@cognite/cli 1.3.2-alpha.53 → 1.3.2-alpha.winurl1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/dist/cli/cli.js CHANGED
@@ -1,16 +1,13 @@
1
1
  #!/usr/bin/env node
2
- import{a as o,e as nn}from"../chunk-VTE66IK5.js";import{writeSync as $c}from"fs";import{Command as Tc}from"commander";import{createReadStream as $i,existsSync as Ti,readFileSync as Ri,writeFileSync as Fi}from"fs";import{basename as Oi,dirname as Li,join as Ni,resolve as Le}from"path";import{hashDevSignature as _i,parseScope as ji,signBundle as Ki,validateScopes as Vi}from"@cognite/app-sdk/codesigning";import{existsSync as qo,readFileSync as Qo}from"fs";import{resolve as Jo}from"path";import{array as No,boolean as _o,check as rn,forward as on,literal as jo,maxLength as Ko,minLength as Vo,nonEmpty as se,object as sn,optional as J,picklist as Mo,pipe as G,safeParse as Uo,string as N,url as Go}from"valibot";var it=G(N(),se("must not be empty")),st=G(N(),se("must not be empty"),Ko(256,"must be 256 characters or fewer")),at=G(N(),se("must not be empty"),Go("must be a valid URL")),pt=G(N(),se("must not be empty")),ct=G(N(),se("must not be empty")),Ho=G(sn({org:pt,project:ct,baseUrl:at,deployClientId:J(N(),""),deploySecretName:J(N(),""),published:J(_o(),!1),idpType:J(Mo(["cdf","entra_id"]),"cdf"),tenantId:J(N())}),on(rn(e=>e.idpType!=="entra_id"||!!e.tenantId,'must be set when idpType is "entra_id"'),["tenantId"]),on(rn(e=>!e.deployClientId||!!e.deploySecretName,"must be set when deployClientId is set"),["deploySecretName"])),Bo=sn({name:it,externalId:st,versionTag:G(N(),se("must not be empty")),description:J(N(),""),deployments:G(No(Ho),Vo(1,"must contain at least one deployment")),infra:J(jo("appsApi"))});function lt(e){let t=Uo(Bo,e);if(t.success)return t.output;let n=t.issues[0],r=n.path?.map(s=>s.key).join(".")??"",i=r?`"${r}" `:"";throw new Error(`app.json: ${i}${n.message}`)}o(lt,"validateAppConfig");function k(e,t={}){let{validator:n=lt,existsSync:r=qo,readFileSync:i=Qo}=t,s=Jo(e,"app.json");if(!r(s))throw new Error("No app.json found in current directory. Make sure you're running this command from your app's root directory.");let a=i(s,"utf-8"),p;try{p=JSON.parse(a)}catch{throw new Error("Failed to parse app.json \u2014 check that it contains valid JSON.")}return n(p)}o(k,"loadAppConfig");import{existsSync as Ai,readFileSync as Di}from"fs";import{execFile as Yo}from"child_process";import{promisify as Wo}from"util";import{platform as zo}from"os";function z(e,t={}){let{platform:n=zo}=t;switch(n()){case"darwin":return e==="macos";case"win32":return e==="windows";default:return e==="other"}}o(z,"isOS");var pn="cognite-flows",Zo=Wo(Yo),cn=o((e,t)=>Zo(e,t),"defaultExecFile"),Xo=-25300,ei=Xo&255;function ti(e){if(!(e instanceof Error)||!("code"in e)||e.code!==ei)return!1;let t="stderr"in e?String(e.stderr):"";return/could not be found/i.test(t)||t===""}o(ti,"isKeychainNotFoundError");async function ln(e,t,n={}){if(!z("macos",n))throw new Error("Keychain storage is only supported on macOS");let{execFile:r=cn}=n;await r("security",["add-generic-password","-a",e,"-s",pn,"-w",Buffer.from(t,"utf-8").toString("base64"),"-U"])}o(ln,"storeKeyInKeychain");async function $e(e,t={}){if(!z("macos",t))return null;let{execFile:n=cn}=t;try{let{stdout:r}=await n("security",["find-generic-password","-a",e,"-s",pn,"-w"]);return Buffer.from(r.trim(),"base64").toString("utf-8")}catch(r){if(ti(r))return null;throw r}}o($e,"readKeyFromKeychain");import{pbkdf2 as oi,randomBytes as ii}from"crypto";import{promisify as si}from"util";import{CompactEncrypt as ai,base64url as dn,compactDecrypt as pi}from"jose";var ni=new TextEncoder,ri=new TextDecoder,dt={encode:o(e=>ni.encode(e),"encode"),decode:o(e=>ri.decode(e),"decode")};var ci=si(oi),gt=6e5,li="sha512",mt="PBKDF2-HMAC-SHA512",ut=16,Te="A256GCM",di=32,Re=2e6;async function mn(e,t,n){return await ci(e,t,n,di,li)}o(mn,"deriveKey");async function un(e,t,n=gt){if(!Number.isInteger(n)||n<1||n>Re)throw new Error(`Invalid iterations: must be an integer between 1 and ${Re}`);let r=ii(ut),i=await mn(t,r,n);return await new ai(dt.encode(e)).setProtectedHeader({alg:"dir",enc:Te,kdf:mt,kdf_iter:n,kdf_salt:dn.encode(r)}).encrypt(i)}o(un,"encryptStringAsJwe");async function gn(e,t){let{plaintext:n}=await pi(e,async r=>{if(!e.length)throw new Error("Unexpected JWE empty value");if(t.length<15)throw new Error(`Invalid passphrase it should be at least ${15} but got ${t.length}`);if(r.alg!=="dir")throw new Error(`Unexpected JWE alg "${String(r.alg)}"; only "dir" is supported`);if(r.enc!==Te)throw new Error(`Unexpected JWE enc "${String(r.enc)}"; only "${Te}" is supported`);if(r.kdf!==mt)throw new Error(`Unexpected KDF "${String(r.kdf)}"; only "${mt}" is supported`);let i=Number(r.kdf_iter);if(!Number.isInteger(i)||i<1||i>Re)throw new Error(`Invalid kdf_iter in JWE header: must be an integer between 1 and ${Re}`);if(typeof r.kdf_salt!="string")throw new Error("Missing kdf_salt in JWE header");let s=dn.decode(r.kdf_salt);if(s.length!==ut)throw new Error(`Invalid kdf_salt length in JWE header: expected ${ut} bytes, got ${s.length}`);return await mn(t,s,i)},{keyManagementAlgorithms:["dir"],contentEncryptionAlgorithms:[Te]});return dt.decode(n)}o(gn,"decryptJweAsString");function mi(e){let t=e.trim();return t.startsWith("eyJ")&&t.split(".").length===5}o(mi,"isJweCompact");var fn=mi;import{existsSync as gi,readdirSync as fi,readFileSync as yi}from"fs";import{join as ft}from"path";import{homedir as ui}from"os";import{join as yn}from"path";function F(e={}){let{env:t=process.env,homedir:n=ui}=e,r=t.COGNITE_CLI_HOME?.trim()||yn(n(),".cognite-cli");return{home:r,keysDir:yn(r,"keys")}}o(F,"getConfig");var ue=".pub.pem",yt=".key.jwe",ht=".meta.json";function Fe(e){switch(e.kind){case"keychain":return"Keychain";case"encrypted-file":return e.path;case"public-only":return"public-only (private key missing)"}}o(Fe,"formatLocalKeySource");function hi(e){return{existsSync:e.existsSync??gi,readdirSync:e.readdirSync??fi,readFileSync:e.readFileSync??((t,n)=>yi(t,n)),isOS:e.isOS??(t=>z(t)),readKeyFromKeychain:e.readKeyFromKeychain??(t=>$e(t))}}o(hi,"resolveDeps");function wi(e){try{let t=JSON.parse(e);if(typeof t=="object"&&t!==null&&!Array.isArray(t)&&"email"in t&&typeof t.email=="string")return t.email}catch{}}o(wi,"readEmailFromMeta");function Si(e,t){return t.existsSync(e)?t.readdirSync(e).filter(n=>n.endsWith(ue)):[]}o(Si,"publicKeyEntries");function vi(e){return e.slice(0,-ue.length)}o(vi,"kidFromPublicKeyFilename");async function Ci(e,t,n){if(n.isOS("macos")&&await n.readKeyFromKeychain(e).catch(()=>null)!==null)return{kind:"keychain"};let r=ft(t,`${e}${yt}`);return n.existsSync(r)?{kind:"encrypted-file",path:r}:{kind:"public-only"}}o(Ci,"resolveSource");async function Oe(e=F().keysDir,t={}){let n=hi(t),r=new Set,i=Si(e,n).flatMap(s=>{let a=vi(s);return!a||r.has(a)?[]:(r.add(a),[{kid:a,entry:s}])});return Promise.all(i.map(async({kid:s,entry:a})=>{let p=await Ci(s,e,n),c=ft(e,`${s}${ht}`),m;try{m=wi(n.readFileSync(c,"utf8"))}catch{}return{kid:s,source:p,publicKeyPath:ft(e,a),email:m}}))}o(Oe,"discoverLocalKeys");import ki from"enquirer";async function xi(e){return ki.prompt(e)}o(xi,"defaultPrompt");async function hn(e,t={}){let{prompt:n=xi}=t,{passphrase:r}=await n({type:"password",name:"passphrase",message:e});return r}o(hn,"promptPassphrase");import Ei from"enquirer";import{statSync as Pi}from"fs";function wn(e,t=Pi){return e.map(n=>({key:n,mtime:t(n.publicKeyPath).mtimeMs})).sort((n,r)=>r.mtime-n.mtime).map(({key:n})=>n)}o(wn,"sortByMtime");async function bi(e){return Ei.prompt(e)}o(bi,"defaultPrompt");async function Sn(e,t={}){if(e.length===1)return e[0];let{prompt:n=bi,sortByMtime:r=wn}=t,i=r(e),s=i[0],{choice:a}=await n({type:"select",name:"choice",message:"Select signing identity",choices:[{name:"latest",message:`Use latest: ${s.kid}`},{name:"pick",message:"Pick from list"}]});if(a==="latest")return s;if(a==="pick"){let{kid:p}=await n({type:"select",name:"kid",message:"Select signing identity",choices:i.map(m=>({name:m.kid,message:[m.kid,m.email,Fe(m.source)].filter(Boolean).join(" \u2014 ")}))}),c=i.find(m=>m.kid===p);if(!c)throw new Error("No signing identity selected");return c}else throw new Error(`Unexpected choice: "${a}"`)}o(Sn,"promptSigningIdentity");function Ii(e){return{existsSync:e.existsSync??Ai,readFileSync:e.readFileSync??((t,n)=>Di(t,n)),readKeyFromKeychain:e.readKeyFromKeychain??$e,decryptJweAsString:e.decryptJweAsString??gn,discoverLocalKeys:e.discoverLocalKeys??Oe,keysDir:e.keysDir??F().keysDir,promptPassphrase:e.promptPassphrase??hn,promptSigningIdentity:e.promptSigningIdentity??Sn}}o(Ii,"resolveDeps");async function vn(e,t={}){let n=Ii(t);if(e.keyPath){if(!n.existsSync(e.keyPath))throw new Error(`Key file not found: ${e.keyPath}`);if(!e.kid)throw new Error("--signing-identity <kid> is required when using --key");let s=n.readFileSync(e.keyPath,"utf-8").trim();if(fn(s)){let a=await n.promptPassphrase(`Passphrase for key ${e.kid}: `);return{privateKeyPem:await n.decryptJweAsString(s,a),kid:e.kid}}return{privateKeyPem:s,kid:e.kid}}let r=await n.discoverLocalKeys(n.keysDir);if(r.length===0)throw new Error("No signing keys found. Run `cognite keys generate` or pass --key.");let i=e.kid?r.find(s=>s.kid===e.kid):await n.promptSigningIdentity(r);if(!i)throw new Error(`No key found with kid "${e.kid}"`);switch(i.source.kind){case"keychain":{let s=await n.readKeyFromKeychain(i.kid);if(!s)throw new Error(`Key "${i.kid}" not found in Keychain`);return{privateKeyPem:s,kid:i.kid}}case"encrypted-file":{let s=await n.promptPassphrase(`Passphrase for key ${i.kid}: `);return{privateKeyPem:await n.decryptJweAsString(n.readFileSync(i.source.path,"utf-8"),s),kid:i.kid}}case"public-only":throw new Error(`Key "${i.kid}" has no private key on this machine (public-only).`)}}o(vn,"resolvePrivateKey");function Mi(e){let t=$i(e);return new ReadableStream({start(n){t.on("data",r=>n.enqueue(new Uint8Array(r))),t.on("end",()=>n.close()),t.on("error",r=>n.error(r))},cancel(){t.destroy()}})}o(Mi,"createWebStreamFromFile");function Ui(e){return{existsSync:e.existsSync??Ti,readFileSync:e.readFileSync??((t,n)=>Ri(t,n)),writeFileSync:e.writeFileSync??Fi,createBundleStream:e.createBundleStream??Mi,signBundle:e.signBundle??Ki,hashDevSignature:e.hashDevSignature??_i,parseScope:e.parseScope??ji,validateScopes:e.validateScopes??Vi,loadAppConfig:e.loadAppConfig??k,resolvePrivateKey:e.resolvePrivateKey??(t=>vn(t))}}o(Ui,"resolveDeps");async function Cn(e,t,n={},r=process.cwd()){let i=Ui(n),s=Le(r,e);if(!i.existsSync(s))throw new Error(`Bundle not found: ${s}`);let a=t.appid,p=t.appVersion,c=[],m=!a||!p||!(t.scope&&t.scope.length>0),l=null;if(m)try{l=i.loadAppConfig(r)}catch(w){if(!(w instanceof Error?w.message:"").includes("No app.json found"))throw w}if(a=a??l?.externalId,p=p??l?.versionTag,t.scope&&t.scope.length>0?c=t.scope.map(i.parseScope):l&&(c=l.deployments.map(w=>({org:w.org,project:w.project}))),!a)throw new Error("--appid is required (or set externalId in app.json)");if(!p)throw new Error("--app-version is required (or set versionTag in app.json)");let d=i.validateScopes(c);if(d.length>0)throw new Error(`Invalid scopes:
3
- ${d.join(`
4
- `)}`);let{privateKeyPem:g,kid:f}=await i.resolvePrivateKey({keyPath:t.key?Le(r,t.key):void 0,kid:t.signingIdentity}),h;if(t.devSig){let w=Le(r,t.devSig);if(!i.existsSync(w))throw new Error(`Dev signature file not found: ${w}`);let v=i.readFileSync(w,"utf-8").trim();h=await i.hashDevSignature(v)}let S=i.createBundleStream(s),u=await i.signBundle({privateKeyPem:g,kid:f,appId:a,version:p,bundleStream:S,role:t.asCertifier?"certifier":"developer",scopes:c,devSignatureSha256:h}),y=t.output?Le(r,t.output):Ni(Li(s),`${Oi(s)}.${t.asCertifier?"cert":"dev"}.sig`);i.writeFileSync(y,u.token,"utf-8"),console.log(`\u2705 Signed: ${y}`),console.log(` kid: ${u.kid}`),console.log(` bundle: ${u.payload.bundleSha256}`),console.log(` scopes: ${u.payload.scopes.map(w=>`${w.org}/${w.project}`).join(", ")}`),t.verbose&&console.log(`
5
- Payload:`,JSON.stringify(u.payload,null,2))}o(Cn,"handleSign");function kn(e,t={}){return e.command("sign [bundle]").description("Sign an app bundle, producing a compact JWS signature file").option("--key <path>","Private key PEM file path").option("-s, --signing-identity <kid>","Key ID for Keychain or file lookup").option("--appid <id>","Application ID (default: externalId from app.json)").option("-i, --identifier <id>","Alias for --appid").option("--app-version <version>","App version (default: versionTag from app.json)").option("--scope <org/project...>","Deployment scope(s) (default: deployments from app.json)").option("-r, --requirements <org/project...>","Alias for --scope").option("-o, --output <path>","Output file path (default: <bundle>.<dev|cert>.sig)").option("-v, --verbose","Display full payload after signing").option("--as-certifier","Counter-sign a developer signature as certifier").action((n,r)=>{let i=n??"app.zip",s={...r,appid:r.identifier??r.appid,scope:r.requirements??r.scope};return Cn(i,s,t)})}o(kn,"registerSignCommand");var xn="https://docs.cognite.com/cdf/access/";function H(e){return e!==null&&typeof e=="object"}o(H,"isRecord");function ge(e){return e instanceof Error&&"status"in e&&typeof e.status=="number"}o(ge,"isHttpError");function Gi(e){switch(e){case 401:return`Your credentials are invalid or expired. Check your client ID and secret.
6
- See: ${xn}`;case 403:return`You don't have the required CDF capabilities. Please contact your CDF admin.
7
- See: ${xn}`;default:return}}o(Gi,"httpStatusHint");function W(e){let t=e instanceof Error?e:new Error(String(e));if(!ge(t))return null;let n=Gi(t.status);return n?Object.assign(new Error(`${t.message}
8
- ${n}`),{cause:t}):null}o(W,"enrichedHttpError");function Hi(e){if(!H(e))return null;let t=e.missing;if(Array.isArray(t))return t;let n=e.data;if(H(n)){let r=n.error;if(H(r)&&Array.isArray(r.missing))return r.missing;if(Array.isArray(n.missing))return n.missing}return null}o(Hi,"findMissingArray");function Bi(e,t){if(!ge(e)||e.status!==400)return!1;let n=Hi(e);return n?n.some(r=>H(r)&&typeof r.externalId=="string"&&t.includes(r.externalId)):!1}o(Bi,"isMissingExternalIdError");function wt(e,t){return ge(e)&&e.status===404||Bi(e,t)}o(wt,"isNotFoundError");var En=["DRAFT","PUBLISHED","DEPRECATED","ARCHIVED"],bn=["ACTIVE","PREVIEW"],St=class St extends Error{constructor(t,n){super(`Version ${n} of app ${t} not found`),this.name="AppVersionNotFoundError",this.appExternalId=t,this.version=n}};o(St,"AppVersionNotFoundError");var _=St;function An(e,t){return e.includes(t)}o(An,"includesValue");function qi(e){return An(En,e)}o(qi,"isAppVersionLifecycleState");function Qi(e){return An(bn,e)}o(Qi,"isAppVersionAlias");function Ji(e){return typeof e.version=="string"&&qi(e.lifecycleState)&&typeof e.entrypoint=="string"&&typeof e.createdTime=="number"&&typeof e.createdBy=="string"&&typeof e.appExternalId=="string"&&(e.alias===void 0||Qi(e.alias))&&(e.comment===void 0||typeof e.comment=="string")}o(Ji,"isAppVersion");function Pn(e){if(!H(e))throw new Error("Invalid version response: not an object");if(!Ji(e))throw new Error("Invalid version response: missing or malformed fields");return e}o(Pn,"parseAppVersion");var vt=class vt{constructor(t){this.client=t}get appsBasePath(){return`/api/v1/projects/${encodeURIComponent(this.client.project)}/apphosting/apps`}async createApp(t,n,r){try{await this.client.post(this.appsBasePath,{data:{items:[{externalId:t,name:n,description:r}]}})}catch(i){throw W(i)??i}}async uploadVersion(t,n,r,i,s="index.html"){console.log(`\u{1F4E4} Uploading version ${n}...`);let a=new FormData;a.append("file",new Blob([new Uint8Array(r)]),i),a.append("version",n),a.append("entryPath",s);let p=encodeURIComponent(t),c=`${this.appsBasePath}/${p}/versions`,m=await this.client.authenticate(),l=`${this.client.getBaseUrl()}${c}`,d=new AbortController,g=setTimeout(()=>d.abort(),300*1e3),f;try{f=await fetch(l,{method:"POST",headers:{Authorization:`Bearer ${m}`},body:a,signal:d.signal})}catch(h){throw h instanceof Error&&h.name==="AbortError"?new Error("Upload timed out after 5 minutes"):h}finally{clearTimeout(g)}if(!f.ok){let h=await f.text(),S=h;try{let v=JSON.parse(h);if(H(v)){let x=v.error;if(typeof x=="string")S=x;else if(H(x)){let E=x.message,C=x.code;S=typeof E=="string"?E:C!=null?`Unknown error (code: ${C})`:h}else{let E=v.message;S=typeof E=="string"?E:h}}}catch{}let u=f.headers.get("x-request-id"),y=u?` | X-Request-ID: ${u}`:"",w=Object.assign(new Error(`Upload failed: ${f.status} \u2014 ${S}${y}`),{status:f.status});throw W(w)??w}console.log(`\u2705 Version ${n} uploaded`)}async getVersion(t,n){let r=encodeURIComponent(t),i=encodeURIComponent(n),s=`${this.appsBasePath}/${r}/versions/${i}`;try{let a=await this.client.get(s);return Pn(a.data)}catch(a){throw wt(a,[t,n])?new _(t,n):W(a)??a}}async getActiveVersion(t){let n=encodeURIComponent(t),r=`${this.appsBasePath}/${n}/active`;try{let i=await this.client.get(r);return Pn(i.data)}catch(i){if(wt(i,[t]))return null;throw W(i)??i}}async updateVersions(t,n){let r=encodeURIComponent(t),i=`${this.appsBasePath}/${r}/versions/update`;try{await this.client.post(i,{data:{items:n}})}catch(s){throw W(s)??s}}async submitSignatures(t,n,r){let i=encodeURIComponent(t),s=encodeURIComponent(n),a=`${this.appsBasePath}/${i}/versions/${s}/signatures`;try{await this.client.post(a,{data:{items:r}})}catch(p){throw W(p)??p}}};o(vt,"AppHostingApi");var Ne=vt;var Ct=class Ct{constructor(t){this.api=new Ne(t)}getVersion(t,n){return this.api.getVersion(t,n)}uploadVersion(t,n,r,i,s){return this.api.uploadVersion(t,n,r,i,s)}async ensureApp(t,n,r){console.log("\u{1F50D} Ensuring app exists...");try{await this.api.createApp(t,n,r),console.log(`\u2705 App '${t}' created`)}catch(i){if(ge(i)&&i.status===409){console.log(`\u2705 App '${t}' already exists`);return}throw i}}async submitSignatures(t,n,r){r.length!==0&&(console.log(`\u{1F50F} Submitting ${r.length} signature${r.length===1?"":"s"} for version ${n}...`),await this.api.submitSignatures(t,n,r),console.log("\u2705 Signatures stored"))}async publishVersion(t,n){await this.api.updateVersions(t,[{version:n,update:{lifecycleState:{set:"PUBLISHED"}}}])}async publishAndActivate(t,n){console.log(`\u{1F680} Publishing and activating version ${n}...`),await this.api.updateVersions(t,[{version:n,update:{lifecycleState:{set:"PUBLISHED"},alias:{set:"ACTIVE"}}}]),console.log(`\u2705 Version ${n} is now PUBLISHED and ACTIVE`)}getActiveVersion(t){return this.api.getActiveVersion(t)}async deactivateVersion(t,n){await this.api.updateVersions(t,[{version:n,update:{alias:{setNull:!0}}}])}async activateVersion(t,n){let r=null;try{r=await this.api.getActiveVersion(t)}catch{r=null}let i=r&&r.version!==n?r.version:void 0;return await this.api.updateVersions(t,[{version:n,update:{alias:{set:"ACTIVE"}}}]),{supersededVersion:i}}async deploy(t,n,r,i,s,a,p=!1){console.log(`
2
+ import{a as o,e as gt}from"../chunk-A5ASLC6T.js";import{writeSync as ca}from"fs";import{Command as la}from"commander";import{createReadStream as Go,existsSync as Jo,readFileSync as Yo,writeFileSync as qo}from"fs";import{basename as zo,dirname as Wo,join as Xo,resolve as he}from"path";import{hashDevSignature as Zo,parseScope as Qo,signBundle as ei,validateScopes as ti}from"@cognite/app-sdk/codesigning";var ft="https://docs.cognite.com/cdf/access/";function K(e){return e!==null&&typeof e=="object"}o(K,"isRecord");function X(e){return e instanceof Error&&"status"in e&&typeof e.status=="number"}o(X,"isHttpError");function hr(e){switch(e){case 401:return`Your credentials are invalid or expired. Check your client ID and secret.
3
+ See: ${ft}`;case 403:return`You don't have the required CDF capabilities. Please contact your CDF admin.
4
+ See: ${ft}`;default:return}}o(hr,"httpStatusHint");function M(e){let t=e instanceof Error?e:new Error(String(e));if(!X(t))return null;let n=hr(t.status);return n?Object.assign(new Error(`${t.message}
5
+ ${n}`),{cause:t}):null}o(M,"enrichedHttpError");function Sr(e){if(!K(e))return null;let t=e.missing;if(Array.isArray(t))return t;let n=e.data;if(K(n)){let r=n.error;if(K(r)&&Array.isArray(r.missing))return r.missing;if(Array.isArray(n.missing))return n.missing}return null}o(Sr,"findMissingArray");function wr(e,t){if(!X(e)||e.status!==400)return!1;let n=Sr(e);return n?n.some(r=>K(r)&&typeof r.externalId=="string"&&t.includes(r.externalId)):!1}o(wr,"isMissingExternalIdError");function Ie(e,t){return X(e)&&e.status===404||wr(e,t)}o(Ie,"isNotFoundError");var ht=["DRAFT","PUBLISHED","DEPRECATED","ARCHIVED"],St=["ACTIVE","PREVIEW"],$e=class $e extends Error{constructor(t,n){super(`Version ${n} of app ${t} not found`),this.name="AppVersionNotFoundError",this.appExternalId=t,this.version=n}};o($e,"AppVersionNotFoundError");var T=$e;function wt(e,t){return e.includes(t)}o(wt,"includesValue");function vr(e){return wt(ht,e)}o(vr,"isAppVersionLifecycleState");function Cr(e){return wt(St,e)}o(Cr,"isAppVersionAlias");function Pr(e){return typeof e.version=="string"&&vr(e.lifecycleState)&&typeof e.entrypoint=="string"&&typeof e.createdTime=="number"&&typeof e.createdBy=="string"&&typeof e.appExternalId=="string"&&(e.alias===void 0||Cr(e.alias))&&(e.comment===void 0||typeof e.comment=="string")}o(Pr,"isAppVersion");function yt(e){if(!K(e))throw new Error("Invalid version response: not an object");if(!Pr(e))throw new Error("Invalid version response: missing or malformed fields");return e}o(yt,"parseAppVersion");var Fe=class Fe{constructor(t){this.client=t}get appsBasePath(){return`/api/v1/projects/${encodeURIComponent(this.client.project)}/apphosting/apps`}async createApp(t,n,r){try{await this.client.post(this.appsBasePath,{data:{items:[{externalId:t,name:n,description:r}]}})}catch(i){throw M(i)??i}}async uploadVersion(t,n,r,i,s="index.html"){console.log(`\u{1F4E4} Uploading version ${n}...`);let a=new FormData;a.append("file",new Blob([new Uint8Array(r)]),i),a.append("version",n),a.append("entryPath",s);let p=encodeURIComponent(t),c=`${this.appsBasePath}/${p}/versions`,l=await this.client.authenticate(),d=`${this.client.getBaseUrl()}${c}`,m=new AbortController,g=setTimeout(()=>m.abort(),300*1e3),u;try{u=await fetch(d,{method:"POST",headers:{Authorization:`Bearer ${l}`},body:a,signal:m.signal})}catch(f){throw f instanceof Error&&f.name==="AbortError"?new Error("Upload timed out after 5 minutes"):f}finally{clearTimeout(g)}if(!u.ok){let f=await u.text(),S=f;try{let y=JSON.parse(f);if(K(y)){let C=y.error;if(typeof C=="string")S=C;else if(K(C)){let $=C.message,w=C.code;S=typeof $=="string"?$:w!=null?`Unknown error (code: ${w})`:f}else{let $=y.message;S=typeof $=="string"?$:f}}}catch{}let v=u.headers.get("x-request-id"),h=v?` | X-Request-ID: ${v}`:"",b=Object.assign(new Error(`Upload failed: ${u.status} \u2014 ${S}${h}`),{status:u.status});throw M(b)??b}console.log(`\u2705 Version ${n} uploaded`)}async getVersion(t,n){let r=encodeURIComponent(t),i=encodeURIComponent(n),s=`${this.appsBasePath}/${r}/versions/${i}`;try{let a=await this.client.get(s);return yt(a.data)}catch(a){throw Ie(a,[t,n])?new T(t,n):M(a)??a}}async getActiveVersion(t){let n=encodeURIComponent(t),r=`${this.appsBasePath}/${n}/active`;try{let i=await this.client.get(r);return yt(i.data)}catch(i){if(Ie(i,[t]))return null;throw M(i)??i}}async updateVersions(t,n){let r=encodeURIComponent(t),i=`${this.appsBasePath}/${r}/versions/update`;try{await this.client.post(i,{data:{items:n}})}catch(s){throw M(s)??s}}async submitSignatures(t,n,r){let i=encodeURIComponent(t),s=encodeURIComponent(n),a=`${this.appsBasePath}/${i}/versions/${s}/signatures`;try{await this.client.post(a,{data:{items:r}})}catch(p){throw M(p)??p}}};o(Fe,"AppHostingApi");var de=Fe;var Te=class Te{constructor(t){this.api=new de(t)}getVersion(t,n){return this.api.getVersion(t,n)}uploadVersion(t,n,r,i,s){return this.api.uploadVersion(t,n,r,i,s)}async ensureApp(t,n,r){console.log("\u{1F50D} Ensuring app exists...");try{await this.api.createApp(t,n,r),console.log(`\u2705 App '${t}' created`)}catch(i){if(X(i)&&i.status===409){console.log(`\u2705 App '${t}' already exists`);return}throw i}}async submitSignatures(t,n,r){r.length!==0&&(console.log(`\u{1F50F} Submitting ${r.length} signature${r.length===1?"":"s"} for version ${n}...`),await this.api.submitSignatures(t,n,r),console.log("\u2705 Signatures stored"))}async publishVersion(t,n){await this.api.updateVersions(t,[{version:n,update:{lifecycleState:{set:"PUBLISHED"}}}])}async publishAndActivate(t,n){console.log(`\u{1F680} Publishing and activating version ${n}...`),await this.api.updateVersions(t,[{version:n,update:{lifecycleState:{set:"PUBLISHED"},alias:{set:"ACTIVE"}}}]),console.log(`\u2705 Version ${n} is now PUBLISHED and ACTIVE`)}getActiveVersion(t){return this.api.getActiveVersion(t)}async deactivateVersion(t,n){await this.api.updateVersions(t,[{version:n,update:{alias:{setNull:!0}}}])}async activateVersion(t,n){let r=null;try{r=await this.api.getActiveVersion(t)}catch{r=null}let i=r&&r.version!==n?r.version:void 0;return await this.api.updateVersions(t,[{version:n,update:{alias:{set:"ACTIVE"}}}]),{supersededVersion:i}}async deploy(t,n,r,i,s,a,p=!1){console.log(`
9
6
  \u{1F680} Deploying application via App Hosting API...
10
7
  `);try{await this.ensureApp(t,n,r),await this.uploadVersion(t,i,s,a),p&&await this.publishAndActivate(t,i),console.log(`
11
- \u2705 Deployment successful!`)}catch(c){let m=c instanceof Error?c.message:String(c);throw Object.assign(new Error(`Deployment failed: ${m}`),{cause:c})}}};o(Ct,"AppHostingClient");var P=Ct;import{CogniteClient as ws}from"@cognite/sdk";import{CogniteClient as es}from"@cognite/sdk";var zi=o(()=>{let e=process.env.DEPLOYMENT_SECRETS;if(!e)return{};try{let t=JSON.parse(e),n={};for(let[r,i]of Object.entries(t))if(typeof i=="string"){let s=r.toLowerCase().replace(/_/g,"-");n[s]=i}return n}catch(t){return console.error("Error parsing DEPLOYMENT_SECRETS:",t),{}}},"loadSecretsFromEnv"),Yi=o(e=>{let t;if(process.env.DEPLOYMENT_SECRET&&(t=process.env.DEPLOYMENT_SECRET),t||(t=zi()[e]),t||(t=process.env[e]),!t)throw new Error(`Secret not found in environment: ${e}`);return t},"getSecretFromEnv"),Wi=o(e=>{if(!e)return"";try{return new URL(e).hostname.replace(/\.cognitedata\.com$/,"")}catch{let t=e.replace(/^https?:\/\//,"");return t=t.split("/")[0],t=t.split(":")[0],t=t.replace(/\.cognitedata\.com$/,""),t}},"extractClusterFromUrl"),Zi=o(async(e,t)=>{let n=`Basic ${btoa(`${e}:${t}`)}`,r=await fetch("https://auth.cognite.com/oauth2/token",{method:"POST",headers:{Authorization:n,"Content-Type":"application/x-www-form-urlencoded"},body:new URLSearchParams({grant_type:"client_credentials"})});if(!r.ok){let s=await r.text();throw new Error(`Failed to get token from CDF: ${r.status} ${r.statusText}
12
- ${s}`)}let i=await r.json();if(!i.access_token)throw new Error("No access token returned from CDF authentication");return i.access_token},"getTokenCdf"),Xi=o(async(e,t,n,r)=>{if(!r)throw new Error("Entra ID authentication requires 'baseUrl' to be set in deployment configuration");let i=Wi(r);if(!i)throw new Error(`Entra ID authentication requires 'baseUrl' to be a valid CDF URL (e.g., https://cluster.cognitedata.com), got: ${r}`);let s=`https://login.microsoftonline.com/${n}/oauth2/v2.0/token`,a=`https://${i}.cognitedata.com/.default`,p=await fetch(s,{method:"POST",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:new URLSearchParams({client_id:e,client_secret:t,scope:a,grant_type:"client_credentials"})});if(!p.ok){let m=await p.text();throw new Error(`Failed to get token from Entra ID: ${p.status} ${p.statusText}
13
- ${m}`)}let c=await p.json();if(!c.access_token)throw new Error("No access token returned from Entra ID authentication");return c.access_token},"getTokenEntra"),fe=o(async(e,t=process.env)=>{if(t.COGNITE_TOKEN)return t.COGNITE_TOKEN;let{deployClientId:n,deploySecretName:r,idpType:i="cdf",tenantId:s,baseUrl:a}=e,p=Yi(r);if(i==="entra_id"){if(!s)throw new Error("Entra ID authentication requires 'tenantId' in deployment configuration");return Xi(n,p,s,a)}return Zi(n,p)},"getToken");async function ye(e,t,n=process.env,r){let i=await fe(e,n),s=n.COGNITE_BASE_URL??e.baseUrl,a=(r??(p=>new es(p)))({appId:t,project:e.project,baseUrl:s,oidcTokenProvider:o(async()=>i,"oidcTokenProvider")});return await a.authenticate(),a}o(ye,"getSdk");import as from"os";import ps from"path";import cs from"open";import{buildAuthorizationUrl as ls,calculatePKCECodeChallenge as ds,discovery as ms,None as us,randomPKCECodeVerifier as gs,randomState as fs}from"openid-client";import ts from"https";import{authorizationCodeGrant as ns}from"openid-client";function Dn(e){return e.replace(/[&<>"']/g,t=>({"&":"&amp;","<":"&lt;",">":"&gt;",'"':"&quot;","'":"&#39;"})[t]??t)}o(Dn,"escapeHtml");function kt(e,t,n){let r=Dn(t),i=Dn(n);return`<html><body style="font-family: system-ui; padding: 40px; text-align: center;">
8
+ \u2705 Deployment successful!`)}catch(c){let l=c instanceof Error?c.message:String(c);throw Object.assign(new Error(`Deployment failed: ${l}`),{cause:c})}}};o(Te,"AppHostingClient");var P=Te;import Er from"path";var vt=".cognite-bundles";function Ct(e,t){return`${e}-${t}.zip`}o(Ct,"bundleFileName");function V(e,t,n){return Er.join(e,vt,Ct(t,n))}o(V,"bundlePath");import{existsSync as br,readFileSync as kr}from"fs";var Pt=[".dev.sig",".cert.sig"];function Z(e,t={}){let n=t.existsSync??br,r=t.readFileSync??((s,a)=>kr(s,a)),i=[];for(let s of Pt){let a=`${e}${s}`;if(!n(a))continue;let p=r(a,"utf8").trim();p.length>0&&i.push(p)}return i}o(Z,"discoverSignatures");import{existsSync as Ur,readFileSync as Kr}from"fs";import{resolve as Lr}from"path";import{array as xr,boolean as Ar,check as Et,forward as bt,literal as Dr,maxLength as Ir,minLength as $r,nonEmpty as z,object as kt,optional as H,picklist as Fr,pipe as L,safeParse as Tr,string as O,url as Or}from"valibot";var Oe=L(O(),z("must not be empty")),Re=L(O(),z("must not be empty"),Ir(256,"must be 256 characters or fewer")),_e=L(O(),z("must not be empty"),Or("must be a valid URL")),Ue=L(O(),z("must not be empty")),Ke=L(O(),z("must not be empty")),Rr=L(kt({org:Ue,project:Ke,baseUrl:_e,deployClientId:H(O(),""),deploySecretName:H(O(),""),published:H(Ar(),!1),idpType:H(Fr(["cdf","entra_id"]),"cdf"),tenantId:H(O())}),bt(Et(e=>e.idpType!=="entra_id"||!!e.tenantId,'must be set when idpType is "entra_id"'),["tenantId"]),bt(Et(e=>!e.deployClientId||!!e.deploySecretName,"must be set when deployClientId is set"),["deploySecretName"])),_r=kt({name:Oe,externalId:Re,versionTag:L(O(),z("must not be empty")),description:H(O(),""),deployments:L(xr(Rr),$r(1,"must contain at least one deployment")),infra:H(Dr("appsApi"))});function Le(e){let t=Tr(_r,e);if(t.success)return t.output;let n=t.issues[0],r=n.path?.map(s=>s.key).join(".")??"",i=r?`"${r}" `:"";throw new Error(`app.json: ${i}${n.message}`)}o(Le,"validateAppConfig");function E(e,t={}){let{validator:n=Le,existsSync:r=Ur,readFileSync:i=Kr}=t,s=Lr(e,"app.json");if(!r(s))throw new Error("No app.json found in current directory. Make sure you're running this command from your app's root directory.");let a=i(s,"utf-8"),p;try{p=JSON.parse(a)}catch{throw new Error("Failed to parse app.json \u2014 check that it contains valid JSON.")}return n(p)}o(E,"loadAppConfig");import{CogniteClient as po}from"@cognite/sdk";import{CogniteClient as Br}from"@cognite/sdk";var jr=o(()=>{let e=process.env.DEPLOYMENT_SECRETS;if(!e)return{};try{let t=JSON.parse(e),n={};for(let[r,i]of Object.entries(t))if(typeof i=="string"){let s=r.toLowerCase().replace(/_/g,"-");n[s]=i}return n}catch(t){return console.error("Error parsing DEPLOYMENT_SECRETS:",t),{}}},"loadSecretsFromEnv"),Nr=o(e=>{let t;if(process.env.DEPLOYMENT_SECRET&&(t=process.env.DEPLOYMENT_SECRET),t||(t=jr()[e]),t||(t=process.env[e]),!t)throw new Error(`Secret not found in environment: ${e}`);return t},"getSecretFromEnv"),Mr=o(e=>{if(!e)return"";try{return new URL(e).hostname.replace(/\.cognitedata\.com$/,"")}catch{let t=e.replace(/^https?:\/\//,"");return t=t.split("/")[0],t=t.split(":")[0],t=t.replace(/\.cognitedata\.com$/,""),t}},"extractClusterFromUrl"),Vr=o(async(e,t)=>{let n=`Basic ${btoa(`${e}:${t}`)}`,r=await fetch("https://auth.cognite.com/oauth2/token",{method:"POST",headers:{Authorization:n,"Content-Type":"application/x-www-form-urlencoded"},body:new URLSearchParams({grant_type:"client_credentials"})});if(!r.ok){let s=await r.text();throw new Error(`Failed to get token from CDF: ${r.status} ${r.statusText}
9
+ ${s}`)}let i=await r.json();if(!i.access_token)throw new Error("No access token returned from CDF authentication");return i.access_token},"getTokenCdf"),Hr=o(async(e,t,n,r)=>{if(!r)throw new Error("Entra ID authentication requires 'baseUrl' to be set in deployment configuration");let i=Mr(r);if(!i)throw new Error(`Entra ID authentication requires 'baseUrl' to be a valid CDF URL (e.g., https://cluster.cognitedata.com), got: ${r}`);let s=`https://login.microsoftonline.com/${n}/oauth2/v2.0/token`,a=`https://${i}.cognitedata.com/.default`,p=await fetch(s,{method:"POST",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:new URLSearchParams({client_id:e,client_secret:t,scope:a,grant_type:"client_credentials"})});if(!p.ok){let l=await p.text();throw new Error(`Failed to get token from Entra ID: ${p.status} ${p.statusText}
10
+ ${l}`)}let c=await p.json();if(!c.access_token)throw new Error("No access token returned from Entra ID authentication");return c.access_token},"getTokenEntra"),je=o(async(e,t=process.env)=>{if(t.COGNITE_TOKEN)return t.COGNITE_TOKEN;let{deployClientId:n,deploySecretName:r,idpType:i="cdf",tenantId:s,baseUrl:a}=e,p=Nr(r);if(i==="entra_id"){if(!s)throw new Error("Entra ID authentication requires 'tenantId' in deployment configuration");return Hr(n,p,s,a)}return Vr(n,p)},"getToken");async function Q(e,t,n=process.env,r){let i=await je(e,n),s=n.COGNITE_BASE_URL??e.baseUrl,a=(r??(p=>new Br(p)))({appId:t,project:e.project,baseUrl:s,oidcTokenProvider:o(async()=>i,"oidcTokenProvider")});return await a.authenticate(),a}o(Q,"getSdk");import Xr from"os";import Zr from"path";import Qr from"open";import{buildAuthorizationUrl as eo,calculatePKCECodeChallenge as to,discovery as no,None as ro,randomPKCECodeVerifier as oo,randomState as io}from"openid-client";import Gr from"https";import{authorizationCodeGrant as Jr}from"openid-client";function xt(e){return e.replace(/[&<>"']/g,t=>({"&":"&amp;","<":"&lt;",">":"&gt;",'"':"&quot;","'":"&#39;"})[t]??t)}o(xt,"escapeHtml");function Ne(e,t,n){let r=xt(t),i=xt(n);return`<html><body style="font-family: system-ui; padding: 40px; text-align: center;">
14
11
  <h1>${r}</h1><p>${i}</p><p>You can close this window.</p>${e==="success"?`<style>
15
12
  @keyframes checkmark {
16
13
  0% { transform: scale(0); }
@@ -19,27 +16,31 @@ ${m}`)}let c=await p.json();if(!c.access_token)throw new Error("No access token
19
16
  }
20
17
  h1 { animation: checkmark 0.5s ease-out; }
21
18
  </style>`:""}
22
- </body></html>`}o(kt,"generateHtml");async function rs(e,t,n,r,i,s){let a=new URL(e.url??"/",`https://${e.headers.host??"localhost"}`);if(a.pathname!=="/")return t.writeHead(404),t.end("Not found"),{shouldClose:!1};try{console.log("\u{1F504} Exchanging authorization code for tokens...");let p=await s.authorizationCodeGrant(n,a,{pkceCodeVerifier:r,expectedState:i});return t.writeHead(200,{"Content-Type":"text/html"}),t.end(kt("success","Login Successful!","You can close this window and return to the terminal.")),{shouldClose:!0,tokens:p}}catch(p){let c=p instanceof Error?p:new Error(String(p));return t.writeHead(400,{"Content-Type":"text/html"}),t.end(kt("error","Authentication Error",c.message)),{shouldClose:!0,error:c}}}o(rs,"handleCallback");function os(e){let t=e/6e4,n=Math.round(t*10)/10;return`${n} ${n===1?"minute":"minutes"}`}o(os,"formatTimeoutMinutes");function In(e,t,n,r,i,s={createServer:ts.createServer,setTimeout:globalThis.setTimeout,clearTimeout:globalThis.clearTimeout,authorizationCodeGrant:ns}){return new Promise((a,p)=>{let c,m=s.setTimeout(()=>{c?.close(),p(new Error(`Login timeout - no response received within ${os(e.loginTimeout)}`))},e.loginTimeout);c=s.createServer(t,async(l,d)=>{try{let g=await rs(l,d,n,r,i,s);g.shouldClose&&(s.clearTimeout(m),c?.close(),g.error?p(g.error):g.tokens?a(g.tokens):p(new Error("No tokens received")))}catch(g){s.clearTimeout(m),c?.close(),p(g instanceof Error?g:new Error(String(g)))}}),c.on("error",l=>{s.clearTimeout(m),l.code==="EADDRINUSE"?console.error(`\u274C Port ${e.port} is already in use.`):console.error(`\u274C Server error: ${l.message}`),p(l)}),c.listen(e.port,"127.0.0.1",()=>{console.log(`\u{1F310} Local HTTPS server started on https://localhost:${e.port}`)})})}o(In,"startCallbackServer");import{execFileSync as is}from"child_process";import xt from"fs";import $n from"path";function Tn(e,t,n){return{key:n.readFileSync(e),cert:n.readFileSync(t)}}o(Tn,"loadCertificates");function ss(e,t,n,r){console.log("\u{1F510} Generating self-signed certificate for HTTPS..."),r.existsSync(e)||r.mkdirSync(e,{recursive:!0});try{return r.execFileSync("openssl",["req","-x509","-newkey","rsa:2048","-nodes","-sha256","-subj","/CN=localhost","-keyout",t,"-out",n,"-days","365"],{stdio:["ignore","pipe","ignore"]}),console.log("\u2705 Certificate generated and saved locally"),Tn(t,n,r)}catch{throw new Error(`Failed to generate self-signed certificate. Make sure openssl is installed.
19
+ </body></html>`}o(Ne,"generateHtml");async function Yr(e,t,n,r,i,s){let a=new URL(e.url??"/",`https://${e.headers.host??"localhost"}`);if(a.pathname!=="/")return t.writeHead(404),t.end("Not found"),{shouldClose:!1};try{console.log("\u{1F504} Exchanging authorization code for tokens...");let p=await s.authorizationCodeGrant(n,a,{pkceCodeVerifier:r,expectedState:i});return t.writeHead(200,{"Content-Type":"text/html"}),t.end(Ne("success","Login Successful!","You can close this window and return to the terminal.")),{shouldClose:!0,tokens:p}}catch(p){let c=p instanceof Error?p:new Error(String(p));return t.writeHead(400,{"Content-Type":"text/html"}),t.end(Ne("error","Authentication Error",c.message)),{shouldClose:!0,error:c}}}o(Yr,"handleCallback");function qr(e){let t=e/6e4,n=Math.round(t*10)/10;return`${n} ${n===1?"minute":"minutes"}`}o(qr,"formatTimeoutMinutes");function At(e,t,n,r,i,s={createServer:Gr.createServer,setTimeout:globalThis.setTimeout,clearTimeout:globalThis.clearTimeout,authorizationCodeGrant:Jr}){return new Promise((a,p)=>{let c=s.createServer(t,async(m,g)=>{try{let u=await Yr(m,g,n,r,i,s);u.shouldClose&&(d(),u.error?p(u.error):u.tokens?a(u.tokens):p(new Error("No tokens received")))}catch(u){d(),p(u instanceof Error?u:new Error(String(u)))}}),l=s.setTimeout(()=>{d(),p(new Error(`Login timeout - no response received within ${qr(e.loginTimeout)}`))},e.loginTimeout);function d(){s.clearTimeout(l),c.close()}o(d,"cleanup"),c.on("error",m=>{d(),m.code==="EADDRINUSE"?console.error(`\u274C Port ${e.port} is already in use.`):console.error(`\u274C Server error: ${m.message}`),p(m)}),c.listen(e.port,"127.0.0.1",()=>{console.log(`\u{1F310} Local HTTPS server started on https://localhost:${e.port}`)})})}o(At,"startCallbackServer");import{execFileSync as zr}from"child_process";import Me from"fs";import Dt from"path";function It(e,t,n){return{key:n.readFileSync(e),cert:n.readFileSync(t)}}o(It,"loadCertificates");function Wr(e,t,n,r){console.log("\u{1F510} Generating self-signed certificate for HTTPS..."),r.existsSync(e)||r.mkdirSync(e,{recursive:!0});try{return r.execFileSync("openssl",["req","-x509","-newkey","rsa:2048","-nodes","-sha256","-subj","/CN=localhost","-keyout",t,"-out",n,"-days","365"],{stdio:["ignore","pipe","ignore"]}),console.log("\u2705 Certificate generated and saved locally"),It(t,n,r)}catch{throw new Error(`Failed to generate self-signed certificate. Make sure openssl is installed.
23
20
  On macOS: openssl is pre-installed
24
21
  On Linux: sudo apt-get install openssl
25
- On Windows: Install OpenSSL or use WSL`)}}o(ss,"generateCertificate");function Rn(e,t={existsSync:xt.existsSync,readFileSync:o(n=>xt.readFileSync(n),"readFileSync"),mkdirSync:o((n,r)=>{xt.mkdirSync(n,r)},"mkdirSync"),execFileSync:is}){let n=$n.join(e,"localhost-key.pem"),r=$n.join(e,"localhost-cert.pem");return t.existsSync(n)&&t.existsSync(r)?Tn(n,r,t):ss(e,n,r,t)}o(Rn,"getOrCreateCertificates");var ys={authority:"https://auth.cognite.com",clientId:"0404baaa-0a90-43a2-aba7-a110b53fb41c",redirectUri:"https://localhost:3000/",port:3e3,loginTimeout:300*1e3,certDir:ps.join(as.homedir(),".cdf-login")},hs={open:cs,getOrCreateCertificates:Rn,startCallbackServer:In,discovery:ms,buildAuthorizationUrl:ls,randomPKCECodeVerifier:gs,calculatePKCECodeChallenge:ds,randomState:fs,logger:console};async function _e(e,t=ys,n){return n===void 0?Fn(e,t,hs):Fn(e,t,n)}o(_e,"login");async function Fn(e,t,n){n.logger.log(`\u{1F510} Starting CDF login flow...
26
- `),n.logger.log(`\u{1F4E1} Fetching OpenID configuration from ${t.authority}...`);let r=await n.discovery(new URL(t.authority),t.clientId,void 0,us()),i=n.randomPKCECodeVerifier(),s=await n.calculatePKCECodeChallenge(i),a=n.randomState(),p={redirect_uri:t.redirectUri,scope:"openid profile email",code_challenge:s,code_challenge_method:"S256",state:a};e&&(p.organization_hint=e);let c=n.buildAuthorizationUrl(r,p).toString(),m=n.getOrCreateCertificates(t.certDir);e&&n.logger.log(`\u{1F3E2} Organization: ${e}`),n.logger.log(`\u{1F680} Opening browser for authentication...
27
- `);try{await n.open(c)}catch(l){let d=l instanceof Error?l.message:String(l);n.logger.error("\u274C Failed to open browser automatically."),n.logger.error(` Reason: ${d}`),n.logger.error(`Please open this URL manually:
28
- `),n.logger.error(c),n.logger.error("")}return n.startCallbackServer(t,m,r,i,a)}o(Fn,"loginImpl");async function j(e,t,n={}){let{login:r=_e,getSdk:i=ye,createClient:s=o(a=>new ws(a),"createClient")}=n;if(t.interactive){let a=t.orgHint||e.org||void 0,p=await r(a),c=s({appId:t.appId,project:e.project,baseUrl:e.baseUrl,getToken:o(async()=>p.access_token,"getToken")});return await c.authenticate(),c}return i(e,t.appId)}o(j,"getClientForDeployment");import On from"enquirer";var Ln="Enter custom target...";function Nn(e,t){let n=t.map((r,i)=>` ${i}: ${r.org}/${r.project}`).join(`
22
+ On Windows: Install OpenSSL or use WSL`)}}o(Wr,"generateCertificate");function $t(e,t={existsSync:Me.existsSync,readFileSync:o(n=>Me.readFileSync(n),"readFileSync"),mkdirSync:o((n,r)=>{Me.mkdirSync(n,r)},"mkdirSync"),execFileSync:zr}){let n=Dt.join(e,"localhost-key.pem"),r=Dt.join(e,"localhost-cert.pem");return t.existsSync(n)&&t.existsSync(r)?It(n,r,t):Wr(e,n,r,t)}o($t,"getOrCreateCertificates");var so={authority:"https://auth.cognite.com",clientId:"0404baaa-0a90-43a2-aba7-a110b53fb41c",redirectUri:"https://localhost:3000/",port:3e3,loginTimeout:300*1e3,certDir:Zr.join(Xr.homedir(),".cdf-login")},ao={open:Qr,getOrCreateCertificates:$t,startCallbackServer:At,discovery:no,buildAuthorizationUrl:eo,randomPKCECodeVerifier:oo,calculatePKCECodeChallenge:to,randomState:io,logger:console};async function Tt(e,t=so,n){return n===void 0?Ft(e,t,ao):Ft(e,t,n)}o(Tt,"login");async function Ft(e,t,n){n.logger.log(`\u{1F510} Starting CDF login flow...
23
+ `),n.logger.log(`\u{1F4E1} Fetching OpenID configuration from ${t.authority}...`);let r=await n.discovery(new URL(t.authority),t.clientId,void 0,ro()),i=n.randomPKCECodeVerifier(),s=await n.calculatePKCECodeChallenge(i),a=n.randomState(),p={redirect_uri:t.redirectUri,scope:"openid profile email",code_challenge:s,code_challenge_method:"S256",state:a};e&&(p.organization_hint=e);let c=n.buildAuthorizationUrl(r,p).toString(),l=n.getOrCreateCertificates(t.certDir);e&&n.logger.log(`\u{1F3E2} Organization: ${e}`),n.logger.log(`\u{1F680} Opening browser for authentication...
24
+ `);try{await n.open(c)}catch(d){let m=d instanceof Error?d.message:String(d);n.logger.error("\u274C Failed to open browser automatically."),n.logger.error(` Reason: ${m}`),n.logger.error(`Please open this URL manually:
25
+ `),n.logger.error(c),n.logger.error("")}return n.startCallbackServer(t,l,r,i,a)}o(Ft,"loginImpl");async function A(e,t,n={}){let{login:r=Tt,getSdk:i=Q,createClient:s=o(a=>new po(a),"createClient")}=n;if(t.interactive){let a=t.orgHint||e.org||void 0,p=await r(a),c=s({appId:t.appId,project:e.project,baseUrl:e.baseUrl,getToken:o(async()=>p.access_token,"getToken")});return await c.authenticate(),c}return i(e,t.appId)}o(A,"getClientForDeployment");import Ot from"enquirer";var Rt="Enter custom target...";function _t(e,t){let n=t.map((r,i)=>` ${i}: ${r.org}/${r.project}`).join(`
29
26
  `);throw new Error(`Deployment "${e}" not found. Available deployments:
30
- ${n}`)}o(Nn,"deploymentNotFoundError");function O(e,t){if(e.length===0)throw new Error("No deployments configured in app.json");if(t===void 0)return e[0];if(/^\d+$/.test(t)){let r=e[Number.parseInt(t)];if(r)return r;Nn(t,e)}let n=e.find(r=>r.project===t||`${r.org}/${r.project}`===t);if(n)return n;Nn(t,e)}o(O,"findDeployment");function T(e){let t=[];return e.deployClientId||t.push("deployClientId"),e.deploySecretName||t.push("deploySecretName"),t}o(T,"getMissingCredentials");async function K(e,t){if(t.baseUrl&&t.project)return{org:t.org??"",project:t.project,baseUrl:t.baseUrl,deployClientId:"",deploySecretName:"",published:!1,idpType:"cdf"};if(t.deployment!==void 0)return O(e.deployments,t.deployment);let n=[...e.deployments.map(s=>`${s.org}/${s.project}`),Ln],{selected:r}=await On.prompt({type:"select",name:"selected",message:"Select deployment target",choices:n});if(r!==Ln){let s=e.deployments.find(a=>`${a.org}/${a.project}`===r);if(s)return s;throw new Error(`Deployment "${r}" could not be resolved from app.json.`)}let i=await On.prompt([{type:"input",name:"baseUrl",message:"CDF Base URL",initial:"https://api.cognitedata.com"},{type:"input",name:"project",message:"CDF Project",validate:o(s=>s?!0:"Project is required","validate")},{type:"input",name:"org",message:"Organization (for login hint)",initial:""}]);return{org:i.org||"",project:i.project,baseUrl:i.baseUrl,deployClientId:"",deploySecretName:"",published:!1,idpType:"cdf"}}o(K,"resolveDeployment");import{existsSync as Ss}from"fs";import{resolve as vs}from"path";import{config as Cs}from"dotenv";function b(e,t={existsSync:Ss,config:Cs}){let n=vs(e,".env");t.existsSync(n)&&(console.log(`Loading environment variables from ${n}`),t.config({path:n}))}o(b,"loadEnvFile");function V(e){e.infra!=="appsApi"&&(console.error(`
27
+ ${n}`)}o(_t,"deploymentNotFoundError");function k(e,t){if(e.length===0)throw new Error("No deployments configured in app.json");if(t===void 0)return e[0];if(/^\d+$/.test(t)){let r=e[Number.parseInt(t)];if(r)return r;_t(t,e)}let n=e.find(r=>r.project===t||`${r.org}/${r.project}`===t);if(n)return n;_t(t,e)}o(k,"findDeployment");function D(e){let t=[];return e.deployClientId||t.push("deployClientId"),e.deploySecretName||t.push("deploySecretName"),t}o(D,"getMissingCredentials");async function I(e,t){if(t.baseUrl&&t.project)return{org:t.org??"",project:t.project,baseUrl:t.baseUrl,deployClientId:"",deploySecretName:"",published:!1,idpType:"cdf"};if(t.deployment!==void 0)return k(e.deployments,t.deployment);let n=[...e.deployments.map(s=>`${s.org}/${s.project}`),Rt],{selected:r}=await Ot.prompt({type:"select",name:"selected",message:"Select deployment target",choices:n});if(r!==Rt){let s=e.deployments.find(a=>`${a.org}/${a.project}`===r);if(s)return s;throw new Error(`Deployment "${r}" could not be resolved from app.json.`)}let i=await Ot.prompt([{type:"input",name:"baseUrl",message:"CDF Base URL",initial:"https://api.cognitedata.com"},{type:"input",name:"project",message:"CDF Project",validate:o(s=>s?!0:"Project is required","validate")},{type:"input",name:"org",message:"Organization (for login hint)",initial:""}]);return{org:i.org||"",project:i.project,baseUrl:i.baseUrl,deployClientId:"",deploySecretName:"",published:!1,idpType:"cdf"}}o(I,"resolveDeployment");import{existsSync as Vo,readFileSync as Ho}from"fs";import{execFile as lo}from"child_process";import{promisify as mo}from"util";import{platform as co}from"os";function B(e,t={}){let{platform:n=co}=t;switch(n()){case"darwin":return e==="macos";case"win32":return e==="windows";default:return e==="other"}}o(B,"isOS");var Kt="cognite-flows",uo=mo(lo),Lt=o((e,t)=>uo(e,t),"defaultExecFile"),go=-25300,fo=go&255;function yo(e){if(!(e instanceof Error)||!("code"in e)||e.code!==fo)return!1;let t="stderr"in e?String(e.stderr):"";return/could not be found/i.test(t)||t===""}o(yo,"isKeychainNotFoundError");async function jt(e,t,n={}){if(!B("macos",n))throw new Error("Keychain storage is only supported on macOS");let{execFile:r=Lt}=n;await r("security",["add-generic-password","-a",e,"-s",Kt,"-w",Buffer.from(t,"utf-8").toString("base64"),"-U"])}o(jt,"storeKeyInKeychain");async function me(e,t={}){if(!B("macos",t))return null;let{execFile:n=Lt}=t;try{let{stdout:r}=await n("security",["find-generic-password","-a",e,"-s",Kt,"-w"]);return Buffer.from(r.trim(),"base64").toString("utf-8")}catch(r){if(yo(r))return null;throw r}}o(me,"readKeyFromKeychain");import{pbkdf2 as wo,randomBytes as vo}from"crypto";import{promisify as Co}from"util";import{CompactEncrypt as Po,base64url as Nt,compactDecrypt as Eo}from"jose";var ho=new TextEncoder,So=new TextDecoder,Ve={encode:o(e=>ho.encode(e),"encode"),decode:o(e=>So.decode(e),"decode")};var bo=Co(wo),Ge=6e5,ko="sha512",He="PBKDF2-HMAC-SHA512",Be=16,ue="A256GCM",xo=32,ge=2e6;async function Mt(e,t,n){return await bo(e,t,n,xo,ko)}o(Mt,"deriveKey");async function Vt(e,t,n=Ge){if(!Number.isInteger(n)||n<1||n>ge)throw new Error(`Invalid iterations: must be an integer between 1 and ${ge}`);let r=vo(Be),i=await Mt(t,r,n);return await new Po(Ve.encode(e)).setProtectedHeader({alg:"dir",enc:ue,kdf:He,kdf_iter:n,kdf_salt:Nt.encode(r)}).encrypt(i)}o(Vt,"encryptStringAsJwe");async function Ht(e,t){let{plaintext:n}=await Eo(e,async r=>{if(!e.length)throw new Error("Unexpected JWE empty value");if(t.length<15)throw new Error(`Invalid passphrase it should be at least ${15} but got ${t.length}`);if(r.alg!=="dir")throw new Error(`Unexpected JWE alg "${String(r.alg)}"; only "dir" is supported`);if(r.enc!==ue)throw new Error(`Unexpected JWE enc "${String(r.enc)}"; only "${ue}" is supported`);if(r.kdf!==He)throw new Error(`Unexpected KDF "${String(r.kdf)}"; only "${He}" is supported`);let i=Number(r.kdf_iter);if(!Number.isInteger(i)||i<1||i>ge)throw new Error(`Invalid kdf_iter in JWE header: must be an integer between 1 and ${ge}`);if(typeof r.kdf_salt!="string")throw new Error("Missing kdf_salt in JWE header");let s=Nt.decode(r.kdf_salt);if(s.length!==Be)throw new Error(`Invalid kdf_salt length in JWE header: expected ${Be} bytes, got ${s.length}`);return await Mt(t,s,i)},{keyManagementAlgorithms:["dir"],contentEncryptionAlgorithms:[ue]});return Ve.decode(n)}o(Ht,"decryptJweAsString");function Ao(e){let t=e.trim();return t.startsWith("eyJ")&&t.split(".").length===5}o(Ao,"isJweCompact");var Bt=Ao;import{existsSync as Io,readdirSync as $o,readFileSync as Fo}from"fs";import{join as Je}from"path";import{homedir as Do}from"os";import{join as Gt}from"path";function F(e={}){let{env:t=process.env,homedir:n=Do}=e,r=t.COGNITE_CLI_HOME?.trim()||Gt(n(),".cognite-cli");return{home:r,keysDir:Gt(r,"keys")}}o(F,"getConfig");var ee=".pub.pem",Ye=".key.jwe",qe=".meta.json";function fe(e){switch(e.kind){case"keychain":return"Keychain";case"encrypted-file":return e.path;case"public-only":return"public-only (private key missing)"}}o(fe,"formatLocalKeySource");function To(e){return{existsSync:e.existsSync??Io,readdirSync:e.readdirSync??$o,readFileSync:e.readFileSync??((t,n)=>Fo(t,n)),isOS:e.isOS??(t=>B(t)),readKeyFromKeychain:e.readKeyFromKeychain??(t=>me(t))}}o(To,"resolveDeps");function Oo(e){try{let t=JSON.parse(e);if(typeof t=="object"&&t!==null&&!Array.isArray(t)&&"email"in t&&typeof t.email=="string")return t.email}catch{}}o(Oo,"readEmailFromMeta");function Ro(e,t){return t.existsSync(e)?t.readdirSync(e).filter(n=>n.endsWith(ee)):[]}o(Ro,"publicKeyEntries");function _o(e){return e.slice(0,-ee.length)}o(_o,"kidFromPublicKeyFilename");async function Uo(e,t,n){if(n.isOS("macos")&&await n.readKeyFromKeychain(e).catch(()=>null)!==null)return{kind:"keychain"};let r=Je(t,`${e}${Ye}`);return n.existsSync(r)?{kind:"encrypted-file",path:r}:{kind:"public-only"}}o(Uo,"resolveSource");async function ye(e=F().keysDir,t={}){let n=To(t),r=new Set,i=Ro(e,n).flatMap(s=>{let a=_o(s);return!a||r.has(a)?[]:(r.add(a),[{kid:a,entry:s}])});return Promise.all(i.map(async({kid:s,entry:a})=>{let p=await Uo(s,e,n),c=Je(e,`${s}${qe}`),l;try{l=Oo(n.readFileSync(c,"utf8"))}catch{}return{kid:s,source:p,publicKeyPath:Je(e,a),email:l}}))}o(ye,"discoverLocalKeys");import Ko from"enquirer";async function Lo(e){return Ko.prompt(e)}o(Lo,"defaultPrompt");async function Jt(e,t={}){let{prompt:n=Lo}=t,{passphrase:r}=await n({type:"password",name:"passphrase",message:e});return r}o(Jt,"promptPassphrase");import No from"enquirer";import{statSync as jo}from"fs";function Yt(e,t=jo){return e.map(n=>({key:n,mtime:t(n.publicKeyPath).mtimeMs})).sort((n,r)=>r.mtime-n.mtime).map(({key:n})=>n)}o(Yt,"sortByMtime");async function Mo(e){return No.prompt(e)}o(Mo,"defaultPrompt");async function qt(e,t={}){if(e.length===1)return e[0];let{prompt:n=Mo,sortByMtime:r=Yt}=t,i=r(e),s=i[0],{choice:a}=await n({type:"select",name:"choice",message:"Select signing identity",choices:[{name:"latest",message:`Use latest: ${s.kid}`},{name:"pick",message:"Pick from list"}]});if(a==="latest")return s;if(a==="pick"){let{kid:p}=await n({type:"select",name:"kid",message:"Select signing identity",choices:i.map(l=>({name:l.kid,message:[l.kid,l.email,fe(l.source)].filter(Boolean).join(" \u2014 ")}))}),c=i.find(l=>l.kid===p);if(!c)throw new Error("No signing identity selected");return c}else throw new Error(`Unexpected choice: "${a}"`)}o(qt,"promptSigningIdentity");function Bo(e){return{existsSync:e.existsSync??Vo,readFileSync:e.readFileSync??((t,n)=>Ho(t,n)),readKeyFromKeychain:e.readKeyFromKeychain??me,decryptJweAsString:e.decryptJweAsString??Ht,discoverLocalKeys:e.discoverLocalKeys??ye,keysDir:e.keysDir??F().keysDir,promptPassphrase:e.promptPassphrase??Jt,promptSigningIdentity:e.promptSigningIdentity??qt}}o(Bo,"resolveDeps");async function zt(e,t={}){let n=Bo(t);if(e.keyPath){if(!n.existsSync(e.keyPath))throw new Error(`Key file not found: ${e.keyPath}`);if(!e.kid)throw new Error("--signing-identity <kid> is required when using --key");let s=n.readFileSync(e.keyPath,"utf-8").trim();if(Bt(s)){let a=await n.promptPassphrase(`Passphrase for key ${e.kid}: `);return{privateKeyPem:await n.decryptJweAsString(s,a),kid:e.kid}}return{privateKeyPem:s,kid:e.kid}}let r=await n.discoverLocalKeys(n.keysDir);if(r.length===0)throw new Error("No signing keys found. Run `cognite keys generate` or pass --key.");let i=e.kid?r.find(s=>s.kid===e.kid):await n.promptSigningIdentity(r);if(!i)throw new Error(`No key found with kid "${e.kid}"`);switch(i.source.kind){case"keychain":{let s=await n.readKeyFromKeychain(i.kid);if(!s)throw new Error(`Key "${i.kid}" not found in Keychain`);return{privateKeyPem:s,kid:i.kid}}case"encrypted-file":{let s=await n.promptPassphrase(`Passphrase for key ${i.kid}: `);return{privateKeyPem:await n.decryptJweAsString(n.readFileSync(i.source.path,"utf-8"),s),kid:i.kid}}case"public-only":throw new Error(`Key "${i.kid}" has no private key on this machine (public-only).`)}}o(zt,"resolvePrivateKey");var ni=o(async(e,t,n,r,i)=>{let s=await A(e,{interactive:i.interactive??!1,appId:t,orgHint:i.org});await new P(s).submitSignatures(t,n,r)},"defaultSubmitSignatures");function ri(e){let t=Go(e);return new ReadableStream({start(n){t.on("data",r=>{let i=typeof r=="string"?Buffer.from(r):r;n.enqueue(new Uint8Array(i))}),t.on("end",()=>n.close()),t.on("error",r=>n.error(r))},cancel(){t.destroy()}})}o(ri,"createWebStreamFromFile");function oi(e){return{existsSync:e.existsSync??Jo,readFileSync:e.readFileSync??((t,n)=>Yo(t,n)),writeFileSync:e.writeFileSync??qo,createBundleStream:e.createBundleStream??ri,signBundle:e.signBundle??ei,hashDevSignature:e.hashDevSignature??Zo,parseScope:e.parseScope??Qo,validateScopes:e.validateScopes??ti,loadAppConfig:e.loadAppConfig??E,resolvePrivateKey:e.resolvePrivateKey??(t=>zt(t)),submitSignatures:e.submitSignatures??ni,discoverSignatures:e.discoverSignatures??Z}}o(oi,"resolveDeps");async function Wt(e,t,n={},r=process.cwd()){let i=oi(n),s=t.appid,a=t.appVersion,p=[],c=i.loadAppConfig(r);if(s=s??c.externalId,a=a??c.versionTag,t.scope&&t.scope.length>0?p=t.scope.map(i.parseScope):p=c.deployments.map(y=>({org:y.org,project:y.project})),!s)throw new Error("--appid is required (or set externalId in app.json)");if(!a)throw new Error("--app-version is required (or set versionTag in app.json)");let l=e?he(r,e):V(r,s,a);if(!i.existsSync(l)){let y=e?"":" (default derived from app.json \u2014 pass [bundle] explicitly to override, or run `cognite apps deploy` first to populate .cognite-bundles/)";throw new Error(`Bundle not found: ${l}${y}`)}let d=i.validateScopes(p);if(d.length>0)throw new Error(`Invalid scopes:
28
+ ${d.join(`
29
+ `)}`);let{privateKeyPem:m,kid:g}=await i.resolvePrivateKey({keyPath:t.key?he(r,t.key):void 0,kid:t.signingIdentity}),u;if(t.devSig){let y=he(r,t.devSig);if(!i.existsSync(y))throw new Error(`Dev signature file not found: ${y}`);let C=i.readFileSync(y,"utf-8").trim();u=await i.hashDevSignature(C)}let f=i.createBundleStream(l),S=await i.signBundle({privateKeyPem:m,kid:g,appId:s,version:a,bundleStream:f,role:t.asCertifier?"certifier":"developer",scopes:p,devSignatureSha256:u}),v=t.output?he(r,t.output):Xo(Wo(l),`${zo(l)}.${t.asCertifier?"cert":"dev"}.sig`);i.writeFileSync(v,S.token,"utf-8"),console.log(`\u2705 Signed: ${v}`),console.log(` kid: ${S.kid}`),console.log(` bundle: ${S.payload.bundleSha256}`),console.log(` scopes: ${S.payload.scopes.map(y=>`${y.org}/${y.project}`).join(", ")}`),t.verbose&&console.log(`
30
+ Payload:`,JSON.stringify(S.payload,null,2));let h=Array.from(new Set([...i.discoverSignatures(l),S.token])),b=t.interactive?await I(c,{deployment:t.deployment,baseUrl:t.baseUrl,project:t.project,org:t.org}):k(c.deployments,t.deployment);if(!t.interactive){let y=D(b);if(y.length>0)throw new Error(`Deployment ${b.org}/${b.project} is missing ${y.join(" and ")} in app.json. Use \`cognite apps sign --interactive\` for browser-based authentication instead.`)}await i.submitSignatures(b,s,a,h,t),console.log(`
31
+ To publish: npx @cognite/cli apps publish .`)}o(Wt,"handleSign");function Xt(e,t={}){return e.command("sign [bundle]").description("Sign an app bundle (defaults to .cognite-bundles/<app>-<version>.zip)").option("--key <path>","Private key PEM file path").option("-s, --signing-identity <kid>","Key ID for Keychain or file lookup").option("--appid <id>","Application ID (default: externalId from app.json)").option("-i, --identifier <id>","Alias for --appid").option("--app-version <version>","App version (default: versionTag from app.json)").option("--scope <org/project...>","Deployment scope(s) (default: deployments from app.json)").option("-r, --requirements <org/project...>","Alias for --scope").option("-o, --output <path>","Output file path (default: <bundle>.<dev|cert>.sig)").option("-v, --verbose","Display full payload after signing").option("--as-certifier","Counter-sign a developer signature as certifier").option("--interactive","After signing, submit the signature to App Hosting using browser-based auth",!1).option("-d, --deployment <target>","Deployment target from app.json (index or name; submit step only)").option("--base-url <url>","CDF base URL (only with --interactive)").option("--project <project>","CDF project name (only with --interactive)").option("--org <org>","Organization hint for login (only with --interactive)").action((n,r)=>{let i={...r,appid:r.identifier??r.appid,scope:r.requirements??r.scope};return Wt(n,i,t)})}o(Xt,"registerSignCommand");import{existsSync as ii}from"fs";import{resolve as si}from"path";import{config as ai}from"dotenv";function R(e,t={existsSync:ii,config:ai}){let n=si(e,".env");t.existsSync(n)&&(console.log(`Loading environment variables from ${n}`),t.config({path:n}))}o(R,"loadEnvFile");function _(e){e.infra!=="appsApi"&&(console.error(`
31
32
  \u26A0\uFE0F Legacy infrastructure is no longer supported.
32
33
 
33
34
  Your app.json is missing \`"infra": "appsApi"\`, which means it was created for
34
35
  the old CDF Application Registry. This deploy path has been removed.
35
36
 
36
37
  To migrate: add \`"infra": "appsApi"\` to your app.json, wire up the correct authentication and re-deploy.
37
- `),process.exit(1))}o(V,"assertAppHostingInfra");async function ks(e){let t=process.cwd();b(t);let n=k(t);V(n);let r=e.interactive?await K(n,e):O(n.deployments,e.deployment);if(!e.interactive){let l=T(r);if(l.length>0)throw new Error(`Deployment ${r.org}/${r.project} is missing ${l.join(" and ")} in app.json. Use \`npx @cognite/cli@latest apps activate --interactive\` for browser-based authentication instead.`)}let i=await j(r,{interactive:e.interactive,appId:n.externalId,orgHint:e.org}),s=new P(i),{externalId:a,versionTag:p}=n,c;try{c=await s.getVersion(a,p)}catch(l){throw l instanceof _?new Error(`Version ${p} of ${a} has not been deployed yet. Run \`npx @cognite/cli apps deploy\` first.`):l}if(c.alias==="ACTIVE"){console.log(` ${a} @ ${p} is already ACTIVE \u2014 nothing to do.`);return}if(c.lifecycleState==="DEPRECATED"||c.lifecycleState==="ARCHIVED")throw new Error(`Cannot activate ${a} @ ${p}: version is ${c.lifecycleState} (terminal).`);c.lifecycleState==="DRAFT"&&(await s.publishVersion(a,p),console.log(`\u2713 Published ${a} @ ${p} is now PUBLISHED`));let{supersededVersion:m}=await s.activateVersion(a,p);console.log(`\u2713 Activated ${a} @ ${p} is now ACTIVE`),m&&console.log(` Superseded ${m} \u2192 PUBLISHED`)}o(ks,"handleActivate");function _n(e){return e.command("activate").description("Activate the current app version (publish if needed, then set ACTIVE alias)").argument("[path]","Path to the app folder (only `.` is currently supported)",".").option("-d, --deployment <target>","Deployment target from app.json (index or name)").option("--interactive","Use browser-based authentication instead of env-var credentials",!1).option("--base-url <url>","CDF base URL (only with --interactive)").option("--project <project>","CDF project name (only with --interactive)").option("--org <org>","Organization hint for login (only with --interactive)").addHelpText("after",`
38
+ `),process.exit(1))}o(_,"assertAppHostingInfra");async function pi(e){let t=process.cwd();R(t);let n=E(t);_(n);let r=e.interactive?await I(n,e):k(n.deployments,e.deployment);if(!e.interactive){let d=D(r);if(d.length>0)throw new Error(`Deployment ${r.org}/${r.project} is missing ${d.join(" and ")} in app.json. Use \`npx @cognite/cli@latest apps activate --interactive\` for browser-based authentication instead.`)}let i=await A(r,{interactive:e.interactive,appId:n.externalId,orgHint:e.org}),s=new P(i),{externalId:a,versionTag:p}=n,c;try{c=await s.getVersion(a,p)}catch(d){throw d instanceof T?new Error(`Version ${p} of ${a} has not been deployed yet. Run \`npx @cognite/cli apps deploy\` first.`):d}if(c.alias==="ACTIVE"){console.log(` ${a} @ ${p} is already ACTIVE \u2014 nothing to do.`);return}if(c.lifecycleState==="DEPRECATED"||c.lifecycleState==="ARCHIVED")throw new Error(`Cannot activate ${a} @ ${p}: version is ${c.lifecycleState} (terminal).`);c.lifecycleState==="DRAFT"&&(await s.publishVersion(a,p),console.log(`\u2713 Published ${a} @ ${p} is now PUBLISHED`));let{supersededVersion:l}=await s.activateVersion(a,p);console.log(`\u2713 Activated ${a} @ ${p} is now ACTIVE`),l&&console.log(` Superseded ${l} \u2192 PUBLISHED`)}o(pi,"handleActivate");function Zt(e){return e.command("activate").description("Activate the current app version (publish if needed, then set ACTIVE alias)").argument("[path]","Path to the app folder (only `.` is currently supported)",".").option("-d, --deployment <target>","Deployment target from app.json (index or name)").option("--interactive","Use browser-based authentication instead of env-var credentials",!1).option("--base-url <url>","CDF base URL (only with --interactive)").option("--project <project>","CDF project name (only with --interactive)").option("--org <org>","Organization hint for login (only with --interactive)").addHelpText("after",`
38
39
  Examples:
39
40
  npx @cognite/cli apps activate . Activate using env-var auth
40
- npx @cognite/cli apps activate . --interactive Activate using browser auth (no secrets needed)`).action((t,n)=>ks(n))}o(_n,"registerActivateCommand");import{readdirSync as Ks}from"fs";import{basename as Zn,dirname as Vs,normalize as Ms,resolve as we}from"path";import{fileURLToPath as Us,pathToFileURL as Gs}from"url";import{Logger as Hs,runner as Bs}from"hygen";import{execFileSync as je}from"child_process";function jn(e={}){let{execFileSync:t=je}=e;try{return t("git",["--version"],{stdio:"ignore"}),!0}catch{return!1}}o(jn,"isGitInstalled");function Kn(e,t={}){let{execFileSync:n=je}=t;try{return n("git",["-C",e,"status"],{stdio:"ignore"}),!0}catch{return!1}}o(Kn,"isInsideGitRepo");function Vn(e,t={}){let{execFileSync:n=je}=t;n("git",["-C",e,"init"],{stdio:"pipe"}),n("git",["-C",e,"add","."],{stdio:"pipe"}),n("git",["-C",e,"commit","-m","Initial commit","--no-gpg-sign","--no-verify"],{stdio:"pipe"})}o(Vn,"gitInitAndCommit");function Mn(e={}){let{execFileSync:t=je}=e;try{return String(t("git",["config","--get","user.email"],{encoding:"utf-8",stdio:["ignore","pipe","ignore"]})).trim()||void 0}catch{return}}o(Mn,"gitUserEmail");import{safeParse as xs}from"valibot";function he(e,t){return n=>{let r=xs(t,n);return r.success?!0:`${e} ${r.issues[0].message}`}}o(he,"toPromptValidator");var Un={name:he("App name",st),displayName:he("Display name",it),baseUrl:he("Base URL",at),org:he("Org",pt),project:he("Project",ct)};function Ps(e,t){return e?async n=>{let r=t(n);return r===!0?e(n):r}:t}o(Ps,"composeValidators");function Ke(e){return e.map(t=>{if(!(t.name in Un))return t;let n=Un[t.name];return{...t,validate:Ps(t.validate,n)}})}o(Ke,"applySchemaValidators");import{basename as Hn}from"path";import Bn from"enquirer";function Gn(e){return e.replace(/[A-Z]/g,(t,n)=>n===0?t.toLowerCase():`-${t.toLowerCase()}`)}o(Gn,"kebabCase");var Es={type:"confirm",name:"useSpecKit",message:["Enable spec-driven development?"," Adds the github/spec-kit slash commands (/speckit.specify, .clarify, .plan, .tasks, .implement)"," to your app for use in Claude Code or Cursor. They walk you through writing SPEC.md and"," generating a plan, tasks, and implementation."].join(`
41
- `),initial:!1};async function bs(e){return!!(await e([Es])).useSpecKit}o(bs,"promptForSpecKit");async function As(e,t,n){return e!==void 0?e:t?bs(n):!1}o(As,"resolveSpecKit");function qn({isCurrentDir:e,dirName:t,onAppName:n,onUseSpecKit:r,presets:i={},specKit:s,prompt:a=Bn.prompt.bind(Bn)}){return()=>({prompt:o(async p=>{if(!Array.isArray(p))return a([p]);let c=Object.fromEntries(Object.entries(i).filter(C=>C[1]!==void 0)),m=Object.keys(c).length>0,l=e?Hn(process.cwd()):t?Hn(t):null,d=m&&l!==null,g=!d&&l?p.map(C=>C.name==="name"?{...C,initial:l}:C):p,f=Ke(g),h=d?{...c,name:l}:c,S=new Set(Object.keys(h)),u=f.filter(C=>!S.has(C.name)),y=u.findIndex(C=>C.name==="baseUrl"),w;if(y!==-1){let C=u.filter(Lo=>Lo.name!=="baseUrl"),Q=C.length>0?await a(C):{},De=typeof Q.cluster=="string"?Q.cluster:"",oe=typeof h.cluster=="string"?h.cluster:"",Ie=`https://${(De||oe).trim().replace(/\/+$/,"")||"api"}.cognitedata.com`,M=u[y],ot=await a([{...M,initial:Ie}]);w={...Q,...ot}}else w=u.length>0?await a(u):{};let v={...h,...w},x=typeof v.name=="string"?v.name:"";x&&n(x);let E=await As(s,u.length>0,a);return r?.(E),{...v,name:x,useCurrentDir:e,directoryName:e?void 0:t??void 0,useSpecKit:E}},"prompt")})}o(qn,"createAppPrompter");async function Qn(e,t,n){let r=[];Object.values(t).some(s=>s!==void 0)&&n!==null&&r.push({key:"name",value:n,label:"directory"});for(let[s,a]of Object.entries(t))a!==void 0&&r.push({key:s,value:a,label:`--${Gn(s)}`});for(let{key:s,value:a,label:p}of r){let c=e.find(l=>l.name===s)?.validate;if(!c)continue;let m=await c(a);if(m!==!0)throw new Error(`Invalid ${p}: ${m}`)}}o(Qn,"validatePresets");import{cpSync as Fs,mkdirSync as zn,writeFileSync as Os}from"fs";import{dirname as Yn,resolve as Z}from"path";import{fileURLToPath as Ls}from"url";import{copyFileSync as Ds,symlinkSync as Is}from"fs";import{dirname as $s,join as Ts}from"path";function Rs(e){if(e&&typeof e=="object"&&"code"in e&&typeof e.code=="string")return e.code}o(Rs,"errno");function Jn(e){return e instanceof Error?e.message:String(e)}o(Jn,"messageOf");function Ve({target:e,linkPath:t,label:n,symlink:r=Is,copyFile:i=Ds}){try{return r(e,t),!0}catch(s){let a=Rs(s);if(a==="EEXIST")return!0;let p=Jn(s);if(a==="EPERM"||a==="EACCES")try{let c=Ts($s(t),e);return i(c,t),console.log(`\u2139\uFE0F Wrote ${n} as a copy of ${e} (symlinks need Developer Mode or an elevated shell on Windows).`),!0}catch(c){return console.warn(`\u26A0\uFE0F Could not create ${n} symlink: ${p} (copy fallback also failed: ${Jn(c)})`),!1}return console.warn(`\u26A0\uFE0F Could not create ${n} symlink:`,p),!1}}o(Ve,"linkOrCopyOrWarn");var Ns=Z(Yn(Ls(import.meta.url)),"..","..","_vendor","spec-kit"),_s={branch_numbering:"sequential"},js=[{from:"templates",to:".specify/templates"},{from:"scripts/bash",to:".specify/scripts/bash"},{from:"commands",to:".claude/commands"},{from:"commands",to:".cursor/commands"}];function Wn({appDir:e,vendorDir:t=Ns}){let n=Z(e,".specify"),r=Z(n,"memory"),i=`prepare spec-kit install for appDir=${e}`;try{for(let{from:s,to:a}of js){let p=Z(e,a);i=`copy ${s} to ${a}`,zn(Yn(p),{recursive:!0}),Fs(Z(t,s),p,{recursive:!0})}i=`write init-options.json under specifyDir=${n}`,Os(Z(n,"init-options.json"),`${JSON.stringify(_s,null,2)}
42
- `),i=`link .specify/memory/constitution.md in specifyDir=${n}`,zn(r,{recursive:!0}),Ve({target:"../../AGENTS.md",linkPath:Z(r,"constitution.md"),label:".specify/memory/constitution.md"})}catch(s){let a=s instanceof Error?s.message:String(s);throw new Error(`installSpecKit failed while ${i} (appDir=${e}, vendorDir=${t}): ${a}`,{cause:s})}}o(Wn,"installSpecKit");var Xn=we(Vs(Us(import.meta.url)),"..","..","_templates");async function qs(){let e=we(Xn,"app","new","prompt.js");return(await import(Gs(e).href)).default}o(qs,"loadPromptDefs");function Qs(e,t){return!e||t?null:Ms(e)}o(Qs,"resolveDirName");function Js(e,t,n){if(e)return{cwd:process.cwd(),display:"."};let r=t??n;if(!r)throw new Error("App creation completed without a target directory or name.");return{cwd:we(process.cwd(),r),display:r}}o(Js,"resolveAppLocation");function zs(e,t,n){let r=` npm install
41
+ npx @cognite/cli apps activate . --interactive Activate using browser auth (no secrets needed)`).action((t,n)=>pi(n))}o(Zt,"registerActivateCommand");import{readdirSync as ki}from"fs";import{basename as gn,dirname as xi,normalize as Ai,resolve as ne}from"path";import{fileURLToPath as Di,pathToFileURL as Ii}from"url";import{Logger as $i,runner as Fi}from"hygen";import{execFileSync as Se}from"child_process";function Qt(e={}){let{execFileSync:t=Se}=e;try{return t("git",["--version"],{stdio:"ignore"}),!0}catch{return!1}}o(Qt,"isGitInstalled");function en(e,t={}){let{execFileSync:n=Se}=t;try{return n("git",["-C",e,"status"],{stdio:"ignore"}),!0}catch{return!1}}o(en,"isInsideGitRepo");function tn(e,t={}){let{execFileSync:n=Se}=t;n("git",["-C",e,"init"],{stdio:"pipe"}),n("git",["-C",e,"add","."],{stdio:"pipe"}),n("git",["-C",e,"commit","-m","Initial commit","--no-gpg-sign","--no-verify"],{stdio:"pipe"})}o(tn,"gitInitAndCommit");function nn(e={}){let{execFileSync:t=Se}=e;try{return String(t("git",["config","--get","user.email"],{encoding:"utf-8",stdio:["ignore","pipe","ignore"]})).trim()||void 0}catch{return}}o(nn,"gitUserEmail");import{safeParse as ci}from"valibot";function te(e,t){return n=>{let r=ci(t,n);return r.success?!0:`${e} ${r.issues[0].message}`}}o(te,"toPromptValidator");var rn={name:te("App name",Re),displayName:te("Display name",Oe),baseUrl:te("Base URL",_e),org:te("Org",Ue),project:te("Project",Ke)};function li(e,t){return e?async n=>{let r=t(n);return r===!0?e(n):r}:t}o(li,"composeValidators");function we(e){return e.map(t=>{if(!(t.name in rn))return t;let n=rn[t.name];return{...t,validate:li(t.validate,n)}})}o(we,"applySchemaValidators");import{basename as sn}from"path";import an from"enquirer";function on(e){return e.replace(/[A-Z]/g,(t,n)=>n===0?t.toLowerCase():`-${t.toLowerCase()}`)}o(on,"kebabCase");var di={type:"confirm",name:"useSpecKit",message:["Enable spec-driven development?"," Adds the github/spec-kit slash commands (/speckit.specify, .clarify, .plan, .tasks, .implement)"," to your app for use in Claude Code or Cursor. They walk you through writing SPEC.md and"," generating a plan, tasks, and implementation."].join(`
42
+ `),initial:!1};async function mi(e){return!!(await e([di])).useSpecKit}o(mi,"promptForSpecKit");async function ui(e,t,n){return e!==void 0?e:t?mi(n):!1}o(ui,"resolveSpecKit");function pn({isCurrentDir:e,dirName:t,onAppName:n,onUseSpecKit:r,presets:i={},specKit:s,prompt:a=an.prompt.bind(an)}){return()=>({prompt:o(async p=>{if(!Array.isArray(p))return a([p]);let c=Object.fromEntries(Object.entries(i).filter(w=>w[1]!==void 0)),l=Object.keys(c).length>0,d=e?sn(process.cwd()):t?sn(t):null,m=l&&d!==null,g=!m&&d?p.map(w=>w.name==="name"?{...w,initial:d}:w):p,u=we(g),f=m?{...c,name:d}:c,S=new Set(Object.keys(f)),v=u.filter(w=>!S.has(w.name)),h=v.findIndex(w=>w.name==="baseUrl"),b;if(h!==-1){let w=v.filter(yr=>yr.name!=="baseUrl"),N=w.length>0?await a(w):{},ce=typeof N.cluster=="string"?N.cluster:"",Y=typeof f.cluster=="string"?f.cluster:"",le=`https://${(ce||Y).trim().replace(/\/+$/,"")||"api"}.cognitedata.com`,U=v[h],De=await a([{...U,initial:le}]);b={...N,...De}}else b=v.length>0?await a(v):{};let y={...f,...b},C=typeof y.name=="string"?y.name:"";C&&n(C);let $=await ui(s,v.length>0,a);return r?.($),{...y,name:C,useCurrentDir:e,directoryName:e?void 0:t??void 0,useSpecKit:$}},"prompt")})}o(pn,"createAppPrompter");async function cn(e,t,n){let r=[];Object.values(t).some(s=>s!==void 0)&&n!==null&&r.push({key:"name",value:n,label:"directory"});for(let[s,a]of Object.entries(t))a!==void 0&&r.push({key:s,value:a,label:`--${on(s)}`});for(let{key:s,value:a,label:p}of r){let c=e.find(d=>d.name===s)?.validate;if(!c)continue;let l=await c(a);if(l!==!0)throw new Error(`Invalid ${p}: ${l}`)}}o(cn,"validatePresets");import{cpSync as wi,mkdirSync as dn,writeFileSync as vi}from"fs";import{dirname as mn,resolve as J}from"path";import{fileURLToPath as Ci}from"url";import{copyFileSync as gi,symlinkSync as fi}from"fs";import{dirname as yi,join as hi}from"path";function Si(e){if(e&&typeof e=="object"&&"code"in e&&typeof e.code=="string")return e.code}o(Si,"errno");function ln(e){return e instanceof Error?e.message:String(e)}o(ln,"messageOf");function ve({target:e,linkPath:t,label:n,symlink:r=fi,copyFile:i=gi}){try{return r(e,t),!0}catch(s){let a=Si(s);if(a==="EEXIST")return!0;let p=ln(s);if(a==="EPERM"||a==="EACCES")try{let c=hi(yi(t),e);return i(c,t),console.log(`\u2139\uFE0F Wrote ${n} as a copy of ${e} (symlinks need Developer Mode or an elevated shell on Windows).`),!0}catch(c){return console.warn(`\u26A0\uFE0F Could not create ${n} symlink: ${p} (copy fallback also failed: ${ln(c)})`),!1}return console.warn(`\u26A0\uFE0F Could not create ${n} symlink:`,p),!1}}o(ve,"linkOrCopyOrWarn");var Pi=J(mn(Ci(import.meta.url)),"..","..","_vendor","spec-kit"),Ei={branch_numbering:"sequential"},bi=[{from:"templates",to:".specify/templates"},{from:"scripts/bash",to:".specify/scripts/bash"},{from:"commands",to:".claude/commands"},{from:"commands",to:".cursor/commands"}];function un({appDir:e,vendorDir:t=Pi}){let n=J(e,".specify"),r=J(n,"memory"),i=`prepare spec-kit install for appDir=${e}`;try{for(let{from:s,to:a}of bi){let p=J(e,a);i=`copy ${s} to ${a}`,dn(mn(p),{recursive:!0}),wi(J(t,s),p,{recursive:!0})}i=`write init-options.json under specifyDir=${n}`,vi(J(n,"init-options.json"),`${JSON.stringify(Ei,null,2)}
43
+ `),i=`link .specify/memory/constitution.md in specifyDir=${n}`,dn(r,{recursive:!0}),ve({target:"../../AGENTS.md",linkPath:J(r,"constitution.md"),label:".specify/memory/constitution.md"})}catch(s){let a=s instanceof Error?s.message:String(s);throw new Error(`installSpecKit failed while ${i} (appDir=${e}, vendorDir=${t}): ${a}`,{cause:s})}}o(un,"installSpecKit");var fn=ne(xi(Di(import.meta.url)),"..","..","_templates");async function Ti(){let e=ne(fn,"app","new","prompt.js");return(await import(Ii(e).href)).default}o(Ti,"loadPromptDefs");function Oi(e,t){return!e||t?null:Ai(e)}o(Oi,"resolveDirName");function Ri(e,t,n){if(e)return{cwd:process.cwd(),display:"."};let r=t??n;if(!r)throw new Error("App creation completed without a target directory or name.");return{cwd:ne(process.cwd(),r),display:r}}o(Ri,"resolveAppLocation");function _i(e,t,n){let r=` npm install
43
44
  npm run dev`,i="To deploy your app:",s="npx @cognite/cli apps deploy --interactive",a=n?`
44
45
  To start spec-driven development:
45
46
  Run /speckit.specify in Claude Code or Cursor and describe your app.
@@ -66,8 +67,8 @@ ${i}
66
67
  cd "${t}"
67
68
  ${s}
68
69
  ${p}
69
- `)}o(zs,"printSuccessMessage");async function Ys(e){try{let{execSkillsCli:t,pullAllArgs:n}=await import("../skills-SV7BPHAZ.js");console.log("\u{1F9E0} Pulling skills into your app..."),t(n(),{cwd:e,timeout:3e4,stdio:["pipe","pipe","inherit"]});let r=we(e,".agents","skills"),i=0;try{i=Ks(r).length}catch{console.warn(`Skills directory not found after pull \u2014 no skills may have been installed (expected: ${r})`)}let s=i>0?`${i} skills`:"skills";console.log(`\u2705 Installed ${s} successfully to
70
- ${r}`)}catch(t){let n=t instanceof Error?t.message:String(t);console.warn("\u26A0\uFE0F Could not pull skills:",n)}}o(Ys,"pullSkillsInto");function Ws(e,t={}){let{isGitInstalled:n=jn,isInsideGitRepo:r=Kn,gitInitAndCommit:i=Vn}=t;if(!n()){console.warn("git not found \u2014 skipping git repository initialisation");return}if(!r(e)){console.log("Initialising git repository...");try{i(e)}catch(s){let p=(s&&typeof s=="object"&&"stderr"in s&&s.stderr?String(s.stderr).trim():"")||(s instanceof Error?s.message:String(s));console.warn("Could not initialise git repository:",p)}}}o(Ws,"maybeInitGit");async function Zs(e,t){let n=e==="."||e==="./",r=Qs(e,n),i=null,s=!1,a={displayName:t.displayName,description:t.description,org:t.org,project:t.project,cluster:t.cluster,baseUrl:t.baseUrl},p=await qs(),c=Ke(p),m=n?Zn(process.cwd()):r?Zn(r):null;await Qn(c,a,m);let l=qn({isCurrentDir:n,dirName:r,onAppName:o(g=>{i=g},"onAppName"),onUseSpecKit:o(g=>{s=g},"onUseSpecKit"),presets:a,specKit:t.specKit});await Bs(["app","new","--cliVersion","1.3.2-alpha.53"],{templates:Xn,cwd:process.cwd(),logger:new Hs(console.log.bind(console)),createPrompter:l,debug:!!process.env.DEBUG});let d=Js(n,r,i);Ve({target:"AGENTS.md",linkPath:we(d.cwd,"CLAUDE.md"),label:"CLAUDE.md"}),s&&Wn({appDir:d.cwd}),await Ys(d.cwd),Ws(d.cwd),zs(n,d.display,s)}o(Zs,"handleCreate");function er(e){return e.command("create").description("Create a new application.").argument("[directory]","Target directory (. for current, or subdirectory name)").option("--display-name <name>","App display name (skips the prompt)").option("--description <description>","App description (skips the prompt)").option("--org <org>","Deployment org (skips the prompt)").option("--project <project>","Deployment project (skips the prompt)").option("--cluster <cluster>","CDF cluster, e.g. greenfield (skips the prompt)").option("--base-url <url>","CDF base URL, e.g. https://greenfield.cognitedata.com (skips the prompt; defaults to cluster-derived URL when omitted)").option("--spec-kit","Install spec-kit slash commands (skips the prompt)").option("--no-spec-kit","Skip spec-kit installation (skips the prompt)").addHelpText("after",`
70
+ `)}o(_i,"printSuccessMessage");async function Ui(e){try{let{execSkillsCli:t,pullAllArgs:n}=await import("../skills-GQ5TZKCM.js");console.log("\u{1F9E0} Pulling skills into your app..."),t(n(),{cwd:e,timeout:3e4,stdio:["pipe","pipe","inherit"]});let r=ne(e,".agents","skills"),i=0;try{i=ki(r).length}catch{console.warn(`Skills directory not found after pull \u2014 no skills may have been installed (expected: ${r})`)}let s=i>0?`${i} skills`:"skills";console.log(`\u2705 Installed ${s} successfully to
71
+ ${r}`)}catch(t){let n=t instanceof Error?t.message:String(t);console.warn("\u26A0\uFE0F Could not pull skills:",n)}}o(Ui,"pullSkillsInto");function Ki(e,t={}){let{isGitInstalled:n=Qt,isInsideGitRepo:r=en,gitInitAndCommit:i=tn}=t;if(!n()){console.warn("git not found \u2014 skipping git repository initialisation");return}if(!r(e)){console.log("Initialising git repository...");try{i(e)}catch(s){let p=(s&&typeof s=="object"&&"stderr"in s&&s.stderr?String(s.stderr).trim():"")||(s instanceof Error?s.message:String(s));console.warn("Could not initialise git repository:",p)}}}o(Ki,"maybeInitGit");async function Li(e,t){let n=e==="."||e==="./",r=Oi(e,n),i=null,s=!1,a={displayName:t.displayName,description:t.description,org:t.org,project:t.project,cluster:t.cluster,baseUrl:t.baseUrl},p=await Ti(),c=we(p),l=n?gn(process.cwd()):r?gn(r):null;await cn(c,a,l);let d=pn({isCurrentDir:n,dirName:r,onAppName:o(g=>{i=g},"onAppName"),onUseSpecKit:o(g=>{s=g},"onUseSpecKit"),presets:a,specKit:t.specKit});await Fi(["app","new"],{templates:fn,cwd:process.cwd(),logger:new $i(console.log.bind(console)),createPrompter:d,debug:!!process.env.DEBUG});let m=Ri(n,r,i);ve({target:"AGENTS.md",linkPath:ne(m.cwd,"CLAUDE.md"),label:"CLAUDE.md"}),s&&un({appDir:m.cwd}),await Ui(m.cwd),Ki(m.cwd),_i(n,m.display,s)}o(Li,"handleCreate");function yn(e){return e.command("create").description("Create a new application.").argument("[directory]","Target directory (. for current, or subdirectory name)").option("--display-name <name>","App display name (skips the prompt)").option("--description <description>","App description (skips the prompt)").option("--org <org>","Deployment org (skips the prompt)").option("--project <project>","Deployment project (skips the prompt)").option("--cluster <cluster>","CDF cluster, e.g. greenfield (skips the prompt)").option("--base-url <url>","CDF base URL, e.g. https://greenfield.cognitedata.com (skips the prompt; defaults to cluster-derived URL when omitted)").option("--spec-kit","Install spec-kit slash commands (skips the prompt)").option("--no-spec-kit","Skip spec-kit installation (skips the prompt)").addHelpText("after",`
71
72
  Non-interactive use (CI, scripts, AI agents):
72
73
  Pass [directory] plus --display-name, --description, --org, --project, --cluster, --base-url
73
74
  to skip every prompt. Missing flags fall back to the interactive prompt.
@@ -80,17 +81,17 @@ Examples:
80
81
  --display-name "My App" --description "My app" \\
81
82
  --org cog-atlas --project atlas-greenfield --cluster greenfield \\
82
83
  --base-url https://greenfield.cognitedata.com
83
- Fully non-interactive`).action(Zs)}o(er,"registerCreateCommand");import Xs from"path";async function ea(e,t,n){let r=await j(e,{interactive:t.interactive,appId:n,orgHint:t.org});return new P(r)}o(ea,"defaultGetApiClient");async function ta(e,t,n={}){let{loadEnvFile:r=b,loadAppConfig:i=k,getApiClient:s=ea}=n,a=Xs.resolve(process.cwd(),e);r(a);let p=i(a);V(p);let c=t.interactive?await K(p,t):O(p.deployments,t.deployment);if(!t.interactive){let g=T(c);if(g.length>0)throw new Error(`Deployment ${c.org}/${c.project} is missing ${g.join(" and ")} in app.json. Use \`npx @cognite/cli@latest apps deactivate --interactive\` for browser-based authentication instead.`)}let m=await s(c,t,p.externalId),{externalId:l}=p,d=await m.getActiveVersion(l);if(!d){console.log(` ${l} has no active version \u2014 nothing to deactivate.`);return}await m.deactivateVersion(l,d.version),console.log(`\u2713 Deactivated ${l} @ ${d.version} \u2014 active alias removed`)}o(ta,"handleDeactivate");function tr(e){return e.command("deactivate").description("Deactivate the app by removing its active version from service").argument("[path]","Path to the app folder (only `.` is currently supported)",".").option("-d, --deployment <target>","Deployment target from app.json (index or name)").option("--interactive","Use browser-based authentication instead of env-var credentials",!1).option("--base-url <url>","CDF base URL (only with --interactive)").option("--project <project>","CDF project name (only with --interactive)").option("--org <org>","Organization hint for login (only with --interactive)").addHelpText("after",`
84
+ Fully non-interactive`).action(Li)}o(yn,"registerCreateCommand");import ji from"path";async function Ni(e,t,n){let r=await A(e,{interactive:t.interactive,appId:n,orgHint:t.org});return new P(r)}o(Ni,"defaultGetApiClient");async function Mi(e,t,n={}){let{loadEnvFile:r=R,loadAppConfig:i=E,getApiClient:s=Ni}=n,a=ji.resolve(process.cwd(),e);r(a);let p=i(a);_(p);let c=t.interactive?await I(p,t):k(p.deployments,t.deployment);if(!t.interactive){let g=D(c);if(g.length>0)throw new Error(`Deployment ${c.org}/${c.project} is missing ${g.join(" and ")} in app.json. Use \`npx @cognite/cli@latest apps deactivate --interactive\` for browser-based authentication instead.`)}let l=await s(c,t,p.externalId),{externalId:d}=p,m=await l.getActiveVersion(d);if(!m){console.log(` ${d} has no active version \u2014 nothing to deactivate.`);return}await l.deactivateVersion(d,m.version),console.log(`\u2713 Deactivated ${d} @ ${m.version} \u2014 active alias removed`)}o(Mi,"handleDeactivate");function hn(e){return e.command("deactivate").description("Deactivate the app by removing its active version from service").argument("[path]","Path to the app folder (only `.` is currently supported)",".").option("-d, --deployment <target>","Deployment target from app.json (index or name)").option("--interactive","Use browser-based authentication instead of env-var credentials",!1).option("--base-url <url>","CDF base URL (only with --interactive)").option("--project <project>","CDF project name (only with --interactive)").option("--org <org>","Organization hint for login (only with --interactive)").addHelpText("after",`
84
85
  Examples:
85
86
  npx @cognite/cli apps deactivate . Deactivate using env-var auth
86
- npx @cognite/cli apps deactivate . --interactive Deactivate using browser auth (no secrets needed)`).action((t,n)=>ta(t,n))}o(tr,"registerDeactivateCommand");import{readFile as la,unlink as da}from"fs/promises";import{basename as ma}from"path";import rr from"fs";import sa from"path";import B from"fs";import A from"path";import{parseAndValidateManifestConfig as na}from"@cognite/app-sdk/vite";import{BlobReader as ra,Uint8ArrayWriter as oa,ZipWriter as ia}from"@zip.js/zip.js";var Pt="package.json",Et="package-lock.json",nr="manifest.json",bt=".cognite",At=class At{constructor(t="dist"){this.distPath=A.isAbsolute(t)?t:A.join(process.cwd(),t),this.appRoot=A.dirname(this.distPath)}validateBuildDirectory(){if(!B.existsSync(this.distPath))throw new Error(`Build directory "${this.distPath}" not found. Run build first.`);let t=A.join(this.appRoot,Pt);if(!B.existsSync(t))throw new Error(`"${t}" not found. It is required for deployment.`);let n=A.join(this.appRoot,Et);if(!B.existsSync(n))throw new Error(`"${n}" not found. It is required for deployment.`)}async createZip(t="app.zip",n=!1){this.validateBuildDirectory(),console.log("\u{1F4E6} Packaging application...");let r=new ia(new oa,{level:9}),i=o(async(c,m)=>{await r.add(m,new ra(await B.openAsBlob(c))),n&&console.log(` \u{1F4C4} ${m}`)},"addFile"),s=o(async c=>{let m=await B.promises.readdir(c,{withFileTypes:!0});for(let l of m){let d=A.join(c,l.name);l.isDirectory()?await s(d):await i(d,A.relative(this.distPath,d).replace(/\\/g,"/"))}},"addDir"),a;try{await s(this.distPath);let c=A.join(this.appRoot,Pt);await i(c,A.posix.join(bt,Pt));let m=A.join(this.appRoot,nr);if(B.existsSync(m)){let d=B.readFileSync(m,"utf-8");na(d,m),await i(m,A.posix.join(bt,nr))}let l=A.join(this.appRoot,Et);await i(l,A.posix.join(bt,Et)),a=await r.close()}catch(c){let m=c instanceof Error?c.message:String(c);throw new Error(`Failed to create zip: ${m}`)}await B.promises.writeFile(t,a);let p=(a.byteLength/1024/1024).toFixed(2);return console.log(`\u2705 App packaged: ${t} (${p} MB)`),t}};o(At,"ApplicationPackager");var X=At;var Dt=o(async(e,t,n)=>{let r=await new X(`${n}/dist`).createZip("app.zip",!0);try{let{externalId:i,name:s,description:a,versionTag:p}=t,c=await ye(e,n),m=new P(c),l=rr.readFileSync(r),d=sa.basename(r);await m.deploy(i,s,a,p,l,d,e.published)}finally{try{rr.unlinkSync(r)}catch{}}},"deploy");import{existsSync as aa,readFileSync as pa}from"fs";var or=[".dev.sig",".cert.sig"];function It(e,t={}){let n=t.existsSync??aa,r=t.readFileSync??((s,a)=>pa(s,a)),i=[];for(let s of or){let a=`${e}${s}`;if(!n(a))continue;let p=r(a,"utf8").trim();p.length>0&&i.push(p)}return i}o(It,"discoverSignatures");import{execSync as ca}from"child_process";function $t(e,t=!0,n={execSync:ca}){console.log("\u{1F4E6} Building app with npm..."),n.execSync("npm run build",{cwd:e,stdio:t?"inherit":"pipe"}),console.log("\u2705 Build successful")}o($t,"buildApp");function ir(e,t){let{org:n,project:r,baseUrl:i}=e,s;try{s=new URL(i).hostname}catch{return null}let{externalId:a,versionTag:p}=t,c=new URLSearchParams({cluster:s,customAppVersion:p,workspace:"industrial-tools"});return`https://${n}.fusion.cognite.com/${r}/flows-apps/app/${encodeURIComponent(a)}?${c}`}o(ir,"generateFusionUrl");function sr(e,t,n){let r=n?"\u{1F680} Deploy (Interactive)":"\u{1F680} Deploy",i=n?`${t.project} @ ${t.baseUrl}`:`${t.org}/${t.project}`;console.log(["",r,"=".repeat(r.length),`App: ${e.name} (${e.externalId})`,`Version: ${e.versionTag}`,`Target: ${i}`,""].join(`
87
- `))}o(sr,"printDeployInfo");function ar(e,t){console.log(`
87
+ npx @cognite/cli apps deactivate . --interactive Deactivate using browser auth (no secrets needed)`).action((t,n)=>Mi(t,n))}o(hn,"registerDeactivateCommand");import{mkdir as Ji,readFile as Yi}from"fs/promises";import{basename as qi,dirname as zi}from"path";import j from"fs";import x from"path";import{parseAndValidateManifestConfig as Vi}from"@cognite/app-sdk/vite";import{BlobReader as Hi,Uint8ArrayWriter as Bi,ZipWriter as Gi}from"@zip.js/zip.js";var ze="package.json",We="package-lock.json",Sn="manifest.json",Xe=".cognite",Ze=class Ze{constructor(t="dist"){this.distPath=x.isAbsolute(t)?t:x.join(process.cwd(),t),this.appRoot=x.dirname(this.distPath)}validateBuildDirectory(){if(!j.existsSync(this.distPath))throw new Error(`Build directory "${this.distPath}" not found. Run build first.`);let t=x.join(this.appRoot,ze);if(!j.existsSync(t))throw new Error(`"${t}" not found. It is required for deployment.`);let n=x.join(this.appRoot,We);if(!j.existsSync(n))throw new Error(`"${n}" not found. It is required for deployment.`)}async createZip(t="app.zip",n=!1){this.validateBuildDirectory(),console.log("\u{1F4E6} Packaging application...");let r=new Gi(new Bi,{level:9}),i=o(async(c,l)=>{await r.add(l,new Hi(await j.openAsBlob(c))),n&&console.log(` \u{1F4C4} ${l}`)},"addFile"),s=o(async c=>{let l=await j.promises.readdir(c,{withFileTypes:!0});for(let d of l){let m=x.join(c,d.name);d.isDirectory()?await s(m):await i(m,x.relative(this.distPath,m).replace(/\\/g,"/"))}},"addDir"),a;try{await s(this.distPath);let c=x.join(this.appRoot,ze);await i(c,x.posix.join(Xe,ze));let l=x.join(this.appRoot,Sn);if(j.existsSync(l)){let m=j.readFileSync(l,"utf-8");Vi(m,l),await i(l,x.posix.join(Xe,Sn))}let d=x.join(this.appRoot,We);await i(d,x.posix.join(Xe,We)),a=await r.close()}catch(c){let l=c instanceof Error?c.message:String(c);throw new Error(`Failed to create zip: ${l}`)}await j.promises.writeFile(t,a);let p=(a.byteLength/1024/1024).toFixed(2);return console.log(`\u2705 App packaged: ${t} (${p} MB)`),t}};o(Ze,"ApplicationPackager");var re=Ze;async function Ce(e,t,n,r){let{externalId:i,name:s,description:a,versionTag:p}=t,c=V(n,i,p);await Ji(zi(c),{recursive:!0}),await new re(`${n}/dist`).createZip(c,!0);let l=await Yi(c);await new P(e).deploy(i,s,a,p,l,qi(c),r)}o(Ce,"packageAndUpload");var Qe=o(async(e,t,n)=>{let r=await Q(e,n);await Ce(r,t,n,e.published)},"deploy");import{execSync as Wi}from"child_process";function et(e,t=!0,n={execSync:Wi}){console.log("\u{1F4E6} Building app with npm..."),n.execSync("npm run build",{cwd:e,stdio:t?"inherit":"pipe"}),console.log("\u2705 Build successful")}o(et,"buildApp");function wn(e,t){let{org:n,project:r,baseUrl:i}=e,s;try{s=new URL(i).hostname}catch{return null}let{externalId:a,versionTag:p}=t,c=new URLSearchParams({cluster:s,customAppVersion:p,workspace:"industrial-tools"});return`https://${n}.fusion.cognite.com/${r}/flows-apps/app/${encodeURIComponent(a)}?${c}`}o(wn,"generateFusionUrl");function vn(e,t,n){let r=n?"\u{1F680} Deploy (Interactive)":"\u{1F680} Deploy",i=n?`${t.project} @ ${t.baseUrl}`:`${t.org}/${t.project}`;console.log(["",r,"=".repeat(r.length),`App: ${e.name} (${e.externalId})`,`Version: ${e.versionTag}`,`Target: ${i}`,""].join(`
88
+ `))}o(vn,"printDeployInfo");function Cn(e,t){console.log(`
88
89
  \u2705 Successfully deployed ${e.name} version ${e.versionTag} to ${t.org?`${t.org}/`:""}${t.project}`),console.log("\u{1F512} App is deployed in draft mode");let n=e.deployments.length>1?` -d ${t.project}`:"";console.log(`
89
- To publish: npx @cognite/cli apps publish .${n}`),console.log(`To activate: npx @cognite/cli apps activate .${n}`);let r=ir(t,e);r&&console.log(`
90
+ To sign: npx @cognite/cli apps sign --interactive${n}`),console.log(`To publish: npx @cognite/cli apps publish .${n}`),console.log(`To activate: npx @cognite/cli apps activate .${n}`);let r=wn(t,e);r&&console.log(`
90
91
  \u{1F517} Open your app:
91
- ${r}`)}o(ar,"printDeployResult");async function ua(e,t,n,r,i){let s=T(t);if(s.length>0)throw new Error(`Deployment ${t.org}/${t.project} is missing ${s.join(" and ")} in app.json. Use \`cognite apps deploy --interactive\` for browser-based authentication instead.`);sr(e,t,!1),r.skipBuild||$t(n),console.log(`
92
- \u{1F4E4} Deploying to ${t.org}/${t.project}...`),await i({...t,published:!1},{externalId:e.externalId,name:e.name,description:e.description,versionTag:e.versionTag},n),ar(e,t)}o(ua,"handleDeployNonInteractive");async function ga(e,t,n,r){sr(e,t,!0),r.skipBuild||$t(n);let i=await j(t,{interactive:!0,appId:e.externalId,orgHint:r.org});console.log(`
93
- \u{1F4E4} Deploying to ${t.project}...`);let s=await new X(`${n}/dist`).createZip("app.zip",!0);try{let a=await la(s);await new P(i).deploy(e.externalId,e.name,e.description,e.versionTag,a,ma(s),!1),ar(e,t)}finally{await da(s).catch(()=>{})}}o(ga,"handleDeployInteractive");async function fa(e,t=process.cwd(),n={}){let{loadEnvFile:r=b,loadAppConfig:i=k,deploy:s=Dt}=n;r(t);let a=i(t);if(V(a),e.interactive){let c=await K(a,e);await ga(a,c,t,e);return}let p=O(a.deployments,e.deployment);await ua(a,p,t,e,s)}o(fa,"handleDeploy");function pr(e){return e.command("deploy").description("Deploy your app to Cognite Data Fusion. Use --interactive for browser-based login (no env-var secrets required).").option("-d, --deployment <target>","Deployment target (index or project name)").option("--skip-build","Skip the build step",!1).option("--interactive","Use browser-based authentication instead of env-var credentials",!1).option("--base-url <url>","CDF base URL (only with --interactive)").option("--project <project>","CDF project name (only with --interactive)").option("--org <org>","Organization hint for login (only with --interactive)").addHelpText("after",`
92
+ ${r}`)}o(Cn,"printDeployResult");async function Xi(e,t,n,r,i){let s=D(t);if(s.length>0)throw new Error(`Deployment ${t.org}/${t.project} is missing ${s.join(" and ")} in app.json. Use \`cognite apps deploy --interactive\` for browser-based authentication instead.`);vn(e,t,!1),r.skipBuild||et(n),console.log(`
93
+ \u{1F4E4} Deploying to ${t.org}/${t.project}...`),await i({...t,published:!1},{externalId:e.externalId,name:e.name,description:e.description,versionTag:e.versionTag},n),Cn(e,t)}o(Xi,"handleDeployNonInteractive");async function Zi(e,t,n,r){vn(e,t,!0),r.skipBuild||et(n);let i=await A(t,{interactive:!0,appId:e.externalId,orgHint:r.org});console.log(`
94
+ \u{1F4E4} Deploying to ${t.project}...`),await Ce(i,{externalId:e.externalId,name:e.name,description:e.description,versionTag:e.versionTag},n,!1),Cn(e,t)}o(Zi,"handleDeployInteractive");async function Qi(e,t=process.cwd(),n={}){let{loadEnvFile:r=R,loadAppConfig:i=E,deploy:s=Qe}=n;r(t);let a=i(t);if(_(a),e.interactive){let c=await I(a,e);await Zi(a,c,t,e);return}let p=k(a.deployments,e.deployment);await Xi(a,p,t,e,s)}o(Qi,"handleDeploy");function Pn(e){return e.command("deploy").description("Deploy your app to Cognite Data Fusion. Use --interactive for browser-based login (no env-var secrets required).").option("-d, --deployment <target>","Deployment target (index or project name)").option("--skip-build","Skip the build step",!1).option("--interactive","Use browser-based authentication instead of env-var credentials",!1).option("--base-url <url>","CDF base URL (only with --interactive)").option("--project <project>","CDF project name (only with --interactive)").option("--org <org>","Organization hint for login (only with --interactive)").addHelpText("after",`
94
95
  Environment (non-interactive):
95
96
  deployClientId and deploySecretName are configured per deployment in app.json.
96
97
  deploySecretName is the name of the environment variable that holds the client
@@ -104,157 +105,54 @@ Examples:
104
105
  npx @cognite/cli apps deploy -d my-project Deploy to project by name
105
106
  npx @cognite/cli apps deploy --skip-build Deploy without rebuilding
106
107
  npx @cognite/cli apps deploy --interactive Browser auth, prompts for target
107
- npx @cognite/cli apps deploy --interactive -d 0 Browser auth, target chosen non-interactively`).action(t=>fa(t))}o(pr,"registerDeployCommand");async function ya(e,t,n){let r=await j(e,{interactive:t.interactive,appId:n.externalId,orgHint:t.org});return new P(r)}o(ya,"defaultBuildApiClient");async function ha(e,t={}){let n=t.loadEnvFile??b,r=t.loadAppConfig??k,i=t.buildApiClient??ya,s=t.discoverSignatures??It,a=process.cwd();n(a);let p=r(a);V(p);let c=e.interactive?await K(p,e):O(p.deployments,e.deployment);if(!e.interactive){let h=T(c);if(h.length>0)throw new Error(`Deployment ${c.org}/${c.project} is missing ${h.join(" and ")} in app.json. Use \`cognite apps publish --interactive\` for browser-based authentication instead.`)}let m=await i(c,e,p),{externalId:l,versionTag:d}=p,g;try{g=await m.getVersion(l,d)}catch(h){throw h instanceof _?new Error(`Version ${d} of ${l} has not been deployed yet. Run \`npx @cognite/cli apps deploy\` first.`):h}if(g.alias==="ACTIVE"){console.log(` ${l} @ ${d} is already ACTIVE \u2014 nothing to do.`);return}if(g.lifecycleState==="PUBLISHED"){console.log(` ${l} @ ${d} is already PUBLISHED \u2014 nothing to do.`);return}if(g.lifecycleState==="DEPRECATED"||g.lifecycleState==="ARCHIVED")throw new Error(`Cannot publish ${l} @ ${d}: version is ${g.lifecycleState} (terminal).`);let f=s(`${a}/app.zip`);f.length>0&&await m.submitSignatures(l,d,f),await m.publishVersion(l,d),console.log(`\u2713 Published ${l} @ ${d} is now PUBLISHED`),console.log(""),console.log("Run `npx @cognite/cli apps activate .` to make it active.")}o(ha,"handlePublish");function cr(e){return e.command("publish").description("Publish the current app version (transition DRAFT \u2192 PUBLISHED)").argument("[path]","Path to the app folder (only `.` is currently supported)",".").option("-d, --deployment <target>","Deployment target from app.json (index or name)").option("--interactive","Use browser-based authentication instead of env-var credentials",!1).option("--base-url <url>","CDF base URL (only with --interactive)").option("--project <project>","CDF project name (only with --interactive)").option("--org <org>","Organization hint for login (only with --interactive)").addHelpText("after",`
108
+ npx @cognite/cli apps deploy --interactive -d 0 Browser auth, target chosen non-interactively`).action(t=>Qi(t))}o(Pn,"registerDeployCommand");async function es(e,t,n){let r=await A(e,{interactive:t.interactive,appId:n.externalId,orgHint:t.org});return new P(r)}o(es,"defaultBuildApiClient");async function ts(e,t={}){let n=t.loadEnvFile??R,r=t.loadAppConfig??E,i=t.buildApiClient??es,s=t.discoverSignatures??Z,a=process.cwd();n(a);let p=r(a);_(p);let c=e.interactive?await I(p,e):k(p.deployments,e.deployment);if(!e.interactive){let f=D(c);if(f.length>0)throw new Error(`Deployment ${c.org}/${c.project} is missing ${f.join(" and ")} in app.json. Use \`cognite apps publish --interactive\` for browser-based authentication instead.`)}let l=await i(c,e,p),{externalId:d,versionTag:m}=p,g;try{g=await l.getVersion(d,m)}catch(f){throw f instanceof T?new Error(`Version ${m} of ${d} has not been deployed yet. Run \`npx @cognite/cli apps deploy\` first.`):f}if(g.alias==="ACTIVE"){console.log(` ${d} @ ${m} is already ACTIVE \u2014 nothing to do.`);return}if(g.lifecycleState==="PUBLISHED"){console.log(` ${d} @ ${m} is already PUBLISHED \u2014 nothing to do.`);return}if(g.lifecycleState==="DEPRECATED"||g.lifecycleState==="ARCHIVED")throw new Error(`Cannot publish ${d} @ ${m}: version is ${g.lifecycleState} (terminal).`);let u=s(V(a,d,m));u.length>0&&await l.submitSignatures(d,m,u),await l.publishVersion(d,m),console.log(`\u2713 Published ${d} @ ${m} is now PUBLISHED`),console.log(""),console.log("Run `npx @cognite/cli apps activate .` to make it active.")}o(ts,"handlePublish");function En(e){return e.command("publish").description("Publish the current app version (transition DRAFT \u2192 PUBLISHED)").argument("[path]","Path to the app folder (only `.` is currently supported)",".").option("-d, --deployment <target>","Deployment target from app.json (index or name)").option("--interactive","Use browser-based authentication instead of env-var credentials",!1).option("--base-url <url>","CDF base URL (only with --interactive)").option("--project <project>","CDF project name (only with --interactive)").option("--org <org>","Organization hint for login (only with --interactive)").addHelpText("after",`
108
109
  Examples:
109
110
  npx @cognite/cli apps publish . Publish using env-var auth
110
- npx @cognite/cli apps publish . --interactive Publish using browser auth (no secrets needed)`).action((t,n)=>ha(n))}o(cr,"registerPublishCommand");function wa(e){return e.alias==="ACTIVE"?"ACTIVE":e.lifecycleState}o(wa,"describeStatus");async function Sa(e){let t=process.cwd();b(t);let n=k(t);V(n);let r=e.interactive?await K(n,e):O(n.deployments,e.deployment);if(!e.interactive){let a=T(r);if(a.length>0)throw new Error(`Deployment ${r.org}/${r.project} is missing ${a.join(" and ")} in app.json. Use \`cognite apps status --interactive\` for browser-based authentication instead.`)}let i=await j(r,{interactive:e.interactive,appId:n.externalId,orgHint:e.org}),s=new P(i);console.log(""),console.log(`App: ${n.name} (${n.externalId})`),console.log(`Version: ${n.versionTag} (local)`);try{let a=await s.getVersion(n.externalId,n.versionTag),p=wa(a);console.log(`Status: ${p}`),a.lifecycleState==="DRAFT"&&(console.log(""),console.log("Run `npx @cognite/cli apps publish .` to publish this version."))}catch(a){if(a instanceof _){console.log("Status: not deployed yet"),console.log(""),console.log("Run `npx @cognite/cli apps deploy` to upload this version.");return}throw a}}o(Sa,"handleStatus");function lr(e){return e.command("status").description("Show the deployment status of the current app version").argument("[path]","Path to the app folder (only `.` is currently supported)",".").option("-d, --deployment <target>","Deployment target from app.json (index or name)").option("--interactive","Use browser-based authentication instead of env-var credentials",!1).option("--base-url <url>","CDF base URL (only with --interactive)").option("--project <project>","CDF project name (only with --interactive)").option("--org <org>","Organization hint for login (only with --interactive)").addHelpText("after",`
111
+ npx @cognite/cli apps publish . --interactive Publish using browser auth (no secrets needed)`).action((t,n)=>ts(n))}o(En,"registerPublishCommand");function ns(e){return e.alias==="ACTIVE"?"ACTIVE":e.lifecycleState}o(ns,"describeStatus");async function rs(e){let t=process.cwd();R(t);let n=E(t);_(n);let r=e.interactive?await I(n,e):k(n.deployments,e.deployment);if(!e.interactive){let a=D(r);if(a.length>0)throw new Error(`Deployment ${r.org}/${r.project} is missing ${a.join(" and ")} in app.json. Use \`cognite apps status --interactive\` for browser-based authentication instead.`)}let i=await A(r,{interactive:e.interactive,appId:n.externalId,orgHint:e.org}),s=new P(i);console.log(""),console.log(`App: ${n.name} (${n.externalId})`),console.log(`Version: ${n.versionTag} (local)`);try{let a=await s.getVersion(n.externalId,n.versionTag),p=ns(a);console.log(`Status: ${p}`),a.lifecycleState==="DRAFT"&&(console.log(""),console.log("Run `npx @cognite/cli apps publish .` to publish this version."))}catch(a){if(a instanceof T){console.log("Status: not deployed yet"),console.log(""),console.log("Run `npx @cognite/cli apps deploy` to upload this version.");return}throw a}}o(rs,"handleStatus");function bn(e){return e.command("status").description("Show the deployment status of the current app version").argument("[path]","Path to the app folder (only `.` is currently supported)",".").option("-d, --deployment <target>","Deployment target from app.json (index or name)").option("--interactive","Use browser-based authentication instead of env-var credentials",!1).option("--base-url <url>","CDF base URL (only with --interactive)").option("--project <project>","CDF project name (only with --interactive)").option("--org <org>","Organization hint for login (only with --interactive)").addHelpText("after",`
111
112
  Examples:
112
113
  npx @cognite/cli apps status . Status using env-var auth
113
- npx @cognite/cli apps status . --interactive Status using browser auth (no secrets needed)`).action((t,n)=>Sa(n))}o(lr,"registerStatusCommand");import{existsSync as Vr,readFileSync as ke,writeFileSync as Vt,mkdirSync as yp}from"fs";import{resolve as U}from"path";import{fileURLToPath as hp}from"url";import{CogniteClient as wp}from"@cognite/sdk";import{mkdirSync as up,readFileSync as gp,rmSync as fp,writeFileSync as de}from"fs";import{resolve as q}from"path";import{generate as Nr}from"@graphql-codegen/cli";import{GraphQLSchema as ep,GraphQLObjectType as tp,GraphQLNonNull as L,GraphQLList as le,GraphQLString as re,GraphQLInt as np,GraphQLInputObjectType as Ir,printSchema as rp}from"graphql";function Tt(e){return{space:e.space,externalId:e.externalId,version:e.version}}o(Tt,"toSharedViewId");function va(e){switch(e){case"text":return"String";case"boolean":return"Boolean";case"int32":case"int64":return"Int";case"float32":case"float64":return"Float";case"timestamp":return"DateTime";case"date":return"Date";case"json":return"JSON";case"timeseries":return"CogniteTimeSeriesReference";case"file":return"CogniteFileReference";case"sequence":return"CogniteSequenceReference";case"enum":return"String";default:return"String"}}o(va,"dmsTypeToGraphQL");function dr(e){if(!("source"in e)){if(e.type?.type==="direct")return e.type.list?{kind:"scalar",isList:!1,graphqlType:"JSON"}:e.type.source?{kind:"directRelation",targetView:Tt(e.type.source)}:{kind:"scalar",isList:!1,graphqlType:"JSON"};if(e.type?.type==="enum"){let t=e.type,n={};if(typeof t=="object"&&t!==null&&"values"in t){let r=t.values;if(typeof r=="object"&&r!==null)for(let[i,s]of Object.entries(r))n[i]={name:typeof s=="object"&&s!==null&&"name"in s?String(s.name):void 0}}return{kind:"enum",values:Object.keys(n),valueNames:Object.fromEntries(Object.entries(n).map(([r,i])=>[r,i.name??r]))}}return{kind:"scalar",isList:e.type!==void 0&&"list"in e.type&&e.type.list===!0,graphqlType:e.type?.type?va(e.type.type):"String"}}if("through"in e)return{kind:e.connectionType==="single_reverse_direct_relation"?"reverseDirect":"reverseList",sourceView:Tt(e.source),throughProperty:e.through.identifier};if(e.connectionType==="single_edge_connection"||e.connectionType==="multi_edge_connection"){let t=e.direction==="inwards"?"inwards":"outwards";return{kind:"edge",targetView:Tt(e.source),direction:t}}return{kind:"scalar"}}o(dr,"parsePropertyDescriptor");var mr=new Set(["String","Boolean","Int","Float","DateTime","Date"]);var Ca=new Set(["String","Int","Float","DateTime","Date"]);function Me(e){return e.kind==="directRelation"||e.kind==="enum"?!0:e.kind!=="scalar"||e.isList===!0?!1:mr.has(e.graphqlType??"String")}o(Me,"isFilterableDescriptor");function Ue(e){return e.kind==="enum"?!0:e.kind!=="scalar"||e.isList===!0?!1:mr.has(e.graphqlType??"String")}o(Ue,"isSortableDescriptor");function ur(e){return e.kind==="directRelation"||e.kind==="enum"?!0:e.kind==="scalar"&&e.isList!==!0&&Ca.has(e.graphqlType??"")}o(ur,"hasInOpDescriptor");function gr(e){return e.kind==="scalar"&&e.isList===!0}o(gr,"hasListOpsDescriptor");function Se(e){return e.usedFor!=="edge"}o(Se,"isNodeOrAll");function R(e){return Object.entries(e.properties).map(([t,n])=>[t,dr(n),n.description])}o(R,"parsedProperties");import{GraphQLObjectType as fr,GraphQLNonNull as ve,GraphQLString as Lt,GraphQLFloat as He,GraphQLList as Aa,GraphQLEnumType as Da}from"graphql";import{GraphQLScalarType as ee,Kind as D}from"graphql";function Rt(e){switch(e.kind){case D.STRING:case D.BOOLEAN:return e.value;case D.INT:return parseInt(e.value,10);case D.FLOAT:return parseFloat(e.value);case D.OBJECT:{let t={};for(let n of e.fields)t[n.name.value]=Rt(n.value);return t}case D.LIST:return e.values.map(Rt);case D.NULL:return null;default:return null}}o(Rt,"parseLiteralJSON");var ka=new ee({name:"DateTime",serialize:o(e=>e,"serialize"),parseValue:o(e=>e,"parseValue"),parseLiteral:o(e=>e.kind===D.STRING?e.value:null,"parseLiteral")}),xa=new ee({name:"Date",serialize:o(e=>e,"serialize"),parseValue:o(e=>e,"parseValue"),parseLiteral:o(e=>e.kind===D.STRING?e.value:null,"parseLiteral")}),Ft=new ee({name:"JSON",serialize:o(e=>e,"serialize"),parseValue:o(e=>e,"parseValue"),parseLiteral:Rt}),Pa=new ee({name:"CogniteTimeSeriesReference",serialize:o(e=>e,"serialize"),parseValue:o(e=>e,"parseValue"),parseLiteral:o(e=>e.kind===D.STRING?e.value:null,"parseLiteral")}),Ea=new ee({name:"CogniteFileReference",serialize:o(e=>e,"serialize"),parseValue:o(e=>e,"parseValue"),parseLiteral:o(e=>e.kind===D.STRING?e.value:null,"parseLiteral")}),ba=new ee({name:"CogniteSequenceReference",serialize:o(e=>e,"serialize"),parseValue:o(e=>e,"parseValue"),parseLiteral:o(e=>e.kind===D.STRING?e.value:null,"parseLiteral")}),Ge=new ee({name:"ListLimit",description:"Limit for list/search queries (1\u20131000).",serialize:o(e=>e,"serialize"),parseValue:o(e=>e,"parseValue"),parseLiteral:o(e=>e.kind===D.INT?parseInt(e.value,10):null,"parseLiteral")}),te={DateTime:ka,Date:xa,JSON:Ft,CogniteTimeSeriesReference:Pa,CogniteFileReference:Ea,CogniteSequenceReference:ba,ListLimit:Ge},Ot={DateTime:"string",Date:"string",JSON:"unknown",CogniteTimeSeriesReference:"string",CogniteFileReference:"string",CogniteSequenceReference:"string",ListLimit:"number"};var Ia=new Da({name:"AggregateFunction",values:{count:{value:"count"},avg:{value:"avg"},sum:{value:"sum"},min:{value:"min"},max:{value:"max"},histogram:{value:"histogram"}}}),yr={function:{type:new ve(Ia)},property:{type:Lt},interval:{type:He}},$a=new fr({name:"HistogramBucket",fields:{start:{type:new ve(He)},count:{type:new ve(He)}}}),hr=new fr({name:"AggregateResult",fields:{aggregate:{type:new ve(Lt)},property:{type:Lt},value:{type:He},buckets:{type:new Aa(new ve($a))},group:{type:Ft}}});import{GraphQLObjectType as _t,GraphQLNonNull as ae,GraphQLList as Ta,GraphQLString as Nt,GraphQLBoolean as Ra}from"graphql";var Fa=new _t({name:"PageInfo",fields:{endCursor:{type:Nt},hasNextPage:{type:new ae(Ra)}}}),Be=new _t({name:"NodeReference",fields:{space:{type:new ae(Nt)},externalId:{type:new ae(Nt)}}});function qe(e,t){return new _t({name:`${e}Connection`,fields:{items:{type:new ae(new Ta(new ae(t)))},pageInfo:{type:new ae(Fa)}}})}o(qe,"makeConnectionType");import{GraphQLInputObjectType as pe,GraphQLList as $,GraphQLNonNull as kr,GraphQLString as ne,GraphQLBoolean as I,GraphQLFloat as Ma,GraphQLInt as Ua}from"graphql";import{GraphQLObjectType as Oa,GraphQLNonNull as wr,GraphQLList as La,GraphQLString as Qe,GraphQLBoolean as Na,GraphQLInt as _a,GraphQLFloat as ja,GraphQLEnumType as Ka}from"graphql";function Sr(e){return e==="String"?Qe:e==="Boolean"?Na:e==="Int"?_a:e==="Float"?ja:te[e]??Qe}o(Sr,"scalarForName");function vr(e){return{typeRegistry:new Map,connectionRegistry:new Map,viewsByExtId:new Map(e.map(t=>[t.externalId,t])),enumRegistry:new Map,enumFilterRegistry:new Map}}o(vr,"createTypeContext");function Va(e){let t=e.replace(/[^_A-Za-z0-9]/g,"_");return/^[0-9]/.test(t)&&(t=`_${t}`),t||"_UNKNOWN"}o(Va,"sanitizeEnumValue");function jt(e,t,n,r){let i=n.enumRegistry.get(e);if(i)return i;let s=new Ka({name:e,values:Object.fromEntries(t.map(a=>[Va(a),{value:a,description:r?.[a]}]))});return n.enumRegistry.set(e,s),s}o(jt,"getOrCreateEnumType");function Cr(e,t){return new Oa({name:e.externalId,description:e.description??e.name,fields:o(()=>{let n={space:{type:new wr(Qe)},externalId:{type:new wr(Qe)}};for(let[r,i,s]of R(e))if(i.kind==="scalar")i.isList?n[r]={type:new La(Sr(i.graphqlType??"String")),description:s}:n[r]={type:Sr(i.graphqlType??"String"),description:s};else if(i.kind==="enum"){let a=`${e.externalId}${r.charAt(0).toUpperCase()}${r.slice(1)}`;n[r]={type:jt(a,i.values,t,i.valueNames),description:s}}else if(i.kind==="directRelation"){let a=t.typeRegistry.get(i.targetView.externalId)??Be;n[r]={type:a,description:s}}else if(i.kind==="reverseList"||i.kind==="edge"){let a=i.kind==="reverseList"?i.sourceView.externalId:i.targetView.externalId,p=t.typeRegistry.get(a)??Be,c=t.connectionRegistry.get(a);c||(c=qe(a,p),t.connectionRegistry.set(a,c)),n[r]={type:c,description:s}}else if(i.kind==="reverseDirect"){let a=t.typeRegistry.get(i.sourceView.externalId)??Be;n[r]={type:a,description:s}}return n},"fields")})}o(Cr,"generateViewObjectType");function ce(e,t,n){let r={isNull:{type:I},exists:{type:I},eq:{type:t}};return n.hasIn&&(r.in={type:new $(t)}),n.hasPrefix&&(r.prefix={type:ne}),n.hasRange&&(r.gte={type:t},r.gt={type:t},r.lte={type:t},r.lt={type:t}),n.hasListOps&&(r.containsAny={type:new $(t)},r.containsAll={type:new $(t)},r.overlaps={type:new $(t)}),new pe({name:e,fields:r})}o(ce,"makeScalarFilter");var Je=ce("StringFilter",ne,{hasIn:!0,hasPrefix:!0}),Ga=ce("BooleanFilter",I,{}),Ha=ce("IntFilter",Ua,{hasIn:!0,hasRange:!0}),Ba=ce("FloatFilter",Ma,{hasIn:!0,hasRange:!0}),qa=ce("DateTimeFilter",te.DateTime,{hasIn:!0,hasRange:!0}),Qa=ce("DateFilter",te.Date,{hasIn:!0,hasRange:!0}),Ja=new pe({name:"StringListFilter",fields:{isNull:{type:I},exists:{type:I},containsAny:{type:new $(ne)},containsAll:{type:new $(ne)},overlaps:{type:new $(ne)}}}),Ce=new pe({name:"DirectRelationRef",fields:{space:{type:new kr(ne)},externalId:{type:new kr(ne)}}}),za=new pe({name:"DirectRelationFilter",fields:{isNull:{type:I},exists:{type:I},eq:{type:Ce},in:{type:new $(Ce)}}});function Ya(e){switch(e){case"String":return Je;case"Boolean":return Ga;case"Int":return Ha;case"Float":return Ba;case"DateTime":return qa;case"Date":return Qa;default:return Je}}o(Ya,"scalarFilterForName");var xr=["space","externalId"];function Pr(e,t,n){let r=t.get(e.externalId),i={};for(let a of xr)i[a]={type:Je};let s=new Set(xr);for(let[a,p]of R(e)){if(s.has(a))continue;let c=Me(p),m=gr(p);if(!(!c&&!m))if(p.kind==="directRelation"){let l={isNull:{type:I},exists:{type:I},eq:{type:Ce},in:{type:new $(Ce)}};ur(p)&&(l.in={type:new $(Ce)});let d=t.get(p.targetView.externalId);d&&(l.nested={type:d}),i[a]=d?{type:new pe({name:`_${e.externalId}_${a}_Filter`,fields:l})}:{type:za}}else if(p.kind==="enum"){let l=`${e.externalId}${a.charAt(0).toUpperCase()}${a.slice(1)}`,d=jt(l,p.values,n),g=n.enumFilterRegistry.get(l);g||(g=new pe({name:`${l}Filter`,fields:{isNull:{type:I},exists:{type:I},eq:{type:d},in:{type:new $(d)}}}),n.enumFilterRegistry.set(l,g)),i[a]={type:g}}else if(m)i[a]={type:Ja};else{let l=p.kind==="scalar"?p.graphqlType??"String":"String",d=Ya(l);d&&(i[a]={type:d})}}return{...i,hasData:{type:I},matchAll:{type:I},_and:{type:new $(r)},_or:{type:new $(r)},_not:{type:r}}}o(Pr,"generateFilterFields");import{GraphQLEnumType as Er,GraphQLInputObjectType as br,GraphQLList as Wa,GraphQLNonNull as ze,GraphQLString as Za,GraphQLBoolean as Xa}from"graphql";var Ye=new Er({name:"SortDirection",values:{ASC:{value:"ascending"},DESC:{value:"descending"}}});function Ar(e){let t=[];for(let[r,i]of R(e))Ue(i)&&t.push(r);if(t.length===0)return null;let n=new Er({name:`${e.externalId}SortField`,values:Object.fromEntries(t.map(r=>[r,{value:r}]))});return new br({name:`${e.externalId}Sort`,fields:{field:{type:new ze(n)},direction:{type:new ze(Ye)},nullsFirst:{type:Xa}}})}o(Ar,"generateSortInput");var Dr=new br({name:"SearchSort",fields:{property:{type:new ze(new Wa(new ze(Za)))},direction:{type:Ye}}});function $r(e){let t=e.filter(Se),n=vr(t);for(let l of t){let d=Cr(l,n);n.typeRegistry.set(l.externalId,d)}let r=new Map;for(let l of t){let d=new Ir({name:`${l.externalId}Filter`,fields:o(()=>Pr(l,r,n),"fields")});r.set(l.externalId,d)}let i={};for(let l of t){let d=l.externalId,g=n.typeRegistry.get(d),f=n.connectionRegistry.get(d);f||(f=qe(d,g),n.connectionRegistry.set(d,f));let h=r.get(d),S=Ar(l),u={limit:{type:Ge},cursor:{type:re},filter:{type:h}};S&&(u.sort={type:new le(S)}),i[`query${d}`]={type:new L(f),args:u},i[`get${d}ById`]={type:g,args:{space:{type:new L(re)},externalId:{type:new L(re)}}},i[`count${d}`]={type:new L(np),args:{filter:{type:h}}},i[`search${d}`]={type:new L(f),args:{query:{type:re},limit:{type:Ge},filter:{type:h},sort:{type:new le(new L(Dr))},properties:{type:new le(new L(re))}}},i[`aggregate${d}`]={type:new L(new le(new L(hr))),args:{filter:{type:h},aggregates:{type:new le(new L(new Ir({name:`${d}AggregateRequest`,fields:yr})))},groupBy:{type:new le(new L(re))},query:{type:re}}}}let s=[];for(let[l,d]of n.typeRegistry)s.push({name:d.name,source:`typeRegistry[${l}]`});for(let[l,d]of n.connectionRegistry)s.push({name:d.name,source:`connectionRegistry[${l}]`});let a=new Map;for(let{name:l,source:d}of s)a.has(l)||a.set(l,[]),a.get(l).push(d);for(let[l,d]of a)d.length>1&&console.error(`[dune] duplicate type "${l}" from: ${d.join(", ")}`);let p=new ep({query:new tp({name:"Query",fields:i}),types:[Ye,...Object.values(te),...n.enumRegistry.values()]}),c=new Map;for(let l of t){let d=new Map;for(let[g,f]of R(l))d.set(g,f);c.set(l.externalId,{view:{space:l.space,externalId:l.externalId,version:l.version},properties:d})}let m={view(l){let d=c.get(l.externalId);if(!d)throw new Error(`SchemaKnowledge: no view for externalId "${l.externalId}"`);return d},property(l,d){return c.get(l.externalId)?.properties.get(d)}};return{schema:p,sdl:rp(p),schemaKnowledge:m}}o($r,"buildSchema");async function Tr(e,t){let r=(await t.dataModels.retrieve([{space:e.space,externalId:e.dataModelExternalId,version:e.dataModelVersion}],{inlineViews:!1})).items[0];if(!r)throw new Error(`Data model ${e.space}/${e.dataModelExternalId}/${e.dataModelVersion} not found`);if(!r.views?.length)throw new Error(`Data model ${e.space}/${e.dataModelExternalId}/${e.dataModelVersion} has no views`);let i=r.views.map(a=>({space:a.space,externalId:a.externalId,version:a.version}));return(await t.views.retrieve(i,{includeInheritedProperties:!0})).items}o(Tr,"fetchViews");import{GraphQLObjectType as op,GraphQLNonNull as ip,GraphQLList as sp,isScalarType as ap,isEnumType as pp,parse as cp,print as lp}from"graphql";function Kt(e,t){let n=e.getType(t);if(!(n instanceof op))return[];let r=n.getFields(),i=[];for(let[s,a]of Object.entries(r)){let p=a.type;for(;p instanceof ip||p instanceof sp;)p=p.ofType;(ap(p)||pp(p))&&i.push(s)}return i}o(Kt,"scalarFieldsFor");function dp(e,t){let n=Kt(e,t),r=["space","externalId"];for(let i of["name","description"])n.includes(i)&&r.push(i);return r.join(" ")}o(dp,"minimalRelationFields");function Rr(e,t,n){let r=[];for(let[i,s]of R(e))if(s.kind==="directRelation"||s.kind==="reverseDirect"){let a=s.kind==="directRelation"?s.targetView.externalId:s.sourceView.externalId;if(n)r.push(`${i} { ${dp(t,a)} }`);else{let c=["space","externalId",...Kt(t,a).filter(m=>m!=="space"&&m!=="externalId")];r.push(`${i} { ${c.join(" ")} }`)}}else!n&&(s.kind==="reverseList"||s.kind==="edge")&&r.push(`${i} { items { space externalId } pageInfo { hasNextPage endCursor } }`);return r}o(Rr,"relationFieldsFor");function Fr(e,t,n,r){return`query ${e}(${t}) {
114
- ${e}(${n}) {
115
- items {
116
- ${r}
117
- }
118
- pageInfo { hasNextPage endCursor }
119
- }
120
- }`}o(Fr,"paginatedOp");function Or(e,t){let n=e.externalId,r=Kt(t,n),i=Rr(e,t,!0),s=Rr(e,t,!1),a=[...r,...i].join(`
121
- `),p=[...r,...s].join(`
122
- `),c=!!t.getType(`${n}Sort`),m=Fr(`query${n}`,c?`$limit: ListLimit, $cursor: String, $filter: ${n}Filter, $sort: [${n}Sort!]`:`$limit: ListLimit, $cursor: String, $filter: ${n}Filter`,c?"limit: $limit, cursor: $cursor, filter: $filter, sort: $sort":"limit: $limit, cursor: $cursor, filter: $filter",a),l=Fr(`search${n}`,`$query: String, $limit: ListLimit, $filter: ${n}Filter, $sort: [SearchSort!], $properties: [String!]`,"query: $query, limit: $limit, filter: $filter, sort: $sort, properties: $properties",a),d=`query get${n}ById($space: String!, $externalId: String!) {
123
- get${n}ById(space: $space, externalId: $externalId) {
124
- ${p}
125
- }
126
- }
127
- `,g=`query count${n}($filter: ${n}Filter) {
128
- count${n}(filter: $filter)
129
- }`,f=`query aggregate${n}($filter: ${n}Filter, $aggregates: [${n}AggregateRequest!], $groupBy: [String!], $query: String) {
130
- aggregate${n}(filter: $filter, aggregates: $aggregates, groupBy: $groupBy, query: $query) {
131
- aggregate
132
- property
133
- value
134
- buckets { start count }
135
- group
136
- }
137
- }`;return lp(cp([m,d,g,l,f].join(`
138
-
139
- `)))}o(Or,"generateViewOperations");function mp(e){return{availableOnList:e.kind==="scalar",returnsMany:e.kind==="reverseList"||e.kind==="edge",filterable:Me(e),sortable:Ue(e)}}o(mp,"fetchCharacteristics");function Lr(e){return{generatedAt:new Date().toISOString(),views:e.map(t=>({space:t.space,externalId:t.externalId,version:t.version,properties:Object.fromEntries(R(t).map(([n,r])=>[n,{kind:r.kind,fetch:mp(r)}]))}))}}o(Lr,"buildSdkMetadata");async function _r(e,t,n){let r=await Tr(e,t),i=new Set,s=r.filter(u=>i.has(u.externalId)?(console.error(`[dune] dedup: dropped ${u.space}/${u.externalId} (duplicate externalId)`),!1):(i.add(u.externalId),!0));console.error(`[dune] views after dedup: ${s.length} (was ${r.length})`);let{schema:a,sdl:p}=$r(s),c=s.filter(Se),m=q(n,e.name);fp(m,{recursive:!0,force:!0}),up(m,{recursive:!0}),de(q(m,"schema.graphql"),p,"utf-8"),de(q(m,"sdk-metadata.json"),JSON.stringify(Lr(c),null,2),"utf-8"),de(q(m,"views.generated.ts"),`import type { ViewDefinition } from '@cognite/sdk';
140
-
141
- // Auto-generated \u2014 do not edit.
142
- export const views: ViewDefinition[] = ${JSON.stringify(c,null,2)};
143
- `,"utf-8"),await Nr({schema:p,generates:{[q(m,"types.generated.ts")]:{plugins:["typescript"],config:{scalars:Ot}}}},!0);for(let u of c){let y=Or(u,a),w=q(m,`${u.externalId}.generated.ts`);await Nr({schema:p,documents:y,generates:{[w]:{plugins:["typescript-operations","typescript-generic-sdk"],config:{scalars:Ot,namespacedImportName:"Types"}}}},!0);let v=gp(w,"utf-8");v=v.replace(/^import \{ DocumentNode \} from 'graphql';$/m,"import type { DocumentNode } from 'graphql';").replace(/Requester<C = \{\}>/g,"Requester<C = Record<string, never>>"),v.includes("import type * as Types")||(v=v.replace(/^import type \{ DocumentNode \} from 'graphql';$/m,`import type { DocumentNode } from 'graphql';
144
- import type * as Types from './types.generated.js';`)),de(w,v)}let l=c.map(u=>u.externalId).sort((u,y)=>u.localeCompare(y)),d=o(u=>u.replace(/([a-z])([A-Z])/g,"$1 $2").replace(/([A-Z]+)([A-Z][a-z])/g,"$1 $2").split(/[\s_-]+/).filter(Boolean).map(y=>y.charAt(0).toUpperCase()+y.slice(1).toLowerCase()).join(""),"normalizeTypeName"),g=[...l.map(u=>`import { getSdk as get${u}Sdk } from './${u}.generated.js';`),"import { views } from './views.generated.js';"].sort((u,y)=>{let w=o(v=>v.match(/from '(\.\/[^']+)'/)?.[1]??"","path");return w(u).localeCompare(w(y),void 0,{sensitivity:"base"})}).join(`
145
- `),f=l.map(u=>` ...get${u}Sdk(requester),`).join(`
146
- `),h=l.map(u=>{let y=d(u);return`export type {
147
- ${["query","get","count","search","aggregate"].flatMap(x=>{let E=x==="get"?`Get${y}ById`:`${x.charAt(0).toUpperCase()+x.slice(1)}${y}`;return[` ${E}Query`,` ${E}QueryVariables`]}).join(`,
148
- `)},
149
- } from './${u}.generated.js';`}).join(`
150
- `);de(q(m,"index.ts"),`import { createDuneRuntimeFromViews } from '@cognite/cli';
151
- import type { CogniteClient } from '@cognite/sdk';
152
-
153
- ${g}
154
-
155
- export * from './types.generated.js';
156
- ${h}
157
-
158
- // Internal \u2014 merges all per-view getSdk() functions.
159
- // Not exported: callers use createSdk() instead.
160
- function makeSdk(requester: Parameters<typeof get${l[0]}Sdk>[0]) {
161
- return {
162
- ${f}
163
- };
164
- }
165
-
166
- export type Sdk = ReturnType<typeof makeSdk>;
167
-
168
- /**
169
- * Creates a fully-typed SDK backed by the Dune runtime.
170
- * Queries are executed in-process via graphql-js and translated to DMS API calls \u2014
171
- * no CDF GraphQL endpoint is involved.
172
- */
173
- export function createSdk(client: CogniteClient): Sdk {
174
- const runtime = createDuneRuntimeFromViews(views, client);
175
- return makeSdk(runtime.requester);
176
- }
177
- `,"utf-8");let S=l.flatMap(u=>[` query${u}: vi.fn(() => Promise.resolve({ query${u}: { items: [], pageInfo: { hasNextPage: false, endCursor: null } } })),`,` get${u}ById: vi.fn(() => Promise.resolve({ get${u}ById: null })),`,` count${u}: vi.fn(() => Promise.resolve({ count${u}: 0 })),`,` search${u}: vi.fn(() => Promise.resolve({ search${u}: { items: [], pageInfo: { hasNextPage: false, endCursor: null } } })),`,` aggregate${u}: vi.fn(() => Promise.resolve({ aggregate${u}: [] })),`]).join(`
178
- `);return de(q(m,"test-helpers.ts"),`import { vi } from 'vitest';
179
-
180
- import type { Sdk } from './index.js';
181
-
182
- export function makeMockSdk(overrides: Partial<Sdk> = {}): Sdk {
183
- return {
184
- ${S}
185
- ...overrides,
186
- } as Sdk;
187
- }
188
- `,"utf-8"),{sdkDir:m,viewCount:c.length}}o(_r,"generateSdk");var We=Symbol("BACK");async function Mr(e,t={}){let n=process.cwd();b(n);let r=e.deployments[0],{baseUrl:i,project:s}=r;if(t.interactive){console.log(`Starting browser login...
189
- `);let c=await _e(t.orgHint??r.org??void 0);if(!c?.access_token)throw new Error("No access token received");return console.log(`
190
- \u2705 Authentication successful!
191
- `),{token:c.access_token,baseUrl:i,project:s}}if(process.env.COGNITE_TOKEN)return{token:process.env.COGNITE_TOKEN,baseUrl:i,project:s};let a=T(r);if(a.length>0)throw new Error(`Missing deployment credentials (${a.join(", ")}). Set COGNITE_TOKEN in .env, configure deployClientId/deploySecretName, or run with --interactive for browser login.`);let p=await fe(r);return console.log(`\u2705 Authenticated
192
- `),{token:p,baseUrl:i,project:s}}o(Mr,"resolveAuth");async function Ut(e){let t=await import("enquirer"),n=t.default?.[e]??t[e];if(typeof n!="function")throw new Error(`Enquirer class "${e}" not found`);return n}o(Ut,"getEnquirerClass");async function Mt(e,t,n){let r=await Ut("Select"),i=t.map((c,m)=>({name:n(c,m),value:m})),a=await new r({message:e,choices:i.map(c=>c.name)}).run(),p=i.findIndex(c=>c.name===a);return t[p]}o(Mt,"pick");async function Sp(e,t,n){let r=await Ut("AutoComplete"),i=t.map((l,d)=>n(l,d)),s=new Map(i.map((l,d)=>[l,d])),p=await new r({message:e,limit:12,choices:i}).run();if(s.has(p))return t[s.get(p)];let c=o(l=>String(l).replace(/\[[0-9;]*m/g,"").trim(),"clean"),m=c(p);for(let[l,d]of s)if(c(l)===m)return t[d];for(let[l,d]of s)if(c(l).includes(m)||m.includes(c(l)))return t[d];throw new Error(`Could not match selection "${p}" to any item`)}o(Sp,"searchPick");async function vp(e,t=""){let n=await Ut("Input");return new n({message:e,initial:t}).run()}o(vp,"ask");async function Cp(e,t,n={}){let r=await fetch(e,{method:n.method??"GET",headers:{Authorization:`Bearer ${t}`,"Content-Type":"application/json"},body:n.body!==void 0?JSON.stringify(n.body):void 0});if(!r.ok){let i=await r.text().catch(()=>"");throw new Error(`CDF API error ${r.status} ${r.statusText}: ${i}`)}return r.json()}o(Cp,"cdfFetch");async function kp(e,t,n){return(await Cp(`${e}/api/v1/projects/${t}/models/datamodels?includeGlobal=true&limit=1000`,n)).items??[]}o(kp,"fetchDataModels");async function xp(e,t={}){let n=process.cwd();process.chdir(e);try{b(e);let r=k(e),{token:i,baseUrl:s,project:a}=await Mr(r,t),p=null;async function c(){return p||(p=await kp(s,a,i),p.sort((g,f)=>`${g.space}/${g.externalId}`.localeCompare(`${f.space}/${f.externalId}`))),p}o(c,"getModels");let m={chosenModel:null,sdkName:null},l=[async()=>{console.log(`
193
- \u{1F510} Fetching data models...`);let g=await c();if(g.length===0)throw new Error("No data models found.");return console.log(`\u{1F50D} Found ${g.length} model(s). Type to search.
194
- `),m.chosenModel=await Sp("\u{1F4E6} Select a data model:",g,f=>`${f.space} \u2192 ${f.externalId} / ${f.version}${f.name?` \u2014 ${f.name}`:""}`),!0},async()=>{let g=m.chosenModel.externalId.replace(/([a-z0-9])([A-Z])/g,"$1-$2").replace(/[^a-zA-Z0-9-_]/g,"-").toLowerCase(),f=await vp(`
195
- SDK name (folder under src/generated_sdks/, "back" to go back):`,g);if(f.toLowerCase()==="back")return We;let u=(JSON.parse(ke(U(e,"app.json"),"utf-8")).generatedSdks??[]).find(y=>y.name===f);if(u){console.log(`
196
- \u26A0\uFE0F An SDK named "${f}" already exists in app.json:`),console.log(` ${u.dataModelSpace} / ${u.dataModelExternalId} @ ${u.dataModelVersion}`);let y=await Mt("What would you like to do?",["Replace existing entry","Pick a different name","Cancel"],w=>w);if(y==="Cancel"&&(console.log(`
197
- Cancelled.
198
- `),process.exit(0)),y==="Pick a different name")return We}return m.sdkName=f,!0},async()=>{let g={name:m.sdkName,dataModelSpace:m.chosenModel.space,dataModelExternalId:m.chosenModel.externalId,dataModelVersion:String(m.chosenModel.version)};console.log(`
199
- \u2500\u2500 Summary \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500`),console.log(` Space: ${g.dataModelSpace}`),console.log(` Model: ${g.dataModelExternalId} @ ${g.dataModelVersion}`),console.log(" Views: all"),console.log(` SDK name: ${m.sdkName}`),console.log("\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500");let f=await Mt("Write to app.json?",["Yes","Back","Cancel"],h=>h);return f==="Back"?We:(f==="Cancel"&&(console.log(`
200
- Cancelled.
201
- `),process.exit(0)),Pp(e,g),!0)}],d=0;for(;d<l.length;)await l[d]()===We?(d=Math.max(0,d-1),console.log("")):d++;return{sdkName:m.sdkName,auth:{token:i,baseUrl:s,project:a}}}finally{process.chdir(n)}}o(xp,"runWizard");function Pp(e,t){let n=U(e,"app.json"),r=JSON.parse(ke(n,"utf-8"));r.generatedSdks=[...r.generatedSdks??[],t],Vt(n,JSON.stringify(r,null,2)+`
202
- `);let i=U(e,".dune","sdk-configs");try{Vr(i)||yp(i,{recursive:!0}),Vt(U(i,`${t.name}.json`),JSON.stringify(t,null,2)+`
203
- `),console.log(`
204
- \u2705 Added "${t.name}" to app.json`),console.log(` Config saved to .dune/sdk-configs/${t.name}.json`)}catch{console.log(`
205
- \u2705 Added "${t.name}" to app.json`)}t.instanceSpaces&&console.log(` Scoped to: ${t.instanceSpaces.join(", ")}`),t.views&&console.log(` Views: ${t.views.map(s=>s.externalId).join(", ")}`),console.log("")}o(Pp,"writeEntry");async function jr(e,t,n,r={}){let i=n??process.cwd();b(i);let s=k(i),p=(JSON.parse(ke(U(i,"app.json"),"utf-8")).generatedSdks??[]).find(S=>S.name===e);p||(console.error(`No SDK named "${e}" in generatedSdks`),process.exit(1));let{token:c}=t??await Mr(s,r),m=s.deployments[0],l=new wp({appId:s.externalId,project:m.project,baseUrl:m.baseUrl,oidcTokenProvider:o(async()=>c,"oidcTokenProvider")});await l.authenticate();let d=U(i,"src/generated_sdks");console.log(`
206
- \u2699\uFE0F Generating "${p.name}" (${p.dataModelSpace}/${p.dataModelExternalId}@${p.dataModelVersion})...`);let{sdkDir:g,viewCount:f}=await _r({name:p.name,space:p.dataModelSpace,dataModelExternalId:p.dataModelExternalId,dataModelVersion:p.dataModelVersion},l,d);console.log(`\u2705 Generated SDK for ${f} view(s) \u2192 ${g}`);let h=U(i,"package.json");if(Vr(h)){let S=JSON.parse(ke(h,"utf-8")),u=S.dependencies??{},y=[];u.graphql||(u.graphql="^16.0.0",y.push("graphql")),u["graphql-tag"]||(u["graphql-tag"]="^2.12.0",y.push("graphql-tag"));let w=r.linkLocal?`file:${U(hp(import.meta.url),"../../..")}`:"^1.3.2-alpha.53";u["@cognite/cli"]!==w&&(u["@cognite/cli"]=w,y.push("@cognite/cli")),y.length>0&&(S.dependencies=u,Vt(h,JSON.stringify(S,null,2)+`
207
- `,"utf-8"),console.log(`
208
- \u{1F4E6} Updated package.json: ${y.join(", ")} (run npm install)`))}}o(jr,"generate");function Kr(e){return{interactive:e.interactive,orgHint:e.org,linkLocal:e.linkLocal}}o(Kr,"sdkCommandOptions");function Ur(e){e.command("sdk").summary("Add or regenerate typed GraphQL SDKs from CDF data models").description(`Add or regenerate typed GraphQL SDKs from CDF data models.
209
- Run with --interactive for the guided wizard (pick a data model, update app.json, generate types).`).option("--interactive","Run the guided wizard (pick data model, update app.json, generate types)").option("--org <org>","Organization hint for login (only with --interactive)").option("--link-local","Point @cognite/cli at the local monorepo package (default: use published version from npm)").addHelpText("after",`
210
- Examples:
211
- npx @cognite/cli apps sdk --interactive Guided setup: pick a data model, add to app.json, generate types
212
- npx @cognite/cli apps sdk generate Regenerate types for SDKs already in app.json
213
- npx @cognite/cli apps sdk generate my-sdk Regenerate a specific SDK by name
214
-
215
- Without --interactive, this command only shows help. Use --interactive for the guided wizard.
216
- Non-interactive auth for generate uses the same env vars as apps deploy (COGNITE_TOKEN or deployment credentials).`).action(async function(n){if(!n.interactive){this.outputHelp();return}let r=process.cwd(),i=Kr(n),{sdkName:s,auth:a}=await xp(r,i);await jr(s,a,r,i)}).command("generate [name]").description("Regenerate TypeScript types for an existing SDK from app.json").option("--interactive","Authenticate via browser login (same as apps deploy --interactive)").option("--org <org>","Organization hint for login (only with --interactive)").option("--link-local","Point @cognite/cli at the local monorepo package (default: use published version from npm)").action(async(n,r)=>{let i=process.cwd(),s=Kr(r),p=JSON.parse(ke(U(i,"app.json"),"utf-8")).generatedSdks??[];p.length===0&&(console.error('No generatedSdks entries found in app.json. Run "cognite apps sdk --interactive" first.'),process.exit(1));let c=n??(p.length===1?p[0].name:await Mt("Which SDK to regenerate?",p,m=>m.name));await jr(typeof c=="string"?c:c.name,void 0,i,s)})}o(Ur,"registerSdkCommand");function Gr(e){let t=e.command("apps").description("Manage Fusion Custom Apps \u2014 create, deploy, and manage version lifecycle");return er(t),pr(t),lr(t),cr(t),_n(t),tr(t),nn(t),Ur(t),kn(t),t}o(Gr,"registerAppsCommand");import{existsSync as Hp,mkdirSync as Bp,writeFileSync as qp}from"fs";import{dirname as zt,join as tt}from"path";import{generateSigningKeyPair as Qp}from"@cognite/app-sdk/codesigning";import Jp from"open";import Ep from"clipboardy";function Hr(e){return Ep.write(e)}o(Hr,"copyToClipboard");function Br(e,t){let n=e.getUTCFullYear(),r=e.getUTCMonth()+t,i=new Date(Date.UTC(n,r+1,0)).getUTCDate(),s=Math.min(e.getUTCDate(),i);return new Date(Date.UTC(n,r,s))}o(Br,"addMonthsClamped");function Gt(e){return e.toISOString().slice(0,10)}o(Gt,"formatIsoDate");function qr(e=new Date){return Gt(e)}o(qr,"todayIso");import bp,{Chalk as Ap}from"chalk";var xe=new Ap({level:0});function Qr(e){return e.isTTY?bp:xe}o(Qr,"chalkForStream");function Dp(e){return e.replace(/-----BEGIN [^-]+-----/g,"").replace(/-----END [^-]+-----/g,"").replace(/\s+/g,"")}o(Dp,"pemBodyOneLine");function Ht(e,t=xe,n=new Date){let r=e.issuedAt??qr(n),i=Dp(e.publicKeyPem),s=" ",a=o((c,m)=>`${s}${t.cyan(c)}${t.dim(":")} ${m}
114
+ npx @cognite/cli apps status . --interactive Status using browser auth (no secrets needed)`).action((t,n)=>rs(n))}o(bn,"registerStatusCommand");function kn(e){let t=e.command("apps").description("Manage Fusion Custom Apps \u2014 create, deploy, and manage version lifecycle");return yn(t),Pn(t),bn(t),En(t),Zt(t),hn(t),gt(t),Xt(t),t}o(kn,"registerAppsCommand");import{existsSync as Es,mkdirSync as bs,writeFileSync as ks}from"fs";import{dirname as at,join as ke}from"path";import{generateSigningKeyPair as xs}from"@cognite/app-sdk/codesigning";import As from"open";function xn(e,t){let n=e.getUTCFullYear(),r=e.getUTCMonth()+t,i=new Date(Date.UTC(n,r+1,0)).getUTCDate(),s=Math.min(e.getUTCDate(),i);return new Date(Date.UTC(n,r,s))}o(xn,"addMonthsClamped");function tt(e){return e.toISOString().slice(0,10)}o(tt,"formatIsoDate");function An(e=new Date){return tt(e)}o(An,"todayIso");import os,{Chalk as is}from"chalk";var oe=new is({level:0});function Dn(e){return e.isTTY?os:oe}o(Dn,"chalkForStream");function ss(e){return e.replace(/-----BEGIN [^-]+-----/g,"").replace(/-----END [^-]+-----/g,"").replace(/\s+/g,"")}o(ss,"pemBodyOneLine");function nt(e,t=oe,n=new Date){let r=e.issuedAt??An(n),i=ss(e.publicKeyPem),s=" ",a=o((c,l)=>`${s}${t.cyan(c)}${t.dim(":")} ${l}
217
115
  `,"kv"),p="";return p+=`
218
116
  ${t.bold("Add this entry to")} ${t.magenta("services/app-hosting/config/signing-keys.yaml")} ${t.bold("under")} ${t.cyan("public_keys:")}
219
117
 
220
118
  `,p+=`${t.dim("-")} ${t.cyan("kid")}${t.dim(":")} ${t.green(e.kid)}
221
- `,p+=a("public_key",t.green(i)),p+=a("email",t.yellow(e.email)),p+=a("capabilities",`${t.dim("[")}${t.yellow("developer")}${t.dim("]")}`),p+=a("issued_at",t.green(r)),p+=a("expires",t.green(e.expires)),p+=a("revoked_at",t.dim("null")),p}o(Ht,"renderRegistryEntry");import{email as Ip,pipe as $p,safeParse as Tp,string as Rp}from"valibot";var Fp=$p(Rp(),Ip());function Pe(e,t="email"){let n=e.trim();if(!n)throw new Error(`${t} is required`);if(!Tp(Fp,n).success)throw new Error(`${t} must look like an email (user@example.com); got "${e}"`);return n}o(Pe,"parseEmail");function Ee(e,t="--expires"){let n=Number(e);if(!Number.isInteger(n)||n<1||n>12)throw new Error(`${t} must be an integer between 1 and 12 (months); got "${e}"`);return n}o(Ee,"parseExpiryMonths");var Op="https://cognite.zendesk.com",Lp="360001234312",Np="tf_360015295097",_p="cognite_flows",jp="360004885031";function Kp(e,t){let n=new URLSearchParams({locale:"en-us",brand_id:jp,return_to:e});return`${t}/access?${n}`}o(Kp,"withLogin");function Vp(e,t,n){let r=new URLSearchParams({ticket_form_id:Lp,tf_priority:"normal",tf_subject:e,[Np]:_p,tf_description:t});return Kp(`${n}/hc/en-us/requests/new?${r}`,n)}o(Vp,"buildUrl");function Mp(e){return e.join("<br>")}o(Mp,"toHtml");function Jr(e,t,n,r,i=Op){return Vp(`Public Key Registration: ${t}`,Mp(["Dear Cognite Platform Team,","","I would like to register my Flows app signing key for certified deployments.","",`Key ID (kid): ${e}`,`Developer email: ${t}`,`Expires: ${n}`,"","Please add the following entry to signing-keys.yaml:","",...r.replace(/\r\n/g,`
119
+ `,p+=a("public_key",t.green(i)),p+=a("email",t.yellow(e.email)),p+=a("capabilities",`${t.dim("[")}${t.yellow("developer")}${t.dim("]")}`),p+=a("issued_at",t.green(r)),p+=a("expires",t.green(e.expires)),p+=a("revoked_at",t.dim("null")),p}o(nt,"renderRegistryEntry");import as from"clipboardy";function In(e){return as.write(e)}o(In,"copyToClipboard");import{email as ps,pipe as cs,safeParse as ls,string as ds}from"valibot";var ms=cs(ds(),ps());function ie(e,t="email"){let n=e.trim();if(!n)throw new Error(`${t} is required`);if(!ls(ms,n).success)throw new Error(`${t} must look like an email (user@example.com); got "${e}"`);return n}o(ie,"parseEmail");function se(e,t="--expires"){let n=Number(e);if(!Number.isInteger(n)||n<1||n>12)throw new Error(`${t} must be an integer between 1 and 12 (months); got "${e}"`);return n}o(se,"parseExpiryMonths");var us="https://cognite.zendesk.com",gs="360001234312",fs="tf_360015295097",ys="cognite_flows",hs="360004885031";function Ss(e,t){let n=new URLSearchParams({locale:"en-us",brand_id:hs,return_to:e});return`${t}/access?${n}`}o(Ss,"withLogin");function ws(e,t,n){let r=new URLSearchParams({ticket_form_id:gs,tf_priority:"normal",tf_subject:e,[fs]:ys,tf_description:t});return Ss(`${n}/hc/en-us/requests/new?${r}`,n)}o(ws,"buildUrl");function vs(e){return e.join("<br>")}o(vs,"toHtml");function $n(e,t,n,r,i=us){return ws(`Public Key Registration: ${t}`,vs(["Dear Cognite Platform Team,","","I would like to register my Flows app signing key for certified deployments.","",`Key ID (kid): ${e}`,`Developer email: ${t}`,`Expires: ${n}`,"","Please add the following entry to signing-keys.yaml:","",...r.replace(/\r\n/g,`
222
120
  `).split(`
223
- `),"","Best Regards,","[Your name]","","(This registration request was generated by `npx @cognite/cli keys generate`.)"]),i)}o(Jr,"buildKeyRegistrationUrl");import Qt from"enquirer";var Ze=3,zr="Signing identity (kid) \u2014 e.g. jsmith-dev-001 (lowercase letters, digits, hyphens)",Yr=`Key expiry in months (${1}-${12})`,Wr="Email address for the registry entry",Zr=`Passphrase for the encrypted private key (min ${15} chars)`,Xr="Confirm passphrase",eo=o(()=>`Passphrase must be at least ${15} characters`,"passphraseTooShortMsg"),to=o(e=>`Passphrases do not match (attempt ${e}/${Ze}).
224
- `,"passphraseMismatchMsg"),no=`Passphrase confirmation failed after ${Ze} attempts`,ro=o(e=>`A signing key with kid "${e}" already exists. Overwrite it?`,"confirmOverwriteMsg"),oo="How would you like to submit your key registration?",io="Open in browser",so="Copy link to clipboard";async function et(e){return Qt.prompt(e)}o(et,"defaultPrompt");function Jt(e){return t=>{try{return e(t),!0}catch(n){return n instanceof Error?n.message:"Invalid"}}}o(Jt,"parserAsValidator");var Gp=/^[a-z0-9]([a-z0-9-]*[a-z0-9])?$/;function Xe(e){let t=e.trim();if(!t)throw new Error("--kid must not be empty");if(t.length>64)throw new Error("--kid must be 64 characters or fewer");if(!Gp.test(t))throw new Error("--kid must contain only lowercase letters, digits, and hyphens, and must not start or end with a hyphen (e.g. jsmith-dev-001)");return t}o(Xe,"parseKid");async function ao(e={}){let{prompt:t=et}=e,{kid:n}=await t({type:"input",name:"kid",message:zr,validate:Jt(Xe)});return Xe(n)}o(ao,"promptKid");async function po(e={}){let{prompt:t=o(r=>Qt.prompt(r),"prompt")}=e,{action:n}=await t({type:"select",name:"action",message:oo,choices:[{name:"browser",message:io},{name:"clipboard",message:so}]});if(n!=="browser"&&n!=="clipboard")throw new Error(`Unexpected Zendesk action: ${n}`);return n}o(po,"promptZendeskAction");async function co(e={}){let{prompt:t=et}=e,{months:n}=await t({type:"input",name:"months",message:Yr,initial:String(6),validate:Jt(r=>Ee(r,"expiry"))});return Ee(n,"expiry")}o(co,"promptExpiryMonths");async function lo(e={}){let{prompt:t=et,gitUserEmail:n=Mn}=e,{email:r}=await t({type:"input",name:"email",message:Wr,initial:n(),validate:Jt(i=>Pe(i,"email"))});return Pe(r,"email")}o(lo,"promptEmail");async function mo(e={}){let{prompt:t=et,stderr:n=process.stderr}=e;for(let r=1;r<=Ze;r+=1){let{passphrase:i}=await t({type:"password",name:"passphrase",message:Zr,validate:o(a=>a.length>=15?!0:eo(),"validate")}),{confirm:s}=await t({type:"password",name:"confirm",message:Xr});if(i===s)return i;n.write(to(r))}throw new Error(no)}o(mo,"promptPassphrase");async function uo(e,t={}){let{prompt:n=o(i=>Qt.prompt(i),"prompt")}=t,{confirmed:r}=await n({type:"confirm",name:"confirmed",message:ro(e),initial:!1});return r}o(uo,"promptConfirmOverwrite");function zp(e){return{writeFileSync:e.writeFileSync??qp,mkdirSync:e.mkdirSync??Bp,existsSync:e.existsSync??Hp,generateSigningKeyPair:e.generateSigningKeyPair??Qp,encryptStringAsJwe:e.encryptStringAsJwe??un,storeKeyInKeychain:e.storeKeyInKeychain??ln,isOS:e.isOS??(t=>z(t)),promptKid:e.promptKid??ao,promptExpiryMonths:e.promptExpiryMonths??co,promptEmail:e.promptEmail??lo,promptPassphrase:e.promptPassphrase??mo,promptConfirmOverwrite:e.promptConfirmOverwrite??uo,discoverLocalKeys:e.discoverLocalKeys??(()=>Oe()),promptZendeskAction:e.promptZendeskAction??po,openUrl:e.openUrl??(t=>Jp(t)),copyToClipboard:e.copyToClipboard??Hr,isInteractive:e.isInteractive??(()=>process.stdout.isTTY===!0)}}o(zp,"resolveDeps");function fo(e,t={}){let n=zp(t),r=e.command("keys").description("Manage code signing keys");r.command("generate").description("Generate an Ed25519 keypair for code signing").option("-o, --output <path>","Encrypted private key output path (forces file storage even on macOS)").option("--no-keychain",`Skip macOS Keychain and write a passphrase-encrypted private key under ${F().keysDir} instead`).option("-e, --expires <months>",`Validity in months (${1}-${12}); skips the interactive prompt`).option("--email <address>","Email address for the registry entry; skips the interactive prompt").option("--kid <identifier>","Signing identity name for the registry (e.g. jsmith-dev-001); skips the interactive prompt").option("--force","Overwrite an existing key without prompting for confirmation").option("--copy-link","Copy the Zendesk registration link to the clipboard without prompting").action(i=>Zp(i,n)),r.command("list").description("List local signing identities and their storage location").action(()=>Yp(n))}o(fo,"registerKeysCommand");async function Yp(e){let t=await e.discoverLocalKeys();if(t.length===0){process.stdout.write(`No signing identities found.
121
+ `),"","Best Regards,","[Your name]","","(This registration request was generated by `npx @cognite/cli keys generate`.)"]),i)}o($n,"buildKeyRegistrationUrl");import it from"enquirer";var Pe=3,Fn="Signing identity (kid) \u2014 e.g. jsmith-dev-001 (lowercase letters, digits, hyphens)",Tn=`Key expiry in months (${1}-${12})`,On="Email address for the registry entry",Rn=`Passphrase for the encrypted private key (min ${15} chars)`,_n="Confirm passphrase",Un=o(()=>`Passphrase must be at least ${15} characters`,"passphraseTooShortMsg"),Kn=o(e=>`Passphrases do not match (attempt ${e}/${Pe}).
122
+ `,"passphraseMismatchMsg"),Ln=`Passphrase confirmation failed after ${Pe} attempts`,jn=o(e=>`A signing key with kid "${e}" already exists. Overwrite it?`,"confirmOverwriteMsg"),Nn="How would you like to submit your key registration?",Mn="Open in browser",Vn="Copy link to clipboard";async function be(e){return it.prompt(e)}o(be,"defaultPrompt");function st(e){return t=>{try{return e(t),!0}catch(n){return n instanceof Error?n.message:"Invalid"}}}o(st,"parserAsValidator");var Ps=/^[a-z0-9]([a-z0-9-]*[a-z0-9])?$/;function Ee(e){let t=e.trim();if(!t)throw new Error("--kid must not be empty");if(t.length>64)throw new Error("--kid must be 64 characters or fewer");if(!Ps.test(t))throw new Error("--kid must contain only lowercase letters, digits, and hyphens, and must not start or end with a hyphen (e.g. jsmith-dev-001)");return t}o(Ee,"parseKid");async function Hn(e={}){let{prompt:t=be}=e,{kid:n}=await t({type:"input",name:"kid",message:Fn,validate:st(Ee)});return Ee(n)}o(Hn,"promptKid");async function Bn(e={}){let{prompt:t=o(r=>it.prompt(r),"prompt")}=e,{action:n}=await t({type:"select",name:"action",message:Nn,choices:[{name:"browser",message:Mn},{name:"clipboard",message:Vn}]});if(n!=="browser"&&n!=="clipboard")throw new Error(`Unexpected Zendesk action: ${n}`);return n}o(Bn,"promptZendeskAction");async function Gn(e={}){let{prompt:t=be}=e,{months:n}=await t({type:"input",name:"months",message:Tn,initial:String(6),validate:st(r=>se(r,"expiry"))});return se(n,"expiry")}o(Gn,"promptExpiryMonths");async function Jn(e={}){let{prompt:t=be,gitUserEmail:n=nn}=e,{email:r}=await t({type:"input",name:"email",message:On,initial:n(),validate:st(i=>ie(i,"email"))});return ie(r,"email")}o(Jn,"promptEmail");async function Yn(e={}){let{prompt:t=be,stderr:n=process.stderr}=e;for(let r=1;r<=Pe;r+=1){let{passphrase:i}=await t({type:"password",name:"passphrase",message:Rn,validate:o(a=>a.length>=15?!0:Un(),"validate")}),{confirm:s}=await t({type:"password",name:"confirm",message:_n});if(i===s)return i;n.write(Kn(r))}throw new Error(Ln)}o(Yn,"promptPassphrase");async function qn(e,t={}){let{prompt:n=o(i=>it.prompt(i),"prompt")}=t,{confirmed:r}=await n({type:"confirm",name:"confirmed",message:jn(e),initial:!1});return r}o(qn,"promptConfirmOverwrite");function Ds(e){return{writeFileSync:e.writeFileSync??ks,mkdirSync:e.mkdirSync??bs,existsSync:e.existsSync??Es,generateSigningKeyPair:e.generateSigningKeyPair??xs,encryptStringAsJwe:e.encryptStringAsJwe??Vt,storeKeyInKeychain:e.storeKeyInKeychain??jt,isOS:e.isOS??(t=>B(t)),promptKid:e.promptKid??Hn,promptExpiryMonths:e.promptExpiryMonths??Gn,promptEmail:e.promptEmail??Jn,promptPassphrase:e.promptPassphrase??Yn,promptConfirmOverwrite:e.promptConfirmOverwrite??qn,discoverLocalKeys:e.discoverLocalKeys??(()=>ye()),promptZendeskAction:e.promptZendeskAction??Bn,openUrl:e.openUrl??(t=>As(t)),copyToClipboard:e.copyToClipboard??In,isInteractive:e.isInteractive??(()=>process.stdout.isTTY===!0)}}o(Ds,"resolveDeps");function Wn(e,t={}){let n=Ds(t),r=e.command("keys").description("Manage code signing keys");r.command("generate").description("Generate an Ed25519 keypair for code signing").option("-o, --output <path>","Encrypted private key output path (forces file storage even on macOS)").option("--no-keychain",`Skip macOS Keychain and write a passphrase-encrypted private key under ${F().keysDir} instead`).option("-e, --expires <months>",`Validity in months (${1}-${12}); skips the interactive prompt`).option("--email <address>","Email address for the registry entry; skips the interactive prompt").option("--kid <identifier>","Signing identity name for the registry (e.g. jsmith-dev-001); skips the interactive prompt").option("--force","Overwrite an existing key without prompting for confirmation").option("--copy-link","Copy the Zendesk registration link to the clipboard without prompting").action(i=>Fs(i,n)),r.command("list").description("List local signing identities and their storage location").action(()=>Is(n))}o(Wn,"registerKeysCommand");async function Is(e){let t=await e.discoverLocalKeys();if(t.length===0){process.stdout.write(`No signing identities found.
225
123
  `),process.stdout.write(`Run \`cognite keys generate\` to create one (storage: ${F().keysDir}).
226
- `);return}let n=["KID","SOURCE","EMAIL"],r=t.map(a=>[a.kid,Fe(a.source),a.email??"\u2014"]),i=n.map((a,p)=>Math.max(a.length,...r.map(c=>c[p].length))),s=o(a=>a.map((p,c)=>p.padEnd(i[c])).join(" ").trimEnd(),"fmt");process.stdout.write(`${s(n)}
124
+ `);return}let n=["KID","SOURCE","EMAIL"],r=t.map(a=>[a.kid,fe(a.source),a.email??"\u2014"]),i=n.map((a,p)=>Math.max(a.length,...r.map(c=>c[p].length))),s=o(a=>a.map((p,c)=>p.padEnd(i[c])).join(" ").trimEnd(),"fmt");process.stdout.write(`${s(n)}
227
125
  `);for(let a of r)process.stdout.write(`${s(a)}
228
- `)}o(Yp,"handleList");function go(e,t,n){let r=tt(F().keysDir,`${e}${ue}`);return n.mkdirSync(zt(r),{recursive:!0}),n.writeFileSync(r,t),r}o(go,"writePublicKey");async function Wp(e,t,n,r,i,{force:s=!1}={}){let a=r??tt(F().keysDir,`${e}${yt}`);if(i.mkdirSync(zt(a),{recursive:!0}),!s&&i.existsSync(a))throw new Error(`Refusing to overwrite existing key at ${a}. Delete it first if you really want to regenerate: rm ${a}`);let p=await i.encryptStringAsJwe(t,n);return i.writeFileSync(a,p,{mode:384}),a}o(Wp,"writeEncryptedPrivateKey");async function Zp(e,t,n=new Date){let{isOS:r,existsSync:i,mkdirSync:s,writeFileSync:a,generateSigningKeyPair:p,storeKeyInKeychain:c,promptExpiryMonths:m,promptKid:l,promptEmail:d,promptPassphrase:g,promptConfirmOverwrite:f}=t,h=e.keychain!==!1&&r("macos")&&!e.output,S=e.expires!==void 0?Ee(e.expires):await m(),u=Gt(Br(n,S)),y=e.kid!==void 0?Xe(e.kid):await l(),w=tt(F().keysDir,`${y}${ue}`),v=i(w);if(v&&!e.force&&!await f(y)){process.stderr.write(`Aborted.
229
- `);return}let x=e.email!==void 0?Pe(e.email,"--email"):await d(),E=h?null:await g();process.stderr.write(`
126
+ `)}o(Is,"handleList");function zn(e,t,n){let r=ke(F().keysDir,`${e}${ee}`);return n.mkdirSync(at(r),{recursive:!0}),n.writeFileSync(r,t),r}o(zn,"writePublicKey");async function $s(e,t,n,r,i,{force:s=!1}={}){let a=r??ke(F().keysDir,`${e}${Ye}`);if(i.mkdirSync(at(a),{recursive:!0}),!s&&i.existsSync(a))throw new Error(`Refusing to overwrite existing key at ${a}. Delete it first if you really want to regenerate: rm ${a}`);let p=await i.encryptStringAsJwe(t,n);return i.writeFileSync(a,p,{mode:384}),a}o($s,"writeEncryptedPrivateKey");async function Fs(e,t,n=new Date){let{isOS:r,existsSync:i,mkdirSync:s,writeFileSync:a,generateSigningKeyPair:p,storeKeyInKeychain:c,promptExpiryMonths:l,promptKid:d,promptEmail:m,promptPassphrase:g,promptConfirmOverwrite:u}=t,f=e.keychain!==!1&&r("macos")&&!e.output,S=e.expires!==void 0?se(e.expires):await l(),v=tt(xn(n,S)),h=e.kid!==void 0?Ee(e.kid):await d(),b=ke(F().keysDir,`${h}${ee}`),y=i(b);if(y&&!e.force&&!await u(h)){process.stderr.write(`Aborted.
127
+ `);return}let C=e.email!==void 0?ie(e.email,"--email"):await m(),$=f?null:await g();process.stderr.write(`
230
128
  Generating Ed25519 keypair...
231
129
 
232
- `);let{privateKeyPem:C,publicKeyPem:Q}=await p(y);if(h){await c(y,C);let M=go(y,Q,t);process.stderr.write(`Public key: ${M}
233
- `),process.stderr.write(`Private key: macOS Keychain (service: cognite-dune, account: ${y})
234
- `)}else{if(E===null)throw new Error("passphrase is required when not using Keychain");let M=await Wp(y,C,E,e.output,t,{force:v}),ot=go(y,Q,t);process.stderr.write(`Public key: ${ot}
235
- `),process.stderr.write(`Private key: ${M} (JWE, AES-256-GCM, PBKDF2-SHA512 x${gt.toLocaleString()})
130
+ `);let{privateKeyPem:w,publicKeyPem:N}=await p(h);if(f){await c(h,w);let U=zn(h,N,t);process.stderr.write(`Public key: ${U}
131
+ `),process.stderr.write(`Private key: macOS Keychain (service: cognite-dune, account: ${h})
132
+ `)}else{if($===null)throw new Error("passphrase is required when not using Keychain");let U=await $s(h,w,$,e.output,t,{force:y}),De=zn(h,N,t);process.stderr.write(`Public key: ${De}
133
+ `),process.stderr.write(`Private key: ${U} (JWE, AES-256-GCM, PBKDF2-SHA512 x${Ge.toLocaleString()})
236
134
  `),r("macos")||process.stderr.write(` (macOS Keychain integration is the default on darwin; on this OS we use the file.)
237
- `)}let De=tt(F().keysDir,`${y}${ht}`);s(zt(De),{recursive:!0}),a(De,JSON.stringify({email:x}));let oe=Qr(process.stderr);process.stderr.write(`
238
- Signing identity (kid): ${oe.green(y)}
239
- `),process.stderr.write(`Expires: ${u} (${S} month${S===1?"":"s"} from today)
240
- `);let rt={kid:y,publicKeyPem:Q,email:x,expires:u};process.stderr.write(Ht(rt,oe,n));let ie=Jr(y,x,u,Ht(rt,xe,n));process.stderr.write(`
241
- ${oe.bold("Next:")}
135
+ `)}let ce=ke(F().keysDir,`${h}${qe}`);s(at(ce),{recursive:!0}),a(ce,JSON.stringify({email:C}));let Y=Dn(process.stderr);process.stderr.write(`
136
+ Signing identity (kid): ${Y.green(h)}
137
+ `),process.stderr.write(`Expires: ${v} (${S} month${S===1?"":"s"} from today)
138
+ `);let Ae={kid:h,publicKeyPem:N,email:C,expires:v};process.stderr.write(nt(Ae,Y,n));let q=$n(h,C,v,nt(Ae,oe,n));process.stderr.write(`
139
+ ${Y.bold("Next:")}
242
140
  `),process.stderr.write(` 1. Register your signing key \u2014 submit this pre-filled Zendesk request:
243
- `);let Ie=e.copyLink?"clipboard":t.isInteractive()?await t.promptZendeskAction():null;if(Ie==="browser")try{await t.openUrl(ie),process.stderr.write(` Opening in browser...
244
- `)}catch{process.stderr.write(` URL: ${ie}
245
- `)}else if(Ie==="clipboard"){let M=!1;try{await t.copyToClipboard(ie),M=!0}catch{}process.stderr.write(M&&!e.copyLink?` Link copied to clipboard.
246
- `:` URL: ${ie}
247
- `)}else process.stderr.write(` URL: ${ie}
141
+ `);let le=e.copyLink?"clipboard":t.isInteractive()?await t.promptZendeskAction():null;if(le==="browser")try{await t.openUrl(q),process.stderr.write(` Opening in browser...
142
+ `)}catch{process.stderr.write(` URL: ${q}
143
+ `)}else if(le==="clipboard"){let U=!1;try{await t.copyToClipboard(q),U=!0}catch{}process.stderr.write(U&&!e.copyLink?` Link copied to clipboard.
144
+ `:` URL: ${q}
145
+ `)}else process.stderr.write(` URL: ${q}
248
146
  `);process.stderr.write(`
249
147
  2. Once your key is approved, sign your Dune app:
250
- `),process.stderr.write(` ${oe.cyan(`cognite sign -s ${y}`)}
251
- `)}o(Zp,"handleGenerate");var yo=1e3,Xp=new Set(["baseUrl","url","project","deployment","source","path","name","displayName","description"]);function ec(e){return Object.fromEntries(Object.entries(e).map(([t,n])=>typeof n=="boolean"?[t,n]:Xp.has(t)?[t,n]:[t,"[REDACTED]"]))}o(ec,"sanitize");function tc(e){let t=[],n=e;for(;n;)n.parent&&t.unshift(n.name()),n=n.parent;return t.join(" ")}o(tc,"getCommandPath");function ho(e){try{let t=e(process.cwd());return{appExternalId:t.externalId,appVersionTag:t.versionTag}}catch{return{}}}o(ho,"tryLoadAppConfig");function Yt(e){return e.filter(t=>!t.startsWith("-")).join(" ")||"unknown"}o(Yt,"commandFromArgv");function wo(e,t,n=k){e.hook("postAction",async(r,i)=>{try{let s={command:tc(i),options:ec(i.opts()),success:!0,...ho(n)};t.track("Flows.CLI.Command",s),await t.flush(yo)}catch{}})}o(wo,"instrument");async function So(e,t,n=k){try{let r={command:Yt(t),options:{},success:!1,...ho(n)};e.track("Flows.CLI.Command",r),await e.flush(yo)}catch{}}o(So,"trackFailure");var nc="ERR_USE_AFTER_CLOSE";function Co(e){return e instanceof Error&&"code"in e&&e.code===nc}o(Co,"isReadlineClosedError");function rc(e){let t=Object.getPrototypeOf(e);return t===Object.prototype||t===null}o(rc,"isPlainObject");function Wt(e){return e==null||Co(e)?!0:e instanceof Error?!1:!!(typeof e=="object"&&e!==null&&rc(e)&&Object.keys(e).length===0)}o(Wt,"isPromptCancel");var vo=!1;function ko(){vo||(vo=!0,process.on("uncaughtException",e=>{Co(e)&&(console.error(`
252
- Cancelled.`),process.exit(130)),console.error(e),process.exit(1)}),process.on("unhandledRejection",e=>{Wt(e)&&(console.error(`
253
- Cancelled.`),process.exit(130)),console.error(e),process.exit(1)}))}o(ko,"installCancelHandler");import{homedir as pc}from"os";import xo from"mixpanel";var oc="5c4d853e7c3b77b1eb4468d5329b278c",be="cognite-cli",ic=2e3,Po={env:process.env,init:xo.init.bind(xo)},sc={track:o(()=>{},"track"),flush:o(async()=>{},"flush")};function Zt(e=process.env){return e.COGNITE_TELEMETRY_DISABLED==="1"||e.DO_NOT_TRACK==="1"}o(Zt,"isTelemetryDisabled");function ac(e){return e.COGNITE_TELEMETRY_DEBUG==="1"}o(ac,"isDebug");function Eo(e={}){let t=e.env??Po.env,n=e.init??Po.init,r=e.packageName,i=e.cliVersion,s=ac(t);if(Zt(t))return s&&process.stderr.write(`[telemetry] disabled \u2014 noop tracker
254
- `),sc;let a,p=new Set;function c(){if(a)return a;try{return a=n(oc,{geolocate:!1,keepAlive:!1}),a}catch{return}}return o(c,"getClient"),{track(m,l={}){let d=c();if(!d)return;let g={...l,applicationId:be,...r&&{packageName:r},...i&&{cliVersion:i},nodeVersion:process.version,platform:process.platform};s&&process.stderr.write(`[telemetry] track ${m} ${JSON.stringify(g)}
255
- `);let f=o(()=>{},"finish"),h=new Promise(S=>{f=S});p.add(h);try{d.track(m,g,f)}catch{f()}h.finally(()=>p.delete(h))},async flush(m=ic){if(p.size===0)return;let l,d=new Promise(g=>{l=setTimeout(g,m),l.unref?.()});try{await Promise.race([Promise.allSettled([...p]),d])}finally{l&&clearTimeout(l)}s&&process.stderr.write(`[telemetry] flush done (${p.size} still pending)
256
- `)}}}o(Eo,"createTelemetry");var cc=pc();function Ae(e,t=cc){if(!t||t==="/")return e;let n=e.replaceAll(t,"~"),r=t.replaceAll("\\","/");return r!==t&&(n=n.replaceAll(r,"~")),n=n.replace(/(?<![A-Za-z0-9_])[A-Za-z]:[/\\]Users[/\\][^\s/\\]+(?=[/\\]|$)/g,"~"),n=n.replace(/(?<![A-Za-z0-9_])\/(?:Users|home)\/[^\s/]+(?=[/\\]|$)/g,"~"),n}o(Ae,"redactHomedir");var lc=1e3,dc="https://0a118cb02e3be57b1838bcfb5783a2bf@o4508040730968064.ingest.de.sentry.io/4510719268290640",mc={captureError:o(async()=>{},"captureError"),flush:o(async()=>{},"flush")};function uc(e){return e.packageName&&e.cliVersion?`${e.packageName}@${e.cliVersion}`:e.cliVersion??"unknown"}o(uc,"buildRelease");var gc="192.0.2.0";function fc(e){return e?.map(t=>({...t,...t.filename!==void 0&&{filename:Ae(t.filename)},...t.abs_path!==void 0&&{abs_path:Ae(t.abs_path)},...t.module!==void 0&&{module:Ae(t.module)}}))}o(fc,"scrubStackFrames");function yc(e){let t={...e.user,email:void 0,username:void 0,ip_address:gc,id:void 0},n=e.exception?.values?.map(r=>({...r,value:r.value!==void 0?Ae(r.value):r.value,...r.stacktrace!==void 0&&{stacktrace:{...r.stacktrace,frames:fc(r.stacktrace.frames)}}}));return{...e,message:e.message!==void 0?Ae(e.message):e.message,user:t,server_name:void 0,...n!==void 0&&{exception:{...e.exception,values:n}}}}o(yc,"scrubPii");function bo(e={}){let t=e.env??process.env;if(Zt(t))return mc;let n=uc(e),r="production",i=null,s=null;function a(){return{dsn:dc,release:n,environment:r,defaultIntegrations:!1,integrations:[],sendDefaultPii:!1,enableLogs:!1,initialScope:{tags:{component:"cli",applicationId:be},contexts:{cli:{applicationId:be,node:process.version,platform:process.platform}}},beforeSend:yc}}o(a,"buildInitOptions");async function p(){return i||(s||(s=(async()=>{try{let c=e.sdk??await import("@sentry/node");return c.init(a()),i=c,c}catch{return null}})()),s)}return o(p,"ensureSdk"),{async captureError(c,m){try{let l=await p();if(!l)return;let d={level:"fatal"};m?.command&&(d.tags={command:m.command},d.contexts={cli:{applicationId:be,node:process.version,platform:process.platform,command:m.command}}),l.captureException(c,d)}catch{}},async flush(c=lc){try{if(!i)return;await i.flush(c)}catch{}}}}o(bo,"createErrorReporter");import{mkdirSync as hc,readFileSync as wc,writeFileSync as Sc}from"fs";import{homedir as vc}from"os";import{resolve as nt}from"path";import{debuglog as Cc}from"util";import{lt as kc,parse as Ao}from"semver";var xc="https://registry.npmjs.org/@cognite/cli/latest",Pc=1500,Do="upgrade-check.json",Io=nt(process.env.XDG_CACHE_HOME||nt(vc(),".cache"),"@cognite","cli"),Xt=Cc("cognite-flows");function Ec(e,t){return!e||!t||!Ao(e)||!Ao(t)?!1:kc(e,t)}o(Ec,"isOutdated");async function bc({timeout:e=Pc,registryUrl:t=xc,fetchImpl:n=globalThis.fetch}={}){if(typeof n!="function")return null;try{let r=await n(t,{signal:AbortSignal.timeout(e)});if(!r?.ok)return null;let i=await r.json();return typeof i?.version=="string"?i.version:null}catch(r){return Xt("fetchLatestVersion failed (%s): %O",t,r),null}}o(bc,"fetchLatestVersion");function Ac(e=Io,t=864e5){try{let n=wc(nt(e,Do),"utf-8"),r=JSON.parse(n);return typeof r.latest!="string"||typeof r.fetchedAt!="number"||Date.now()-r.fetchedAt>t?null:{latest:r.latest,fetchedAt:r.fetchedAt}}catch(n){return Xt("readUpgradeCheckCache failed (%s): %O",e,n),null}}o(Ac,"readUpgradeCheckCache");function Dc(e,t){try{hc(e,{recursive:!0});let n={latest:t,fetchedAt:Date.now()};Sc(nt(e,Do),JSON.stringify(n))}catch(n){Xt("writeUpgradeCheckCache failed (%s): %O",e,n)}}o(Dc,"writeUpgradeCheckCache");async function Ic({cacheDir:e=Io,...t}={}){let n=await bc(t);n&&Dc(e,n)}o(Ic,"startBackgroundUpgradeCheck");function $o(e,{onOutdated:t,cacheDir:n,...r}={}){let i=Ac(n);if(i){Ec(e,i.latest)&&t?.(e,i.latest);return}Ic({cacheDir:n,...r})}o($o,"preActionUpgradeCheck");import{default as By,chalkStderr as To}from"chalk";function Ro(e,t){let n=[`\u26A0 Update available: ${e} -> ${t}`," Run npx @cognite/cli@latest"],r=Math.max(...n.map(p=>[...p].length))+2,i="\u2500".repeat(r),s=o(p=>`\u2502 ${p}${" ".repeat(r-1-[...p].length)}\u2502`,"pad"),a=[`\u250C${i}\u2510`,...n.map(s),`\u2514${i}\u2518`].join(`
257
- `);return To.bold.yellow(a)}o(Ro,"formatUpgradeWarning");function Rc(e){return e instanceof Error&&"code"in e&&typeof e.code=="string"&&e.code==="DEP0040"}o(Rc,"isDep0040Warning");var tn=process,Fc=tn.emit.bind(tn);tn.emit=function(e,...t){return e==="warning"&&Rc(t[0])?!1:Fc(e,...t)};ko();var me=new Tc;me.name("cognite").description("Build and deploy React apps to Cognite Data Fusion").version("1.3.2-alpha.53").showHelpAfterError().configureOutput({writeOut:o(e=>$c(1,e),"writeOut")});me.hook("preAction",()=>{$o("1.3.2-alpha.53",{onOutdated:o((e,t)=>{console.warn(`
258
- ${Ro(e,t)}
259
- `)},"onOutdated")})});Gr(me);fo(me);var Oo=Eo({packageName:"@cognite/cli",cliVersion:"1.3.2-alpha.53"}),Fo=bo({packageName:"@cognite/cli",cliVersion:"1.3.2-alpha.53"});wo(me,Oo);var en=process.argv.slice(2);me.parseAsync(en,{from:"user"}).catch(async e=>{await So(Oo,en),Wt(e)&&(console.error(`
260
- Cancelled.`),process.exit(130)),await Fo.captureError(e,{command:Yt(en)}),await Fo.flush(),console.error(e instanceof Error?`\u274C ${e.message}`:e),process.exit(1)});
148
+ `),process.stderr.write(` ${Y.cyan(`cognite sign -s ${h}`)}
149
+ `)}o(Fs,"handleGenerate");var Xn=1e3,Ts=new Set(["baseUrl","url","project","deployment","source","path","name","displayName","description"]);function Os(e){return Object.fromEntries(Object.entries(e).map(([t,n])=>typeof n=="boolean"?[t,n]:Ts.has(t)?[t,n]:[t,"[REDACTED]"]))}o(Os,"sanitize");function Rs(e){let t=[],n=e;for(;n;)n.parent&&t.unshift(n.name()),n=n.parent;return t.join(" ")}o(Rs,"getCommandPath");function Zn(e){try{let t=e(process.cwd());return{appExternalId:t.externalId,appVersionTag:t.versionTag}}catch{return{}}}o(Zn,"tryLoadAppConfig");function pt(e){return e.filter(t=>!t.startsWith("-")).join(" ")||"unknown"}o(pt,"commandFromArgv");function Qn(e,t,n=E){e.hook("postAction",async(r,i)=>{try{let s={command:Rs(i),options:Os(i.opts()),success:!0,...Zn(n)};t.track("Flows.CLI.Command",{...s}),await t.flush(Xn)}catch{}})}o(Qn,"instrument");async function er(e,t,n=E){try{let r={command:pt(t),options:{},success:!1,...Zn(n)};e.track("Flows.CLI.Command",{...r}),await e.flush(Xn)}catch{}}o(er,"trackFailure");var _s="ERR_USE_AFTER_CLOSE";function nr(e){return e instanceof Error&&"code"in e&&e.code===_s}o(nr,"isReadlineClosedError");function Us(e){let t=Object.getPrototypeOf(e);return t===Object.prototype||t===null}o(Us,"isPlainObject");function ct(e){return e==null||nr(e)?!0:e instanceof Error?!1:!!(typeof e=="object"&&e!==null&&Us(e)&&Object.keys(e).length===0)}o(ct,"isPromptCancel");var tr=!1;function rr(){tr||(tr=!0,process.on("uncaughtException",e=>{nr(e)&&(console.error(`
150
+ Cancelled.`),process.exit(130)),console.error(e),process.exit(1)}),process.on("unhandledRejection",e=>{ct(e)&&(console.error(`
151
+ Cancelled.`),process.exit(130)),console.error(e),process.exit(1)}))}o(rr,"installCancelHandler");import{homedir as Ms}from"os";import or from"mixpanel";var Ks="5c4d853e7c3b77b1eb4468d5329b278c",ae="cognite-cli",Ls=2e3,ir={env:process.env,init:or.init.bind(or)},js={track:o(()=>{},"track"),flush:o(async()=>{},"flush")};function lt(e=process.env){return e.COGNITE_TELEMETRY_DISABLED==="1"||e.DO_NOT_TRACK==="1"}o(lt,"isTelemetryDisabled");function Ns(e){return e.COGNITE_TELEMETRY_DEBUG==="1"}o(Ns,"isDebug");function sr(e={}){let t=e.env??ir.env,n=e.init??ir.init,r=e.packageName,i=e.cliVersion,s=Ns(t);if(lt(t))return s&&process.stderr.write(`[telemetry] disabled \u2014 noop tracker
152
+ `),js;let a,p=new Set;function c(){if(a)return a;try{return a=n(Ks,{geolocate:!1,keepAlive:!1}),a}catch{return}}return o(c,"getClient"),{track(l,d={}){let m=c();if(!m)return;let g={...d,applicationId:ae,...r&&{packageName:r},...i&&{cliVersion:i},nodeVersion:process.version,platform:process.platform};s&&process.stderr.write(`[telemetry] track ${l} ${JSON.stringify(g)}
153
+ `);let u=o(()=>{},"finish"),f=new Promise(S=>{u=S});p.add(f);try{m.track(l,g,u)}catch{u()}f.finally(()=>p.delete(f))},async flush(l=Ls){if(p.size===0)return;let d,m=new Promise(g=>{d=setTimeout(g,l),d.unref?.()});try{await Promise.race([Promise.allSettled([...p]),m])}finally{d&&clearTimeout(d)}s&&process.stderr.write(`[telemetry] flush done (${p.size} still pending)
154
+ `)}}}o(sr,"createTelemetry");var Vs=Ms();function pe(e,t=Vs){if(!t||t==="/")return e;let n=e.replaceAll(t,"~"),r=t.replaceAll("\\","/");return r!==t&&(n=n.replaceAll(r,"~")),n=n.replace(/(?<![A-Za-z0-9_])[A-Za-z]:[/\\]Users[/\\][^\s/\\]+(?=[/\\]|$)/g,"~"),n=n.replace(/(?<![A-Za-z0-9_])\/(?:Users|home)\/[^\s/]+(?=[/\\]|$)/g,"~"),n}o(pe,"redactHomedir");var Hs=1e3,Bs="https://0a118cb02e3be57b1838bcfb5783a2bf@o4508040730968064.ingest.de.sentry.io/4510719268290640",Gs={captureError:o(async()=>{},"captureError"),flush:o(async()=>{},"flush")};function Js(e){return e.packageName&&e.cliVersion?`${e.packageName}@${e.cliVersion}`:e.cliVersion??"unknown"}o(Js,"buildRelease");var Ys="192.0.2.0";function qs(e){return e?.map(t=>({...t,...t.filename!==void 0&&{filename:pe(t.filename)},...t.abs_path!==void 0&&{abs_path:pe(t.abs_path)},...t.module!==void 0&&{module:pe(t.module)}}))}o(qs,"scrubStackFrames");function zs(e){let t={...e.user,email:void 0,username:void 0,ip_address:Ys,id:void 0},n=e.exception?.values?.map(r=>({...r,value:r.value!==void 0?pe(r.value):r.value,...r.stacktrace!==void 0&&{stacktrace:{...r.stacktrace,frames:qs(r.stacktrace.frames)}}}));return{...e,message:e.message!==void 0?pe(e.message):e.message,user:t,server_name:void 0,...n!==void 0&&{exception:{...e.exception,values:n}}}}o(zs,"scrubPii");function ar(e={}){let t=e.env??process.env;if(lt(t))return Gs;let n=Js(e),r="production",i=null,s=null;function a(){return{dsn:Bs,release:n,environment:r,defaultIntegrations:!1,integrations:[],sendDefaultPii:!1,enableLogs:!1,initialScope:{tags:{component:"cli",applicationId:ae},contexts:{cli:{applicationId:ae,node:process.version,platform:process.platform}}},beforeSend:zs}}o(a,"buildInitOptions");async function p(){return i||(s||(s=(async()=>{try{let c=e.sdk??await import("@sentry/node");return c.init(a()),i=c,c}catch{return null}})()),s)}return o(p,"ensureSdk"),{async captureError(c,l){try{let d=await p();if(!d)return;let m={level:"fatal"};l?.command&&(m.tags={command:l.command},m.contexts={cli:{applicationId:ae,node:process.version,platform:process.platform,command:l.command}}),d.captureException(c,m)}catch{}},async flush(c=Hs){try{if(!i)return;await i.flush(c)}catch{}}}}o(ar,"createErrorReporter");import{mkdirSync as Ws,readFileSync as Xs,writeFileSync as Zs}from"fs";import{homedir as Qs}from"os";import{resolve as xe}from"path";import{debuglog as ea}from"util";import{lt as ta,parse as pr}from"semver";var na="https://registry.npmjs.org/@cognite/cli/latest",ra=1500,cr="upgrade-check.json",lr=xe(process.env.XDG_CACHE_HOME||xe(Qs(),".cache"),"@cognite","cli"),dt=ea("cognite-flows");function oa(e,t){return!e||!t||!pr(e)||!pr(t)?!1:ta(e,t)}o(oa,"isOutdated");async function ia({timeout:e=ra,registryUrl:t=na,fetchImpl:n=globalThis.fetch}={}){if(typeof n!="function")return null;try{let r=await n(t,{signal:AbortSignal.timeout(e)});if(!r?.ok)return null;let i=await r.json();return typeof i?.version=="string"?i.version:null}catch(r){return dt("fetchLatestVersion failed (%s): %O",t,r),null}}o(ia,"fetchLatestVersion");function sa(e=lr,t=864e5){try{let n=Xs(xe(e,cr),"utf-8"),r=JSON.parse(n);return typeof r.latest!="string"||typeof r.fetchedAt!="number"||Date.now()-r.fetchedAt>t?null:{latest:r.latest,fetchedAt:r.fetchedAt}}catch(n){return dt("readUpgradeCheckCache failed (%s): %O",e,n),null}}o(sa,"readUpgradeCheckCache");function aa(e,t){try{Ws(e,{recursive:!0});let n={latest:t,fetchedAt:Date.now()};Zs(xe(e,cr),JSON.stringify(n))}catch(n){dt("writeUpgradeCheckCache failed (%s): %O",e,n)}}o(aa,"writeUpgradeCheckCache");async function pa({cacheDir:e=lr,...t}={}){let n=await ia(t);n&&aa(e,n)}o(pa,"startBackgroundUpgradeCheck");function dr(e,{onOutdated:t,cacheDir:n,...r}={}){let i=sa(n);if(i){oa(e,i.latest)&&t?.(e,i.latest);return}pa({cacheDir:n,...r})}o(dr,"preActionUpgradeCheck");import{default as lu,chalkStderr as mr}from"chalk";function ur(e,t){let n=[`\u26A0 Update available: ${e} -> ${t}`," Run npx @cognite/cli@latest"],r=Math.max(...n.map(p=>[...p].length))+2,i="\u2500".repeat(r),s=o(p=>`\u2502 ${p}${" ".repeat(r-1-[...p].length)}\u2502`,"pad"),a=[`\u250C${i}\u2510`,...n.map(s),`\u2514${i}\u2518`].join(`
155
+ `);return mr.bold.yellow(a)}o(ur,"formatUpgradeWarning");function da(e){return e instanceof Error&&"code"in e&&typeof e.code=="string"&&e.code==="DEP0040"}o(da,"isDep0040Warning");var ut=process,ma=ut.emit.bind(ut);ut.emit=function(e,...t){return e==="warning"&&da(t[0])?!1:ma(e,...t)};rr();var W=new la;W.name("cognite").description("Build and deploy React apps to Cognite Data Fusion").version("1.3.2-alpha.winurl1").showHelpAfterError().configureOutput({writeOut:o(e=>ca(1,e),"writeOut")});W.hook("preAction",()=>{dr("1.3.2-alpha.winurl1",{onOutdated:o((e,t)=>{console.warn(`
156
+ ${ur(e,t)}
157
+ `)},"onOutdated")})});kn(W);Wn(W);var fr=sr({packageName:"@cognite/cli",cliVersion:"1.3.2-alpha.winurl1"}),gr=ar({packageName:"@cognite/cli",cliVersion:"1.3.2-alpha.winurl1"});Qn(W,fr);var mt=process.argv.slice(2);W.parseAsync(mt,{from:"user"}).catch(async e=>{await er(fr,mt),ct(e)&&(console.error(`
158
+ Cancelled.`),process.exit(130)),await gr.captureError(e,{command:pt(mt)}),await gr.flush(),console.error(e instanceof Error?`\u274C ${e.message}`:e),process.exit(1)});