@cuna_labs/cli 0.1.0

package/dist/cli/parser.js

@@ -0,0 +1,294 @@
+import { usageError } from "../core/errors.js";
+const routed = (key, syntax, argv, summary, operandMode = "exact") => Object.freeze({
+    key,
+    command: key.split(" ")[0],
+    ...(key.split(" ")[1] === undefined ? {} : { action: key.split(" ")[1] }),
+    operandMode,
+    syntax,
+    argv: Object.freeze([...argv]),
+    summary,
+    dispatch: "routed",
+});
+const reserved = (key, summary) => Object.freeze({
+    key,
+    command: key.split(" ")[0],
+    ...(key.split(" ")[1] === undefined ? {} : { action: key.split(" ")[1] }),
+    operandMode: "exact",
+    syntax: key,
+    argv: Object.freeze(key.split(" ")),
+    summary,
+    dispatch: "reserved",
+});
+/** The closed discovery projection of the command preflight switch. */
+export const CLI_ROUTE_REGISTRY = Object.freeze([
+    routed("signup", "signup", ["signup"], "Create an account through the browser"),
+    routed("login", "login", ["login"], "Sign in through the browser"),
+    routed("logout", "logout", ["logout"], "Revoke the current interactive login"),
+    routed("whoami", "whoami", ["whoami"], "Show the current account context"),
+    routed("access status", "access status", ["access", "status"], "Show the same account context whoami prints, recorded as access.status"),
+    routed("observe", "observe --project PROJECT_ID", ["observe", "--project", "00000000-0000-4000-8000-000000000001"], "Observe an authorized shared session read-only"),
+    routed("share", "share --project PROJECT_ID [--grant GRANT_ID]", ["share", "--project", "00000000-0000-4000-8000-000000000001"], "Grant, inspect or revoke a member's read-only observation, and share or unshare the session itself"),
+    routed("capabilities", "capabilities", ["capabilities"], "Inspect live server capability truth"),
+    routed("machines", "machines", ["machines"], "Browse machines and AgentSessions interactively"),
+    routed("machines list", "machines list", ["machines", "list"], "List exact machine resources"),
+    routed("machines create", "machines create --name NAME --yes", ["machines", "create", "--name", "fixture", "--yes"], "Create a machine"),
+    routed("machines start", "machines start MACHINE_ID --yes", ["machines", "start", "00000000-0000-4000-8000-000000000001", "--yes"], "Start a machine"),
+    routed("machines pause", "machines pause MACHINE_ID --yes", ["machines", "pause", "00000000-0000-4000-8000-000000000001", "--yes"], "Pause a machine"),
+    routed("machines resume", "machines resume MACHINE_ID --yes", ["machines", "resume", "00000000-0000-4000-8000-000000000001", "--yes"], "Resume a machine"),
+    routed("machines stop", "machines stop MACHINE_ID --yes", ["machines", "stop", "00000000-0000-4000-8000-000000000001", "--yes"], "Stop a machine"),
+    routed("machines update-supervisor", "machines update-supervisor MACHINE_ID --yes", ["machines", "update-supervisor", "00000000-0000-4000-8000-000000000001", "--yes"], "Update a stopped machine's terminal supervisor"),
+    routed("machines live-update-supervisor", "machines live-update-supervisor MACHINE_ID --yes", ["machines", "live-update-supervisor", "00000000-0000-4000-8000-000000000001", "--yes"], "Update a running machine's terminal supervisor in place and report each AgentSession's custody"),
+    routed("machines live-update-status", "machines live-update-status MACHINE_ID", ["machines", "live-update-status", "00000000-0000-4000-8000-000000000001"], "Read what one in-place supervisor update did, without sending anything to the machine"),
+    routed("machines delete", "machines delete MACHINE_ID --yes", ["machines", "delete", "00000000-0000-4000-8000-000000000001", "--yes"], "Delete a machine"),
+    routed("records list", "records list", ["records", "list"], "List redacted account activity"),
+    routed("executions list", "executions list --machine MACHINE_ID", ["executions", "list", "--machine", "00000000-0000-4000-8000-000000000001"], "List remote commands and their remaining process ownership"),
+    routed("executions get", "executions get EXECUTION_ID --machine MACHINE_ID", ["executions", "get", "00000000-0000-4000-8000-000000000002", "--machine", "00000000-0000-4000-8000-000000000001"], "Inspect one exact remote command"),
+    routed("executions cancel", "executions cancel EXECUTION_ID --machine MACHINE_ID --yes", ["executions", "cancel", "00000000-0000-4000-8000-000000000002", "--machine", "00000000-0000-4000-8000-000000000001", "--yes"], "Request cancellation of one remote command and its descendants"),
+    routed("authorizations list", "authorizations list --machine MACHINE_ID", ["authorizations", "list", "--machine", "00000000-0000-4000-8000-000000000001"], "List machine credential rules"),
+    routed("account show", "account show", ["account", "show"], "Show the account identity"),
+    routed("workspace show", "workspace show", ["workspace", "show"], "Show workspace assignment"),
+    routed("usage show", "usage show", ["usage", "show"], "Show workspace usage estimates"),
+    routed("api-keys list", "api-keys list", ["api-keys", "list"], "List API-key metadata"),
+    routed("api-keys create", "api-keys create --name NAME --yes", ["api-keys", "create", "--name", "fixture", "--yes"], "Create an API key"),
+    routed("api-keys revoke", "api-keys revoke KEY_ID --yes", ["api-keys", "revoke", "00000000-0000-4000-8000-000000000001", "--yes"], "Revoke an API key"),
+    routed("agent-sessions list", "agent-sessions list --machine MACHINE_ID", ["agent-sessions", "list", "--machine", "00000000-0000-4000-8000-000000000001"], "List a machine's AgentSessions"),
+    routed("agent-sessions get", "agent-sessions get SESSION_ID", ["agent-sessions", "get", "00000000-0000-4000-8000-000000000001"], "Read one AgentSession"),
+    routed("agent-sessions create", "agent-sessions create --machine ID --workspace-binding-id ID --workspace-generation N --agent KIND --yes", ["agent-sessions", "create", "--machine", "00000000-0000-4000-8000-000000000001", "--workspace-binding-id", "00000000-0000-4000-8000-000000000002", "--workspace-generation", "1", "--agent", "claude-code", "--yes"], "Create an exact AgentSession"),
+    routed("agent-sessions rename", "agent-sessions rename SESSION_ID --name NAME --yes", ["agent-sessions", "rename", "00000000-0000-4000-8000-000000000001", "--name", "fixture", "--yes"], "Rename an AgentSession"),
+    routed("agent-sessions terminate", "agent-sessions terminate SESSION_ID --yes", ["agent-sessions", "terminate", "00000000-0000-4000-8000-000000000001", "--yes"], "Terminate an AgentSession"),
+    routed("agent-sessions attach", "agent-sessions attach SESSION_ID", ["agent-sessions", "attach", "00000000-0000-4000-8000-000000000001"], "Attach an exact AgentSession once the server grants terminal_connections.create"),
+    routed("agent logout", "agent logout --agent-session SESSION_ID --yes", ["agent", "logout", "--agent-session", "00000000-0000-4000-8000-000000000001", "--yes"], "Sign a provider out of one AgentSession"),
+    routed("connect", "connect SESSION_ID [SESSION_ID...]", ["connect", "00000000-0000-4000-8000-000000000001"], "Attach one through four exact AgentSessions once the server grants terminal_connections.create", "free"),
+    routed("config get", "config get", ["config", "get"], "Show redacted configuration"),
+    routed("doctor", "doctor", ["doctor"], "Inspect local runtime health"),
+    routed("self-test", "self-test --offline", ["self-test", "--offline"], "Verify this installation offline"),
+    routed("version", "version", ["version"], "Show build identity"),
+    routed("help", "help [--all]", ["help"], "Show primary or complete help"),
+    routed("claude", "claude [PATH]", ["claude"], "Open Claude Code", "free"),
+    routed("codex", "codex [PATH]", ["codex"], "Open Codex", "free"),
+    routed("opencode", "opencode [PATH]", ["opencode"], "Open OpenCode", "free"),
+    reserved("config set", "Reserved; configuration mutation is not implemented"),
+    reserved("shell", "Reserved; no shell runtime in this build"),
+    reserved("sync", "Reserved; no standalone sync command in this build"),
+    reserved("companion", "Reserved; no local companion in this build"),
+]);
+/**
+ * Resolve an invocation to one admitted semantic leaf.
+ *
+ * Exact command leaves accept no positional operand. Action leaves consume
+ * their registered first operand and leave IDs/names to the command-specific
+ * validator. Only provider PATH journeys and `connect` intentionally admit
+ * free positional operands. Consequently, adding a switch branch cannot make
+ * a new command or subaction executable until it is registered here.
+ */
+export function resolveCliRoute(parsed) {
+    if (parsed.command === undefined)
+        return undefined;
+    const candidates = CLI_ROUTE_REGISTRY.filter((route) => route.command === parsed.command);
+    const action = parsed.operands[0];
+    if (action !== undefined) {
+        const actionRoute = candidates.find((route) => route.action === action);
+        if (actionRoute !== undefined)
+            return actionRoute;
+    }
+    const base = candidates.find((route) => route.action === undefined);
+    if (base === undefined)
+        return undefined;
+    if (base.operandMode === "free" || parsed.operands.length === 0)
+        return base;
+    return undefined;
+}
+/**
+ * The actions this registry admits for one command, in registry order. Built
+ * from the registry so the message cannot drift from what the CLI accepts.
+ */
+function registeredActions(command) {
+    const actions = [];
+    for (const route of CLI_ROUTE_REGISTRY) {
+        if (route.command !== command || route.action === undefined)
+            continue;
+        if (!actions.includes(route.action))
+            actions.push(route.action);
+    }
+    return actions;
+}
+/**
+ * Echo what the person typed, bounded and on one line. Sanitizing is the
+ * renderer's job; this only keeps a pasted paragraph out of the message.
+ */
+function echoOperand(value) {
+    const flattened = value.replaceAll(/\s+/gu, " ").trim();
+    return flattened.length <= 40 ? flattened : `${flattened.slice(0, 39)}…`;
+}
+/** Fail closed before the command preflight switch can admit an unregistered leaf. */
+export function assertRegisteredCliRoute(parsed) {
+    const route = resolveCliRoute(parsed);
+    if (route !== undefined)
+        return route;
+    const knownCommand = parsed.command !== undefined &&
+        CLI_ROUTE_REGISTRY.some((candidate) => candidate.command === parsed.command);
+    if (knownCommand) {
+        // Missing and wrong are different mistakes and read differently. Both name
+        // the actions that exist rather than sending the reader to `--help`.
+        const command = parsed.command;
+        const actions = registeredActions(command);
+        const available = actions.length === 0
+            ? undefined
+            : actions.length === 1
+                ? `The only action is \`${actions[0]}\`.`
+                : `Available actions: ${actions.map((action) => `\`${action}\``).join(", ")}.`;
+        const given = parsed.operands[0];
+        throw usageError(given === undefined
+            ? `cuna ${command} requires an action.`
+            : `cuna ${command} has no action ${echoOperand(given)}.`, available);
+    }
+    throw usageError(`Unknown command ${parsed.command ?? "<none>"}.`, "Run `cuna --help`.");
+}
+const BOOLEAN_OPTIONS = new Set([
+    "help",
+    "version",
+    "json",
+    "no-color",
+    "yes",
+    "background",
+    "no-sync",
+    "new",
+    "new-session",
+    "offline",
+    // `doctor` is offline by default. This opt-in is the only diagnostic that
+    // makes the anonymous browser-login bootstrap request.
+    "check-browser-login",
+    // `cuna help --all`. Absent from this set, the parser reads it as a
+    // value option, swallows the next token, and answers "Option --all requires
+    // a value" — a usage error about a flag that takes none.
+    "all",
+    // `machines live-update-supervisor --forget-unknown`. Clears this
+    // installation's local record of an update. It sends no mutation and settles
+    // nothing on the server; it reads the operation first and clears only a
+    // terminal one, because that record now holds the only identity able to
+    // resolve an open update.
+    "forget-unknown",
+    // `machines live-update-supervisor --resume`. Re-sends the operation identity
+    // already recorded for this Machine. It is a repeat by design and the
+    // producer's own recovery: the same identity never rotates control twice.
+    // Deliberately NOT spelled `--yes`, which starts a different update.
+    "resume",
+]);
+/**
+ * Every option that takes a value, anywhere in the CLI.
+ *
+ * The parser has to decide whether a token is a flag or a name expecting a
+ * value before any command sees it, and without this it assumed "not boolean,
+ * therefore takes a value". A mistyped flag then got two contradictory answers:
+ * `--verbose` was told it required a value, and `--verbose x` was told it was
+ * unknown. Whether a name is known and whether it takes a value are separate
+ * questions, and the parser can only answer the first from a list it holds.
+ *
+ * A name here that no command accepts is refused later by
+ * `rejectUnknownOptions`, which is per-command and stricter. This set only
+ * decides the shape of the parse.
+ */
+const VALUE_OPTIONS = new Set([
+    "project",
+    "grant",
+    "after",
+    "execution-workspace-id",
+    "agent",
+    "agent-session",
+    "auth-mode",
+    "base-url",
+    "config-file",
+    "credential-binding",
+    "cursor",
+    "cwd",
+    "expires-at",
+    "idempotency-key",
+    "limit",
+    "machine",
+    "memory-mib",
+    "name",
+    // `machines live-update-status --operation`. Names one in-place supervisor
+    // update when this computer holds no record of it -- an update started from
+    // another computer or from the web console has an identity this CLI never
+    // held and cannot reconstruct.
+    "operation",
+    "profile",
+    "resource-id",
+    "scope",
+    "timeout-ms",
+    "vcpus",
+    "workspace-binding-id",
+    "workspace-generation",
+]);
+function optionName(raw) {
+    if (!/^[a-z][a-z0-9-]*$/u.test(raw))
+        throw usageError(`Invalid option --${raw}.`);
+    return raw;
+}
+export function parseArgv(argv) {
+    const options = {};
+    const positionals = [];
+    let flags = true;
+    for (let index = 0; index < argv.length; index += 1) {
+        const token = argv[index];
+        if (token === undefined)
+            continue;
+        if (flags && token === "--") {
+            flags = false;
+            continue;
+        }
+        if (flags && token.startsWith("--")) {
+            const separator = token.indexOf("=");
+            const name = optionName(token.slice(2, separator === -1 ? undefined : separator));
+            if (Object.hasOwn(options, name))
+                throw usageError(`Option --${name} was provided more than once.`);
+            if (!BOOLEAN_OPTIONS.has(name) && !VALUE_OPTIONS.has(name)) {
+                throw usageError(`Unknown option --${name}.`, "Run `cuna <command> --help` to see the options it accepts.");
+            }
+            if (BOOLEAN_OPTIONS.has(name)) {
+                if (separator !== -1)
+                    throw usageError(`Option --${name} does not accept a value.`);
+                options[name] = true;
+            }
+            else {
+                const value = separator === -1 ? argv[index + 1] : token.slice(separator + 1);
+                if (value === undefined || value === "" || (separator === -1 && value.startsWith("--"))) {
+                    throw usageError(`Option --${name} requires a value.`);
+                }
+                options[name] = value;
+                if (separator === -1)
+                    index += 1;
+            }
+            continue;
+        }
+        positionals.push(token);
+    }
+    return Object.freeze({
+        command: positionals[0],
+        operands: Object.freeze(positionals.slice(1)),
+        options: Object.freeze(options),
+    });
+}
+export function stringOption(parsed, name) {
+    const value = parsed.options[name];
+    if (value === undefined)
+        return undefined;
+    if (typeof value !== "string")
+        throw usageError(`Option --${name} requires a value.`);
+    return value;
+}
+export function booleanOption(parsed, name) {
+    const value = parsed.options[name];
+    if (value === undefined)
+        return false;
+    if (value !== true)
+        throw usageError(`Option --${name} does not accept a value.`);
+    return true;
+}
+export function rejectUnknownOptions(parsed, allowed) {
+    const allow = new Set([...allowed, "json", "no-color", "profile", "base-url", "config-file", "timeout-ms"]);
+    const unknown = Object.keys(parsed.options).filter((key) => !allow.has(key));
+    if (unknown.length > 0)
+        throw usageError(`Unknown option --${unknown[0]}.`);
+}
+//# sourceMappingURL=parser.js.map

package/dist/cli/parser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"parser.js","sourceRoot":"","sources":["../../src/cli/parser.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAmD/C,MAAM,MAAM,GAAG,CACb,GAAW,EACX,MAAc,EACd,IAAuB,EACvB,OAAe,EACf,cAAgC,OAAO,EACnB,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC;IACrC,GAAG;IACH,OAAO,EAAE,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE;IAC3B,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACzE,WAAW;IACX,MAAM;IACN,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IAC9B,OAAO;IACP,QAAQ,EAAE,QAAQ;CACnB,CAAC,CAAC;AAEH,MAAM,QAAQ,GAAG,CAAC,GAAW,EAAE,OAAe,EAAsB,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC;IACnF,GAAG;IACH,OAAO,EAAE,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE;IAC3B,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACzE,WAAW,EAAE,OAAO;IACpB,MAAM,EAAE,GAAG;IACX,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACnC,OAAO;IACP,QAAQ,EAAE,UAAU;CACrB,CAAC,CAAC;AAEH,uEAAuE;AACvE,MAAM,CAAC,MAAM,kBAAkB,GAAkC,MAAM,CAAC,MAAM,CAAC;IAC7E,MAAM,CAAC,QAAQ,EAAE,QAAQ,EAAE,CAAC,QAAQ,CAAC,EAAE,uCAAuC,CAAC;IAC/E,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,CAAC,OAAO,CAAC,EAAE,6BAA6B,CAAC;IAClE,MAAM,CAAC,QAAQ,EAAE,QAAQ,EAAE,CAAC,QAAQ,CAAC,EAAE,sCAAsC,CAAC;IAC9E,MAAM,CAAC,QAAQ,EAAE,QAAQ,EAAE,CAAC,QAAQ,CAAC,EAAE,kCAAkC,CAAC;IAC1E,MAAM,CAAC,eAAe,EAAE,eAAe,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,wEAAwE,CAAC;IACxI,MAAM,CAAC,SAAS,EAAE,8BAA8B,EAAE,CAAC,SAAS,EAAC,WAAW,EAAC,sCAAsC,CAAC,EAAE,gDAAgD,CAAC;IACnK,MAAM,CAAC,OAAO,EAAE,+CAA+C,EAAE,CAAC,OAAO,EAAC,WAAW,EAAC,sCAAsC,CAAC,EAAE,oGAAoG,CAAC;IACpO,MAAM,CAAC,cAAc,EAAE,cAAc,EAAE,CAAC,cAAc,CAAC,EAAE,sCAAsC,CAAC;IAChG,MAAM,CAAC,UAAU,EAAE,UAAU,EAAE,CAAC,UAAU,CAAC,EAAE,iDAAiD,CAAC;IAC/F,MAAM,CAAC,eAAe,EAAE,eAAe,EAAE,CAAC,UAAU,EAAE,MAAM,CAAC,EAAE,8BAA8B,CAAC;IAC9F,MAAM,CAAC,iBAAiB,EAAE,mCAAmC,EAAE,CAAC,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,kBAAkB,CAAC;IACxI,MAAM,CAAC,gBAAgB,EAAE,iCAAiC,EAAE,CAAC,UAAU,EAAE,OAAO,EAAE,sCAAsC,EAAE,OAAO,CAAC,EAAE,iBAAiB,CAAC;IACtJ,MAAM,CAAC,gBAAgB,EAAE,iCAAiC,EAAE,CAAC,UAAU,EAAE,OAAO,EAAE,sCAAsC,EAAE,OAAO,CAAC,EAAE,iBAAiB,CAAC;IACtJ,MAAM,CAAC,iBAAiB,EAAE,kCAAkC,EAAE,CAAC,UAAU,EAAE,QAAQ,EAAE,sCAAsC,EAAE,OAAO,CAAC,EAAE,kBAAkB,CAAC;IAC1J,MAAM,CAAC,eAAe,EAAE,gCAAgC,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,sCAAsC,EAAE,OAAO,CAAC,EAAE,gBAAgB,CAAC;IAClJ,MAAM,CAAC,4BAA4B,EAAE,6CAA6C,EAAE,CAAC,UAAU,EAAE,mBAAmB,EAAE,sCAAsC,EAAE,OAAO,CAAC,EAAE,gDAAgD,CAAC;IACzN,MAAM,CAAC,iCAAiC,EAAE,kDAAkD,EAAE,CAAC,UAAU,EAAE,wBAAwB,EAAE,sCAAsC,EAAE,OAAO,CAAC,EAAE,gGAAgG,CAAC;IACxR,MAAM,CAAC,6BAA6B,EAAE,wCAAwC,EAAE,CAAC,UAAU,EAAE,oBAAoB,EAAE,sCAAsC,CAAC,EAAE,uFAAuF,CAAC;IACpP,MAAM,CAAC,iBAAiB,EAAE,kCAAkC,EAAE,CAAC,UAAU,EAAE,QAAQ,EAAE,sCAAsC,EAAE,OAAO,CAAC,EAAE,kBAAkB,CAAC;IAC1J,MAAM,CAAC,cAAc,EAAE,cAAc,EAAE,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,gCAAgC,CAAC;IAC7F,MAAM,CAAC,iBAAiB,EAAE,sCAAsC,EAAE,CAAC,YAAY,EAAE,MAAM,EAAE,WAAW,EAAE,sCAAsC,CAAC,EAAE,4DAA4D,CAAC;IAC5M,MAAM,CAAC,gBAAgB,EAAE,kDAAkD,EAAE,CAAC,YAAY,EAAE,KAAK,EAAE,sCAAsC,EAAE,WAAW,EAAE,sCAAsC,CAAC,EAAE,kCAAkC,CAAC;IACpO,MAAM,CAAC,mBAAmB,EAAE,2DAA2D,EAAE,CAAC,YAAY,EAAE,QAAQ,EAAE,sCAAsC,EAAE,WAAW,EAAE,sCAAsC,EAAE,OAAO,CAAC,EAAE,gEAAgE,CAAC;IAC1R,MAAM,CAAC,qBAAqB,EAAE,0CAA0C,EAAE,CAAC,gBAAgB,EAAE,MAAM,EAAE,WAAW,EAAE,sCAAsC,CAAC,EAAE,+BAA+B,CAAC;IAC3L,MAAM,CAAC,cAAc,EAAE,cAAc,EAAE,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,2BAA2B,CAAC;IACxF,MAAM,CAAC,gBAAgB,EAAE,gBAAgB,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE,2BAA2B,CAAC;IAC9F,MAAM,CAAC,YAAY,EAAE,YAAY,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,gCAAgC,CAAC;IACvF,MAAM,CAAC,eAAe,EAAE,eAAe,EAAE,CAAC,UAAU,EAAE,MAAM,CAAC,EAAE,uBAAuB,CAAC;IACvF,MAAM,CAAC,iBAAiB,EAAE,mCAAmC,EAAE,CAAC,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,mBAAmB,CAAC;IACzI,MAAM,CAAC,iBAAiB,EAAE,8BAA8B,EAAE,CAAC,UAAU,EAAE,QAAQ,EAAE,sCAAsC,EAAE,OAAO,CAAC,EAAE,mBAAmB,CAAC;IACvJ,MAAM,CAAC,qBAAqB,EAAE,0CAA0C,EAAE,CAAC,gBAAgB,EAAE,MAAM,EAAE,WAAW,EAAE,sCAAsC,CAAC,EAAE,gCAAgC,CAAC;IAC5L,MAAM,CAAC,oBAAoB,EAAE,+BAA+B,EAAE,CAAC,gBAAgB,EAAE,KAAK,EAAE,sCAAsC,CAAC,EAAE,uBAAuB,CAAC;IACzJ,MAAM,CAAC,uBAAuB,EAAE,0GAA0G,EAAE,CAAC,gBAAgB,EAAE,QAAQ,EAAE,WAAW,EAAE,sCAAsC,EAAE,wBAAwB,EAAE,sCAAsC,EAAE,wBAAwB,EAAE,GAAG,EAAE,SAAS,EAAE,aAAa,EAAE,OAAO,CAAC,EAAE,8BAA8B,CAAC;IAClY,MAAM,CAAC,uBAAuB,EAAE,oDAAoD,EAAE,CAAC,gBAAgB,EAAE,QAAQ,EAAE,sCAAsC,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,wBAAwB,CAAC;IACnN,MAAM,CAAC,0BAA0B,EAAE,2CAA2C,EAAE,CAAC,gBAAgB,EAAE,WAAW,EAAE,sCAAsC,EAAE,OAAO,CAAC,EAAE,2BAA2B,CAAC;IAC9L,MAAM,CAAC,uBAAuB,EAAE,kCAAkC,EAAE,CAAC,gBAAgB,EAAE,QAAQ,EAAE,sCAAsC,CAAC,EAAE,iFAAiF,CAAC;IAC5N,MAAM,CAAC,cAAc,EAAE,+CAA+C,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,iBAAiB,EAAE,sCAAsC,EAAE,OAAO,CAAC,EAAE,yCAAyC,CAAC;IAC3M,MAAM,CAAC,SAAS,EAAE,oCAAoC,EAAE,CAAC,SAAS,EAAE,sCAAsC,CAAC,EAAE,gGAAgG,EAAE,MAAM,CAAC;IACtN,MAAM,CAAC,YAAY,EAAE,YAAY,EAAE,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,6BAA6B,CAAC;IACpF,MAAM,CAAC,QAAQ,EAAE,QAAQ,EAAE,CAAC,QAAQ,CAAC,EAAE,8BAA8B,CAAC;IACtE,MAAM,CAAC,WAAW,EAAE,qBAAqB,EAAE,CAAC,WAAW,EAAE,WAAW,CAAC,EAAE,kCAAkC,CAAC;IAC1G,MAAM,CAAC,SAAS,EAAE,SAAS,EAAE,CAAC,SAAS,CAAC,EAAE,qBAAqB,CAAC;IAChE,MAAM,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC,MAAM,CAAC,EAAE,+BAA+B,CAAC;IACzE,MAAM,CAAC,QAAQ,EAAE,eAAe,EAAE,CAAC,QAAQ,CAAC,EAAE,kBAAkB,EAAE,MAAM,CAAC;IACzE,MAAM,CAAC,OAAO,EAAE,cAAc,EAAE,CAAC,OAAO,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC;IAChE,MAAM,CAAC,UAAU,EAAE,iBAAiB,EAAE,CAAC,UAAU,CAAC,EAAE,eAAe,EAAE,MAAM,CAAC;IAC5E,QAAQ,CAAC,YAAY,EAAE,qDAAqD,CAAC;IAC7E,QAAQ,CAAC,OAAO,EAAE,0CAA0C,CAAC;IAC7D,QAAQ,CAAC,MAAM,EAAE,oDAAoD,CAAC;IACtE,QAAQ,CAAC,WAAW,EAAE,4CAA4C,CAAC;CACpE,CAAC,CAAC;AAEH;;;;;;;;GAQG;AACH,MAAM,UAAU,eAAe,CAAC,MAAwB;IACtD,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACnD,MAAM,UAAU,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO,CAAC,CAAC;IAC1F,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IAClC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,MAAM,WAAW,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;QACxE,IAAI,WAAW,KAAK,SAAS;YAAE,OAAO,WAAW,CAAC;IACpD,CAAC;IACD,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC;IACpE,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACzC,IAAI,IAAI,CAAC,WAAW,KAAK,MAAM,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7E,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;GAGG;AACH,SAAS,iBAAiB,CAAC,OAAe;IACxC,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,KAAK,IAAI,kBAAkB,EAAE,CAAC;QACvC,IAAI,KAAK,CAAC,OAAO,KAAK,OAAO,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS;YAAE,SAAS;QACtE,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;GAGG;AACH,SAAS,WAAW,CAAC,KAAa;IAChC,MAAM,SAAS,GAAG,KAAK,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACxD,OAAO,SAAS,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC;AAC3E,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,wBAAwB,CAAC,MAAwB;IAC/D,MAAM,KAAK,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;IACtC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACtC,MAAM,YAAY,GAAG,MAAM,CAAC,OAAO,KAAK,SAAS;QAC/C,kBAAkB,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO,CAAC,CAAC;IAC/E,IAAI,YAAY,EAAE,CAAC;QACjB,2EAA2E;QAC3E,qEAAqE;QACrE,MAAM,OAAO,GAAG,MAAM,CAAC,OAAiB,CAAC;QACzC,MAAM,OAAO,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;QAC3C,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,KAAK,CAAC;YACpC,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;gBACpB,CAAC,CAAC,wBAAwB,OAAO,CAAC,CAAC,CAAC,KAAK;gBACzC,CAAC,CAAC,sBAAsB,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,KAAK,MAAM,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;QACnF,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QACjC,MAAM,UAAU,CACd,KAAK,KAAK,SAAS;YACjB,CAAC,CAAC,QAAQ,OAAO,sBAAsB;YACvC,CAAC,CAAC,QAAQ,OAAO,kBAAkB,WAAW,CAAC,KAAK,CAAC,GAAG,EAC1D,SAAS,CACV,CAAC;IACJ,CAAC;IACD,MAAM,UAAU,CAAC,mBAAmB,MAAM,CAAC,OAAO,IAAI,QAAQ,GAAG,EAAE,oBAAoB,CAAC,CAAC;AAC3F,CAAC;AAED,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC;IAC9B,MAAM;IACN,SAAS;IACT,MAAM;IACN,UAAU;IACV,KAAK;IACL,YAAY;IACZ,SAAS;IACT,KAAK;IACL,aAAa;IACb,SAAS;IACT,0EAA0E;IAC1E,uDAAuD;IACvD,qBAAqB;IACrB,oEAAoE;IACpE,4EAA4E;IAC5E,yDAAyD;IACzD,KAAK;IACL,kEAAkE;IAClE,6EAA6E;IAC7E,wEAAwE;IACxE,wEAAwE;IACxE,0BAA0B;IAC1B,gBAAgB;IAChB,8EAA8E;IAC9E,sEAAsE;IACtE,0EAA0E;IAC1E,qEAAqE;IACrE,QAAQ;CACT,CAAC,CAAC;AAEH;;;;;;;;;;;;;GAaG;AACH,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC;IAC5B,SAAS;IACT,OAAO;IACP,OAAO;IACP,wBAAwB;IACxB,OAAO;IACP,eAAe;IACf,WAAW;IACX,UAAU;IACV,aAAa;IACb,oBAAoB;IACpB,QAAQ;IACR,KAAK;IACL,YAAY;IACZ,iBAAiB;IACjB,OAAO;IACP,SAAS;IACT,YAAY;IACZ,MAAM;IACN,2EAA2E;IAC3E,4EAA4E;IAC5E,0EAA0E;IAC1E,+BAA+B;IAC/B,WAAW;IACX,SAAS;IACT,aAAa;IACb,OAAO;IACP,YAAY;IACZ,OAAO;IACP,sBAAsB;IACtB,sBAAsB;CACvB,CAAC,CAAC;AAEH,SAAS,UAAU,CAAC,GAAW;IAC7B,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,MAAM,UAAU,CAAC,oBAAoB,GAAG,GAAG,CAAC,CAAC;IAClF,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,IAAuB;IAC/C,MAAM,OAAO,GAAgC,EAAE,CAAC;IAChD,MAAM,WAAW,GAAa,EAAE,CAAC;IACjC,IAAI,KAAK,GAAG,IAAI,CAAC;IACjB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACpD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1B,IAAI,KAAK,KAAK,SAAS;YAAE,SAAS;QAClC,IAAI,KAAK,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YAC5B,KAAK,GAAG,KAAK,CAAC;YACd,SAAS;QACX,CAAC;QACD,IAAI,KAAK,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACpC,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YACrC,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;YAClF,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC;gBAAE,MAAM,UAAU,CAAC,YAAY,IAAI,+BAA+B,CAAC,CAAC;YACpG,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC3D,MAAM,UAAU,CAAC,oBAAoB,IAAI,GAAG,EAAE,4DAA4D,CAAC,CAAC;YAC9G,CAAC;YACD,IAAI,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC9B,IAAI,SAAS,KAAK,CAAC,CAAC;oBAAE,MAAM,UAAU,CAAC,YAAY,IAAI,2BAA2B,CAAC,CAAC;gBACpF,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;YACvB,CAAC;iBAAM,CAAC;gBACN,MAAM,KAAK,GAAG,SAAS,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC;gBAC9E,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE,IAAI,CAAC,SAAS,KAAK,CAAC,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;oBACxF,MAAM,UAAU,CAAC,YAAY,IAAI,oBAAoB,CAAC,CAAC;gBACzD,CAAC;gBACD,OAAO,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;gBACtB,IAAI,SAAS,KAAK,CAAC,CAAC;oBAAE,KAAK,IAAI,CAAC,CAAC;YACnC,CAAC;YACD,SAAS;QACX,CAAC;QACD,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC1B,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,OAAO,EAAE,WAAW,CAAC,CAAC,CAAC;QACvB,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC7C,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC;KAChC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,MAAwB,EAAE,IAAY;IACjE,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACnC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,MAAM,UAAU,CAAC,YAAY,IAAI,oBAAoB,CAAC,CAAC;IACtF,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,MAAwB,EAAE,IAAY;IAClE,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACnC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACtC,IAAI,KAAK,KAAK,IAAI;QAAE,MAAM,UAAU,CAAC,YAAY,IAAI,2BAA2B,CAAC,CAAC;IAClF,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,MAAwB,EAAE,OAA0B;IACvF,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,aAAa,EAAE,YAAY,CAAC,CAAC,CAAC;IAC5G,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7E,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,UAAU,CAAC,oBAAoB,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;AAC9E,CAAC"}

package/dist/cli/process-entrypoint.d.ts

@@ -0,0 +1,18 @@
+import { runCli } from "./run.js";
+type SupportedProcessSignal = "SIGINT" | "SIGTERM" | "SIGHUP";
+export interface ProcessSignalHost {
+    once(signal: SupportedProcessSignal, listener: () => void): unknown;
+    removeListener(signal: SupportedProcessSignal, listener: () => void): unknown;
+}
+export interface ProcessInputHost {
+    pause(): unknown;
+    destroy(): unknown;
+}
+export declare function runProcessCli(argv: readonly string[], input?: {
+    readonly host?: ProcessSignalHost;
+    /** The real process stdin, supplied only by the executable entrypoint. */
+    readonly stdin?: ProcessInputHost;
+    readonly run?: typeof runCli;
+}): Promise<number>;
+export {};
+//# sourceMappingURL=process-entrypoint.d.ts.map

package/dist/cli/process-entrypoint.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"process-entrypoint.d.ts","sourceRoot":"","sources":["../../src/cli/process-entrypoint.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAElC,KAAK,sBAAsB,GAAG,QAAQ,GAAG,SAAS,GAAG,QAAQ,CAAC;AAE9D,MAAM,WAAW,iBAAiB;IAChC,IAAI,CAAC,MAAM,EAAE,sBAAsB,EAAE,QAAQ,EAAE,MAAM,IAAI,GAAG,OAAO,CAAC;IACpE,cAAc,CAAC,MAAM,EAAE,sBAAsB,EAAE,QAAQ,EAAE,MAAM,IAAI,GAAG,OAAO,CAAC;CAC/E;AAED,MAAM,WAAW,gBAAgB;IAC/B,KAAK,IAAI,OAAO,CAAC;IACjB,OAAO,IAAI,OAAO,CAAC;CACpB;AAED,wBAAsB,aAAa,CACjC,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,KAAK,GAAE;IACL,QAAQ,CAAC,IAAI,CAAC,EAAE,iBAAiB,CAAC;IAClC,0EAA0E;IAC1E,QAAQ,CAAC,KAAK,CAAC,EAAE,gBAAgB,CAAC;IAClC,QAAQ,CAAC,GAAG,CAAC,EAAE,OAAO,MAAM,CAAC;CACzB,GACL,OAAO,CAAC,MAAM,CAAC,CAsBjB"}

package/dist/cli/process-entrypoint.js

@@ -0,0 +1,26 @@
+import { runCli } from "./run.js";
+export async function runProcessCli(argv, input = {}) {
+    const host = input.host ?? process;
+    const run = input.run ?? runCli;
+    const controller = new AbortController();
+    const interrupt = () => controller.abort(new Error("Cuna was interrupted by SIGINT."));
+    const terminate = () => controller.abort(new Error("Cuna was terminated by SIGTERM."));
+    const hangup = () => controller.abort(new Error("Cuna was interrupted by SIGHUP."));
+    host.once("SIGINT", interrupt);
+    host.once("SIGTERM", terminate);
+    host.once("SIGHUP", hangup);
+    try {
+        return await run(argv, { signal: controller.signal });
+    }
+    finally {
+        host.removeListener("SIGINT", interrupt);
+        host.removeListener("SIGTERM", terminate);
+        host.removeListener("SIGHUP", hangup);
+        // Raw hidden-code input must not own the lifetime of a command that has
+        // already returned. Closing stdin here is safe: this is the process
+        // boundary, after every interactive journey and terminal runner finished.
+        input.stdin?.pause();
+        input.stdin?.destroy();
+    }
+}
+//# sourceMappingURL=process-entrypoint.js.map

package/dist/cli/process-entrypoint.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"process-entrypoint.js","sourceRoot":"","sources":["../../src/cli/process-entrypoint.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAclC,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,IAAuB,EACvB,QAKI,EAAE;IAEN,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,IAAI,OAAO,CAAC;IACnC,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,MAAM,CAAC;IAChC,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC,CAAC;IACvF,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC,CAAC;IACvF,MAAM,MAAM,GAAG,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC,CAAC;IACpF,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IAC/B,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IAChC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC5B,IAAI,CAAC;QACH,OAAO,MAAM,GAAG,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;IACxD,CAAC;YAAS,CAAC;QACT,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QACzC,IAAI,CAAC,cAAc,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QAC1C,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACtC,wEAAwE;QACxE,oEAAoE;QACpE,0EAA0E;QAC1E,KAAK,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC;QACrB,KAAK,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC;IACzB,CAAC;AACH,CAAC"}

package/dist/cli/run.d.ts

@@ -0,0 +1,114 @@
+import { runProviderScreen } from "../machines/provider-screen.js";
+import { Writable } from "node:stream";
+import { type CunaApiClient } from "../api/client.js";
+import { type BrowserOpener } from "../auth/browser.js";
+import type { BrowserHandoffReporter } from "../auth/browser-handoff.js";
+import { type HumanAuthService } from "../auth/human-session.js";
+import { type EffectiveConfig } from "../config/config.js";
+import { type ConvergencePoller } from "../commands/commands.js";
+import { type ExitCode } from "../core/errors.js";
+import type { SecureCredentialBackend } from "../credentials/contracts.js";
+import { CredentialVault } from "../credentials/vault.js";
+import { type AgentJourneyEffects, type ReconciledAgentJourneyIntent } from "../journey/index.js";
+import { type RootJourneyRunner } from "../journey/root-entry.js";
+import { type PlatformAdapter } from "../platform/adapter.js";
+import { type RuntimeFeatureGate } from "../runtime/contracts.js";
+import { type ForegroundSessionRunner } from "../runtime/node-foreground-session.js";
+import { type MachinesExplorerRunner } from "../machines/explorer.js";
+import { type CliStreams } from "./output.js";
+export interface RunCliDependencies {
+    readonly env?: NodeJS.ProcessEnv;
+    readonly platform?: PlatformAdapter;
+    readonly streams?: CliStreams;
+    readonly fetch?: typeof globalThis.fetch;
+    readonly now?: () => number;
+    /**
+     * Test seam for every bounded read-back that waits for an accepted mutation to
+     * become visible. Production always uses a wall-clock deadline.
+     */
+    readonly convergencePoller?: ConvergencePoller;
+    readonly clientFactory?: (config: EffectiveConfig, timeoutMs: number) => CunaApiClient;
+    readonly humanAuth?: HumanAuthService;
+    readonly credentialVault?: CredentialVault;
+    readonly browser?: BrowserOpener;
+    readonly readLoginCode?: (signal?: AbortSignal) => Promise<string>;
+    readonly signal?: AbortSignal;
+    /**
+     * Test seam for the diagnostic-only local-store observation. Production CLI
+     * invocations leave this absent and construct the AES backend below. Keeping
+     * the remote bootstrap probe outside this seam lets tests prove the two
+     * independent `doctor --check-browser-login` predicates without depending on
+     * host ACL subprocess availability.
+     */
+    readonly doctorCredentialBackend?: Pick<SecureCredentialBackend, "backendId" | "probe">;
+    readonly runtimeFeatures?: readonly RuntimeFeatureGate[];
+    readonly foregroundTerminalRunner?: ForegroundSessionRunner;
+    readonly machinesExplorerRunner?: MachinesExplorerRunner;
+    readonly providerScreenRunner?: typeof runProviderScreen;
+    readonly rootJourneyRunner?: RootJourneyRunner;
+    /** Internal root-UI hint; never parsed from or printed to user input. */
+    readonly managedWorkspaceMachineId?: string;
+    /** Test seam for the folder a command resolves its workspace binding from. */
+    readonly workspaceRoot?: string;
+    readonly automaticJourneyEffectsFactory?: (input: {
+        readonly client: CunaApiClient;
+        readonly intent: ReconciledAgentJourneyIntent;
+        readonly config: EffectiveConfig;
+        readonly platform: PlatformAdapter;
+        readonly credentialMode: "automation" | "interactive";
+        readonly signal?: AbortSignal;
+    }) => AgentJourneyEffects;
+    readonly authorizeMachineCreate?: (agent: "claude-code" | "codex" | "openclaw" | "opencode", signal: AbortSignal) => Promise<boolean>;
+    /** Internal navigation context; direct command refusals retain their exit code. */
+    readonly returnToMachinesOnCreateDeclined?: boolean;
+}
+/**
+ * Render the browser handoff onto the interactive terminal.
+ *
+ * Everything here goes to **stderr**, deliberately and for two reasons.
+ *
+ * It is prompt text, not a command result, so `stdout` stays clean for the
+ * structured result the command still owes its caller. And the continuation
+ * fragment is a bearer proof: on stderr it stays out of `$(cuna login)`,
+ * pipelines and redirected logs, while `run` already refuses the whole command
+ * unless stdin, stdout **and** stderr are all TTYs — so this print cannot reach
+ * a file or a pipe without that refusal firing first.
+ *
+ * Every line is passed through the same human-output sanitizer as the rest of
+ * the CLI. The URL is already constrained by `decodeCliContinuationIssued` and
+ * by `isBoundedHttpsBrowserUrl`, so this is defence in depth rather than the
+ * only control, but a print sink for service-controlled bytes is held to the
+ * same rule everywhere else in this file.
+ */
+export declare function createTerminalBrowserHandoffReporter(output: Writable): BrowserHandoffReporter;
+/**
+ * Read the reusable browser login code without writing its bytes to terminal
+ * output. `readline.question` echoes pasted text, which is unacceptable for a
+ * credential retained in the encrypted local session store. Raw TTY input is
+ * the narrowest portable Node primitive that gives this command that boundary.
+ *
+ * This intentionally refuses pipes and terminals without `setRawMode`: a
+ * process that cannot suppress echo must not accept the durable code at all.
+ *
+ * Suppressing the bytes is not the same as suppressing all feedback. For a
+ * TYPED password an empty prompt is correct, because the person knows what they
+ * pressed. For a PASTED high-entropy code it is a dead end: nothing on screen
+ * distinguishes "the clipboard was empty", "the paste arrived", and "the paste
+ * arrived twice", so the only way to find out is to submit and read the error.
+ * So each accepted byte echoes one mask character and a backspace erases one,
+ * which keeps the display a truthful count of what will be submitted. That
+ * reveals the code's LENGTH and nothing else, and the length is already fixed
+ * and public in the `cuna_login_` format.
+ */
+export declare function readHiddenLoginCode(input: NodeJS.ReadStream, output: Writable, signal?: AbortSignal): Promise<string>;
+export declare function runCli(argv: readonly string[], dependencies?: RunCliDependencies): Promise<ExitCode>;
+export declare function memoryStreams(input?: {
+    readonly stdoutIsTTY?: boolean;
+    readonly stdinIsTTY?: boolean;
+    readonly stderrIsTTY?: boolean;
+}): {
+    readonly streams: CliStreams;
+    readonly stdout: () => string;
+    readonly stderr: () => string;
+};
+//# sourceMappingURL=run.d.ts.map

package/dist/cli/run.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"run.d.ts","sourceRoot":"","sources":["../../src/cli/run.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAC;AACnE,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAQvC,OAAO,EAAuB,KAAK,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAE3E,OAAO,EAAuB,KAAK,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAC7E,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AAEzE,OAAO,EAAgD,KAAK,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAE/G,OAAO,EAA4D,KAAK,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACrH,OAAO,EAGL,KAAK,iBAAiB,EACvB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAuE,KAAK,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AASvH,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,6BAA6B,CAAC;AAC3E,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAE1D,OAAO,EAML,KAAK,mBAAmB,EAExB,KAAK,4BAA4B,EAClC,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAGL,KAAK,iBAAiB,EACvB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAyB,KAAK,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAErF,OAAO,EAAuB,KAAK,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAEvF,OAAO,EAGL,KAAK,uBAAuB,EAE7B,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EAA2B,KAAK,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AAM/F,OAAO,EAAmD,KAAK,UAAU,EAAE,MAAM,aAAa,CAAC;AAK/F,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACjC,QAAQ,CAAC,QAAQ,CAAC,EAAE,eAAe,CAAC;IACpC,QAAQ,CAAC,OAAO,CAAC,EAAE,UAAU,CAAC;IAC9B,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,UAAU,CAAC,KAAK,CAAC;IACzC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IAC5B;;;OAGG;IACH,QAAQ,CAAC,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IAC/C,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC,MAAM,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,KAAK,aAAa,CAAC;IACvF,QAAQ,CAAC,SAAS,CAAC,EAAE,gBAAgB,CAAC;IACtC,QAAQ,CAAC,eAAe,CAAC,EAAE,eAAe,CAAC;IAC3C,QAAQ,CAAC,OAAO,CAAC,EAAE,aAAa,CAAC;IACjC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IACnE,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;IAC9B;;;;;;OAMG;IACH,QAAQ,CAAC,uBAAuB,CAAC,EAAE,IAAI,CAAC,uBAAuB,EAAE,WAAW,GAAG,OAAO,CAAC,CAAC;IACxF,QAAQ,CAAC,eAAe,CAAC,EAAE,SAAS,kBAAkB,EAAE,CAAC;IACzD,QAAQ,CAAC,wBAAwB,CAAC,EAAE,uBAAuB,CAAC;IAC5D,QAAQ,CAAC,sBAAsB,CAAC,EAAE,sBAAsB,CAAC;IACzD,QAAQ,CAAC,oBAAoB,CAAC,EAAE,OAAO,iBAAiB,CAAC;IACzD,QAAQ,CAAC,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IAC/C,yEAAyE;IACzE,QAAQ,CAAC,yBAAyB,CAAC,EAAE,MAAM,CAAC;IAC5C,8EAA8E;IAC9E,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,8BAA8B,CAAC,EAAE,CAAC,KAAK,EAAE;QAChD,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;QAC/B,QAAQ,CAAC,MAAM,EAAE,4BAA4B,CAAC;QAC9C,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAC;QACjC,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAC;QACnC,QAAQ,CAAC,cAAc,EAAE,YAAY,GAAG,aAAa,CAAC;QACtD,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;KAC/B,KAAK,mBAAmB,CAAC;IAC1B,QAAQ,CAAC,sBAAsB,CAAC,EAAE,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,GAAG,UAAU,GAAG,UAAU,EAAE,MAAM,EAAE,WAAW,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACtI,mFAAmF;IACnF,QAAQ,CAAC,gCAAgC,CAAC,EAAE,OAAO,CAAC;CACrD;AAeD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,oCAAoC,CAAC,MAAM,EAAE,QAAQ,GAAG,sBAAsB,CAyB7F;AAuCD;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAsB,mBAAmB,CACvC,KAAK,EAAE,MAAM,CAAC,UAAU,EACxB,MAAM,EAAE,QAAQ,EAChB,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,MAAM,CAAC,CA2GjB;AAylBD,wBAAsB,MAAM,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,EAAE,YAAY,GAAE,kBAAuB,GAAG,OAAO,CAAC,QAAQ,CAAC,CA2lC9G;AAED,wBAAgB,aAAa,CAAC,KAAK,CAAC,EAAE;IACpC,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC;IAC/B,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC;IAC9B,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC;CAChC,GAAG;IAAE,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,MAAM,CAAA;CAAE,CAgBjG"}