@genex-ai/cli-demo 1.30.0-dev.645 → 1.31.0

package/dist/chunk-2COG4P3T.js

@@ -1,968 +0,0 @@
-import {
-  CLI_CHANNEL,
-  ENV_FILE_ENV,
-  ENV_TOKEN_KEY,
-  c,
-  getApiUrl,
-  getAuthUrl,
-  getCliVersion,
-  getGenexEnvPath
-} from "./chunk-HYCSNWYX.js";
-
-// src/lib/terms.ts
-import readline from "readline";
-
-// src/lib/source-sync.ts
-import fs from "fs/promises";
-import path from "path";
-import os from "os";
-
-// src/lib/source-exclude.ts
-var SOURCE_EXCLUDE = [
-  "node_modules/",
-  "dist/",
-  ".git/",
-  // Local project metadata, per-device by design.
-  ".genex/",
-  // Secrets — never publish them; `!` keeps the non-secret template.
-  ".env",
-  ".env.*",
-  "!.env.example"
-];
-function excludeFile() {
-  return [...SOURCE_EXCLUDE, ""].join("\n");
-}
-
-// src/utils/run.ts
-import { spawn } from "child_process";
-var WIN_SHELL_COMMANDS = /* @__PURE__ */ new Set(["npm", "npx"]);
-function run(cmd, args, env) {
-  const shell = process.platform === "win32" && WIN_SHELL_COMMANDS.has(cmd);
-  return new Promise((resolve) => {
-    let child;
-    try {
-      child = spawn(cmd, args, { env: env ? { ...process.env, ...env } : process.env, shell });
-    } catch {
-      resolve({ code: -1, out: "", err: `${cmd} not found` });
-      return;
-    }
-    let out = "";
-    let err = "";
-    child.stdout?.on("data", (d) => out += String(d));
-    child.stderr?.on("data", (d) => err += String(d));
-    child.on("error", () => resolve({ code: -1, out, err: `${cmd} not found` }));
-    child.on("close", (code) => resolve({ code: code ?? -1, out, err }));
-  });
-}
-
-// src/lib/source-sync.ts
-async function readRemoteSource(apiUrl, token, projectId) {
-  try {
-    const res = await apiFetch(`${apiUrl}/api/projects/${projectId}`, {
-      headers: { Authorization: `Bearer ${token}` }
-    });
-    if (!res.ok) return null;
-    const data = await res.json().catch(() => null);
-    if (!data?.project) return null;
-    return {
-      stagingCommit: data.project.stagingCommitSha ?? null,
-      commit: data.project.commitSha ?? null
-    };
-  } catch {
-    return null;
-  }
-}
-function isStale(local, remote) {
-  if (!local || !remote) return false;
-  return local !== remote;
-}
-function inHostedSession() {
-  return process.env.GENEX_HOSTED_SESSION === "1";
-}
-function mayForceOverAnotherDevice() {
-  return !inHostedSession();
-}
-function reportForceRefused(log) {
-  log.error("`--force` is not available inside a Genex chat session.");
-  log.dim("  It would replace work shipped from another machine, and that is not yours to discard here.");
-  log.dim(`  Do this instead \u2014 it keeps both sides:`);
-  log.dim(`    1. ${c.cyan("npx genex pull --force")}   takes the other machine's work (a copy of this folder is kept under .genex/replaced-*)`);
-  log.dim(`    2. redo your change on top of it \u2014 you know what you just changed`);
-  log.dim(`    3. ${c.cyan("npx genex preview")}`);
-  log.dim("  If the user explicitly wants their chat version to win, ask them to run `npx genex preview --force` themselves.");
-}
-function reportStale(log, slug, local, remote) {
-  log.error(`${c.cyan(slug)} was updated from another device \u2014 nothing was deployed.`);
-  if (remote && local) {
-    const short = remote.slice(0, 7) !== local.slice(0, 7);
-    const r = short ? remote.slice(0, 7) : remote;
-    const l = short ? local.slice(0, 7) : local;
-    log.dim(`  the draft is on ${r}, this folder last shipped ${l}`);
-  }
-  log.dim(`  ${c.cyan("npx genex pull")} \u2014 take the other device's work (refuses if you have unshipped changes)`);
-  log.dim(`  ${c.cyan("npx genex preview --force")} \u2014 keep yours and replace theirs`);
-}
-async function sourceTreeHash(cwd) {
-  const gitDir = await fs.mkdtemp(path.join(os.tmpdir(), "genex-tree-"));
-  const base = { GIT_DIR: gitDir };
-  try {
-    if ((await run("git", ["init", "-q"], base)).code !== 0) return null;
-    await fs.writeFile(path.join(gitDir, "info", "exclude"), excludeFile());
-    if ((await run("git", ["lfs", "version"], base)).code === 0) {
-      const filters = [
-        ["filter.lfs.clean", "git-lfs clean -- %f"],
-        ["filter.lfs.smudge", "git-lfs smudge -- %f"],
-        ["filter.lfs.process", "git-lfs filter-process"],
-        ["filter.lfs.required", "true"]
-      ];
-      for (const [key, value] of filters) await run("git", ["config", key, value], base);
-    }
-    const env = { ...base, GIT_WORK_TREE: cwd, GIT_INDEX_FILE: path.join(gitDir, "index-tree") };
-    if ((await run("git", ["add", "-A"], env)).code !== 0) return null;
-    const tree = (await run("git", ["write-tree"], env)).out.trim();
-    return /^[0-9a-f]{40}$/.test(tree) ? tree : null;
-  } catch {
-    return null;
-  } finally {
-    await fs.rm(gitDir, { recursive: true, force: true }).catch(() => {
-    });
-  }
-}
-function urlHasEmbeddedCredentials(url) {
-  return /^[a-z][a-z0-9+.-]*:\/\/[^/@]+@/i.test(url);
-}
-function credentialHelperOff(url) {
-  if (!urlHasEmbeddedCredentials(url)) return {};
-  return { GIT_CONFIG_COUNT: "1", GIT_CONFIG_KEY_0: "credential.helper", GIT_CONFIG_VALUE_0: "" };
-}
-async function fetchCloneGrant(apiUrl, token, projectId, log) {
-  let res;
-  try {
-    res = await apiFetch(`${apiUrl}/api/projects/${projectId}/push-token`, {
-      method: "POST",
-      headers: { Authorization: `Bearer ${token}`, "X-Genex-Source-Intent": "read" }
-    });
-  } catch (err) {
-    log.error(`Couldn't reach the API to authorize the source read: ${String(err)}`);
-    return null;
-  }
-  if (res.status === 401) {
-    log.error("Not authorized \u2014 your token may have expired. Re-run `genex auth`.");
-    return null;
-  }
-  if (!res.ok) {
-    log.error(`Couldn't authorize the source read (HTTP ${res.status}).`);
-    return null;
-  }
-  const data = await res.json().catch(() => null);
-  const url = data?.pushUrl ?? data?.cloneUrl;
-  if (!url) {
-    log.error("The API didn't return a source URL.");
-    return null;
-  }
-  return { cloneUrl: url, sourceRef: data?.sourceRef ?? null };
-}
-async function cloneSource(grant, dest, log) {
-  const args = grant.sourceRef ? ["clone", "--branch", grant.sourceRef, grant.cloneUrl, dest] : ["clone", grant.cloneUrl, dest];
-  const env = {
-    GIT_LFS_SKIP_SMUDGE: "1",
-    GIT_TERMINAL_PROMPT: "0",
-    ...credentialHelperOff(grant.cloneUrl)
-  };
-  const cloned = await run("git", args, env);
-  if (cloned.code !== 0) {
-    log.error("Couldn't download the game's source.");
-    log.dim(`  git clone exited ${cloned.code}`);
-    return false;
-  }
-  const repo = { ...env, GIT_DIR: path.join(dest, ".git"), GIT_WORK_TREE: dest };
-  const filters = [
-    ["filter.lfs.clean", "git-lfs clean -- %f"],
-    ["filter.lfs.smudge", "git-lfs smudge -- %f"],
-    ["filter.lfs.process", "git-lfs filter-process"],
-    ["filter.lfs.required", "true"]
-  ];
-  for (const [key, value] of filters) await run("git", ["config", key, value], repo);
-  const pulled = await run("git", ["lfs", "pull"], repo);
-  if (pulled.code !== 0) {
-    log.warn("Binary assets (models, textures, audio) are still pointer files \u2014 `git lfs pull` failed.");
-    log.dim("  The source is there; run `git lfs pull` in this folder once git-lfs works.");
-  }
-  return true;
-}
-
-// src/lib/terms.ts
-var TERMS_ERROR_CODE = "terms_acceptance_required";
-var TERMS_WAIT_MS = 1e5;
-var TERMS_POLL_MS = 3e3;
-async function isTermsRefusal(res) {
-  if (res.status !== 403) return false;
-  try {
-    const body = await res.clone().json();
-    return body?.error === TERMS_ERROR_CODE;
-  } catch {
-    return false;
-  }
-}
-async function termsRefusalUrl(res) {
-  try {
-    const body = await res.clone().json();
-    return typeof body?.url === "string" && body.url ? body.url : null;
-  } catch {
-    return null;
-  }
-}
-function acceptUrl(fromServer, authUrl) {
-  return fromServer || `${getAuthUrl(authUrl)}/accept`;
-}
-function reportTermsRefusal(log, url) {
-  log.error("Your account needs to accept the updated Terms before it can generate or publish.");
-  log.dim("  Nothing was charged, and nothing on your project changed.");
-  log.dim(`  Open ${c.cyan(acceptUrl(url))} and agree \u2014 one click.`);
-}
-async function waitForAcceptance(opts) {
-  const timeoutMs = opts.timeoutMs ?? TERMS_WAIT_MS;
-  const intervalMs = opts.intervalMs ?? TERMS_POLL_MS;
-  const doFetch = opts.fetchImpl ?? fetch;
-  const sleep = opts.sleep ?? ((ms) => new Promise((r) => setTimeout(r, ms)));
-  const now = opts.now ?? Date.now;
-  const base = opts.apiUrl.replace(/\/+$/, "");
-  opts.log.dim(`  Waiting for you to accept (up to ${Math.round(timeoutMs / 1e3)}s)\u2026`);
-  const deadline = now() + timeoutMs;
-  let first = true;
-  while (first || now() < deadline) {
-    if (!first) await sleep(Math.min(intervalMs, Math.max(0, deadline - now())));
-    first = false;
-    try {
-      const res = await doFetch(`${base}/api/legal/status`, {
-        headers: { Authorization: `Bearer ${opts.token}` }
-      });
-      if (!res.ok) return false;
-      const body = await res.json().catch(() => null);
-      if (body?.accepted === true) {
-        opts.log.success("Accepted \u2014 continuing.");
-        return true;
-      }
-    } catch {
-      return false;
-    }
-  }
-  opts.log.error("Still not accepted. Re-run this command once you have agreed.");
-  return false;
-}
-function askOnStdin(question) {
-  const rl = readline.createInterface({ input: process.stdin, output: process.stdout });
-  return new Promise((resolve) => {
-    rl.question(question, (answer) => {
-      rl.close();
-      resolve(answer);
-    });
-  });
-}
-async function runAccept(opts) {
-  const { token, log } = opts;
-  const interactive = opts.interactive ?? Boolean(process.stdin.isTTY);
-  const apiUrl = getApiUrl(opts.apiUrl);
-  let acceptPage = null;
-  const status = await apiFetch(`${apiUrl}/api/legal/status`, {
-    headers: { Authorization: `Bearer ${token}` }
-  }).catch(() => null);
-  if (status?.ok) {
-    const body = await status.json().catch(() => null);
-    if (body?.accepted) {
-      log.success("Already accepted \u2014 nothing to do.");
-      return true;
-    }
-    acceptPage = typeof body?.acceptUrl === "string" ? body.acceptUrl : null;
-    log.plain("Before generating or publishing, please read and agree to:");
-    for (const doc of body?.documents ?? []) log.plain(`  ${doc.title}  ${c.cyan(doc.url)}`);
-    log.plain("");
-  }
-  if (!interactive) {
-    log.plain("Accepting the Terms needs a person \u2014 an agent cannot agree on your behalf.");
-    log.plain(`  Open ${c.cyan(acceptUrl(acceptPage))} and agree \u2014 one click.`);
-    return waitForAcceptance({ apiUrl, token, log, ...opts.wait ?? {} });
-  }
-  const ask = opts.ask ?? askOnStdin;
-  const answer = (await ask("Type 'agree' to accept: ")).trim().toLowerCase();
-  if (answer !== "agree") {
-    log.error("Not accepted \u2014 nothing was recorded.");
-    return false;
-  }
-  const res = await apiFetch(`${apiUrl}/api/legal/accept`, {
-    method: "POST",
-    headers: { Authorization: `Bearer ${token}`, "Content-Type": "application/json" },
-    body: JSON.stringify({ surface: "cli" })
-  }).catch(() => null);
-  if (!res?.ok) {
-    log.error(`Couldn't record your acceptance (HTTP ${res?.status ?? "no response"}).`);
-    return false;
-  }
-  log.success("Accepted. Re-run your command.");
-  return true;
-}
-
-// src/lib/api.ts
-var stderrLogger = /* @__PURE__ */ (() => {
-  const err = (s) => void process.stderr.write(s + "\n");
-  return {
-    info: err,
-    success: (m) => err(`${c.green("\u2713")} ${m}`),
-    warn: (m) => err(`${c.yellow("!")} ${m}`),
-    error: (m) => err(`${c.red("\u2717")} ${m}`),
-    step: err,
-    dim: (m) => err(c.dim(m)),
-    plain: err
-  };
-})();
-var CLI_VERSION_HEADER = "x-genex-cli-version";
-var WORKSPACE_HEADER = "x-genex-workspace";
-function workspaceHeaderValue(label) {
-  if (label === null) return null;
-  if (label === "tools") return "tools";
-  const slug = label.game.trim();
-  return slug ? `game:${slug}` : null;
-}
-var workspaceLabel = null;
-function setWorkspaceHeader(label) {
-  workspaceLabel = workspaceHeaderValue(label);
-}
-var ASSETS_MODE_HEADER = "x-genex-assets-mode";
-var ASSETS_MODE_ENV = "GENEX_ASSETS_MODE";
-function assetsModeFromEnv() {
-  const raw = process.env[ASSETS_MODE_ENV];
-  if (typeof raw !== "string") return null;
-  const value = raw.trim();
-  return value ? value : null;
-}
-function formatInvalidAssetsMode(body) {
-  const message = body.message ?? `the ${ASSETS_MODE_HEADER} header is malformed \u2014 send \`none\` or a comma-separated list of lanes.`;
-  const current = assetsModeFromEnv();
-  return [
-    `${c.red("\u2717")} Assets mode refused \u2014 ${lowerFirst(message)}`,
-    `  It comes from ${ASSETS_MODE_ENV}${current ? `="${current}"` : ""} in this shell \u2014 fix or unset it, then re-run. Nothing was generated or charged.`
-  ];
-}
-function formatUpdateRequired(body) {
-  const action = body.action ?? `npm i -D @genex-ai/cli-demo@${CLI_CHANNEL}`;
-  const message = body.message ?? `Genex CLI ${body.clientVersion ?? getCliVersion()} is below the minimum supported version${body.minVersion ? ` ${body.minVersion}` : ""}.`;
-  return [`${c.red("\u2717")} ${message}`, `  Update now \u2014 run: ${action}  (then re-run this command)`];
-}
-function shortDate(iso) {
-  const d = new Date(iso);
-  if (Number.isNaN(d.getTime())) return iso;
-  return d.toLocaleDateString("en-US", { month: "short", day: "numeric" });
-}
-function formatInsufficientCredits(body) {
-  const message = body.message ?? `this generation costs ${body.price ?? "?"} credits; your balance is ${body.balance ?? 0}.`;
-  const lines = [`${c.red("\u2717")} Out of credits \u2014 ${lowerFirst(message)}`];
-  if (body.refillAt && body.refillTo) {
-    lines.push(`  Credits refill to ${body.refillTo} on ${shortDate(body.refillAt)}.`);
-  }
-  if (body.url) lines.push(`  Get more or check your balance: ${body.url}`);
-  return lines;
-}
-function formatVerificationRequired(body) {
-  const lines = [
-    `${c.red("\u2717")} Email not verified \u2014 verify your email to unlock your free generation credits.`
-  ];
-  if (body.url) lines.push(`  Verify here: ${body.url}  (then re-run this command)`);
-  return lines;
-}
-function lowerFirst(s) {
-  return s ? s[0].toLowerCase() + s.slice(1) : s;
-}
-var structuredPrinted = /* @__PURE__ */ new WeakSet();
-function printedStructuredError(res) {
-  return structuredPrinted.has(res);
-}
-var termsWaitOverride = null;
-function replayable(body) {
-  if (body === void 0 || body === null) return true;
-  if (typeof body === "string") return true;
-  if (body instanceof Uint8Array || body instanceof ArrayBuffer) return true;
-  if (typeof FormData !== "undefined" && body instanceof FormData) return true;
-  if (body instanceof URLSearchParams) return true;
-  if (typeof Blob !== "undefined" && body instanceof Blob) return true;
-  return false;
-}
-async function apiFetch(url, init = {}, opts = {}) {
-  const headers = new Headers(init.headers);
-  if (!headers.has(CLI_VERSION_HEADER)) headers.set(CLI_VERSION_HEADER, getCliVersion());
-  if (workspaceLabel && !headers.has(WORKSPACE_HEADER)) {
-    headers.set(WORKSPACE_HEADER, workspaceLabel);
-  }
-  const assetsMode = assetsModeFromEnv();
-  if (assetsMode && !headers.has(ASSETS_MODE_HEADER)) {
-    headers.set(ASSETS_MODE_HEADER, assetsMode);
-  }
-  const res = await fetch(url, { ...init, headers });
-  if (res.status === 403 && !opts.noTermsWait && await isTermsRefusal(res)) {
-    const log = stderrLogger;
-    reportTermsRefusal(log, await termsRefusalUrl(res));
-    const auth = headers.get("authorization") ?? headers.get("Authorization");
-    const token = auth?.replace(/^Bearer\s+/i, "").trim();
-    let accepted = false;
-    if (token && replayable(init.body)) {
-      accepted = await waitForAcceptance({
-        apiUrl: new URL(url).origin,
-        token,
-        log,
-        ...termsWaitOverride ?? {}
-      });
-    }
-    if (accepted) return apiFetch(url, init, { ...opts, noTermsWait: true });
-    structuredPrinted.add(res);
-    return res;
-  }
-  if (res.status === 426) {
-    try {
-      const body = await res.clone().json();
-      if (body?.error === "cli_update_required") {
-        for (const line of formatUpdateRequired(body)) process.stderr.write(line + "\n");
-      }
-    } catch {
-    }
-  }
-  if (res.status === 402) {
-    try {
-      const body = await res.clone().json();
-      if (body?.error === "insufficient_credits") {
-        for (const line of formatInsufficientCredits(body)) process.stderr.write(line + "\n");
-        structuredPrinted.add(res);
-      }
-    } catch {
-    }
-  }
-  if (res.status === 403) {
-    try {
-      const body = await res.clone().json();
-      if (body?.error === "email_verification_required") {
-        for (const line of formatVerificationRequired(body)) process.stderr.write(line + "\n");
-        structuredPrinted.add(res);
-      }
-    } catch {
-    }
-  }
-  if (res.status === 400) {
-    try {
-      const body = await res.clone().json();
-      if (body?.error === "invalid_assets_mode") {
-        for (const line of formatInvalidAssetsMode(body)) process.stderr.write(line + "\n");
-        structuredPrinted.add(res);
-      }
-    } catch {
-    }
-  }
-  if (res.status === 503) {
-    try {
-      const body = await res.clone().json();
-      if (body?.error === "generation_paused") {
-        process.stderr.write(
-          `${c.red("\u2717")} ${body.message ?? "Generation is temporarily paused platform-wide. Try again later."}
-`
-        );
-        structuredPrinted.add(res);
-      }
-      if (body?.error === "provider_unavailable") {
-        process.stderr.write(
-          `${c.red("\u2717")} ${body.message ?? "This generation lane is unavailable \u2014 our provider account is out of credit. Build it in code and move on."}
-`
-        );
-        structuredPrinted.add(res);
-      }
-    } catch {
-    }
-  }
-  return res;
-}
-async function fetchSignedInEmail(apiUrl, token) {
-  try {
-    const res = await apiFetch(`${apiUrl}/api/auth/get-session`, {
-      headers: { Authorization: `Bearer ${token}` }
-    });
-    if (!res.ok) return null;
-    const data = await res.json().catch(() => null);
-    return data?.user?.email ?? null;
-  } catch {
-    return null;
-  }
-}
-
-// src/lib/blender-client.ts
-import fs4 from "fs";
-import path4 from "path";
-
-// src/lib/store.ts
-import fs3 from "fs/promises";
-import path3 from "path";
-
-// src/lib/env.ts
-import fs2 from "fs/promises";
-import path2 from "path";
-import { spawn as spawn2 } from "child_process";
-async function writeEnvVar(envPath, key, value) {
-  let content = "";
-  let existed = false;
-  try {
-    content = await fs2.readFile(envPath, "utf8");
-    existed = true;
-  } catch {
-  }
-  const assignment = `${key}=${formatValue(value)}`;
-  const keyPattern = new RegExp(
-    `^(\\s*export\\s+)?${escapeRegExp(key)}=.*$`,
-    "gm"
-  );
-  let next;
-  let mode;
-  if (keyPattern.test(content)) {
-    next = content.replace(keyPattern, assignment);
-    mode = "updated";
-  } else {
-    let prefix = content;
-    if (prefix.length > 0 && !prefix.endsWith("\n")) prefix += "\n";
-    next = prefix + assignment + "\n";
-    mode = existed ? "appended" : "created";
-  }
-  await fs2.mkdir(path2.dirname(envPath), { recursive: true });
-  await fs2.writeFile(envPath, next, { mode: 384 });
-  await restrictFilePermissions(envPath);
-  return { mode, path: envPath };
-}
-async function restrictFilePermissions(filePath) {
-  if (process.platform !== "win32") {
-    await fs2.chmod(filePath, 384).catch(() => {
-    });
-    return;
-  }
-  const user = process.env.USERNAME ?? process.env.USER;
-  if (!user) return;
-  await new Promise((resolve) => {
-    try {
-      const child = spawn2(
-        "icacls",
-        [filePath, "/inheritance:r", "/grant:r", `${user}:F`],
-        { stdio: "ignore" }
-      );
-      child.on("error", () => resolve());
-      child.on("close", () => resolve());
-    } catch {
-      resolve();
-    }
-  });
-}
-function formatValue(value) {
-  if (/[\s#"'$`\\]/.test(value)) {
-    return `"${value.replace(/\\/g, "\\\\").replace(/"/g, '\\"')}"`;
-  }
-  return value;
-}
-function escapeRegExp(s) {
-  return s.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
-}
-
-// src/lib/store.ts
-function getProjectMetadataPath(cwd = process.cwd()) {
-  return path3.join(cwd, ".genex", "project.json");
-}
-function getWorkspacePath(cwd = process.cwd()) {
-  return path3.join(cwd, ".genex", "workspace.json");
-}
-async function readWorkspace(cwd = process.cwd()) {
-  try {
-    const raw = await fs3.readFile(getWorkspacePath(cwd), "utf8");
-    return JSON.parse(raw);
-  } catch {
-    return null;
-  }
-}
-async function writeWorkspace(meta, cwd = process.cwd()) {
-  const file = getWorkspacePath(cwd);
-  await fs3.mkdir(path3.dirname(file), { recursive: true });
-  await fs3.writeFile(file, JSON.stringify(meta, null, 2) + "\n", { mode: 384 });
-  await fs3.chmod(file, 384).catch(() => {
-  });
-  return { path: file };
-}
-async function writeUserToken(token, envPath) {
-  const { path: written } = await writeEnvVar(getGenexEnvPath(envPath), ENV_TOKEN_KEY, token);
-  return { path: written };
-}
-async function rotateRejectedEnv(envPath) {
-  const file = getGenexEnvPath(envPath);
-  const stamp = (/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-");
-  const aside = `${file}.rejected-${stamp}`;
-  try {
-    await fs3.rename(file, aside);
-    return aside;
-  } catch {
-    return null;
-  }
-}
-async function readUserToken(envPath) {
-  const fromGenex = await readTokenFromFile(getGenexEnvPath(envPath));
-  if (fromGenex) return fromGenex;
-  if (!envPath && !process.env[ENV_FILE_ENV]) {
-    return readTokenFromFile(path3.join(process.cwd(), ".env"));
-  }
-  return null;
-}
-async function readTokenFromFile(file) {
-  let content;
-  try {
-    content = await fs3.readFile(file, "utf8");
-  } catch {
-    return null;
-  }
-  const m = content.match(/^\s*(?:export\s+)?GENEX_TOKEN=(.*)$/m);
-  if (!m) return null;
-  return stripQuotes(m[1].trim()) || null;
-}
-function stripQuotes(v) {
-  if (v.startsWith('"') && v.endsWith('"') || v.startsWith("'") && v.endsWith("'")) {
-    return v.slice(1, -1);
-  }
-  return v;
-}
-async function readProject(cwd = process.cwd()) {
-  try {
-    const raw = await fs3.readFile(getProjectMetadataPath(cwd), "utf8");
-    return JSON.parse(raw);
-  } catch {
-    return null;
-  }
-}
-var SCRATCH_DIR = ".genex/scratch";
-async function writeProject(meta, cwd = process.cwd()) {
-  const file = getProjectMetadataPath(cwd);
-  await fs3.mkdir(path3.dirname(file), { recursive: true });
-  await fs3.mkdir(path3.join(cwd, SCRATCH_DIR), { recursive: true }).catch(() => {
-  });
-  await fs3.writeFile(file, JSON.stringify(meta, null, 2) + "\n", { mode: 384 });
-  await fs3.chmod(file, 384).catch(() => {
-  });
-  return { path: file };
-}
-
-// src/lib/blender-client.ts
-var BLENDER_TIMEOUT_MS = 15 * 60 * 1e3;
-var RENDER_MODES = ["solid", "wireframe", "normals", "lit"];
-function isRenderMode(v) {
-  return typeof v === "string" && RENDER_MODES.includes(v);
-}
-function blenderEndpoint() {
-  const raw = process.env.GENEX_BLENDER_URL?.trim();
-  return raw ? raw.replace(/\/+$/, "") : void 0;
-}
-function blenderSetupHint() {
-  if (process.env.GENEX_HOSTED_SESSION === "1") {
-    return [
-      "The Blender lane is off on this stand \u2014 there is no seat to acquire.",
-      "  Build the space in code instead ($genex-threejs-procedural-assets); do not wait for it."
-    ].join("\n");
-  }
-  return [
-    "No Blender endpoint. Run the service against your own Blender in another terminal:",
-    "    npx genex blender serve",
-    "    export GENEX_BLENDER_URL=http://localhost:8088",
-    "  GENEX_BLENDER_URL may also point at any running genex-blender service."
-  ].join("\n");
-}
-var SHEET_FORMATS = ["webp", "png"];
-function sheetOf(r) {
-  if (r.contactSheet?.b64) return { b64: r.contactSheet.b64, mime: r.contactSheet.mime };
-  if (r.contactSheetPng) return { b64: r.contactSheetPng, mime: "image/png" };
-  return null;
-}
-function sheetExt(mime) {
-  return mime === "image/webp" ? "webp" : "png";
-}
-var SEAT_FILE = path4.join(".genex", "blender-seat.json");
-function readSeatGrant(cwd = process.cwd()) {
-  try {
-    const raw = JSON.parse(fs4.readFileSync(path4.join(cwd, SEAT_FILE), "utf8"));
-    if (typeof raw.url !== "string" || typeof raw.token !== "string") return null;
-    return {
-      url: raw.url,
-      token: raw.token,
-      ...typeof raw.seatId === "string" ? { seatId: raw.seatId } : {},
-      ...raw.kind === "cli" || raw.kind === "hosted" ? { kind: raw.kind } : {}
-    };
-  } catch {
-    return null;
-  }
-}
-function writeSeatGrant(grant, cwd = process.cwd()) {
-  const file = path4.join(cwd, SEAT_FILE);
-  fs4.mkdirSync(path4.dirname(file), { recursive: true });
-  fs4.writeFileSync(file, JSON.stringify(grant, null, 2) + "\n", { mode: 384 });
-}
-function deleteSeatGrant(cwd = process.cwd()) {
-  try {
-    fs4.unlinkSync(path4.join(cwd, SEAT_FILE));
-  } catch {
-  }
-}
-var lastTouchAt = 0;
-var TOUCH_THROTTLE_MS = 6e4;
-async function touchCliSeat() {
-  if (Date.now() - lastTouchAt < TOUCH_THROTTLE_MS) return;
-  lastTouchAt = Date.now();
-  try {
-    const token = await readUserToken();
-    if (!token) return;
-    await apiFetch(`${getApiUrl()}/api/blender/seat/touch`, {
-      method: "POST",
-      headers: { Authorization: `Bearer ${token}` }
-    });
-  } catch {
-  }
-}
-async function blenderCall(base, route, body) {
-  const cwd = process.cwd();
-  const seat = readSeatGrant();
-  const ctl = new AbortController();
-  const timer = setTimeout(() => ctl.abort(), BLENDER_TIMEOUT_MS);
-  try {
-    const res = await fetch(`${base}${route}`, {
-      method: body === void 0 ? "GET" : "POST",
-      headers: {
-        // A REAL User-Agent, because the vendor proxy in front of a hosted pod
-        // sits behind Cloudflare, and Cloudflare's error 1010 refuses the
-        // default Python UA outright (measured: Python-urllib/3.x -> 403; any
-        // override -> 200). Whether it also refuses undici's default is
-        // untested, and this is the client every hosted agent will reach the
-        // pod with -- so the question is closed here rather than found in a
-        // sandbox as a 403 that looks like a bad token.
-        "User-Agent": `genex-cli/${getCliVersion()}`,
-        ...body === void 0 ? {} : { "Content-Type": "application/json" },
-        // TWO credentials, two headers, and the router is strict about which is
-        // which: a hosted SEAT presents its token as `x-genex-seat` on
-        // `/s/<sid>/…`, while `x-genex-internal` is the POD secret and is honoured
-        // only on `/pool/*`. The first cut sent the seat token under the pod
-        // header and every hosted call would have been a 401 whose message
-        // pointed at the wrong knob (review finding).
-        ...seat?.token ? { "x-genex-seat": seat.token } : {},
-        // Sent only when set. The service treats an unset secret as open, which
-        // is right on localhost; the deployed compose makes it mandatory.
-        ...!seat?.token && process.env.GENEX_BLENDER_SECRET ? { "x-genex-internal": process.env.GENEX_BLENDER_SECRET } : {}
-      },
-      body: body === void 0 ? void 0 : JSON.stringify(body),
-      signal: ctl.signal
-    });
-    if (res.status === 401 && seat?.token) {
-      const current = readSeatGrant(cwd);
-      if (current?.url === seat.url && current.token === seat.token) deleteSeatGrant(cwd);
-      await res.body?.cancel().catch(() => {
-      });
-      throw new Error(
-        `${route} refused the seat token (401) \u2014 ${seat.kind === "cli" ? 'run "genex blender seat" to acquire a new one' : "run the command again to acquire a new one"}`
-      );
-    }
-    const text = await res.text();
-    let json;
-    try {
-      json = JSON.parse(text);
-    } catch {
-      throw new Error(`${route} answered ${res.status} with non-JSON: ${text.slice(0, 200)}`);
-    }
-    if (!res.ok) {
-      if (res.status === 401) {
-        throw new Error(
-          seat ? `${route} refused the seat token (401) \u2014 the seat may have been closed; run the command again to acquire a new one` : `${route} refused the request (401) \u2014 set GENEX_BLENDER_SECRET to the service's secret`
-        );
-      }
-      const detail = typeof json.detail === "string" ? ` \u2014 ${json.detail}` : "";
-      const stage = typeof json.stage === "string" ? ` [${json.stage}]` : "";
-      const mutationWarning = json.scriptStarted === true ? " (script may have changed the scene; inspect it before retrying)" : "";
-      const trace = typeof json.trace === "string" ? `
-${json.trace.slice(-4e3)}` : "";
-      throw new Error(`${route} failed (${res.status}): ${json.error ?? text.slice(0, 200)}${stage}${detail}${mutationWarning}${trace}`);
-    }
-    if (seat?.kind === "cli") void touchCliSeat();
-    if (seat?.kind === "hosted" && seat.seatId && route === "/health") {
-      const token = await readUserToken();
-      if (!token) throw new Error("Cannot acknowledge Blender readiness: not signed in");
-      const claim = await apiFetch(`${getApiUrl()}/api/blender/seat/touch`, {
-        method: "POST",
-        headers: { Authorization: `Bearer ${token}`, "Content-Type": "application/json" },
-        body: JSON.stringify({ seatId: seat.seatId })
-      });
-      if (!claim.ok) throw new Error("Blender readiness acknowledgement failed; no scene command was sent. Run the command again.");
-    }
-    return json;
-  } catch (err) {
-    if (err instanceof Error && err.name === "AbortError") {
-      throw new Error(`${route} timed out after ${BLENDER_TIMEOUT_MS / 1e3}s`);
-    }
-    throw err;
-  } finally {
-    clearTimeout(timer);
-  }
-}
-function sceneSummary(s) {
-  if (!s) return "";
-  return `objects ${s.objectCount}  meshes ${s.meshCount}  tris ${s.totalTris}  materials ${s.materialCount}  radius ${s.bounds.radius}`;
-}
-
-// src/lib/blender-seat.ts
-var SEAT_WAIT_BUDGET_MS = 9e4;
-var SEAT_POLL_MS = 1e4;
-function hostedBlenderLane() {
-  return process.env.GENEX_BLENDER_LANE === "1";
-}
-async function acquireSeat(opts) {
-  const held = readSeatGrant(opts.cwd);
-  if (held) return { kind: "granted", grant: held };
-  if (!hostedBlenderLane()) return { kind: "off" };
-  const token = opts.token !== void 0 ? opts.token : await readUserToken();
-  if (!token) return { kind: "refused", reason: "not signed in" };
-  const doFetch = opts.fetchImpl ?? apiFetch;
-  const sleep = opts.sleep ?? ((ms) => new Promise((r) => setTimeout(r, ms)));
-  const deadline = Date.now() + (opts.budgetMs ?? SEAT_WAIT_BUDGET_MS);
-  let announced = false;
-  for (; ; ) {
-    const res = await doFetch(`${getApiUrl()}/api/blender/seat`, {
-      method: "POST",
-      headers: { Authorization: `Bearer ${token}`, "Content-Type": "application/json" },
-      body: JSON.stringify({ acknowledgeReadiness: true })
-    });
-    if (res.status === 201) {
-      const body = await res.json();
-      if (typeof body.url !== "string" || typeof body.token !== "string") {
-        return { kind: "refused", reason: "the API answered a seat without a url and token" };
-      }
-      const grant = { url: body.url, token: body.token, kind: "hosted", ...typeof body.seatId === "string" ? { seatId: body.seatId } : {} };
-      writeSeatGrant(grant, opts.cwd);
-      return { kind: "granted", grant };
-    }
-    if (res.status === 202 || res.status === 429) {
-      if (!announced) {
-        opts.log.step("Warming up a Blender seat (about 20 s on a warm pod, ~2 min on a cold one, longer on a host pulling the image for the first time)\u2026");
-        announced = true;
-      }
-      if (Date.now() >= deadline) return { kind: "warming" };
-      await sleep(SEAT_POLL_MS);
-      continue;
-    }
-    if (res.status === 404) return { kind: "off" };
-    let reason = `HTTP ${res.status}`;
-    try {
-      const body = await res.json();
-      reason = body.reason ?? body.error ?? reason;
-    } catch {
-    }
-    return { kind: "refused", reason };
-  }
-}
-async function acquireCliSeat(opts) {
-  const token = opts.token !== void 0 ? opts.token : await readUserToken();
-  if (!token) return { kind: "refused", reason: "not signed in" };
-  const doFetch = opts.fetchImpl ?? apiFetch;
-  const sleep = opts.sleep ?? ((ms) => new Promise((r) => setTimeout(r, ms)));
-  const deadline = Date.now() + (opts.budgetMs ?? SEAT_WAIT_BUDGET_MS);
-  let announced = false;
-  for (; ; ) {
-    const res = await doFetch(`${getApiUrl()}/api/blender/seat`, {
-      method: "POST",
-      headers: { Authorization: `Bearer ${token}`, "Content-Type": "application/json" },
-      body: JSON.stringify({ cli: true, scope: opts.scope, acknowledgeReadiness: true })
-    });
-    if (res.status === 201) {
-      const body = await res.json();
-      if (typeof body.url !== "string" || typeof body.token !== "string") {
-        return { kind: "refused", reason: "the API answered a seat without a url and token" };
-      }
-      const grant = {
-        url: body.url,
-        token: body.token,
-        kind: body.kind === "hosted" ? "hosted" : "cli",
-        ...typeof body.seatId === "string" ? { seatId: body.seatId } : {}
-      };
-      writeSeatGrant(grant, opts.cwd);
-      if (grant.kind === "cli" && body.pricing) {
-        opts.log.step(
-          `Blender seat: ${body.pricing.creditsPerBlock} credits per ${body.pricing.blockSeconds}s while it's open. It closes itself after ${body.pricing.idleMinutes} idle minutes, or run "genex blender release".`
-        );
-      }
-      return { kind: "granted", grant };
-    }
-    if (res.status === 202 || res.status === 429) {
-      if (!announced) {
-        opts.log.step("Warming up a Blender seat (about 20 s on a warm pod, ~2 min on a cold one, longer on a host pulling the image for the first time)\u2026");
-        announced = true;
-      }
-      if (Date.now() >= deadline) return { kind: "warming" };
-      await sleep(SEAT_POLL_MS);
-      continue;
-    }
-    if (res.status === 404) return { kind: "off" };
-    if (res.status === 402) return { kind: "refused", reason: "insufficient credits" };
-    let reason = `HTTP ${res.status}`;
-    try {
-      const body = await res.json();
-      reason = body.reason ?? body.error ?? reason;
-    } catch {
-    }
-    return { kind: "refused", reason };
-  }
-}
-async function releaseCliSeat(opts) {
-  const token = opts.token !== void 0 ? opts.token : await readUserToken();
-  if (!token) return { ok: false, reason: "not signed in" };
-  const doFetch = opts.fetchImpl ?? apiFetch;
-  const res = await doFetch(`${getApiUrl()}/api/blender/seat`, {
-    method: "DELETE",
-    headers: { Authorization: `Bearer ${token}` }
-  });
-  if (!res.ok) return { ok: false, reason: `HTTP ${res.status}` };
-  deleteSeatGrant(opts.cwd);
-  return { ok: true };
-}
-
-export {
-  excludeFile,
-  run,
-  readRemoteSource,
-  isStale,
-  inHostedSession,
-  mayForceOverAnotherDevice,
-  reportForceRefused,
-  reportStale,
-  sourceTreeHash,
-  urlHasEmbeddedCredentials,
-  fetchCloneGrant,
-  cloneSource,
-  isTermsRefusal,
-  acceptUrl,
-  reportTermsRefusal,
-  runAccept,
-  setWorkspaceHeader,
-  ASSETS_MODE_ENV,
-  assetsModeFromEnv,
-  printedStructuredError,
-  apiFetch,
-  fetchSignedInEmail,
-  restrictFilePermissions,
-  readWorkspace,
-  writeWorkspace,
-  writeUserToken,
-  rotateRejectedEnv,
-  readUserToken,
-  readProject,
-  writeProject,
-  RENDER_MODES,
-  isRenderMode,
-  blenderEndpoint,
-  blenderSetupHint,
-  SHEET_FORMATS,
-  sheetOf,
-  sheetExt,
-  readSeatGrant,
-  blenderCall,
-  sceneSummary,
-  acquireSeat,
-  acquireCliSeat,
-  releaseCliSeat
-};