@credibledata/cred-cli 0.0.103 → 0.0.105

package/dist/setup-core/credstore.spec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credstore.spec.js","sourceRoot":"","sources":["../../src/setup-core/credstore.spec.ts"],"names":[],"mappings":";;;;;AAAA,+BAA8B;AAC9B,4CAAoB;AACpB,4CAAoB;AACpB,+BAA4B;AAC5B,2CAAiE;AACjE,iDAAmD;AAEnD,MAAM,IAAI,GAAG,gCAAiB,CAAC,UAAU,CAAC;AAE1C;;;GAGG;AACH,SAAS,GAAG,CAAC,MAA+B;IACzC,MAAM,IAAI,GAAG,CAAC,KAAc,EAAE,EAAE,CAC7B,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAC5D,OAAO,GAAG,IAAI,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC;AAC5E,CAAC;AAED,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;AAE7D,8EAA8E;AAC9E,4EAA4E;AAC5E,6DAA6D;AAC7D,uDAAuD;AACvD,IAAI,cAAsB,CAAC;AAC3B,qDAAqD;AACrD,IAAI,UAAkB,CAAC;AAEvB,QAAQ,CAAC,4BAA4B,EAAE,GAAG,EAAE;IACzC,UAAU,CAAC,GAAG,EAAE;QACb,cAAc,GAAG,GAAG,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;QAC/D,UAAU,GAAG,GAAG,CAAC;YACd,GAAG,EAAE,IAAI,CAAC,QAAQ;YAClB,GAAG,EAAE,SAAS,EAAE;YAChB,KAAK,EAAE,OAAO;SAChB,CAAC,CAAC;IACN,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;QAC5B,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;YAC3D,MAAM,QAAQ,GAAG,IAAA,yBAAa,EAC3B,EAAE,WAAW,EAAE,cAAc,EAAE,cAAc,EAAE,cAAc,EAAE,EAC/D,YAAY,CACd,CAAC;YACF,IAAA,aAAM,EAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;QAC5D,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,sFAAsF,EAAE,GAAG,EAAE;YAC7F,kEAAkE;YAClE,mEAAmE;YACnE,gCAAgC;YAChC,MAAM,QAAQ,GAAG,IAAA,yBAAa,EAC3B,EAAE,WAAW,EAAE,UAAU,EAAE,cAAc,EAAE,cAAc,EAAE,EAC3D,YAAY,CACd,CAAC;YACF,IAAA,aAAM,EAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;YACzD,IAAA,aAAM,EAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACjD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,2DAA2D,EAAE,GAAG,EAAE;YAClE,MAAM,YAAY,GAAG,GAAG,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;YACnE,MAAM,QAAQ,GAAG,IAAA,yBAAa,EAC3B;gBACG,WAAW,EAAE,cAAc;gBAC3B,cAAc,EAAE,cAAc;gBAC9B,OAAO,EAAE,YAAY;aACvB,EACD,YAAY,CACd,CAAC;YACF,IAAA,aAAM,EAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;YACzD,IAAA,aAAM,EAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QACnD,CAAC,CAAC,CAAC;QAEH,0EAA0E;QAC1E,0EAA0E;QAC1E,6DAA6D;QAC7D,EAAE,CAAC,wEAAwE,EAAE,GAAG,EAAE;YAC/E,MAAM,YAAY,GAAG,GAAG,CAAC;gBACtB,GAAG,EAAE,IAAI,CAAC,QAAQ;gBAClB,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE;aACvB,CAAC,CAAC;YACH,MAAM,QAAQ,GAAG,IAAA,yBAAa,EAC3B;gBACG,WAAW,EAAE,UAAU;gBACvB,cAAc,EAAE,cAAc;gBAC9B,OAAO,EAAE,YAAY;aACvB,EACD,YAAY,CACd,CAAC;YACF,IAAA,aAAM,EAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;YACzD,IAAA,aAAM,EAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACjD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,gEAAgE,EAAE,GAAG,EAAE;YACvE,sEAAsE;YACtE,sEAAsE;YACtE,uEAAuE;YACvE,mEAAmE;YACnE,iEAAiE;YACjE,sEAAsE;YACtE,MAAM,MAAM,GAAG,GAAG,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;YACzC,MAAM,QAAQ,GAAG,IAAA,yBAAa,EAAC,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE,YAAY,CAAC,CAAC;YACtE,IAAA,aAAM,EAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YACpD,IAAA,aAAM,EAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAChD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;YACxD,MAAM,QAAQ,GAAG,IAAA,yBAAa,EAC3B,EAAE,WAAW,EAAE,WAAW,EAAE,EAC5B,YAAY,CACd,CAAC;YACF,IAAA,aAAM,EAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACvD,CAAC,CAAC,CAAC;QAEH,wEAAwE;QACxE,mEAAmE;QACnE,sEAAsE;QACtE,qEAAqE;QACrE,EAAE,CAAC,uEAAuE,EAAE,GAAG,EAAE;YAC9E,MAAM,YAAY,GAAG,GAAG,CAAC;gBACtB,GAAG,EAAE,gCAAiB,CAAC,UAAU,CAAC,QAAQ;gBAC1C,GAAG,EAAE,SAAS,EAAE;aAClB,CAAC,CAAC;YACH,MAAM,QAAQ,GAAG,IAAA,yBAAa,EAC3B,EAAE,WAAW,EAAE,YAAY,EAAE,cAAc,EAAE,EAAE,EAAE,EACjD,YAAY,CACd,CAAC;YACF,IAAA,aAAM,EAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YACpD,IAAA,aAAM,EAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QACnD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,iEAAiE,EAAE,GAAG,EAAE;YACxE,MAAM,QAAQ,GAAG,GAAG,CAAC;gBAClB,GAAG,EAAE,gCAAiB,CAAC,GAAG,CAAC,QAAQ;gBACnC,GAAG,EAAE,SAAS,EAAE;aAClB,CAAC,CAAC;YACH,sEAAsE;YACtE,4CAA4C;YAC5C,IAAA,aAAM,EACH,IAAA,yBAAa,EAAC,EAAE,cAAc,EAAE,QAAQ,EAAE,EAAE,YAAY,CAAC;iBACrD,cAAc,CACpB,CAAC,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YACtB,IAAA,aAAM,EACH,IAAA,yBAAa,EAAC,EAAE,cAAc,EAAE,QAAQ,EAAE,EAAE,KAAK,CAAC,CAAC,cAAc,CACnE,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACxB,CAAC,CAAC,CAAC;IACN,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,yCAAyC,EAAE,GAAG,EAAE;QACtD,IAAI,UAAkB,CAAC;QAEvB,UAAU,CAAC,GAAG,EAAE;YACb,UAAU,GAAG,IAAA,WAAI,EACd,YAAE,CAAC,WAAW,CAAC,IAAA,WAAI,EAAC,YAAE,CAAC,MAAM,EAAE,EAAE,YAAY,CAAC,CAAC,EAC/C,OAAO,CACT,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,SAAS,CAAC,GAAG,EAAE;YACZ,YAAE,CAAC,MAAM,CAAC,UAAU,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1C,CAAC,CAAC,CAAC;QAEH,SAAS,KAAK,CAAC,SAAkC;YAC9C,YAAE,CAAC,aAAa,CACb,UAAU,EACV,IAAI,CAAC,SAAS,CAAC;gBACZ,oBAAoB,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE;gBAC/C,iBAAiB,EAAE,YAAY;aACjC,CAAC,CACJ,CAAC;QACL,CAAC;QAED,EAAE,CAAC,8EAA8E,EAAE,GAAG,EAAE;YACrF,KAAK,CAAC,EAAE,WAAW,EAAE,UAAU,EAAE,cAAc,EAAE,cAAc,EAAE,CAAC,CAAC;YACnE,MAAM,MAAM,GAAG,IAAI,+BAAmB,CAAC,UAAU,CAAC,CAAC;YACnD,IAAA,aAAM,EAAC,MAAM,CAAC,uBAAuB,EAAE,CAAC,CAAC,EAAE,CAAC,KAAK,CAC9C,UAAU,cAAc,EAAE,CAC5B,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,kEAAkE,EAAE,GAAG,EAAE;YACzE,KAAK,CAAC,EAAE,WAAW,EAAE,UAAU,EAAE,qBAAqB,EAAE,IAAI,EAAE,CAAC,CAAC;YAChE,MAAM,MAAM,GAAG,IAAI,+BAAmB,CAAC,UAAU,CAAC,CAAC;YACnD,IAAA,aAAM,EAAC,MAAM,CAAC,uBAAuB,EAAE,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;YACrE,IAAA,aAAM,EAAC,MAAM,CAAC,YAAY,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACtD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;YACjE,MAAM,MAAM,GAAG,IAAI,+BAAmB,CAAC,UAAU,CAAC,CAAC;YACnD,MAAM,CAAC,YAAY,CAAC;gBACjB,WAAW,EAAE,cAAc;gBAC3B,OAAO,EAAE,UAAU;gBACnB,YAAY,EAAE,YAAY;aAC5B,CAAC,CAAC;YAEH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAE,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;iBAC3D,oBAAoB,CAAC,UAAU,CAAC;YACpC,sEAAsE;YACtE,wDAAwD;YACxD,IAAA,aAAM,EAAC,MAAM,CAAC,cAAc,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;YACvD,IAAA,aAAM,EAAC,MAAM,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;YACpD,IAAA,aAAM,EAAC,MAAM,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YAC5C,IAAA,aAAM,EAAC,MAAM,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;YACnD,IAAA,aAAM,EAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACxD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,kEAAkE,EAAE,GAAG,EAAE;YACzE,MAAM,MAAM,GAAG,IAAI,+BAAmB,CAAC,UAAU,CAAC,CAAC;YACnD,MAAM,CAAC,YAAY,CAAC;gBACjB,WAAW,EAAE,cAAc;gBAC3B,YAAY,EAAE,UAAU;aAC1B,CAAC,CAAC;YACH,MAAM,CAAC,YAAY,CAAC,EAAE,WAAW,EAAE,cAAc,EAAE,CAAC,CAAC;YACrD,IAAA,aAAM,EAAC,MAAM,CAAC,eAAe,EAAE,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACzD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,qFAAqF,EAAE,GAAG,EAAE;YAC5F,KAAK,CAAC;gBACH,WAAW,EAAE,cAAc;gBAC3B,cAAc,EAAE,cAAc;gBAC9B,OAAO,EAAE,UAAU;gBACnB,YAAY,EAAE,MAAM;gBACpB,qBAAqB,EAAE,KAAK;gBAC5B,YAAY,EAAE,MAAM;gBACpB,OAAO,EAAE,OAAO;aAClB,CAAC,CAAC;YACH,kEAAkE;YAClE,sDAAsD;YACtD,IAAI,+BAAmB,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE,CAAC;YAElD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAE,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;iBAC3D,oBAAoB,CAAC,UAAU,CAAC;YACpC,IAAA,aAAM,EAAC,MAAM,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,YAAY,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;QACrE,CAAC,CAAC,CAAC;QAEH,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;YACjC,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;gBACjE,KAAK,CAAC,EAAE,cAAc,EAAE,cAAc,EAAE,CAAC,CAAC;gBAC1C,IAAA,aAAM,EACH,IAAI,+BAAmB,CAAC,UAAU,CAAC,CAAC,kBAAkB,EAAE,CAC1D,CAAC,EAAE,CAAC,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;gBAE1B,KAAK,CAAC;oBACH,cAAc,EAAE,GAAG,CAAC;wBACjB,GAAG,EAAE,IAAI,CAAC,QAAQ;wBAClB,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE;qBACzC,CAAC;iBACJ,CAAC,CAAC;gBACH,IAAA,aAAM,EACH,IAAI,+BAAmB,CAAC,UAAU,CAAC,CAAC,kBAAkB,EAAE,CAC1D,CAAC,EAAE,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;YACvB,CAAC,CAAC,CAAC;YAEH,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;gBACvD,KAAK,CAAC,EAAE,WAAW,EAAE,UAAU,EAAE,qBAAqB,EAAE,IAAI,EAAE,CAAC,CAAC;gBAChE,IAAA,aAAM,EACH,IAAI,+BAAmB,CAAC,UAAU,CAAC,CAAC,kBAAkB,EAAE,CAC1D,CAAC,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YACzB,CAAC,CAAC,CAAC;QACN,CAAC,CAAC,CAAC;QAEH,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE;YAC3B,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;gBACjE,KAAK,CAAC,EAAE,CAAC,CAAC;gBACV,IAAA,aAAM,EAAC,IAAI,+BAAmB,CAAC,UAAU,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC;oBAC/D,KAAK,EAAE,KAAK;oBACZ,MAAM,EAAE,+BAA+B;iBACzC,CAAC,CAAC;gBAEH,KAAK,CAAC;oBACH,cAAc,EAAE,GAAG,CAAC;wBACjB,GAAG,EAAE,IAAI,CAAC,QAAQ;wBAClB,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE;qBACzC,CAAC;iBACJ,CAAC,CAAC;gBACH,IAAA,aAAM,EAAC,IAAI,+BAAmB,CAAC,UAAU,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC;oBAC/D,KAAK,EAAE,KAAK;oBACZ,MAAM,EAAE,oCAAoC;iBAC9C,CAAC,CAAC;gBAEH,KAAK,CAAC,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC,CAAC;gBACpC,IAAA,aAAM,EAAC,IAAI,+BAAmB,CAAC,UAAU,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC;oBAC/D,KAAK,EAAE,KAAK;oBACZ,MAAM,EAAE,2CAA2C;iBACrD,CAAC,CAAC;YACN,CAAC,CAAC,CAAC;YAEH,EAAE,CAAC,mEAAmE,EAAE,GAAG,EAAE;gBAC1E,KAAK,MAAM,GAAG,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;oBAC3C,KAAK,CAAC,EAAE,WAAW,EAAE,GAAY,EAAE,CAAC,CAAC;oBACrC,IAAA,aAAM,EACH,IAAI,+BAAmB,CAAC,UAAU,CAAC,CAAC,YAAY,EAAE,CACpD,CAAC,EAAE,CAAC,GAAG,CAAC;wBACN,KAAK,EAAE,KAAK;wBACZ,MAAM,EAAE,2CAA2C;qBACrD,CAAC,CAAC;gBACN,CAAC;YACJ,CAAC,CAAC,CAAC;QACN,CAAC,CAAC,CAAC;IACN,CAAC,CAAC,CAAC;AACN,CAAC,CAAC,CAAC"}

package/dist/setup-core/environments.js

@@ -0,0 +1,267 @@
+"use strict";
+/**
+ * Deployment-environment tables: which control plane, which Auth0 tenant, and
+ * which cluster each deployment env lives on.
+ *
+ * These live in setup-core rather than in the CLI's `constants.ts` because both
+ * front doors need them: the credential store keys `~/.cred` by deployment env,
+ * and token refresh needs the Auth0 domain and client id for the env it is
+ * refreshing. `constants.ts` re-exports them, so existing CLI imports are
+ * unchanged.
+ *
+ * DELIBERATELY NO SECRETS HERE. The `e2e-test` machine-to-machine client secret
+ * stays in the CLI's `constants.ts`, where its single consumer (`loginM2M`)
+ * lives. setup-core is destined to be a published library; a credential in it
+ * would be shipped to every consumer of that library.
+ *
+ * Note the naming collision this file inherits and does not fix: `Environment`
+ * here is the DEPLOYMENT env (production/staging/dev/localhost), an internal
+ * axis. The user-facing "environment" is the Credible environment inside an
+ * organization, which the store calls `project` for legacy reasons.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DEFAULT_ENVIRONMENT_BY_CLUSTER = exports.CLUSTER_BY_ENVIRONMENT = exports.auth0ConfigsByEnv = exports.DEFAULT_DEPLOYMENT = exports.ALL_ENVIRONMENTS = exports.codeAssistByEnv = exports.appHostsByEnv = exports.controlPlanesByEnv = void 0;
+exports.packageVersionUrl = packageVersionUrl;
+exports.isEnvironment = isEnvironment;
+exports.getCliOrgConfig = getCliOrgConfig;
+exports.getAuth0OrganizationIdForCliLogin = getAuth0OrganizationIdForCliLogin;
+exports.controlPlanesByEnv = {
+    production: "https://admin.credibledata.com/api/v0",
+    dev: "https://dev-admin.credibledata.com/api/v0",
+    staging: "https://staging-admin.credibledata.com/api/v0",
+    localhost: "http://admin.ms2.localhost/api/v0",
+    "e2e-test": "http://admin.ms2.localhost/api/v0",
+    videoamp: "https://admin.videoamp-aws-us-east-1.credibledata.com/api/v0",
+    // The AWS development cell (credible/dev on EKS). Its public hostnames compose
+    // onto the shared apex as aws-dev-<service>.credibledata.com, unlike
+    // videoamp's, which live under its own zone.
+    "aws-dev": "https://aws-dev-admin.credibledata.com/api/v0",
+    // The dev env's second AWS account (aws/credible/dev-2, ca-central-1): env dev,
+    // account slot dev-2, so its hostnames carry the slot -- aws-dev-2-<service>.
+    "aws-dev-2": "https://aws-dev-2-admin.credibledata.com/api/v0",
+    // Affinity's dedicated production cell (aws/affinity/prod, us-west-2), on the
+    // flat convention: aws-affinity-<service>.credibledata.com.
+    "aws-affinity": "https://aws-affinity-admin.credibledata.com/api/v0",
+};
+/**
+ * The app per deployment, without the organization. Organizations are a
+ * subdomain (`<org>.<host>`), as `getOrganizationUrl` builds it in
+ * `app/src/components/Utils.ts`; see {@link packageVersionUrl}.
+ */
+exports.appHostsByEnv = {
+    production: "https://app.credibledata.com",
+    staging: "https://staging-app.credibledata.com",
+    dev: "https://dev-app.credibledata.com",
+    videoamp: "https://app.videoamp-aws-us-east-1.credibledata.com",
+    localhost: "http://app.ms2.localhost",
+    "e2e-test": "http://app.ms2.localhost",
+    "aws-dev": "https://aws-dev-app.credibledata.com",
+    "aws-dev-2": "https://aws-dev-2-app.credibledata.com",
+    "aws-affinity": "https://aws-affinity-app.credibledata.com",
+};
+/**
+ * Where a published version opens in the app: the `/:project/:package/:version`
+ * route in `app/src/AdminApp.tsx`, on the organization's own subdomain.
+ */
+function packageVersionUrl(deployment, organization, environment, packageName, versionId) {
+    const host = new URL(exports.appHostsByEnv[deployment]);
+    const segments = [environment, packageName, versionId].map(encodeURIComponent);
+    return `${host.protocol}//${organization}.${host.host}/${segments.join("/")}`;
+}
+/**
+ * The code-assist API per deployment, for the skills installer. Keyed off
+ * {@link Environment} like the other host tables, so adding a deployment
+ * without a host here fails the build rather than falling through to
+ * production. Values are the ones the VS Code extension ships in
+ * `src/config/public/<env>.json`.
+ */
+exports.codeAssistByEnv = {
+    production: "https://coding.credibledata.com",
+    staging: "https://staging-coding.credibledata.com",
+    dev: "https://dev-coding.credibledata.com",
+    videoamp: "https://coding.videoamp-aws-us-east-1.credibledata.com",
+    localhost: "http://localhost:8125",
+    "e2e-test": "http://localhost:8125",
+    // Inferred from the cell's aws-dev-<service> convention; no code-assist host
+    // for the cell is recorded in `infrastructure/` yet. A miss surfaces as
+    // "could not fetch the modeling skills" and setup continues.
+    "aws-dev": "https://aws-dev-coding.credibledata.com",
+    "aws-dev-2": "https://aws-dev-2-coding.credibledata.com",
+    "aws-affinity": "https://aws-affinity-coding.credibledata.com",
+};
+/** Environments that must have an object in `~/.cred` `configPerEnvironment` (avoids undefined on write). */
+exports.ALL_ENVIRONMENTS = Object.keys(exports.controlPlanesByEnv);
+/**
+ * The deployment env everything falls back to.
+ *
+ * Named because two places have to agree on it and neither is obviously the
+ * authority: it is what a fresh `~/.cred` records as `activeEnvironment`, and it
+ * is what a folder pin with no `deployment` means (earlier builds left it out
+ * for this value; see `resolveDeployment`).
+ */
+exports.DEFAULT_DEPLOYMENT = "production";
+/** Is `value` one of the deployment envs this build knows about? */
+function isEnvironment(value) {
+    return (typeof value === "string" &&
+        exports.ALL_ENVIRONMENTS.includes(value));
+}
+exports.auth0ConfigsByEnv = {
+    production: {
+        domain: "https://auth.credibledata.com",
+        clientId: "ge8JL5TJNwqy7bygAaJkD92KdluqEZgO",
+        audience: "https://ms2data.us.auth0.com/api/v2/",
+    },
+    dev: {
+        domain: "https://dev-auth.credibledata.com",
+        clientId: "rr6mzJNj9b104MjCc9xWKPPehq1MJx0L",
+        audience: "https://dev-ohaafogw5p8uyx1m.us.auth0.com/api/v2/",
+    },
+    staging: {
+        domain: "https://dev-auth.credibledata.com",
+        clientId: "rr6mzJNj9b104MjCc9xWKPPehq1MJx0L",
+        audience: "https://dev-ohaafogw5p8uyx1m.us.auth0.com/api/v2/",
+    },
+    localhost: {
+        domain: "https://dev-auth.credibledata.com",
+        clientId: "rr6mzJNj9b104MjCc9xWKPPehq1MJx0L",
+        audience: "https://dev-ohaafogw5p8uyx1m.us.auth0.com/api/v2/",
+    },
+    "e2e-test": {
+        domain: "https://dev-auth.credibledata.com",
+        clientId: "atd8n8dEiGUiNRM7Geuvg41fi5s8ZKqY",
+        audience: "https://dev-ohaafogw5p8uyx1m.us.auth0.com/api/v2/",
+    },
+    videoamp: {
+        domain: "https://auth.credibledata.com",
+        clientId: "ge8JL5TJNwqy7bygAaJkD92KdluqEZgO",
+        audience: "https://ms2data.us.auth0.com/api/v2/",
+    },
+    // The DEV Auth0 tenant, not production: this cell takes its per-tier secrets
+    // from gcp/credible/dev, so it authenticates against the same tenant that
+    // dev, staging and localhost do. videoamp is the exception, being a
+    // production cell.
+    "aws-dev": {
+        domain: "https://dev-auth.credibledata.com",
+        clientId: "rr6mzJNj9b104MjCc9xWKPPehq1MJx0L",
+        audience: "https://dev-ohaafogw5p8uyx1m.us.auth0.com/api/v2/",
+    },
+    // Same DEV tenant as aws-dev: aws/credible/dev-2 is env dev, and copies its
+    // per-tier secrets from gcp/credible/dev too.
+    "aws-dev-2": {
+        domain: "https://dev-auth.credibledata.com",
+        clientId: "rr6mzJNj9b104MjCc9xWKPPehq1MJx0L",
+        audience: "https://dev-ohaafogw5p8uyx1m.us.auth0.com/api/v2/",
+    },
+    // The PRODUCTION tenant, as videoamp: aws/affinity/prod is env prod and copies
+    // its per-tier secrets from gcp/credible/prod.
+    "aws-affinity": {
+        domain: "https://auth.credibledata.com",
+        clientId: "ge8JL5TJNwqy7bygAaJkD92KdluqEZgO",
+        audience: "https://ms2data.us.auth0.com/api/v2/",
+    },
+};
+/** Which cluster each {@link Environment} lives on. */
+exports.CLUSTER_BY_ENVIRONMENT = {
+    production: "gcp",
+    staging: "gcp",
+    dev: "gcp",
+    localhost: "gcp",
+    "e2e-test": "gcp",
+    videoamp: "aws",
+    "aws-dev": "aws",
+    "aws-dev-2": "aws",
+    "aws-affinity": "aws",
+};
+/**
+ * Default {@link Environment} to switch to when logging into a cluster and the
+ * current active env is on a different cluster. Picked per cluster so that
+ * `cred login <org> -c aws` flips to videoamp and `-c gcp` flips to production.
+ */
+exports.DEFAULT_ENVIRONMENT_BY_CLUSTER = {
+    gcp: "production",
+    aws: "videoamp",
+};
+const CLI_ORG_CONFIGS = [
+    {
+        cliOrgName: "videoamp",
+        supportedClusters: ["gcp", "aws"],
+        defaultCluster: "gcp",
+        auth0OrganizationIds: {
+            aws: "org_nMRKafeSuxOiuJeG",
+        },
+    },
+    {
+        // Exists on both clouds -- gcp dev and the aws development cell both have
+        // a `demo` org -- so both are listed. Registered at all only because an
+        // UNREGISTERED org is assumed gcp-only (`supportedClusters ?? ["gcp"]`),
+        // which is why `cred login demo` on an aws cell reports the org as
+        // unavailable rather than anything about the cell.
+        //
+        // defaultCluster stays gcp so a bare `cred login demo` behaves exactly as
+        // it did before this entry existed; reach the aws cell with `-c aws`.
+        //
+        // No auth0OrganizationIds: their presence selects the PKCE + loopback
+        // flow, whose redirect (127.0.0.1:18240/callback) is registered on the
+        // production Auth0 tenant only. Omitting them selects the Device
+        // Authorization Flow, which needs no callback URL and therefore works on
+        // a cell authenticating against the dev tenant.
+        cliOrgName: "demo",
+        supportedClusters: ["gcp", "aws"],
+        defaultCluster: "gcp",
+    },
+    {
+        // The tenant the PROBES measure, on every cell in both clouds --
+        // probe_organization in stacks/{aws,gcp}/services. Distinct from `demo`
+        // above, which is a cell's own first organization; a cell has both, and
+        // they were seeded by different bootstrap steps.
+        //
+        // Needed for the same reason the `demo` entry is, and missed for a reason
+        // worth naming: the gcp-only fallback (`supportedClusters ?? ["gcp"]`)
+        // makes an unregistered org work perfectly on gcp, so nothing surfaced
+        // until an operator tried to reach the fixture on an AWS cell and got
+        // "Organization 'k6-experiments' is not available on the aws cluster" --
+        // a message about the org, for a fact about this list. Asserted against
+        // the recipe by test_probe_organization_is_reachable_on_its_cells_clusters.
+        //
+        // defaultCluster gcp and no auth0OrganizationIds, both for the reasons
+        // given on `demo`.
+        cliOrgName: "k6-experiments",
+        supportedClusters: ["gcp", "aws"],
+        defaultCluster: "gcp",
+    },
+    {
+        // The platform-owned org every tenant's request logs are served from
+        // (docs/customer-logs-access-design.md §4), provisioned on every
+        // deployment -- on an AWS cell by bootstrap_cell.py's credible-logs step,
+        // which signs in to it with `-c aws`. Unregistered, that sign-in is
+        // refused by the gcp-only fallback, exactly as `k6-experiments` was.
+        //
+        // defaultCluster gcp and no auth0OrganizationIds, both for the reasons
+        // given on `demo`.
+        cliOrgName: "credible-logs",
+        supportedClusters: ["gcp", "aws"],
+        defaultCluster: "gcp",
+    },
+];
+const CLI_ORG_CONFIGS_BY_NAME = Object.fromEntries(CLI_ORG_CONFIGS.map((c) => [c.cliOrgName.toLowerCase(), c]));
+/** Returns the registry entry for an org, or `undefined` if it uses defaults (gcp + device flow). */
+function getCliOrgConfig(organizationName) {
+    return CLI_ORG_CONFIGS_BY_NAME[organizationName.toLowerCase()];
+}
+/**
+ * Auth0 Organization ID for the given CLI org on the cluster it is logging into.
+ * Returning a value selects the Auth Code + PKCE branch in `login()`; `undefined`
+ * falls back to Device Authorization Flow.
+ *
+ * `cluster` defaults to the org's `defaultCluster` (or `gcp` for unregistered orgs)
+ * so callers that don't yet know the active cluster keep working.
+ */
+function getAuth0OrganizationIdForCliLogin(organizationName, cluster) {
+    var _a;
+    const cfg = getCliOrgConfig(organizationName);
+    if (!cfg)
+        return undefined;
+    const targetCluster = cluster !== null && cluster !== void 0 ? cluster : cfg.defaultCluster;
+    return (_a = cfg.auth0OrganizationIds) === null || _a === void 0 ? void 0 : _a[targetCluster];
+}
+//# sourceMappingURL=environments.js.map

package/dist/setup-core/environments.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"environments.js","sourceRoot":"","sources":["../../src/setup-core/environments.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;GAmBG;;;AAqDH,8CAYC;AAwCD,sCAKC;AA+LD,0CAIC;AAUD,8EAQC;AAtTY,QAAA,kBAAkB,GAAgC;IAC5D,UAAU,EAAE,uCAAuC;IACnD,GAAG,EAAE,2CAA2C;IAChD,OAAO,EAAE,+CAA+C;IACxD,SAAS,EAAE,mCAAmC;IAC9C,UAAU,EAAE,mCAAmC;IAC/C,QAAQ,EAAE,8DAA8D;IACxE,+EAA+E;IAC/E,qEAAqE;IACrE,6CAA6C;IAC7C,SAAS,EAAE,+CAA+C;IAC1D,gFAAgF;IAChF,8EAA8E;IAC9E,WAAW,EAAE,iDAAiD;IAC9D,8EAA8E;IAC9E,4DAA4D;IAC5D,cAAc,EAAE,oDAAoD;CACtE,CAAC;AAEF;;;;GAIG;AACU,QAAA,aAAa,GAAgC;IACvD,UAAU,EAAE,8BAA8B;IAC1C,OAAO,EAAE,sCAAsC;IAC/C,GAAG,EAAE,kCAAkC;IACvC,QAAQ,EAAE,qDAAqD;IAC/D,SAAS,EAAE,0BAA0B;IACrC,UAAU,EAAE,0BAA0B;IACtC,SAAS,EAAE,sCAAsC;IACjD,WAAW,EAAE,wCAAwC;IACrD,cAAc,EAAE,2CAA2C;CAC7D,CAAC;AAEF;;;GAGG;AACH,SAAgB,iBAAiB,CAC9B,UAAuB,EACvB,YAAoB,EACpB,WAAmB,EACnB,WAAmB,EACnB,SAAiB;IAEjB,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,qBAAa,CAAC,UAAU,CAAC,CAAC,CAAC;IAChD,MAAM,QAAQ,GAAG,CAAC,WAAW,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC,GAAG,CACvD,kBAAkB,CACpB,CAAC;IACF,OAAO,GAAG,IAAI,CAAC,QAAQ,KAAK,YAAY,IAAI,IAAI,CAAC,IAAI,IAAI,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;AACjF,CAAC;AAED;;;;;;GAMG;AACU,QAAA,eAAe,GAAgC;IACzD,UAAU,EAAE,iCAAiC;IAC7C,OAAO,EAAE,yCAAyC;IAClD,GAAG,EAAE,qCAAqC;IAC1C,QAAQ,EAAE,wDAAwD;IAClE,SAAS,EAAE,uBAAuB;IAClC,UAAU,EAAE,uBAAuB;IACnC,6EAA6E;IAC7E,wEAAwE;IACxE,6DAA6D;IAC7D,SAAS,EAAE,yCAAyC;IACpD,WAAW,EAAE,2CAA2C;IACxD,cAAc,EAAE,8CAA8C;CAChE,CAAC;AAEF,6GAA6G;AAChG,QAAA,gBAAgB,GAAG,MAAM,CAAC,IAAI,CACxC,0BAAkB,CACH,CAAC;AAEnB;;;;;;;GAOG;AACU,QAAA,kBAAkB,GAAgB,YAAY,CAAC;AAE5D,oEAAoE;AACpE,SAAgB,aAAa,CAAC,KAAc;IACzC,OAAO,CACJ,OAAO,KAAK,KAAK,QAAQ;QACxB,wBAAsC,CAAC,QAAQ,CAAC,KAAK,CAAC,CACzD,CAAC;AACL,CAAC;AAaY,QAAA,iBAAiB,GAAwC;IACnE,UAAU,EAAE;QACT,MAAM,EAAE,+BAA+B;QACvC,QAAQ,EAAE,kCAAkC;QAC5C,QAAQ,EAAE,sCAAsC;KAClD;IACD,GAAG,EAAE;QACF,MAAM,EAAE,mCAAmC;QAC3C,QAAQ,EAAE,kCAAkC;QAC5C,QAAQ,EAAE,mDAAmD;KAC/D;IACD,OAAO,EAAE;QACN,MAAM,EAAE,mCAAmC;QAC3C,QAAQ,EAAE,kCAAkC;QAC5C,QAAQ,EAAE,mDAAmD;KAC/D;IACD,SAAS,EAAE;QACR,MAAM,EAAE,mCAAmC;QAC3C,QAAQ,EAAE,kCAAkC;QAC5C,QAAQ,EAAE,mDAAmD;KAC/D;IACD,UAAU,EAAE;QACT,MAAM,EAAE,mCAAmC;QAC3C,QAAQ,EAAE,kCAAkC;QAC5C,QAAQ,EAAE,mDAAmD;KAC/D;IACD,QAAQ,EAAE;QACP,MAAM,EAAE,+BAA+B;QACvC,QAAQ,EAAE,kCAAkC;QAC5C,QAAQ,EAAE,sCAAsC;KAClD;IACD,6EAA6E;IAC7E,0EAA0E;IAC1E,oEAAoE;IACpE,mBAAmB;IACnB,SAAS,EAAE;QACR,MAAM,EAAE,mCAAmC;QAC3C,QAAQ,EAAE,kCAAkC;QAC5C,QAAQ,EAAE,mDAAmD;KAC/D;IACD,4EAA4E;IAC5E,8CAA8C;IAC9C,WAAW,EAAE;QACV,MAAM,EAAE,mCAAmC;QAC3C,QAAQ,EAAE,kCAAkC;QAC5C,QAAQ,EAAE,mDAAmD;KAC/D;IACD,+EAA+E;IAC/E,+CAA+C;IAC/C,cAAc,EAAE;QACb,MAAM,EAAE,+BAA+B;QACvC,QAAQ,EAAE,kCAAkC;QAC5C,QAAQ,EAAE,sCAAsC;KAClD;CACH,CAAC;AAKF,uDAAuD;AAC1C,QAAA,sBAAsB,GAAiC;IACjE,UAAU,EAAE,KAAK;IACjB,OAAO,EAAE,KAAK;IACd,GAAG,EAAE,KAAK;IACV,SAAS,EAAE,KAAK;IAChB,UAAU,EAAE,KAAK;IACjB,QAAQ,EAAE,KAAK;IACf,SAAS,EAAE,KAAK;IAChB,WAAW,EAAE,KAAK;IAClB,cAAc,EAAE,KAAK;CACvB,CAAC;AAEF;;;;GAIG;AACU,QAAA,8BAA8B,GAAiC;IACzE,GAAG,EAAE,YAAY;IACjB,GAAG,EAAE,UAAU;CACjB,CAAC;AA6BF,MAAM,eAAe,GAAmB;IACrC;QACG,UAAU,EAAE,UAAU;QACtB,iBAAiB,EAAE,CAAC,KAAK,EAAE,KAAK,CAAC;QACjC,cAAc,EAAE,KAAK;QACrB,oBAAoB,EAAE;YACnB,GAAG,EAAE,sBAAsB;SAC7B;KACH;IACD;QACG,0EAA0E;QAC1E,wEAAwE;QACxE,yEAAyE;QACzE,mEAAmE;QACnE,mDAAmD;QACnD,EAAE;QACF,0EAA0E;QAC1E,sEAAsE;QACtE,EAAE;QACF,sEAAsE;QACtE,uEAAuE;QACvE,iEAAiE;QACjE,yEAAyE;QACzE,gDAAgD;QAChD,UAAU,EAAE,MAAM;QAClB,iBAAiB,EAAE,CAAC,KAAK,EAAE,KAAK,CAAC;QACjC,cAAc,EAAE,KAAK;KACvB;IACD;QACG,iEAAiE;QACjE,wEAAwE;QACxE,wEAAwE;QACxE,iDAAiD;QACjD,EAAE;QACF,0EAA0E;QAC1E,uEAAuE;QACvE,uEAAuE;QACvE,sEAAsE;QACtE,yEAAyE;QACzE,wEAAwE;QACxE,4EAA4E;QAC5E,EAAE;QACF,uEAAuE;QACvE,mBAAmB;QACnB,UAAU,EAAE,gBAAgB;QAC5B,iBAAiB,EAAE,CAAC,KAAK,EAAE,KAAK,CAAC;QACjC,cAAc,EAAE,KAAK;KACvB;IACD;QACG,qEAAqE;QACrE,iEAAiE;QACjE,0EAA0E;QAC1E,oEAAoE;QACpE,qEAAqE;QACrE,EAAE;QACF,uEAAuE;QACvE,mBAAmB;QACnB,UAAU,EAAE,eAAe;QAC3B,iBAAiB,EAAE,CAAC,KAAK,EAAE,KAAK,CAAC;QACjC,cAAc,EAAE,KAAK;KACvB;CACH,CAAC;AAEF,MAAM,uBAAuB,GAC1B,MAAM,CAAC,WAAW,CACf,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,CAC7D,CAAC;AAEL,qGAAqG;AACrG,SAAgB,eAAe,CAC5B,gBAAwB;IAExB,OAAO,uBAAuB,CAAC,gBAAgB,CAAC,WAAW,EAAE,CAAC,CAAC;AAClE,CAAC;AAED;;;;;;;GAOG;AACH,SAAgB,iCAAiC,CAC9C,gBAAwB,EACxB,OAAiB;;IAEjB,MAAM,GAAG,GAAG,eAAe,CAAC,gBAAgB,CAAC,CAAC;IAC9C,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC3B,MAAM,aAAa,GAAG,OAAO,aAAP,OAAO,cAAP,OAAO,GAAI,GAAG,CAAC,cAAc,CAAC;IACpD,OAAO,MAAA,GAAG,CAAC,oBAAoB,0CAAG,aAAa,CAAC,CAAC;AACpD,CAAC"}

package/dist/setup-core/flow.e2e.js

@@ -0,0 +1,165 @@
+"use strict";
+/**
+ * Local end-to-end drive of the setup flow, minus the authenticated call.
+ *
+ * `flow.spec.ts` proves the files land correctly; the oracle proves the config
+ * loads. Neither runs the two together, and "wire a directory, then boot a real
+ * publisher against it" is exactly where a wrong `location` or `--server_root`
+ * shows up. This does that.
+ *
+ * The only thing faked is `listConnections` — the one call needing a real
+ * organization and a real token. Everything else is the shipping code path:
+ * the real `wireDirectory`, the real supervisor, a real `npx` spawn, real
+ * readiness parsing.
+ *
+ * Run with `npm run test:e2e-local`. Not part of `npm test` (it spawns a server).
+ */
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const fs_1 = __importDefault(require("fs"));
+const os_1 = __importDefault(require("os"));
+const path_1 = __importDefault(require("path"));
+const credstore_1 = require("./credstore");
+const flow_1 = require("./flow");
+const publisherversion_1 = require("./publisherversion");
+function say(message) {
+    process.stdout.write(`${message}\n`);
+}
+/** A host that answers with defaults and never blocks on input. */
+const host = {
+    select(_message, choices) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const first = choices.find((choice) => !choice.disabled);
+            if (!first)
+                throw new Error("nothing selectable");
+            return first.value;
+        });
+    },
+    selectMany(_message, choices) {
+        return __awaiter(this, void 0, void 0, function* () {
+            return choices.filter((choice) => !choice.disabled).map((c) => c.value);
+        });
+    },
+    confirm() {
+        return __awaiter(this, void 0, void 0, function* () {
+            return true;
+        });
+    },
+    log(level, message) {
+        // Prefix so the publisher's own output is distinguishable from ours.
+        say(`    [${level}] ${message}`);
+    },
+    write(chunk) {
+        // Verbatim, as a real host does — this is the publisher's own output.
+        process.stdout.write(chunk);
+    },
+    openUrl(url) {
+        return __awaiter(this, void 0, void 0, function* () {
+            say(`    [open] would open ${url}`);
+        });
+    },
+};
+function fakeJwt() {
+    const part = (value) => Buffer.from(JSON.stringify(value)).toString("base64url");
+    return `${part({ alg: "HS256" })}.${part({
+        aud: "https://ms2data.us.auth0.com/api/v2/",
+        exp: Math.floor(Date.now() / 1000) + 3600,
+    })}.sig`;
+}
+function main() {
+    return __awaiter(this, void 0, void 0, function* () {
+        const workDir = fs_1.default.mkdtempSync(path_1.default.join(os_1.default.tmpdir(), "cred-setup-e2e-"));
+        // A modeling directory as a user would actually have it: a .malloy file, and
+        // nothing else. Notably NO publisher.json — whether a package needs one is
+        // part of what this is checking.
+        fs_1.default.writeFileSync(path_1.default.join(workDir, "flights.malloy"), [
+            "source: flights is duckdb.sql('SELECT 1 as id, 2 as distance') extend {",
+            "  measure: flight_count is count()",
+            "  measure: total_distance is distance.sum()",
+            "}",
+            "",
+        ].join("\n"));
+        const credPath = path_1.default.join(workDir, "fake.cred");
+        fs_1.default.writeFileSync(credPath, JSON.stringify({
+            configPerEnvironment: {
+                production: {
+                    organization: "acme",
+                    project: "prod-bars",
+                    jwtAccessToken: fakeJwt(),
+                },
+            },
+            activeEnvironment: "production",
+        }));
+        const credStore = new credstore_1.ClientConfiguration(credPath);
+        const context = {
+            host,
+            credStore,
+            deployment: "production",
+            publisherVersion: publisherversion_1.PUBLISHER_VERSION,
+            cwd: workDir,
+            // The one fake. A publisher-proxy connection is never dialed at config
+            // load, so a real URL is unnecessary to prove the config loads.
+            listConnections: () => __awaiter(this, void 0, void 0, function* () { return [{ name: "warehouse" }]; }),
+        };
+        say(`Working directory: ${workDir}`);
+        say("");
+        say("--- step 1-4,7: wire the directory ---");
+        const wired = yield (0, flow_1.wireDirectory)(context, {
+            directory: workDir,
+            organization: "acme",
+            credibleEnvironment: "prod-bars",
+            start: true,
+            open: false,
+        });
+        for (const file of [
+            ".mcp.json",
+            "CLAUDE.md",
+            "AGENTS.md",
+            ".credible/config.json",
+        ]) {
+            const exists = fs_1.default.existsSync(path_1.default.join(workDir, file));
+            say(`    ${exists ? "wrote" : "MISSING"} ${file}`);
+        }
+        say(`    ports: ui=${wired.uiPort} mcp=${wired.mcpPort}`);
+        say("");
+        say("--- step 5: start the publisher (real spawn) ---");
+        let running;
+        try {
+            running = yield (0, flow_1.startSession)(context, wired, { open: false });
+        }
+        catch (error) {
+            say("");
+            say(`RESULT: FAILED to start — ${error instanceof Error ? error.message : String(error)}`);
+            process.exitCode = 1;
+            return;
+        }
+        say("");
+        say(`RESULT: publisher is serving ${running.uiUrl} (mcp ${running.mcpUrl})`);
+        // Prove the server is actually answering, not merely bound.
+        try {
+            const response = yield fetch(`${running.uiUrl}/api/v0/environments`);
+            const body = yield response.text();
+            say(`GET /api/v0/environments -> HTTP ${response.status}`);
+            say(`  ${body.slice(0, 400)}`);
+        }
+        catch (error) {
+            say(`GET /api/v0/environments failed: ${error instanceof Error ? error.message : String(error)}`);
+        }
+        running.stop();
+        say("");
+        say(`Left the directory at ${workDir} for inspection.`);
+    });
+}
+void main();
+//# sourceMappingURL=flow.e2e.js.map

package/dist/setup-core/flow.e2e.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"flow.e2e.js","sourceRoot":"","sources":["../../src/setup-core/flow.e2e.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;GAcG;;;;;;;;;;;;;;AAEH,4CAAoB;AACpB,4CAAoB;AACpB,gDAAwB;AACxB,2CAAkD;AAClD,iCAAqD;AAErD,yDAAuD;AAEvD,SAAS,GAAG,CAAC,OAAe;IACzB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,OAAO,IAAI,CAAC,CAAC;AACxC,CAAC;AAED,mEAAmE;AACnE,MAAM,IAAI,GAAS;IACV,MAAM,CAAI,QAAgB,EAAE,OAAwB;;YACvD,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YACzD,IAAI,CAAC,KAAK;gBAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;YAClD,OAAO,KAAK,CAAC,KAAK,CAAC;QACtB,CAAC;KAAA;IACK,UAAU,CACb,QAAgB,EAChB,OAAwB;;YAExB,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAC3E,CAAC;KAAA;IACK,OAAO;;YACV,OAAO,IAAI,CAAC;QACf,CAAC;KAAA;IACD,GAAG,CAAC,KAAe,EAAE,OAAe;QACjC,qEAAqE;QACrE,GAAG,CAAC,QAAQ,KAAK,KAAK,OAAO,EAAE,CAAC,CAAC;IACpC,CAAC;IACD,KAAK,CAAC,KAAa;QAChB,sEAAsE;QACtE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IACK,OAAO,CAAC,GAAW;;YACtB,GAAG,CAAC,yBAAyB,GAAG,EAAE,CAAC,CAAC;QACvC,CAAC;KAAA;CACH,CAAC;AAEF,SAAS,OAAO;IACb,MAAM,IAAI,GAAG,CAAC,KAAc,EAAE,EAAE,CAC7B,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAC5D,OAAO,GAAG,IAAI,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,IAAI,IAAI,CAAC;QACtC,GAAG,EAAE,sCAAsC;QAC3C,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI;KAC3C,CAAC,MAAM,CAAC;AACZ,CAAC;AAED,SAAe,IAAI;;QAChB,MAAM,OAAO,GAAG,YAAE,CAAC,WAAW,CAAC,cAAI,CAAC,IAAI,CAAC,YAAE,CAAC,MAAM,EAAE,EAAE,iBAAiB,CAAC,CAAC,CAAC;QAE1E,6EAA6E;QAC7E,2EAA2E;QAC3E,iCAAiC;QACjC,YAAE,CAAC,aAAa,CACb,cAAI,CAAC,IAAI,CAAC,OAAO,EAAE,gBAAgB,CAAC,EACpC;YACG,yEAAyE;YACzE,oCAAoC;YACpC,6CAA6C;YAC7C,GAAG;YACH,EAAE;SACJ,CAAC,IAAI,CAAC,IAAI,CAAC,CACd,CAAC;QAEF,MAAM,QAAQ,GAAG,cAAI,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QACjD,YAAE,CAAC,aAAa,CACb,QAAQ,EACR,IAAI,CAAC,SAAS,CAAC;YACZ,oBAAoB,EAAE;gBACnB,UAAU,EAAE;oBACT,YAAY,EAAE,MAAM;oBACpB,OAAO,EAAE,WAAW;oBACpB,cAAc,EAAE,OAAO,EAAE;iBAC3B;aACH;YACD,iBAAiB,EAAE,YAAY;SACjC,CAAC,CACJ,CAAC;QACF,MAAM,SAAS,GAAG,IAAI,+BAAmB,CAAC,QAAQ,CAAC,CAAC;QAEpD,MAAM,OAAO,GAAG;YACb,IAAI;YACJ,SAAS;YACT,UAAU,EAAE,YAAqB;YACjC,gBAAgB,EAAE,oCAAiB;YACnC,GAAG,EAAE,OAAO;YACZ,uEAAuE;YACvE,gEAAgE;YAChE,eAAe,EAAE,GAAS,EAAE,gDAAC,OAAA,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAA,GAAA;SACtD,CAAC;QAEF,GAAG,CAAC,sBAAsB,OAAO,EAAE,CAAC,CAAC;QACrC,GAAG,CAAC,EAAE,CAAC,CAAC;QACR,GAAG,CAAC,wCAAwC,CAAC,CAAC;QAC9C,MAAM,KAAK,GAAG,MAAM,IAAA,oBAAa,EAAC,OAAO,EAAE;YACxC,SAAS,EAAE,OAAO;YAClB,YAAY,EAAE,MAAM;YACpB,mBAAmB,EAAE,WAAW;YAChC,KAAK,EAAE,IAAI;YACX,IAAI,EAAE,KAAK;SACb,CAAC,CAAC;QACH,KAAK,MAAM,IAAI,IAAI;YAChB,WAAW;YACX,WAAW;YACX,WAAW;YACX,uBAAuB;SACzB,EAAE,CAAC;YACD,MAAM,MAAM,GAAG,YAAE,CAAC,UAAU,CAAC,cAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;YACvD,GAAG,CAAC,OAAO,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,IAAI,IAAI,EAAE,CAAC,CAAC;QACtD,CAAC;QACD,GAAG,CAAC,iBAAiB,KAAK,CAAC,MAAM,QAAQ,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAE1D,GAAG,CAAC,EAAE,CAAC,CAAC;QACR,GAAG,CAAC,kDAAkD,CAAC,CAAC;QACxD,IAAI,OAAO,CAAC;QACZ,IAAI,CAAC;YACF,OAAO,GAAG,MAAM,IAAA,mBAAY,EAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACjE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACd,GAAG,CAAC,EAAE,CAAC,CAAC;YACR,GAAG,CACA,6BAA6B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CACvF,CAAC;YACF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,OAAO;QACV,CAAC;QAED,GAAG,CAAC,EAAE,CAAC,CAAC;QACR,GAAG,CAAC,gCAAgC,OAAO,CAAC,KAAK,SAAS,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;QAE7E,4DAA4D;QAC5D,IAAI,CAAC;YACF,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,CAAC,KAAK,sBAAsB,CAAC,CAAC;YACrE,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YACnC,GAAG,CAAC,oCAAoC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;YAC3D,GAAG,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;QAClC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACd,GAAG,CACA,oCAAoC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAC9F,CAAC;QACL,CAAC;QAED,OAAO,CAAC,IAAI,EAAE,CAAC;QACf,GAAG,CAAC,EAAE,CAAC,CAAC;QACR,GAAG,CAAC,yBAAyB,OAAO,kBAAkB,CAAC,CAAC;IAC3D,CAAC;CAAA;AAED,KAAK,IAAI,EAAE,CAAC"}