@dharta/cli 0.6.77

package/dist/commands/artifact.js

@@ -0,0 +1,235 @@
+import { resolveRuntime, spawnRuntime } from "../runtime.js";
+import { promises as fs } from "node:fs";
+import * as path from "node:path";
+export async function artifact(args) {
+    if (args[0] !== "run") {
+        const manifest = path.join(process.cwd(), "dharta.toml");
+        try {
+            await fs.access(manifest);
+        }
+        catch {
+            throw new Error("No dharta.toml found here. Run `dharta artifact` from an agent project.");
+        }
+    }
+    const runtime = await resolveRuntime();
+    const child = spawnRuntime(runtime, ["artifact", ...args], {
+        cwd: process.cwd(),
+        stdio: "inherit",
+    });
+    await new Promise((resolve, reject) => {
+        child.once("error", reject);
+        child.once("exit", (code, signal) => {
+            if (code === 0)
+                resolve();
+            else
+                reject(new Error(signal
+                    ? `Artifact helper stopped by ${signal}.`
+                    : `Artifact helper exited with status ${code ?? "unknown"}.`));
+        });
+    });
+}
+export function artifactPutArgs(opts) {
+    if ("id" in opts) {
+        const args = [
+            "put",
+            "--id", opts.id,
+            "--title", opts.title,
+            "--root", opts.root,
+        ];
+        if (opts.entry)
+            args.push("--entry", opts.entry);
+        if (opts.run)
+            args.push("--run", opts.run);
+        if (opts.typeId)
+            args.push("--type-id", opts.typeId);
+        for (const value of opts.inputs ?? [])
+            args.push("--input", value);
+        if (opts.agentActivation) {
+            for (const value of opts.agentActivation.authorities ?? []) {
+                args.push("--agent-authority", value);
+            }
+            args.push("--agent-budget-cents", String(opts.agentActivation.budgetCents), "--agent-lifetime-seconds", String(opts.agentActivation.lifetimeSeconds), "--agent-descendant-ceiling", String(opts.agentActivation.descendantCeiling), "--agent-activation-mode", opts.agentActivation.activationMode, "--agent-visibility", opts.agentActivation.visibility);
+        }
+        return args;
+    }
+    const args = [
+        "put",
+        "--key", opts.key,
+        "--kind", opts.kind,
+        "--title", opts.title,
+        "--entrypoint", opts.entrypoint,
+    ];
+    for (const value of opts.render ?? [])
+        args.push("--render", value);
+    for (const value of opts.evidence ?? [])
+        args.push("--evidence", value);
+    if (opts.provenance)
+        args.push("--provenance", opts.provenance);
+    for (const value of opts.continuation ?? [])
+        args.push("--continuation", value);
+    return args;
+}
+export function registerArtifactCommands(program) {
+    const artifactCommand = program
+        .command("artifact")
+        .description("Designate workspace outputs as durable artifacts.")
+        .action(() => artifactCommand.help());
+    artifactCommand
+        .command("put")
+        .description("Create or replace one artifact designation in .dharta/artifacts.json.")
+        .option("--key <key>", "Stable key inside this karta")
+        .option("--kind <kind>", "Release-declared artifact kind")
+        .option("--title <title>", "Human-readable title")
+        .option("--entrypoint <path>", "Workspace-relative render entrypoint")
+        .option("--render <path>", "Render dependency path or glob", collect, [])
+        .option("--evidence <path>", "Evidence dependency path or glob", collect, [])
+        .option("--provenance <path>", "Structured provenance resource")
+        .option("--continuation <path>", "Continuation dependency path or glob", collect, [])
+        .option("--id <id>", "Stable schema-2 Artifact ID")
+        .option("--root <path>", "Workspace-relative Artifact root folder")
+        .option("--entry <path>", "Passive entry relative to the Artifact root")
+        .option("--run <command>", "Opaque HTML-serving shell command")
+        .option("--type-id <id>", "Optional release-owned Artifact Type recipe")
+        .option("--input <binding>", "Named input as ALIAS=SOURCE:pinned or ALIAS=SOURCE:follow", collect, [])
+        .option("--agent-authority <authority>", "Requested child authority (repeatable; requires the complete Agent policy)", collect, [])
+        .option("--agent-budget-cents <cents>", "Maximum child budget, 0-10000 cents")
+        .option("--agent-lifetime-seconds <seconds>", "Child lifetime, 1-86400 seconds")
+        .option("--agent-descendant-ceiling <count>", "Maximum child descendants, 0-8")
+        .option("--agent-activation-mode <mode>", "Child mode: resume or new")
+        .option("--agent-visibility <visibility>", "Child visibility: headless, inspectable, or user-facing")
+        .action(runPut);
+    artifactCommand
+        .command("remove")
+        .description("Remove one artifact designation.")
+        .option("--key <key>", "Stable key inside this karta")
+        .option("--id <id>", "Stable schema-2 Artifact ID")
+        .action(async (opts) => {
+        if ((!opts.key && !opts.id) || (opts.key && opts.id)) {
+            throw new Error("Exactly one of --key or --id is required. See `dharta artifact remove --help`.");
+        }
+        return artifact(["remove", opts.id ? "--id" : "--key", opts.id ?? opts.key]);
+    });
+    artifactCommand
+        .command("list")
+        .description("List artifact designations from .dharta/artifacts.json.")
+        .action(async () => artifact(["list"]));
+    const run = artifactCommand
+        .command("run")
+        .description("Run a Dharta-owned HTML renderer on the assigned loopback port.")
+        .action(() => run.help());
+    for (const [name, description] of [
+        ["markdown-viewer", "Render a Markdown document."],
+        ["markdown-editor", "Render a browser-local Markdown working copy."],
+        ["pdf-viewer", "Serve a version-pinned PDF."],
+        ["image-viewer", "Render an image."],
+        ["audio-player", "Render range-capable audio controls."],
+        ["video-player", "Render range-capable video controls."],
+    ]) {
+        run.command(`${name} <path>`)
+            .description(description)
+            .option("--port <port>", "Loopback port; defaults to DHARTA_ARTIFACT_PORT")
+            .action(async (target, options) => {
+            await artifact(["run", name, target, ...portArgs(options.port)]);
+        });
+    }
+    run.command("static-html <directory>")
+        .description("Serve a contained static HTML directory.")
+        .option("--port <port>", "Loopback port; defaults to DHARTA_ARTIFACT_PORT")
+        .action(async (directory, options) => {
+        await artifact(["run", "static-html", directory, ...portArgs(options.port)]);
+    });
+    run.command("agent <directory>")
+        .description("Validate and launch a generated Agent App through Dharta.")
+        .option("--port <port>", "Loopback port; defaults to DHARTA_ARTIFACT_PORT")
+        .action(async (directory, options) => {
+        await artifact(["run", "agent", directory, ...portArgs(options.port)]);
+    });
+    run.command("registered-view <renderer> <path>")
+        .description("Serve the portable fallback for registered Artifact data.")
+        .option("--port <port>", "Loopback port; defaults to DHARTA_ARTIFACT_PORT")
+        .action(async (renderer, target, options) => {
+        await artifact(["run", "registered-view", renderer, target, ...portArgs(options.port)]);
+    });
+}
+async function runPut(opts) {
+    if (!opts.title) {
+        throw new Error("--title is required. See `dharta artifact put --help`.");
+    }
+    const requestedAgentPolicy = Boolean(opts.agentAuthority.length
+        || opts.agentBudgetCents
+        || opts.agentLifetimeSeconds
+        || opts.agentDescendantCeiling
+        || opts.agentActivationMode
+        || opts.agentVisibility);
+    const v2 = Boolean(opts.id || opts.root || opts.entry || opts.run || opts.typeId || opts.input.length
+        || requestedAgentPolicy);
+    const legacy = Boolean(opts.key || opts.kind || opts.entrypoint || opts.render.length || opts.evidence.length
+        || opts.provenance || opts.continuation.length);
+    if (v2 && legacy) {
+        throw new Error("Legacy and schema-2 Artifact options cannot be mixed. See `dharta artifact put --help`.");
+    }
+    if (v2) {
+        if (!opts.id || !opts.root || Boolean(opts.entry) === Boolean(opts.run)) {
+            throw new Error("Schema-2 Artifacts require --id, --root, and exactly one of --entry or --run. "
+                + "See `dharta artifact put --help`.");
+        }
+        const requiredAgentPolicy = [
+            ["--agent-budget-cents", opts.agentBudgetCents],
+            ["--agent-lifetime-seconds", opts.agentLifetimeSeconds],
+            ["--agent-descendant-ceiling", opts.agentDescendantCeiling],
+            ["--agent-activation-mode", opts.agentActivationMode],
+            ["--agent-visibility", opts.agentVisibility],
+        ];
+        const missingAgentPolicy = requestedAgentPolicy
+            ? requiredAgentPolicy
+                .filter(([, value]) => value === undefined)
+                .map(([name]) => name)
+            : [];
+        if (missingAgentPolicy.length > 0) {
+            throw new Error(`Agent activation requires a complete policy; missing ${missingAgentPolicy.join(", ")}. `
+                + "See `dharta artifact put --help`.");
+        }
+        return artifact(artifactPutArgs({
+            id: opts.id,
+            title: opts.title,
+            root: opts.root,
+            ...(opts.entry ? { entry: opts.entry } : {}),
+            ...(opts.run ? { run: opts.run } : {}),
+            ...(opts.typeId ? { typeId: opts.typeId } : {}),
+            inputs: opts.input,
+            ...(requestedAgentPolicy
+                ? {
+                    agentActivation: {
+                        authorities: opts.agentAuthority,
+                        budgetCents: opts.agentBudgetCents,
+                        lifetimeSeconds: opts.agentLifetimeSeconds,
+                        descendantCeiling: opts.agentDescendantCeiling,
+                        activationMode: opts.agentActivationMode,
+                        visibility: opts.agentVisibility,
+                    },
+                }
+                : {}),
+        }));
+    }
+    if (!opts.key || !opts.kind || !opts.entrypoint) {
+        throw new Error("Artifacts require --key, --kind, and --entrypoint. "
+            + "See `dharta artifact put --help`.");
+    }
+    return artifact(artifactPutArgs({
+        key: opts.key,
+        kind: opts.kind,
+        title: opts.title,
+        entrypoint: opts.entrypoint,
+        render: opts.render,
+        evidence: opts.evidence,
+        provenance: opts.provenance,
+        continuation: opts.continuation,
+    }));
+}
+function collect(value, previous) {
+    return [...previous, value];
+}
+function portArgs(port) {
+    return port ? ["--port", port] : [];
+}
+//# sourceMappingURL=artifact.js.map

package/dist/commands/artifact.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"artifact.js","sourceRoot":"","sources":["../../src/commands/artifact.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7D,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAGlC,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,IAAc;IAC3C,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,KAAK,EAAE,CAAC;QACtB,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,aAAa,CAAC,CAAC;QACzD,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CAAC,yEAAyE,CAAC,CAAC;QAC7F,CAAC;IACH,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,cAAc,EAAE,CAAC;IACvC,MAAM,KAAK,GAAG,YAAY,CAAC,OAAO,EAAE,CAAC,UAAU,EAAE,GAAG,IAAI,CAAC,EAAE;QACzD,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE;QAClB,KAAK,EAAE,SAAS;KACjB,CAAC,CAAC;IACH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC5B,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;YAClC,IAAI,IAAI,KAAK,CAAC;gBAAE,OAAO,EAAE,CAAC;;gBACrB,MAAM,CAAC,IAAI,KAAK,CACnB,MAAM;oBACJ,CAAC,CAAC,8BAA8B,MAAM,GAAG;oBACzC,CAAC,CAAC,sCAAsC,IAAI,IAAI,SAAS,GAAG,CAC/D,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAmCD,MAAM,UAAU,eAAe,CAAC,IAAwB;IACtD,IAAI,IAAI,IAAI,IAAI,EAAE,CAAC;QACjB,MAAM,IAAI,GAAG;YACX,KAAK;YACL,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,SAAS,EAAE,IAAI,CAAC,KAAK;YACrB,QAAQ,EAAE,IAAI,CAAC,IAAI;SACpB,CAAC;QACF,IAAI,IAAI,CAAC,KAAK;YAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QACjD,IAAI,IAAI,CAAC,GAAG;YAAE,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QAC3C,IAAI,IAAI,CAAC,MAAM;YAAE,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QACrD,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,IAAI,EAAE;YAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QACnE,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;YACzB,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,eAAe,CAAC,WAAW,IAAI,EAAE,EAAE,CAAC;gBAC3D,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE,KAAK,CAAC,CAAC;YACxC,CAAC;YACD,IAAI,CAAC,IAAI,CACP,sBAAsB,EAAE,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,WAAW,CAAC,EAChE,0BAA0B,EAAE,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,eAAe,CAAC,EACxE,4BAA4B,EAAE,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,iBAAiB,CAAC,EAC5E,yBAAyB,EAAE,IAAI,CAAC,eAAe,CAAC,cAAc,EAC9D,oBAAoB,EAAE,IAAI,CAAC,eAAe,CAAC,UAAU,CACtD,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,IAAI,GAAG;QACX,KAAK;QACL,OAAO,EAAE,IAAI,CAAC,GAAG;QACjB,QAAQ,EAAE,IAAI,CAAC,IAAI;QACnB,SAAS,EAAE,IAAI,CAAC,KAAK;QACrB,cAAc,EAAE,IAAI,CAAC,UAAU;KAChC,CAAC;IACF,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,IAAI,EAAE;QAAE,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IACpE,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,IAAI,EAAE;QAAE,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;IACxE,IAAI,IAAI,CAAC,UAAU;QAAE,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;IAChE,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,YAAY,IAAI,EAAE;QAAE,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,KAAK,CAAC,CAAC;IAChF,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,OAAgB;IACvD,MAAM,eAAe,GAAG,OAAO;SAC5B,OAAO,CAAC,UAAU,CAAC;SACnB,WAAW,CAAC,mDAAmD,CAAC;SAChE,MAAM,CAAC,GAAG,EAAE,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC,CAAC;IAExC,eAAe;SACZ,OAAO,CAAC,KAAK,CAAC;SACd,WAAW,CAAC,uEAAuE,CAAC;SACpF,MAAM,CAAC,aAAa,EAAE,8BAA8B,CAAC;SACrD,MAAM,CAAC,eAAe,EAAE,gCAAgC,CAAC;SACzD,MAAM,CAAC,iBAAiB,EAAE,sBAAsB,CAAC;SACjD,MAAM,CAAC,qBAAqB,EAAE,sCAAsC,CAAC;SACrE,MAAM,CAAC,iBAAiB,EAAE,gCAAgC,EAAE,OAAO,EAAE,EAAE,CAAC;SACxE,MAAM,CAAC,mBAAmB,EAAE,kCAAkC,EAAE,OAAO,EAAE,EAAE,CAAC;SAC5E,MAAM,CAAC,qBAAqB,EAAE,gCAAgC,CAAC;SAC/D,MAAM,CAAC,uBAAuB,EAAE,sCAAsC,EAAE,OAAO,EAAE,EAAE,CAAC;SACpF,MAAM,CAAC,WAAW,EAAE,6BAA6B,CAAC;SAClD,MAAM,CAAC,eAAe,EAAE,yCAAyC,CAAC;SAClE,MAAM,CAAC,gBAAgB,EAAE,6CAA6C,CAAC;SACvE,MAAM,CAAC,iBAAiB,EAAE,mCAAmC,CAAC;SAC9D,MAAM,CAAC,gBAAgB,EAAE,6CAA6C,CAAC;SACvE,MAAM,CACL,mBAAmB,EACnB,2DAA2D,EAC3D,OAAO,EACP,EAAE,CACH;SACA,MAAM,CACL,+BAA+B,EAC/B,4EAA4E,EAC5E,OAAO,EACP,EAAE,CACH;SACA,MAAM,CAAC,8BAA8B,EAAE,qCAAqC,CAAC;SAC7E,MAAM,CAAC,oCAAoC,EAAE,iCAAiC,CAAC;SAC/E,MAAM,CAAC,oCAAoC,EAAE,gCAAgC,CAAC;SAC9E,MAAM,CAAC,gCAAgC,EAAE,2BAA2B,CAAC;SACrE,MAAM,CACL,iCAAiC,EACjC,yDAAyD,CAC1D;SACA,MAAM,CAAC,MAAM,CAAC,CAAC;IAElB,eAAe;SACZ,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,kCAAkC,CAAC;SAC/C,MAAM,CAAC,aAAa,EAAE,8BAA8B,CAAC;SACrD,MAAM,CAAC,WAAW,EAAE,6BAA6B,CAAC;SAClD,MAAM,CAAC,KAAK,EAAE,IAAmC,EAAE,EAAE;QACpD,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;YACrD,MAAM,IAAI,KAAK,CACb,gFAAgF,CACjF,CAAC;QACJ,CAAC;QACD,OAAO,QAAQ,CAAC,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,GAAI,CAAC,CAAC,CAAC;IAChF,CAAC,CAAC,CAAC;IAEL,eAAe;SACZ,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,yDAAyD,CAAC;SACtE,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAE1C,MAAM,GAAG,GAAG,eAAe;SACxB,OAAO,CAAC,KAAK,CAAC;SACd,WAAW,CAAC,iEAAiE,CAAC;SAC9E,MAAM,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;IAE5B,KAAK,MAAM,CAAC,IAAI,EAAE,WAAW,CAAC,IAAI;QAChC,CAAC,iBAAiB,EAAE,6BAA6B,CAAC;QAClD,CAAC,iBAAiB,EAAE,+CAA+C,CAAC;QACpE,CAAC,YAAY,EAAE,6BAA6B,CAAC;QAC7C,CAAC,cAAc,EAAE,kBAAkB,CAAC;QACpC,CAAC,cAAc,EAAE,sCAAsC,CAAC;QACxD,CAAC,cAAc,EAAE,sCAAsC,CAAC;KAChD,EAAE,CAAC;QACX,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,SAAS,CAAC;aAC1B,WAAW,CAAC,WAAW,CAAC;aACxB,MAAM,CAAC,eAAe,EAAE,iDAAiD,CAAC;aAC1E,MAAM,CAAC,KAAK,EAAE,MAAc,EAAE,OAA0B,EAAE,EAAE;YAC3D,MAAM,QAAQ,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACnE,CAAC,CAAC,CAAC;IACP,CAAC;IAED,GAAG,CAAC,OAAO,CAAC,yBAAyB,CAAC;SACnC,WAAW,CAAC,0CAA0C,CAAC;SACvD,MAAM,CAAC,eAAe,EAAE,iDAAiD,CAAC;SAC1E,MAAM,CAAC,KAAK,EAAE,SAAiB,EAAE,OAA0B,EAAE,EAAE;QAC9D,MAAM,QAAQ,CAAC,CAAC,KAAK,EAAE,aAAa,EAAE,SAAS,EAAE,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC/E,CAAC,CAAC,CAAC;IAEL,GAAG,CAAC,OAAO,CAAC,mBAAmB,CAAC;SAC7B,WAAW,CAAC,2DAA2D,CAAC;SACxE,MAAM,CAAC,eAAe,EAAE,iDAAiD,CAAC;SAC1E,MAAM,CAAC,KAAK,EAAE,SAAiB,EAAE,OAA0B,EAAE,EAAE;QAC9D,MAAM,QAAQ,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACzE,CAAC,CAAC,CAAC;IAEL,GAAG,CAAC,OAAO,CAAC,mCAAmC,CAAC;SAC7C,WAAW,CAAC,2DAA2D,CAAC;SACxE,MAAM,CAAC,eAAe,EAAE,iDAAiD,CAAC;SAC1E,MAAM,CAAC,KAAK,EAAE,QAAgB,EAAE,MAAc,EAAE,OAA0B,EAAE,EAAE;QAC7E,MAAM,QAAQ,CAAC,CAAC,KAAK,EAAE,iBAAiB,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC1F,CAAC,CAAC,CAAC;AACP,CAAC;AAyBD,KAAK,UAAU,MAAM,CAAC,IAA2B;IAC/C,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;QAChB,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC5E,CAAC;IACD,MAAM,oBAAoB,GAAG,OAAO,CAClC,IAAI,CAAC,cAAc,CAAC,MAAM;WACrB,IAAI,CAAC,gBAAgB;WACrB,IAAI,CAAC,oBAAoB;WACzB,IAAI,CAAC,sBAAsB;WAC3B,IAAI,CAAC,mBAAmB;WACxB,IAAI,CAAC,eAAe,CAC1B,CAAC;IACF,MAAM,EAAE,GAAG,OAAO,CAChB,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM;WAC7E,oBAAoB,CAC1B,CAAC;IACF,MAAM,MAAM,GAAG,OAAO,CACpB,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM;WACjF,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,YAAY,CAAC,MAAM,CACjD,CAAC;IACF,IAAI,EAAE,IAAI,MAAM,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CACb,yFAAyF,CAC1F,CAAC;IACJ,CAAC;IACD,IAAI,EAAE,EAAE,CAAC;QACP,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACxE,MAAM,IAAI,KAAK,CACb,gFAAgF;kBAC9E,mCAAmC,CACtC,CAAC;QACJ,CAAC;QACD,MAAM,mBAAmB,GAAG;YAC1B,CAAC,sBAAsB,EAAE,IAAI,CAAC,gBAAgB,CAAC;YAC/C,CAAC,0BAA0B,EAAE,IAAI,CAAC,oBAAoB,CAAC;YACvD,CAAC,4BAA4B,EAAE,IAAI,CAAC,sBAAsB,CAAC;YAC3D,CAAC,yBAAyB,EAAE,IAAI,CAAC,mBAAmB,CAAC;YACrD,CAAC,oBAAoB,EAAE,IAAI,CAAC,eAAe,CAAC;SACpC,CAAC;QACX,MAAM,kBAAkB,GAAG,oBAAoB;YAC7C,CAAC,CAAC,mBAAmB;iBAClB,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC;iBAC1C,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC;YACxB,CAAC,CAAC,EAAE,CAAC;QACP,IAAI,kBAAkB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CACb,wDAAwD,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;kBACvF,mCAAmC,CACtC,CAAC;QACJ,CAAC;QACD,OAAO,QAAQ,CAAC,eAAe,CAAC;YAC9B,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5C,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/C,MAAM,EAAE,IAAI,CAAC,KAAK;YAClB,GAAG,CAAC,oBAAoB;gBACtB,CAAC,CAAC;oBACE,eAAe,EAAE;wBACf,WAAW,EAAE,IAAI,CAAC,cAAc;wBAChC,WAAW,EAAE,IAAI,CAAC,gBAAiB;wBACnC,eAAe,EAAE,IAAI,CAAC,oBAAqB;wBAC3C,iBAAiB,EAAE,IAAI,CAAC,sBAAuB;wBAC/C,cAAc,EAAE,IAAI,CAAC,mBAAoB;wBACzC,UAAU,EAAE,IAAI,CAAC,eAAgB;qBAClC;iBACF;gBACH,CAAC,CAAC,EAAE,CAAC;SACR,CAAC,CAAC,CAAC;IACN,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CACb,qDAAqD;cACnD,mCAAmC,CACtC,CAAC;IACJ,CAAC;IACD,OAAO,QAAQ,CAAC,eAAe,CAAC;QAC9B,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,YAAY,EAAE,IAAI,CAAC,YAAY;KAChC,CAAC,CAAC,CAAC;AACN,CAAC;AAED,SAAS,OAAO,CAAC,KAAa,EAAE,QAAkB;IAChD,OAAO,CAAC,GAAG,QAAQ,EAAE,KAAK,CAAC,CAAC;AAC9B,CAAC;AAED,SAAS,QAAQ,CAAC,IAAwB;IACxC,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACtC,CAAC"}

package/dist/commands/audit-log.d.ts

@@ -0,0 +1,32 @@
+import type { CliContext } from "../context.js";
+interface AuditLogResponse {
+    data: AuditLogEvent[];
+    meta: {
+        row_estimate: number;
+        limit: number;
+    };
+}
+export interface AuditLogEvent {
+    id: number;
+    created_at: string;
+    action: string;
+    actor_email: string | null;
+    api_key_prefix: string | null;
+    subject_type: string | null;
+    subject_id: number | null;
+    ip_address: string | null;
+    user_agent: string | null;
+    metadata: Record<string, unknown>;
+}
+export interface AuditLogOptions {
+    csv?: boolean;
+    action?: string;
+    userId?: string;
+    from?: string;
+    to?: string;
+    limit?: string;
+}
+export declare function auditLogData(ctx: CliContext, opts?: AuditLogOptions): Promise<AuditLogResponse | string>;
+export declare function auditLog(ctx: CliContext, opts?: AuditLogOptions): Promise<string>;
+export declare function validateAuditLogInput(opts?: AuditLogOptions): void;
+export {};

package/dist/commands/audit-log.js

@@ -0,0 +1,102 @@
+import { cliFormatRawError } from "../api-error.js";
+import { fmtTs, table } from "../output.js";
+import { parsePositiveInteger, validateDateOnly } from "../validators.js";
+export async function auditLogData(ctx, opts = {}) {
+    const normalized = normalizeAuditLogOptions(opts);
+    validateAuditLogOptions(normalized);
+    const path = auditLogPath(normalized);
+    try {
+        if (normalized.csv) {
+            const res = await ctx.http.raw(path);
+            if (!res.ok)
+                throw await cliFormatRawError(res);
+            return res.text();
+        }
+        return await ctx.http.request({ path });
+    }
+    catch (error) {
+        throw withAuditLogScopeGuidance(error);
+    }
+}
+export async function auditLog(ctx, opts = {}) {
+    const res = await auditLogData(ctx, opts);
+    if (typeof res === "string")
+        return res;
+    if (res.data.length === 0)
+        return emptyAuditLogMessage(normalizeAuditLogOptions(opts));
+    return table(res.data.map((event) => ({
+        id: String(event.id),
+        time: fmtTs(event.created_at),
+        action: event.action,
+        actor: event.actor_email ?? event.api_key_prefix ?? "-",
+        subject: subjectLabel(event),
+        ip: event.ip_address ?? "-",
+    })));
+}
+function emptyAuditLogMessage(opts) {
+    if (opts.action || opts.userId || opts.from || opts.to) {
+        return "No audit events matched those filters. Try widening --from/--to or removing filters.";
+    }
+    return "No audit events yet.";
+}
+export function validateAuditLogInput(opts = {}) {
+    validateAuditLogOptions(normalizeAuditLogOptions(opts));
+}
+function auditLogPath(opts) {
+    const params = new URLSearchParams();
+    if (opts.action)
+        params.set("event_action", opts.action);
+    if (opts.userId)
+        params.set("user_id", opts.userId);
+    if (opts.from)
+        params.set("from", opts.from);
+    if (opts.to)
+        params.set("to", opts.to);
+    if (opts.limit)
+        params.set("limit", opts.limit);
+    const qs = params.toString();
+    return `/api/audit_events${opts.csv ? ".csv" : ""}${qs ? `?${qs}` : ""}`;
+}
+function validateAuditLogOptions(opts) {
+    if (opts.userId !== undefined)
+        parsePositiveInteger(opts.userId, "--user-id");
+    if (opts.from !== undefined)
+        validateDateOnly(opts.from, "--from");
+    if (opts.to !== undefined)
+        validateDateOnly(opts.to, "--to");
+    if (opts.limit !== undefined)
+        parsePositiveInteger(opts.limit, "--limit");
+}
+function normalizeAuditLogOptions(opts) {
+    return {
+        ...opts,
+        action: normalizeOptionalFilter(opts.action, "--action"),
+        userId: normalizeOptionalFilter(opts.userId, "--user-id"),
+        from: normalizeOptionalFilter(opts.from, "--from"),
+        to: normalizeOptionalFilter(opts.to, "--to"),
+        limit: normalizeOptionalFilter(opts.limit, "--limit"),
+    };
+}
+function normalizeOptionalFilter(value, flag) {
+    if (value === undefined)
+        return undefined;
+    const normalized = value.trim();
+    if (normalized.length === 0)
+        throw new Error(`${flag} cannot be blank.`);
+    return normalized;
+}
+function subjectLabel(event) {
+    if (!event.subject_type || event.subject_id === null)
+        return "-";
+    return `${event.subject_type}#${event.subject_id}`;
+}
+function withAuditLogScopeGuidance(error) {
+    if (!(error instanceof Error) || !/audit_log:export/.test(error.message))
+        return error;
+    error.message +=
+        " Audit export is intentionally not included in `dharta login` keys. " +
+            "Open `dharta open api-keys` and mint a bounded key with `audit_log:export` plus an expiry, " +
+            "then use it with `DHARTA_API_KEY=...` or `dharta login --with-token`.";
+    return error;
+}
+//# sourceMappingURL=audit-log.js.map

package/dist/commands/audit-log.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-log.js","sourceRoot":"","sources":["../../src/commands/audit-log.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAgC1E,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,GAAe,EAAE,OAAwB,EAAE;IAC5E,MAAM,UAAU,GAAG,wBAAwB,CAAC,IAAI,CAAC,CAAC;IAClD,uBAAuB,CAAC,UAAU,CAAC,CAAC;IACpC,MAAM,IAAI,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;IACtC,IAAI,CAAC;QACH,IAAI,UAAU,CAAC,GAAG,EAAE,CAAC;YACnB,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACrC,IAAI,CAAC,GAAG,CAAC,EAAE;gBAAE,MAAM,MAAM,iBAAiB,CAAC,GAAG,CAAC,CAAC;YAChD,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC;QACpB,CAAC;QACD,OAAO,MAAM,GAAG,CAAC,IAAI,CAAC,OAAO,CAAmB,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,yBAAyB,CAAC,KAAK,CAAC,CAAC;IACzC,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,GAAe,EAAE,OAAwB,EAAE;IACxE,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC1C,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAC;IACxC,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,oBAAoB,CAAC,wBAAwB,CAAC,IAAI,CAAC,CAAC,CAAC;IACvF,OAAO,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACpC,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QACpB,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC;QAC7B,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,KAAK,EAAE,KAAK,CAAC,WAAW,IAAI,KAAK,CAAC,cAAc,IAAI,GAAG;QACvD,OAAO,EAAE,YAAY,CAAC,KAAK,CAAC;QAC5B,EAAE,EAAE,KAAK,CAAC,UAAU,IAAI,GAAG;KAC5B,CAAC,CAAC,CAAC,CAAC;AACP,CAAC;AAED,SAAS,oBAAoB,CAAC,IAAqB;IACjD,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC;QACvD,OAAO,sFAAsF,CAAC;IAChG,CAAC;IACD,OAAO,sBAAsB,CAAC;AAChC,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,OAAwB,EAAE;IAC9D,uBAAuB,CAAC,wBAAwB,CAAC,IAAI,CAAC,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,YAAY,CAAC,IAAqB;IACzC,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;IACrC,IAAI,IAAI,CAAC,MAAM;QAAE,MAAM,CAAC,GAAG,CAAC,cAAc,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IACzD,IAAI,IAAI,CAAC,MAAM;QAAE,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IACpD,IAAI,IAAI,CAAC,IAAI;QAAE,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7C,IAAI,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;IACvC,IAAI,IAAI,CAAC,KAAK;QAAE,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IAChD,MAAM,EAAE,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC;IAC7B,OAAO,oBAAoB,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;AAC3E,CAAC;AAED,SAAS,uBAAuB,CAAC,IAAqB;IACpD,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;QAAE,oBAAoB,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IAC9E,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS;QAAE,gBAAgB,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACnE,IAAI,IAAI,CAAC,EAAE,KAAK,SAAS;QAAE,gBAAgB,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;IAC7D,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS;QAAE,oBAAoB,CAAC,IAAI,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;AAC5E,CAAC;AAED,SAAS,wBAAwB,CAAC,IAAqB;IACrD,OAAO;QACL,GAAG,IAAI;QACP,MAAM,EAAE,uBAAuB,CAAC,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC;QACxD,MAAM,EAAE,uBAAuB,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC;QACzD,IAAI,EAAE,uBAAuB,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC;QAClD,EAAE,EAAE,uBAAuB,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC;QAC5C,KAAK,EAAE,uBAAuB,CAAC,IAAI,CAAC,KAAK,EAAE,SAAS,CAAC;KACtD,CAAC;AACJ,CAAC;AAED,SAAS,uBAAuB,CAAC,KAAyB,EAAE,IAAY;IACtE,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAChC,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,mBAAmB,CAAC,CAAC;IACzE,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,YAAY,CAAC,KAAoB;IACxC,IAAI,CAAC,KAAK,CAAC,YAAY,IAAI,KAAK,CAAC,UAAU,KAAK,IAAI;QAAE,OAAO,GAAG,CAAC;IACjE,OAAO,GAAG,KAAK,CAAC,YAAY,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;AACrD,CAAC;AAED,SAAS,yBAAyB,CAAC,KAAc;IAC/C,IAAI,CAAC,CAAC,KAAK,YAAY,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC;QAAE,OAAO,KAAK,CAAC;IACvF,KAAK,CAAC,OAAO;QACX,sEAAsE;YACtE,6FAA6F;YAC7F,uEAAuE,CAAC;IAC1E,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/commands/auth.d.ts

@@ -0,0 +1,47 @@
+export interface Me {
+    organization: {
+        slug: string;
+        name: string;
+    };
+    api_key: {
+        name: string;
+        prefix: string;
+        scopes: string[];
+        created_at: string;
+        expires_at?: string | null;
+        last_used_at: string | null;
+    };
+    workspace_git?: {
+        base_url: string;
+    };
+}
+export interface ProfileStatus {
+    source: "environment" | "profile";
+    profile?: string;
+    default?: boolean;
+    base_url: string;
+    ok: boolean;
+    organization?: {
+        slug: string;
+        name: string;
+    };
+    api_key?: {
+        name: string;
+        prefix: string;
+        scopes: string[];
+        expires_at?: string | null;
+    };
+    error?: string;
+}
+export declare function authStatusData(opts?: {
+    fetchImpl?: typeof fetch;
+}): Promise<ProfileStatus[]>;
+export declare function authStatus(opts?: {
+    fetchImpl?: typeof fetch;
+}): Promise<string>;
+export declare function authToken(): Promise<string>;
+export declare function authLogoutData(profileName?: string): Promise<{
+    profile: string;
+    path: string;
+}>;
+export declare function authLogout(profileName?: string): Promise<string>;

package/dist/commands/auth.js

@@ -0,0 +1,117 @@
+// `dharta auth status|token|logout` (RFC 0013 CLI-1, gh-shaped).
+import { HttpClient } from "@dharta/sdk";
+import { cliFormatError, cliFormatNetworkError } from "../api-error.js";
+import { configPath, loadConfig, removeProfile, DEFAULT_BASE_URL, } from "../config.js";
+import { normalizeNonBlank } from "../validators.js";
+import { formatApiKeyExpiry, formatScopes } from "./scopes.js";
+export async function authStatusData(opts = {}) {
+    const statuses = [];
+    const envKey = process.env.DHARTA_API_KEY;
+    if (envKey) {
+        const baseUrl = process.env.DHARTA_BASE_URL || DEFAULT_BASE_URL;
+        statuses.push(await describeKey(envKey, baseUrl, "environment", opts.fetchImpl));
+    }
+    const cfg = await loadConfig();
+    for (const [name, profile] of Object.entries(cfg?.profiles ?? {})) {
+        statuses.push({
+            ...(await describeKey(profile.api_key, profile.base_url || DEFAULT_BASE_URL, "profile", opts.fetchImpl)),
+            profile: name,
+            default: name === cfg?.default_profile,
+        });
+    }
+    return statuses;
+}
+export async function authStatus(opts = {}) {
+    const statuses = await authStatusData(opts);
+    if (statuses.length === 0) {
+        return "Not logged in. Run `dharta login` to sign in via your browser.";
+    }
+    const lines = [];
+    for (const s of statuses) {
+        lines.push(s.source === "environment"
+            ? `DHARTA_API_KEY (environment) - ${s.base_url}`
+            : `Profile ${s.profile}${s.default ? " (default)" : ""} - ${s.base_url}`);
+        if (s.ok && s.organization && s.api_key) {
+            lines.push(`  Organization: ${s.organization.name} (${s.organization.slug})`, `  Key: ${s.api_key.name} · ${s.api_key.prefix}…`, `  Scopes: ${formatScopes(s.api_key.scopes)}`, `  Expiry: ${formatApiKeyExpiry(s.api_key.expires_at)}`);
+        }
+        else {
+            lines.push(`  ${s.error}`);
+        }
+    }
+    return lines.join("\n");
+}
+async function describeKey(apiKey, baseUrl, source, fetchImpl) {
+    try {
+        const http = new HttpClient({
+            apiKey,
+            baseUrl,
+            fetch: fetchImpl,
+            formatError: cliFormatError,
+            formatNetworkError: cliFormatNetworkError,
+        });
+        const me = await http.request({ path: "/me" });
+        return {
+            source,
+            base_url: baseUrl,
+            ok: true,
+            organization: me.organization,
+            api_key: {
+                name: me.api_key.name,
+                prefix: me.api_key.prefix,
+                scopes: me.api_key.scopes,
+                expires_at: me.api_key.expires_at,
+            },
+        };
+    }
+    catch (error) {
+        const status = error.status;
+        const credentialProblem = status === 401 || status === 403;
+        return {
+            source,
+            base_url: baseUrl,
+            ok: false,
+            error: credentialProblem && source === "environment"
+                ? "Invalid or revoked credential. Fix or unset DHARTA_API_KEY."
+                : credentialProblem
+                    ? "Invalid or revoked credential. Run `dharta login` to re-authenticate."
+                    : `Could not check credential: ${formatCause(error)}`,
+        };
+    }
+}
+function formatCause(error) {
+    return error instanceof Error && error.message ? error.message : String(error);
+}
+// Print the active token for piping (gh auth token parity). Environment
+// override wins, matching every other command.
+export async function authToken() {
+    const envKey = process.env.DHARTA_API_KEY;
+    if (envKey)
+        return envKey;
+    const cfg = await loadConfig();
+    const profile = cfg?.profiles[cfg.default_profile];
+    if (!profile) {
+        throw new Error("Not logged in. Run `dharta login` to sign in via your browser.");
+    }
+    return profile.api_key;
+}
+// Remove the stored credential. Local-only by design: the key itself
+// stays valid until revoked on the dashboard, and we say so.
+export async function authLogoutData(profileName) {
+    const requestedName = profileName === undefined ? undefined : normalizeNonBlank(profileName, "--profile");
+    const cfg = await loadConfig();
+    if (!cfg) {
+        throw new Error("Not logged in - nothing to remove. `dharta auth status` shows what is stored.");
+    }
+    const name = requestedName ?? cfg.default_profile;
+    const removed = await removeProfile(name);
+    if (!removed) {
+        throw new Error(`No profile named '${name}' in ${configPath()}. Run \`dharta auth status\` to list profiles.`);
+    }
+    return { profile: name, path: configPath() };
+}
+export async function authLogout(profileName) {
+    const removed = await authLogoutData(profileName);
+    return (`Removed profile '${removed.profile}' from ${removed.path}.\n` +
+        "The key itself remains valid until you revoke it on the dashboard keys page.");
+}
+//# sourceMappingURL=auth.js.map

package/dist/commands/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../src/commands/auth.ts"],"names":[],"mappings":"AAAA,iEAAiE;AAEjE,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,cAAc,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AACxE,OAAO,EACL,UAAU,EACV,UAAU,EACV,aAAa,EACb,gBAAgB,GACjB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,kBAAkB,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AA+B/D,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,OAAqC,EAAE;IAEvC,MAAM,QAAQ,GAAoB,EAAE,CAAC;IAErC,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;IAC1C,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,gBAAgB,CAAC;QAChE,QAAQ,CAAC,IAAI,CAAC,MAAM,WAAW,CAAC,MAAM,EAAE,OAAO,EAAE,aAAa,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;IACnF,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,UAAU,EAAE,CAAC;IAC/B,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,QAAQ,IAAI,EAAE,CAAC,EAAE,CAAC;QAClE,QAAQ,CAAC,IAAI,CAAC;YACZ,GAAG,CAAC,MAAM,WAAW,CACnB,OAAO,CAAC,OAAO,EACf,OAAO,CAAC,QAAQ,IAAI,gBAAgB,EACpC,SAAS,EACT,IAAI,CAAC,SAAS,CACf,CAAC;YACF,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,IAAI,KAAK,GAAG,EAAE,eAAe;SACvC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,OAAqC,EAAE;IACtE,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,CAAC;IAC5C,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,gEAAgE,CAAC;IAC1E,CAAC;IAED,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,KAAK,CAAC,IAAI,CACR,CAAC,CAAC,MAAM,KAAK,aAAa;YACxB,CAAC,CAAC,kCAAkC,CAAC,CAAC,QAAQ,EAAE;YAChD,CAAC,CAAC,WAAW,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,QAAQ,EAAE,CAC3E,CAAC;QACF,IAAI,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,YAAY,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;YACxC,KAAK,CAAC,IAAI,CACR,mBAAmB,CAAC,CAAC,YAAY,CAAC,IAAI,KAAK,CAAC,CAAC,YAAY,CAAC,IAAI,GAAG,EACjE,UAAU,CAAC,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,CAAC,OAAO,CAAC,MAAM,GAAG,EACjD,aAAa,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAC7C,aAAa,kBAAkB,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CACxD,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;QAC7B,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,KAAK,UAAU,WAAW,CACxB,MAAc,EACd,OAAe,EACf,MAAiC,EACjC,SAAwB;IAExB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC;YAC1B,MAAM;YACN,OAAO;YACP,KAAK,EAAE,SAAS;YAChB,WAAW,EAAE,cAAc;YAC3B,kBAAkB,EAAE,qBAAqB;SAC1C,CAAC,CAAC;QACH,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,OAAO,CAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACnD,OAAO;YACL,MAAM;YACN,QAAQ,EAAE,OAAO;YACjB,EAAE,EAAE,IAAI;YACR,YAAY,EAAE,EAAE,CAAC,YAAY;YAC7B,OAAO,EAAE;gBACP,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI;gBACrB,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM;gBACzB,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM;gBACzB,UAAU,EAAE,EAAE,CAAC,OAAO,CAAC,UAAU;aAClC;SACF,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,MAAM,GAAI,KAA8B,CAAC,MAAM,CAAC;QACtD,MAAM,iBAAiB,GAAG,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,CAAC;QAC3D,OAAO;YACL,MAAM;YACN,QAAQ,EAAE,OAAO;YACjB,EAAE,EAAE,KAAK;YACT,KAAK,EACH,iBAAiB,IAAI,MAAM,KAAK,aAAa;gBAC3C,CAAC,CAAC,6DAA6D;gBAC/D,CAAC,CAAC,iBAAiB;oBACjB,CAAC,CAAC,uEAAuE;oBACzE,CAAC,CAAC,+BAA+B,WAAW,CAAC,KAAK,CAAC,EAAE;SAC5D,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,OAAO,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACjF,CAAC;AAED,wEAAwE;AACxE,+CAA+C;AAC/C,MAAM,CAAC,KAAK,UAAU,SAAS;IAC7B,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;IAC1C,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAC1B,MAAM,GAAG,GAAG,MAAM,UAAU,EAAE,CAAC;IAC/B,MAAM,OAAO,GAAG,GAAG,EAAE,QAAQ,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IACnD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;IACpF,CAAC;IACD,OAAO,OAAO,CAAC,OAAO,CAAC;AACzB,CAAC;AAED,qEAAqE;AACrE,6DAA6D;AAC7D,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,WAAoB;IAEpB,MAAM,aAAa,GAAG,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,iBAAiB,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;IAC1G,MAAM,GAAG,GAAG,MAAM,UAAU,EAAE,CAAC;IAC/B,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,KAAK,CACb,+EAA+E,CAChF,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,aAAa,IAAI,GAAG,CAAC,eAAe,CAAC;IAClD,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,CAAC;IAC1C,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CACb,qBAAqB,IAAI,QAAQ,UAAU,EAAE,gDAAgD,CAC9F,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,CAAC;AAC/C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,WAAoB;IACnD,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,WAAW,CAAC,CAAC;IAClD,OAAO,CACL,oBAAoB,OAAO,CAAC,OAAO,UAAU,OAAO,CAAC,IAAI,KAAK;QAC9D,8EAA8E,CAC/E,CAAC;AACJ,CAAC"}

package/dist/commands/caps.d.ts

@@ -0,0 +1,82 @@
+import type { CliContext } from "../context.js";
+export interface Budget {
+    period: string;
+    max_cost_cents: number | null;
+    stop_usage: boolean;
+    alerts_enabled: boolean;
+    alert_threshold_pct: number;
+    additional_recipient_user_ids: number[];
+    max_total_tokens: number | null;
+    max_input_tokens: number | null;
+    max_output_tokens: number | null;
+}
+export interface BudgetUsage {
+    period_cost_cents: number;
+    total_tokens: number;
+    percent_used: number | null;
+}
+export interface BudgetEnvelope {
+    budget: Budget;
+    usage: BudgetUsage;
+}
+export interface BudgetSetOptions {
+    amount?: string;
+    hardStop?: boolean;
+    soft?: boolean;
+    enableAlerts?: boolean;
+    disableAlerts?: boolean;
+    alertThreshold?: string;
+    recipientUserId?: string[];
+}
+export interface EntityCap {
+    id: number;
+    cap_cents: number;
+    created_at: string;
+    updated_at: string;
+}
+export interface InstanceCapEnvelope {
+    type: "instance";
+    raw_instance_id: string;
+    agent_instance_id: string;
+    spend_micros: number;
+    cap: EntityCap | null;
+    changed?: boolean;
+}
+export interface EndUserCapEnvelope {
+    type: "end_user";
+    end_user_id: string;
+    spend_micros: number;
+    cap: EntityCap | null;
+    changed?: boolean;
+}
+export interface SeatCapEnvelope {
+    type: "seat";
+    raw_instance_id: string;
+    agent_instance_id: string;
+    end_user_id: string;
+    spend_micros: number;
+    cap: EntityCap | null;
+    changed?: boolean;
+}
+export interface CapSetOptions {
+    amount?: string;
+    clear?: boolean;
+}
+export declare function capsBudgetData(ctx: CliContext): Promise<BudgetEnvelope>;
+export declare function capsBudget(ctx: CliContext): Promise<string>;
+export declare function capsBudgetSetData(ctx: CliContext, opts: BudgetSetOptions): Promise<BudgetEnvelope>;
+export declare function capsBudgetSet(ctx: CliContext, opts: BudgetSetOptions): Promise<string>;
+export declare function capsInstanceData(ctx: CliContext, instance: string): Promise<InstanceCapEnvelope>;
+export declare function capsInstance(ctx: CliContext, instance: string): Promise<string>;
+export declare function capsInstanceSetData(ctx: CliContext, instance: string, opts: CapSetOptions): Promise<InstanceCapEnvelope>;
+export declare function capsInstanceSet(ctx: CliContext, instance: string, opts: CapSetOptions): Promise<string>;
+export declare function capsEndUserData(ctx: CliContext, endUserId: string): Promise<EndUserCapEnvelope>;
+export declare function capsEndUser(ctx: CliContext, endUserId: string): Promise<string>;
+export declare function capsEndUserSetData(ctx: CliContext, endUserId: string, opts: CapSetOptions): Promise<EndUserCapEnvelope>;
+export declare function capsEndUserSet(ctx: CliContext, endUserId: string, opts: CapSetOptions): Promise<string>;
+export declare function capsSeatData(ctx: CliContext, instance: string, endUserId: string): Promise<SeatCapEnvelope>;
+export declare function capsSeat(ctx: CliContext, instance: string, endUserId: string): Promise<string>;
+export declare function capsSeatSetData(ctx: CliContext, instance: string, endUserId: string, opts: CapSetOptions): Promise<SeatCapEnvelope>;
+export declare function capsSeatSet(ctx: CliContext, instance: string, endUserId: string, opts: CapSetOptions): Promise<string>;
+export declare function validateBudgetSetOptions(opts: BudgetSetOptions): void;
+export declare function validateCapSetOptions(opts: CapSetOptions): void;