@hitch42/applet 0.1.1-beta.20 → 0.1.1-beta.21

package/dist/{email-protocol-B9u_dh2p.d.ts → email-protocol-CEqzASSx.d.ts}

@@ -1,6 +1,5 @@
 import { ContractProcedure, Meta, Schema } from "@orpc/contract";
 import { z } from "zod";
-//#region src/hitch/email.d.ts
 type EmailTags = Record<string, string>;
 type CreateEmailPixelInput = {
   tags?: EmailTags;
@@ -175,8 +174,6 @@ type HitchEmailAttachmentOutput = {
   contentType: string;
   sizeBytes: number;
 };
-//#endregion
-//#region src/server/telephony-protocol.d.ts
 /** Handle events at least once and without order. Use eventId for idempotency.
  * Read the message with hitch.telephony.messages.get({ id: messageId }). */
 type TelephonyMessageReceivedEvent = {
@@ -186,8 +183,6 @@ type TelephonyMessageReceivedEvent = {
   numberId: string;
   occurredAt: string;
 };
-//#endregion
-//#region src/server/email-protocol.d.ts
 /** Handle events at least once and without order. Use eventId for idempotency.
  * Read the message with hitch.email.messages.get({ id: messageId }). */
 type EmailMessageReceivedEvent = {
@@ -198,5 +193,4 @@ type EmailMessageReceivedEvent = {
   threadId: string;
   occurredAt: string;
 };
-//#endregion
 export { EmailTracker as a, HitchEmailMessage as c, ListEmailTrackersInput as d, ListEmailTrackersOutput as f, emailContract as g, SendHitchEmailInput as h, EmailContract as i, HitchEmailThread as l, ListHitchEmailThreadsInput as m, TelephonyMessageReceivedEvent as n, HitchEmailAddress as o, ListHitchEmailMessagesInput as p, CreateEmailPixelInput as r, HitchEmailAttachment as s, EmailMessageReceivedEvent as t, HitchMailbox as u };

package/dist/{generate-BLD0DoCk.js → generate-48pqFh5M.js}

@@ -1,19 +1,20 @@
-import { a as organizationInstanceUrl, c as resolveInstanceUrl } from "./store-B8N_8JIN.js";
-import { t as fetchWithOrgAuth } from "./auth-D3CrCtZq.js";
-import { t as loadAppletConfig } from "./load-config-DGALUExv.js";
-import { a as userAgent, r as prepareAppletProject } from "./project-CrxdZR0B.js";
-import { i as loadGitHubActionsBuildInputs, n as githubActionsContext, r as hitchResponseError } from "./ci-BTFTCBgy.js";
+import { l as organizationInstanceUrl, m as resolveInstanceUrl } from "./store-E5NhITHl.js";
+import { n as findAppletRoot } from "./workspace-CtIKSgMD.js";
+import { n as fetchWithOrgAuth } from "./auth-DuMRqSGe.js";
+import { t as loadAppletConfig } from "./load-config-Cffvj-aM.js";
+import { i as prepareAppletProject, o as userAgent } from "./project-DZGk765E.js";
+import { i as loadGitHubActionsBuildInputs, n as githubActionsContext, r as hitchResponseError } from "./ci-oWlUJKm9.js";
 import { createRequire } from "node:module";
 import { isContractProcedure, minifyContractRouter } from "@orpc/contract";
 import { randomUUID } from "node:crypto";
+import { pathToFileURL } from "node:url";
 import { existsSync } from "node:fs";
 import { access, mkdir, mkdtemp, readFile, readdir, rename, rm, writeFile } from "node:fs/promises";
 import { dirname, resolve } from "node:path";
-import { pathToFileURL } from "node:url";
 import { execFile } from "node:child_process";
 import { promisify } from "node:util";
 import { createClient } from "@hey-api/openapi-ts";
-//#region src/generated.ts
+// src/generated.ts
 const GENERATED_HEADER = "// Generated by @hitch42/applet — do not edit";
 async function writeGenerated(path, source) {
 	await mkdir(dirname(path), { recursive: true });
@@ -57,8 +58,7 @@ import { createWorkerEntry } from "@hitch42/applet/_internal/server";
 export default createWorkerEntry(server, { code: ${JSON.stringify(appletCode)} });
 `);
 }
-//#endregion
-//#region src/typegen/create-schema.ts
+// src/typegen/create-schema.ts
 function isObject$3(value) {
 	return value !== null && typeof value === "object" && !Array.isArray(value);
 }
@@ -71,22 +71,21 @@ function singleCreateSchema(value) {
 	const [single, array] = value.oneOf;
 	return isComponentRef(single) && isObject$3(array) && array.type === "array" && isComponentRef(array.items) && array.items.$ref === single.$ref ? single : void 0;
 }
-//#endregion
-//#region src/typegen/operations.ts
-const RECORD_ROUTE = /^\/v1\/([^/]+)(?:\/(\{id\}(?:\/history)?|query|update|aggregate))?$/;
+// src/typegen/operations.ts
+const RECORD_ROUTE = /^\/v1\/([^/]+)(?:\/(\{record\}(?:\/history)?|query|bulk-update|aggregate))?$/;
 const COMPONENT_REF_PREFIX$1 = "#/components/schemas/";
-const BATCH_PATH = "/v1/batch";
-const BATCH_ITEM_PATH = "paths./v1/batch.post.requestBody.content.application/json.schema.properties.requests.items";
+const BATCH_PATH = "/v1/batch/run";
+const BATCH_ITEM_PATH = "paths./v1/batch/run.post.requestBody.content.application/json.schema.properties.requests.items";
 const BATCH_ID_PATH = /^\^\/v1\/([^/]+)\/\[0-9a-fA-F-\]\{36\}\$$/;
 const VERBS = {
 	"get:": "list",
 	"post:": "create",
-	"get:{id}": "get",
-	"get:{id}/history": "history",
-	"patch:{id}": "update",
-	"delete:{id}": "delete",
+	"get:{record}": "get",
+	"get:{record}/history": "history",
+	"patch:{record}": "update",
+	"delete:{record}": "delete",
 	"post:query": "query",
-	"post:update": "updateWhere",
+	"post:bulk-update": "updateWhere",
 	"post:aggregate": "aggregate"
 };
 const COMPONENT_RESPONSE_STATUS = {
@@ -103,7 +102,7 @@ function isObject$2(value) {
 function recordOperation(path, method) {
 	const match = RECORD_ROUTE.exec(path);
 	const objectCode = match?.[1];
-	if (objectCode === void 0 || objectCode === "batch") return void 0;
+	if (objectCode === void 0 || objectCode === "objects") return void 0;
 	const key = `${method.toLowerCase()}:${match?.at(2) ?? ""}`;
 	if (!Object.hasOwn(VERBS, key)) return void 0;
 	return {
@@ -113,7 +112,7 @@ function recordOperation(path, method) {
 }
 function recordObjectCode(path) {
 	const match = RECORD_ROUTE.exec(path);
-	return match?.[1] === "batch" ? void 0 : match?.[1];
+	return match?.[1] === "objects" ? void 0 : match?.[1];
 }
 function withRecordOperationId(path, method, operation) {
 	const record = recordOperation(path, method);
@@ -130,13 +129,13 @@ function batchEntry(entry, index) {
 	const enumPath = Array.isArray(path?.enum) && path.enum.length === 1 ? path.enum[0] : void 0;
 	if (Array.isArray(method) && method.length !== 1 || Array.isArray(path?.enum) && path.enum.length !== 1) throw new Error(`${BATCH_ITEM_PATH}.oneOf[${index}] expected a create, update, delete, or updateWhere batch entry, found ${describeValue$1(entry)}`);
 	if (methodValue === "POST" && typeof enumPath === "string") {
-		const updateWhere = /^\/v1\/([^/]+)\/update$/.exec(enumPath);
+		const updateWhere = /^\/v1\/([^/]+)\/bulk-update$/.exec(enumPath);
 		if (updateWhere?.[1] !== void 0) return {
 			objectCode: updateWhere[1],
 			verb: "updateWhere"
 		};
 		const create = /^\/v1\/([^/]+)$/.exec(enumPath);
-		if (create?.[1] !== void 0 && create[1] !== "batch") return {
+		if (create?.[1] !== void 0) return {
 			objectCode: create[1],
 			verb: "create"
 		};
@@ -225,7 +224,7 @@ function prepareRecordSpec(spec, manifest) {
 	}));
 	manifest?.objects.forEach(({ code, optionalAttributes }) => {
 		if (optionalAttributes === void 0 || optionalAttributes.length === 0) return;
-		const responsePath = `/v1/${code}/{id}`;
+		const responsePath = `/v1/${code}/{record}`;
 		const response = prepared.paths[responsePath]?.get?.responses;
 		const schema = isObject$2(response) && isObject$2(response["200"]) ? response["200"].content : void 0;
 		const mediaType = isObject$2(schema) && isObject$2(schema["application/json"]) ? schema["application/json"] : void 0;
@@ -263,8 +262,7 @@ function describeValue$1(value, expectedRef = false) {
 	if (typeof value === "object") return expectedRef ? "an object without a valid $ref" : "an object";
 	return `${typeof value} ${JSON.stringify(value)}`;
 }
-//#endregion
-//#region src/typegen/catalog.ts
+// src/typegen/catalog.ts
 const COMPONENT_REF_PREFIX = "#/components/schemas/";
 const RESERVED_ATTRIBUTE_CODES = /* @__PURE__ */ new Set([
 	"id",
@@ -310,8 +308,7 @@ function catalogFromSpec(spec) {
 		return [[operation.objectCode, Object.keys(schema.properties).filter((code) => !RESERVED_ATTRIBUTE_CODES.has(code))]];
 	}));
 }
-//#endregion
-//#region src/typegen/guard.ts
+// src/typegen/guard.ts
 function isObject(value) {
 	return value !== null && typeof value === "object" && !Array.isArray(value);
 }
@@ -326,8 +323,7 @@ function guardManifestForSpec(spec, manifest) {
 	const missing = manifest.objects.find(({ code }) => !available.includes(code));
 	if (missing !== void 0) throw new Error(`object "${missing.code}" not found in org spec (available: ${available.join(", ")})`);
 }
-//#endregion
-//#region src/typegen/register.ts
+// src/typegen/register.ts
 function registerFile(catalog, options, publicApplet) {
 	const catalogType = catalog === void 0 ? "type Catalog = Record<string, string>;" : `type Catalog = {
 ${Object.entries(catalog).map(([objectCode, attributeCodes]) => `  ${JSON.stringify(objectCode)}: ${attributeCodes.map((code) => JSON.stringify(code)).join(" | ") || "never"};`).join("\n")}
@@ -391,8 +387,7 @@ async function writeRegisterDeclaration(outDir, catalog, publicApplet = false) {
 		hasServer: existsSync(resolve(outDir, "../src/server/main.ts"))
 	}, publicApplet));
 }
-//#endregion
-//#region src/typegen/generate.ts
+// src/typegen/generate.ts
 const execFileAsync = promisify(execFile);
 const require = createRequire(import.meta.url);
 function routesModuleSource(routes) {
@@ -515,7 +510,7 @@ async function writeContractFiles(outDir, manifest, spec) {
 	await generateContract(preparedSpec, outDir);
 	await writeManifestGen(outDir, manifest);
 	await writeRegisterDeclaration(outDir, catalog, manifest.public === true);
-	const hasBatch = Object.hasOwn(preparedSpec.paths, "/v1/batch");
+	const hasBatch = Object.hasOwn(preparedSpec.paths, "/v1/batch/run");
 	await writeFile(resolve(outDir, "index.ts"), `// Generated by applet generate — do not edit.
 import { emailContract, filesContract as files, meContract as me, pruneContract, registerHitchContract, teamsContract as teams, telephonyContract as telephony } from "@hitch42/applet";
 import manifest from "./manifest.gen.ts";
@@ -545,11 +540,11 @@ async function syncContract(outDir, manifest) {
 }
 async function runGenerate() {
 	await prepareAppletProject();
-	const root = process.cwd();
-	const outDir = resolve("./.hitch");
+	const root = findAppletRoot(process.cwd()) ?? process.cwd();
+	const outDir = resolve(root, ".hitch");
 	const manifest = await loadAppletConfig(process.cwd());
 	const { spec, theme: themeStylesheet } = await loadBuildInputs(manifest);
-	const stagedDir = await mkdtemp(resolve("./.hitch.tmp-"));
+	const stagedDir = await mkdtemp(resolve(root, ".hitch.tmp-"));
 	const backupDir = `${stagedDir}.backup`;
 	let staged = true;
 	let backedUp = false;
@@ -595,5 +590,4 @@ async function runGenerate() {
 		if (backedUp && !await fileExists(outDir)) await rename(backupDir, outDir);
 	}
 }
-//#endregion
 export { writeRegisterDeclaration as a, writeAppletRoot as c, writeServerEntry as d, syncContract as i, writeClientEntry as l, routesModuleSource as n, prepareRecordSpec as o, runGenerate as r, recordOperation as s, generateContract as t, writeManifestGen as u };

package/dist/generate-BYK4aNud.js

@@ -0,0 +1 @@
+export { r as runGenerate } from "./generate-48pqFh5M.js";

package/dist/generated-agents-BUnJ0FQA.js

@@ -0,0 +1,215 @@
+import { r as findParentRoot } from "./workspace-CtIKSgMD.js";
+import { createHash, randomUUID } from "node:crypto";
+import { fileURLToPath } from "node:url";
+import { existsSync } from "node:fs";
+import fs$1 from "node:fs/promises";
+import { dirname, relative, resolve } from "node:path";
+// src/atomic-file.ts
+async function writeChangedFile(path, contents) {
+	const expected = Buffer.isBuffer(contents) ? contents : Buffer.from(contents);
+	if ((await fs$1.readFile(path).catch((error) => {
+		if (error instanceof Error && "code" in error && error.code === "ENOENT") return void 0;
+		throw error;
+	}))?.equals(expected) && !(await fs$1.lstat(path)).isSymbolicLink()) return;
+	const temporary = `${path}.${randomUUID()}.tmp`;
+	try {
+		await fs$1.writeFile(temporary, expected);
+		await fs$1.rename(temporary, path);
+	} finally {
+		await fs$1.rm(temporary, { force: true });
+	}
+}
+// src/generated-agents.ts
+const GENERATED_SKILLS = [
+	"hitch-applets",
+	"hitch-cli",
+	"hitch-data",
+	"hitch-theory",
+	"react-best-practices",
+	"tanstack-query",
+	"tanstack-router",
+	"web-design-guidelines"
+];
+const PARENT_GUIDE = `# Hitch applet parent\n\nEach child folder is one applet repo. Run applet commands in a child for that applet.\nRun applet deploy or applet bootstrap in this parent for all children. Commit changes in each child separately.\n\n`;
+function agentFileAction(input) {
+	if (input.child) {
+		if (input.kind !== "missing" && !input.dangling && !input.generated) return "edited";
+		return input.kind === "link" && input.correctLink && !input.dangling ? "keep" : "link";
+	}
+	return "write";
+}
+async function state(path) {
+	try {
+		return (await fs$1.lstat(path)).isSymbolicLink() ? "link" : "file";
+	} catch (error) {
+		if (error instanceof Error && "code" in error && error.code === "ENOENT") return "missing";
+		throw error;
+	}
+}
+async function files(root) {
+	const entries = await fs$1.readdir(root, { withFileTypes: true });
+	const contents = await Promise.all(entries.map(async (entry) => {
+		if (entry.isDirectory()) return [...await files(resolve(root, entry.name))].map(([path, bytes]) => [`${entry.name}/${path}`, bytes]);
+		if (entry.isSymbolicLink()) return [[entry.name, Buffer.from(`symlink:${await fs$1.readlink(resolve(root, entry.name))}`)]];
+		return [[entry.name, await fs$1.readFile(resolve(root, entry.name))]];
+	}));
+	return new Map(contents.flat());
+}
+async function replaceLink(path, target, directory = false) {
+	const kind = await state(path);
+	if (kind === "link" && await fs$1.readlink(path) === target) return;
+	await fs$1.mkdir(dirname(path), { recursive: true });
+	const temporary = `${path}.${randomUUID()}.tmp`;
+	try {
+		await fs$1.symlink(target, temporary, directory ? "dir" : "file");
+		if (kind === "file" && directory) await fs$1.rm(path, {
+			recursive: true,
+			force: true
+		});
+		await fs$1.rename(temporary, path);
+	} finally {
+		await fs$1.rm(temporary, { force: true });
+	}
+}
+async function generatedAgentContents() {
+	const agents = await fs$1.readFile(new URL("../scaffold/AGENTS.md", import.meta.url));
+	const result = /* @__PURE__ */ new Map([["AGENTS.md", agents], ["CLAUDE.md", agents]]);
+	await Promise.all(GENERATED_SKILLS.map(async (skill) => {
+		(await files(fileURLToPath(new URL(`../scaffold/.agents/skills/${skill}`, import.meta.url)))).forEach((bytes, name) => {
+			result.set(`.agents/skills/${skill}/${name}`, bytes);
+			result.set(`.claude/skills/${skill}/${name}`, bytes);
+		});
+	}));
+	return result;
+}
+const editedPaths = /* @__PURE__ */ new Set();
+async function writeGeneratedAgents(root) {
+	const parent = findParentRoot(dirname(root));
+	const home = parent ?? root;
+	const parentGuide = parent !== void 0 || existsSync(resolve(root, ".hitchroot"));
+	const agents = await fs$1.readFile(new URL("../scaffold/AGENTS.md", import.meta.url), "utf8");
+	const guide = `${parentGuide ? PARENT_GUIDE : ""}${agents}`;
+	await fs$1.mkdir(home, { recursive: true });
+	const inventoryPath = resolve(home, ".agents/.hitch-generated.json");
+	const previous = JSON.parse(await fs$1.readFile(inventoryPath, "utf8").catch((error) => {
+		if (error instanceof Error && "code" in error && error.code === "ENOENT") return "{}";
+		throw error;
+	}));
+	const digest = (bytes) => createHash("sha256").update(bytes).digest("hex");
+	const generated = await Promise.all(GENERATED_SKILLS.map(async (skill) => ({
+		skill,
+		contents: await files(fileURLToPath(new URL(`../scaffold/.agents/skills/${skill}`, import.meta.url)))
+	})));
+	const editedLinks = /* @__PURE__ */ new Set();
+	await Promise.all(generated.map(async ({ skill, contents }) => {
+		const path = resolve(home, ".agents/skills", skill);
+		if (await state(path) !== "link") return;
+		const current = await files(path).catch((error) => {
+			if (error instanceof Error && "code" in error && error.code === "ENOENT") return void 0;
+			throw error;
+		});
+		if (current !== void 0 && (current.size !== contents.size || [...contents].some(([name, bytes]) => !current.get(name)?.equals(bytes)))) {
+			if (!editedPaths.has(path)) console.warn(`${path} was edited; Hitch left it in place.`);
+			editedPaths.add(path);
+			editedLinks.add(skill);
+			return;
+		}
+		await fs$1.unlink(path).catch((error) => {
+			if (!(error instanceof Error && "code" in error && ["ENOENT", "EISDIR"].includes(String(error.code)))) throw error;
+		});
+	}));
+	const expected = /* @__PURE__ */ new Map([["AGENTS.md", Buffer.from(guide)]]);
+	await Promise.all(generated.map(async ({ skill, contents }) => {
+		const realClaude = await state(resolve(home, ".claude/skills", skill)) === "file";
+		contents.forEach((bytes, name) => {
+			if (!editedLinks.has(skill)) expected.set(`.agents/skills/${skill}/${name}`, bytes);
+			if (realClaude) expected.set(`.claude/skills/${skill}/${name}`, bytes);
+		});
+	}));
+	const inventory = {};
+	await Promise.all([...expected].map(async ([name, bytes]) => {
+		const path = resolve(home, name);
+		const current = await state(path) === "missing" ? void 0 : await fs$1.readFile(path).catch((error) => {
+			if (error instanceof Error && "code" in error && error.code === "ENOENT") return void 0;
+			throw error;
+		});
+		if (!(current === void 0 || current.equals(bytes) || digest(current) === previous[name] || name === "AGENTS.md" && current.toString() === agents)) {
+			if (!editedPaths.has(path)) console.warn(`${path} was edited; Hitch left it in place.`);
+			editedPaths.add(path);
+			return;
+		}
+		await fs$1.mkdir(dirname(path), { recursive: true });
+		await writeChangedFile(path, bytes);
+		inventory[name] = digest(bytes);
+	}));
+	await Promise.all(Object.entries(previous).filter(([name]) => !expected.has(name)).map(async ([name, hash]) => {
+		if ([...editedLinks].some((skill) => name.startsWith(`.agents/skills/${skill}/`))) return;
+		if (![".agents", ".claude"].some((directory) => GENERATED_SKILLS.some((skill) => name.startsWith(`${directory}/skills/${skill}/`)))) return;
+		const path = resolve(home, name);
+		if (await state(path) === "file" && digest(await fs$1.readFile(path)) === hash) await fs$1.rm(path, { force: true });
+	}));
+	const claude = resolve(home, "CLAUDE.md");
+	const claudeContents = await state(claude) === "missing" ? void 0 : await fs$1.readFile(claude, "utf8").catch((error) => {
+		if (error instanceof Error && "code" in error && error.code === "ENOENT") return void 0;
+		throw error;
+	});
+	if (claudeContents === void 0 || claudeContents === agents || claudeContents === guide) await replaceLink(claude, "AGENTS.md");
+	else if (!editedPaths.has(claude)) {
+		console.warn(`${claude} was edited; Hitch left it in place.`);
+		editedPaths.add(claude);
+	}
+	await Promise.all(generated.map(async ({ skill, contents }) => {
+		const path = resolve(home, ".claude/skills", skill);
+		const kind = await state(path);
+		const target = `../../.agents/skills/${skill}`;
+		if (kind === "file") return;
+		if (kind === "link" && await fs$1.readlink(path) !== target) {
+			const current = await files(path).catch((error) => {
+				if (error instanceof Error && "code" in error && error.code === "ENOENT") return void 0;
+				throw error;
+			});
+			if (current !== void 0 && (current.size !== contents.size || [...contents].some(([name, bytes]) => !current.get(name)?.equals(bytes)))) {
+				if (!editedPaths.has(path)) console.warn(`${path} was edited; Hitch left it in place.`);
+				editedPaths.add(path);
+				return;
+			}
+		}
+		await replaceLink(path, target, true);
+	}));
+	await fs$1.mkdir(dirname(inventoryPath), { recursive: true });
+	await writeChangedFile(inventoryPath, `${JSON.stringify(Object.fromEntries(Object.entries(inventory).sort(([a], [b]) => a.localeCompare(b))), null, 2)}\n`);
+	if (parent === void 0) return;
+	const paths = [
+		"AGENTS.md",
+		"CLAUDE.md",
+		...GENERATED_SKILLS.flatMap((skill) => [`.agents/skills/${skill}`, `.claude/skills/${skill}`])
+	];
+	for (const name of paths) {
+		const path = resolve(root, name);
+		const kind = await state(path);
+		const target = relative(dirname(path), resolve(home, name));
+		let equal = true;
+		if (kind === "file" || kind === "link" && existsSync(path)) {
+			if (name.endsWith(".md")) {
+				const current = await fs$1.readFile(path, "utf8");
+				equal = current === agents || current === guide;
+			} else {
+				const current = await files(path);
+				const expected = generated.find(({ skill }) => name.endsWith(`/${skill}`)).contents;
+				equal = current.size === expected.size && [...expected].every(([file, bytes]) => current.get(file)?.equals(bytes));
+			}
+		}
+		const action = agentFileAction({
+			child: true,
+			kind,
+			generated: equal,
+			dangling: kind === "link" && !existsSync(path),
+			correctLink: kind === "link" && await fs$1.readlink(path) === target
+		});
+		if (action === "edited") {
+			if (!editedPaths.has(path)) console.warn(`${path} was edited; Hitch left it in place.`);
+			editedPaths.add(path);
+		} else if (action === "link") await replaceLink(path, target, !name.endsWith(".md"));
+	}
+}
+export { generatedAgentContents as n, writeGeneratedAgents as r, GENERATED_SKILLS as t };

package/dist/git-credential-CU7-Erzs.js

@@ -0,0 +1,24 @@
+import { l as organizationInstanceUrl, p as resolveAuthForOrg, r as LoginRequiredError, t as AuthenticationError } from "./store-E5NhITHl.js";
+// src/git-credential.ts
+function parseGitCredentialHost(input, instanceUrl) {
+	const host = input.split(/\r?\n/).find((line) => line.startsWith("host="))?.slice(5);
+	if (host === void 0) throw new AuthenticationError("Git did not provide a host.");
+	const instance = new URL(instanceUrl);
+	const labels = instance.hostname.split(".");
+	const hostLabels = host.split(":")[0].split(".");
+	const orgCode = hostLabels[0];
+	if (labels[0] !== "app" || hostLabels.slice(1).join(".") !== labels.slice(1).join(".") || host.includes(":") && host.slice(host.lastIndexOf(":")) !== `:${instance.port}`) throw new AuthenticationError("Git requested credentials for a different Hitch host.");
+	if (new URL(organizationInstanceUrl(instanceUrl, orgCode)).host !== host) throw new AuthenticationError("Git requested credentials for a different Hitch host.");
+	return orgCode;
+}
+async function runGitCredential(action, instanceUrl) {
+	if (action !== "get" && action !== "store" && action !== "erase") throw new Error("Use applet git-credential <get|store|erase>.");
+	if (action !== "get") return;
+	let input = "";
+	for await (const chunk of process.stdin) input += String(chunk);
+	const orgCode = parseGitCredentialHost(input, instanceUrl);
+	const auth = await resolveAuthForOrg(instanceUrl, orgCode);
+	if (auth === void 0) throw new LoginRequiredError();
+	process.stdout.write(`username=hitch\npassword=${auth.accessToken}\n\n`);
+}
+export { runGitCredential };