@go-labs-sg/gosh 0.2.0 → 0.3.0

package/dist/index.js

@@ -15069,6 +15069,291 @@ class AuthenticatedEventSource {
   }
 }
 
+// src/runtime.ts
+import { createInterface } from "readline/promises";
+var invocationCodes = new Set([
+  "USAGE",
+  "VALIDATION",
+  "CONFIRMATION_REQUIRED",
+  "ABORTED"
+]);
+var trpcCodeMap = {
+  BAD_REQUEST: "VALIDATION",
+  CONFLICT: "CONFLICT",
+  FORBIDDEN: "AUTHORIZATION",
+  INTERNAL_SERVER_ERROR: "API",
+  NOT_FOUND: "NOT_FOUND",
+  PARSE_ERROR: "VALIDATION",
+  TIMEOUT: "NETWORK",
+  TOO_MANY_REQUESTS: "API",
+  UNAUTHORIZED: "AUTHENTICATION",
+  UNPROCESSABLE_CONTENT: "VALIDATION"
+};
+var networkMessagePattern = /\b(fetch failed|network error|unable to connect|econnrefused|econnreset|enotfound|etimedout|socket hang up)\b/i;
+var isNetworkError = (error51, depth = 0) => {
+  if (depth > 3 || !isRecord(error51))
+    return false;
+  const message = typeof error51.message === "string" ? error51.message : undefined;
+  const code = typeof error51.code === "string" ? error51.code : undefined;
+  if (message && networkMessagePattern.test(message) || code && networkMessagePattern.test(code)) {
+    return true;
+  }
+  return isNetworkError(error51.cause, depth + 1);
+};
+
+class CliError extends Error {
+  code;
+  details;
+  constructor(code, message, details) {
+    super(message);
+    this.name = "CliError";
+    this.code = code;
+    this.details = details;
+  }
+}
+var isRecord = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+var isJsonValue = (value) => {
+  if (value === null || typeof value === "string" || typeof value === "boolean" || typeof value === "number") {
+    return true;
+  }
+  if (Array.isArray(value))
+    return value.every(isJsonValue);
+  return isRecord(value) && Object.values(value).every(isJsonValue);
+};
+var toJsonValue = (value) => {
+  const serialized = JSON.stringify(value, (_key, nestedValue) => {
+    if (typeof nestedValue === "bigint")
+      return nestedValue.toString();
+    return nestedValue;
+  });
+  if (serialized === undefined)
+    return null;
+  return JSON.parse(serialized);
+};
+var sensitiveKeyPattern = /(api.?key|authorization|join.?code|password|secret|share.?token|token|payload|proof|receipt)/i;
+var presignedUrlPattern = /[?&](?:X-Amz|X-Goog)-(?:Credential|Signature)=/i;
+var sanitizeValue = (value, seen = new WeakSet) => {
+  if (value === null || typeof value === "boolean" || typeof value === "number") {
+    return value;
+  }
+  if (typeof value === "string") {
+    return presignedUrlPattern.test(value) ? "[redacted]" : value;
+  }
+  if (typeof value === "bigint")
+    return value.toString();
+  if (value instanceof Date)
+    return value.toISOString();
+  if (typeof value !== "object" || value === null)
+    return String(value);
+  if (seen.has(value))
+    return "[circular]";
+  seen.add(value);
+  if (Array.isArray(value)) {
+    return value.map((item) => sanitizeValue(item, seen));
+  }
+  if (!isRecord(value))
+    return String(value);
+  return Object.fromEntries(Object.entries(value).map(([key, nestedValue]) => [
+    key,
+    sensitiveKeyPattern.test(key) ? "[redacted]" : sanitizeValue(nestedValue, seen)
+  ]));
+};
+var normalizeError = (error51) => {
+  if (error51 instanceof CliError) {
+    return {
+      code: error51.code,
+      message: error51.message,
+      ...error51.details ? { details: error51.details } : {}
+    };
+  }
+  if (isNetworkError(error51)) {
+    return {
+      code: "NETWORK",
+      message: error51 instanceof Error ? error51.message : "The GOSH API could not be reached."
+    };
+  }
+  if (isRecord(error51)) {
+    const data = isRecord(error51.data) ? error51.data : undefined;
+    const rawCode = typeof data?.code === "string" ? data.code : undefined;
+    const code = rawCode ? trpcCodeMap[rawCode] ?? "API" : "INTERNAL";
+    const message = typeof error51.message === "string" ? error51.message : "The GOSH API request failed.";
+    const details = isRecord(data?.zodError) && isJsonValue(data.zodError) ? { validation: data.zodError } : undefined;
+    return { code, message, ...details ? { details } : {} };
+  }
+  return {
+    code: "INTERNAL",
+    message: error51 instanceof Error ? error51.message : String(error51)
+  };
+};
+var serialize = (value) => `${JSON.stringify(value, null, 2)}
+`;
+var redactKnownSecrets = (value, _runtime) => {
+  return value.replace(/\bBearer\s+\S+/giu, "Bearer [redacted]");
+};
+var emitSuccess = (runtime2, invocation, data) => {
+  runtime2.stdout.write(serialize({
+    ok: true,
+    data: toJsonValue(data),
+    meta: {
+      apiBaseUrl: invocation.apiBaseUrl,
+      cliVersion: invocation.cliVersion,
+      command: invocation.command
+    }
+  }));
+  return 0;
+};
+var emitSubscriptionEvent = (runtime2, invocation, data) => {
+  runtime2.stdout.write(`${JSON.stringify({
+    ok: true,
+    data: toJsonValue(data),
+    meta: {
+      apiBaseUrl: invocation.apiBaseUrl,
+      cliVersion: invocation.cliVersion,
+      command: invocation.command,
+      stream: true
+    }
+  })}
+`);
+};
+var emitError = (runtime2, command, error51) => {
+  const normalized = normalizeError(error51);
+  runtime2.stderr.write(redactKnownSecrets(serialize({ ok: false, error: normalized, meta: { command } }), runtime2));
+  return invocationCodes.has(normalized.code) ? 2 : 1;
+};
+var effectLabels = {
+  delete: "deletes or permanently revokes data",
+  email: "sends email",
+  "external-write": "writes to an external delivery surface",
+  "state-change": "changes GOSH state"
+};
+var permissionFlag = {
+  delete: "allow-delete",
+  email: "allow-email",
+  "external-write": "allow-external-write",
+  "state-change": "allow-state-change"
+};
+var getTargetCandidates = (input, targetKeys) => {
+  for (const key of targetKeys) {
+    if (key === "$self")
+      return new Set(["self"]);
+    if (!isRecord(input) || !(key in input))
+      continue;
+    const rawValue = input[key];
+    const values = Array.isArray(rawValue) ? rawValue : [rawValue];
+    const candidates = new Set(values.filter((value) => typeof value === "string" || typeof value === "number").map(String));
+    if (candidates.size > 0)
+      return candidates;
+  }
+  return new Set;
+};
+var confirmCommand = async ({
+  action,
+  effects,
+  flags,
+  input,
+  runtime: runtime2,
+  target,
+  targetKeys = []
+}) => {
+  if (effects.length === 0)
+    return;
+  if (!target?.trim()) {
+    throw new CliError("CONFIRMATION_REQUIRED", "Sensitive commands require --target with the exact resource being changed.", { target: "required" });
+  }
+  if (!getTargetCandidates(input, targetKeys).has(target.trim())) {
+    throw new CliError("CONFIRMATION_REQUIRED", `--target must exactly match the command's primary resource (${targetKeys.map((key) => key === "$self" ? "self" : key).join(", ")}).`);
+  }
+  const uniqueEffects = [...new Set(effects)];
+  const missingFlags = uniqueEffects.map((effect) => permissionFlag[effect]).filter((flag) => flags[flag] !== true).map((flag) => `--${flag}`);
+  if (missingFlags.length === 0)
+    return;
+  if (!runtime2.isTTY) {
+    throw new CliError("CONFIRMATION_REQUIRED", "Non-interactive sensitive commands require every applicable allow flag.", { missingFlags });
+  }
+  runtime2.stderr.write(`${[
+    "GOSH workflow preview",
+    `Action: ${action}`,
+    `Target: ${target}`,
+    `Effects: ${uniqueEffects.map((effect) => effectLabels[effect]).join("; ")}`
+  ].join(`
+`)}
+`);
+  if (!runtime2.prompt) {
+    throw new CliError("CONFIRMATION_REQUIRED", "This command needs an interactive confirmation prompt.");
+  }
+  const answer = await runtime2.prompt("Type CONFIRM to continue: ");
+  if (answer !== "CONFIRM") {
+    throw new CliError("ABORTED", "Command aborted by user.");
+  }
+};
+var createProcessRuntime = () => ({
+  stdout: { write: (value) => process.stdout.write(value) },
+  stderr: { write: (value) => process.stderr.write(value) },
+  isTTY: Boolean(process.stdin.isTTY && process.stderr.isTTY),
+  env: process.env,
+  prompt: async (message) => {
+    const prompt = createInterface({
+      input: process.stdin,
+      output: process.stderr
+    });
+    try {
+      return await prompt.question(message);
+    } finally {
+      prompt.close();
+    }
+  }
+});
+
+// src/api-client.ts
+var DEFAULT_GOSH_API_BASE_URL = "https://app.gosh.sg";
+var normalizeApiBaseUrl = (value) => {
+  const url2 = new URL(value);
+  const isLocalHttp = url2.protocol === "http:" && (url2.hostname === "localhost" || url2.hostname === "127.0.0.1");
+  if (url2.protocol !== "https:" && !isLocalHttp) {
+    throw new Error("GOSH API URL must use HTTPS, except for localhost development.");
+  }
+  url2.pathname = url2.pathname.replace(/\/$/, "");
+  return url2.toString().replace(/\/$/, "");
+};
+var createGoshClient = ({
+  apiBaseUrl,
+  accessToken,
+  debug = false,
+  quiet = false
+}) => {
+  const headers = () => ({
+    "x-trpc-source": "gosh-cli",
+    ...accessToken ? { Authorization: `Bearer ${accessToken}` } : {}
+  });
+  return createTRPCProxyClient({
+    links: [
+      loggerLink({
+        enabled: () => debug && !quiet,
+        colorMode: "ansi",
+        withContext: false,
+        console: {
+          log: (...args) => console.error(...args.map((argument) => sanitizeValue(argument))),
+          error: (...args) => console.error(...args.map((argument) => sanitizeValue(argument)))
+        }
+      }),
+      splitLink({
+        condition: (operation) => operation.type === "subscription",
+        true: httpSubscriptionLink({
+          EventSource: AuthenticatedEventSource,
+          eventSourceOptions: { headers: headers() },
+          transformer: SuperJSON,
+          url: `${apiBaseUrl}/api/trpc`
+        }),
+        false: httpBatchLink({
+          headers,
+          transformer: SuperJSON,
+          url: `${apiBaseUrl}/api/trpc`
+        })
+      })
+    ]
+  });
+};
+
 // src/registry/typed-operations.ts
 var typedOperations = {
   "health.status": {
@@ -15529,394 +15814,111 @@ var typedOperations = {
   },
   "event.onSubmissionReviewQueueChanged": {
     kind: "subscription",
-    subscribe: (client, input, observer) => client.event.onSubmissionReviewQueueChanged.subscribe(input, {
-      onComplete: observer.complete,
-      onData: observer.next,
-      onError: observer.error
-    })
-  },
-  "organization.create": {
-    kind: "mutation",
-    invoke: (client, input) => client.organization.create.mutate(input)
-  },
-  "organization.update": {
-    kind: "mutation",
-    invoke: (client, input) => client.organization.update.mutate(input)
-  },
-  "organization.checkSlug": {
-    kind: "mutation",
-    invoke: (client, input) => client.organization.checkSlug.mutate(input)
-  },
-  "organization.checkOrganizationAccess": {
-    kind: "query",
-    invoke: (client, input) => client.organization.checkOrganizationAccess.query(input)
-  },
-  "organization.getOnboardingState": {
-    kind: "query",
-    invoke: (client, input) => client.organization.getOnboardingState.query(input)
-  },
-  "organization.getInvitation": {
-    kind: "query",
-    invoke: (client, input) => client.organization.getInvitation.query(input)
-  },
-  "organization.acceptInvitation": {
-    kind: "mutation",
-    invoke: (client, input) => client.organization.acceptInvitation.mutate(input)
-  },
-  "organization.rejectInvitation": {
-    kind: "mutation",
-    invoke: (client, input) => client.organization.rejectInvitation.mutate(input)
-  },
-  "organization.cancelInvitation": {
-    kind: "mutation",
-    invoke: (client, input) => client.organization.cancelInvitation.mutate(input)
-  },
-  "organization.inviteMember": {
-    kind: "mutation",
-    invoke: (client, input) => client.organization.inviteMember.mutate(input)
-  },
-  "organization.removeMember": {
-    kind: "mutation",
-    invoke: (client, input) => client.organization.removeMember.mutate(input)
-  },
-  "organization.updateMemberRole": {
-    kind: "mutation",
-    invoke: (client, input) => client.organization.updateMemberRole.mutate(input)
-  },
-  "organization.listAllForAdmin": {
-    kind: "query",
-    invoke: (client, input) => client.organization.listAllForAdmin.query(input)
-  },
-  "template.createSystem": {
-    kind: "mutation",
-    invoke: (client, input) => client.template.createSystem.mutate(input)
-  },
-  "user.listAdmin": {
-    kind: "query",
-    invoke: (client, input) => client.user.listAdmin.query(input)
-  },
-  "user.updateGlobalRole": {
-    kind: "mutation",
-    invoke: (client, input) => client.user.updateGlobalRole.mutate(input)
-  },
-  "user.ban": {
-    kind: "mutation",
-    invoke: (client, input) => client.user.ban.mutate(input)
-  },
-  "user.unban": {
-    kind: "mutation",
-    invoke: (client, input) => client.user.unban.mutate(input)
-  }
-};
-
-// src/runtime.ts
-import { createInterface } from "readline/promises";
-var invocationCodes = new Set([
-  "USAGE",
-  "VALIDATION",
-  "CONFIRMATION_REQUIRED",
-  "ABORTED"
-]);
-var trpcCodeMap = {
-  BAD_REQUEST: "VALIDATION",
-  CONFLICT: "CONFLICT",
-  FORBIDDEN: "AUTHORIZATION",
-  INTERNAL_SERVER_ERROR: "API",
-  NOT_FOUND: "NOT_FOUND",
-  PARSE_ERROR: "VALIDATION",
-  TIMEOUT: "NETWORK",
-  TOO_MANY_REQUESTS: "API",
-  UNAUTHORIZED: "AUTHENTICATION",
-  UNPROCESSABLE_CONTENT: "VALIDATION"
-};
-var networkMessagePattern = /\b(fetch failed|network error|unable to connect|econnrefused|econnreset|enotfound|etimedout|socket hang up)\b/i;
-var isNetworkError = (error51, depth = 0) => {
-  if (depth > 3 || !isRecord(error51))
-    return false;
-  const message = typeof error51.message === "string" ? error51.message : undefined;
-  const code = typeof error51.code === "string" ? error51.code : undefined;
-  if (message && networkMessagePattern.test(message) || code && networkMessagePattern.test(code)) {
-    return true;
-  }
-  return isNetworkError(error51.cause, depth + 1);
-};
-
-class CliError extends Error {
-  code;
-  details;
-  constructor(code, message, details) {
-    super(message);
-    this.name = "CliError";
-    this.code = code;
-    this.details = details;
-  }
-}
-var isRecord = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
-var isJsonValue = (value) => {
-  if (value === null || typeof value === "string" || typeof value === "boolean" || typeof value === "number") {
-    return true;
-  }
-  if (Array.isArray(value))
-    return value.every(isJsonValue);
-  return isRecord(value) && Object.values(value).every(isJsonValue);
-};
-var toJsonValue = (value) => {
-  const serialized = JSON.stringify(value, (_key, nestedValue) => {
-    if (typeof nestedValue === "bigint")
-      return nestedValue.toString();
-    return nestedValue;
-  });
-  if (serialized === undefined)
-    return null;
-  return JSON.parse(serialized);
-};
-var sensitiveKeyPattern = /(api.?key|authorization|join.?code|password|secret|share.?token|token|payload|proof|receipt)/i;
-var presignedUrlPattern = /[?&](?:X-Amz|X-Goog)-(?:Credential|Signature)=/i;
-var sanitizeValue = (value, seen = new WeakSet) => {
-  if (value === null || typeof value === "boolean" || typeof value === "number") {
-    return value;
-  }
-  if (typeof value === "string") {
-    return presignedUrlPattern.test(value) ? "[redacted]" : value;
-  }
-  if (typeof value === "bigint")
-    return value.toString();
-  if (value instanceof Date)
-    return value.toISOString();
-  if (typeof value !== "object" || value === null)
-    return String(value);
-  if (seen.has(value))
-    return "[circular]";
-  seen.add(value);
-  if (Array.isArray(value)) {
-    return value.map((item) => sanitizeValue(item, seen));
-  }
-  if (!isRecord(value))
-    return String(value);
-  return Object.fromEntries(Object.entries(value).map(([key, nestedValue]) => [
-    key,
-    sensitiveKeyPattern.test(key) ? "[redacted]" : sanitizeValue(nestedValue, seen)
-  ]));
-};
-var normalizeError = (error51) => {
-  if (error51 instanceof CliError) {
-    return {
-      code: error51.code,
-      message: error51.message,
-      ...error51.details ? { details: error51.details } : {}
-    };
-  }
-  if (isNetworkError(error51)) {
-    return {
-      code: "NETWORK",
-      message: error51 instanceof Error ? error51.message : "The GOSH API could not be reached."
-    };
-  }
-  if (isRecord(error51)) {
-    const data = isRecord(error51.data) ? error51.data : undefined;
-    const rawCode = typeof data?.code === "string" ? data.code : undefined;
-    const code = rawCode ? trpcCodeMap[rawCode] ?? "API" : "INTERNAL";
-    const message = typeof error51.message === "string" ? error51.message : "The GOSH API request failed.";
-    const details = isRecord(data?.zodError) && isJsonValue(data.zodError) ? { validation: data.zodError } : undefined;
-    return { code, message, ...details ? { details } : {} };
+    subscribe: (client, input, observer) => client.event.onSubmissionReviewQueueChanged.subscribe(input, {
+      onComplete: observer.complete,
+      onData: observer.next,
+      onError: observer.error
+    })
+  },
+  "organization.create": {
+    kind: "mutation",
+    invoke: (client, input) => client.organization.create.mutate(input)
+  },
+  "organization.update": {
+    kind: "mutation",
+    invoke: (client, input) => client.organization.update.mutate(input)
+  },
+  "organization.checkSlug": {
+    kind: "mutation",
+    invoke: (client, input) => client.organization.checkSlug.mutate(input)
+  },
+  "organization.checkOrganizationAccess": {
+    kind: "query",
+    invoke: (client, input) => client.organization.checkOrganizationAccess.query(input)
+  },
+  "organization.getOnboardingState": {
+    kind: "query",
+    invoke: (client, input) => client.organization.getOnboardingState.query(input)
+  },
+  "organization.getInvitation": {
+    kind: "query",
+    invoke: (client, input) => client.organization.getInvitation.query(input)
+  },
+  "organization.acceptInvitation": {
+    kind: "mutation",
+    invoke: (client, input) => client.organization.acceptInvitation.mutate(input)
+  },
+  "organization.rejectInvitation": {
+    kind: "mutation",
+    invoke: (client, input) => client.organization.rejectInvitation.mutate(input)
+  },
+  "organization.cancelInvitation": {
+    kind: "mutation",
+    invoke: (client, input) => client.organization.cancelInvitation.mutate(input)
+  },
+  "organization.inviteMember": {
+    kind: "mutation",
+    invoke: (client, input) => client.organization.inviteMember.mutate(input)
+  },
+  "organization.removeMember": {
+    kind: "mutation",
+    invoke: (client, input) => client.organization.removeMember.mutate(input)
+  },
+  "organization.updateMemberRole": {
+    kind: "mutation",
+    invoke: (client, input) => client.organization.updateMemberRole.mutate(input)
+  },
+  "organization.listAllForAdmin": {
+    kind: "query",
+    invoke: (client, input) => client.organization.listAllForAdmin.query(input)
+  },
+  "template.createSystem": {
+    kind: "mutation",
+    invoke: (client, input) => client.template.createSystem.mutate(input)
+  },
+  "user.listAdmin": {
+    kind: "query",
+    invoke: (client, input) => client.user.listAdmin.query(input)
+  },
+  "user.updateGlobalRole": {
+    kind: "mutation",
+    invoke: (client, input) => client.user.updateGlobalRole.mutate(input)
+  },
+  "user.ban": {
+    kind: "mutation",
+    invoke: (client, input) => client.user.ban.mutate(input)
+  },
+  "user.unban": {
+    kind: "mutation",
+    invoke: (client, input) => client.user.unban.mutate(input)
   }
-  return {
-    code: "INTERNAL",
-    message: error51 instanceof Error ? error51.message : String(error51)
-  };
-};
-var serialize = (value) => `${JSON.stringify(value, null, 2)}
-`;
-var redactKnownSecrets = (value, _runtime) => {
-  return value.replace(/\bBearer\s+\S+/giu, "Bearer [redacted]");
-};
-var emitSuccess = (runtime2, invocation, data) => {
-  runtime2.stdout.write(serialize({
-    ok: true,
-    data: toJsonValue(data),
-    meta: {
-      apiBaseUrl: invocation.apiBaseUrl,
-      cliVersion: invocation.cliVersion,
-      command: invocation.command
-    }
-  }));
-  return 0;
 };
-var emitSubscriptionEvent = (runtime2, invocation, data) => {
-  runtime2.stdout.write(`${JSON.stringify({
-    ok: true,
-    data: toJsonValue(data),
-    meta: {
-      apiBaseUrl: invocation.apiBaseUrl,
-      cliVersion: invocation.cliVersion,
-      command: invocation.command,
-      stream: true
+
+// src/command-client.ts
+var createGoshCommandClient = (client) => ({
+  mutation: (path2, input) => {
+    const operation = typedOperations[path2];
+    if (operation.kind !== "mutation") {
+      throw new Error(`Expected mutation procedure, received ${path2}.`);
+    }
+    return operation.invoke(client, input);
+  },
+  query: (path2, input) => {
+    const operation = typedOperations[path2];
+    if (operation.kind !== "query") {
+      throw new Error(`Expected query procedure, received ${path2}.`);
     }
-  })}
-`);
-};
-var emitError = (runtime2, command, error51) => {
-  const normalized = normalizeError(error51);
-  runtime2.stderr.write(redactKnownSecrets(serialize({ ok: false, error: normalized, meta: { command } }), runtime2));
-  return invocationCodes.has(normalized.code) ? 2 : 1;
-};
-var effectLabels = {
-  delete: "deletes or permanently revokes data",
-  email: "sends email",
-  "external-write": "writes to an external delivery surface",
-  "state-change": "changes GOSH state"
-};
-var permissionFlag = {
-  delete: "allow-delete",
-  email: "allow-email",
-  "external-write": "allow-external-write",
-  "state-change": "allow-state-change"
-};
-var getTargetCandidates = (input, targetKeys) => {
-  for (const key of targetKeys) {
-    if (key === "$self")
-      return new Set(["self"]);
-    if (!isRecord(input) || !(key in input))
-      continue;
-    const rawValue = input[key];
-    const values = Array.isArray(rawValue) ? rawValue : [rawValue];
-    const candidates = new Set(values.filter((value) => typeof value === "string" || typeof value === "number").map(String));
-    if (candidates.size > 0)
-      return candidates;
-  }
-  return new Set;
-};
-var confirmCommand = async ({
-  action,
-  effects,
-  flags,
-  input,
-  runtime: runtime2,
-  target,
-  targetKeys = []
-}) => {
-  if (effects.length === 0)
-    return;
-  if (!target?.trim()) {
-    throw new CliError("CONFIRMATION_REQUIRED", "Sensitive commands require --target with the exact resource being changed.", { target: "required" });
-  }
-  if (!getTargetCandidates(input, targetKeys).has(target.trim())) {
-    throw new CliError("CONFIRMATION_REQUIRED", `--target must exactly match the command's primary resource (${targetKeys.map((key) => key === "$self" ? "self" : key).join(", ")}).`);
-  }
-  const uniqueEffects = [...new Set(effects)];
-  const missingFlags = uniqueEffects.map((effect) => permissionFlag[effect]).filter((flag) => flags[flag] !== true).map((flag) => `--${flag}`);
-  if (missingFlags.length === 0)
-    return;
-  if (!runtime2.isTTY) {
-    throw new CliError("CONFIRMATION_REQUIRED", "Non-interactive sensitive commands require every applicable allow flag.", { missingFlags });
-  }
-  runtime2.stderr.write(`${[
-    "GOSH workflow preview",
-    `Action: ${action}`,
-    `Target: ${target}`,
-    `Effects: ${uniqueEffects.map((effect) => effectLabels[effect]).join("; ")}`
-  ].join(`
-`)}
-`);
-  if (!runtime2.prompt) {
-    throw new CliError("CONFIRMATION_REQUIRED", "This command needs an interactive confirmation prompt.");
-  }
-  const answer = await runtime2.prompt("Type CONFIRM to continue: ");
-  if (answer !== "CONFIRM") {
-    throw new CliError("ABORTED", "Command aborted by user.");
-  }
-};
-var createProcessRuntime = () => ({
-  stdout: { write: (value) => process.stdout.write(value) },
-  stderr: { write: (value) => process.stderr.write(value) },
-  isTTY: Boolean(process.stdin.isTTY && process.stderr.isTTY),
-  env: process.env,
-  prompt: async (message) => {
-    const prompt = createInterface({
-      input: process.stdin,
-      output: process.stderr
-    });
-    try {
-      return await prompt.question(message);
-    } finally {
-      prompt.close();
+    return operation.invoke(client, input);
+  },
+  subscription: (path2, input, observer) => {
+    const operation = typedOperations[path2];
+    if (operation.kind !== "subscription") {
+      throw new Error(`Expected subscription procedure, received ${path2}.`);
     }
+    return operation.subscribe(client, input, observer);
   }
 });
 
-// src/api-client.ts
-var DEFAULT_GOSH_API_BASE_URL = "https://app.gosh.sg";
-var normalizeApiBaseUrl = (value) => {
-  const url2 = new URL(value);
-  const isLocalHttp = url2.protocol === "http:" && (url2.hostname === "localhost" || url2.hostname === "127.0.0.1");
-  if (url2.protocol !== "https:" && !isLocalHttp) {
-    throw new Error("GOSH API URL must use HTTPS, except for localhost development.");
-  }
-  url2.pathname = url2.pathname.replace(/\/$/, "");
-  return url2.toString().replace(/\/$/, "");
-};
-var createGoshClient = ({
-  apiBaseUrl,
-  accessToken,
-  debug = false,
-  quiet = false
-}) => {
-  const headers = () => ({
-    "x-trpc-source": "gosh-cli",
-    ...accessToken ? { Authorization: `Bearer ${accessToken}` } : {}
-  });
-  const typedClient = createTRPCProxyClient({
-    links: [
-      loggerLink({
-        enabled: () => debug && !quiet,
-        colorMode: "ansi",
-        withContext: false,
-        console: {
-          log: (...args) => console.error(...args.map((argument) => sanitizeValue(argument))),
-          error: (...args) => console.error(...args.map((argument) => sanitizeValue(argument)))
-        }
-      }),
-      splitLink({
-        condition: (operation) => operation.type === "subscription",
-        true: httpSubscriptionLink({
-          EventSource: AuthenticatedEventSource,
-          eventSourceOptions: { headers: headers() },
-          transformer: SuperJSON,
-          url: `${apiBaseUrl}/api/trpc`
-        }),
-        false: httpBatchLink({
-          headers,
-          transformer: SuperJSON,
-          url: `${apiBaseUrl}/api/trpc`
-        })
-      })
-    ]
-  });
-  return Object.assign(typedClient, {
-    mutation: (path2, input) => {
-      const operation = typedOperations[path2];
-      if (operation.kind !== "mutation") {
-        throw new Error(`Expected mutation procedure, received ${path2}.`);
-      }
-      return operation.invoke(typedClient, input);
-    },
-    query: (path2, input) => {
-      const operation = typedOperations[path2];
-      if (operation.kind !== "query") {
-        throw new Error(`Expected query procedure, received ${path2}.`);
-      }
-      return operation.invoke(typedClient, input);
-    },
-    subscription: (path2, input, observer) => {
-      const operation = typedOperations[path2];
-      if (operation.kind !== "subscription") {
-        throw new Error(`Expected subscription procedure, received ${path2}.`);
-      }
-      return operation.subscribe(typedClient, input, observer);
-    }
-  });
-};
-
 // src/parse-args.ts
 var parseArgs = (argv) => {
   const flags = {};
@@ -16556,13 +16558,13 @@ Waiting for approval\u2026
       apiBaseUrl,
       store: credentialStore
     }) : undefined;
-    const clientFactory = dependencies.createClient ?? createGoshClient;
-    const client = clientFactory({
+    const clientOptions = {
       accessToken,
       apiBaseUrl,
       debug: flags.debug === true,
       quiet: flags.quiet === true
-    });
+    };
+    const client = dependencies.createClient ? dependencies.createClient(clientOptions) : createGoshCommandClient(createGoshClient(clientOptions));
     if (command.operation === "subscription") {
       const invocation = {
         apiBaseUrl,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@go-labs-sg/gosh",
-  "version": "0.2.0",
+  "version": "0.3.0",
   "description": "GOSH CLI for organizers and AI agents — manage organizations, events, teams, stations, missions, templates, and live operations through the GOSH API.",
   "type": "module",
   "main": "./dist/index.js",