@controllerai/cli 0.2.0

package/README.md

@@ -0,0 +1,180 @@
+# Controller AI CLI
+
+Build, test, and operate Controller AI workflows and agents from the coding
+agent you already use.
+
+## Install and connect
+
+Node.js 20 or newer is required. Use the durable setup command:
+
+```sh
+npm install -g @controllerai/cli && cai connect
+```
+
+`cai connect` fetches and verifies the current Agent Skills. When the hosted
+source is unavailable, it retains an intact current or newer managed set and
+installs the bundled version only where skills are missing, older, or broken.
+Invalid manifests, incompatible versions, unsafe redirects, and integrity
+failures stop setup instead of silently falling back. It then opens browser
+authorization and verifies the credential and API connection. Its
+final output includes the exact `controllerai-start/SKILL.md` path the
+current coding-agent session should read. Running `npx
+@controllerai/cli connect` is useful for a trial, but it does not guarantee that
+the `cai` binary remains available after that process exits.
+
+On a remote or headless machine, run `cai connect --no-open`. Open the printed
+authorization URL in any browser and leave the terminal running until approval
+completes. Linux sessions without a desktop display use this manual path
+automatically.
+
+The browser flow stores a revocable `cai_` credential in
+`~/.config/cai/config.json` with owner-only permissions. It receives the full
+CLI capability set displayed on the approval screen; narrower scope selection
+is not available yet. A CLI credential cannot mint a legacy API key.
+
+## Start building
+
+For an agent, first decide whether each capability is one ready integration
+action or needs a workflow. A direct action does not require workflow context:
+
+```sh
+cai integration search "send a Slack message"
+cai integration actions <integrationSlug> --search "send message"
+cai connection list --integration <integrationSlug>
+cai connection connect <integrationSlug> --wait
+cai agent create --name "Support agent" --instructions-file instructions.md
+cai agent add-action <agentId> \
+  --integration <integrationSlug> \
+  --action <actionKey> \
+  --connection <connectionId>
+cai agent tools <agentId>
+```
+
+Ready actions run without per-call approval by default. Add
+`--require-confirmation` when the operation sends communications, writes or
+deletes data, changes permissions, or can incur spend. Make this a deliberate
+per-action decision.
+
+Use a workflow when the behavior needs multiple steps, transformations,
+branches, loops, triggers, durable data, or a custom typed contract:
+
+```sh
+cai workflow list
+cai workflow create --name "Lead intake"
+cai use <workflowId>
+cai node find "send a Slack message"
+cai node component --node <nodeSlug> --key <nodeKey>
+cai node init --flow <flowId> --key <nodeKey>
+cai node status <nodeId>
+```
+
+For expressions, use the guarded write path. It reads prop metadata, compiles
+against the real node context, lets the backend select the correct storage
+field, and verifies the persisted expression:
+
+```sh
+cai expr context <nodeId> --prop <prop>
+cai expr set <nodeId> --prop <prop> --js '<expression>'
+```
+
+Test before publishing:
+
+```sh
+cai run node <nodeId> --inputs values.json
+cai run flow <flowId> --inputs values.json
+cai workflow publish
+```
+
+Agent Test and Live modes are separate:
+
+| | Test / draft | Live / shared |
+| --- | --- | --- |
+| Agent | Current mutable draft; owner only | Latest published immutable version; shared users never see draft |
+| Workflow tools | Current development heads | Each workflow's latest live release |
+| Reference files | Current draft knowledge | Knowledge frozen at agent publish |
+| Runtime files | Live files overlaid by development/test files at the same path | Current live files only |
+
+Publishing an agent snapshots its name, instructions, tool identities,
+descriptions and approval policies, and knowledge files, then moves existing
+live conversations to that version. To update those fields in Live: edit the
+draft, verify Test, publish the agent, and verify Live.
+
+Workflow releases are not pinned to agent versions. Publishing an attached
+workflow changes every live agent that follows it without another agent publish.
+A direct action's connection and authorization grant are live security bindings:
+rebinding can redirect Live, while breakage, revocation, or detachment can block
+Live immediately without another agent publish. Detachment also changes the
+draft tool list; publish afterward to remove that unavailable tool from the
+published list.
+
+Direct actions run inline in the hosted conversation; they do not create
+workflow execution IDs:
+
+```sh
+cai agent create --name "Support agent" --instructions-file instructions.md
+cai agent add-action <agentId> --integration <slug> --action <key> --connection <id>
+# Or, for orchestrated behavior:
+cai agent add-workflow <agentId> --workflow-id <workflowId> --flow <flowId>
+cai agent test <agentId> --draft --message "Handle this sample request"
+cai workflow status
+cai workflow publish --name "Support workflow v1"
+cai agent publish-preflight <agentId>
+cai agent publish <agentId>
+cai agent test <agentId> --live --message "Handle this sample request"
+```
+
+Skip the workflow publish when live already matches the tested development
+state, and skip it entirely for an agent with only direct actions. Publishing a
+workflow already used by another live agent changes that agent immediately.
+
+Organization-shared agents run direct actions through the agent owner's
+connected external account. Controller AI usage draws from the organization's
+shared usage pool. The connection is live-bound: rebinding or revoking it can
+immediately affect a published agent, and detaching the grant can block the
+published tool before the agent is republished.
+
+Use `cai <command> --help` for the complete command surface and `--json` for a
+stable machine-readable envelope.
+
+## Skill targets
+
+`cai skills update` verifies the hosted manifest, file sizes, and SHA-256
+digests before replacing any managed copy. `cai skills status` reports current,
+stale, modified, incomplete, and unmanaged installations. `cai skills install`
+uses the offline copy bundled with the installed CLI.
+
+Skill commands auto-detect installed hosts. Explicit targets include
+`agents`, `codex`, `claude`, `cursor`, `copilot`, `all`, and the open-standard
+project location `.agents/skills` via `--target project`. Codex and the generic
+Agent Skills target use `$CODEX_HOME/skills` (default `~/.codex/skills`) and
+`~/.agents/skills`, respectively; Claude uses `~/.claude/skills`.
+
+The installer replaces only Controller-AI-managed copies by default. It refuses
+to overwrite an unmanaged folder with the same skill name unless `--force` is
+explicitly supplied. Skill-set versions are immutable: changing source bytes
+requires a version bump, and both the build and runtime installers reject
+different contents that claim an existing version.
+
+## Configuration
+
+Environment overrides:
+
+- `CAI_API_URL`
+- `CAI_APP_URL`
+- `CAI_TOKEN`
+- `CAI_WORKFLOW`
+- `CAI_CONFIG`
+
+`CAI_API_URL`, `CAI_APP_URL`, and `--api-url` are transient process overrides. Authentication,
+workflow creation, and `cai use` do not copy them into the saved config. Pass the
+override again when needed; `cai doctor --api-url <url>` verifies that backend.
+
+The CLI derives product links when the API host has the `https://api.<host>`
+shape. For local or custom deployments, set `CAI_APP_URL` or add an `appUrl`
+field to the config file; when no safe app base is known, link fields are omitted.
+
+For local manifest integration tests only, `CAI_SKILLS_MANIFEST_URL` can point
+to HTTPS or a loopback HTTP URL. Hosted file URLs must share its origin.
+
+Run `cai doctor` to verify Node.js, authentication, API access, installed skills,
+and credential-file permissions.

package/dist/api/client.js

@@ -0,0 +1,330 @@
+import { CaiError, EXIT, SCRUBBED_HINT, authError, exitCodeForStatus, isScrubbed, networkError, userError, } from '../errors.js';
+const DEFAULT_TIMEOUT = 120_000;
+/**
+ * A CLI credential is a bearer secret. Never send it over cleartext to a
+ * remote host, or to a URL containing userinfo/query fragments that can make
+ * the configured destination misleading. Local HTTP remains available for
+ * isolated development stacks.
+ */
+export const assertSafeApiUrl = (value) => {
+    let url;
+    try {
+        url = new URL(value);
+    }
+    catch {
+        throw userError(`Invalid Controller API URL: ${value}`, 'BAD_API_URL');
+    }
+    const localHosts = new Set(['localhost', '127.0.0.1', '[::1]', '::1']);
+    const secureTransport = url.protocol === 'https:' || (url.protocol === 'http:' && localHosts.has(url.hostname));
+    if (!secureTransport) {
+        throw userError('Controller API URLs must use HTTPS; HTTP is allowed only for localhost or loopback.', 'UNSAFE_API_URL');
+    }
+    if (url.username || url.password || url.search || url.hash) {
+        throw userError('Controller API URL must not contain credentials, a query string, or a fragment.', 'UNSAFE_API_URL');
+    }
+    return value.replace(/\/+$/, '');
+};
+/**
+ * Build the auth header. The backend reads ZERO cookies — a login JWT and a raw
+ * `sk-…` API key both travel on `Authorization: Bearer`, so there is exactly one
+ * shape to get right.
+ */
+export const authHeaders = (token) => {
+    if (!token)
+        return {};
+    return { Authorization: `Bearer ${token}` };
+};
+export class ApiClient {
+    apiUrl;
+    token;
+    /** Every MCP tool call made this process, for `--debug`. */
+    trace = [];
+    constructor(config) {
+        this.apiUrl = assertSafeApiUrl(config.apiUrl);
+        this.token = config.token;
+    }
+    get hasToken() {
+        return Boolean(this.token);
+    }
+    requireToken() {
+        if (!this.token) {
+            throw authError('No credential. Run `cai auth login` or set CAI_TOKEN.', 'NO_TOKEN');
+        }
+        return this.token;
+    }
+    /** Raw fetch with timeout, translating transport failures into exit code 4. */
+    async raw(path, opts, withAuth) {
+        const url = `${this.apiUrl}${path}`;
+        const controller = new AbortController();
+        const timer = setTimeout(() => controller.abort(), opts.timeoutMs ?? DEFAULT_TIMEOUT);
+        try {
+            return await fetch(url, {
+                method: opts.method ?? 'GET',
+                headers: {
+                    'Content-Type': 'application/json',
+                    ...(withAuth ? authHeaders(this.requireToken()) : {}),
+                },
+                ...(opts.body !== undefined ? { body: JSON.stringify(opts.body) } : {}),
+                signal: controller.signal,
+            });
+        }
+        catch (error) {
+            if (error instanceof CaiError)
+                throw error;
+            const reason = error instanceof Error ? error.message : String(error);
+            throw networkError(`Cannot reach backend at ${url}: ${reason}`);
+        }
+        finally {
+            clearTimeout(timer);
+        }
+    }
+    /**
+     * A plain REST call against the pre-existing surface (workflow CRUD,
+     * connections, execution reads). Unwraps the `{statusCode,error,data}`
+     * envelope and prints the backend message verbatim on failure.
+     */
+    async rest(path, opts = {}) {
+        const started = Date.now();
+        const response = await this.raw(path, opts, !opts.anonymous);
+        this.trace.push({
+            kind: 'rest',
+            target: `${opts.method ?? 'GET'} ${path}`,
+            ms: Date.now() - started,
+        });
+        const text = await response.text();
+        let parsed;
+        try {
+            parsed = text ? JSON.parse(text) : undefined;
+        }
+        catch {
+            // Koa returns bare text for unmatched routes ("Not Found"), not JSON.
+            if (!response.ok) {
+                throw new CaiError(`${response.status} ${text.trim() || response.statusText}`, {
+                    exitCode: exitCodeForStatus(response.status),
+                    code: 'HTTP_ERROR',
+                });
+            }
+            throw new CaiError(`Unparseable response from ${path}: ${text.slice(0, 200)}`, {
+                exitCode: EXIT.network,
+                code: 'BAD_RESPONSE',
+            });
+        }
+        const backendMessage = parsed?.error?.message ?? '';
+        const backendCode = parsed?.error?.code;
+        if (!response.ok || parsed?.error) {
+            const status = parsed?.statusCode ?? response.status;
+            const scrubbed = isScrubbed(status, backendMessage || response.statusText);
+            throw new CaiError(backendMessage || `${status} ${response.statusText}`, {
+                exitCode: exitCodeForStatus(status, backendCode),
+                code: backendCode ?? 'HTTP_ERROR',
+                scrubbed,
+                detail: scrubbed
+                    ? { hint: SCRUBBED_HINT, route: `${opts.method ?? 'GET'} ${path}` }
+                    : undefined,
+            });
+        }
+        return parsed?.data;
+    }
+    /**
+     * Multipart POST. Only the CSV record import needs it, and it cannot reuse
+     * `rest()`: that always sets `Content-Type: application/json`, which would
+     * suppress the boundary `undici` generates for a FormData body and make the
+     * server see an unparseable part.
+     */
+    async upload(path, form, timeoutMs = DEFAULT_TIMEOUT) {
+        const url = `${this.apiUrl}${path}`;
+        const controller = new AbortController();
+        const timer = setTimeout(() => controller.abort(), timeoutMs);
+        const started = Date.now();
+        let response;
+        try {
+            response = await fetch(url, {
+                method: 'POST',
+                headers: authHeaders(this.requireToken()),
+                body: form,
+                signal: controller.signal,
+            });
+        }
+        catch (error) {
+            if (error instanceof CaiError)
+                throw error;
+            const reason = error instanceof Error ? error.message : String(error);
+            throw networkError(`Cannot reach backend at ${url}: ${reason}`);
+        }
+        finally {
+            clearTimeout(timer);
+        }
+        this.trace.push({ kind: 'rest', target: `POST ${path}`, ms: Date.now() - started });
+        const text = await response.text();
+        const parsed = safeJson(text);
+        const backendMessage = parsed?.error?.message ?? '';
+        if (!response.ok || parsed?.error) {
+            const status = parsed?.statusCode ?? response.status;
+            const scrubbed = isScrubbed(status, backendMessage || response.statusText);
+            throw new CaiError(backendMessage || `${status} ${text.trim() || response.statusText}`, {
+                exitCode: exitCodeForStatus(status, parsed?.error?.code),
+                code: parsed?.error?.code ?? 'HTTP_ERROR',
+                scrubbed,
+                detail: scrubbed ? { hint: SCRUBBED_HINT, route: `POST ${path}` } : undefined,
+            });
+        }
+        return parsed?.data;
+    }
+    /**
+     * Call a tool on the persisting builder surface: `POST /agent-mcp/:workflowId`,
+     * JSON-RPC 2.0.
+     *
+     * THIS IS THE ONLY TRANSPORT THAT WRITES. The sibling REST routes under
+     * `/workflow-agent/*` compute an operation and broadcast it to a connected
+     * builder client over a socket — with no browser attached they can return
+     * `{success:true}` without persisting anything.
+     */
+    async tool(workflowId, name, args = {}) {
+        const started = Date.now();
+        const response = await this.raw(`/agent-mcp/${workflowId}`, {
+            method: 'POST',
+            body: { jsonrpc: '2.0', id: 1, method: 'tools/call', params: { name, arguments: args } },
+        }, true);
+        this.trace.push({ kind: 'mcp', target: name, ms: Date.now() - started });
+        const text = await response.text();
+        // A rejected token never reaches the JSON-RPC layer: the auth middleware
+        // answers with an OAuth-shaped body ({error, error_description}) and a bare
+        // 401, so the HTTP status has to be classified before parsing a JSON-RPC
+        // envelope that is not there.
+        if (!response.ok) {
+            const body = safeJson(text);
+            // The MCP surface also answers some rejections (unknown workflow, ACL)
+            // with a proper JSON-RPC error envelope AND a non-2xx status.
+            if (typeof body?.error?.message === 'string') {
+                throw toolError(body.error.message, name, body.error.data);
+            }
+            const message = body?.error_description ?? body?.error ?? text.trim() ?? response.statusText;
+            const readable = typeof message === 'string' ? message : JSON.stringify(message);
+            const scrubbed = isScrubbed(response.status, readable);
+            throw new CaiError(readable || `${response.status} ${response.statusText}`, {
+                exitCode: exitCodeForStatus(response.status),
+                code: typeof body?.error === 'string' ? body.error : 'HTTP_ERROR',
+                scrubbed,
+                detail: scrubbed ? { hint: SCRUBBED_HINT, tool: name } : { tool: name },
+            });
+        }
+        let parsed;
+        try {
+            parsed = JSON.parse(text);
+        }
+        catch {
+            throw new CaiError(`Unparseable MCP response for ${name}: ${text.slice(0, 200)}`, {
+                exitCode: EXIT.network,
+                code: 'BAD_RESPONSE',
+            });
+        }
+        if (parsed.error) {
+            throw toolError(parsed.error.message, name, parsed.error.data);
+        }
+        const content = parsed.result?.content ?? [];
+        const payload = content.map(c => c.text ?? '').join('');
+        if (parsed.result?.isError) {
+            throw toolError(payload || 'Tool reported an error', name);
+        }
+        if (!payload)
+            return undefined;
+        try {
+            return JSON.parse(payload);
+        }
+        catch {
+            // Some tools return prose rather than JSON; pass it through as-is.
+            return payload;
+        }
+    }
+    /**
+     * Graph mutation wrapper. Reads the current dev head, runs the mutation, and
+     * on a state conflict retries EXACTLY ONCE before failing loudly.
+     *
+     * Current backends serialize `latestStateId` with a structured conflict, so
+     * that exact head is reused. Older backends are supported by re-fetching it.
+     */
+    async mutate(workflowId, run) {
+        let head = await this.head(workflowId).catch(() => null);
+        try {
+            return await run(head);
+        }
+        catch (error) {
+            if (!(error instanceof CaiError) || error.exitCode !== EXIT.conflict)
+                throw error;
+            const latestStateId = conflictLatestStateId(error);
+            head =
+                latestStateId !== undefined ? latestStateId : await this.head(workflowId).catch(() => null);
+            try {
+                return await run(head);
+            }
+            catch (retryError) {
+                if (retryError instanceof CaiError && retryError.exitCode === EXIT.conflict) {
+                    throw new CaiError(`${retryError.message}\nRetried once against head ${head ?? '(unknown)'} and still ` +
+                        'conflicted. Another writer is active on this workflow — stop it and retry.', { exitCode: EXIT.conflict, code: 'STATE_CONFLICT' });
+                }
+                throw retryError;
+            }
+        }
+    }
+    /** Current development-version head (workflowVersionState id), or null. */
+    async head(workflowId) {
+        const state = await this.rest(`/workflow-agent/development-version-state/${workflowId}`);
+        return state?.id ?? null;
+    }
+}
+const safeJson = (text) => {
+    try {
+        return JSON.parse(text);
+    }
+    catch {
+        return null;
+    }
+};
+const conflictLatestStateId = (error) => {
+    if (!error.detail || typeof error.detail !== 'object')
+        return undefined;
+    const value = error.detail.latestStateId;
+    if (value === null)
+        return null;
+    return typeof value === 'number' && Number.isSafeInteger(value) ? value : undefined;
+};
+/**
+ * MCP transport errors arrive as JSON-RPC -32603. Current backends include a
+ * structured application code in `error.data`; older ones only provide the
+ * thrown message, so text classification remains as a compatibility fallback.
+ */
+export const toolError = (message, tool, data) => {
+    const text = (message ?? '').trim();
+    const errorData = data && typeof data === 'object' ? data : undefined;
+    if (errorData?.code === 'STATE_CONFLICT') {
+        const value = errorData.latestStateId;
+        const latestStateId = value === null || (typeof value === 'number' && Number.isSafeInteger(value))
+            ? value
+            : undefined;
+        return new CaiError(text || 'State conflict', {
+            exitCode: EXIT.conflict,
+            code: 'STATE_CONFLICT',
+            detail: { tool, ...(latestStateId !== undefined ? { latestStateId } : {}) },
+        });
+    }
+    if (/STATE_CONFLICT|state conflict|baseStateId/i.test(text)) {
+        return new CaiError(text, { exitCode: EXIT.conflict, code: 'STATE_CONFLICT', detail: { tool } });
+    }
+    if (/unauthor|forbidden|do not have access|not authenticated/i.test(text)) {
+        return new CaiError(text, { exitCode: EXIT.auth, code: 'UNAUTHORIZED', detail: { tool } });
+    }
+    if (isScrubbed(500, text)) {
+        return new CaiError(text, {
+            exitCode: EXIT.network,
+            code: 'INTERNAL_SERVER_ERROR',
+            scrubbed: true,
+            detail: { hint: SCRUBBED_HINT, tool },
+        });
+    }
+    return new CaiError(text || `Tool ${tool} failed`, {
+        exitCode: EXIT.user,
+        code: 'TOOL_ERROR',
+        detail: { tool },
+    });
+};
+//# sourceMappingURL=client.js.map

package/dist/api/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../../src/api/client.ts"],"names":[],"mappings":"AACA,OAAO,EACL,QAAQ,EACR,IAAI,EACJ,aAAa,EACb,SAAS,EACT,iBAAiB,EACjB,UAAU,EACV,YAAY,EACZ,SAAS,GACV,MAAM,cAAc,CAAA;AA4BrB,MAAM,eAAe,GAAG,OAAO,CAAA;AAE/B;;;;;GAKG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,KAAa,EAAU,EAAE;IACxD,IAAI,GAAQ,CAAA;IACZ,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAA;IACtB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,SAAS,CAAC,+BAA+B,KAAK,EAAE,EAAE,aAAa,CAAC,CAAA;IACxE,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,WAAW,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,CAAA;IACtE,MAAM,eAAe,GACnB,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAA;IACzF,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,MAAM,SAAS,CACb,qFAAqF,EACrF,gBAAgB,CACjB,CAAA;IACH,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;QAC3D,MAAM,SAAS,CACb,iFAAiF,EACjF,gBAAgB,CACjB,CAAA;IACH,CAAC;IACD,OAAO,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;AAClC,CAAC,CAAA;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,KAAc,EAA0B,EAAE;IACpE,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,CAAA;IACrB,OAAO,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,CAAA;AAC7C,CAAC,CAAA;AAED,MAAM,OAAO,SAAS;IACX,MAAM,CAAQ;IACN,KAAK,CAAS;IAC/B,4DAA4D;IACnD,KAAK,GAAgE,EAAE,CAAA;IAEhF,YAAY,MAA2C;QACrD,IAAI,CAAC,MAAM,GAAG,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;QAC7C,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAA;IAC3B,CAAC;IAED,IAAI,QAAQ;QACV,OAAO,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IAC5B,CAAC;IAEO,YAAY;QAClB,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YAChB,MAAM,SAAS,CAAC,uDAAuD,EAAE,UAAU,CAAC,CAAA;QACtF,CAAC;QACD,OAAO,IAAI,CAAC,KAAK,CAAA;IACnB,CAAC;IAED,+EAA+E;IACvE,KAAK,CAAC,GAAG,CAAC,IAAY,EAAE,IAAoB,EAAE,QAAiB;QACrE,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,MAAM,GAAG,IAAI,EAAE,CAAA;QACnC,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAA;QACxC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,SAAS,IAAI,eAAe,CAAC,CAAA;QACrF,IAAI,CAAC;YACH,OAAO,MAAM,KAAK,CAAC,GAAG,EAAE;gBACtB,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,KAAK;gBAC5B,OAAO,EAAE;oBACP,cAAc,EAAE,kBAAkB;oBAClC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;iBACtD;gBACD,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACvE,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC,CAAA;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,QAAQ;gBAAE,MAAM,KAAK,CAAA;YAC1C,MAAM,MAAM,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;YACrE,MAAM,YAAY,CAAC,2BAA2B,GAAG,KAAK,MAAM,EAAE,CAAC,CAAA;QACjE,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,KAAK,CAAC,CAAA;QACrB,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,IAAI,CAAc,IAAY,EAAE,OAAuB,EAAE;QAC7D,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QAC1B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;QAC5D,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;YACd,IAAI,EAAE,MAAM;YACZ,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,IAAI,KAAK,IAAI,IAAI,EAAE;YACzC,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO;SACzB,CAAC,CAAA;QAEF,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAA;QAClC,IAAI,MAAmC,CAAA;QACvC,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAqB,CAAC,CAAC,CAAC,SAAS,CAAA;QACnE,CAAC;QAAC,MAAM,CAAC;YACP,sEAAsE;YACtE,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,IAAI,QAAQ,CAAC,GAAG,QAAQ,CAAC,MAAM,IAAI,IAAI,CAAC,IAAI,EAAE,IAAI,QAAQ,CAAC,UAAU,EAAE,EAAE;oBAC7E,QAAQ,EAAE,iBAAiB,CAAC,QAAQ,CAAC,MAAM,CAAC;oBAC5C,IAAI,EAAE,YAAY;iBACnB,CAAC,CAAA;YACJ,CAAC;YACD,MAAM,IAAI,QAAQ,CAAC,6BAA6B,IAAI,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE;gBAC7E,QAAQ,EAAE,IAAI,CAAC,OAAO;gBACtB,IAAI,EAAE,cAAc;aACrB,CAAC,CAAA;QACJ,CAAC;QAED,MAAM,cAAc,GAAG,MAAM,EAAE,KAAK,EAAE,OAAO,IAAI,EAAE,CAAA;QACnD,MAAM,WAAW,GAAG,MAAM,EAAE,KAAK,EAAE,IAAI,CAAA;QACvC,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,MAAM,EAAE,KAAK,EAAE,CAAC;YAClC,MAAM,MAAM,GAAG,MAAM,EAAE,UAAU,IAAI,QAAQ,CAAC,MAAM,CAAA;YACpD,MAAM,QAAQ,GAAG,UAAU,CAAC,MAAM,EAAE,cAAc,IAAI,QAAQ,CAAC,UAAU,CAAC,CAAA;YAC1E,MAAM,IAAI,QAAQ,CAAC,cAAc,IAAI,GAAG,MAAM,IAAI,QAAQ,CAAC,UAAU,EAAE,EAAE;gBACvE,QAAQ,EAAE,iBAAiB,CAAC,MAAM,EAAE,WAAW,CAAC;gBAChD,IAAI,EAAE,WAAW,IAAI,YAAY;gBACjC,QAAQ;gBACR,MAAM,EAAE,QAAQ;oBACd,CAAC,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC,MAAM,IAAI,KAAK,IAAI,IAAI,EAAE,EAAE;oBACnE,CAAC,CAAC,SAAS;aACd,CAAC,CAAA;QACJ,CAAC;QACD,OAAO,MAAM,EAAE,IAAS,CAAA;IAC1B,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,MAAM,CAAc,IAAY,EAAE,IAAc,EAAE,SAAS,GAAG,eAAe;QACjF,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,MAAM,GAAG,IAAI,EAAE,CAAA;QACnC,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAA;QACxC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,SAAS,CAAC,CAAA;QAC7D,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QAC1B,IAAI,QAAkB,CAAA;QACtB,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;gBAC1B,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,WAAW,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;gBACzC,IAAI,EAAE,IAAI;gBACV,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC,CAAA;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,QAAQ;gBAAE,MAAM,KAAK,CAAA;YAC1C,MAAM,MAAM,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;YACrE,MAAM,YAAY,CAAC,2BAA2B,GAAG,KAAK,MAAM,EAAE,CAAC,CAAA;QACjE,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,KAAK,CAAC,CAAA;QACrB,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,IAAI,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,EAAE,CAAC,CAAA;QAEnF,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAA;QAClC,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAA2B,CAAA;QACvD,MAAM,cAAc,GAAG,MAAM,EAAE,KAAK,EAAE,OAAO,IAAI,EAAE,CAAA;QACnD,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,MAAM,EAAE,KAAK,EAAE,CAAC;YAClC,MAAM,MAAM,GAAG,MAAM,EAAE,UAAU,IAAI,QAAQ,CAAC,MAAM,CAAA;YACpD,MAAM,QAAQ,GAAG,UAAU,CAAC,MAAM,EAAE,cAAc,IAAI,QAAQ,CAAC,UAAU,CAAC,CAAA;YAC1E,MAAM,IAAI,QAAQ,CAAC,cAAc,IAAI,GAAG,MAAM,IAAI,IAAI,CAAC,IAAI,EAAE,IAAI,QAAQ,CAAC,UAAU,EAAE,EAAE;gBACtF,QAAQ,EAAE,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC;gBACxD,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,IAAI,YAAY;gBACzC,QAAQ;gBACR,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,QAAQ,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS;aAC9E,CAAC,CAAA;QACJ,CAAC;QACD,OAAO,MAAM,EAAE,IAAS,CAAA;IAC1B,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,IAAI,CACR,UAAkB,EAClB,IAAY,EACZ,OAAgC,EAAE;QAElC,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QAC1B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,GAAG,CAC7B,cAAc,UAAU,EAAE,EAC1B;YACE,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE;SACzF,EACD,IAAI,CACL,CAAA;QACD,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,EAAE,CAAC,CAAA;QAExE,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAA;QAClC,yEAAyE;QACzE,4EAA4E;QAC5E,yEAAyE;QACzE,8BAA8B;QAC9B,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAQ,CAAA;YAClC,uEAAuE;YACvE,8DAA8D;YAC9D,IAAI,OAAO,IAAI,EAAE,KAAK,EAAE,OAAO,KAAK,QAAQ,EAAE,CAAC;gBAC7C,MAAM,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;YAC5D,CAAC;YACD,MAAM,OAAO,GAAG,IAAI,EAAE,iBAAiB,IAAI,IAAI,EAAE,KAAK,IAAI,IAAI,CAAC,IAAI,EAAE,IAAI,QAAQ,CAAC,UAAU,CAAA;YAC5F,MAAM,QAAQ,GAAG,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAA;YAChF,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAA;YACtD,MAAM,IAAI,QAAQ,CAAC,QAAQ,IAAI,GAAG,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,EAAE,EAAE;gBAC1E,QAAQ,EAAE,iBAAiB,CAAC,QAAQ,CAAC,MAAM,CAAC;gBAC5C,IAAI,EAAE,OAAO,IAAI,EAAE,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY;gBACjE,QAAQ;gBACR,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE;aACxE,CAAC,CAAA;QACJ,CAAC;QAED,IAAI,MAAuB,CAAA;QAC3B,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAoB,CAAA;QAC9C,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,QAAQ,CAAC,gCAAgC,IAAI,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE;gBAChF,QAAQ,EAAE,IAAI,CAAC,OAAO;gBACtB,IAAI,EAAE,cAAc;aACrB,CAAC,CAAA;QACJ,CAAC;QAED,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YACjB,MAAM,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QAChE,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,IAAI,EAAE,CAAA;QAC5C,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QACvD,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;YAC3B,MAAM,SAAS,CAAC,OAAO,IAAI,wBAAwB,EAAE,IAAI,CAAC,CAAA;QAC5D,CAAC;QACD,IAAI,CAAC,OAAO;YAAE,OAAO,SAAc,CAAA;QACnC,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAM,CAAA;QACjC,CAAC;QAAC,MAAM,CAAC;YACP,mEAAmE;YACnE,OAAO,OAAuB,CAAA;QAChC,CAAC;IACH,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,MAAM,CAAI,UAAkB,EAAE,GAA+C;QACjF,IAAI,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAA;QACxD,IAAI,CAAC;YACH,OAAO,MAAM,GAAG,CAAC,IAAI,CAAC,CAAA;QACxB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,CAAC,KAAK,YAAY,QAAQ,CAAC,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI,CAAC,QAAQ;gBAAE,MAAM,KAAK,CAAA;YACjF,MAAM,aAAa,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAA;YAClD,IAAI;gBACF,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAA;YAC7F,IAAI,CAAC;gBACH,OAAO,MAAM,GAAG,CAAC,IAAI,CAAC,CAAA;YACxB,CAAC;YAAC,OAAO,UAAU,EAAE,CAAC;gBACpB,IAAI,UAAU,YAAY,QAAQ,IAAI,UAAU,CAAC,QAAQ,KAAK,IAAI,CAAC,QAAQ,EAAE,CAAC;oBAC5E,MAAM,IAAI,QAAQ,CAChB,GAAG,UAAU,CAAC,OAAO,+BAA+B,IAAI,IAAI,WAAW,aAAa;wBAClF,4EAA4E,EAC9E,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,gBAAgB,EAAE,CACpD,CAAA;gBACH,CAAC;gBACD,MAAM,UAAU,CAAA;YAClB,CAAC;QACH,CAAC;IACH,CAAC;IAED,2EAA2E;IAC3E,KAAK,CAAC,IAAI,CAAC,UAAkB;QAC3B,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,CAC3B,6CAA6C,UAAU,EAAE,CAC1D,CAAA;QACD,OAAO,KAAK,EAAE,EAAE,IAAI,IAAI,CAAA;IAC1B,CAAC;CACF;AAED,MAAM,QAAQ,GAAG,CAAC,IAAY,EAAW,EAAE;IACzC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC,CAAA;AAED,MAAM,qBAAqB,GAAG,CAAC,KAAe,EAA6B,EAAE;IAC3E,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAA;IACvE,MAAM,KAAK,GAAI,KAAK,CAAC,MAAkC,CAAC,aAAa,CAAA;IACrE,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,CAAA;IAC/B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAA;AACrF,CAAC,CAAA;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,OAAe,EAAE,IAAY,EAAE,IAAc,EAAY,EAAE;IACnF,MAAM,IAAI,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAA;IACnC,MAAM,SAAS,GAAG,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAE,IAAgC,CAAC,CAAC,CAAC,SAAS,CAAA;IAClG,IAAI,SAAS,EAAE,IAAI,KAAK,gBAAgB,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,SAAS,CAAC,aAAa,CAAA;QACrC,MAAM,aAAa,GACjB,KAAK,KAAK,IAAI,IAAI,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;YAC1E,CAAC,CAAC,KAAK;YACP,CAAC,CAAC,SAAS,CAAA;QACf,OAAO,IAAI,QAAQ,CAAC,IAAI,IAAI,gBAAgB,EAAE;YAC5C,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,IAAI,EAAE,gBAAgB;YACtB,MAAM,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;SAC5E,CAAC,CAAA;IACJ,CAAC;IACD,IAAI,4CAA4C,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5D,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,gBAAgB,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,CAAA;IAClG,CAAC;IACD,IAAI,0DAA0D,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1E,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,CAAA;IAC5F,CAAC;IACD,IAAI,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC;QAC1B,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE;YACxB,QAAQ,EAAE,IAAI,CAAC,OAAO;YACtB,IAAI,EAAE,uBAAuB;YAC7B,QAAQ,EAAE,IAAI;YACd,MAAM,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE;SACtC,CAAC,CAAA;IACJ,CAAC;IACD,OAAO,IAAI,QAAQ,CAAC,IAAI,IAAI,QAAQ,IAAI,SAAS,EAAE;QACjD,QAAQ,EAAE,IAAI,CAAC,IAAI;QACnB,IAAI,EAAE,YAAY;QAClB,MAAM,EAAE,EAAE,IAAI,EAAE;KACjB,CAAC,CAAA;AACJ,CAAC,CAAA"}

package/dist/appLinks.js

@@ -0,0 +1,99 @@
+import { loadConfig } from './config.js';
+const normalizedExplicitBase = (value) => {
+    const trimmed = value.trim();
+    if (!trimmed)
+        return null;
+    let url;
+    try {
+        url = new URL(trimmed);
+    }
+    catch {
+        return null;
+    }
+    if (!['http:', 'https:'].includes(url.protocol))
+        return null;
+    if (url.username || url.password || url.search || url.hash)
+        return null;
+    return url.toString().replace(/\/+$/, '');
+};
+/** Resolve the product frontend without inventing a link for unknown API shapes. */
+export const appBaseUrl = (config) => {
+    if (process.env.CAI_APP_URL !== undefined) {
+        return normalizedExplicitBase(process.env.CAI_APP_URL);
+    }
+    if (config.appUrl !== undefined) {
+        return typeof config.appUrl === 'string' ? normalizedExplicitBase(config.appUrl) : null;
+    }
+    let apiUrl;
+    try {
+        apiUrl = new URL(config.apiUrl);
+    }
+    catch {
+        return null;
+    }
+    if (apiUrl.protocol !== 'https:' ||
+        apiUrl.username ||
+        apiUrl.password ||
+        apiUrl.search ||
+        apiUrl.hash ||
+        (apiUrl.pathname !== '' && apiUrl.pathname !== '/') ||
+        !apiUrl.hostname.startsWith('api.')) {
+        return null;
+    }
+    const hostname = apiUrl.hostname.slice('api.'.length);
+    if (!hostname ||
+        ['localhost', '127.0.0.1', '[::1]', '::1'].includes(hostname) ||
+        hostname.endsWith('.localhost')) {
+        return null;
+    }
+    return `https://${hostname}${apiUrl.port ? `:${apiUrl.port}` : ''}`;
+};
+const resolvedBase = (source) => typeof source === 'string'
+    ? normalizedExplicitBase(source)
+    : source === null
+        ? null
+        : appBaseUrl(source);
+const routeUrl = (base, segments) => base === null
+    ? null
+    : `${base}/${segments.map(segment => encodeURIComponent(String(segment))).join('/')}`;
+export function workflowBuilderUrl(sourceOrWorkflowId, workflowIdOrVersionId, maybeVersionId) {
+    const implicitConfig = maybeVersionId === undefined;
+    const base = implicitConfig
+        ? appBaseUrl(loadConfig())
+        : resolvedBase(sourceOrWorkflowId);
+    const workflowId = implicitConfig ? sourceOrWorkflowId : workflowIdOrVersionId;
+    const versionId = implicitConfig ? workflowIdOrVersionId : maybeVersionId;
+    return routeUrl(base, ['workflows', workflowId, 'versions', versionId]);
+}
+export function runUrl(sourceOrWorkflowId, workflowIdOrVersionId, versionIdOrExecutionId, maybeExecutionId) {
+    const implicitConfig = maybeExecutionId === undefined;
+    const base = implicitConfig
+        ? appBaseUrl(loadConfig())
+        : resolvedBase(sourceOrWorkflowId);
+    const workflowId = implicitConfig ? sourceOrWorkflowId : workflowIdOrVersionId;
+    const versionId = implicitConfig ? workflowIdOrVersionId : versionIdOrExecutionId;
+    const executionId = implicitConfig ? versionIdOrExecutionId : maybeExecutionId;
+    return routeUrl(base, ['workflows', workflowId, 'versions', versionId, 'runs', executionId]);
+}
+export function agentUrl(sourceOrAgentId, maybeAgentId) {
+    const implicitConfig = maybeAgentId === undefined;
+    const base = implicitConfig
+        ? appBaseUrl(loadConfig())
+        : resolvedBase(sourceOrAgentId);
+    const agentId = implicitConfig ? sourceOrAgentId : maybeAgentId;
+    return routeUrl(base, ['agents', agentId]);
+}
+export function conversationUrl(sourceOrAgentId, agentIdOrConversationId, maybeConversationId) {
+    const implicitConfig = maybeConversationId === undefined;
+    const base = implicitConfig
+        ? appBaseUrl(loadConfig())
+        : resolvedBase(sourceOrAgentId);
+    const agentId = implicitConfig ? sourceOrAgentId : agentIdOrConversationId;
+    const conversationId = implicitConfig ? agentIdOrConversationId : maybeConversationId;
+    return routeUrl(base, ['agents', agentId, 'conversations', conversationId]);
+}
+export function connectionsUrl(source) {
+    const base = source === undefined ? appBaseUrl(loadConfig()) : resolvedBase(source);
+    return routeUrl(base, ['connections']);
+}
+//# sourceMappingURL=appLinks.js.map

package/dist/appLinks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"appLinks.js","sourceRoot":"","sources":["../src/appLinks.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAkB,MAAM,aAAa,CAAA;AAKxD,MAAM,sBAAsB,GAAG,CAAC,KAAa,EAAiB,EAAE;IAC9D,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAA;IAC5B,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAA;IAEzB,IAAI,GAAQ,CAAA;IACZ,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAA;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;IACD,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAA;IAC5D,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,IAAI;QAAE,OAAO,IAAI,CAAA;IACvE,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;AAC3C,CAAC,CAAA;AAED,oFAAoF;AACpF,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,MAAqB,EAAiB,EAAE;IACjE,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QAC1C,OAAO,sBAAsB,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;IACxD,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAChC,OAAO,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,sBAAsB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IACzF,CAAC;IAED,IAAI,MAAW,CAAA;IACf,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;IACD,IACE,MAAM,CAAC,QAAQ,KAAK,QAAQ;QAC5B,MAAM,CAAC,QAAQ;QACf,MAAM,CAAC,QAAQ;QACf,MAAM,CAAC,MAAM;QACb,MAAM,CAAC,IAAI;QACX,CAAC,MAAM,CAAC,QAAQ,KAAK,EAAE,IAAI,MAAM,CAAC,QAAQ,KAAK,GAAG,CAAC;QACnD,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,EACnC,CAAC;QACD,OAAO,IAAI,CAAA;IACb,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;IACrD,IACE,CAAC,QAAQ;QACT,CAAC,WAAW,EAAE,WAAW,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAC7D,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC,EAC/B,CAAC;QACD,OAAO,IAAI,CAAA;IACb,CAAC;IACD,OAAO,WAAW,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAA;AACrE,CAAC,CAAA;AAED,MAAM,YAAY,GAAG,CAAC,MAAqB,EAAiB,EAAE,CAC5D,OAAO,MAAM,KAAK,QAAQ;IACxB,CAAC,CAAC,sBAAsB,CAAC,MAAM,CAAC;IAChC,CAAC,CAAC,MAAM,KAAK,IAAI;QACf,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAA;AAE1B,MAAM,QAAQ,GAAG,CAAC,IAAmB,EAAE,QAAgC,EAAiB,EAAE,CACxF,IAAI,KAAK,IAAI;IACX,CAAC,CAAC,IAAI;IACN,CAAC,CAAC,GAAG,IAAI,IAAI,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,kBAAkB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAA;AAUzF,MAAM,UAAU,kBAAkB,CAChC,kBAAsC,EACtC,qBAAyB,EACzB,cAAmB;IAEnB,MAAM,cAAc,GAAG,cAAc,KAAK,SAAS,CAAA;IACnD,MAAM,IAAI,GAAG,cAAc;QACzB,CAAC,CAAC,UAAU,CAAC,UAAU,EAAE,CAAC;QAC1B,CAAC,CAAC,YAAY,CAAC,kBAAmC,CAAC,CAAA;IACrD,MAAM,UAAU,GAAG,cAAc,CAAC,CAAC,CAAE,kBAAyB,CAAC,CAAC,CAAC,qBAAqB,CAAA;IACtF,MAAM,SAAS,GAAG,cAAc,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,cAAc,CAAA;IACzE,OAAO,QAAQ,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,UAAU,EAAE,UAAU,EAAE,SAAe,CAAC,CAAC,CAAA;AAC/E,CAAC;AASD,MAAM,UAAU,MAAM,CACpB,kBAAsC,EACtC,qBAAyB,EACzB,sBAA0B,EAC1B,gBAAqB;IAErB,MAAM,cAAc,GAAG,gBAAgB,KAAK,SAAS,CAAA;IACrD,MAAM,IAAI,GAAG,cAAc;QACzB,CAAC,CAAC,UAAU,CAAC,UAAU,EAAE,CAAC;QAC1B,CAAC,CAAC,YAAY,CAAC,kBAAmC,CAAC,CAAA;IACrD,MAAM,UAAU,GAAG,cAAc,CAAC,CAAC,CAAE,kBAAyB,CAAC,CAAC,CAAC,qBAAqB,CAAA;IACtF,MAAM,SAAS,GAAG,cAAc,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,sBAAsB,CAAA;IACjF,MAAM,WAAW,GAAG,cAAc,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,gBAAgB,CAAA;IAC9E,OAAO,QAAQ,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE,WAAiB,CAAC,CAAC,CAAA;AACpG,CAAC;AAID,MAAM,UAAU,QAAQ,CAAC,eAAmC,EAAE,YAAiB;IAC7E,MAAM,cAAc,GAAG,YAAY,KAAK,SAAS,CAAA;IACjD,MAAM,IAAI,GAAG,cAAc;QACzB,CAAC,CAAC,UAAU,CAAC,UAAU,EAAE,CAAC;QAC1B,CAAC,CAAC,YAAY,CAAC,eAAgC,CAAC,CAAA;IAClD,MAAM,OAAO,GAAG,cAAc,CAAC,CAAC,CAAE,eAAsB,CAAC,CAAC,CAAC,YAAY,CAAA;IACvE,OAAO,QAAQ,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,OAAa,CAAC,CAAC,CAAA;AAClD,CAAC;AAQD,MAAM,UAAU,eAAe,CAC7B,eAAmC,EACnC,uBAA2B,EAC3B,mBAAwB;IAExB,MAAM,cAAc,GAAG,mBAAmB,KAAK,SAAS,CAAA;IACxD,MAAM,IAAI,GAAG,cAAc;QACzB,CAAC,CAAC,UAAU,CAAC,UAAU,EAAE,CAAC;QAC1B,CAAC,CAAC,YAAY,CAAC,eAAgC,CAAC,CAAA;IAClD,MAAM,OAAO,GAAG,cAAc,CAAC,CAAC,CAAE,eAAsB,CAAC,CAAC,CAAC,uBAAuB,CAAA;IAClF,MAAM,cAAc,GAAG,cAAc,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,mBAAmB,CAAA;IACrF,OAAO,QAAQ,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,eAAe,EAAE,cAAoB,CAAC,CAAC,CAAA;AACnF,CAAC;AAID,MAAM,UAAU,cAAc,CAAC,MAAsB;IACnD,MAAM,IAAI,GAAG,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,CAAA;IACnF,OAAO,QAAQ,CAAC,IAAI,EAAE,CAAC,aAAa,CAAC,CAAC,CAAA;AACxC,CAAC"}