@hitch42/applet 0.1.1-beta.19 → 0.1.1-beta.21

package/dist/{device-BgIfytaR.js → device-CZWWckCq.js}

@@ -1,7 +1,8 @@
-import { l as setCredentials, o as rejectEnvironmentKey, t as AuthenticationError } from "./store-B8N_8JIN.js";
+import { c as normalizeInstanceUrl, d as rejectEnvironmentKey, g as saveOAuthCredentials, l as organizationInstanceUrl, o as credentialStorageMessage, t as AuthenticationError, u as readCredentialStore } from "./store-E5NhITHl.js";
 import { spawn } from "node:child_process";
-//#region ../shared/auth/src/device.mts
-const CLIENT_ID = "hitch-cli";
+import readline from "node:readline/promises";
+// ../shared/auth/src/device.mts
+const CLIENT_ID = "hitch-cli-oauth";
 const DEVICE_GRANT = "urn:ietf:params:oauth:grant-type:device_code";
 function defaultOpenUrl(url) {
 	try {
@@ -40,13 +41,10 @@ function parseDeviceCode(value) {
 	return value;
 }
 function parseToken(value) {
-	return typeof value.access_token === "string" && typeof value.token_type === "string" ? value : void 0;
+	return typeof value.access_token === "string" && typeof value.refresh_token === "string" && typeof value.expires_in === "number" && typeof value.token_type === "string" ? value : void 0;
 }
-function parseDeviceOrganization(value) {
-	if (typeof value.organizationId !== "string" || typeof value.orgCode !== "string") throw new AuthenticationError("Hitch returned an invalid device organization response.");
-	return value;
-}
-function parseMe(value) {
+function parseMe(input) {
+	const value = requiredObject(input, "Hitch returned an invalid identity response.");
 	const person = requiredObject(value.person, "Hitch returned an invalid identity response.");
 	if (typeof person.id !== "string" || typeof person.firstName !== "string" || typeof person.lastName !== "string" || typeof person.email !== "string" || !Array.isArray(value.memberships)) throw new Error("Hitch returned an invalid identity response.");
 	const organization = value.organization === void 0 || value.organization === null ? null : requiredObject(value.organization, "Hitch returned an invalid identity response.");
@@ -62,24 +60,30 @@ function parseMe(value) {
 	};
 }
 async function fetchMe(fetcher, instanceUrl, auth) {
-	const response = await fetcher(`${instanceUrl}/api/v1/me`, { headers: { Authorization: `Bearer ${auth.accessToken}` } });
+	const response = await fetcher(`${instanceUrl}/api/me/v1`, { headers: { Authorization: `Bearer ${auth.accessToken}` } });
 	rejectEnvironmentKey(response, auth);
 	if (auth.credentialType === "apiKey" && response.status === 401) throw new AuthenticationError("API key rejected.");
 	const body = await jsonResponse(response);
 	if (!response.ok) throw new AuthenticationError(typeof body.message === "string" ? body.message : `Failed to load the signed-in identity (${response.status}).`);
 	return parseMe(body);
 }
-async function pollForToken(fetcher, instanceUrl, device, now, sleep) {
+async function pollForToken(fetcher, instanceUrl, resource, device, now, sleep) {
 	const deadline = now() + device.expires_in * 1e3;
 	let interval = (device.interval ?? 5) * 1e3;
 	while (now() < deadline) {
 		await sleep(Math.min(interval, deadline - now()));
 		if (now() >= deadline) break;
-		const { body, response } = await postJson(fetcher, `${instanceUrl}/api/auth/device/token`, {
-			grant_type: DEVICE_GRANT,
-			device_code: device.device_code,
-			client_id: CLIENT_ID
+		const response = await fetcher(`${instanceUrl}/api/auth/oauth2/token`, {
+			method: "POST",
+			headers: { "content-type": "application/x-www-form-urlencoded" },
+			body: new URLSearchParams({
+				grant_type: DEVICE_GRANT,
+				device_code: device.device_code,
+				client_id: CLIENT_ID,
+				resource
+			})
 		});
+		const body = await jsonResponse(response);
 		const token = parseToken(body);
 		if (response.ok && token !== void 0) return token;
 		switch (body.error) {
@@ -97,39 +101,55 @@ async function pollForToken(fetcher, instanceUrl, device, now, sleep) {
 async function loginWithDevice(instanceUrl, options = {}) {
 	const fetcher = globalThis.fetch;
 	const now = Date.now;
-	const { body, response } = await postJson(fetcher, `${instanceUrl}/api/auth/device/code`, { client_id: CLIENT_ID });
+	const storedOrgs = Object.keys((await readCredentialStore()).instances[normalizeInstanceUrl(instanceUrl)] ?? {});
+	let orgCode = options.expectedOrg ?? process.env.HITCH_DEFAULT_ORG ?? (storedOrgs.length === 1 ? storedOrgs[0] : void 0);
+	if (orgCode === void 0 && process.stdin.isTTY === true) {
+		const terminal = readline.createInterface({
+			input: process.stdin,
+			output: process.stdout
+		});
+		try {
+			orgCode = (await terminal.question("Organization code: ")).trim();
+		} finally {
+			terminal.close();
+		}
+	}
+	if (!orgCode) throw new AuthenticationError("Select an organization with --org or HITCH_DEFAULT_ORG.");
+	const organizationUrl = organizationInstanceUrl(instanceUrl, orgCode);
+	const resource = `${organizationUrl}/mcp`;
+	const { body, response } = await postJson(fetcher, `${instanceUrl}/api/auth/device/code`, {
+		client_id: CLIENT_ID,
+		scope: "openid offline_access",
+		resource
+	});
 	if (!response.ok) throw new AuthenticationError(typeof body.error_description === "string" ? body.error_description : `Could not start sign-in (${response.status}).`);
 	const device = parseDeviceCode(body);
-	const verificationUrl = options.expectedOrg === void 0 ? device.verification_uri_complete : `${device.verification_uri_complete}&org=${encodeURIComponent(options.expectedOrg)}`;
+	const verificationUrl = device.verification_uri_complete;
 	console.log(`Open ${verificationUrl} and confirm code ${device.user_code}.`);
 	if (!options.noBrowser) try {
 		defaultOpenUrl(verificationUrl);
 	} catch {}
-	const token = await pollForToken(fetcher, instanceUrl, device, now, (milliseconds) => new Promise((resolve) => setTimeout(resolve, milliseconds)));
-	const { body: organizationBody, response: organizationResponse } = await postJson(fetcher, `${instanceUrl}/api/auth/device/organization`, { device_code: device.device_code });
-	if (!organizationResponse.ok) throw new AuthenticationError("The sign-in did not resolve an organization.");
-	const organization = parseDeviceOrganization(organizationBody);
-	const me = await fetchMe(fetcher, instanceUrl, {
+	const token = await pollForToken(fetcher, instanceUrl, resource, device, now, (milliseconds) => new Promise((resolve) => setTimeout(resolve, milliseconds)));
+	const me = await fetchMe(fetcher, organizationUrl, {
 		accessToken: token.access_token,
 		credentialType: "session",
 		source: "store"
 	});
-	const membership = me.memberships.find(({ orgId }) => orgId === organization.organizationId);
-	if (membership === void 0) throw new AuthenticationError("The device session is not scoped to a Hitch organization.");
-	const credentials = {
-		type: "session",
+	const membership = me.memberships.find(({ code }) => code === orgCode);
+	if (membership === void 0) throw new AuthenticationError(`You are not a member of the Hitch organization "${orgCode}".`);
+	const credentials = await saveOAuthCredentials(instanceUrl, {
+		type: "oauth",
 		accessToken: token.access_token,
-		expiresAt: token.expires_in === void 0 ? void 0 : now() + token.expires_in * 1e3,
-		organizationId: organization.organizationId,
-		orgCode: organization.orgCode
-	};
-	await setCredentials(instanceUrl, credentials);
-	if (options.expectedOrg !== void 0 && organization.orgCode !== options.expectedOrg) throw new AuthenticationError(`logged in to "${organization.orgCode}" but this applet targets "${options.expectedOrg}" — confirm the right organization on the device page`);
+		expiresAt: now() + token.expires_in * 1e3,
+		organizationId: membership.orgId,
+		orgCode
+	}, token.refresh_token);
+	const storageMessage = credentialStorageMessage();
+	if (storageMessage !== void 0) console.log(storageMessage);
 	return {
 		credentials,
 		me,
 		membership
 	};
 }
-//#endregion
-export { loginWithDevice as t };
+export { parseMe as n, loginWithDevice as t };

package/dist/{email-protocol-B9u_dh2p.d.ts → email-protocol-CEqzASSx.d.ts}

@@ -1,6 +1,5 @@
 import { ContractProcedure, Meta, Schema } from "@orpc/contract";
 import { z } from "zod";
-//#region src/hitch/email.d.ts
 type EmailTags = Record<string, string>;
 type CreateEmailPixelInput = {
   tags?: EmailTags;
@@ -175,8 +174,6 @@ type HitchEmailAttachmentOutput = {
   contentType: string;
   sizeBytes: number;
 };
-//#endregion
-//#region src/server/telephony-protocol.d.ts
 /** Handle events at least once and without order. Use eventId for idempotency.
  * Read the message with hitch.telephony.messages.get({ id: messageId }). */
 type TelephonyMessageReceivedEvent = {
@@ -186,8 +183,6 @@ type TelephonyMessageReceivedEvent = {
   numberId: string;
   occurredAt: string;
 };
-//#endregion
-//#region src/server/email-protocol.d.ts
 /** Handle events at least once and without order. Use eventId for idempotency.
  * Read the message with hitch.email.messages.get({ id: messageId }). */
 type EmailMessageReceivedEvent = {
@@ -198,5 +193,4 @@ type EmailMessageReceivedEvent = {
   threadId: string;
   occurredAt: string;
 };
-//#endregion
 export { EmailTracker as a, HitchEmailMessage as c, ListEmailTrackersInput as d, ListEmailTrackersOutput as f, emailContract as g, SendHitchEmailInput as h, EmailContract as i, HitchEmailThread as l, ListHitchEmailThreadsInput as m, TelephonyMessageReceivedEvent as n, HitchEmailAddress as o, ListHitchEmailMessagesInput as p, CreateEmailPixelInput as r, HitchEmailAttachment as s, EmailMessageReceivedEvent as t, HitchMailbox as u };

package/dist/{generate-8yyxKRSz.js → generate-48pqFh5M.js}

@@ -1,19 +1,20 @@
-import { a as organizationInstanceUrl, c as resolveInstanceUrl } from "./store-B8N_8JIN.js";
-import { t as fetchWithOrgAuth } from "./auth-D3CrCtZq.js";
-import { t as loadAppletConfig } from "./load-config-BYrBjPlr.js";
-import { i as loadGitHubActionsBuildInputs, n as githubActionsContext } from "./ci-B5-mH-YW.js";
-import { r as prepareAppletProject } from "./project-CWVwic2C.js";
+import { l as organizationInstanceUrl, m as resolveInstanceUrl } from "./store-E5NhITHl.js";
+import { n as findAppletRoot } from "./workspace-CtIKSgMD.js";
+import { n as fetchWithOrgAuth } from "./auth-DuMRqSGe.js";
+import { t as loadAppletConfig } from "./load-config-Cffvj-aM.js";
+import { i as prepareAppletProject, o as userAgent } from "./project-DZGk765E.js";
+import { i as loadGitHubActionsBuildInputs, n as githubActionsContext, r as hitchResponseError } from "./ci-oWlUJKm9.js";
 import { createRequire } from "node:module";
 import { isContractProcedure, minifyContractRouter } from "@orpc/contract";
 import { randomUUID } from "node:crypto";
+import { pathToFileURL } from "node:url";
 import { existsSync } from "node:fs";
 import { access, mkdir, mkdtemp, readFile, readdir, rename, rm, writeFile } from "node:fs/promises";
 import { dirname, resolve } from "node:path";
-import { pathToFileURL } from "node:url";
 import { execFile } from "node:child_process";
 import { promisify } from "node:util";
 import { createClient } from "@hey-api/openapi-ts";
-//#region src/generated.ts
+// src/generated.ts
 const GENERATED_HEADER = "// Generated by @hitch42/applet — do not edit";
 async function writeGenerated(path, source) {
 	await mkdir(dirname(path), { recursive: true });
@@ -57,22 +58,34 @@ import { createWorkerEntry } from "@hitch42/applet/_internal/server";
 export default createWorkerEntry(server, { code: ${JSON.stringify(appletCode)} });
 `);
 }
-//#endregion
-//#region src/typegen/operations.ts
-const RECORD_ROUTE = /^\/v1\/([^/]+)(?:\/(\{id\}(?:\/history)?|query|update|aggregate))?$/;
+// src/typegen/create-schema.ts
+function isObject$3(value) {
+	return value !== null && typeof value === "object" && !Array.isArray(value);
+}
+function isComponentRef(value) {
+	return isObject$3(value) && typeof value.$ref === "string" && /^#\/components\/schemas\/[^/]+$/.test(value.$ref);
+}
+function singleCreateSchema(value) {
+	if (isComponentRef(value)) return value;
+	if (!isObject$3(value) || !Array.isArray(value.oneOf) || value.oneOf.length !== 2) return void 0;
+	const [single, array] = value.oneOf;
+	return isComponentRef(single) && isObject$3(array) && array.type === "array" && isComponentRef(array.items) && array.items.$ref === single.$ref ? single : void 0;
+}
+// src/typegen/operations.ts
+const RECORD_ROUTE = /^\/v1\/([^/]+)(?:\/(\{record\}(?:\/history)?|query|bulk-update|aggregate))?$/;
 const COMPONENT_REF_PREFIX$1 = "#/components/schemas/";
-const BATCH_PATH = "/v1/batch";
-const BATCH_ITEM_PATH = "paths./v1/batch.post.requestBody.content.application/json.schema.properties.requests.items";
+const BATCH_PATH = "/v1/batch/run";
+const BATCH_ITEM_PATH = "paths./v1/batch/run.post.requestBody.content.application/json.schema.properties.requests.items";
 const BATCH_ID_PATH = /^\^\/v1\/([^/]+)\/\[0-9a-fA-F-\]\{36\}\$$/;
 const VERBS = {
 	"get:": "list",
 	"post:": "create",
-	"get:{id}": "get",
-	"get:{id}/history": "history",
-	"patch:{id}": "update",
-	"delete:{id}": "delete",
+	"get:{record}": "get",
+	"get:{record}/history": "history",
+	"patch:{record}": "update",
+	"delete:{record}": "delete",
 	"post:query": "query",
-	"post:update": "updateWhere",
+	"post:bulk-update": "updateWhere",
 	"post:aggregate": "aggregate"
 };
 const COMPONENT_RESPONSE_STATUS = {
@@ -89,7 +102,7 @@ function isObject$2(value) {
 function recordOperation(path, method) {
 	const match = RECORD_ROUTE.exec(path);
 	const objectCode = match?.[1];
-	if (objectCode === void 0 || objectCode === "batch") return void 0;
+	if (objectCode === void 0 || objectCode === "objects") return void 0;
 	const key = `${method.toLowerCase()}:${match?.at(2) ?? ""}`;
 	if (!Object.hasOwn(VERBS, key)) return void 0;
 	return {
@@ -99,7 +112,7 @@ function recordOperation(path, method) {
 }
 function recordObjectCode(path) {
 	const match = RECORD_ROUTE.exec(path);
-	return match?.[1] === "batch" ? void 0 : match?.[1];
+	return match?.[1] === "objects" ? void 0 : match?.[1];
 }
 function withRecordOperationId(path, method, operation) {
 	const record = recordOperation(path, method);
@@ -116,13 +129,13 @@ function batchEntry(entry, index) {
 	const enumPath = Array.isArray(path?.enum) && path.enum.length === 1 ? path.enum[0] : void 0;
 	if (Array.isArray(method) && method.length !== 1 || Array.isArray(path?.enum) && path.enum.length !== 1) throw new Error(`${BATCH_ITEM_PATH}.oneOf[${index}] expected a create, update, delete, or updateWhere batch entry, found ${describeValue$1(entry)}`);
 	if (methodValue === "POST" && typeof enumPath === "string") {
-		const updateWhere = /^\/v1\/([^/]+)\/update$/.exec(enumPath);
+		const updateWhere = /^\/v1\/([^/]+)\/bulk-update$/.exec(enumPath);
 		if (updateWhere?.[1] !== void 0) return {
 			objectCode: updateWhere[1],
 			verb: "updateWhere"
 		};
 		const create = /^\/v1\/([^/]+)$/.exec(enumPath);
-		if (create?.[1] !== void 0 && create[1] !== "batch") return {
+		if (create?.[1] !== void 0) return {
 			objectCode: create[1],
 			verb: "create"
 		};
@@ -195,9 +208,15 @@ function prepareRecordSpec(spec, manifest) {
 				const content = isObject$2(response?.content) ? response.content : void 0;
 				const mediaType = isObject$2(content?.["application/json"]) ? content["application/json"] : void 0;
 				const schema = isObject$2(mediaType) ? mediaType.schema : void 0;
-				const ref = isObject$2(schema) ? schema.$ref : void 0;
+				const ref = record.verb === "create" ? singleCreateSchema(schema)?.$ref : isObject$2(schema) ? schema.$ref : void 0;
 				if (typeof ref !== "string" || !ref.startsWith(COMPONENT_REF_PREFIX$1) || ref.slice(21).length === 0 || ref.slice(21).includes("/")) throw new Error(`object "${record.objectCode}": paths.${path}.${method}.responses.${status}.content.application/json.schema expected a component schema $ref, found ${describeValue$1(schema, true)}`);
 			}
+			if (record.verb === "create") {
+				const request = isObject$2(operation.requestBody) ? operation.requestBody : void 0;
+				const content = isObject$2(request?.content) ? request.content : void 0;
+				const body = isObject$2(content?.["application/json"]) ? content["application/json"] : void 0;
+				if (singleCreateSchema(body?.schema) === void 0) throw new Error(`object "${record.objectCode}": paths.${path}.${method}.requestBody.content.application/json.schema expected a component schema $ref or single/array oneOf, found ${describeValue$1(body?.schema, true)}`);
+			}
 			const prepared = withRecordOperationId(path, method, operation);
 			return prepared ? [[method, prepared]] : [];
 		});
@@ -205,7 +224,7 @@ function prepareRecordSpec(spec, manifest) {
 	}));
 	manifest?.objects.forEach(({ code, optionalAttributes }) => {
 		if (optionalAttributes === void 0 || optionalAttributes.length === 0) return;
-		const responsePath = `/v1/${code}/{id}`;
+		const responsePath = `/v1/${code}/{record}`;
 		const response = prepared.paths[responsePath]?.get?.responses;
 		const schema = isObject$2(response) && isObject$2(response["200"]) ? response["200"].content : void 0;
 		const mediaType = isObject$2(schema) && isObject$2(schema["application/json"]) ? schema["application/json"] : void 0;
@@ -243,8 +262,7 @@ function describeValue$1(value, expectedRef = false) {
 	if (typeof value === "object") return expectedRef ? "an object without a valid $ref" : "an object";
 	return `${typeof value} ${JSON.stringify(value)}`;
 }
-//#endregion
-//#region src/typegen/catalog.ts
+// src/typegen/catalog.ts
 const COMPONENT_REF_PREFIX = "#/components/schemas/";
 const RESERVED_ATTRIBUTE_CODES = /* @__PURE__ */ new Set([
 	"id",
@@ -262,7 +280,7 @@ function describeValue(value, objectDescription = "an object") {
 	return `${typeof value} ${JSON.stringify(value)}`;
 }
 function componentName(value, path, objectCode) {
-	const ref = isObject$1(value) ? value.$ref : void 0;
+	const ref = singleCreateSchema(value)?.$ref;
 	if (typeof ref !== "string" || !ref.startsWith(COMPONENT_REF_PREFIX)) throw new Error(`object "${objectCode}": ${path} expected a component schema $ref, found ${describeValue(value, "an object without a $ref")}`);
 	const name = ref.slice(21);
 	if (name.length === 0 || name.includes("/")) throw new Error(`object "${objectCode}": ${path} expected a direct component schema $ref, found ${JSON.stringify(ref)}`);
@@ -290,8 +308,7 @@ function catalogFromSpec(spec) {
 		return [[operation.objectCode, Object.keys(schema.properties).filter((code) => !RESERVED_ATTRIBUTE_CODES.has(code))]];
 	}));
 }
-//#endregion
-//#region src/typegen/guard.ts
+// src/typegen/guard.ts
 function isObject(value) {
 	return value !== null && typeof value === "object" && !Array.isArray(value);
 }
@@ -306,8 +323,7 @@ function guardManifestForSpec(spec, manifest) {
 	const missing = manifest.objects.find(({ code }) => !available.includes(code));
 	if (missing !== void 0) throw new Error(`object "${missing.code}" not found in org spec (available: ${available.join(", ")})`);
 }
-//#endregion
-//#region src/typegen/register.ts
+// src/typegen/register.ts
 function registerFile(catalog, options, publicApplet) {
 	const catalogType = catalog === void 0 ? "type Catalog = Record<string, string>;" : `type Catalog = {
 ${Object.entries(catalog).map(([objectCode, attributeCodes]) => `  ${JSON.stringify(objectCode)}: ${attributeCodes.map((code) => JSON.stringify(code)).join(" | ") || "never"};`).join("\n")}
@@ -371,8 +387,7 @@ async function writeRegisterDeclaration(outDir, catalog, publicApplet = false) {
 		hasServer: existsSync(resolve(outDir, "../src/server/main.ts"))
 	}, publicApplet));
 }
-//#endregion
-//#region src/typegen/generate.ts
+// src/typegen/generate.ts
 const execFileAsync = promisify(execFile);
 const require = createRequire(import.meta.url);
 function routesModuleSource(routes) {
@@ -427,8 +442,12 @@ async function responseJson(response) {
 async function loadAuthenticatedSpec(manifest) {
 	const github = githubActionsContext();
 	if (github !== void 0) return (await loadGitHubActionsBuildInputs(github, manifest.requiresChangeset)).openapi;
-	const response = await fetchWithOrgAuth(manifest.org, (instanceUrl, accessToken) => globalThis.fetch(`${instanceUrl}/api/v1/openapi.json${manifest.requiresChangeset === void 0 ? "" : `?changeset_id=${encodeURIComponent(manifest.requiresChangeset)}`}`, { headers: { Authorization: `Bearer ${accessToken}` } }));
-	if (!response.ok) throw new Error(`Failed to load the organization's OpenAPI spec (${response.status}).`);
+	const agent = await userAgent();
+	const response = await fetchWithOrgAuth(manifest.org, (instanceUrl, accessToken) => globalThis.fetch(`${instanceUrl}/api/v1/openapi.json${manifest.requiresChangeset === void 0 ? "" : `?changeset_id=${encodeURIComponent(manifest.requiresChangeset)}`}`, { headers: {
+		Authorization: `Bearer ${accessToken}`,
+		"User-Agent": agent
+	} }));
+	if (!response.ok) throw await hitchResponseError(response, "Failed to load the organization's OpenAPI spec");
 	return responseJson(response);
 }
 async function loadThemeStylesheet(orgCode) {
@@ -491,7 +510,7 @@ async function writeContractFiles(outDir, manifest, spec) {
 	await generateContract(preparedSpec, outDir);
 	await writeManifestGen(outDir, manifest);
 	await writeRegisterDeclaration(outDir, catalog, manifest.public === true);
-	const hasBatch = Object.hasOwn(preparedSpec.paths, "/v1/batch");
+	const hasBatch = Object.hasOwn(preparedSpec.paths, "/v1/batch/run");
 	await writeFile(resolve(outDir, "index.ts"), `// Generated by applet generate — do not edit.
 import { emailContract, filesContract as files, meContract as me, pruneContract, registerHitchContract, teamsContract as teams, telephonyContract as telephony } from "@hitch42/applet";
 import manifest from "./manifest.gen.ts";
@@ -521,11 +540,11 @@ async function syncContract(outDir, manifest) {
 }
 async function runGenerate() {
 	await prepareAppletProject();
-	const root = process.cwd();
-	const outDir = resolve("./.hitch");
+	const root = findAppletRoot(process.cwd()) ?? process.cwd();
+	const outDir = resolve(root, ".hitch");
 	const manifest = await loadAppletConfig(process.cwd());
 	const { spec, theme: themeStylesheet } = await loadBuildInputs(manifest);
-	const stagedDir = await mkdtemp(resolve("./.hitch.tmp-"));
+	const stagedDir = await mkdtemp(resolve(root, ".hitch.tmp-"));
 	const backupDir = `${stagedDir}.backup`;
 	let staged = true;
 	let backedUp = false;
@@ -571,5 +590,4 @@ async function runGenerate() {
 		if (backedUp && !await fileExists(outDir)) await rename(backupDir, outDir);
 	}
 }
-//#endregion
 export { writeRegisterDeclaration as a, writeAppletRoot as c, writeServerEntry as d, syncContract as i, writeClientEntry as l, routesModuleSource as n, prepareRecordSpec as o, runGenerate as r, recordOperation as s, generateContract as t, writeManifestGen as u };

package/dist/generate-BYK4aNud.js

@@ -0,0 +1 @@
+export { r as runGenerate } from "./generate-48pqFh5M.js";

package/dist/generated-agents-BUnJ0FQA.js

@@ -0,0 +1,215 @@
+import { r as findParentRoot } from "./workspace-CtIKSgMD.js";
+import { createHash, randomUUID } from "node:crypto";
+import { fileURLToPath } from "node:url";
+import { existsSync } from "node:fs";
+import fs$1 from "node:fs/promises";
+import { dirname, relative, resolve } from "node:path";
+// src/atomic-file.ts
+async function writeChangedFile(path, contents) {
+	const expected = Buffer.isBuffer(contents) ? contents : Buffer.from(contents);
+	if ((await fs$1.readFile(path).catch((error) => {
+		if (error instanceof Error && "code" in error && error.code === "ENOENT") return void 0;
+		throw error;
+	}))?.equals(expected) && !(await fs$1.lstat(path)).isSymbolicLink()) return;
+	const temporary = `${path}.${randomUUID()}.tmp`;
+	try {
+		await fs$1.writeFile(temporary, expected);
+		await fs$1.rename(temporary, path);
+	} finally {
+		await fs$1.rm(temporary, { force: true });
+	}
+}
+// src/generated-agents.ts
+const GENERATED_SKILLS = [
+	"hitch-applets",
+	"hitch-cli",
+	"hitch-data",
+	"hitch-theory",
+	"react-best-practices",
+	"tanstack-query",
+	"tanstack-router",
+	"web-design-guidelines"
+];
+const PARENT_GUIDE = `# Hitch applet parent\n\nEach child folder is one applet repo. Run applet commands in a child for that applet.\nRun applet deploy or applet bootstrap in this parent for all children. Commit changes in each child separately.\n\n`;
+function agentFileAction(input) {
+	if (input.child) {
+		if (input.kind !== "missing" && !input.dangling && !input.generated) return "edited";
+		return input.kind === "link" && input.correctLink && !input.dangling ? "keep" : "link";
+	}
+	return "write";
+}
+async function state(path) {
+	try {
+		return (await fs$1.lstat(path)).isSymbolicLink() ? "link" : "file";
+	} catch (error) {
+		if (error instanceof Error && "code" in error && error.code === "ENOENT") return "missing";
+		throw error;
+	}
+}
+async function files(root) {
+	const entries = await fs$1.readdir(root, { withFileTypes: true });
+	const contents = await Promise.all(entries.map(async (entry) => {
+		if (entry.isDirectory()) return [...await files(resolve(root, entry.name))].map(([path, bytes]) => [`${entry.name}/${path}`, bytes]);
+		if (entry.isSymbolicLink()) return [[entry.name, Buffer.from(`symlink:${await fs$1.readlink(resolve(root, entry.name))}`)]];
+		return [[entry.name, await fs$1.readFile(resolve(root, entry.name))]];
+	}));
+	return new Map(contents.flat());
+}
+async function replaceLink(path, target, directory = false) {
+	const kind = await state(path);
+	if (kind === "link" && await fs$1.readlink(path) === target) return;
+	await fs$1.mkdir(dirname(path), { recursive: true });
+	const temporary = `${path}.${randomUUID()}.tmp`;
+	try {
+		await fs$1.symlink(target, temporary, directory ? "dir" : "file");
+		if (kind === "file" && directory) await fs$1.rm(path, {
+			recursive: true,
+			force: true
+		});
+		await fs$1.rename(temporary, path);
+	} finally {
+		await fs$1.rm(temporary, { force: true });
+	}
+}
+async function generatedAgentContents() {
+	const agents = await fs$1.readFile(new URL("../scaffold/AGENTS.md", import.meta.url));
+	const result = /* @__PURE__ */ new Map([["AGENTS.md", agents], ["CLAUDE.md", agents]]);
+	await Promise.all(GENERATED_SKILLS.map(async (skill) => {
+		(await files(fileURLToPath(new URL(`../scaffold/.agents/skills/${skill}`, import.meta.url)))).forEach((bytes, name) => {
+			result.set(`.agents/skills/${skill}/${name}`, bytes);
+			result.set(`.claude/skills/${skill}/${name}`, bytes);
+		});
+	}));
+	return result;
+}
+const editedPaths = /* @__PURE__ */ new Set();
+async function writeGeneratedAgents(root) {
+	const parent = findParentRoot(dirname(root));
+	const home = parent ?? root;
+	const parentGuide = parent !== void 0 || existsSync(resolve(root, ".hitchroot"));
+	const agents = await fs$1.readFile(new URL("../scaffold/AGENTS.md", import.meta.url), "utf8");
+	const guide = `${parentGuide ? PARENT_GUIDE : ""}${agents}`;
+	await fs$1.mkdir(home, { recursive: true });
+	const inventoryPath = resolve(home, ".agents/.hitch-generated.json");
+	const previous = JSON.parse(await fs$1.readFile(inventoryPath, "utf8").catch((error) => {
+		if (error instanceof Error && "code" in error && error.code === "ENOENT") return "{}";
+		throw error;
+	}));
+	const digest = (bytes) => createHash("sha256").update(bytes).digest("hex");
+	const generated = await Promise.all(GENERATED_SKILLS.map(async (skill) => ({
+		skill,
+		contents: await files(fileURLToPath(new URL(`../scaffold/.agents/skills/${skill}`, import.meta.url)))
+	})));
+	const editedLinks = /* @__PURE__ */ new Set();
+	await Promise.all(generated.map(async ({ skill, contents }) => {
+		const path = resolve(home, ".agents/skills", skill);
+		if (await state(path) !== "link") return;
+		const current = await files(path).catch((error) => {
+			if (error instanceof Error && "code" in error && error.code === "ENOENT") return void 0;
+			throw error;
+		});
+		if (current !== void 0 && (current.size !== contents.size || [...contents].some(([name, bytes]) => !current.get(name)?.equals(bytes)))) {
+			if (!editedPaths.has(path)) console.warn(`${path} was edited; Hitch left it in place.`);
+			editedPaths.add(path);
+			editedLinks.add(skill);
+			return;
+		}
+		await fs$1.unlink(path).catch((error) => {
+			if (!(error instanceof Error && "code" in error && ["ENOENT", "EISDIR"].includes(String(error.code)))) throw error;
+		});
+	}));
+	const expected = /* @__PURE__ */ new Map([["AGENTS.md", Buffer.from(guide)]]);
+	await Promise.all(generated.map(async ({ skill, contents }) => {
+		const realClaude = await state(resolve(home, ".claude/skills", skill)) === "file";
+		contents.forEach((bytes, name) => {
+			if (!editedLinks.has(skill)) expected.set(`.agents/skills/${skill}/${name}`, bytes);
+			if (realClaude) expected.set(`.claude/skills/${skill}/${name}`, bytes);
+		});
+	}));
+	const inventory = {};
+	await Promise.all([...expected].map(async ([name, bytes]) => {
+		const path = resolve(home, name);
+		const current = await state(path) === "missing" ? void 0 : await fs$1.readFile(path).catch((error) => {
+			if (error instanceof Error && "code" in error && error.code === "ENOENT") return void 0;
+			throw error;
+		});
+		if (!(current === void 0 || current.equals(bytes) || digest(current) === previous[name] || name === "AGENTS.md" && current.toString() === agents)) {
+			if (!editedPaths.has(path)) console.warn(`${path} was edited; Hitch left it in place.`);
+			editedPaths.add(path);
+			return;
+		}
+		await fs$1.mkdir(dirname(path), { recursive: true });
+		await writeChangedFile(path, bytes);
+		inventory[name] = digest(bytes);
+	}));
+	await Promise.all(Object.entries(previous).filter(([name]) => !expected.has(name)).map(async ([name, hash]) => {
+		if ([...editedLinks].some((skill) => name.startsWith(`.agents/skills/${skill}/`))) return;
+		if (![".agents", ".claude"].some((directory) => GENERATED_SKILLS.some((skill) => name.startsWith(`${directory}/skills/${skill}/`)))) return;
+		const path = resolve(home, name);
+		if (await state(path) === "file" && digest(await fs$1.readFile(path)) === hash) await fs$1.rm(path, { force: true });
+	}));
+	const claude = resolve(home, "CLAUDE.md");
+	const claudeContents = await state(claude) === "missing" ? void 0 : await fs$1.readFile(claude, "utf8").catch((error) => {
+		if (error instanceof Error && "code" in error && error.code === "ENOENT") return void 0;
+		throw error;
+	});
+	if (claudeContents === void 0 || claudeContents === agents || claudeContents === guide) await replaceLink(claude, "AGENTS.md");
+	else if (!editedPaths.has(claude)) {
+		console.warn(`${claude} was edited; Hitch left it in place.`);
+		editedPaths.add(claude);
+	}
+	await Promise.all(generated.map(async ({ skill, contents }) => {
+		const path = resolve(home, ".claude/skills", skill);
+		const kind = await state(path);
+		const target = `../../.agents/skills/${skill}`;
+		if (kind === "file") return;
+		if (kind === "link" && await fs$1.readlink(path) !== target) {
+			const current = await files(path).catch((error) => {
+				if (error instanceof Error && "code" in error && error.code === "ENOENT") return void 0;
+				throw error;
+			});
+			if (current !== void 0 && (current.size !== contents.size || [...contents].some(([name, bytes]) => !current.get(name)?.equals(bytes)))) {
+				if (!editedPaths.has(path)) console.warn(`${path} was edited; Hitch left it in place.`);
+				editedPaths.add(path);
+				return;
+			}
+		}
+		await replaceLink(path, target, true);
+	}));
+	await fs$1.mkdir(dirname(inventoryPath), { recursive: true });
+	await writeChangedFile(inventoryPath, `${JSON.stringify(Object.fromEntries(Object.entries(inventory).sort(([a], [b]) => a.localeCompare(b))), null, 2)}\n`);
+	if (parent === void 0) return;
+	const paths = [
+		"AGENTS.md",
+		"CLAUDE.md",
+		...GENERATED_SKILLS.flatMap((skill) => [`.agents/skills/${skill}`, `.claude/skills/${skill}`])
+	];
+	for (const name of paths) {
+		const path = resolve(root, name);
+		const kind = await state(path);
+		const target = relative(dirname(path), resolve(home, name));
+		let equal = true;
+		if (kind === "file" || kind === "link" && existsSync(path)) {
+			if (name.endsWith(".md")) {
+				const current = await fs$1.readFile(path, "utf8");
+				equal = current === agents || current === guide;
+			} else {
+				const current = await files(path);
+				const expected = generated.find(({ skill }) => name.endsWith(`/${skill}`)).contents;
+				equal = current.size === expected.size && [...expected].every(([file, bytes]) => current.get(file)?.equals(bytes));
+			}
+		}
+		const action = agentFileAction({
+			child: true,
+			kind,
+			generated: equal,
+			dangling: kind === "link" && !existsSync(path),
+			correctLink: kind === "link" && await fs$1.readlink(path) === target
+		});
+		if (action === "edited") {
+			if (!editedPaths.has(path)) console.warn(`${path} was edited; Hitch left it in place.`);
+			editedPaths.add(path);
+		} else if (action === "link") await replaceLink(path, target, !name.endsWith(".md"));
+	}
+}
+export { generatedAgentContents as n, writeGeneratedAgents as r, GENERATED_SKILLS as t };

package/dist/git-credential-CU7-Erzs.js

@@ -0,0 +1,24 @@
+import { l as organizationInstanceUrl, p as resolveAuthForOrg, r as LoginRequiredError, t as AuthenticationError } from "./store-E5NhITHl.js";
+// src/git-credential.ts
+function parseGitCredentialHost(input, instanceUrl) {
+	const host = input.split(/\r?\n/).find((line) => line.startsWith("host="))?.slice(5);
+	if (host === void 0) throw new AuthenticationError("Git did not provide a host.");
+	const instance = new URL(instanceUrl);
+	const labels = instance.hostname.split(".");
+	const hostLabels = host.split(":")[0].split(".");
+	const orgCode = hostLabels[0];
+	if (labels[0] !== "app" || hostLabels.slice(1).join(".") !== labels.slice(1).join(".") || host.includes(":") && host.slice(host.lastIndexOf(":")) !== `:${instance.port}`) throw new AuthenticationError("Git requested credentials for a different Hitch host.");
+	if (new URL(organizationInstanceUrl(instanceUrl, orgCode)).host !== host) throw new AuthenticationError("Git requested credentials for a different Hitch host.");
+	return orgCode;
+}
+async function runGitCredential(action, instanceUrl) {
+	if (action !== "get" && action !== "store" && action !== "erase") throw new Error("Use applet git-credential <get|store|erase>.");
+	if (action !== "get") return;
+	let input = "";
+	for await (const chunk of process.stdin) input += String(chunk);
+	const orgCode = parseGitCredentialHost(input, instanceUrl);
+	const auth = await resolveAuthForOrg(instanceUrl, orgCode);
+	if (auth === void 0) throw new LoginRequiredError();
+	process.stdout.write(`username=hitch\npassword=${auth.accessToken}\n\n`);
+}
+export { runGitCredential };