@daski/pay 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Daski
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,102 @@
+# `@daski/pay`
+
+The Daski buyer bridge. A CLI that buys outcomes, tracks orders across
+processes, and refuses to sign anything it has not independently checked.
+
+```bash
+npx @daski/pay@0.1.0 doctor --json
+```
+
+> Server proposes; buyer bridge validates against its own expectations and
+> recomputes; wallet signs; the gateway never sees the key.
+
+## Commands
+
+| Command | What it does |
+|---|---|
+| `daski doctor` | Readiness report; exits 0 only when nothing blocks. Every issue carries a remediation |
+| `daski wallet create` | Generate a local EOA — interactive human confirmation required |
+| `daski wallet address` / `balance` | The active payer address; native + USDC balances |
+| `daski buy --provider <id> --outcome <id> --request <file.json>` | Challenge → approve → validate → sign → submit → record |
+| `daski order status <handle>` | Read an order's state |
+| `daski order artifact <handle>` | Write the result **to a file**, never to stdout |
+| `daski order confirm/input/cancel <handle>` | Mutating lifecycle actions |
+| `daski sign-payment --challenge <file.json>` | Validate, recompute, sign; print the exact `paymentPayload` |
+
+All support `--json`. Global flags: `--profile`, `--signer <local|cdp|circle>`,
+`--cdp-account`, `--circle-wallet`, `--max-per-order`, `--session-cap`.
+
+## Spend caps are yours, not the agent's
+
+`maxPerOrderUsdc`, `sessionCapUsdc` and `requireApprovalAboveUsdc` live only
+in `~/.daski/config.json`. **No flag and no environment variable can raise
+them.** `--max-per-order` and `--session-cap` may lower a cap for a single
+invocation; a value above the configured one is refused.
+
+Above `requireApprovalAboveUsdc`, `daski buy` shows the approval summary and
+waits for a human. In `--json` or non-TTY mode it does not quietly proceed —
+it exits `2` and explains how a human can approve.
+
+The running session total is read from `~/.daski/orders.json`, so the cap
+holds across processes rather than resetting whenever an agent restarts.
+
+## Orders survive the process that placed them
+
+Every order is recorded in `~/.daski/orders.json` — handle, intent id,
+provider/outcome, amount, state, read capability and expiry. `daski order
+status` works from a cold start with nothing but the handle.
+
+The intent is recorded **before** the signature goes out, which is what makes
+an interrupted purchase recoverable.
+
+## Interrupted purchases are reconciled, never re-signed
+
+On a timeout, a `PAYMENT_PENDING_RECONCILIATION`, or a transport drop after
+submit, the CLI replays the *identical* signed authorization — idempotent by
+the gateway's own published retry policy — and corroborates against the
+payer's own order history. Only when both agree no order exists does it report
+the purchase as safely retryable.
+
+A second signature over a fresh challenge is a second order, and a second
+charge. See [reconciliation](../../docs/policy.md#reconciliation).
+
+## Artifacts are written, not printed
+
+`daski order artifact` writes the provider's bytes to a file and prints only
+the envelope metadata. Provider results are validated but untrusted, and both
+a terminal and an agent's context window are interpreters: dumping untrusted
+content into one is how "here is your result" becomes "here are your
+instructions".
+
+## Signers
+
+`local` is the default and the one adapter the conformance suite has verified.
+`cdp` and `circle` are implemented and marked *candidate pending conformance*
+until a run passes; `daski doctor` says so rather than implying otherwise. The
+Circle adapter accepts EOA wallets only: a smart-contract account signs via
+ERC-1271, which the gateway's plain ECDSA recovery cannot verify. Every
+adapter has to pass the doctor self-test — sign a fixed, unsettleable vector
+that recovers to its own address with a low-s signature — before it is
+reported usable.
+
+See [signer adapters](../../docs/signers.md).
+
+## Keys
+
+OS keychain by default, scrypt+AES-256-GCM file as a fallback,
+`DASKI_PAYER_PRIVATE_KEY` for sandbox development (which `doctor` flags every
+time). Keys never appear in logs, JSON output, or error messages.
+
+See [key storage](../../docs/keys.md).
+
+## Documentation
+
+[Policy validator](../../docs/policy.md) ·
+[Configuration](../../docs/config.md) ·
+[Keys](../../docs/keys.md) ·
+[Signers](../../docs/signers.md) ·
+[Conformance](../../docs/conformance.md)
+
+## License
+
+MIT

package/dist/bin/daski.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=daski.d.ts.map

package/dist/bin/daski.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"daski.d.ts","sourceRoot":"","sources":["../../src/bin/daski.ts"],"names":[],"mappings":""}

package/dist/bin/daski.js

@@ -0,0 +1,187 @@
+#!/usr/bin/env node
+/**
+ * The `daski` entry point.
+ *
+ * Every command supports `--json`. Every failure exits non-zero with a code
+ * and a remediation. Nothing here signs anything: the commands do, and only
+ * through the §4 validator.
+ */
+import { assertKnownFlags, boolFlag, parseArgs, requireFlag, stringFlag } from "../cli/args.js";
+import { CliError } from "../cli/errors.js";
+import { emit, emitError } from "../cli/output.js";
+import { runBuy } from "../commands/buy.js";
+import { runDoctor } from "../commands/doctor.js";
+import { orderArtifact, orderCancel, orderConfirm, orderInput, orderStatus, } from "../commands/order.js";
+import { runSignPayment } from "../commands/signPayment.js";
+import { createWallet, walletAddress, walletBalance } from "../commands/wallet.js";
+import { CLI_VERSION } from "../version.js";
+/** Flags every command accepts. */
+const GLOBAL_FLAGS = [
+    "json", "profile", "signer", "cdp-account", "circle-wallet",
+    "max-per-order", "session-cap",
+];
+const USAGE = `daski ${CLI_VERSION} — the Daski buyer bridge
+
+  The server proposes; this bridge validates against its own expectations and
+  recomputes; your wallet signs; the gateway never sees your key.
+
+Commands
+  doctor                              Readiness report, with a remediation per issue
+  wallet create                       Generate a local EOA (requires human confirmation)
+  wallet address                      Print the active payer address
+  wallet balance                      Print native + USDC balances
+  buy --provider <id> --outcome <id> --request <file.json> [--payer <addr>]
+                                      Challenge, approve, validate, sign, submit, record
+  order status <handle>               Read an order's state
+  order artifact <handle> [--output <file>]
+                                      Write the result bytes to a file (never to stdout)
+  order confirm <handle>              Confirm delivery
+  order input <handle> --request <file.json>
+                                      Submit requested customer input
+  order cancel <handle>               Request cancellation
+  sign-payment --challenge <file.json> [--provider <id> --outcome <id>]
+                                      Validate, recompute, sign; print the paymentPayload
+
+Global flags
+  --json                              Machine-readable output
+  --profile <name>                    Config profile (default: sandbox)
+  --signer <local|cdp|circle>         Override the profile's signer
+  --cdp-account <name>                CDP account for --signer cdp (or DASKI_CDP_ACCOUNT)
+  --circle-wallet <id>                Circle wallet id for --signer circle (or DASKI_CIRCLE_WALLET)
+  --max-per-order <usdc>              Lower the per-order cap for this run only
+  --session-cap <usdc>                Lower the session cap for this run only
+
+Caps live in ~/.daski/config.json and are human-owned: a flag may lower one,
+never raise it. See https://github.com/daski-io/buyer#readme
+`;
+async function main(argv) {
+    const { command, flags } = parseArgs(argv);
+    const json = boolFlag(flags, "json");
+    const output = { json };
+    if (command.length === 0 || command[0] === "help" || boolFlag(flags, "help")) {
+        process.stdout.write(USAGE);
+        return 0;
+    }
+    if (command[0] === "version" || boolFlag(flags, "version")) {
+        emit({ version: CLI_VERSION }, output);
+        return 0;
+    }
+    const shared = {
+        profile: stringFlag(flags, "profile"),
+        signerOverride: stringFlag(flags, "signer"),
+        cdpAccount: stringFlag(flags, "cdp-account"),
+        circleWallet: stringFlag(flags, "circle-wallet"),
+        maxPerOrderUsdc: stringFlag(flags, "max-per-order"),
+        sessionCapUsdc: stringFlag(flags, "session-cap"),
+    };
+    switch (command[0]) {
+        case "doctor": {
+            assertKnownFlags(flags, GLOBAL_FLAGS);
+            const report = await runDoctor(shared);
+            emit({ ...report }, output);
+            return report.ok ? 0 : 1;
+        }
+        case "wallet": {
+            assertKnownFlags(flags, [...GLOBAL_FLAGS, "yes-human-approved"]);
+            const walletOptions = {
+                profile: shared.profile,
+                signerOverride: shared.signerOverride,
+                cdpAccount: shared.cdpAccount,
+                circleWallet: shared.circleWallet,
+                yesHumanApproved: boolFlag(flags, "yes-human-approved"),
+            };
+            switch (command[1]) {
+                case "create":
+                    emit(await createWallet(walletOptions), output);
+                    return 0;
+                case "address":
+                    emit(await walletAddress(walletOptions), output);
+                    return 0;
+                case "balance":
+                    emit(await walletBalance(walletOptions), output);
+                    return 0;
+                default:
+                    throw unknownSubcommand("wallet", command[1], ["create", "address", "balance"]);
+            }
+        }
+        case "buy": {
+            assertKnownFlags(flags, [...GLOBAL_FLAGS, "provider", "outcome", "request", "payer", "legacy-arg", "yes"]);
+            const result = await runBuy({
+                ...shared,
+                providerAgentId: requireFlag(flags, "provider"),
+                outcomeId: requireFlag(flags, "outcome"),
+                requestFile: requireFlag(flags, "request"),
+                payer: stringFlag(flags, "payer"),
+                legacyArg: boolFlag(flags, "legacy-arg"),
+                yes: boolFlag(flags, "yes"),
+                json,
+            });
+            emit(result, output);
+            return 0;
+        }
+        case "order": {
+            const handle = command[2];
+            if (!handle) {
+                throw new CliError({
+                    code: "DASKI_ORDER_HANDLE_REQUIRED",
+                    message: `\`daski order ${command[1] ?? "<action>"}\` needs an order handle.`,
+                    remediation: "Pass the handle printed by `daski buy`, or its intent id.",
+                });
+            }
+            const base = { ...shared, handle, json };
+            switch (command[1]) {
+                case "status":
+                    assertKnownFlags(flags, GLOBAL_FLAGS);
+                    emit(await orderStatus(base), output);
+                    return 0;
+                case "artifact":
+                    assertKnownFlags(flags, [...GLOBAL_FLAGS, "output"]);
+                    emit(await orderArtifact({ ...base, output: stringFlag(flags, "output") }), output);
+                    return 0;
+                case "confirm":
+                    assertKnownFlags(flags, GLOBAL_FLAGS);
+                    emit(await orderConfirm(base), output);
+                    return 0;
+                case "cancel":
+                    assertKnownFlags(flags, GLOBAL_FLAGS);
+                    emit(await orderCancel(base), output);
+                    return 0;
+                case "input":
+                    assertKnownFlags(flags, [...GLOBAL_FLAGS, "request"]);
+                    emit(await orderInput({ ...base, requestFile: requireFlag(flags, "request") }), output);
+                    return 0;
+                default:
+                    throw unknownSubcommand("order", command[1], ["status", "artifact", "confirm", "input", "cancel"]);
+            }
+        }
+        case "sign-payment": {
+            assertKnownFlags(flags, [...GLOBAL_FLAGS, "challenge", "provider", "outcome"]);
+            emit(await runSignPayment({
+                ...shared,
+                challengeFile: requireFlag(flags, "challenge"),
+                providerAgentId: stringFlag(flags, "provider"),
+                outcomeId: stringFlag(flags, "outcome"),
+                json,
+            }), output);
+            return 0;
+        }
+        default:
+            throw new CliError({
+                code: "DASKI_UNKNOWN_COMMAND",
+                message: `Unknown command "${command[0]}".`,
+                remediation: "Run `daski help` to see the available commands.",
+            });
+    }
+}
+function unknownSubcommand(group, given, known) {
+    return new CliError({
+        code: "DASKI_UNKNOWN_SUBCOMMAND",
+        message: `Unknown \`daski ${group}\` subcommand: ${given ?? "(none)"}`,
+        remediation: `Use one of: ${known.map((name) => `daski ${group} ${name}`).join(", ")}`,
+    });
+}
+const json = process.argv.includes("--json");
+main(process.argv.slice(2))
+    .then((code) => { process.exitCode = code; })
+    .catch((error) => { process.exitCode = emitError(error, { json }); });
+//# sourceMappingURL=daski.js.map

package/dist/bin/daski.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"daski.js","sourceRoot":"","sources":["../../src/bin/daski.ts"],"names":[],"mappings":";AACA;;;;;;GAMG;AACH,OAAO,EAAE,gBAAgB,EAAE,QAAQ,EAAE,SAAS,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAChG,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAClD,OAAO,EACL,aAAa,EAAE,WAAW,EAAE,YAAY,EAAE,UAAU,EAAE,WAAW,GAClE,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACnF,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAE5C,mCAAmC;AACnC,MAAM,YAAY,GAAG;IACnB,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,aAAa,EAAE,eAAe;IAC3D,eAAe,EAAE,aAAa;CACtB,CAAC;AAEX,MAAM,KAAK,GAAG,SAAS,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAiCjC,CAAC;AAEF,KAAK,UAAU,IAAI,CAAC,IAAc;IAChC,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC3C,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACrC,MAAM,MAAM,GAAG,EAAE,IAAI,EAAE,CAAC;IAExB,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,MAAM,IAAI,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,CAAC;QAC7E,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC5B,OAAO,CAAC,CAAC;IACX,CAAC;IACD,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,SAAS,IAAI,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC,EAAE,CAAC;QAC3D,IAAI,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,EAAE,MAAM,CAAC,CAAC;QACvC,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,MAAM,GAAG;QACb,OAAO,EAAE,UAAU,CAAC,KAAK,EAAE,SAAS,CAAC;QACrC,cAAc,EAAE,UAAU,CAAC,KAAK,EAAE,QAAQ,CAAC;QAC3C,UAAU,EAAE,UAAU,CAAC,KAAK,EAAE,aAAa,CAAC;QAC5C,YAAY,EAAE,UAAU,CAAC,KAAK,EAAE,eAAe,CAAC;QAChD,eAAe,EAAE,UAAU,CAAC,KAAK,EAAE,eAAe,CAAC;QACnD,cAAc,EAAE,UAAU,CAAC,KAAK,EAAE,aAAa,CAAC;KACjD,CAAC;IAEF,QAAQ,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QACnB,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,gBAAgB,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;YACtC,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC,CAAC;YACvC,IAAI,CAAC,EAAE,GAAG,MAAM,EAAE,EAAE,MAAM,CAAC,CAAC;YAC5B,OAAO,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3B,CAAC;QAED,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,gBAAgB,CAAC,KAAK,EAAE,CAAC,GAAG,YAAY,EAAE,oBAAoB,CAAC,CAAC,CAAC;YACjE,MAAM,aAAa,GAAG;gBACpB,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,cAAc,EAAE,MAAM,CAAC,cAAc;gBACrC,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,YAAY,EAAE,MAAM,CAAC,YAAY;gBACjC,gBAAgB,EAAE,QAAQ,CAAC,KAAK,EAAE,oBAAoB,CAAC;aACxD,CAAC;YACF,QAAQ,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;gBACnB,KAAK,QAAQ;oBAAE,IAAI,CAAC,MAAM,YAAY,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC,CAAC;oBAAC,OAAO,CAAC,CAAC;gBACzE,KAAK,SAAS;oBAAE,IAAI,CAAC,MAAM,aAAa,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC,CAAC;oBAAC,OAAO,CAAC,CAAC;gBAC3E,KAAK,SAAS;oBAAE,IAAI,CAAC,MAAM,aAAa,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC,CAAC;oBAAC,OAAO,CAAC,CAAC;gBAC3E;oBACE,MAAM,iBAAiB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC;YACpF,CAAC;QACH,CAAC;QAED,KAAK,KAAK,CAAC,CAAC,CAAC;YACX,gBAAgB,CAAC,KAAK,EAAE,CAAC,GAAG,YAAY,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,YAAY,EAAE,KAAK,CAAC,CAAC,CAAC;YAC3G,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC;gBAC1B,GAAG,MAAM;gBACT,eAAe,EAAE,WAAW,CAAC,KAAK,EAAE,UAAU,CAAC;gBAC/C,SAAS,EAAE,WAAW,CAAC,KAAK,EAAE,SAAS,CAAC;gBACxC,WAAW,EAAE,WAAW,CAAC,KAAK,EAAE,SAAS,CAAC;gBAC1C,KAAK,EAAE,UAAU,CAAC,KAAK,EAAE,OAAO,CAAC;gBACjC,SAAS,EAAE,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;gBACxC,GAAG,EAAE,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;gBAC3B,IAAI;aACL,CAAC,CAAC;YACH,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YACrB,OAAO,CAAC,CAAC;QACX,CAAC;QAED,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;YAC1B,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,MAAM,IAAI,QAAQ,CAAC;oBACjB,IAAI,EAAE,6BAA6B;oBACnC,OAAO,EAAE,iBAAiB,OAAO,CAAC,CAAC,CAAC,IAAI,UAAU,2BAA2B;oBAC7E,WAAW,EAAE,2DAA2D;iBACzE,CAAC,CAAC;YACL,CAAC;YACD,MAAM,IAAI,GAAG,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;YACzC,QAAQ,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;gBACnB,KAAK,QAAQ;oBACX,gBAAgB,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;oBACtC,IAAI,CAAC,MAAM,WAAW,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;oBACtC,OAAO,CAAC,CAAC;gBACX,KAAK,UAAU;oBACb,gBAAgB,CAAC,KAAK,EAAE,CAAC,GAAG,YAAY,EAAE,QAAQ,CAAC,CAAC,CAAC;oBACrD,IAAI,CAAC,MAAM,aAAa,CAAC,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;oBACpF,OAAO,CAAC,CAAC;gBACX,KAAK,SAAS;oBACZ,gBAAgB,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;oBACtC,IAAI,CAAC,MAAM,YAAY,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;oBACvC,OAAO,CAAC,CAAC;gBACX,KAAK,QAAQ;oBACX,gBAAgB,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;oBACtC,IAAI,CAAC,MAAM,WAAW,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;oBACtC,OAAO,CAAC,CAAC;gBACX,KAAK,OAAO;oBACV,gBAAgB,CAAC,KAAK,EAAE,CAAC,GAAG,YAAY,EAAE,SAAS,CAAC,CAAC,CAAC;oBACtD,IAAI,CAAC,MAAM,UAAU,CAAC,EAAE,GAAG,IAAI,EAAE,WAAW,EAAE,WAAW,CAAC,KAAK,EAAE,SAAS,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;oBACxF,OAAO,CAAC,CAAC;gBACX;oBACE,MAAM,iBAAiB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,EACzC,CAAC,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;YAC5D,CAAC;QACH,CAAC;QAED,KAAK,cAAc,CAAC,CAAC,CAAC;YACpB,gBAAgB,CAAC,KAAK,EAAE,CAAC,GAAG,YAAY,EAAE,WAAW,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC;YAC/E,IAAI,CAAC,MAAM,cAAc,CAAC;gBACxB,GAAG,MAAM;gBACT,aAAa,EAAE,WAAW,CAAC,KAAK,EAAE,WAAW,CAAC;gBAC9C,eAAe,EAAE,UAAU,CAAC,KAAK,EAAE,UAAU,CAAC;gBAC9C,SAAS,EAAE,UAAU,CAAC,KAAK,EAAE,SAAS,CAAC;gBACvC,IAAI;aACL,CAAC,EAAE,MAAM,CAAC,CAAC;YACZ,OAAO,CAAC,CAAC;QACX,CAAC;QAED;YACE,MAAM,IAAI,QAAQ,CAAC;gBACjB,IAAI,EAAE,uBAAuB;gBAC7B,OAAO,EAAE,oBAAoB,OAAO,CAAC,CAAC,CAAC,IAAI;gBAC3C,WAAW,EAAE,iDAAiD;aAC/D,CAAC,CAAC;IACP,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAa,EAAE,KAAyB,EAAE,KAAe;IAClF,OAAO,IAAI,QAAQ,CAAC;QAClB,IAAI,EAAE,0BAA0B;QAChC,OAAO,EAAE,mBAAmB,KAAK,kBAAkB,KAAK,IAAI,QAAQ,EAAE;QACtE,WAAW,EAAE,eAAe,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,KAAK,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;KACvF,CAAC,CAAC;AACL,CAAC;AAED,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AAC7C,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;KACxB,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,GAAG,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;KAC5C,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE,GAAG,OAAO,CAAC,QAAQ,GAAG,SAAS,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC"}

package/dist/cli/args.d.ts

@@ -0,0 +1,11 @@
+export interface ParsedArgs {
+    command: string[];
+    flags: Record<string, string | boolean>;
+}
+export declare function parseArgs(argv: string[]): ParsedArgs;
+export declare function stringFlag(flags: Record<string, string | boolean>, name: string): string | undefined;
+export declare function boolFlag(flags: Record<string, string | boolean>, name: string): boolean;
+export declare function requireFlag(flags: Record<string, string | boolean>, name: string): string;
+/** Rejects flags the command does not understand, rather than ignoring them. */
+export declare function assertKnownFlags(flags: Record<string, string | boolean>, known: readonly string[]): void;
+//# sourceMappingURL=args.d.ts.map

package/dist/cli/args.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"args.d.ts","sourceRoot":"","sources":["../../src/cli/args.ts"],"names":[],"mappings":"AASA,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC;CACzC;AAED,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,UAAU,CAuBpD;AAED,wBAAgB,UAAU,CACxB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,EACvC,IAAI,EAAE,MAAM,GACX,MAAM,GAAG,SAAS,CAWpB;AAED,wBAAgB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAEvF;AAED,wBAAgB,WAAW,CACzB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,EACvC,IAAI,EAAE,MAAM,GACX,MAAM,CAUR;AAED,gFAAgF;AAChF,wBAAgB,gBAAgB,CAC9B,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,EACvC,KAAK,EAAE,SAAS,MAAM,EAAE,GACvB,IAAI,CAWN"}

package/dist/cli/args.js

@@ -0,0 +1,82 @@
+/**
+ * A small, explicit argument parser.
+ *
+ * Explicit because the flag surface is a security boundary: an unknown flag is
+ * an error rather than something silently ignored, so a typo in
+ * `--max-per-order` can never be mistaken for a cap that was applied.
+ */
+import { CliError } from "./errors.js";
+export function parseArgs(argv) {
+    const command = [];
+    const flags = {};
+    let index = 0;
+    for (; index < argv.length; index += 1) {
+        const token = argv[index];
+        if (token === "--") {
+            index += 1;
+            break;
+        }
+        if (!token.startsWith("-")) {
+            command.push(token);
+            continue;
+        }
+        const name = token.replace(/^--?/, "");
+        const [key, inlineValue] = name.includes("=")
+            ? [name.slice(0, name.indexOf("=")), name.slice(name.indexOf("=") + 1)]
+            : [name, undefined];
+        if (inlineValue !== undefined) {
+            flags[key] = inlineValue;
+            continue;
+        }
+        const next = argv[index + 1];
+        if (next !== undefined && !next.startsWith("-")) {
+            flags[key] = next;
+            index += 1;
+        }
+        else {
+            flags[key] = true;
+        }
+    }
+    command.push(...argv.slice(index));
+    return { command, flags };
+}
+export function stringFlag(flags, name) {
+    const value = flags[name];
+    if (value === undefined)
+        return undefined;
+    if (typeof value !== "string") {
+        throw new CliError({
+            code: "DASKI_FLAG_NEEDS_VALUE",
+            message: `--${name} needs a value.`,
+            remediation: `Pass a value, e.g. --${name} <value>`,
+        });
+    }
+    return value;
+}
+export function boolFlag(flags, name) {
+    return flags[name] === true || flags[name] === "true";
+}
+export function requireFlag(flags, name) {
+    const value = stringFlag(flags, name);
+    if (value === undefined) {
+        throw new CliError({
+            code: "DASKI_FLAG_REQUIRED",
+            message: `--${name} is required.`,
+            remediation: `Re-run with --${name} <value>. See \`daski help\`.`,
+        });
+    }
+    return value;
+}
+/** Rejects flags the command does not understand, rather than ignoring them. */
+export function assertKnownFlags(flags, known) {
+    const unknown = Object.keys(flags).filter((flag) => !known.includes(flag));
+    if (unknown.length > 0) {
+        throw new CliError({
+            code: "DASKI_UNKNOWN_FLAG",
+            message: `Unknown flag${unknown.length > 1 ? "s" : ""}: ${unknown.map((f) => `--${f}`).join(", ")}`,
+            remediation: `This command accepts: ${known.map((f) => `--${f}`).join(", ")}. ` +
+                "An ignored flag could look like an applied spend cap, so unknown flags are refused.",
+        });
+    }
+}
+//# sourceMappingURL=args.js.map

package/dist/cli/args.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"args.js","sourceRoot":"","sources":["../../src/cli/args.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAOvC,MAAM,UAAU,SAAS,CAAC,IAAc;IACtC,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,KAAK,GAAqC,EAAE,CAAC;IACnD,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,OAAO,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACvC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAE,CAAC;QAC3B,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YAAC,KAAK,IAAI,CAAC,CAAC;YAAC,MAAM;QAAC,CAAC;QAC1C,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAAC,SAAS;QAAC,CAAC;QAC9D,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACvC,MAAM,CAAC,GAAG,EAAE,WAAW,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;YAC3C,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;YACvE,CAAC,CAAC,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QACtB,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAAC,KAAK,CAAC,GAAG,CAAC,GAAG,WAAW,CAAC;YAAC,SAAS;QAAC,CAAC;QACtE,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;QAC7B,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAChD,KAAK,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;YAClB,KAAK,IAAI,CAAC,CAAC;QACb,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;QACpB,CAAC;IACH,CAAC;IACD,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;IACnC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAC5B,CAAC;AAED,MAAM,UAAU,UAAU,CACxB,KAAuC,EACvC,IAAY;IAEZ,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;IAC1B,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,IAAI,QAAQ,CAAC;YACjB,IAAI,EAAE,wBAAwB;YAC9B,OAAO,EAAE,KAAK,IAAI,iBAAiB;YACnC,WAAW,EAAE,wBAAwB,IAAI,UAAU;SACpD,CAAC,CAAC;IACL,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,KAAuC,EAAE,IAAY;IAC5E,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,MAAM,CAAC;AACxD,CAAC;AAED,MAAM,UAAU,WAAW,CACzB,KAAuC,EACvC,IAAY;IAEZ,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACtC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,MAAM,IAAI,QAAQ,CAAC;YACjB,IAAI,EAAE,qBAAqB;YAC3B,OAAO,EAAE,KAAK,IAAI,eAAe;YACjC,WAAW,EAAE,iBAAiB,IAAI,+BAA+B;SAClE,CAAC,CAAC;IACL,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,gBAAgB,CAC9B,KAAuC,EACvC,KAAwB;IAExB,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;IAC3E,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,QAAQ,CAAC;YACjB,IAAI,EAAE,oBAAoB;YAC1B,OAAO,EAAE,eAAe,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;YACnG,WAAW,EACT,yBAAyB,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;gBAClE,qFAAqF;SACxF,CAAC,CAAC;IACL,CAAC;AACH,CAAC"}

package/dist/cli/errors.d.ts

@@ -0,0 +1,24 @@
+/**
+ * A CLI failure the operator can act on: a stable code, a sentence, and the
+ * exact next step. Anything that reaches the user without a remediation is a
+ * bug in this file's callers, not a UX preference.
+ */
+export interface CliErrorOptions {
+    code: string;
+    message: string;
+    remediation: string;
+    /** Extra machine-readable context. Never key material. */
+    details?: Record<string, unknown>;
+    /** Process exit code; defaults to 1. */
+    exitCode?: number;
+}
+export declare class CliError extends Error {
+    readonly name = "CliError";
+    readonly code: string;
+    readonly remediation: string;
+    readonly details: Record<string, unknown>;
+    readonly exitCode: number;
+    constructor(options: CliErrorOptions);
+    toJSON(): Record<string, unknown>;
+}
+//# sourceMappingURL=errors.d.ts.map

package/dist/cli/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/cli/errors.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,0DAA0D;IAC1D,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,wCAAwC;IACxC,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,qBAAa,QAAS,SAAQ,KAAK;IACjC,SAAkB,IAAI,cAAc;IACpC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC1C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;gBAEd,OAAO,EAAE,eAAe;IAQpC,MAAM,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAQlC"}

package/dist/cli/errors.js

@@ -0,0 +1,23 @@
+export class CliError extends Error {
+    name = "CliError";
+    code;
+    remediation;
+    details;
+    exitCode;
+    constructor(options) {
+        super(options.message);
+        this.code = options.code;
+        this.remediation = options.remediation;
+        this.details = options.details ?? {};
+        this.exitCode = options.exitCode ?? 1;
+    }
+    toJSON() {
+        return {
+            error: this.code,
+            message: this.message,
+            remediation: this.remediation,
+            ...this.details,
+        };
+    }
+}
+//# sourceMappingURL=errors.js.map

package/dist/cli/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/cli/errors.ts"],"names":[],"mappings":"AAeA,MAAM,OAAO,QAAS,SAAQ,KAAK;IACf,IAAI,GAAG,UAAU,CAAC;IAC3B,IAAI,CAAS;IACb,WAAW,CAAS;IACpB,OAAO,CAA0B;IACjC,QAAQ,CAAS;IAE1B,YAAY,OAAwB;QAClC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACvB,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;QACzB,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;QACvC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC;QACrC,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,CAAC,CAAC;IACxC,CAAC;IAED,MAAM;QACJ,OAAO;YACL,KAAK,EAAE,IAAI,CAAC,IAAI;YAChB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,GAAG,IAAI,CAAC,OAAO;SAChB,CAAC;IACJ,CAAC;CACF"}

package/dist/cli/output.d.ts

@@ -0,0 +1,8 @@
+export interface OutputOptions {
+    json: boolean;
+}
+export declare function emit(value: Record<string, unknown>, options: OutputOptions): void;
+/** Human output goes to stdout; progress and prompts go to stderr. */
+export declare function note(message: string): void;
+export declare function emitError(error: unknown, options: OutputOptions): number;
+//# sourceMappingURL=output.d.ts.map

package/dist/cli/output.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"output.d.ts","sourceRoot":"","sources":["../../src/cli/output.ts"],"names":[],"mappings":"AAMA,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,OAAO,CAAC;CACf;AAED,wBAAgB,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,EAAE,aAAa,GAAG,IAAI,CAMjF;AAED,sEAAsE;AACtE,wBAAgB,IAAI,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAE1C;AAED,wBAAgB,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,aAAa,GAAG,MAAM,CAaxE"}

package/dist/cli/output.js

@@ -0,0 +1,76 @@
+/**
+ * Output. Two modes, one rule: everything is redacted on the way out.
+ */
+import { redactValue } from "./redact.js";
+import { CliError } from "./errors.js";
+export function emit(value, options) {
+    if (options.json) {
+        process.stdout.write(`${JSON.stringify(redactValue(value), null, 2)}\n`);
+        return;
+    }
+    process.stdout.write(`${renderHuman(redactValue(value))}\n`);
+}
+/** Human output goes to stdout; progress and prompts go to stderr. */
+export function note(message) {
+    process.stderr.write(`${message}\n`);
+}
+export function emitError(error, options) {
+    const payload = errorPayload(error);
+    if (options.json) {
+        process.stdout.write(`${JSON.stringify(redactValue(payload), null, 2)}\n`);
+    }
+    else {
+        const redacted = redactValue(payload);
+        process.stderr.write(`error: ${String(redacted.message)}\n`);
+        if (redacted.check)
+            process.stderr.write(`  failed check: ${String(redacted.check)}\n`);
+        if (redacted.expected)
+            process.stderr.write(`  expected: ${String(redacted.expected)}\n`);
+        if (redacted.actual)
+            process.stderr.write(`  actual:   ${String(redacted.actual)}\n`);
+        process.stderr.write(`  fix: ${String(redacted.remediation)}\n`);
+    }
+    return error instanceof CliError ? error.exitCode : 1;
+}
+function errorPayload(error) {
+    if (error && typeof error.toJSON === "function") {
+        return error.toJSON();
+    }
+    return {
+        error: "DASKI_UNEXPECTED_ERROR",
+        message: error instanceof Error ? error.message : String(error),
+        remediation: "Re-run with --json for the full payload, and report this if it persists.",
+    };
+}
+function renderHuman(value, indent = "") {
+    const lines = [];
+    for (const [key, item] of Object.entries(value)) {
+        if (item === undefined)
+            continue;
+        if (item && typeof item === "object" && !Array.isArray(item)) {
+            lines.push(`${indent}${key}:`);
+            lines.push(renderHuman(item, `${indent}  `));
+            continue;
+        }
+        if (Array.isArray(item)) {
+            if (item.length === 0) {
+                lines.push(`${indent}${key}: (none)`);
+                continue;
+            }
+            lines.push(`${indent}${key}:`);
+            for (const entry of item) {
+                if (entry && typeof entry === "object") {
+                    lines.push(renderHuman(entry, `${indent}  - `.slice(0, -2) + "  "));
+                    lines.push("");
+                }
+                else {
+                    lines.push(`${indent}  - ${String(entry)}`);
+                }
+            }
+            continue;
+        }
+        lines.push(`${indent}${key}: ${String(item)}`);
+    }
+    return lines.filter((line, index, all) => line !== "" || all[index + 1] !== undefined).join("\n");
+}
+//# sourceMappingURL=output.js.map

package/dist/cli/output.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"output.js","sourceRoot":"","sources":["../../src/cli/output.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAMvC,MAAM,UAAU,IAAI,CAAC,KAA8B,EAAE,OAAsB;IACzE,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QACjB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;QACzE,OAAO;IACT,CAAC;IACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,WAAW,CAAC,WAAW,CAAC,KAAK,CAA4B,CAAC,IAAI,CAAC,CAAC;AAC1F,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,IAAI,CAAC,OAAe;IAClC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,OAAO,IAAI,CAAC,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,KAAc,EAAE,OAAsB;IAC9D,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;IACpC,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QACjB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;IAC7E,CAAC;SAAM,CAAC;QACN,MAAM,QAAQ,GAAG,WAAW,CAAC,OAAO,CAA4B,CAAC;QACjE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC7D,IAAI,QAAQ,CAAC,KAAK;YAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,mBAAmB,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACxF,IAAI,QAAQ,CAAC,QAAQ;YAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,eAAe,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC1F,IAAI,QAAQ,CAAC,MAAM;YAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,eAAe,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACtF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,KAAK,YAAY,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;AACxD,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,IAAI,KAAK,IAAI,OAAQ,KAA8B,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;QAC1E,OAAQ,KAA+C,CAAC,MAAM,EAAE,CAAC;IACnE,CAAC;IACD,OAAO;QACL,KAAK,EAAE,wBAAwB;QAC/B,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;QAC/D,WAAW,EAAE,0EAA0E;KACxF,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,KAA8B,EAAE,MAAM,GAAG,EAAE;IAC9D,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAChD,IAAI,IAAI,KAAK,SAAS;YAAE,SAAS;QACjC,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7D,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC;YAC/B,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,IAA+B,EAAE,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC;YACxE,SAAS;QACX,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YACxB,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAAC,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,GAAG,GAAG,UAAU,CAAC,CAAC;gBAAC,SAAS;YAAC,CAAC;YAC3E,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC;YAC/B,KAAK,MAAM,KAAK,IAAI,IAAI,EAAE,CAAC;gBACzB,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;oBACvC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,KAAgC,EAAE,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;oBAC/F,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBACjB,CAAC;qBAAM,CAAC;oBACN,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,OAAO,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;gBAC9C,CAAC;YACH,CAAC;YACD,SAAS;QACX,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,GAAG,GAAG,KAAK,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjD,CAAC;IACD,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,IAAI,KAAK,EAAE,IAAI,GAAG,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACpG,CAAC"}

package/dist/cli/prompt.d.ts

@@ -0,0 +1,12 @@
+export declare function isInteractive(): boolean;
+/** Asks a yes/no question. Anything but an explicit yes is a no. */
+export declare function confirm(question: string): Promise<boolean>;
+/** Requires the operator to retype an exact phrase. Used for key creation. */
+export declare function confirmPhrase(question: string, phrase: string): Promise<boolean>;
+/**
+ * Reads a passphrase without echoing it. The typed characters are never
+ * written back to the terminal and never leave this function except as the
+ * return value.
+ */
+export declare function readPassphrase(prompt: string): Promise<string>;
+//# sourceMappingURL=prompt.d.ts.map

package/dist/cli/prompt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompt.d.ts","sourceRoot":"","sources":["../../src/cli/prompt.ts"],"names":[],"mappings":"AAcA,wBAAgB,aAAa,IAAI,OAAO,CAEvC;AAED,oEAAoE;AACpE,wBAAsB,OAAO,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAShE;AAED,8EAA8E;AAC9E,wBAAsB,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAStF;AAED;;;;GAIG;AACH,wBAAsB,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAqDpE"}