@deslop/stash 0.1.1089 → 0.1.1091

package/README.md

@@ -1,7 +1,10 @@
 # @deslop/stash
 
-Saves a link or text to the owner's stash server over the tailnet and prints the read, tagged note as Markdown.
+Saves a link or text to the owner's stash server and prints the read, tagged note as Markdown.
 
 ```bash
+vpx @deslop/stash@latest login '<api key>'
 vpx @deslop/stash@latest save '<link or text>' [--server <url>]
 ```
+
+`login` keeps an API key created at https://auth.mp281x.xyz in `~/.config/stash/api-key`.

package/dist/cli.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env -S node --max-old-space-size=16384 --heapsnapshot-near-heap-limit=3 --report-on-fatalerror
-import { $o as makeSpanScoped, $s as withFiber, $t as String$6, Ad as exists, Ao as flatMap$1, As as serviceOption, Bd as isNone, C as runMain, Cd as getOrUndefinedUnsafe, Co as delay, Ct as HttpClientErrorSchema, D as QuitError, Dc as replace, Do as fail$1, E as layer, Es as runForkWith, Eu as getSomes, F as String$7, Ff as identity, Fn as tag, Fo as forever, Fs as sync$1, Ft as Defect, G as RpcSerialization, Gd as match$1, Go as interruptible, H as Stdio, Hi as runHead, Ho as ignore, Id as fromUndefinedOr, If as pipe, Il as die, Kd as none, Ko as isEffect, Ks as uninterruptibleMask, L as option, Lc as round, Ld as getOrElse, Lf as pipeArguments, Ll as fail, Ln as toCodecStringTree, Lo as forkIn, Ls as tapCause, Lt as Error$1, Lu as map$4, Ms as succeed$1, Nf as dual, Nn as optional$2, No as fnUntraced, Nu as isReadonlyArrayNonEmpty, O as Terminal, Pn as optionalKey, Po as forEach, Ps as suspend, Pu as join, Q as constPing, Qc as interruptors, Qi as unwrap, Ql as sync, Qs as whileLoop, Rc as Clock, Rl as failCause$1, Ro as forkScoped, Ru as match, Sa as makeUnsafe, Sc as isNonEmpty, Sf as isNotUndefined, Sn as is, Ss as result, Su as findLast, T as errorReported, Ta as interrupt$2, Td as make$3, To as ensuring, Uo as ignoreCause, Ut as Literal, Uu as some$1, Vd as isSome, Vl as isFailure, Vo as gen, Vs as timeoutOrElse, Vu as reduce, W as withRunClient, Wd as map$3, Wl as ConsoleRef, Wo as interrupt$1, Xc as hasInterrupts, Xs as void_, Y as RequestId, Yd as some, Yo as logError, Ys as useSpan, Zo as logInfo, _a as shutdownUnsafe, _d as Reference, _n as encodeEffect, _s as provideContext, _t as layerWebSocket, ad as isSuccess, ar as empty, at as isStreamSchema, b as LogToStderr, bd as empty$1, bl as addFinalizerExit, bs as raceFirst, bu as findFirst, ca as bounded, cs as onError, ct as Collector, da as failCause, dc as min, do as callback, ds as onInterrupt, dt as Socket, ed as fail$2, es as map$2, fl as provide$2, fo as catchCause, ft as SocketError, gs as provide$1, h as NotesError, hd as toMillis, hn as decodeUnknownEffect, ho as catchFilter, hr as value, ht as SocketReadError, hu as empty$2, io as andThen, is as matchCauseEffect, it as getStreamSchemas, j as Crypto, jd as filter, jf as constVoid, jt as BooleanLiterals, k as isQuitError, kl as MinimumLogLevel, ks as scoped, kt as ArraySchema, lr as merge, lt as makeCollectorUnsafe, lu as taggedEnum, ma as offerAll, mf as format, mr as make$2, nc as withParentSpan, nf as Prototype, nn as TaggedError, ns as mapError, of as withFiber$1, ol as effect, oo as annotateLogs, or as fromInput, ot as spanAttributes, pc as spaced, pi as filter$1, pn as decodeSync, po as catchCauseIf, ps as orDie, pt as SocketErrorReason, q as layerJson, qc as findError, qt as NonEmptyArray, rl as squash, rn as TrueLiterals, rs as match$2, sc as exponential, sd as succeed$2, sf as assignProperty, st as spanName, t as RpcContracts, tt as exitSchema, ua as end, un as Union, uo as cached, va as take, vd as Service, vf as hasProperty, vl as Scope, vo as catchTag, vs as provideService, vt as layerWebSocketConstructorGlobal, vu as filter$2, w as errorExitCode, wa as getCurrent, wd as getUnsafe, ws as retryOrElse, xd as get, xi as fromQueue, xo as context, xu as findFirstIndex, yd as add, yl as addFinalizer, yo as catchTags, zd as getOrUndefined, zl as interrupt, zs as timeout, zt as FalseLiterals } from "./contracts-CdQiWFv_.mjs";
+import { $d as make$3, $o as flatMap$1, $s as serviceOption, $t as FalseLiterals, Ac as exponential, Af as Prototype, Ar as make$2, B as Terminal, Bs as provideContext, Bu as empty$2, C as AuthError, Cf as some, Ci as FileSystem, Cl as interruptors, Cs as map$2, Ct as makeCollectorUnsafe, Cu as sync, Dn as decodeSync, Do as andThen, Ds as matchCauseEffect, Dt as SocketErrorReason, Es as match$2, Et as SocketError, F as runMain, Fa as offerAll, Ff as assignProperty, Fl as merge$1, Fo as catchCause, Ga as makeUnsafe, Gc as isNonEmpty, Gd as Reference, Gl as addFinalizerExit, Gs as result, Gt as BooleanLiterals, Gu as findFirst, Hf as format, Hi as fromQueue, Ho as catchTags, I as errorExitCode, Ic as spaced, In as is, Io as catchCauseIf, Is as orDie, J as String$7, Ja as interrupt$2, Jd as empty$1, Jn as optionalKey, Jo as ensuring, Kd as Service, Kf as hasProperty, Ko as delay, Ku as findFirstIndex, L as errorReported, Ll as provide$2, Lt as HttpClientErrorSchema, M as LogToStderr, Ma as failCause, Mt as layerWebSocketConstructorGlobal, Nd as succeed$2, No as cached, Ol as squash, Pc as min, Pf as withFiber$1, Pi as filter$1, Po as callback, Ps as onInterrupt, Pu as taggedEnum, Qd as getUnsafe, Qs as scoped, R as layer, Ra as shutdownUnsafe, Ro as catchFilter, S as RpcAuth, Sc as withFiber, Ss as makeSpanScoped, St as Collector, Tc as withParentSpan, Td as fail$2, Tr as merge, Ts as mapError, Tt as Socket, U as Crypto, Ud as toMillis, Ul as Scope, Us as raceFirst, Ut as ArraySchema, Uu as filter$2, V as isQuitError, Vo as catchTag, Vs as provideService, Wl as addFinalizer, Wo as context, Xc as replace, Xf as isNotUndefined, Xo as fail$1, Yd as get, Yn as tag, Ys as runForkWith, Yt as Defect, Z as option, Zd as getOrUndefinedUnsafe, Zn as toCodecStringTree, Zt as Error$1, Zu as getSomes, _n as TrueLiterals, ad as join, af as filter, ap as constVoid, at as RpcSerialization, b as AUTH_URL, bf as none, br as empty, bs as logInfo, bt as spanAttributes, cc as timeout, cd as map$4, cu as fail, df as getOrElse, dp as pipeArguments, ds as ignore, eu as MinimumLogLevel, fd as reduce, fs as ignoreCause, ft as constPing, fu as isFailure, gn as TaggedError, h as NotesError, hc as uninterruptibleMask, hf as isSome, hs as isEffect, ht as exitSchema, hu as ConsoleRef, ic as sync$1, id as isReadonlyArrayNonEmpty, if as exists, is as forever, it as withRunClient, ja as end, jd as isSuccess, jl as effect, jn as encodeEffect, jr as value, js as onError, jt as layerWebSocket, ka as bounded, kn as decodeUnknownEffect, ko as annotateLogs, kt as SocketReadError, la as runHead, ld as match, lp as identity, lt as RequestId, lu as failCause$1, md as some$1, mf as isNone, ms as interruptible, ns as fnUntraced, nt as Stdio, oc as tapCause, ol as round, os as forkIn, pf as getOrUndefined, pn as String$6, ps as interrupt$1, qa as getCurrent, qd as add, qn as optional$2, qs as retryOrElse, qu as findLast, rc as suspend, rn as Literal, rs as forEach, sl as Clock, sn as NonEmptyArray, sp as dual, ss as forkScoped, st as layerJson, su as die, t as RpcContracts, tc as succeed$1, uc as timeoutOrElse, uf as fromUndefinedOr, up as pipe, us as gen, uu as interrupt, vc as useSpan, vf as map$3, vl as findError, vs as logError, vt as getStreamSchemas, wn as Union, xc as whileLoop, xl as hasInterrupts, xr as fromInput, xt as spanName, ya as unwrap, yc as void_, yf as match$1, yt as isStreamSchema, z as QuitError, za as take, zs as provide$1 } from "./contracts-C1Rqhg6U.mjs";
 //#region ../../node_modules/.pnpm/effect@4.0.5/node_modules/effect/dist/workers/WorkerError.js
 /**
 * Worker error reason for failures while spawning or setting up a worker.
@@ -1524,6 +1524,51 @@ const Choice = (choices) => {
 	return Object.assign(primitive, { choiceKeys: choices.map(([key]) => key) });
 };
 /**
+* Creates a primitive that wraps string input in `Redacted`.
+*
+* **Details**
+*
+* The wrapped value is hidden when formatted or inspected, while the original
+* string remains available through the `Redacted` API when explicitly needed.
+*
+* **Example** (Parsing redacted values)
+*
+* ```ts import.meta.vitest
+* import { Effect, FileSystem, Layer, Path, Redacted, Stdio, Terminal } from "effect"
+* import { Primitive } from "effect/cli"
+* import { ChildProcessSpawner } from "effect/process"
+*
+* const CliTestLayer = Layer.mergeAll(
+*   FileSystem.layerNoop({}),
+*   Path.layer,
+*   Stdio.layerTest({}),
+*   Layer.succeed(Terminal.Terminal, Terminal.make({
+*     columns: Effect.succeed(80),
+*     rows: Effect.succeed(24),
+*     readInput: Effect.die("unused"),
+*     readLine: Effect.die("unused"),
+*     display: () => Effect.void
+*   })),
+*   Layer.succeed(
+*     ChildProcessSpawner.ChildProcessSpawner,
+*     ChildProcessSpawner.make(() => Effect.die("unused"))
+*   )
+* )
+*
+* const parseRedacted = Effect.gen(function*() {
+*   const result = yield* Primitive.Redacted.parse("secret-password")
+*   return [Redacted.value(result), String(result)] as const
+* })
+*
+* await Effect.runPromise(parseRedacted.pipe(Effect.provide(CliTestLayer))) // => ["secret-password", "<redacted>"]
+* ```
+*
+* @stability unstable
+* @category constructors
+* @since 4.0.0
+*/
+const Redacted$2 = /*#__PURE__*/ makePrimitive("Redacted", (value) => succeed$1(make$2(value)));
+/**
 * Gets a human-readable type name for a primitive.
 *
 * **When to use**
@@ -3406,6 +3451,34 @@ const ChoiceWithValue$1 = (kind, name, choices) => makeSingle({
 	primitiveType: Choice(choices),
 	kind
 });
+/**
+* Creates a redacted parameter for sensitive data like passwords.
+* The value is masked in help output and logging.
+*
+* **Example** (Creating redacted parameters)
+*
+* ```ts import.meta.vitest
+* import { Param } from "effect/cli"
+*
+* // Create a password parameter
+* const password = Param.Redacted(Param.flagKind, "password")
+*
+* // Create an API key argument
+* const apiKey = Param.Redacted(Param.argumentKind, "api-key")
+*
+* // Usage: --password (value will be hidden in help/logs)
+* const kinds = [password.kind, apiKey.kind] // => ["flag", "argument"]
+* ```
+*
+* @stability unstable
+* @category constructors
+* @since 4.0.0
+*/
+const Redacted$1 = (kind, name) => makeSingle({
+	name,
+	primitiveType: Redacted$2,
+	kind
+});
 const FLAG_DASH_REGEXP = /^-+/;
 /**
 * Adds an alias to an option.
@@ -3943,6 +4016,23 @@ const getParamMetadata = (param) => {
 */
 const String$2 = (name) => String$3(argumentKind, name);
 /**
+* Creates a positional redacted argument that obscures its value.
+*
+* **Example** (Creating a redacted argument)
+*
+* ```ts import.meta.vitest
+* import { Argument } from "effect/cli"
+*
+* const secret = Argument.Redacted("secret")
+* secret.kind // => "argument"
+* ```
+*
+* @stability unstable
+* @category constructors
+* @since 4.0.0
+*/
+const Redacted = (name) => Redacted$1(argumentKind, name);
+/**
 * Adds a description to a positional argument.
 *
 * **Example** (Adding an argument description)
@@ -7600,15 +7690,27 @@ const runWith = (command, config) => {
 };
 //#endregion
 //#region package.json
-var version = "0.1.1089";
+var version = "0.1.1091";
 //#endregion
 //#region src/main.cli.ts
+const server = pipe(String$1("server"), withDescription$1("Stash server; defaults to STASH_SERVER, then https://stash.mp281x.xyz"), withFallbackConfig(String$7("STASH_SERVER")), withDefault("https://stash.mp281x.xyz"));
+const keyFolder = map$2(String$7("HOME"), (home) => `${home}/.config/stash`);
 function section(title, text) {
 	return pipe(fromUndefinedOr(text), filter(isNonEmpty), map$3((found) => `## ${title}\n\n${found}`));
 }
+const login = pipe(make("login", { key: pipe(Redacted("api-key"), withDescription$2(`An API key created at ${AUTH_URL}`)) }, fnUntraced(function* (input) {
+	const fs = yield* FileSystem;
+	const folder = yield* keyFolder;
+	yield* fs.makeDirectory(folder, { recursive: true });
+	yield* fs.writeFileString(`${folder}/api-key`, value(input.key), { mode: 384 });
+	yield* logInfo(`Signed in; the API key is in ${folder}/api-key`);
+})), withDescription(`Keep an API key created at ${AUTH_URL} in ~/.config/stash/api-key for save.`), withExamples([{
+	command: "vpx @deslop/stash@latest login '<api key>'",
+	description: `Sign in with a key from ${AUTH_URL}.`
+}]));
 const save = pipe(make("save", {
 	entry: pipe(String$2("text"), withDescription$2("A link, or the text of a note")),
-	server: pipe(String$1("server"), withDescription$1("Stash server; defaults to STASH_SERVER, then the tailnet address on dev"), withFallbackConfig(String$7("STASH_SERVER")), withDefault("https://dev.tailnet-8c4c.ts.net:8443"))
+	server
 }, fnUntraced(function* (input) {
 	const note = yield* pipe(gen(function* () {
 		const client = yield* make$1(RpcContracts);
@@ -7639,10 +7741,15 @@ const save = pipe(make("save", {
 		section("Transcript", note.transcript),
 		section("Issue", note.issue)
 	], getSomes, filter$2(isNonEmpty), join("\n\n")));
-})), provide((input) => pipe(layerProtocolSocket({ pingTimeout: "15 seconds" }), provide$2(layerWebSocket(pipe(new URL("/api/rpc", input.server).href, replace(/^http/u, "ws")))), provide$2(layerWebSocketConstructorGlobal), provide$2(layerJson))), withDescription("Save a link or a note to stash and print it as Markdown: title, summary, tags, notes, source text and the transcript with [mm:ss] timestamps. The server reads the link, transcribes its video with published captions or Whisper, and tags it; the CLI waits until it finishes. Needs the tailnet."), withExamples([{
+})), provide((input) => merge$1(pipe(layerProtocolSocket({ pingTimeout: "15 seconds" }), provide$2(layerWebSocket(pipe(new URL("/api/rpc", input.server).href, replace(/^http/u, "ws")))), provide$2(layerWebSocketConstructorGlobal), provide$2(layerJson)), RpcAuth.layerClient(pipe(gen(function* () {
+	return yield* (yield* FileSystem).readFileString(`${yield* keyFolder}/api-key`);
+}), mapError((cause) => AuthError.make({
+	cause,
+	message: `Sign in first: create an API key at ${AUTH_URL}, then run stash login '<api key>'`
+})))))), withDescription("Save a link or a note to stash and print it as Markdown: title, summary, tags, notes, source text and the transcript with [mm:ss] timestamps. The server reads the link, transcribes its video with published captions or Whisper, and tags it; the CLI waits until it finishes. Needs `stash login` first."), withExamples([{
 	command: "vpx @deslop/stash@latest save https://x.com/poteto/status/2102050467505430555",
 	description: "Save the talk attached to an X post and print its note and transcript."
 }]));
-runMain(pipe(make("stash"), withDescription("Save links and notes to stash; the server and iOS app share this package."), withSubcommands([save]), run({ version }), provideService(LogToStderr, true), provide$1(layer)));
+runMain(pipe(make("stash"), withDescription("Save links and notes to stash; the server and iOS app share this package."), withSubcommands([login, save]), run({ version }), provideService(LogToStderr, true), provide$1(layer)));
 //#endregion
 export {};