@griffin-app/griffin-cli 1.0.4 → 1.0.5

package/README.md

@@ -145,7 +145,7 @@ List all available environments.
 griffin env list
 ```
 
-Shows all configured environments with an asterisk (*) marking the default environment.
+Shows all configured environments with an asterisk (\*) marking the default environment.
 
 ### Local Commands
 
@@ -166,12 +166,12 @@ Variables are loaded from `variables.yaml` for the specified environment.
 
 #### `griffin hub connect`
 
-Configure hub connection settings.
+Configure hub connection settings. When a token is provided, it is stored in the user-level credentials file (`~/.griffin/credentials.json`) for secure, cross-project authentication.
 
 **Options:**
 
 - `--url <url>` - Hub URL (required)
-- `--token <token>` - API authentication token
+- `--token <token>` - API authentication token (optional)
 
 **Example:**
 
@@ -179,9 +179,36 @@ Configure hub connection settings.
 griffin hub connect --url https://hub.example.com --token abc123
 ```
 
+#### `griffin hub login`
+
+Authenticate with the hub using device authorization flow. The received token is stored in the user-level credentials file (`~/.griffin/credentials.json`) for secure access across all projects.
+
+**Example:**
+
+```bash
+griffin hub login
+```
+
+After running this command, you'll be provided with a URL to complete authentication in your browser. Once authenticated, the token will be automatically saved.
+
+#### `griffin hub logout`
+
+Remove stored credentials for the currently configured hub or all hubs.
+
+**Options:**
+
+- `--all` - Remove credentials for all hubs
+
+**Example:**
+
+```bash
+griffin hub logout
+griffin hub logout --all
+```
+
 #### `griffin hub status`
 
-Show hub connection status.
+Show hub connection status, including whether credentials are configured.
 
 **Example:**
 
@@ -264,7 +291,6 @@ griffin hub run staging --plan health-check --wait
 griffin hub run production --plan api-check --force
 ```
 
-
 ## Configuration
 
 ### Environment Variables
@@ -273,7 +299,7 @@ griffin hub run production --plan api-check --force
 
 ### State File
 
-Griffin stores configuration in `.griffin/state.json`:
+Griffin stores project configuration in `.griffin/state.json`:
 
 ```json
 {
@@ -283,9 +309,9 @@ Griffin stores configuration in `.griffin/state.json`:
     "local": {}
   },
   "defaultEnvironment": "local",
-  "runner": {
+  "hub": {
     "baseUrl": "https://hub.example.com",
-    "apiToken": "..."
+    "clientId": "..."
   },
   "discovery": {
     "pattern": "**/__griffin__/*.{ts,js}",
@@ -294,7 +320,27 @@ Griffin stores configuration in `.griffin/state.json`:
 }
 ```
 
-**Important:** Add `.griffin/` to `.gitignore` as it contains local state and potentially sensitive tokens.
+**Important:** Add `.griffin/` to `.gitignore` as it contains local project state.
+
+### Credentials File
+
+Griffin stores user-level authentication credentials in `~/.griffin/credentials.json`:
+
+```json
+{
+  "version": 1,
+  "hubs": {
+    "https://hub.example.com": {
+      "token": "...",
+      "updatedAt": "2024-01-24T12:00:00.000Z"
+    }
+  }
+}
+```
+
+This file is automatically created and managed by the CLI when you use `griffin hub login` or `griffin hub connect --token <token>`. Credentials are stored per-hub URL and are available across all projects on your system.
+
+**Security:** The credentials file is created with restricted permissions (0600) to ensure only the owner can read/write.
 
 ## Environments and Variables
 

package/dist/cli.js

@@ -13,6 +13,8 @@ import { executeRuns } from "./commands/hub/runs.js";
 import { executePlan } from "./commands/hub/plan.js";
 import { executeApply } from "./commands/hub/apply.js";
 import { executeRun } from "./commands/hub/run.js";
+import { executeLogin } from "./commands/hub/login.js";
+import { executeLogout } from "./commands/hub/logout.js";
 const program = new Command();
 program
     .name("griffin")
@@ -106,5 +108,17 @@ hub
     .action(async (env, options) => {
     await executeRun({ ...options, env });
 });
+hub
+    .command("login")
+    .description("Login to the hub")
+    .action(async () => {
+    await executeLogin();
+});
+hub
+    .command("logout")
+    .description("Remove stored credentials")
+    .action(async (options) => {
+    await executeLogout(options);
+});
 // Parse arguments
 program.parse();

package/dist/commands/env.js

@@ -17,7 +17,9 @@ export async function executeEnvList() {
         terminal.blank();
         for (const envName of environments) {
             const isDefault = state.defaultEnvironment === envName;
-            const marker = isDefault ? terminal.colors.green("●") : terminal.colors.dim("○");
+            const marker = isDefault
+                ? terminal.colors.green("●")
+                : terminal.colors.dim("○");
             const envDisplay = isDefault
                 ? terminal.colors.cyan(envName) + terminal.colors.dim(" (default)")
                 : envName;

package/dist/commands/hub/apply.js

@@ -2,8 +2,11 @@ import { loadState, resolveEnvironment } from "../../core/state.js";
 import { discoverPlans, formatDiscoveryErrors } from "../../core/discovery.js";
 import { computeDiff, formatDiff } from "../../core/diff.js";
 import { applyDiff, formatApplyResult } from "../../core/apply.js";
-import { createSdk } from "../../core/sdk.js";
+import { createSdkWithCredentials } from "../../core/sdk.js";
 import { terminal } from "../../utils/terminal.js";
+import { withSDKErrorHandling } from "../../utils/sdk-error.js";
+import { loadVariables } from "../../core/variables.js";
+import { resolvePlan } from "../../resolve.js";
 /**
  * Apply changes to the hub
  */
@@ -14,7 +17,7 @@ export async function executeApply(options) {
         // Resolve environment
         const envName = await resolveEnvironment(options.env);
         // Check if runner is configured
-        if (!state.runner?.baseUrl) {
+        if (!state.hub?.baseUrl) {
             terminal.error("Hub connection not configured.");
             terminal.dim("Connect with:");
             terminal.dim("  griffin hub connect --url <url> --token <token>");
@@ -22,11 +25,8 @@ export async function executeApply(options) {
         }
         terminal.info(`Applying to ${terminal.colors.cyan(envName)} environment`);
         terminal.blank();
-        // Create SDK clients
-        const sdk = createSdk({
-            baseUrl: state.runner?.baseUrl || "",
-            apiToken: state.runner?.apiToken || "",
-        });
+        // Create SDK clients with credentials
+        const sdk = await createSdkWithCredentials(state.hub.baseUrl);
         // Discover local plans
         const discoveryPattern = state.discovery?.pattern || "**/__griffin__/*.{ts,js}";
         const discoveryIgnore = state.discovery?.ignore || [
@@ -42,19 +42,22 @@ export async function executeApply(options) {
         }
         spinner.succeed(`Found ${plans.length} local plan(s)`);
         // Fetch remote plans for this project + environment
-        const fetchSpinner = terminal
-            .spinner("Fetching remote plans...")
-            .start();
-        const response = await sdk.getPlan({
+        const fetchSpinner = terminal.spinner("Fetching remote plans...").start();
+        const response = await withSDKErrorHandling(() => sdk.getPlan({
             query: {
                 projectId: state.projectId,
                 environment: envName,
             },
-        });
+        }), "Failed to fetch remote plans");
         const remotePlans = response?.data?.data;
         fetchSpinner.succeed(`Found ${remotePlans.length} remote plan(s)`);
+        // Load variables and resolve local plans before computing diff
+        const variables = await loadVariables(envName);
+        const resolvedPlans = plans.map((p) => resolvePlan(p.plan, state.projectId, envName, variables));
         // Compute diff (include deletions if --prune)
-        const diff = computeDiff(plans.map((p) => p.plan), remotePlans, { includeDeletions: options.prune || false });
+        const diff = computeDiff(resolvedPlans, remotePlans, {
+            includeDeletions: options.prune || false,
+        });
         // Show plan
         terminal.blank();
         terminal.log(formatDiff(diff));
@@ -80,7 +83,7 @@ export async function executeApply(options) {
         }
         // Apply changes with environment injection
         const applySpinner = terminal.spinner("Applying changes...").start();
-        const result = await applyDiff(diff, sdk, state.projectId, envName, {
+        const result = await applyDiff(diff, sdk, {
             dryRun: options.dryRun,
         });
         if (result.success) {

package/dist/commands/hub/connect.js

@@ -1,4 +1,6 @@
+import { randomBytes } from "crypto";
 import { loadState, saveState } from "../../core/state.js";
+import { saveHubCredentials } from "../../core/credentials.js";
 import { terminal } from "../../utils/terminal.js";
 /**
  * Configure hub connection settings
@@ -6,16 +8,20 @@ import { terminal } from "../../utils/terminal.js";
 export async function executeConnect(options) {
     try {
         const state = await loadState();
-        // Update runner config
-        state.runner = {
+        // Save token to user-level credentials file if provided
+        if (options.token) {
+            await saveHubCredentials(options.token);
+        }
+        // Update hub config in project state (without token)
+        state.hub = {
             baseUrl: options.url,
-            apiToken: options.token,
+            clientId: randomBytes(16).toString("hex"),
         };
         await saveState(state);
         terminal.success("Hub connection configured");
         terminal.log(`  URL: ${terminal.colors.cyan(options.url)}`);
         if (options.token) {
-            terminal.log(`  API Token: ${terminal.colors.dim("***")}`);
+            terminal.log(`  API Token: ${terminal.colors.dim("***")} (saved to user credentials)`);
         }
         terminal.blank();
     }

package/dist/commands/hub/login.d.ts

@@ -0,0 +1 @@
+export declare function executeLogin(): Promise<void>;

package/dist/commands/hub/login.js

@@ -0,0 +1,79 @@
+// CLI implementation
+import { createAuthClient } from "better-auth/client";
+import { deviceAuthorizationClient, jwtClient, } from "better-auth/client/plugins";
+import { loadState, saveState } from "../../core/state.js";
+import { saveHubCredentials } from "../../core/credentials.js";
+import { terminal } from "../../utils/terminal.js";
+import { randomBytes } from "crypto";
+const baseURL = "http://localhost:4000/api/auth";
+const hubBaseUrl = "http://localhost:3000";
+//const baseURL = "https://cloud.griffin.app"
+const oauthGrant = "urn:ietf:params:oauth:grant-type:device_code";
+const authClient = createAuthClient({
+    baseURL: baseURL,
+    plugins: [
+        deviceAuthorizationClient(),
+        jwtClient(),
+    ],
+});
+async function pollForToken(clientId, deviceCode, interval) {
+    const { data, error } = await authClient.device.token({
+        grant_type: oauthGrant,
+        device_code: deviceCode,
+        client_id: clientId,
+        fetchOptions: {
+            headers: {
+                "user-agent": `griffin-cli`,
+            },
+        },
+    });
+    if (data?.access_token)
+        return data.access_token;
+    switch (error?.error) {
+        case "slow_down":
+            await new Promise((resolve) => setTimeout(resolve, interval * 2));
+            return pollForToken(clientId, deviceCode, interval * 2);
+        case "authorization_pending":
+            await new Promise((resolve) => setTimeout(resolve, interval));
+            return pollForToken(clientId, deviceCode, interval);
+        default:
+            throw new Error(error?.error_description || "Unknown error");
+    }
+}
+export async function executeLogin() {
+    const state = await loadState();
+    let clientId = state.hub?.clientId;
+    if (!clientId) {
+        clientId = randomBytes(16).toString("hex");
+    }
+    //const clientId = state.hub?.clientId;
+    const { data } = await authClient.device.code({
+        client_id: clientId,
+    });
+    terminal.info(`Go to: ${data?.verification_uri_complete}`);
+    terminal.info(`Or enter code: ${data?.user_code}`);
+    // 2. Poll for authorization
+    const sessionToken = await pollForToken(clientId, data?.device_code, (data?.interval ?? 5) * 1000);
+    const { data: jwtData } = await authClient.token({
+        fetchOptions: {
+            headers: {
+                Authorization: `Bearer ${sessionToken}`,
+            },
+        },
+    });
+    // Save token to user-level credentials file
+    if (jwtData?.token) {
+        await saveHubCredentials(jwtData.token);
+        terminal.success("Login successful");
+        terminal.log(`  Token saved to user credentials`);
+    }
+    // Save hub config to project state (without token)
+    await saveState({
+        ...state,
+        hub: {
+            ...state.hub,
+            clientId: clientId,
+            baseUrl: hubBaseUrl,
+        },
+    });
+}

package/dist/commands/hub/logout.d.ts

@@ -0,0 +1,6 @@
+export interface LogoutOptions {
+}
+/**
+ * Remove stored credentials for hub
+ */
+export declare function executeLogout(options: LogoutOptions): Promise<void>;

package/dist/commands/hub/logout.js

@@ -0,0 +1,16 @@
+import { removeHubCredentials } from "../../core/credentials.js";
+import { terminal } from "../../utils/terminal.js";
+/**
+ * Remove stored credentials for hub
+ */
+export async function executeLogout(options) {
+    try {
+        await removeHubCredentials();
+        terminal.success("Credentials removed.");
+        terminal.blank();
+    }
+    catch (error) {
+        terminal.error(error.message);
+        terminal.exit(1);
+    }
+}

package/dist/commands/hub/plan.js

@@ -1,8 +1,11 @@
 import { loadState, resolveEnvironment } from "../../core/state.js";
 import { discoverPlans, formatDiscoveryErrors } from "../../core/discovery.js";
-import { createSdk } from "../../core/sdk.js";
+import { createSdkWithCredentials } from "../../core/sdk.js";
 import { computeDiff, formatDiff, formatDiffJson } from "../../core/diff.js";
 import { terminal } from "../../utils/terminal.js";
+import { withSDKErrorHandling } from "../../utils/sdk-error.js";
+import { loadVariables } from "../../core/variables.js";
+import { resolvePlan } from "../../resolve.js";
 /**
  * Show what changes would be applied
  */
@@ -12,7 +15,7 @@ export async function executePlan(options) {
         const state = await loadState();
         // Resolve environment
         const envName = await resolveEnvironment(options.env);
-        if (!state.runner?.baseUrl) {
+        if (!state.hub?.baseUrl) {
             terminal.error("Hub connection not configured.");
             terminal.dim("Connect with:");
             terminal.dim("  griffin hub connect --url <url> --token <token>");
@@ -32,25 +35,25 @@ export async function executePlan(options) {
             terminal.exit(1);
         }
         spinner.succeed(`Found ${plans.length} local plan(s)`);
-        // Create SDK clients
-        const sdk = createSdk({
-            baseUrl: state.runner?.baseUrl || "",
-            apiToken: state.runner?.apiToken || "",
-        });
+        // Create SDK clients with credentials
+        const sdk = await createSdkWithCredentials(state.hub.baseUrl);
         // Fetch remote plans for this project + environment
-        const fetchSpinner = terminal
-            .spinner("Fetching remote plans...")
-            .start();
-        const response = await sdk.getPlan({
+        const fetchSpinner = terminal.spinner("Fetching remote plans...").start();
+        const response = await withSDKErrorHandling(() => sdk.getPlan({
             query: {
                 projectId: state.projectId,
                 environment: envName,
             },
-        });
+        }), "Failed to fetch remote plans");
         const remotePlans = response?.data?.data;
         fetchSpinner.succeed(`Found ${remotePlans.length} remote plan(s)`);
+        // Load variables and resolve local plans before computing diff
+        const variables = await loadVariables(envName);
+        const resolvedPlans = plans.map((p) => resolvePlan(p.plan, state.projectId, envName, variables));
         // Compute diff (no deletions shown by default)
-        const diff = computeDiff(plans.map((p) => p.plan), remotePlans, { includeDeletions: false });
+        const diff = computeDiff(resolvedPlans, remotePlans, {
+            includeDeletions: false,
+        });
         terminal.blank();
         // Output
         if (options.json) {

package/dist/commands/hub/run.js

@@ -1,8 +1,11 @@
 import { loadState, resolveEnvironment } from "../../core/state.js";
-import { createSdk } from "../../core/sdk.js";
+import { createSdkWithCredentials } from "../../core/sdk.js";
 import { discoverPlans, formatDiscoveryErrors } from "../../core/discovery.js";
 import { computeDiff } from "../../core/diff.js";
 import { terminal } from "../../utils/terminal.js";
+import { withSDKErrorHandling } from "../../utils/sdk-error.js";
+import { loadVariables } from "../../core/variables.js";
+import { resolvePlan } from "../../resolve.js";
 /**
  * Trigger a plan run on the hub
  */
@@ -12,17 +15,14 @@ export async function executeRun(options) {
         const state = await loadState();
         // Resolve environment
         const envName = await resolveEnvironment(options.env);
-        if (!state.runner?.baseUrl) {
+        if (!state.hub?.baseUrl) {
             terminal.error("Hub connection not configured.");
             terminal.dim("Connect with:");
             terminal.dim("  griffin hub connect --url <url> --token <token>");
             terminal.exit(1);
         }
-        // Create SDK clients
-        const sdk = createSdk({
-            baseUrl: state.runner?.baseUrl || "",
-            apiToken: state.runner?.apiToken || "",
-        });
+        // Create SDK clients with credentials
+        const sdk = await createSdkWithCredentials(state.hub.baseUrl);
         // Discover local plans
         const discoveryPattern = state.discovery?.pattern || "**/__griffin__/*.{ts,js}";
         const discoveryIgnore = state.discovery?.ignore || [
@@ -50,12 +50,12 @@ export async function executeRun(options) {
         spinner.succeed(`Found local plan: ${terminal.colors.cyan(options.plan)}`);
         // Fetch remote plans for this project + environment
         const fetchSpinner = terminal.spinner("Checking hub...").start();
-        const response = await sdk.getPlan({
+        const response = await withSDKErrorHandling(() => sdk.getPlan({
             query: {
                 projectId: state.projectId,
                 environment: envName,
             },
-        });
+        }), "Failed to fetch plans from hub");
         const remotePlans = response?.data?.data;
         // Find remote plan by name
         const remotePlan = remotePlans.find((p) => p.name === options.plan);
@@ -65,8 +65,11 @@ export async function executeRun(options) {
             terminal.exit(1);
         }
         fetchSpinner.succeed("Plan found on hub");
+        // Load variables and resolve local plan before computing diff
+        const variables = await loadVariables(envName);
+        const resolvedLocalPlan = resolvePlan(localPlan.plan, state.projectId, envName, variables);
         // Compute diff to check if local plan differs from remote
-        const diff = computeDiff([localPlan.plan], [remotePlan], {
+        const diff = computeDiff([resolvedLocalPlan], [remotePlan], {
             includeDeletions: false,
         });
         const hasDiff = diff.actions.length > 0 &&
@@ -86,14 +89,14 @@ export async function executeRun(options) {
             terminal.warn("Running with --force (local changes not applied)");
         }
         const triggerSpinner = terminal.spinner("Triggering run...").start();
-        const runResponse = await sdk.postRunsTriggerByPlanId({
+        const runResponse = await withSDKErrorHandling(() => sdk.postRunsTriggerByPlanId({
             path: {
                 planId: remotePlan.id,
             },
             body: {
                 environment: envName,
             },
-        });
+        }), "Failed to trigger run");
         const run = runResponse?.data?.data;
         triggerSpinner.succeed("Run triggered");
         terminal.blank();
@@ -103,16 +106,18 @@ export async function executeRun(options) {
         // Wait for completion if requested
         if (options.wait) {
             terminal.blank();
-            const waitSpinner = terminal.spinner("Waiting for run to complete...").start();
+            const waitSpinner = terminal
+                .spinner("Waiting for run to complete...")
+                .start();
             const runId = run.id;
             let completed = false;
             while (!completed) {
                 await new Promise((resolve) => setTimeout(resolve, 2000)); // Poll every 2 seconds
-                const runStatusResponse = await sdk.getRunsById({
+                const runStatusResponse = await withSDKErrorHandling(() => sdk.getRunsById({
                     path: {
                         id: runId,
                     },
-                });
+                }), "Failed to fetch run status");
                 const run = runStatusResponse?.data?.data;
                 if (run.status === "completed" || run.status === "failed") {
                     completed = true;
@@ -127,7 +132,9 @@ export async function executeRun(options) {
                         terminal.log(`Duration: ${terminal.colors.dim((run.duration_ms / 1000).toFixed(2) + "s")}`);
                     }
                     if (run.success !== undefined) {
-                        const successText = run.success ? terminal.colors.green("Yes") : terminal.colors.red("No");
+                        const successText = run.success
+                            ? terminal.colors.green("Yes")
+                            : terminal.colors.red("No");
                         terminal.log(`Success: ${successText}`);
                     }
                     if (run.errors && run.errors.length > 0) {

package/dist/commands/hub/runs.js

@@ -1,6 +1,7 @@
 import { loadState } from "../../core/state.js";
-import { createSdk } from "../../core/sdk.js";
+import { createSdkWithCredentials } from "../../core/sdk.js";
 import { terminal } from "../../utils/terminal.js";
+import { withSDKErrorHandling } from "../../utils/sdk-error.js";
 /**
  * Show recent runs from the hub
  */
@@ -8,29 +9,26 @@ export async function executeRuns(options) {
     try {
         // Load state
         const state = await loadState();
-        if (!state.runner?.baseUrl) {
+        if (!state.hub?.baseUrl) {
             terminal.error("Hub connection not configured.");
             terminal.dim("Connect with:");
             terminal.dim("  griffin hub connect --url <url> --token <token>");
             terminal.exit(1);
         }
-        // Create SDK clients
-        const sdk = createSdk({
-            baseUrl: state.runner.baseUrl,
-            apiToken: state.runner.apiToken || undefined,
-        });
-        terminal.info(`Hub: ${terminal.colors.cyan(state.runner.baseUrl)}`);
+        // Create SDK clients with credentials
+        const sdk = await createSdkWithCredentials(state.hub.baseUrl);
+        terminal.info(`Hub: ${terminal.colors.cyan(state.hub.baseUrl)}`);
         terminal.blank();
         // Get recent runs
         const limit = options.limit || 10;
         const spinner = terminal.spinner("Fetching runs...").start();
-        const response = await sdk.getRuns({
+        const response = await withSDKErrorHandling(() => sdk.getRuns({
             query: {
                 planId: options.plan,
                 limit: limit,
                 offset: 0,
             },
-        });
+        }), "Failed to fetch runs");
         const runsData = response?.data;
         if (!runsData || runsData.total === 0) {
             spinner.info("No runs found.");
@@ -54,12 +52,7 @@ export async function executeRuns(options) {
                     ? `${(run.duration_ms / 1000).toFixed(2)}s`
                     : "-";
                 const started = new Date(run.startedAt).toLocaleString();
-                table.push([
-                    statusIcon,
-                    run.planId || "-",
-                    duration,
-                    started,
-                ]);
+                table.push([statusIcon, run.planId || "-", duration, started]);
             }
             catch (error) {
                 terminal.error(`Error processing run ${run.id}: ${error.message}`);

package/dist/commands/hub/status.js

@@ -1,4 +1,5 @@
 import { loadState } from "../../core/state.js";
+import { getHubCredentials } from "../../core/credentials.js";
 import { terminal } from "../../utils/terminal.js";
 /**
  * Show hub connection status
@@ -6,17 +7,20 @@ import { terminal } from "../../utils/terminal.js";
 export async function executeStatus() {
     try {
         const state = await loadState();
-        if (!state.runner) {
+        if (!state.hub) {
             terminal.warn("No hub connection configured.");
             terminal.blank();
             terminal.dim("Connect with:");
             terminal.dim("  griffin hub connect --url <url> --token <token>");
             return;
         }
+        // Read credentials from user-level credentials file
+        const credentials = await getHubCredentials();
         terminal.info("Hub connection:");
-        terminal.log(`  URL: ${terminal.colors.cyan(state.runner.baseUrl)}`);
-        if (state.runner.apiToken) {
-            terminal.log(`  API Token: ${terminal.colors.dim(state.runner.apiToken.substring(0, 8) + "...")}`);
+        terminal.log(`  URL: ${terminal.colors.cyan(state.hub.baseUrl)}`);
+        if (credentials?.token) {
+            terminal.log(`  API Token: ${terminal.colors.dim(credentials.token.substring(0, 8) + "...")}`);
+            terminal.log(`  Updated: ${terminal.colors.dim(new Date(credentials.updatedAt).toLocaleString())}`);
         }
         else {
             terminal.log(`  API Token: ${terminal.colors.dim("(not set)")}`);

package/dist/core/apply.d.ts

@@ -19,7 +19,7 @@ export interface ApplyError {
  * Apply diff actions to the hub.
  * CLI injects both project and environment into plan payloads.
  */
-export declare function applyDiff(diff: DiffResult, sdk: GriffinHubSdk, projectId: string, environment: string, options?: {
+export declare function applyDiff(diff: DiffResult, sdk: GriffinHubSdk, options?: {
     dryRun?: boolean;
 }): Promise<ApplyResult>;
 /**