@eyeauras/cli-factory 0.1.0

package/dist/src/json-rpc.d.ts

@@ -0,0 +1,8 @@
+import type { Readable, Writable } from "node:stream";
+export declare function runJsonRpc(options: {
+    input: Readable;
+    output: Writable;
+    execute: (argv: readonly string[]) => Promise<unknown>;
+    signal?: AbortSignal;
+}): Promise<void>;
+//# sourceMappingURL=json-rpc.d.ts.map

package/dist/src/json-rpc.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"json-rpc.d.ts","sourceRoot":"","sources":["../../src/json-rpc.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AA2EtD,wBAAsB,UAAU,CAAC,OAAO,EAAE;IACxC,KAAK,EAAE,QAAQ,CAAC;IAChB,MAAM,EAAE,QAAQ,CAAC;IACjB,OAAO,EAAE,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACvD,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB,GAAG,OAAO,CAAC,IAAI,CAAC,CA0FhB"}

package/dist/src/json-rpc.js

@@ -0,0 +1,99 @@
+import { once } from "node:events";
+import { boundedLines } from "./bounded-lines.js";
+import { inputLimits, validateArgv } from "./input-limits.js";
+function isRequest(value) {
+    if (typeof value !== "object" || value === null) {
+        return false;
+    }
+    const candidate = value;
+    return candidate.jsonrpc === "2.0" && typeof candidate.method === "string";
+}
+function executeParams(value) {
+    if (typeof value !== "object" || value === null) {
+        return undefined;
+    }
+    const argv = value.argv;
+    try {
+        validateArgv(argv);
+        return { argv: [...argv] };
+    }
+    catch {
+        return undefined;
+    }
+}
+async function response(output, value, signal) {
+    if (output.destroyed || output.writableEnded)
+        throw new Error("JSON-RPC output is closed.");
+    const closed = new AbortController();
+    const onClose = () => closed.abort(new Error("JSON-RPC output closed while writing."));
+    output.once("close", onClose);
+    try {
+        if (!output.write(`${JSON.stringify(value)}\n`))
+            await once(output, "drain", {
+                signal: signal
+                    ? AbortSignal.any([signal, closed.signal])
+                    : closed.signal,
+            });
+    }
+    finally {
+        output.off("close", onClose);
+    }
+}
+function errorResponse(output, id, code, message, signal) {
+    return response(output, {
+        jsonrpc: "2.0",
+        id: id ?? null,
+        error: { code, message },
+    }, signal);
+}
+export async function runJsonRpc(options) {
+    options.signal?.throwIfAborted();
+    for await (const line of boundedLines(options.input, inputLimits.rpcLineBytes, options.signal)) {
+        options.signal?.throwIfAborted();
+        if (!line.trim()) {
+            continue;
+        }
+        let request;
+        try {
+            request = JSON.parse(line);
+        }
+        catch {
+            await errorResponse(options.output, null, -32700, "Parse error", options.signal);
+            continue;
+        }
+        if (!isRequest(request)) {
+            await errorResponse(options.output, null, -32600, "Invalid Request", options.signal);
+            continue;
+        }
+        const expectsResponse = request.id !== undefined;
+        if (request.method !== "cli.execute") {
+            if (expectsResponse) {
+                await errorResponse(options.output, request.id, -32601, "Method not found", options.signal);
+            }
+            continue;
+        }
+        const params = executeParams(request.params);
+        if (!params) {
+            if (expectsResponse) {
+                await errorResponse(options.output, request.id, -32602, "Expected params.argv within the command argument count and byte limits", options.signal);
+            }
+            continue;
+        }
+        let result;
+        try {
+            result = await options.execute(params.argv);
+        }
+        catch (error) {
+            if (expectsResponse)
+                await errorResponse(options.output, request.id, -32000, error instanceof Error ? error.message : String(error), options.signal);
+            continue;
+        }
+        if (expectsResponse)
+            await response(options.output, {
+                jsonrpc: "2.0",
+                id: request.id ?? null,
+                result: result ?? null,
+            }, options.signal);
+    }
+}
+//# sourceMappingURL=json-rpc.js.map

package/dist/src/json-rpc.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"json-rpc.js","sourceRoot":"","sources":["../../src/json-rpc.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AACnC,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAc9D,SAAS,SAAS,CAAC,KAAc;IAC/B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAChD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,SAAS,GAAG,KAAgC,CAAC;IACnD,OAAO,SAAS,CAAC,OAAO,KAAK,KAAK,IAAI,OAAO,SAAS,CAAC,MAAM,KAAK,QAAQ,CAAC;AAC7E,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAChD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,IAAI,GAAI,KAAgC,CAAC,IAAI,CAAC;IACpD,IAAI,CAAC;QACH,YAAY,CAAC,IAAI,CAAC,CAAC;QACnB,OAAO,EAAE,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,EAAE,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,QAAQ,CACrB,MAAgB,EAChB,KAAc,EACd,MAAoB;IAEpB,IAAI,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,aAAa;QAC1C,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAChD,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;IACrC,MAAM,OAAO,GAAG,GAAG,EAAE,CACnB,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC,CAAC;IACnE,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC9B,IAAI,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC;YAC7C,MAAM,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE;gBAC1B,MAAM,EAAE,MAAM;oBACZ,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;oBAC1C,CAAC,CAAC,MAAM,CAAC,MAAM;aAClB,CAAC,CAAC;IACP,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC/B,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CACpB,MAAgB,EAChB,EAAwB,EACxB,IAAY,EACZ,OAAe,EACf,MAAoB;IAEpB,OAAO,QAAQ,CACb,MAAM,EACN;QACE,OAAO,EAAE,KAAK;QACd,EAAE,EAAE,EAAE,IAAI,IAAI;QACd,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE;KACzB,EACD,MAAM,CACP,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,OAKhC;IACC,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;IACjC,IAAI,KAAK,EAAE,MAAM,IAAI,IAAI,YAAY,CACnC,OAAO,CAAC,KAAK,EACb,WAAW,CAAC,YAAY,EACxB,OAAO,CAAC,MAAM,CACf,EAAE,CAAC;QACF,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;QACjC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;YACjB,SAAS;QACX,CAAC;QAED,IAAI,OAAgB,CAAC;QACrB,IAAI,CAAC;YACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC7B,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,aAAa,CACjB,OAAO,CAAC,MAAM,EACd,IAAI,EACJ,CAAC,KAAK,EACN,aAAa,EACb,OAAO,CAAC,MAAM,CACf,CAAC;YACF,SAAS;QACX,CAAC;QAED,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;YACxB,MAAM,aAAa,CACjB,OAAO,CAAC,MAAM,EACd,IAAI,EACJ,CAAC,KAAK,EACN,iBAAiB,EACjB,OAAO,CAAC,MAAM,CACf,CAAC;YACF,SAAS;QACX,CAAC;QAED,MAAM,eAAe,GAAG,OAAO,CAAC,EAAE,KAAK,SAAS,CAAC;QACjD,IAAI,OAAO,CAAC,MAAM,KAAK,aAAa,EAAE,CAAC;YACrC,IAAI,eAAe,EAAE,CAAC;gBACpB,MAAM,aAAa,CACjB,OAAO,CAAC,MAAM,EACd,OAAO,CAAC,EAAE,EACV,CAAC,KAAK,EACN,kBAAkB,EAClB,OAAO,CAAC,MAAM,CACf,CAAC;YACJ,CAAC;YACD,SAAS;QACX,CAAC;QAED,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC7C,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,IAAI,eAAe,EAAE,CAAC;gBACpB,MAAM,aAAa,CACjB,OAAO,CAAC,MAAM,EACd,OAAO,CAAC,EAAE,EACV,CAAC,KAAK,EACN,wEAAwE,EACxE,OAAO,CAAC,MAAM,CACf,CAAC;YACJ,CAAC;YACD,SAAS;QACX,CAAC;QAED,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC9C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,eAAe;gBACjB,MAAM,aAAa,CACjB,OAAO,CAAC,MAAM,EACd,OAAO,CAAC,EAAE,EACV,CAAC,KAAK,EACN,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EACtD,OAAO,CAAC,MAAM,CACf,CAAC;YACJ,SAAS;QACX,CAAC;QACD,IAAI,eAAe;YACjB,MAAM,QAAQ,CACZ,OAAO,CAAC,MAAM,EACd;gBACE,OAAO,EAAE,KAAK;gBACd,EAAE,EAAE,OAAO,CAAC,EAAE,IAAI,IAAI;gBACtB,MAAM,EAAE,MAAM,IAAI,IAAI;aACvB,EACD,OAAO,CAAC,MAAM,CACf,CAAC;IACN,CAAC;AACH,CAAC"}

package/dist/src/option-parsers.d.ts

@@ -0,0 +1,10 @@
+/** Decimal integer syntax and bounds only; callers supply a static, non-secret error message. */
+export declare function integerParser({ min, max, signed, errorMessage }: {
+    min: number;
+    max: number;
+    signed: boolean;
+    errorMessage: string;
+}): (value: string) => number;
+/** Parse JSON to unknown, without exposing the input or the native parser's error/cause. */
+export declare function jsonParser(errorMessage: string): (value: string) => unknown;
+//# sourceMappingURL=option-parsers.d.ts.map

package/dist/src/option-parsers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"option-parsers.d.ts","sourceRoot":"","sources":["../../src/option-parsers.ts"],"names":[],"mappings":"AAAA,iGAAiG;AACjG,wBAAgB,aAAa,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,YAAY,EAAE,EAAE;IAChE,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,OAAO,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;CACtB,GAAG,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,CAY5B;AAED,4FAA4F;AAC5F,wBAAgB,UAAU,CAAC,YAAY,EAAE,MAAM,GAAG,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAQ3E"}

package/dist/src/option-parsers.js

@@ -0,0 +1,26 @@
+/** Decimal integer syntax and bounds only; callers supply a static, non-secret error message. */
+export function integerParser({ min, max, signed, errorMessage }) {
+    if (!Number.isSafeInteger(min) || !Number.isSafeInteger(max) || min > max) {
+        throw new Error("Integer parser bounds must be ordered safe integers.");
+    }
+    const syntax = signed ? /^-?\d+$/ : /^\d+$/;
+    return value => {
+        const number = Number(value);
+        if (!syntax.test(value) || !Number.isSafeInteger(number) || number < min || number > max) {
+            throw new Error(errorMessage);
+        }
+        return number;
+    };
+}
+/** Parse JSON to unknown, without exposing the input or the native parser's error/cause. */
+export function jsonParser(errorMessage) {
+    return value => {
+        try {
+            return JSON.parse(value);
+        }
+        catch {
+            throw new Error(errorMessage);
+        }
+    };
+}
+//# sourceMappingURL=option-parsers.js.map

package/dist/src/option-parsers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"option-parsers.js","sourceRoot":"","sources":["../../src/option-parsers.ts"],"names":[],"mappings":"AAAA,iGAAiG;AACjG,MAAM,UAAU,aAAa,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,YAAY,EAK7D;IACC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,GAAG,EAAE,CAAC;QAC1E,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IAC1E,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC;IAC5C,OAAO,KAAK,CAAC,EAAE;QACb,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QAC7B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,GAAG,IAAI,MAAM,GAAG,GAAG,EAAE,CAAC;YACzF,MAAM,IAAI,KAAK,CAAC,YAAY,CAAC,CAAC;QAChC,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;AACJ,CAAC;AAED,4FAA4F;AAC5F,MAAM,UAAU,UAAU,CAAC,YAAoB;IAC7C,OAAO,KAAK,CAAC,EAAE;QACb,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAY,CAAC;QACtC,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CAAC,YAAY,CAAC,CAAC;QAChC,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}

package/dist/src/output.d.ts

@@ -0,0 +1,4 @@
+import type { Writable } from "node:stream";
+export declare function formatHuman(value: unknown): string;
+export declare function writeResult(output: Writable, value: unknown, json: boolean): void;
+//# sourceMappingURL=output.d.ts.map

package/dist/src/output.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"output.d.ts","sourceRoot":"","sources":["../../src/output.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAoC5C,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAmBlD;AAED,wBAAgB,WAAW,CAAC,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,GAAG,IAAI,CAKjF"}

package/dist/src/output.js

@@ -0,0 +1,54 @@
+import { inspect } from "node:util";
+function isRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function displayCell(value) {
+    if (value === null || value === undefined) {
+        return "";
+    }
+    if (typeof value === "object") {
+        return JSON.stringify(value);
+    }
+    return String(value);
+}
+function table(values) {
+    const columns = [...new Set(values.flatMap((value) => Object.keys(value)))];
+    if (columns.length === 0) {
+        return "";
+    }
+    const rows = values.map((value) => columns.map((column) => displayCell(value[column])));
+    const widths = columns.map((column, index) => Math.max(column.length, ...rows.map((row) => row[index]?.length ?? 0)));
+    const formatRow = (row) => row.map((cell, index) => cell.padEnd(widths[index] ?? 0)).join("  ").trimEnd();
+    return [
+        formatRow(columns),
+        formatRow(widths.map((width) => "-".repeat(width))),
+        ...rows.map(formatRow),
+    ].join("\n");
+}
+export function formatHuman(value) {
+    if (value === undefined || value === null) {
+        return "";
+    }
+    if (typeof value === "string") {
+        return value;
+    }
+    if (Array.isArray(value) && value.every(isRecord)) {
+        if (value.length === 0) {
+            return "No results.";
+        }
+        return table(value);
+    }
+    if (isRecord(value)) {
+        return Object.entries(value)
+            .map(([key, entry]) => `${key}: ${displayCell(entry)}`)
+            .join("\n");
+    }
+    return inspect(value, { colors: false, depth: 6, compact: false });
+}
+export function writeResult(output, value, json) {
+    const rendered = json ? JSON.stringify(value ?? null) : formatHuman(value);
+    if (rendered.length > 0) {
+        output.write(`${rendered}\n`);
+    }
+}
+//# sourceMappingURL=output.js.map

package/dist/src/output.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"output.js","sourceRoot":"","sources":["../../src/output.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAGpC,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QAC1C,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IACD,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;AACvB,CAAC;AAED,SAAS,KAAK,CAAC,MAA0C;IACvD,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5E,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IACxF,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAC3C,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,MAAM,IAAI,CAAC,CAAC,CAAC,CACvE,CAAC;IACF,MAAM,SAAS,GAAG,CAAC,GAAsB,EAAU,EAAE,CACnD,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;IAEjF,OAAO;QACL,SAAS,CAAC,OAAO,CAAC;QAClB,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACnD,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC;KACvB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,KAAc;IACxC,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAC1C,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;QAClD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,OAAO,aAAa,CAAC;QACvB,CAAC;QACD,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;IACD,IAAI,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACpB,OAAO,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;aACzB,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,KAAK,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC;aACtD,IAAI,CAAC,IAAI,CAAC,CAAC;IAChB,CAAC;IACD,OAAO,OAAO,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;AACrE,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,MAAgB,EAAE,KAAc,EAAE,IAAa;IACzE,MAAM,QAAQ,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;IAC3E,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,CAAC,KAAK,CAAC,GAAG,QAAQ,IAAI,CAAC,CAAC;IAChC,CAAC;AACH,CAAC"}

package/dist/src/permissions.d.ts

@@ -0,0 +1,11 @@
+import type { CommandDefinition, PermissionCategory, PermissionGateDefinition, ProfileStoreContract } from "./types.js";
+/** Core-only declarations; admission policy stays in the shared command adapter. */
+export declare function createPermissionCommand(categories: readonly PermissionCategory[], store: ProfileStoreContract, enabledPermissions: (profile: string) => Promise<Set<string>>): CommandDefinition;
+export declare const Permission: Readonly<{
+    readonly ReadOnly: "ReadOnly";
+    readonly Update: "Update";
+}>;
+export declare function resolvePermissionCategories(definition: PermissionGateDefinition): readonly PermissionCategory[];
+export declare function validateCommandPermissions(commands: readonly CommandDefinition[], categories: readonly PermissionCategory[]): void;
+export declare function validatePermissionsDisabled(commands: readonly CommandDefinition[]): void;
+//# sourceMappingURL=permissions.d.ts.map

package/dist/src/permissions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissions.d.ts","sourceRoot":"","sources":["../../src/permissions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,iBAAiB,EACjB,kBAAkB,EAClB,wBAAwB,EACxB,oBAAoB,EACrB,MAAM,YAAY,CAAC;AAGpB,oFAAoF;AACpF,wBAAgB,uBAAuB,CACrC,UAAU,EAAE,SAAS,kBAAkB,EAAE,EACzC,KAAK,EAAE,oBAAoB,EAC3B,kBAAkB,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,GAC5D,iBAAiB,CAyCnB;AAED,eAAO,MAAM,UAAU;uBACX,UAAU;qBACZ,QAAQ;EACP,CAAC;AAiBZ,wBAAgB,2BAA2B,CACzC,UAAU,EAAE,wBAAwB,GACnC,SAAS,kBAAkB,EAAE,CAiB/B;AAED,wBAAgB,0BAA0B,CACxC,QAAQ,EAAE,SAAS,iBAAiB,EAAE,EACtC,UAAU,EAAE,SAAS,kBAAkB,EAAE,GACxC,IAAI,CAsBN;AAED,wBAAgB,2BAA2B,CACzC,QAAQ,EAAE,SAAS,iBAAiB,EAAE,GACrC,IAAI,CAcN"}

package/dist/src/permissions.js

@@ -0,0 +1,95 @@
+import { command } from "./command.js";
+/** Core-only declarations; admission policy stays in the shared command adapter. */
+export function createPermissionCommand(categories, store, enabledPermissions) {
+    const names = categories.map((category) => category.name);
+    return command("permissions", "Manage profile-specific safety permissions", [
+        command("list", "List permissions for the selected profile", async (_input, context) => {
+            const enabled = await enabledPermissions(context.profile.name);
+            return categories.map((category) => ({
+                name: category.name,
+                enabled: enabled.has(category.name),
+                description: category.description,
+            }));
+        }),
+        ...["grant", "revoke"].map((action) => command(`${action} <permission>`, `${action === "grant" ? "Enable" : "Disable"} a permission for the selected profile`, async ({ args }, context) => {
+            const permission = String(args.permission);
+            if (!names.includes(permission))
+                throw new Error(`Unknown permission '${permission}'. Available permissions: ${names.join(", ")}.`);
+            const enabled = await enabledPermissions(context.profile.name);
+            if (action === "grant")
+                enabled.add(permission);
+            else
+                enabled.delete(permission);
+            await store.setPermissions(context.profile.name, names.filter((name) => enabled.has(name)));
+            return {
+                profile: context.profile.name,
+                permission,
+                enabled: action === "grant",
+            };
+        })),
+    ]);
+}
+export const Permission = Object.freeze({
+    ReadOnly: "ReadOnly",
+    Update: "Update",
+});
+const builtInCategories = [
+    {
+        name: Permission.ReadOnly,
+        description: "Read remote state without changing it",
+        enabledByDefault: true,
+    },
+    {
+        name: Permission.Update,
+        description: "Perform operations that may change remote state",
+        enabledByDefault: false,
+    },
+];
+const categoryNamePattern = /^[A-Za-z][A-Za-z0-9._-]{0,63}$/;
+export function resolvePermissionCategories(definition) {
+    const categories = [...builtInCategories, ...(definition.categories ?? [])];
+    const names = new Set();
+    for (const category of categories) {
+        if (!categoryNamePattern.test(category.name)) {
+            throw new Error(`Permission category '${category.name}' must start with a letter and contain at most 64 letters, numbers, dots, dashes, or underscores.`);
+        }
+        if (names.has(category.name)) {
+            throw new Error(`Permission category '${category.name}' is declared more than once.`);
+        }
+        names.add(category.name);
+    }
+    return categories;
+}
+export function validateCommandPermissions(commands, categories) {
+    const known = new Set(categories.map((category) => category.name));
+    const visit = (command, parentPath) => {
+        const commandName = command.name.trim().split(/\s+/, 1)[0] ?? command.name;
+        const path = parentPath ? `${parentPath} ${commandName}` : commandName;
+        if (command.run && !command.permission) {
+            throw new Error(`Command '${path}' must declare a permission because the permission gate is enabled.`);
+        }
+        if (command.permission && !known.has(command.permission)) {
+            throw new Error(`Command '${path}' requires unknown permission '${command.permission}'.`);
+        }
+        for (const child of command.children ?? []) {
+            visit(child, path);
+        }
+    };
+    for (const command of commands) {
+        visit(command, "");
+    }
+}
+export function validatePermissionsDisabled(commands) {
+    const visit = (command) => {
+        if (command.permission) {
+            throw new Error(`Command '${command.name}' declares permission '${command.permission}', but the CLI permission gate is not enabled.`);
+        }
+        for (const child of command.children ?? []) {
+            visit(child);
+        }
+    };
+    for (const command of commands) {
+        visit(command);
+    }
+}
+//# sourceMappingURL=permissions.js.map

package/dist/src/permissions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissions.js","sourceRoot":"","sources":["../../src/permissions.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAEvC,oFAAoF;AACpF,MAAM,UAAU,uBAAuB,CACrC,UAAyC,EACzC,KAA2B,EAC3B,kBAA6D;IAE7D,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC1D,OAAO,OAAO,CAAC,aAAa,EAAE,4CAA4C,EAAE;QAC1E,OAAO,CACL,MAAM,EACN,2CAA2C,EAC3C,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE;YACxB,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAC/D,OAAO,UAAU,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;gBACnC,IAAI,EAAE,QAAQ,CAAC,IAAI;gBACnB,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC;gBACnC,WAAW,EAAE,QAAQ,CAAC,WAAW;aAClC,CAAC,CAAC,CAAC;QACN,CAAC,CACF;QACD,GAAI,CAAC,OAAO,EAAE,QAAQ,CAAW,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAC/C,OAAO,CACL,GAAG,MAAM,eAAe,EACxB,GAAG,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,wCAAwC,EACpF,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,EAAE;YAC1B,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAC3C,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC;gBAC7B,MAAM,IAAI,KAAK,CACb,uBAAuB,UAAU,6BAA6B,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAClF,CAAC;YACJ,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAC/D,IAAI,MAAM,KAAK,OAAO;gBAAE,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;;gBAC3C,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YAChC,MAAM,KAAK,CAAC,cAAc,CACxB,OAAO,CAAC,OAAO,CAAC,IAAI,EACpB,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAC1C,CAAC;YACF,OAAO;gBACL,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,IAAI;gBAC7B,UAAU;gBACV,OAAO,EAAE,MAAM,KAAK,OAAO;aAC5B,CAAC;QACJ,CAAC,CACF,CACF;KACF,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC;IACtC,QAAQ,EAAE,UAAU;IACpB,MAAM,EAAE,QAAQ;CACR,CAAC,CAAC;AAEZ,MAAM,iBAAiB,GAAkC;IACvD;QACE,IAAI,EAAE,UAAU,CAAC,QAAQ;QACzB,WAAW,EAAE,uCAAuC;QACpD,gBAAgB,EAAE,IAAI;KACvB;IACD;QACE,IAAI,EAAE,UAAU,CAAC,MAAM;QACvB,WAAW,EAAE,iDAAiD;QAC9D,gBAAgB,EAAE,KAAK;KACxB;CACF,CAAC;AAEF,MAAM,mBAAmB,GAAG,gCAAgC,CAAC;AAE7D,MAAM,UAAU,2BAA2B,CACzC,UAAoC;IAEpC,MAAM,UAAU,GAAG,CAAC,GAAG,iBAAiB,EAAE,GAAG,CAAC,UAAU,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,CAAC;IAC5E,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,KAAK,MAAM,QAAQ,IAAI,UAAU,EAAE,CAAC;QAClC,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7C,MAAM,IAAI,KAAK,CACb,wBAAwB,QAAQ,CAAC,IAAI,mGAAmG,CACzI,CAAC;QACJ,CAAC;QACD,IAAI,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CACb,wBAAwB,QAAQ,CAAC,IAAI,+BAA+B,CACrE,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC3B,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,0BAA0B,CACxC,QAAsC,EACtC,UAAyC;IAEzC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;IACnE,MAAM,KAAK,GAAG,CAAC,OAA0B,EAAE,UAAkB,EAAQ,EAAE;QACrE,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC;QAC3E,MAAM,IAAI,GAAG,UAAU,CAAC,CAAC,CAAC,GAAG,UAAU,IAAI,WAAW,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC;QACvE,IAAI,OAAO,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;YACvC,MAAM,IAAI,KAAK,CACb,YAAY,IAAI,qEAAqE,CACtF,CAAC;QACJ,CAAC;QACD,IAAI,OAAO,CAAC,UAAU,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;YACzD,MAAM,IAAI,KAAK,CACb,YAAY,IAAI,kCAAkC,OAAO,CAAC,UAAU,IAAI,CACzE,CAAC;QACJ,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,QAAQ,IAAI,EAAE,EAAE,CAAC;YAC3C,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACrB,CAAC;IACH,CAAC,CAAC;IACF,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IACrB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,2BAA2B,CACzC,QAAsC;IAEtC,MAAM,KAAK,GAAG,CAAC,OAA0B,EAAQ,EAAE;QACjD,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CACb,YAAY,OAAO,CAAC,IAAI,0BAA0B,OAAO,CAAC,UAAU,gDAAgD,CACrH,CAAC;QACJ,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,QAAQ,IAAI,EAAE,EAAE,CAAC;YAC3C,KAAK,CAAC,KAAK,CAAC,CAAC;QACf,CAAC;IACH,CAAC,CAAC;IACF,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,KAAK,CAAC,OAAO,CAAC,CAAC;IACjB,CAAC;AACH,CAAC"}

package/dist/src/private-storage.d.ts

@@ -0,0 +1,5 @@
+/** Only call for a dedicated application-owned directory, never a user-selected parent. */
+export declare function privateDirectory(path: string): Promise<void>;
+/** grpc-js owns the pipe; this only restricts the OS object's ACL before readiness. */
+export declare function privateEndpoint(path: string): Promise<void>;
+//# sourceMappingURL=private-storage.d.ts.map

package/dist/src/private-storage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"private-storage.d.ts","sourceRoot":"","sources":["../../src/private-storage.ts"],"names":[],"mappings":"AA4BA,2FAA2F;AAC3F,wBAAsB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAelE;AAED,uFAAuF;AACvF,wBAAsB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CA8BjE"}

package/dist/src/private-storage.js

@@ -0,0 +1,68 @@
+import { mkdir, chmod } from "node:fs/promises";
+import { execFile } from "node:child_process";
+import { promisify } from "node:util";
+const execute = promisify(execFile);
+const quote = (value) => "'" + value.replaceAll("'", "''") + "'";
+async function windows(script) {
+    try {
+        await execute("powershell.exe", [
+            "-NoProfile",
+            "-NonInteractive",
+            "-EncodedCommand",
+            Buffer.from("$ErrorActionPreference='Stop'; " + script, "utf16le").toString("base64"),
+        ], { windowsHide: true, timeout: 15_000, maxBuffer: 8192 });
+    }
+    catch {
+        throw new Error("Cannot restrict runtime storage to the current Windows user.");
+    }
+}
+/** Only call for a dedicated application-owned directory, never a user-selected parent. */
+export async function privateDirectory(path) {
+    await mkdir(path, { recursive: true, mode: 0o700 });
+    if (process.platform !== "win32") {
+        await chmod(path, 0o700);
+        return;
+    }
+    await windows(`
+    $taskSid=[Security.Principal.WindowsIdentity]::GetCurrent().User;
+    $taskAcl=New-Object Security.AccessControl.DirectorySecurity;
+    $taskAcl.SetOwner($taskSid);
+    $taskAcl.SetAccessRuleProtection($true,$false);
+    $taskRule=New-Object Security.AccessControl.FileSystemAccessRule($taskSid,'FullControl','ContainerInherit,ObjectInherit','None','Allow');
+    $taskAcl.AddAccessRule($taskRule);
+    [IO.Directory]::SetAccessControl(${quote(path)},$taskAcl);
+  `);
+}
+/** grpc-js owns the pipe; this only restricts the OS object's ACL before readiness. */
+export async function privateEndpoint(path) {
+    if (process.platform !== "win32") {
+        await chmod(path, 0o600);
+        return;
+    }
+    await windows(`
+    Add-Type -TypeDefinition @'
+using System;
+using System.Runtime.InteropServices;
+public static class PipePermissions {
+ [DllImport("advapi32.dll",CharSet=CharSet.Unicode,SetLastError=true)]
+ static extern bool ConvertStringSecurityDescriptorToSecurityDescriptor(string s,uint v,out IntPtr sd,out uint n);
+ [DllImport("advapi32.dll",SetLastError=true)]
+ static extern bool GetSecurityDescriptorDacl(IntPtr sd,out bool present,out IntPtr dacl,out bool defaulted);
+ [DllImport("advapi32.dll",CharSet=CharSet.Unicode)]
+ static extern uint SetNamedSecurityInfo(string name,int type,uint flags,IntPtr owner,IntPtr group,IntPtr dacl,IntPtr sacl);
+ [DllImport("kernel32.dll")] static extern IntPtr LocalFree(IntPtr p);
+ public static void Restrict(string path,string sid) {
+  IntPtr sd;uint n;if(!ConvertStringSecurityDescriptorToSecurityDescriptor("D:P(A;;GA;;;"+sid+")",1,out sd,out n))throw new Exception("Invalid descriptor");
+  try {
+   bool present,def;IntPtr dacl;
+   if(!GetSecurityDescriptorDacl(sd,out present,out dacl,out def))throw new Exception("Invalid DACL");
+   uint result=SetNamedSecurityInfo(path,1,0x80000004,IntPtr.Zero,IntPtr.Zero,dacl,IntPtr.Zero);
+   if(result!=0)throw new Exception("Pipe access protection failed: "+result);
+  }finally{LocalFree(sd);}
+ }
+}
+'@
+    [PipePermissions]::Restrict(${quote(path)},[Security.Principal.WindowsIdentity]::GetCurrent().User.Value);
+  `);
+}
+//# sourceMappingURL=private-storage.js.map

package/dist/src/private-storage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"private-storage.js","sourceRoot":"","sources":["../../src/private-storage.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAChD,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAEtC,MAAM,OAAO,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AACpC,MAAM,KAAK,GAAG,CAAC,KAAa,EAAE,EAAE,CAAC,GAAG,GAAG,KAAK,CAAC,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,GAAG,CAAC;AACzE,KAAK,UAAU,OAAO,CAAC,MAAc;IACnC,IAAI,CAAC;QACH,MAAM,OAAO,CACX,gBAAgB,EAChB;YACE,YAAY;YACZ,iBAAiB;YACjB,iBAAiB;YACjB,MAAM,CAAC,IAAI,CACT,iCAAiC,GAAG,MAAM,EAC1C,SAAS,CACV,CAAC,QAAQ,CAAC,QAAQ,CAAC;SACrB,EACD,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,CACxD,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CACb,8DAA8D,CAC/D,CAAC;IACJ,CAAC;AACH,CAAC;AAED,2FAA2F;AAC3F,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,IAAY;IACjD,MAAM,KAAK,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACpD,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACjC,MAAM,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACzB,OAAO;IACT,CAAC;IACD,MAAM,OAAO,CAAC;;;;;;;uCAOuB,KAAK,CAAC,IAAI,CAAC;GAC/C,CAAC,CAAC;AACL,CAAC;AAED,uFAAuF;AACvF,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAAY;IAChD,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACjC,MAAM,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACzB,OAAO;IACT,CAAC;IACD,MAAM,OAAO,CAAC;;;;;;;;;;;;;;;;;;;;;;;kCAuBkB,KAAK,CAAC,IAAI,CAAC;GAC1C,CAAC,CAAC;AACL,CAAC"}

package/dist/src/profile-commands.d.ts

@@ -0,0 +1,29 @@
+import type { CliDefinition, CommandContext, Profile, ProfileField, ProfileStoreContract } from "./types.js";
+interface ConfigurationState {
+    missingFields: readonly ProfileField[];
+    authenticationMissing: boolean;
+}
+interface ConfigureProfileOptions {
+    values: Record<string, unknown>;
+    authOptions: Record<string, unknown>;
+    interactive: boolean;
+}
+interface ProfileInvocation {
+    contextFor(profile: Profile): CommandContext;
+    stdinAvailable: boolean;
+    interactive(): boolean;
+}
+/** Profile/auth declarations and onboarding share the same operations, not a second parser. */
+export declare function createProfileCommands(definition: Pick<CliDefinition, "name" | "profile" | "auth">, profileStore: ProfileStoreContract, invocation: ProfileInvocation, invalidateProfile: (profile: Profile) => Promise<void>): {
+    commands: import("./types.js").CommandDefinition[];
+    configureProfile: (profileName: string, options: ConfigureProfileOptions) => Promise<{
+        configured: true;
+        profile: string;
+        authenticated: true;
+        identity: unknown;
+    }>;
+    configurationState: (profile: Profile) => Promise<ConfigurationState>;
+    configurationError: (profile: Profile, state: ConfigurationState) => Error;
+};
+export {};
+//# sourceMappingURL=profile-commands.d.ts.map

package/dist/src/profile-commands.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"profile-commands.d.ts","sourceRoot":"","sources":["../../src/profile-commands.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAEV,aAAa,EACb,cAAc,EACd,OAAO,EACP,YAAY,EACZ,oBAAoB,EAErB,MAAM,YAAY,CAAC;AAEpB,UAAU,kBAAkB;IAC1B,aAAa,EAAE,SAAS,YAAY,EAAE,CAAC;IACvC,qBAAqB,EAAE,OAAO,CAAC;CAChC;AAED,UAAU,uBAAuB;IAC/B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,WAAW,EAAE,OAAO,CAAC;CACtB;AAED,UAAU,iBAAiB;IACzB,UAAU,CAAC,OAAO,EAAE,OAAO,GAAG,cAAc,CAAC;IAC7C,cAAc,EAAE,OAAO,CAAC;IACxB,WAAW,IAAI,OAAO,CAAC;CACxB;AA4DD,+FAA+F;AAC/F,wBAAgB,qBAAqB,CACnC,UAAU,EAAE,IAAI,CAAC,aAAa,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAAC,EAC5D,YAAY,EAAE,oBAAoB,EAClC,UAAU,EAAE,iBAAiB,EAC7B,iBAAiB,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,IAAI,CAAC;;oCAgEvC,MAAM,WACV,uBAAuB,KAC/B,OAAO,CAAC;QACT,UAAU,EAAE,IAAI,CAAC;QACjB,OAAO,EAAE,MAAM,CAAC;QAChB,aAAa,EAAE,IAAI,CAAC;QACpB,QAAQ,EAAE,OAAO,CAAC;KACnB,CAAC;kCA3DS,OAAO,KACf,OAAO,CAAC,kBAAkB,CAAC;kCAsBnB,OAAO,SACT,kBAAkB,KACxB,KAAK;EA6QT"}