");var PS=1e3,TS="https://0a118cb02e3be57b1838bcfb5783a2bf@o4508040730968064.ingest.de.sentry.io/4510719268290640",RS={captureError:r(async()=>{},"captureError"),flush:r(async()=>{},"flush")};function IS(e){return e.packageName&&e.cliVersion?`${e.packageName}@${e.cliVersion}`:e.cliVersion??"unknown"}r(IS,"buildRelease");var DS="192.0.2.0";function $S(e){return e?.map(t=>({...t,...t.filename!==void 0&&{filename:tt(t.filename)},...t.abs_path!==void 0&&{abs_path:tt(t.abs_path)},...t.module!==void 0&&{module:tt(t.module)}}))}r($S,"scrubStackFrames");function Kn(e){return Sl(xS(tt(e)))}r(Kn,"redactPii");function OS(e){let t={...e.user,email:void 0,username:void 0,ip_address:DS,id:void 0},n=e.exception?.values?.map(s=>({...s,value:s.value!==void 0?Kn(s.value):s.value,...s.stacktrace!==void 0&&{stacktrace:{...s.stacktrace,frames:$S(s.stacktrace.frames)}}})),o=e.contexts?.cli,i=o!==void 0?Object.fromEntries(Object.entries(o).map(([s,a])=>[s,typeof a=="string"?Kn(a):a])):void 0;return{...e,message:e.message!==void 0?Kn(e.message):e.message,...typeof e.culprit=="string"&&{culprit:Kn(e.culprit)},user:t,server_name:void 0,...n!==void 0&&{exception:{...e.exception,values:n}},...i!==void 0&&{contexts:{...e.contexts,cli:i}}}}r(OS,"scrubPii");function wl(e={}){let t=e.env??process.env;if(yo(t))return RS;let n=IS(e),o="production",i=null,s=null;function a(){return{dsn:TS,release:n,environment:o,defaultIntegrations:!1,integrations:[],sendDefaultPii:!1,enableLogs:!1,initialScope:{tags:{component:"cli",applicationId:pt},contexts:{cli:{applicationId:pt,node:process.version,platform:process.platform}}},beforeSend:OS}}r(a,"buildInitOptions");async function c(){return i||(s||(s=(async()=>{try{let l=e.sdk??await import("@sentry/node");return l.init(a()),i=l,l}catch{return null}})()),s)}return r(c,"ensureSdk"),{async captureError(l,p){try{let d=await c();if(!d)return;d.captureException(l,FS(l,p))}catch{}},async flush(l=PS){try{if(!i)return;await i.flush(l)}catch{}}}}r(wl,"createErrorReporter");function FS(e,t){let n={level:"fatal"},o={applicationId:pt,node:process.version,platform:process.platform};if(t?.command&&(n.tags={command:t.command},o.command=t.command),ue(e)&&(e.hint&&(o.hint=e.hint),e.helpUrl&&(o.helpUrl=e.helpUrl),o.shouldReport=e.shouldReport),n.contexts={cli:o},kt(e)&&(n.contexts.http={url:e.requestUrl!==void 0?tt(e.requestUrl):void 0,status_code:e.httpStatusCode},e.responseBody!==void 0)){let i=typeof e.responseBody=="string"?e.responseBody:JSON.stringify(e.responseBody);n.extra={responseBody:Sl(tt(i))}}return n}r(FS,"buildCaptureContext");import{mkdirSync as LS,readFileSync as MS,writeFileSync as US}from"fs";import{homedir as NS}from"os";import{resolve as Vn}from"path";import{debuglog as _S}from"util";import{lt as jS,parse as vl}from"semver";var HS="https://registry.npmjs.org/@cognite/cli/latest",BS=1500,Cl="upgrade-check.json",Al=Vn(process.env.XDG_CACHE_HOME||Vn(NS(),".cache"),"@cognite","cli"),Ur=_S("cognite-flows");function KS(e,t){return!e||!t||!vl(e)||!vl(t)?!1:jS(e,t)}r(KS,"isOutdated");async function VS({timeout:e=BS,registryUrl:t=HS,fetchImpl:n=globalThis.fetch}={}){if(typeof n!="function")return null;try{let o=await n(t,{signal:AbortSignal.timeout(e)});if(!o?.ok)return null;let i=await o.json();return typeof i?.version=="string"?i.version:null}catch(o){return Ur("fetchLatestVersion failed (%s): %O",t,o),null}}r(VS,"fetchLatestVersion");function GS(e=Al,t=864e5){try{let n=MS(Vn(e,Cl),"utf-8"),o=JSON.parse(n);return typeof o.latest!="string"||typeof o.fetchedAt!="number"||Date.now()-o.fetchedAt>t?null:{latest:o.latest,fetchedAt:o.fetchedAt}}catch(n){return Ur("readUpgradeCheckCache failed (%s): %O",e,n),null}}r(GS,"readUpgradeCheckCache");function YS(e,t){try{LS(e,{recursive:!0});let n={latest:t,fetchedAt:Date.now()};US(Vn(e,Cl),JSON.stringify(n))}catch(n){Ur("writeUpgradeCheckCache failed (%s): %O",e,n)}}r(YS,"writeUpgradeCheckCache");async function zS({cacheDir:e=Al,...t}={}){let n=await VS(t);n&&YS(e,n)}r(zS,"startBackgroundUpgradeCheck");function El(e,{onOutdated:t,cacheDir:n,...o}={}){let i=GS(n);if(i){KS(e,i.latest)&&t?.(e,i.latest);return}zS({cacheDir:n,...o})}r(El,"preActionUpgradeCheck");import{default as FF,chalkStderr as bl}from"chalk";function xl(e,t){let n=[`\u26A0 Update available: ${e} -> ${t}`," Run npx @cognite/cli@latest"],o=Math.max(...n.map(c=>[...c].length))+2,i="\u2500".repeat(o),s=r(c=>`\u2502 ${c}${" ".repeat(o-1-[...c].length)}\u2502`,"pad"),a=[`\u250C${i}\u2510`,...n.map(s),`\u2514${i}\u2518`].join(`
|
|
347
|
+
`);return bl.bold.yellow(a)}r(xl,"formatUpgradeWarning");function WS(e){return e instanceof Error&&"code"in e&&typeof e.code=="string"&&e.code==="DEP0040"}r(WS,"isDep0040Warning");var _r=process,ZS=_r.emit.bind(_r);_r.emit=function(e,...t){return e==="warning"&&WS(t[0])?!1:ZS(e,...t)};Dt();var nt=new JS;nt.name("cognite").description("Build and deploy React apps and Atlas agents to Cognite Data Fusion").version("1.10.0-alpha.2").showHelpAfterError().configureOutput({writeOut:r(e=>qS(1,e),"writeOut")});nt.hook("preAction",()=>{El("1.10.0-alpha.2",{onOutdated:r((e,t)=>{console.warn(`
|
|
348
|
+
${xl(e,t)}
|
|
349
|
+
`)},"onOutdated")})});yl(nt);var jr=jt({packageName:"@cognite/cli",cliVersion:"1.10.0-alpha.2"}),kl=wl({packageName:"@cognite/cli",cliVersion:"1.10.0-alpha.2"});ni(nt,jr);Ea(nt,{telemetry:jr});var Nr=process.argv.slice(2);nt.parseAsync(Nr,{from:"user"}).catch(async e=>{await oi(jr,Nr),so(e)&&(console.error(`
|
|
350
|
+
Cancelled.`),process.exit(130)),(!(e instanceof m)||e.shouldReport)&&(await kl.captureError(e,{command:io(Nr)}),await kl.flush());let t=e instanceof Error?e.message:String(e);console.error(`\u274C ${t}`),e instanceof m&&(e.hint||e.helpUrl)&&(console.error(""),e.hint&&console.error(`\u{1F4A1} ${e.hint}`),e.helpUrl&&console.error(`\u{1F4DA} ${e.helpUrl}`)),process.exit(1)});
|