@happyvertical/smrt-app-cli 0.43.7 → 0.43.9

package/dist/index.js

@@ -1,1033 +1,3 @@
-import { a as loadCliConfig, c as requestJsonResult, d as createMcpStdioBridge, i as getStoredToken, l as saveAuth, n as clearStoredToken, o as redactTransportValue, p as runMcpStdioBridge, r as getServerUrl, s as requestJson, t as AppCliRequestError, u as saveCliConfig } from "./config-B6arU8x7.js";
-import { SMRT_MCP_RESULT_METADATA_KEY, validateDiscoveryConformanceArtifact } from "@happyvertical/smrt-users/app-contract";
-import { spawn, spawnSync } from "node:child_process";
-//#region src/discovery.ts
-/**
-* Fetches the resource list from `GET /api/_resources` and re-exports the
-* wire types so consumers can build typed extensions on top of the discovery
-* output.
-*
-* Types are imported type-only from `@happyvertical/smrt-users/sveltekit`
-* — the single source of truth for the wire contract. The CLI does not
-* depend on smrt-users at runtime (the peer dep is `optional` in the
-* package.json) so importing types is free of bundle cost.
-*
-* Importing type-only means a new field added to `CommandDefinition` /
-* `CliResource` on the handler side automatically propagates to the CLI's
-* typecheck — no manual mirror-update required. (#1311 review D-1.)
-*
-* @packageDocumentation
-*/
-/**
-* Fetch the discovery payload.
-*
-* Translates a 401 into a friendlier error so the CLI can prompt the
-* user to log in rather than dumping a raw HTTP error.
-*/
-async function fetchResourceList(context, options = {}) {
-	try {
-		const response = await requestJson(context, options.path ?? "/api/_resources", { method: "GET" }, {
-			fetch: options.fetch,
-			requireAuth: options.requireAuth,
-			loadedConfig: options.loadedConfig
-		});
-		if (!response.artifact) return response;
-		const artifact = validateDiscoveryConformanceArtifact(response.artifact);
-		return {
-			...artifact.discovery,
-			artifact
-		};
-	} catch (error) {
-		if (error instanceof Error && /401|unauthor/i.test(error.message)) throw new Error(`Not authenticated to ${context.envPrefix.toLowerCase()}. Run \`${context.envPrefix.toLowerCase()} auth login\` first.`);
-		throw error;
-	}
-}
-/**
-* Find a resource by slug in the discovery payload. Returns `undefined`
-* if the slug isn't present.
-*/
-function findResourceBySlug(response, slug) {
-	return response.resources.find((r) => r.slug === slug);
-}
-/**
-* Find a command on a resource by its CLI-facing name. Returns
-* `undefined` if not found.
-*/
-function findCommand(resource, commandName) {
-	return resource.commands.find((c) => c.commandName === commandName);
-}
-//#endregion
-//#region src/invoke.ts
-/**
-* Build the URL the CLI should hit for this command, plus the fetch init
-* (headers, body) it should pass. Returns enough so callers can stream
-* the response — they decide how to render it (see `output.ts`).
-*/
-async function invokeCommand(options) {
-	const { context, resource, command, parsed, fetch: fetchImpl } = options;
-	const url = await buildUrl(context, resource, command, parsed, options.id);
-	const headers = new Headers();
-	const token = await getStoredToken(context);
-	if (token) headers.set("authorization", `Bearer ${token}`);
-	let body;
-	if (command.httpMethod !== "GET" && command.httpMethod !== "DELETE") {
-		if (Object.keys(parsed.body).length > 0 || parsed.fromPositional) {
-			headers.set("content-type", "application/json");
-			body = JSON.stringify(parsed.body);
-		}
-	}
-	return (fetchImpl ?? fetch)(url, {
-		method: command.httpMethod,
-		headers,
-		body
-	});
-}
-/**
-* Build only the URL — exposed for tests.
-*/
-async function buildUrl(context, resource, command, parsed, id) {
-	const serverUrl = await getServerUrl(context);
-	const segments = ["api"];
-	for (const piece of splitPath(resource.apiPath)) segments.push(encodeURIComponent(piece));
-	if (command.scope === "item") {
-		if (!id) throw new Error(`Command \`${resource.slug} ${command.commandName}\` requires an id positional argument.`);
-		segments.push(encodeURIComponent(id));
-	}
-	for (const seg of command.pathSegments) for (const piece of splitPath(seg)) segments.push(encodeURIComponent(piece));
-	const base = `${serverUrl}/${segments.join("/")}`;
-	if (command.httpMethod === "GET" && Object.keys(parsed.query).length > 0) {
-		const params = new URLSearchParams();
-		for (const [k, v] of Object.entries(parsed.query)) if (Array.isArray(v)) for (const x of v) params.append(k, x);
-		else params.set(k, v);
-		return `${base}?${params.toString()}`;
-	}
-	return base;
-}
-/**
-* Split a URL path string into clean segments, stripping leading/trailing
-* slashes and any empty pieces. Defends against `apiPath` overrides like
-* `/v1/items/` or `pathSegments` like `users/` that would otherwise
-* produce double slashes or trailing nothings in the final URL.
-*/
-function splitPath(s) {
-	if (typeof s !== "string") return [];
-	return s.split("/").filter((p) => p.length > 0);
-}
-//#endregion
-//#region src/mcp-oauth.ts
-function createMcpRegistrationRequest(options) {
-	if (!options.clientName.trim()) throw new Error("MCP client_name must not be empty.");
-	if (options.redirectUris.length === 0) throw new Error("MCP client metadata requires at least one redirect URI.");
-	for (const redirectUri of options.redirectUris) new URL(redirectUri);
-	return {
-		application_type: options.applicationType,
-		client_name: options.clientName,
-		grant_types: ["authorization_code"],
-		redirect_uris: [...options.redirectUris],
-		response_types: ["code"],
-		token_endpoint_auth_method: "none"
-	};
-}
-/** Build and validate the document hosted at an HTTPS URL used as client_id. */
-function createMcpClientIdMetadataDocument(options) {
-	if (!options.clientId) throw new Error("MCP client_id metadata URL is required for CIMD.");
-	const clientId = new URL(options.clientId);
-	if (clientId.protocol !== "https:" || clientId.pathname === "/") throw new Error("MCP client_id metadata URL must use HTTPS and include a path.");
-	if (clientId.search || clientId.hash) throw new Error("MCP client_id metadata URL must not include query or fragment.");
-	return {
-		...createMcpRegistrationRequest(options),
-		client_id: options.clientId
-	};
-}
-/**
-* Select registration in MCP priority order: Client ID Metadata Documents
-* first, then RFC 7591 DCR as a compatibility fallback.
-*/
-function resolveMcpClientRegistration(authorizationServer, options) {
-	if (authorizationServer.client_id_metadata_document_supported === true) {
-		const metadataDocument = createMcpClientIdMetadataDocument(options);
-		return {
-			clientId: metadataDocument.client_id,
-			kind: "client_id_metadata_document",
-			metadataDocument
-		};
-	}
-	if (authorizationServer.registration_endpoint) return {
-		endpoint: authorizationServer.registration_endpoint,
-		kind: "dynamic_client_registration",
-		request: createMcpRegistrationRequest(options)
-	};
-	throw new Error("Authorization server supports neither Client ID Metadata Documents nor dynamic client registration.");
-}
-/**
-* Complete client registration against discovered authorization-server
-* metadata. A Client ID Metadata Document needs no registration request: the
-* authorization server retrieves it from the HTTPS client_id. The legacy DCR
-* fallback is executed as an RFC 7591 JSON POST.
-*/
-async function registerMcpClient(authorizationServer, options, fetchImpl = fetch) {
-	const registration = resolveMcpClientRegistration(authorizationServer, options);
-	if (registration.kind === "client_id_metadata_document") return {
-		clientId: registration.clientId,
-		kind: registration.kind,
-		metadataDocument: registration.metadataDocument
-	};
-	const response = await fetchImpl(registration.endpoint, {
-		body: JSON.stringify(registration.request),
-		headers: { "content-type": "application/json" },
-		method: "POST"
-	});
-	if (!response.ok) throw new Error(`Dynamic client registration failed: HTTP ${response.status}`);
-	const body = await response.json();
-	if (typeof body !== "object" || body === null || typeof body.client_id !== "string" || !body.client_id) throw new Error("Dynamic client registration response omitted client_id.");
-	return {
-		clientId: body.client_id,
-		kind: registration.kind,
-		registrationResponse: body
-	};
-}
-//#endregion
-//#region src/output.ts
-var JSON_BUFFER_LIMIT = 10 * 1024 * 1024;
-/**
-* Render the response. Returns the desired exit code.
-*/
-async function renderResponse(response, options = {}) {
-	try {
-		return await renderResponseUnchecked(response, options);
-	} catch (err) {
-		if (err instanceof BrokenPipeError) return { exitCode: 0 };
-		throw err;
-	}
-}
-async function renderResponseUnchecked(response, options = {}) {
-	const stdout = options.stdout ?? process.stdout;
-	const stderr = options.stderr ?? process.stderr;
-	const isTty = options.stdoutIsTty ?? Boolean(stdout.isTTY);
-	const ct = (response.headers.get("content-type") ?? "").toLowerCase();
-	const cl = Number(response.headers.get("content-length") ?? "");
-	const isJson = ct.startsWith("application/json") || /\+json(\s|;|$)/.test(ct);
-	const isText = ct.startsWith("text/");
-	if (response.status === 204) return { exitCode: 0 };
-	if (response.status >= 400) {
-		if (isJson) {
-			const result = await readUntilLimitOrStream(response, JSON_BUFFER_LIMIT, stderr);
-			if (result.overflowed) stderr.write("\n[smrt-app-cli] error response exceeded 10MB cap; streamed raw\n");
-			else if (result.text) {
-				const pretty = safePrettyJson(result.text) ?? result.text;
-				stderr.write(`${pretty}\n`);
-			}
-			return { exitCode: response.status >= 500 ? 2 : 1 };
-		}
-		if (isText) {
-			await pipeBody(response, stderr);
-			return { exitCode: response.status >= 500 ? 2 : 1 };
-		}
-		stderr.write(`error: ${response.status} ${response.statusText || "HTTP error"}\n`);
-		return { exitCode: response.status >= 500 ? 2 : 1 };
-	}
-	if (isJson) {
-		if (cl && cl > JSON_BUFFER_LIMIT) {
-			stderr.write(`[smrt-app-cli] response too large to pretty-print (${cl} bytes); streaming raw JSON\n`);
-			await pipeBody(response, stdout);
-			return { exitCode: 0 };
-		}
-		const result = await readUntilLimitOrStream(response, JSON_BUFFER_LIMIT, stdout);
-		if (result.overflowed) {
-			stderr.write("[smrt-app-cli] response exceeded 10MB cap; streamed raw JSON\n");
-			return { exitCode: 0 };
-		}
-		if (!result.text) return { exitCode: 0 };
-		const pretty = safePrettyJson(result.text) ?? result.text;
-		stdout.write(`${pretty}\n`);
-		return { exitCode: 0 };
-	}
-	if (isText) {
-		await pipeBody(response, stdout);
-		return { exitCode: 0 };
-	}
-	if (isTty) {
-		const size = cl ? ` (${cl} bytes)` : "";
-		stderr.write(`[smrt-app-cli] binary response${size}; redirect to a file to capture: <cli> ... > out.bin\n`);
-		return { exitCode: 1 };
-	}
-	await pipeBody(response, stdout);
-	return { exitCode: 0 };
-}
-/**
-* Read the response body into memory up to `limit` bytes. On overflow,
-* flush what's been buffered to `out` (default: stdout) and pipe the
-* remaining body in chunks, so callers never silently truncate. Returns
-* `{ text, overflowed }` so callers can branch on the outcome.
-*/
-async function readUntilLimitOrStream(response, limit, out) {
-	if (!response.body) return {
-		text: "",
-		overflowed: false
-	};
-	const writeStream = out ?? process.stdout;
-	const reader = response.body.getReader();
-	const chunks = [];
-	let size = 0;
-	while (true) {
-		const { done, value } = await reader.read();
-		if (done) break;
-		if (!value) continue;
-		size += value.byteLength;
-		if (size > limit) {
-			for (const c of chunks) await writeChunk(writeStream, c);
-			await writeChunk(writeStream, value);
-			while (true) {
-				const next = await reader.read();
-				if (next.done) break;
-				if (next.value) await writeChunk(writeStream, next.value);
-			}
-			return {
-				text: "",
-				overflowed: true
-			};
-		}
-		chunks.push(value);
-	}
-	return {
-		text: new TextDecoder().decode(Buffer.concat(chunks.map((c) => Buffer.from(c)))),
-		overflowed: false
-	};
-}
-/**
-* Sentinel thrown when a write to the output stream fails because the
-* downstream consumer closed (EPIPE) or the stream errored. Callers
-* catch this and exit cleanly — broken pipes are normal under shell
-* pipelines (`<cli> list | head -1`), not errors to escalate.
-*/
-var BrokenPipeError = class extends Error {
-	constructor(cause) {
-		super("Output stream closed");
-		this.name = "BrokenPipeError";
-		if (cause !== void 0) this.cause = cause;
-	}
-};
-/**
-* Write a chunk to the output stream and wait for `drain` if needed.
-*
-* Races the `drain` promise against an `error` event so that broken-pipe
-* errors (EPIPE, ECONNRESET on a stdout consumer that died) reject the
-* pending promise rather than leaving the CLI hung forever waiting for a
-* `drain` that will never come. (#1311 review #1.)
-*/
-async function writeChunk(out, chunk) {
-	const stream = out;
-	let ok;
-	try {
-		ok = stream.write(Buffer.from(chunk));
-	} catch (err) {
-		throw new BrokenPipeError(err);
-	}
-	if (ok) return;
-	await new Promise((resolve, reject) => {
-		const onDrain = () => {
-			stream.off("error", onError);
-			resolve();
-		};
-		const onError = (err) => {
-			stream.off("drain", onDrain);
-			reject(new BrokenPipeError(err));
-		};
-		stream.once("drain", onDrain);
-		stream.once("error", onError);
-	});
-}
-async function pipeBody(response, out) {
-	if (!response.body) return;
-	const reader = response.body.getReader();
-	try {
-		while (true) {
-			const { done, value } = await reader.read();
-			if (done) break;
-			if (!value) continue;
-			await writeChunk(out, value);
-		}
-	} finally {
-		try {
-			reader.releaseLock();
-		} catch {}
-	}
-}
-function safePrettyJson(text) {
-	if (!text) return void 0;
-	try {
-		return JSON.stringify(JSON.parse(text), null, 2);
-	} catch {
-		return;
-	}
-}
-//#endregion
-//#region src/parser.ts
-/**
-* Classify a JSONSchema. The CLI uses this to decide between rich flag
-* parsing and the positional JSON escape hatch.
-*/
-function classifySchema(schema) {
-	if (!schema || Object.keys(schema).length === 0) return { kind: "missing" };
-	if (schema.type !== "object") return {
-		kind: "unsupported",
-		reason: "schema root is not an object"
-	};
-	if (schema.oneOf || schema.anyOf || schema.allOf || schema.$ref) return {
-		kind: "unsupported",
-		reason: "oneOf/anyOf/allOf/$ref"
-	};
-	const props = schema.properties ?? {};
-	for (const [name, prop] of Object.entries(props)) {
-		const status = classifyProperty(prop);
-		if (status.kind === "unsupported") return {
-			kind: "unsupported",
-			reason: `${name}: ${status.reason}`
-		};
-	}
-	return { kind: "ok" };
-}
-function classifyProperty(prop) {
-	const t = normaliseType(prop);
-	if (!t) return {
-		kind: "unsupported",
-		reason: "no type"
-	};
-	if (prop.oneOf || prop.anyOf || prop.allOf || prop.$ref) return {
-		kind: "unsupported",
-		reason: "oneOf/anyOf/allOf/$ref"
-	};
-	if (t.primary === "object") return {
-		kind: "unsupported",
-		reason: "nested object"
-	};
-	if (t.primary === "array") {
-		const itemsType = prop.items?.type;
-		if (itemsType !== "string" && itemsType !== "integer" && itemsType !== "number") return {
-			kind: "unsupported",
-			reason: "array of non-primitives"
-		};
-	}
-	return { kind: "ok" };
-}
-function normaliseType(prop) {
-	const raw = prop.type;
-	if (typeof raw === "string") return {
-		primary: raw,
-		nullable: Boolean(prop.nullable)
-	};
-	if (Array.isArray(raw)) {
-		const nullable = raw.includes("null");
-		const nonNull = raw.find((t) => t !== "null");
-		if (!nonNull) return void 0;
-		return {
-			primary: nonNull,
-			nullable
-		};
-	}
-}
-function buildFlagParser(schema, options = {}) {
-	const status = options.positionalOnly ? {
-		kind: "unsupported",
-		reason: "forced positional"
-	} : classifySchema(schema);
-	if (status.kind !== "ok") return {
-		status,
-		parse: makePositionalParser()
-	};
-	return {
-		status,
-		parse: makeRichParser(schema)
-	};
-}
-function makePositionalParser() {
-	return (argv, httpMethod) => {
-		const positional = argv.find((a) => !a.startsWith("-"));
-		if (!positional) return {
-			body: {},
-			query: {},
-			fromPositional: true
-		};
-		let parsed;
-		try {
-			parsed = JSON.parse(positional);
-		} catch (error) {
-			throw new Error(`Could not parse positional JSON argument: ${error.message}`);
-		}
-		if (parsed === null || typeof parsed !== "object" || Array.isArray(parsed)) throw new Error("Positional JSON argument must be an object.");
-		if (httpMethod === "GET") return {
-			body: {},
-			query: objectToQuery(parsed),
-			fromPositional: true
-		};
-		return {
-			body: parsed,
-			query: {},
-			fromPositional: true
-		};
-	};
-}
-function makeRichParser(schema) {
-	const props = schema.properties ?? {};
-	const required = new Set(schema.required ?? [] ?? []);
-	const additionalProperties = schema.additionalProperties !== false;
-	return (argv, httpMethod) => {
-		const out = {};
-		let positionalJson;
-		for (let i = 0; i < argv.length; i++) {
-			const arg = argv[i];
-			if (!arg.startsWith("-")) {
-				if (positionalJson) throw new Error(`Unexpected extra positional argument: ${arg}`);
-				let parsed;
-				try {
-					parsed = JSON.parse(arg);
-				} catch {
-					throw new Error(`Unknown positional argument (not valid JSON): ${arg}`);
-				}
-				if (parsed === null || typeof parsed !== "object" || Array.isArray(parsed)) throw new Error("Positional JSON argument must be an object.");
-				positionalJson = parsed;
-				continue;
-			}
-			if (arg === "--") break;
-			if (arg.startsWith("--no-")) {
-				const flagName = arg.slice(5);
-				const prop = props[flagName];
-				if (!prop) {
-					if (additionalProperties) {
-						out[flagName] = false;
-						continue;
-					}
-					throw new Error(`Unknown flag: ${arg}`);
-				}
-				if (normaliseType(prop)?.primary !== "boolean") throw new Error(`--no-${flagName} requires a boolean flag.`);
-				out[flagName] = false;
-				continue;
-			}
-			let key;
-			let value;
-			const eqIdx = arg.indexOf("=");
-			if (eqIdx >= 0) {
-				key = arg.slice(2, eqIdx);
-				value = arg.slice(eqIdx + 1);
-			} else {
-				key = arg.slice(2);
-				const prop = props[key];
-				if ((prop ? normaliseType(prop) : void 0)?.primary === "boolean") {
-					const next = argv[i + 1];
-					if (next === "true" || next === "false") {
-						out[key] = next === "true";
-						i += 1;
-						continue;
-					}
-					out[key] = true;
-					continue;
-				}
-				const next = argv[i + 1];
-				if (next === void 0 || next.startsWith("-")) throw new Error(`Flag --${key} requires a value.`);
-				value = next;
-				i += 1;
-			}
-			const prop = props[key];
-			if (!prop) {
-				if (!additionalProperties) throw new Error(`Unknown flag: --${key}`);
-				appendValue(out, key, value);
-				continue;
-			}
-			const t = normaliseType(prop);
-			if (!t) throw new Error(`Unknown flag: --${key}`);
-			if (t.nullable && value === "null") {
-				out[key] = null;
-				continue;
-			}
-			switch (t.primary) {
-				case "string": {
-					const allowed = prop.enum;
-					if (allowed && !allowed.includes(value)) throw new Error(`--${key}: expected one of ${allowed.join(", ")}; got ${JSON.stringify(value)}.`);
-					out[key] = value;
-					break;
-				}
-				case "integer": {
-					const n = Number(value);
-					if (!Number.isInteger(n)) throw new Error(`--${key}: expected integer; got ${JSON.stringify(value)}.`);
-					out[key] = n;
-					break;
-				}
-				case "number": {
-					const n = Number(value);
-					if (Number.isNaN(n)) throw new Error(`--${key}: expected number; got ${JSON.stringify(value)}.`);
-					out[key] = n;
-					break;
-				}
-				case "boolean":
-					if (value === "true" || value === "false") out[key] = value === "true";
-					else throw new Error(`--${key}: boolean accepts true/false; got ${JSON.stringify(value)}.`);
-					break;
-				case "array": {
-					const itemsType = prop.items?.type;
-					const parts = value.includes(",") ? value.split(",") : [value];
-					const arr = Array.isArray(out[key]) ? out[key] : [];
-					for (const part of parts) arr.push(coerce(part, itemsType));
-					out[key] = arr;
-					break;
-				}
-				default: throw new Error(`--${key}: unsupported schema type ${t.primary}.`);
-			}
-		}
-		if (positionalJson) {
-			for (const [k, v] of Object.entries(positionalJson)) if (out[k] === void 0) out[k] = v;
-		}
-		for (const [name, prop] of Object.entries(props)) {
-			if (out[name] !== void 0) continue;
-			if (prop.default !== void 0) out[name] = prop.default;
-		}
-		for (const name of required) if (out[name] === void 0) throw new Error(`Missing required flag: --${name}`);
-		if (httpMethod === "GET") return {
-			body: {},
-			query: objectToQuery(out),
-			fromPositional: false
-		};
-		return {
-			body: out,
-			query: {},
-			fromPositional: false
-		};
-	};
-}
-function appendValue(out, key, value) {
-	if (out[key] === void 0) out[key] = value;
-	else if (Array.isArray(out[key])) out[key].push(value);
-	else out[key] = [out[key], value];
-}
-function coerce(value, type) {
-	if (type === "integer") {
-		const n = Number(value);
-		if (!Number.isInteger(n)) throw new Error(`expected integer; got ${value}`);
-		return n;
-	}
-	if (type === "number") {
-		const n = Number(value);
-		if (Number.isNaN(n)) throw new Error(`expected number; got ${value}`);
-		return n;
-	}
-	return value;
-}
-function objectToQuery(obj) {
-	const q = {};
-	for (const [k, v] of Object.entries(obj)) {
-		if (v === void 0 || v === null) continue;
-		if (Array.isArray(v)) q[k] = v.map((x) => String(x));
-		else q[k] = String(v);
-	}
-	return q;
-}
-//#endregion
-//#region src/commands/auth.ts
-/**
-* `<name> auth login | status | logout` — terminal device-code flow against
-* `/api/cli/auth/start` and `/api/cli/auth/token` (shipped by smrt-users).
-*
-* @packageDocumentation
-*/
-async function runAuthLogin(options, args) {
-	const stdout = options.stdout ?? process.stdout;
-	const sleep = options.sleepMs ?? ((ms) => new Promise((resolve) => setTimeout(resolve, ms)));
-	const { noOpen, serverUrl } = parseAuthLoginArgs(args, options.noOpenDefault);
-	const targetServer = (serverUrl ?? await getServerUrl(options.context)).replace(/\/+$/u, "");
-	const start = await requestJson(options.context, "/api/cli/auth/start", { method: "POST" }, {
-		auth: false,
-		serverUrl: targetServer
-	});
-	stdout.write(`Open ${start.verificationUrl}\n`);
-	stdout.write(`Code: ${start.userCode}\n`);
-	if (!noOpen) openVerificationUrl(start.verificationUrl);
-	const expiresAt = new Date(start.expiresAt).getTime();
-	let interval = start.interval ?? 2;
-	const stderr = options.stderr ?? process.stderr;
-	while (Date.now() < expiresAt) {
-		await sleep(interval * 1e3);
-		try {
-			const token = await requestJson(options.context, "/api/cli/auth/token", {
-				body: JSON.stringify({ deviceCode: start.deviceCode }),
-				method: "POST"
-			}, {
-				auth: false,
-				serverUrl: targetServer
-			});
-			if (token.status === "approved" && token.accessToken) {
-				await saveAuth(options.context, targetServer, token.accessToken, start.issuer ?? targetServer);
-				stdout.write(`Authenticated to ${targetServer}\n`);
-				return;
-			}
-			if (token.status === "expired") break;
-			interval = token.interval ?? interval;
-		} catch (error) {
-			if (error instanceof Error) {
-				const status = error.status;
-				if (status === 410 || error.message.includes("HTTP 410")) break;
-				if (isTransientPollError(error, status)) {
-					stderr.write(`[smrt-app-cli] auth poll: ${error.message} (retrying in ${interval}s)\n`);
-					continue;
-				}
-			}
-			throw error;
-		}
-	}
-	throw new Error("Terminal login request expired.");
-}
-/**
-* Decide whether an error from the polling endpoint is transient (worth
-* retrying until `expiresAt`) or terminal (re-thrown). The server's own
-* `pending`/`expired` states are JSON responses, not thrown errors — so
-* anything reaching the catch here is either an HTTP-level non-2xx or
-* a fetch-level failure.
-*
-* Prefers the structured `.status` property attached by `requestJson`
-* (since 5xx errors with server-supplied `error` fields don't have the
-* status in the message string), falling back to message-pattern
-* matching for fetch-level failures (`TypeError: fetch failed`,
-* `ECONNRESET`, etc.).
-*/
-function isTransientPollError(error, status) {
-	if (status !== void 0) {
-		if (status >= 500 && status < 600) return true;
-		if (status >= 400 && status < 500) return false;
-	}
-	const msg = error.message;
-	if (/^HTTP 4(?!10)\d\d/.test(msg)) return false;
-	if (/^HTTP 5\d\d/.test(msg)) return true;
-	if (/fetch failed/i.test(msg)) return true;
-	if (/ECONNRESET|ETIMEDOUT|ENOTFOUND|EAI_AGAIN/i.test(msg)) return true;
-	return false;
-}
-async function runAuthStatus(options) {
-	const stdout = options.stdout ?? process.stdout;
-	const config = await loadCliConfig(options.context);
-	const serverUrl = await getServerUrl(options.context, config);
-	if (!await getStoredToken(options.context, config)) {
-		stdout.write(`${JSON.stringify({
-			authenticated: false,
-			serverUrl
-		}, null, 2)}\n`);
-		return;
-	}
-	try {
-		const session = await requestJson(options.context, "/api/cli/auth/session", { method: "GET" });
-		stdout.write(`${JSON.stringify({
-			...session,
-			serverUrl
-		}, null, 2)}\n`);
-	} catch (error) {
-		stdout.write(`${JSON.stringify({
-			authenticated: false,
-			serverUrl,
-			error: error instanceof Error ? error.message : String(error)
-		}, null, 2)}\n`);
-	}
-}
-async function runAuthLogout(options) {
-	const stdout = options.stdout ?? process.stdout;
-	try {
-		await requestJson(options.context, "/api/cli/auth/session", { method: "DELETE" });
-	} catch {}
-	await clearStoredToken(options.context);
-	stdout.write(`${JSON.stringify({ authenticated: false }, null, 2)}\n`);
-}
-function parseAuthLoginArgs(args, noOpenDefault = false) {
-	const result = { noOpen: noOpenDefault };
-	for (let i = 0; i < args.length; i++) {
-		const arg = args[i];
-		if (arg === "--no-open") result.noOpen = true;
-		else if (arg === "--server") {
-			result.serverUrl = args[i + 1];
-			i += 1;
-		} else if (arg?.startsWith("--server=")) result.serverUrl = arg.slice(9);
-		else throw new Error(`Unknown auth login option: ${arg}`);
-	}
-	return result;
-}
-function commandExists(cmd) {
-	if (process.platform === "win32") return true;
-	return spawnSync("sh", ["-lc", `command -v ${cmd}`], { stdio: "ignore" }).status === 0;
-}
-function openVerificationUrl(url) {
-	const opener = (process.platform === "darwin" ? [{
-		args: [url],
-		command: "open"
-	}] : process.platform === "win32" ? [{
-		args: [
-			"/c",
-			"start",
-			"",
-			url
-		],
-		command: "cmd.exe"
-	}] : [{
-		args: [url],
-		command: "xdg-open"
-	}, {
-		args: ["open", url],
-		command: "gio"
-	}]).find((c) => commandExists(c.command));
-	if (!opener) return;
-	const child = spawn(opener.command, opener.args, {
-		detached: true,
-		stdio: "ignore",
-		windowsHide: true
-	});
-	child.on("error", () => void 0);
-	child.unref();
-}
-//#endregion
-//#region src/commands/mcp.ts
-async function runMcpCommand(options, args) {
-	const stdout = options.stdout ?? process.stdout;
-	const stderr = options.stderr ?? process.stderr;
-	const sub = args[0];
-	if (sub === "tools") {
-		const result = await requestJsonResult(options.context, "/api/mcp/tools", { method: "GET" }, { fetch: options.fetch });
-		stdout.write(`${JSON.stringify(result, null, 2)}\n`);
-		if (!result.ok) stderr.write(`${result.error.message ?? result.error.code}\n`);
-		return result.ok;
-	}
-	if (sub === "call") {
-		const name = args[1];
-		const payload = args[2] ?? "{}";
-		if (!name) throw new Error("Usage: mcp call <tool> [<json>]");
-		let parsed;
-		try {
-			parsed = JSON.parse(payload);
-		} catch (error) {
-			throw new Error(`Could not parse mcp call payload: ${error.message}`);
-		}
-		const result = await requestJsonResult(options.context, "/api/mcp/call", {
-			body: JSON.stringify({
-				arguments: parsed,
-				name
-			}),
-			method: "POST"
-		}, { fetch: options.fetch });
-		stdout.write(`${JSON.stringify(result, null, 2)}\n`);
-		if (!result.ok) stderr.write(`${result.error.message ?? result.error.code}\n`);
-		return result.ok;
-	}
-	throw new Error("Usage: mcp tools | mcp call <tool> [<json>]");
-}
-//#endregion
-//#region src/commands/resources.ts
-async function runResourcesCommand(options, args) {
-	const stdout = options.stdout ?? process.stdout;
-	const stderr = options.stderr ?? process.stderr;
-	const json = args.includes("--json");
-	const debug = args.includes("--debug");
-	const response = options.injectResponse ?? await fetchResourceList(options.context, { fetch: options.fetch });
-	if (json) {
-		stdout.write(`${JSON.stringify(response, null, 2)}\n`);
-		return;
-	}
-	if (response.resources.length === 0) {
-		if (!response.user.authenticated) stdout.write("(no resources — not authenticated)\n");
-		else stdout.write("(no resources discovered)\n");
-		return;
-	}
-	for (const resource of response.resources) {
-		stdout.write(`${resource.slug}  (${resource.className})\n`);
-		for (const command of resource.commands) stdout.write(`  - ${formatCommandLine(resource, command)}\n`);
-	}
-	if (response.warnings.length > 0) if (debug) {
-		stderr.write(`\nwarnings:\n`);
-		for (const w of response.warnings) stderr.write(`  - ${w}\n`);
-	} else stderr.write(`\n${response.warnings.length} command${response.warnings.length === 1 ? "" : "s"} unavailable (use --debug for details)\n`);
-}
-function formatCommandLine(_resource, command) {
-	const idHint = command.scope === "item" ? " <id>" : "";
-	const description = command.description ? `  — ${command.description}` : "";
-	return `${command.commandName}${idHint}${description}`;
-}
-//#endregion
-//#region src/index.ts
-/**
-* `@happyvertical/smrt-app-cli` — reusable CLI factory for SMRT apps.
-*
-* @example
-* ```ts
-* #!/usr/bin/env node
-* import { createAppCli } from '@happyvertical/smrt-app-cli';
-*
-* const cli = createAppCli({
-*   name: 'willgriffin',
-*   defaultServerUrl: 'https://willgriffin.dev',
-* });
-* await cli.run(process.argv.slice(2));
-* ```
-*
-* @packageDocumentation
-*/
-function createAppCli(options) {
-	const context = {
-		envPrefix: options.envPrefix ?? options.name.toUpperCase(),
-		appSlug: options.configDir ?? options.name.toLowerCase(),
-		defaultServerUrl: options.defaultServerUrl
-	};
-	const extraByName = /* @__PURE__ */ new Map();
-	for (const cmd of options.extraCommands ?? []) extraByName.set(cmd.name, cmd);
-	return {
-		run: (argv) => runCli(context, options, extraByName, argv),
-		startMcpBridge: async (serverInfo) => {
-			const { runMcpStdioBridge } = await import("./bridge-DqndDLee.js");
-			await runMcpStdioBridge({
-				...context,
-				serverInfo: {
-					name: serverInfo?.name ?? `${options.name}-mcp`,
-					version: serverInfo?.version ?? "0.0.0"
-				}
-			});
-		}
-	};
-}
-var BUILT_IN_COMMANDS = /* @__PURE__ */ new Set([
-	"auth",
-	"resources",
-	"mcp"
-]);
-async function runCli(context, options, extras, argv) {
-	const stdout = process.stdout;
-	const stderr = process.stderr;
-	try {
-		await dispatchCli(context, options, extras, argv, stdout, stderr);
-	} catch (error) {
-		const message = error instanceof Error ? error.message : String(error);
-		stderr.write(`${message}\n`);
-		process.exitCode = 1;
-	}
-}
-async function dispatchCli(context, options, extras, argv, stdout, stderr) {
-	if (argv.length === 0 || argv[0] === "help" || argv[0] === "--help") {
-		printUsage(options, extras, stdout);
-		return;
-	}
-	const [command, ...rest] = argv;
-	const extra = extras.get(command);
-	if (extra) {
-		if (BUILT_IN_COMMANDS.has(command)) stderr.write(`[smrt-app-cli] extra command \`${command}\` shadows a built-in.\n`);
-		const ctx = await buildAppContext(context, extra.needsResources ?? false);
-		await extra.run(rest, ctx);
-		return;
-	}
-	if (command === "auth") {
-		const sub = rest[0];
-		const opts = {
-			context,
-			stdout,
-			stderr
-		};
-		if (sub === "login") return runAuthLogin(opts, rest.slice(1));
-		if (sub === "status") return runAuthStatus(opts);
-		if (sub === "logout") return runAuthLogout(opts);
-		throw new Error("Usage: auth login [--server <url>] [--no-open] | status | logout");
-	}
-	if (command === "mcp") {
-		if (!await runMcpCommand({
-			context,
-			stdout,
-			stderr
-		}, rest)) process.exitCode = 1;
-		return;
-	}
-	if (command === "resources") return runResourcesCommand({
-		context,
-		stdout,
-		stderr
-	}, rest);
-	await runResourceCommand(context, command, rest, stdout, stderr);
-}
-async function runResourceCommand(context, slug, rest, stdout, stderr) {
-	const response = await fetchResourceList(context);
-	const resource = findResourceBySlug(response, slug);
-	if (!resource) {
-		const suggestions = response.resources.map((r) => r.slug).filter((s) => similar(s, slug)).slice(0, 3);
-		const hint = suggestions.length ? `  Did you mean: ${suggestions.join(", ")}?` : "";
-		throw new Error(`Unknown resource: ${slug}.${hint}`);
-	}
-	const commandName = rest[0];
-	if (!commandName) throw new Error(`Usage: ${slug} <command> [id] [...]. Available: ${resource.commands.map((c) => c.commandName).join(", ")}`);
-	const command = findCommand(resource, commandName);
-	if (!command) throw new Error(`Unknown command \`${commandName}\` on resource \`${slug}\`. Available: ${resource.commands.map((c) => c.commandName).join(", ")}`);
-	let positional = rest.slice(1);
-	let id;
-	if (command.scope === "item") {
-		id = positional[0];
-		if (!id) throw new Error(`Command \`${slug} ${commandName}\` requires an id positional argument.`);
-		if (findCommand(resource, id)) throw new Error(`\`${id}\` is a command on \`${slug}\`, not an id. Did you mean: \`${slug} ${id}${findCommand(resource, id)?.scope === "item" ? " <id>" : ""}\`? \`${slug} ${commandName}\` is an item-scope command and needs an id as the next argument.`);
-		positional = positional.slice(1);
-	}
-	const parser = buildFlagParser(command.parameters);
-	if (parser.status.kind === "unsupported") stderr.write(`[smrt-app-cli] complex schema for \`${slug} ${commandName}\`; pass JSON payload directly\n`);
-	else if (parser.status.kind === "missing") stderr.write(`[smrt-app-cli] schema unavailable for \`${slug} ${commandName}\`; pass JSON payload directly: $ <cli> ${slug} ${commandName}${id ? ` ${id}` : ""} '<json>'\n`);
-	const { exitCode } = await renderResponse(await invokeCommand({
-		context,
-		resource,
-		command,
-		parsed: parser.parse(positional, command.httpMethod),
-		id
-	}), {
-		stdout,
-		stderr
-	});
-	if (exitCode !== 0) process.exitCode = exitCode;
-}
-async function buildAppContext(context, eagerResources) {
-	const config = await loadCliConfig(context);
-	const serverUrl = await getServerUrl(context, config);
-	const token = await getStoredToken(context, config);
-	let resourcesPromise = null;
-	const getResources = () => {
-		if (!resourcesPromise) resourcesPromise = fetchResourceList(context, { loadedConfig: config });
-		return resourcesPromise;
-	};
-	if (eagerResources) getResources();
-	return {
-		config,
-		serverUrl,
-		token,
-		getResources,
-		requestJson: (path, init, opts) => requestJson(context, path, init, {
-			loadedConfig: config,
-			...opts
-		}),
-		request: async (path, init) => {
-			const headers = new Headers(init?.headers);
-			if (token) headers.set("authorization", `Bearer ${token}`);
-			return fetch(`${serverUrl}${path}`, {
-				...init,
-				headers
-			});
-		},
-		stdout: process.stdout,
-		stderr: process.stderr
-	};
-}
-function printUsage(options, extras, out) {
-	const name = options.name;
-	out.write(`Usage:\n`);
-	out.write(`  ${name} auth login [--server <url>] [--no-open]\n`);
-	out.write(`  ${name} auth status\n`);
-	out.write(`  ${name} auth logout\n`);
-	out.write(`  ${name} resources [--json] [--debug]\n`);
-	out.write(`  ${name} <resource> <command> [id] [--flags...] [json-payload]\n`);
-	out.write(`  ${name} mcp tools\n`);
-	out.write(`  ${name} mcp call <tool> [<json>]\n`);
-	for (const cmd of extras.values()) out.write(`  ${name} ${cmd.name}  — ${cmd.description}\n`);
-}
-/** Naive levenshtein-style similarity. */
-function similar(a, b) {
-	if (a === b) return true;
-	if (Math.abs(a.length - b.length) > 2) return false;
-	let diff = 0;
-	for (let i = 0; i < Math.max(a.length, b.length); i++) {
-		if (a[i] !== b[i]) diff += 1;
-		if (diff > 2) return false;
-	}
-	return true;
-}
-//#endregion
-export { AppCliRequestError, SMRT_MCP_RESULT_METADATA_KEY, buildFlagParser, buildUrl, classifySchema, clearStoredToken, createAppCli, createMcpClientIdMetadataDocument, createMcpStdioBridge, fetchResourceList, findCommand, findResourceBySlug, getServerUrl, getStoredToken, invokeCommand, loadCliConfig, redactTransportValue, registerMcpClient, renderResponse, requestJson, requestJsonResult, resolveMcpClientRegistration, runMcpStdioBridge, saveAuth, saveCliConfig };
+import { a as getStoredToken, c as requestJson, d as saveCliConfig, f as createMcpStdioBridge, i as getServerUrl, l as requestJsonResult, m as runMcpStdioBridge, n as assertSecureServerUrl, o as loadCliConfig, r as clearStoredToken, s as redactTransportValue, t as AppCliRequestError, u as saveAuth } from "./config-CuTFiGxX.js";
+import { a as buildFlagParser, c as createMcpClientIdMetadataDocument, d as buildUrl, f as invokeCommand, h as findResourceBySlug, i as runAppCliExecutable, l as registerMcpClient, m as findCommand, n as createAppCli, o as classifySchema, p as fetchResourceList, r as parseAppCliExecutableConfig, s as renderResponse, t as SMRT_MCP_RESULT_METADATA_KEY, u as resolveMcpClientRegistration } from "./src-DCo67mp8.js";
+export { AppCliRequestError, SMRT_MCP_RESULT_METADATA_KEY, assertSecureServerUrl, buildFlagParser, buildUrl, classifySchema, clearStoredToken, createAppCli, createMcpClientIdMetadataDocument, createMcpStdioBridge, fetchResourceList, findCommand, findResourceBySlug, getServerUrl, getStoredToken, invokeCommand, loadCliConfig, parseAppCliExecutableConfig, redactTransportValue, registerMcpClient, renderResponse, requestJson, requestJsonResult, resolveMcpClientRegistration, runAppCliExecutable, runMcpStdioBridge, saveAuth, saveCliConfig };