@fluid-app/fluid-cli 0.1.16 → 0.1.17

package/template-skills/fluid-widget-authoring/references/workflows.md

@@ -0,0 +1,50 @@
+# Development and publication
+
+## Standalone widget project
+
+Use the installed command reference for the complete command tree, arguments,
+options, defaults, and current authentication requirements. The commands below
+show the normal verification and publication sequence; they are not a command
+catalog.
+
+```bash
+pnpm typecheck
+pnpm validate
+pnpm build
+pnpm run widget:publish --dry-run
+pnpm run widget:publish
+```
+
+Validation, build, and dry-run publication can use the Droplet ID already in
+`fluid.widget.config.ts`. Actual publication requires Fluid CLI
+authentication. Interactive linking also requires authentication; linking with
+an explicit Droplet ID does not need a lookup.
+
+Do not edit content under `.fluid/`. There is no separate preview application;
+use a portal or builder host with the development endpoints documented by the
+installed CLI reference.
+
+## Company widget package in a portal project
+
+Create a package with `fluid portal widget create`, then use the portal
+project's typecheck, lint, build, and development host. `fluid portal deploy`
+builds and publishes company widget artifacts from `src/widgets.config.ts`.
+It does not publish portal JSON or deploy portal application assets.
+
+The portal command tree has no `publish` command. Standalone packages publish
+with `fluid widget publish`.
+
+## Recovery
+
+- Missing Droplet ID: link the standalone project or supply the Droplet
+  option.
+- Invalid owner: use `company` for portal-project packages and `droplet` for
+  standalone packages.
+- Invalid package key or version: use URL-safe identifiers and semantic
+  versions without build metadata.
+- Missing CSS: restore the generated root stylesheet and its standalone worker
+  import when applicable.
+- Build failure: preserve source and configuration, remove only generated
+  output when a clean build is required, then rerun the failed command.
+- Published versions are immutable; publish a new version instead of reusing
+  one.

package/dist/token-CAwMf0K7.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"token-CAwMf0K7.mjs","names":[],"sources":["../src/utils/result.ts","../src/auth/fluid-api.ts","../src/config/types.ts","../src/config/paths.ts","../src/config/config.ts","../src/config/project-config.ts","../src/auth/token.ts"],"sourcesContent":["/**\n * Result type utilities for type-safe error handling\n *\n * The Result<T, E> pattern provides a discriminated union for fallible operations,\n * enabling exhaustive handling without try/catch blocks.\n */\n\n// ─────────────────────────────────────────────────────────────────────────────\n// Result type - discriminated union for success/failure\n// ─────────────────────────────────────────────────────────────────────────────\n\nexport interface Success<T> {\n  readonly success: true;\n  readonly value: T;\n}\n\nexport interface Failure<E> {\n  readonly success: false;\n  readonly error: E;\n}\n\nexport type Result<T, E = Error> = Success<T> | Failure<E>;\n\n// ─────────────────────────────────────────────────────────────────────────────\n// Constructor functions\n// ─────────────────────────────────────────────────────────────────────────────\n\nexport function success<T>(value: T): Success<T> {\n  return { success: true, value };\n}\n\nexport function failure<E>(error: E): Failure<E> {\n  return { success: false, error };\n}\n\n// ─────────────────────────────────────────────────────────────────────────────\n// Type guards\n// ─────────────────────────────────────────────────────────────────────────────\n\nexport function isSuccess<T, E>(result: Result<T, E>): result is Success<T> {\n  return result.success === true;\n}\n\nexport function isFailure<T, E>(result: Result<T, E>): result is Failure<E> {\n  return result.success === false;\n}\n\n// ─────────────────────────────────────────────────────────────────────────────\n// Utility functions\n// ─────────────────────────────────────────────────────────────────────────────\n\nexport function tryCatch<T>(fn: () => T): Result<T, Error> {\n  try {\n    return success(fn());\n  } catch (error) {\n    return failure(error instanceof Error ? error : new Error(String(error)));\n  }\n}\n\nexport async function tryCatchAsync<T>(\n  fn: () => Promise<T>,\n): Promise<Result<T, Error>> {\n  try {\n    return success(await fn());\n  } catch (error) {\n    return failure(error instanceof Error ? error : new Error(String(error)));\n  }\n}\n\nexport function unwrap<T, E>(result: Result<T, E>): T {\n  if (isSuccess(result)) return result.value;\n  // Always throw an Error instance so V8 attaches a stack trace and\n  // `instanceof Error` checks in catch blocks work as expected.\n  if (result.error instanceof Error) throw result.error;\n  throw new Error(\n    typeof result.error === \"object\" && result.error !== null\n      ? JSON.stringify(result.error)\n      : String(result.error),\n  );\n}\n\nexport function unwrapOr<T, E>(result: Result<T, E>, defaultValue: T): T {\n  if (isSuccess(result)) return result.value;\n  return defaultValue;\n}\n\nexport function mapResult<T, U, E>(\n  result: Result<T, E>,\n  fn: (value: T) => U,\n): Result<U, E> {\n  if (isSuccess(result)) return success(fn(result.value));\n  return result;\n}\n\nexport function mapError<T, E, F>(\n  result: Result<T, E>,\n  fn: (error: E) => F,\n): Result<T, F> {\n  if (isFailure(result)) return failure(fn(result.error));\n  return result;\n}\n\n// ─────────────────────────────────────────────────────────────────────────────\n// Error narrowing utilities\n// ─────────────────────────────────────────────────────────────────────────────\n\nexport function isError(value: unknown): value is Error {\n  return value instanceof Error;\n}\n\nexport function isNodeError(value: unknown): value is NodeJS.ErrnoException {\n  return value instanceof Error && \"code\" in value;\n}\n\nexport function getErrorMessage(error: unknown): string {\n  if (error instanceof Error) return error.message;\n  if (typeof error === \"string\") return error;\n  return String(error);\n}\n","/**\n * Fluid API client for authentication operations\n */\n\nimport type { CliError } from \"../utils/errors.js\";\nimport { type Result, success, failure } from \"../utils/result.js\";\n\nconst API_TIMEOUT_MS = 10_000;\n\nexport function getFluidApiBase(): string {\n  return process.env[\"FLUID_API_BASE\"] ?? \"https://api.fluid.app\";\n}\n\nfunction makeSignal(): { signal: AbortSignal; cleanup: () => void } {\n  const controller = new AbortController();\n  const timer = setTimeout(() => controller.abort(), API_TIMEOUT_MS);\n  return { signal: controller.signal, cleanup: () => clearTimeout(timer) };\n}\n\nexport interface FluidApiError extends CliError {\n  readonly code: string;\n  readonly message: string;\n  readonly details?: string;\n}\n\nexport const FLUID_API_ERROR = {\n  INVALID_TOKEN: {\n    code: \"INVALID_TOKEN\",\n    message: \"Token is invalid or expired\",\n  },\n  API_UNREACHABLE: {\n    code: \"API_UNREACHABLE\",\n    message: \"Could not reach the Fluid API\",\n  },\n  UUID_NOT_FOUND: {\n    code: \"UUID_NOT_FOUND\",\n    message: \"Verification session not found\",\n  },\n  CODE_EXPIRED: {\n    code: \"CODE_EXPIRED\",\n    message: \"Verification code has expired — please request a new one\",\n  },\n  INVALID_CODE: {\n    code: \"INVALID_CODE\",\n    message: \"Invalid verification code\",\n  },\n  COMPANY_NOT_FOUND: {\n    code: \"COMPANY_NOT_FOUND\",\n    message: \"Company not found\",\n  },\n  SWITCH_FAILED: {\n    code: \"SWITCH_FAILED\",\n    message: \"Failed to switch company\",\n  },\n} as const;\n\nfunction createApiError(\n  template: { readonly code: string; readonly message: string },\n  details?: string,\n): FluidApiError {\n  return { code: template.code, message: template.message, details };\n}\n\nexport interface CompanyInfo {\n  readonly name: string;\n}\n\nexport interface UserCompany {\n  readonly id: number;\n  readonly name: string;\n}\n\nexport interface SwitchCompanyResult {\n  readonly companyId: number;\n  readonly companyName: string;\n  readonly fluidShop: string;\n  readonly jwt: string;\n}\n\nexport interface MfaResponse {\n  readonly uuid: string;\n  readonly expiresAt: string;\n}\n\nexport interface CompanyChoice {\n  readonly id: number;\n  readonly name: string;\n  readonly shopName: string;\n  readonly jwt: string;\n}\n\nexport interface ConfirmMfaResponse {\n  readonly authType: string;\n  readonly companies: CompanyChoice[];\n}\n\n/**\n * Validate a token against the Fluid API and return company info\n */\nexport async function validateToken(\n  token: string,\n): Promise<Result<CompanyInfo, FluidApiError>> {\n  const { signal, cleanup } = makeSignal();\n  try {\n    const response = await fetch(\n      `${getFluidApiBase()}/api/company/v1/companies/me`,\n      {\n        method: \"GET\",\n        headers: {\n          Authorization: `Bearer ${token}`,\n        },\n        signal,\n      },\n    );\n\n    if (response.ok) {\n      const data = (await response.json()) as {\n        data?: { company?: { name?: string } };\n      };\n      const name = data?.data?.company?.name;\n      if (!name) {\n        return failure(\n          createApiError(\n            FLUID_API_ERROR.API_UNREACHABLE,\n            \"Unexpected response shape from /companies/me\",\n          ),\n        );\n      }\n      return success({ name });\n    }\n\n    if (response.status === 401 || response.status === 403) {\n      return failure(\n        createApiError(\n          FLUID_API_ERROR.INVALID_TOKEN,\n          `HTTP ${response.status}: Check that your token is valid and non-expired.`,\n        ),\n      );\n    }\n\n    const body = await response.text();\n    return failure(\n      createApiError(\n        FLUID_API_ERROR.API_UNREACHABLE,\n        `HTTP ${response.status}: ${body}`,\n      ),\n    );\n  } catch (err) {\n    const message = err instanceof Error ? err.message : String(err);\n    return failure(createApiError(FLUID_API_ERROR.API_UNREACHABLE, message));\n  } finally {\n    cleanup();\n  }\n}\n\n/**\n * Send a multi-factor authentication code to the given email address.\n * Always returns 201 from the API (anti-enumeration).\n */\nexport async function sendMfa(\n  email: string,\n): Promise<Result<MfaResponse, FluidApiError>> {\n  const { signal, cleanup } = makeSignal();\n  try {\n    const response = await fetch(\n      `${getFluidApiBase()}/api/authentication/send_mfa`,\n      {\n        method: \"POST\",\n        headers: { \"Content-Type\": \"application/json\" },\n        body: JSON.stringify({ email }),\n        signal,\n      },\n    );\n\n    if (response.status === 201) {\n      const data = (await response.json()) as {\n        multi_factor_authentication?: {\n          uuid?: string;\n          verification_code_expires_at?: string;\n        };\n      };\n      const uuid = data.multi_factor_authentication?.uuid;\n      const expiresAt =\n        data.multi_factor_authentication?.verification_code_expires_at;\n      if (!uuid || !expiresAt) {\n        return failure(\n          createApiError(\n            FLUID_API_ERROR.API_UNREACHABLE,\n            \"Unexpected response shape from /send_mfa\",\n          ),\n        );\n      }\n      return success({ uuid, expiresAt });\n    }\n\n    const body = await response.text();\n    return failure(\n      createApiError(\n        FLUID_API_ERROR.API_UNREACHABLE,\n        `HTTP ${response.status}: ${body}`,\n      ),\n    );\n  } catch (err) {\n    const message = err instanceof Error ? err.message : String(err);\n    return failure(createApiError(FLUID_API_ERROR.API_UNREACHABLE, message));\n  } finally {\n    cleanup();\n  }\n}\n\n/**\n * Confirm a multi-factor authentication code and retrieve company JWTs.\n */\nexport async function confirmMfa(\n  uuid: string,\n  code: string,\n): Promise<Result<ConfirmMfaResponse, FluidApiError>> {\n  const { signal, cleanup } = makeSignal();\n  try {\n    const response = await fetch(\n      `${getFluidApiBase()}/api/authentication/confirm_mfa`,\n      {\n        method: \"POST\",\n        headers: { \"Content-Type\": \"application/json\" },\n        body: JSON.stringify({\n          uuid,\n          multi_factor_authentication: { verification_code: code },\n        }),\n        signal,\n      },\n    );\n\n    if (response.ok) {\n      const data = (await response.json()) as {\n        authenticated?: boolean;\n        auth_type?: string;\n        companies?:\n          | {\n              id: number;\n              name: string;\n              shop_name: string;\n              jwt: string;\n            }[]\n          | null;\n      };\n      if (!data.authenticated) {\n        return failure(\n          createApiError(\n            FLUID_API_ERROR.INVALID_CODE,\n            \"Authentication was not confirmed by the server\",\n          ),\n        );\n      }\n      const companies = Array.isArray(data.companies) ? data.companies : [];\n      return success({\n        authType: data.auth_type ?? \"\",\n        companies: companies.map((c) => ({\n          id: c.id,\n          name: c.name,\n          shopName: c.shop_name,\n          jwt: c.jwt,\n        })),\n      });\n    }\n\n    if (response.status === 404) {\n      return failure(createApiError(FLUID_API_ERROR.UUID_NOT_FOUND));\n    }\n    if (response.status === 410) {\n      return failure(createApiError(FLUID_API_ERROR.CODE_EXPIRED));\n    }\n    if (response.status === 422) {\n      return failure(createApiError(FLUID_API_ERROR.INVALID_CODE));\n    }\n\n    const body = await response.text();\n    return failure(\n      createApiError(\n        FLUID_API_ERROR.API_UNREACHABLE,\n        `HTTP ${response.status}: ${body}`,\n      ),\n    );\n  } catch (err) {\n    const message = err instanceof Error ? err.message : String(err);\n    return failure(createApiError(FLUID_API_ERROR.API_UNREACHABLE, message));\n  } finally {\n    cleanup();\n  }\n}\n\n/**\n * Fetch all companies the authenticated user has access to.\n */\nexport async function fetchUserCompanies(\n  token: string,\n  baseUrl?: string,\n): Promise<Result<UserCompany[], FluidApiError>> {\n  const { signal, cleanup } = makeSignal();\n  const apiBase = baseUrl ?? getFluidApiBase();\n  try {\n    const response = await fetch(`${apiBase}/api/me`, {\n      method: \"GET\",\n      headers: { Authorization: `Bearer ${token}` },\n      signal,\n    });\n\n    if (response.ok) {\n      const data = (await response.json()) as {\n        companies?: { id: number; name: string }[];\n      };\n      const companies = Array.isArray(data.companies) ? data.companies : [];\n      return success(companies.map((c) => ({ id: c.id, name: c.name })));\n    }\n\n    if (response.status === 401 || response.status === 403) {\n      return failure(\n        createApiError(\n          FLUID_API_ERROR.INVALID_TOKEN,\n          `HTTP ${response.status}`,\n        ),\n      );\n    }\n\n    const body = await response.text();\n    return failure(\n      createApiError(\n        FLUID_API_ERROR.API_UNREACHABLE,\n        `HTTP ${response.status}: ${body}`,\n      ),\n    );\n  } catch (err) {\n    const message = err instanceof Error ? err.message : String(err);\n    return failure(createApiError(FLUID_API_ERROR.API_UNREACHABLE, message));\n  } finally {\n    cleanup();\n  }\n}\n\n/**\n * Switch to a different company and receive a new JWT.\n *\n * Response shape (from @fluid-app/auth SwitchCompanyResponse):\n *   { company: { id, name, fluid_shop, jwt }, meta: { request_id, timestamp } }\n */\nexport async function switchCompany(\n  token: string,\n  companyId: number,\n  baseUrl?: string,\n): Promise<Result<SwitchCompanyResult, FluidApiError>> {\n  const { signal, cleanup } = makeSignal();\n  const apiBase = baseUrl ?? getFluidApiBase();\n  try {\n    const response = await fetch(\n      `${apiBase}/api/authentication/company/${companyId}/switch`,\n      {\n        method: \"PUT\",\n        headers: {\n          Authorization: `Bearer ${token}`,\n          \"Content-Type\": \"application/json\",\n        },\n        signal,\n      },\n    );\n\n    if (response.ok) {\n      const data = (await response.json()) as {\n        company?: {\n          id: number;\n          name: string;\n          fluid_shop: string;\n          jwt: string;\n        };\n      };\n      const company = data.company;\n      if (!company?.jwt) {\n        return failure(\n          createApiError(\n            FLUID_API_ERROR.SWITCH_FAILED,\n            \"Unexpected response shape from /switch\",\n          ),\n        );\n      }\n      return success({\n        companyId: company.id,\n        companyName: company.name,\n        fluidShop: company.fluid_shop,\n        jwt: company.jwt,\n      });\n    }\n\n    if (response.status === 404) {\n      return failure(\n        createApiError(\n          FLUID_API_ERROR.COMPANY_NOT_FOUND,\n          `Company ${companyId} not found`,\n        ),\n      );\n    }\n\n    if (response.status === 401 || response.status === 403) {\n      return failure(\n        createApiError(\n          FLUID_API_ERROR.INVALID_TOKEN,\n          `HTTP ${response.status}`,\n        ),\n      );\n    }\n\n    const body = await response.text();\n    return failure(\n      createApiError(\n        FLUID_API_ERROR.SWITCH_FAILED,\n        `HTTP ${response.status}: ${body}`,\n      ),\n    );\n  } catch (err) {\n    const message = err instanceof Error ? err.message : String(err);\n    return failure(createApiError(FLUID_API_ERROR.API_UNREACHABLE, message));\n  } finally {\n    cleanup();\n  }\n}\n","/**\n * Configuration types for the Fluid CLI\n */\n\nexport interface FluidProfile {\n  readonly name: string;\n  readonly token: string;\n  readonly companyName: string;\n  readonly storedAt: string; // ISO-8601\n  readonly baseUrl?: string;\n}\n\nexport interface FluidConfig {\n  activeProfile: string | null;\n  profiles: Record<string, FluidProfile>;\n  plugins: Record<string, unknown>;\n  /**\n   * Allow-list of plugin package names.\n   *\n   * - `null` (default) — auto-discover and load all `@fluid-app/fluid-cli-*`\n   *   and `*-cli-commands` packages found in `node_modules` or the pnpm\n   *   workspace. Only `@fluid-app`-scoped packages matching the naming\n   *   convention are eligible; no third-party code is loaded.\n   * - `string[]` — only load plugins whose names appear in the array.\n   *   Set to `[]` to disable all plugins.\n   */\n  enabledPlugins: string[] | null;\n}\n\nexport function createDefaultConfig(): FluidConfig {\n  return {\n    activeProfile: null,\n    profiles: {},\n    plugins: {},\n    enabledPlugins: null, // auto-discover all plugins\n  };\n}\n","/**\n * XDG-compliant config directory resolution\n *\n * Priority:\n * 1. FLUID_CONFIG_DIR env var (explicit override)\n * 2. ~/.fluid/ on macOS (convention for CLI tools)\n * 3. %APPDATA%/fluid/ on Windows\n * 4. $XDG_CONFIG_HOME/fluid/ on Linux (XDG spec)\n * 5. ~/.config/fluid/ fallback on Linux\n */\n\nimport { homedir } from \"node:os\";\nimport { join } from \"node:path\";\n\nexport function getConfigDir(): string {\n  const envOverride = process.env[\"FLUID_CONFIG_DIR\"];\n  if (envOverride) return envOverride;\n\n  if (process.platform === \"darwin\") {\n    return join(homedir(), \".fluid\");\n  }\n\n  if (process.platform === \"win32\") {\n    const appData =\n      process.env[\"APPDATA\"] ?? join(homedir(), \"AppData\", \"Roaming\");\n    return join(appData, \"fluid\");\n  }\n\n  const xdgConfig = process.env[\"XDG_CONFIG_HOME\"];\n  if (xdgConfig) return join(xdgConfig, \"fluid\");\n\n  return join(homedir(), \".config\", \"fluid\");\n}\n\nexport function getConfigFilePath(): string {\n  return join(getConfigDir(), \"config.json\");\n}\n","/**\n * Read/write config.json with atomic writes and safe defaults\n */\n\nimport {\n  existsSync,\n  mkdirSync,\n  readFileSync,\n  renameSync,\n  unlinkSync,\n  writeFileSync,\n} from \"node:fs\";\nimport { dirname, join } from \"node:path\";\nimport { randomBytes } from \"node:crypto\";\nimport { type FluidConfig, createDefaultConfig } from \"./types.js\";\nimport { getConfigFilePath } from \"./paths.js\";\n\nexport function readConfig(): FluidConfig {\n  const configPath = getConfigFilePath();\n\n  if (!existsSync(configPath)) {\n    return createDefaultConfig();\n  }\n\n  const raw = readFileSync(configPath, \"utf-8\");\n\n  let parsed: Partial<FluidConfig>;\n  try {\n    parsed = JSON.parse(raw) as Partial<FluidConfig>;\n  } catch {\n    // Corrupted config — fall back to defaults rather than crashing\n    return createDefaultConfig();\n  }\n\n  // Merge with defaults to handle schema evolution\n  return {\n    ...createDefaultConfig(),\n    ...parsed,\n  };\n}\n\nexport function writeConfig(config: FluidConfig): void {\n  const configPath = getConfigFilePath();\n  const dir = dirname(configPath);\n\n  // 0o700: owner-only access so other users cannot enumerate the config dir\n  mkdirSync(dir, { recursive: true, mode: 0o700 });\n\n  // Atomic write: write to a temp file in the same directory, then rename.\n  // rename() is a POSIX atomic operation — a crash mid-write will never leave\n  // a partially-written config.json. The temp file must be on the same\n  // filesystem as the destination for rename() to succeed.\n  const suffix = randomBytes(6).toString(\"hex\");\n  const tmpPath = join(dir, `.fluid-config-${suffix}.tmp`);\n\n  try {\n    writeFileSync(tmpPath, JSON.stringify(config, null, 2) + \"\\n\", {\n      encoding: \"utf-8\",\n      // NOTE: mode: 0o600 restricts to owner read/write on POSIX (macOS, Linux).\n      // On Windows, Node.js ignores this option — NTFS permissions are not\n      // set via the mode parameter. Windows file protection would require\n      // icacls or Windows security descriptor APIs.\n      mode: 0o600,\n    });\n    renameSync(tmpPath, configPath);\n  } catch (err) {\n    // Clean up the temp file if something went wrong before the rename\n    try {\n      unlinkSync(tmpPath);\n    } catch {\n      // ignore cleanup errors — the temp file may not exist yet\n    }\n    throw err;\n  }\n}\n\nexport function updateConfig(\n  updater: (config: FluidConfig) => FluidConfig,\n): FluidConfig {\n  const config = readConfig();\n  const updated = updater(config);\n  writeConfig(updated);\n  return updated;\n}\n","/**\n * Project-level config (.fluidrc) reader.\n *\n * Walks upward from a starting directory to find a `.fluidrc` file.\n * The file is JSON with a `profile` field that maps to a profile name\n * in `~/.fluid/config.json`.\n *\n * This allows portal repos to pin themselves to a specific CLI profile\n * so that `fluid portal pull` / `push` always use the correct company\n * credentials, regardless of which profile is globally active.\n */\n\nimport { existsSync, readFileSync } from \"node:fs\";\nimport { dirname, join } from \"node:path\";\n\nexport interface ProjectRcConfig {\n  readonly profile: string;\n}\n\nconst RC_FILENAME = \".fluidrc\";\n\n/** Cached result keyed by the starting directory. */\nlet cachedResult: { dir: string; config: ProjectRcConfig | null } | undefined;\n\n/**\n * Walk upward from `startDir` looking for a `.fluidrc` file.\n *\n * Returns the parsed config when found, or `null` if no valid `.fluidrc`\n * exists in any ancestor directory.\n *\n * The result is cached per starting directory for the lifetime of the\n * process — CLI commands are short-lived so stale-cache is not a concern.\n */\nexport function findProjectConfig(startDir: string): ProjectRcConfig | null {\n  if (cachedResult && cachedResult.dir === startDir) {\n    return cachedResult.config;\n  }\n\n  let dir = startDir;\n  while (true) {\n    const rcPath = join(dir, RC_FILENAME);\n    if (existsSync(rcPath)) {\n      try {\n        const raw = readFileSync(rcPath, \"utf-8\");\n        const parsed = JSON.parse(raw) as Partial<ProjectRcConfig>;\n        if (typeof parsed.profile === \"string\" && parsed.profile.length > 0) {\n          const config: ProjectRcConfig = { profile: parsed.profile };\n          cachedResult = { dir: startDir, config };\n          return config;\n        }\n      } catch {\n        // Malformed .fluidrc — treat as absent\n      }\n\n      // Found a .fluidrc but it was invalid or empty — stop searching\n      // upward to avoid confusing inheritance from a parent directory.\n      cachedResult = { dir: startDir, config: null };\n      return null;\n    }\n\n    const parent = dirname(dir);\n    if (parent === dir) break; // reached filesystem root\n    dir = parent;\n  }\n\n  cachedResult = { dir: startDir, config: null };\n  return null;\n}\n\n/** Reset the cache. Exposed for tests only. */\nexport function _resetProjectConfigCache(): void {\n  cachedResult = undefined;\n}\n","/**\n * Token storage and retrieval from config\n */\n\nimport { readConfig } from \"../config/config.js\";\nimport { findProjectConfig } from \"../config/project-config.js\";\nimport type { FluidProfile } from \"../config/types.js\";\n\n/**\n * Get the auth token for a named profile, or the active profile when omitted.\n *\n * Resolution order (when `profileName` is omitted — mirrors `resolveToken`\n * in domain/context.ts):\n *   1. `FLUID_TOKEN` / `FLUID_API_TOKEN` environment variables\n *   2. Project-level `.fluidrc` profile (walks upward from cwd)\n *   3. Global active profile from `~/.fluid/config.json`\n *\n * When `profileName` is provided explicitly (e.g. via `--profile` flag),\n * it takes precedence over the environment variables, `.fluidrc`, and the\n * active profile.\n */\nexport function getAuthToken(profileName?: string): string | null {\n  const config = readConfig();\n\n  // Explicit profile name takes precedence\n  if (profileName) {\n    const profile = config.profiles[profileName];\n    return profile?.token ?? null;\n  }\n\n  // Environment variable override (before any stored profile)\n  const envToken = process.env[\"FLUID_TOKEN\"] ?? process.env[\"FLUID_API_TOKEN\"];\n  if (envToken) return envToken;\n\n  // Project-level .fluidrc profile\n  const projectConfig = findProjectConfig(process.cwd());\n  if (projectConfig?.profile) {\n    const profile = config.profiles[projectConfig.profile];\n    if (profile) return profile.token;\n  }\n\n  // Fall back to global active profile\n  if (!config.activeProfile) return null;\n  const profile = config.profiles[config.activeProfile];\n  return profile?.token ?? null;\n}\n\n/**\n * Get the active profile, or null if not logged in\n */\nexport function getActiveProfile(): FluidProfile | null {\n  const config = readConfig();\n  if (!config.activeProfile) return null;\n\n  return config.profiles[config.activeProfile] ?? null;\n}\n\n/**\n * List all stored profile names\n */\nexport function listProfileNames(): string[] {\n  const config = readConfig();\n  return Object.keys(config.profiles);\n}\n"],"mappings":";;;;;AA2BA,SAAgB,QAAW,OAAsB;AAC/C,QAAO;EAAE,SAAS;EAAM;EAAO;;AAGjC,SAAgB,QAAW,OAAsB;AAC/C,QAAO;EAAE,SAAS;EAAO;EAAO;;AAOlC,SAAgB,UAAgB,QAA4C;AAC1E,QAAO,OAAO,YAAY;;AAG5B,SAAgB,UAAgB,QAA4C;AAC1E,QAAO,OAAO,YAAY;;AAO5B,SAAgB,SAAY,IAA+B;AACzD,KAAI;AACF,SAAO,QAAQ,IAAI,CAAC;UACb,OAAO;AACd,SAAO,QAAQ,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,OAAO,MAAM,CAAC,CAAC;;;AAI7E,eAAsB,cACpB,IAC2B;AAC3B,KAAI;AACF,SAAO,QAAQ,MAAM,IAAI,CAAC;UACnB,OAAO;AACd,SAAO,QAAQ,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,OAAO,MAAM,CAAC,CAAC;;;AAI7E,SAAgB,OAAa,QAAyB;AACpD,KAAI,UAAU,OAAO,CAAE,QAAO,OAAO;AAGrC,KAAI,OAAO,iBAAiB,MAAO,OAAM,OAAO;AAChD,OAAM,IAAI,MACR,OAAO,OAAO,UAAU,YAAY,OAAO,UAAU,OACjD,KAAK,UAAU,OAAO,MAAM,GAC5B,OAAO,OAAO,MAAM,CACzB;;AAGH,SAAgB,SAAe,QAAsB,cAAoB;AACvE,KAAI,UAAU,OAAO,CAAE,QAAO,OAAO;AACrC,QAAO;;AAGT,SAAgB,UACd,QACA,IACc;AACd,KAAI,UAAU,OAAO,CAAE,QAAO,QAAQ,GAAG,OAAO,MAAM,CAAC;AACvD,QAAO;;AAGT,SAAgB,SACd,QACA,IACc;AACd,KAAI,UAAU,OAAO,CAAE,QAAO,QAAQ,GAAG,OAAO,MAAM,CAAC;AACvD,QAAO;;AAOT,SAAgB,QAAQ,OAAgC;AACtD,QAAO,iBAAiB;;AAG1B,SAAgB,YAAY,OAAgD;AAC1E,QAAO,iBAAiB,SAAS,UAAU;;AAG7C,SAAgB,gBAAgB,OAAwB;AACtD,KAAI,iBAAiB,MAAO,QAAO,MAAM;AACzC,KAAI,OAAO,UAAU,SAAU,QAAO;AACtC,QAAO,OAAO,MAAM;;;;AC9GtB,MAAM,iBAAiB;AAEvB,SAAgB,kBAA0B;AACxC,QAAO,QAAQ,IAAI,qBAAqB;;AAG1C,SAAS,aAA2D;CAClE,MAAM,aAAa,IAAI,iBAAiB;CACxC,MAAM,QAAQ,iBAAiB,WAAW,OAAO,EAAE,eAAe;AAClE,QAAO;EAAE,QAAQ,WAAW;EAAQ,eAAe,aAAa,MAAM;EAAE;;AAS1E,MAAa,kBAAkB;CAC7B,eAAe;EACb,MAAM;EACN,SAAS;EACV;CACD,iBAAiB;EACf,MAAM;EACN,SAAS;EACV;CACD,gBAAgB;EACd,MAAM;EACN,SAAS;EACV;CACD,cAAc;EACZ,MAAM;EACN,SAAS;EACV;CACD,cAAc;EACZ,MAAM;EACN,SAAS;EACV;CACD,mBAAmB;EACjB,MAAM;EACN,SAAS;EACV;CACD,eAAe;EACb,MAAM;EACN,SAAS;EACV;CACF;AAED,SAAS,eACP,UACA,SACe;AACf,QAAO;EAAE,MAAM,SAAS;EAAM,SAAS,SAAS;EAAS;EAAS;;;;;AAuCpE,eAAsB,cACpB,OAC6C;CAC7C,MAAM,EAAE,QAAQ,YAAY,YAAY;AACxC,KAAI;EACF,MAAM,WAAW,MAAM,MACrB,GAAG,iBAAiB,CAAC,+BACrB;GACE,QAAQ;GACR,SAAS,EACP,eAAe,UAAU,SAC1B;GACD;GACD,CACF;AAED,MAAI,SAAS,IAAI;GAIf,MAAM,QAHQ,MAAM,SAAS,MAAM,GAGhB,MAAM,SAAS;AAClC,OAAI,CAAC,KACH,QAAO,QACL,eACE,gBAAgB,iBAChB,+CACD,CACF;AAEH,UAAO,QAAQ,EAAE,MAAM,CAAC;;AAG1B,MAAI,SAAS,WAAW,OAAO,SAAS,WAAW,IACjD,QAAO,QACL,eACE,gBAAgB,eAChB,QAAQ,SAAS,OAAO,mDACzB,CACF;EAGH,MAAM,OAAO,MAAM,SAAS,MAAM;AAClC,SAAO,QACL,eACE,gBAAgB,iBAChB,QAAQ,SAAS,OAAO,IAAI,OAC7B,CACF;UACM,KAAK;EACZ,MAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;AAChE,SAAO,QAAQ,eAAe,gBAAgB,iBAAiB,QAAQ,CAAC;WAChE;AACR,WAAS;;;;;;;AAQb,eAAsB,QACpB,OAC6C;CAC7C,MAAM,EAAE,QAAQ,YAAY,YAAY;AACxC,KAAI;EACF,MAAM,WAAW,MAAM,MACrB,GAAG,iBAAiB,CAAC,+BACrB;GACE,QAAQ;GACR,SAAS,EAAE,gBAAgB,oBAAoB;GAC/C,MAAM,KAAK,UAAU,EAAE,OAAO,CAAC;GAC/B;GACD,CACF;AAED,MAAI,SAAS,WAAW,KAAK;GAC3B,MAAM,OAAQ,MAAM,SAAS,MAAM;GAMnC,MAAM,OAAO,KAAK,6BAA6B;GAC/C,MAAM,YACJ,KAAK,6BAA6B;AACpC,OAAI,CAAC,QAAQ,CAAC,UACZ,QAAO,QACL,eACE,gBAAgB,iBAChB,2CACD,CACF;AAEH,UAAO,QAAQ;IAAE;IAAM;IAAW,CAAC;;EAGrC,MAAM,OAAO,MAAM,SAAS,MAAM;AAClC,SAAO,QACL,eACE,gBAAgB,iBAChB,QAAQ,SAAS,OAAO,IAAI,OAC7B,CACF;UACM,KAAK;EACZ,MAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;AAChE,SAAO,QAAQ,eAAe,gBAAgB,iBAAiB,QAAQ,CAAC;WAChE;AACR,WAAS;;;;;;AAOb,eAAsB,WACpB,MACA,MACoD;CACpD,MAAM,EAAE,QAAQ,YAAY,YAAY;AACxC,KAAI;EACF,MAAM,WAAW,MAAM,MACrB,GAAG,iBAAiB,CAAC,kCACrB;GACE,QAAQ;GACR,SAAS,EAAE,gBAAgB,oBAAoB;GAC/C,MAAM,KAAK,UAAU;IACnB;IACA,6BAA6B,EAAE,mBAAmB,MAAM;IACzD,CAAC;GACF;GACD,CACF;AAED,MAAI,SAAS,IAAI;GACf,MAAM,OAAQ,MAAM,SAAS,MAAM;AAYnC,OAAI,CAAC,KAAK,cACR,QAAO,QACL,eACE,gBAAgB,cAChB,iDACD,CACF;GAEH,MAAM,YAAY,MAAM,QAAQ,KAAK,UAAU,GAAG,KAAK,YAAY,EAAE;AACrE,UAAO,QAAQ;IACb,UAAU,KAAK,aAAa;IAC5B,WAAW,UAAU,KAAK,OAAO;KAC/B,IAAI,EAAE;KACN,MAAM,EAAE;KACR,UAAU,EAAE;KACZ,KAAK,EAAE;KACR,EAAE;IACJ,CAAC;;AAGJ,MAAI,SAAS,WAAW,IACtB,QAAO,QAAQ,eAAe,gBAAgB,eAAe,CAAC;AAEhE,MAAI,SAAS,WAAW,IACtB,QAAO,QAAQ,eAAe,gBAAgB,aAAa,CAAC;AAE9D,MAAI,SAAS,WAAW,IACtB,QAAO,QAAQ,eAAe,gBAAgB,aAAa,CAAC;EAG9D,MAAM,OAAO,MAAM,SAAS,MAAM;AAClC,SAAO,QACL,eACE,gBAAgB,iBAChB,QAAQ,SAAS,OAAO,IAAI,OAC7B,CACF;UACM,KAAK;EACZ,MAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;AAChE,SAAO,QAAQ,eAAe,gBAAgB,iBAAiB,QAAQ,CAAC;WAChE;AACR,WAAS;;;;;;AAOb,eAAsB,mBACpB,OACA,SAC+C;CAC/C,MAAM,EAAE,QAAQ,YAAY,YAAY;CACxC,MAAM,UAAU,WAAW,iBAAiB;AAC5C,KAAI;EACF,MAAM,WAAW,MAAM,MAAM,GAAG,QAAQ,UAAU;GAChD,QAAQ;GACR,SAAS,EAAE,eAAe,UAAU,SAAS;GAC7C;GACD,CAAC;AAEF,MAAI,SAAS,IAAI;GACf,MAAM,OAAQ,MAAM,SAAS,MAAM;AAInC,UAAO,SADW,MAAM,QAAQ,KAAK,UAAU,GAAG,KAAK,YAAY,EAAE,EAC5C,KAAK,OAAO;IAAE,IAAI,EAAE;IAAI,MAAM,EAAE;IAAM,EAAE,CAAC;;AAGpE,MAAI,SAAS,WAAW,OAAO,SAAS,WAAW,IACjD,QAAO,QACL,eACE,gBAAgB,eAChB,QAAQ,SAAS,SAClB,CACF;EAGH,MAAM,OAAO,MAAM,SAAS,MAAM;AAClC,SAAO,QACL,eACE,gBAAgB,iBAChB,QAAQ,SAAS,OAAO,IAAI,OAC7B,CACF;UACM,KAAK;EACZ,MAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;AAChE,SAAO,QAAQ,eAAe,gBAAgB,iBAAiB,QAAQ,CAAC;WAChE;AACR,WAAS;;;;;;;;;AAUb,eAAsB,cACpB,OACA,WACA,SACqD;CACrD,MAAM,EAAE,QAAQ,YAAY,YAAY;CACxC,MAAM,UAAU,WAAW,iBAAiB;AAC5C,KAAI;EACF,MAAM,WAAW,MAAM,MACrB,GAAG,QAAQ,8BAA8B,UAAU,UACnD;GACE,QAAQ;GACR,SAAS;IACP,eAAe,UAAU;IACzB,gBAAgB;IACjB;GACD;GACD,CACF;AAED,MAAI,SAAS,IAAI;GASf,MAAM,WARQ,MAAM,SAAS,MAAM,EAQd;AACrB,OAAI,CAAC,SAAS,IACZ,QAAO,QACL,eACE,gBAAgB,eAChB,yCACD,CACF;AAEH,UAAO,QAAQ;IACb,WAAW,QAAQ;IACnB,aAAa,QAAQ;IACrB,WAAW,QAAQ;IACnB,KAAK,QAAQ;IACd,CAAC;;AAGJ,MAAI,SAAS,WAAW,IACtB,QAAO,QACL,eACE,gBAAgB,mBAChB,WAAW,UAAU,YACtB,CACF;AAGH,MAAI,SAAS,WAAW,OAAO,SAAS,WAAW,IACjD,QAAO,QACL,eACE,gBAAgB,eAChB,QAAQ,SAAS,SAClB,CACF;EAGH,MAAM,OAAO,MAAM,SAAS,MAAM;AAClC,SAAO,QACL,eACE,gBAAgB,eAChB,QAAQ,SAAS,OAAO,IAAI,OAC7B,CACF;UACM,KAAK;EACZ,MAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;AAChE,SAAO,QAAQ,eAAe,gBAAgB,iBAAiB,QAAQ,CAAC;WAChE;AACR,WAAS;;;;;ACtYb,SAAgB,sBAAmC;AACjD,QAAO;EACL,eAAe;EACf,UAAU,EAAE;EACZ,SAAS,EAAE;EACX,gBAAgB;EACjB;;;;;;;;;;;;;;ACrBH,SAAgB,eAAuB;CACrC,MAAM,cAAc,QAAQ,IAAI;AAChC,KAAI,YAAa,QAAO;AAExB,KAAI,QAAQ,aAAa,SACvB,QAAO,KAAK,SAAS,EAAE,SAAS;AAGlC,KAAI,QAAQ,aAAa,QAGvB,QAAO,KADL,QAAQ,IAAI,cAAc,KAAK,SAAS,EAAE,WAAW,UAAU,EAC5C,QAAQ;CAG/B,MAAM,YAAY,QAAQ,IAAI;AAC9B,KAAI,UAAW,QAAO,KAAK,WAAW,QAAQ;AAE9C,QAAO,KAAK,SAAS,EAAE,WAAW,QAAQ;;AAG5C,SAAgB,oBAA4B;AAC1C,QAAO,KAAK,cAAc,EAAE,cAAc;;;;;;;AClB5C,SAAgB,aAA0B;CACxC,MAAM,aAAa,mBAAmB;AAEtC,KAAI,CAAC,WAAW,WAAW,CACzB,QAAO,qBAAqB;CAG9B,MAAM,MAAM,aAAa,YAAY,QAAQ;CAE7C,IAAI;AACJ,KAAI;AACF,WAAS,KAAK,MAAM,IAAI;SAClB;AAEN,SAAO,qBAAqB;;AAI9B,QAAO;EACL,GAAG,qBAAqB;EACxB,GAAG;EACJ;;AAGH,SAAgB,YAAY,QAA2B;CACrD,MAAM,aAAa,mBAAmB;CACtC,MAAM,MAAM,QAAQ,WAAW;AAG/B,WAAU,KAAK;EAAE,WAAW;EAAM,MAAM;EAAO,CAAC;CAOhD,MAAM,UAAU,KAAK,KAAK,iBADX,YAAY,EAAE,CAAC,SAAS,MAAM,CACK,MAAM;AAExD,KAAI;AACF,gBAAc,SAAS,KAAK,UAAU,QAAQ,MAAM,EAAE,GAAG,MAAM;GAC7D,UAAU;GAKV,MAAM;GACP,CAAC;AACF,aAAW,SAAS,WAAW;UACxB,KAAK;AAEZ,MAAI;AACF,cAAW,QAAQ;UACb;AAGR,QAAM;;;AAIV,SAAgB,aACd,SACa;CAEb,MAAM,UAAU,QADD,YAAY,CACI;AAC/B,aAAY,QAAQ;AACpB,QAAO;;;;;;;;;;;;;;;AC/DT,MAAM,cAAc;;AAGpB,IAAI;;;;;;;;;;AAWJ,SAAgB,kBAAkB,UAA0C;AAC1E,KAAI,gBAAgB,aAAa,QAAQ,SACvC,QAAO,aAAa;CAGtB,IAAI,MAAM;AACV,QAAO,MAAM;EACX,MAAM,SAAS,KAAK,KAAK,YAAY;AACrC,MAAI,WAAW,OAAO,EAAE;AACtB,OAAI;IACF,MAAM,MAAM,aAAa,QAAQ,QAAQ;IACzC,MAAM,SAAS,KAAK,MAAM,IAAI;AAC9B,QAAI,OAAO,OAAO,YAAY,YAAY,OAAO,QAAQ,SAAS,GAAG;KACnE,MAAM,SAA0B,EAAE,SAAS,OAAO,SAAS;AAC3D,oBAAe;MAAE,KAAK;MAAU;MAAQ;AACxC,YAAO;;WAEH;AAMR,kBAAe;IAAE,KAAK;IAAU,QAAQ;IAAM;AAC9C,UAAO;;EAGT,MAAM,SAAS,QAAQ,IAAI;AAC3B,MAAI,WAAW,IAAK;AACpB,QAAM;;AAGR,gBAAe;EAAE,KAAK;EAAU,QAAQ;EAAM;AAC9C,QAAO;;;;;;;;;;;;;;;;;;;;AC7CT,SAAgB,aAAa,aAAqC;CAChE,MAAM,SAAS,YAAY;AAG3B,KAAI,YAEF,QADgB,OAAO,SAAS,cAChB,SAAS;CAI3B,MAAM,WAAW,QAAQ,IAAI,kBAAkB,QAAQ,IAAI;AAC3D,KAAI,SAAU,QAAO;CAGrB,MAAM,gBAAgB,kBAAkB,QAAQ,KAAK,CAAC;AACtD,KAAI,eAAe,SAAS;EAC1B,MAAM,UAAU,OAAO,SAAS,cAAc;AAC9C,MAAI,QAAS,QAAO,QAAQ;;AAI9B,KAAI,CAAC,OAAO,cAAe,QAAO;AAElC,QADgB,OAAO,SAAS,OAAO,gBACvB,SAAS;;;;;AAM3B,SAAgB,mBAAwC;CACtD,MAAM,SAAS,YAAY;AAC3B,KAAI,CAAC,OAAO,cAAe,QAAO;AAElC,QAAO,OAAO,SAAS,OAAO,kBAAkB;;;;;AAMlD,SAAgB,mBAA6B;CAC3C,MAAM,SAAS,YAAY;AAC3B,QAAO,OAAO,KAAK,OAAO,SAAS"}