@hitch42/applet 0.1.1-beta.22 → 0.1.1-beta.23

package/dist/applet.js

@@ -76,7 +76,7 @@ async function main() {
 	if (process.argv[2] === "git-credential") {
 		const args = process.argv.slice(3);
 		if (args[0] !== "--instance" || args.length !== 3) throw new Error("Use applet git-credential --instance <url> <get|store|erase>.");
-		await (await import("./git-credential-CU7-Erzs.js")).runGitCredential(args[2] ?? "", args[1]);
+		await (await import("./git-credential-DuLNowIb.js")).runGitCredential(args[2] ?? "", args[1]);
 		return;
 	}
 	const { positionals, values } = parseArgs({
@@ -109,15 +109,15 @@ async function main() {
 		strict: true
 	});
 	if ((positionals.length === 2 || positionals.length === 3) && positionals[0] === "clone" && Object.keys(values).every((key) => key === "message")) {
-		await (await import("./git-deploy-CNz6mxiF.js")).runClone(positionals[1], positionals[2], values.message);
+		await (await import("./git-deploy-CByu_uli.js")).runClone(positionals[1], positionals[2], values.message);
 		return;
 	}
 	if (positionals.length === 1 && positionals[0] === "logout" && Object.keys(values).length === 0) {
-		await (await import("./login-BWZKo7Ui.js")).runLogout();
+		await (await import("./login-B41-WWtD.js")).runLogout();
 		return;
 	}
 	if (positionals.length === 1 && positionals[0] === "login" && Object.keys(values).every((key) => key === "no-browser")) {
-		await (await import("./login-BWZKo7Ui.js")).runLogin({ noBrowser: values["no-browser"] });
+		await (await import("./login-B41-WWtD.js")).runLogin({ noBrowser: values["no-browser"] });
 		return;
 	}
 	if (positionals.length === 1 && positionals[0] === "parent" && Object.keys(values).length === 0) {
@@ -130,33 +130,33 @@ async function main() {
 	const noLogFlags = values.run === void 0 && values.filter === void 0 && values.level === void 0 && values.limit === void 0 && values.live === void 0 && values.search === void 0 && values.since === void 0;
 	const noModeFlags = values["client-only"] === void 0 && values["server-only"] === void 0;
 	if (positionals.length === 1 && positionals[0] === "bootstrap" && noModeFlags && noGitFlags && noVariableFlags && noLogFlags && values.dist === void 0) {
-		await (await import("./init-BD5mC_9L.js")).runBootstrap({
+		await (await import("./init-C5HqIRt8.js")).runBootstrap({
 			message: values.message,
 			install: values["no-install"] !== true
 		});
 		return;
 	}
 	if (positionals.length === 1 && positionals[0] === "generate" && values["no-install"] === void 0 && noModeFlags && noGitFlags && noVariableFlags && noLogFlags && values.message === void 0 && values.dist === void 0) {
-		await (await import("./generate-DG9vVkBO.js")).runGenerate();
+		await (await import("./generate-_u-zFzrv.js")).runGenerate();
 		return;
 	}
 	if (positionals.length === 1 && positionals[0] === "build" && values["no-install"] === void 0 && noModeFlags && noGitFlags && noVariableFlags && noLogFlags && values.message === void 0 && values.dist === void 0) {
-		await (await import("./build-C7hi2yg4.js")).runBuild();
+		await (await import("./build-YzjhhLw0.js")).runBuild();
 		return;
 	}
 	if (positionals.length === 1 && positionals[0] === "deploy" && values["no-install"] === void 0 && noModeFlags && noGitFlags && noVariableFlags && noLogFlags) {
-		await (await import("./deploy-BM55ZoSp.js")).runDeploy({
+		await (await import("./deploy-WdARFHmA.js")).runDeploy({
 			message: values.message,
 			dist: values.dist
 		});
 		return;
 	}
 	if (positionals.length === 2 && positionals[0] === "rollback" && values.message === void 0 && values.dist === void 0 && values["no-install"] === void 0 && noModeFlags && noGitFlags && noVariableFlags && noLogFlags) {
-		await (await import("./deploy-BM55ZoSp.js")).runRollback(positionals[1]);
+		await (await import("./deploy-WdARFHmA.js")).runRollback(positionals[1]);
 		return;
 	}
 	if (positionals.length === 2 && positionals[0] === "init" && noModeFlags && noVariableFlags && noLogFlags) {
-		await (await import("./init-BD5mC_9L.js")).runInit(positionals[1], {
+		await (await import("./init-C5HqIRt8.js")).runInit(positionals[1], {
 			commit: values["no-commit"] !== true,
 			git: values["no-git"] !== true,
 			install: values["no-install"] !== true
@@ -164,7 +164,7 @@ async function main() {
 		return;
 	}
 	if (positionals.length === 2 && positionals[0] === "new" && noGitFlags && noVariableFlags && noLogFlags) {
-		await (await import("./init-BD5mC_9L.js")).runNew({
+		await (await import("./init-C5HqIRt8.js")).runNew({
 			code: positionals[1],
 			message: values.message,
 			clientOnly: values["client-only"],
@@ -174,7 +174,7 @@ async function main() {
 		return;
 	}
 	if ((positionals.length === 1 || positionals.length === 2) && positionals[0] === "logs" && values["no-install"] === void 0 && noModeFlags && noGitFlags && noVariableFlags) {
-		await (await import("./logs-glCVHI-8.js")).runLogs({
+		await (await import("./logs-DrL2ytmg.js")).runLogs({
 			code: positionals[1],
 			filter: values.filter,
 			run: values.run,
@@ -187,14 +187,14 @@ async function main() {
 		return;
 	}
 	if (positionals.length === 3 && positionals[0] === "schedules" && positionals[1] === "run" && values["no-install"] === void 0 && noModeFlags && noGitFlags && noLogFlags && values.secret === void 0) {
-		await (await import("./schedules-CSUb84e2.js")).runSchedule({
+		await (await import("./schedules-2Q_fkY_a.js")).runSchedule({
 			code: positionals[2],
 			yes: values.yes
 		});
 		return;
 	}
 	if ((positionals.length === 3 || positionals.length === 4) && positionals[0] === "variables" && positionals[1] === "set" && values["no-install"] === void 0 && noModeFlags && noGitFlags && noLogFlags) {
-		await (await import("./variables-CgZstC7I.js")).runVariablesSet({
+		await (await import("./variables-CGwbmUom.js")).runVariablesSet({
 			key: positionals[2],
 			secret: values.secret,
 			value: positionals[3],
@@ -203,11 +203,11 @@ async function main() {
 		return;
 	}
 	if (positionals.length === 2 && positionals[0] === "variables" && positionals[1] === "list" && values["no-install"] === void 0 && noModeFlags && noGitFlags && noVariableFlags && noLogFlags) {
-		await (await import("./variables-CgZstC7I.js")).runVariablesList();
+		await (await import("./variables-CGwbmUom.js")).runVariablesList();
 		return;
 	}
 	if (positionals.length === 3 && positionals[0] === "variables" && positionals[1] === "delete" && values["no-install"] === void 0 && noModeFlags && noGitFlags && values.secret === void 0 && noLogFlags) {
-		await (await import("./variables-CgZstC7I.js")).runVariablesDelete({
+		await (await import("./variables-CGwbmUom.js")).runVariablesDelete({
 			key: positionals[2],
 			yes: values.yes
 		});

package/dist/{store-E5NhITHl.js → auth-OvyoB6M-.js}

@@ -1,7 +1,11 @@
+import "./workspace-CtIKSgMD.js";
 import { randomUUID } from "node:crypto";
 import fs from "node:fs/promises";
 import { dirname, join } from "node:path";
+import { spawn } from "node:child_process";
+import readline from "node:readline/promises";
 import { homedir } from "node:os";
+import { Entry, findCredentials } from "@napi-rs/keyring";
 // ../shared/auth/src/lock.mts
 const LOCK_AGE = 3e4;
 function canTakeOverRefreshLock(age) {
@@ -45,7 +49,7 @@ async function withFileLock(path, action) {
 	throw new AuthenticationError("Timed out while waiting for the credential lock.");
 }
 // ../shared/auth/src/oauth.mts
-const CLIENT_ID = "hitch-cli-oauth";
+const CLIENT_ID$1 = "hitch-cli-oauth";
 const REFRESH_GRANT = "refresh_token";
 async function saveOAuthCredentials(instanceUrl, credentials, refreshToken) {
 	const stored = {
@@ -78,7 +82,7 @@ async function refreshAccessToken(instanceUrl, orgCode) {
 			body: new URLSearchParams({
 				grant_type: REFRESH_GRANT,
 				refresh_token: refreshToken,
-				client_id: CLIENT_ID,
+				client_id: CLIENT_ID$1,
 				resource: `${organizationInstanceUrl(instanceUrl, orgCode)}/mcp`
 			})
 		});
@@ -114,7 +118,7 @@ async function revokeOAuthCredentials(instanceUrl, credentials, warn = console.w
 			body: new URLSearchParams({
 				token: credentials.refreshToken,
 				token_type_hint: "refresh_token",
-				client_id: CLIENT_ID
+				client_id: CLIENT_ID$1
 			})
 		});
 		if (!response.ok) warn(`Warning: server sign-out failed (${response.status}).`);
@@ -445,4 +449,199 @@ async function updateFileCredentialStore(path, update) {
 		}
 	});
 }
-export { configureKeyring as a, normalizeInstanceUrl as c, rejectEnvironmentKey as d, resolveAuth as f, saveOAuthCredentials as g, revokeOAuthCredentials as h, bearerToken as i, organizationInstanceUrl as l, resolveInstanceUrl as m, DEFAULT_INSTANCE_URL as n, credentialStorageMessage as o, resolveAuthForOrg as p, LoginRequiredError as r, deleteCredentials as s, AuthenticationError as t, readCredentialStore as u };
+// ../shared/auth/src/device.mts
+const CLIENT_ID = "hitch-cli-oauth";
+const DEVICE_GRANT = "urn:ietf:params:oauth:grant-type:device_code";
+function defaultOpenUrl(url) {
+	try {
+		const child = spawn(process.platform === "darwin" ? "open" : "xdg-open", [url], {
+			detached: true,
+			stdio: "ignore"
+		});
+		child.on("error", () => void 0);
+		child.unref();
+	} catch {}
+}
+function requiredObject(value, message) {
+	if (value === null || typeof value !== "object" || Array.isArray(value)) throw new Error(message);
+	return value;
+}
+async function jsonResponse(response) {
+	try {
+		return requiredObject(await response.json(), "Expected a JSON object response.");
+	} catch (error) {
+		throw new Error(`Invalid JSON response from ${response.url || "Hitch"}.`, { cause: error });
+	}
+}
+async function postJson(fetcher, url, body) {
+	const response = await fetcher(url, {
+		method: "POST",
+		headers: { "content-type": "application/json" },
+		body: JSON.stringify(body)
+	});
+	return {
+		body: await jsonResponse(response),
+		response
+	};
+}
+function parseDeviceCode(value) {
+	if (typeof value.device_code !== "string" || typeof value.user_code !== "string" || typeof value.verification_uri !== "string" || typeof value.verification_uri_complete !== "string" || typeof value.expires_in !== "number" || value.interval !== void 0 && typeof value.interval !== "number") throw new AuthenticationError("Hitch returned an invalid device authorization response.");
+	return value;
+}
+function parseToken(value) {
+	return typeof value.access_token === "string" && typeof value.refresh_token === "string" && typeof value.expires_in === "number" && typeof value.token_type === "string" ? value : void 0;
+}
+function parseMe(input) {
+	const value = requiredObject(input, "Hitch returned an invalid identity response.");
+	const person = requiredObject(value.person, "Hitch returned an invalid identity response.");
+	if (typeof person.id !== "string" || typeof person.firstName !== "string" || typeof person.lastName !== "string" || typeof person.email !== "string" || !Array.isArray(value.memberships)) throw new Error("Hitch returned an invalid identity response.");
+	const organization = value.organization === void 0 || value.organization === null ? null : requiredObject(value.organization, "Hitch returned an invalid identity response.");
+	if (organization !== null && (typeof organization.id !== "string" || typeof organization.code !== "string")) throw new Error("Hitch returned an invalid identity response.");
+	return {
+		memberships: value.memberships.map((membership) => {
+			const item = requiredObject(membership, "Hitch returned an invalid membership.");
+			if (typeof item.orgId !== "string" || typeof item.code !== "string" || typeof item.name !== "string") throw new Error("Hitch returned an invalid membership.");
+			return item;
+		}),
+		organization,
+		person
+	};
+}
+async function fetchMe(fetcher, instanceUrl, auth) {
+	const response = await fetcher(`${instanceUrl}/api/me/v1`, { headers: { Authorization: `Bearer ${auth.accessToken}` } });
+	rejectEnvironmentKey(response, auth);
+	if (auth.credentialType === "apiKey" && response.status === 401) throw new AuthenticationError("API key rejected.");
+	const body = await jsonResponse(response);
+	if (!response.ok) throw new AuthenticationError(typeof body.message === "string" ? body.message : `Failed to load the signed-in identity (${response.status}).`);
+	return parseMe(body);
+}
+async function pollForToken(fetcher, instanceUrl, resource, device, now, sleep) {
+	const deadline = now() + device.expires_in * 1e3;
+	let interval = (device.interval ?? 5) * 1e3;
+	while (now() < deadline) {
+		await sleep(Math.min(interval, deadline - now()));
+		if (now() >= deadline) break;
+		const response = await fetcher(`${instanceUrl}/api/auth/oauth2/token`, {
+			method: "POST",
+			headers: { "content-type": "application/x-www-form-urlencoded" },
+			body: new URLSearchParams({
+				grant_type: DEVICE_GRANT,
+				device_code: device.device_code,
+				client_id: CLIENT_ID,
+				resource
+			})
+		});
+		const body = await jsonResponse(response);
+		const token = parseToken(body);
+		if (response.ok && token !== void 0) return token;
+		switch (body.error) {
+			case "authorization_pending": break;
+			case "slow_down":
+				interval += 5e3;
+				break;
+			case "expired_token": throw new AuthenticationError("The sign-in request expired. Run hitch login again.");
+			case "access_denied": throw new AuthenticationError("Sign-in was denied.");
+			default: throw new AuthenticationError(typeof body.error_description === "string" ? body.error_description : `Sign-in failed (${response.status}).`);
+		}
+	}
+	throw new AuthenticationError("The sign-in request expired. Run hitch login again.");
+}
+async function loginWithDevice(instanceUrl, options = {}) {
+	const fetcher = globalThis.fetch;
+	const now = Date.now;
+	const storedOrgs = Object.keys((await readCredentialStore()).instances[normalizeInstanceUrl(instanceUrl)] ?? {});
+	let orgCode = options.expectedOrg ?? process.env.HITCH_DEFAULT_ORG ?? (storedOrgs.length === 1 ? storedOrgs[0] : void 0);
+	if (orgCode === void 0 && process.stdin.isTTY === true) {
+		const terminal = readline.createInterface({
+			input: process.stdin,
+			output: process.stdout
+		});
+		try {
+			orgCode = (await terminal.question("Organization code: ")).trim();
+		} finally {
+			terminal.close();
+		}
+	}
+	if (!orgCode) throw new AuthenticationError("Select an organization with --org or HITCH_DEFAULT_ORG.");
+	const organizationUrl = organizationInstanceUrl(instanceUrl, orgCode);
+	const resource = `${organizationUrl}/mcp`;
+	const { body, response } = await postJson(fetcher, `${instanceUrl}/api/auth/device/code`, {
+		client_id: CLIENT_ID,
+		scope: "openid offline_access",
+		resource
+	});
+	if (!response.ok) throw new AuthenticationError(typeof body.error_description === "string" ? body.error_description : `Could not start sign-in (${response.status}).`);
+	const device = parseDeviceCode(body);
+	const verificationUrl = device.verification_uri_complete;
+	console.log(`Open ${verificationUrl} and confirm code ${device.user_code}.`);
+	if (!options.noBrowser) try {
+		defaultOpenUrl(verificationUrl);
+	} catch {}
+	const token = await pollForToken(fetcher, instanceUrl, resource, device, now, (milliseconds) => new Promise((resolve) => setTimeout(resolve, milliseconds)));
+	const me = await fetchMe(fetcher, organizationUrl, {
+		accessToken: token.access_token,
+		credentialType: "session",
+		source: "store"
+	});
+	const membership = me.memberships.find(({ code }) => code === orgCode);
+	if (membership === void 0) throw new AuthenticationError(`You are not a member of the Hitch organization "${orgCode}".`);
+	const credentials = await saveOAuthCredentials(instanceUrl, {
+		type: "oauth",
+		accessToken: token.access_token,
+		expiresAt: now() + token.expires_in * 1e3,
+		organizationId: membership.orgId,
+		orgCode
+	}, token.refresh_token);
+	const storageMessage = credentialStorageMessage();
+	if (storageMessage !== void 0) console.log(storageMessage);
+	return {
+		credentials,
+		me,
+		membership
+	};
+}
+// src/auth.ts
+configureKeyring(Entry, findCredentials);
+async function fetchWithOrgAuth(orgCode, request) {
+	return withOrgAuth(orgCode, async (organizationUrl, accessToken) => {
+		const response = await request(organizationUrl, accessToken);
+		return {
+			response,
+			unauthorized: response.status === 401
+		};
+	}).then(({ response }) => response);
+}
+async function withOrgAuth(orgCode, request) {
+	const instanceUrl = await resolveInstanceUrl();
+	const organizationUrl = organizationInstanceUrl(instanceUrl, orgCode);
+	const auth = await resolveAuthForOrg(instanceUrl, orgCode).catch((error) => {
+		if (error instanceof LoginRequiredError && process.stdin.isTTY === true) return void 0;
+		throw error;
+	});
+	if (auth !== void 0) {
+		const result = await request(organizationUrl, bearerToken(auth));
+		if ("response" in result && result.response instanceof Response) rejectEnvironmentKey(result.response, auth);
+		if (!result.unauthorized) return result;
+		if (auth.source === "environment") throw new AuthenticationError("HITCH_API_KEY was rejected.");
+	}
+	if (process.stdin.isTTY !== true) throw new LoginRequiredError();
+	await loginWithDevice(instanceUrl, { expectedOrg: orgCode });
+	const credentials = await resolveAuthForOrg(instanceUrl, orgCode);
+	if (credentials === void 0) throw new Error(`login did not provide credentials for organization "${orgCode}"`);
+	return request(organizationUrl, bearerToken(credentials));
+}
+async function orgUsesHitchGit(org) {
+	const response = await fetchWithOrgAuth(org, (organizationUrl, token) => fetch(`${organizationUrl}/api/me/v1`, { headers: { Authorization: `Bearer ${token}` } }));
+	if (!response.ok) throw new AuthenticationError(`Could not read organization membership (${response.status}).`);
+	const membership = parseMe(await response.json()).memberships.find((item) => item.code === org);
+	if (membership === void 0) throw new AuthenticationError(`You are not a member of ${org}.`);
+	if (typeof membership.gitEnabled !== "boolean") throw new Error("The membership response has no \"gitEnabled\" flag. Update the Hitch server.");
+	return membership.gitEnabled;
+}
+async function canCheckHitchGit() {
+	if (process.env.GITHUB_ACTIONS === "true") return false;
+	if (process.env.HITCH_API_KEY) return true;
+	const instance = await resolveInstanceUrl();
+	return Object.entries((await readCredentialStore()).instances).some(([url, credentials]) => url === instance && Object.keys(credentials).length > 0);
+}
+export { resolveInstanceUrl as _, loginWithDevice as a, LoginRequiredError as c, normalizeInstanceUrl as d, organizationInstanceUrl as f, resolveAuthForOrg as g, resolveAuth as h, withOrgAuth as i, bearerToken as l, rejectEnvironmentKey as m, fetchWithOrgAuth as n, AuthenticationError as o, readCredentialStore as p, orgUsesHitchGit as r, DEFAULT_INSTANCE_URL as s, canCheckHitchGit as t, deleteCredentials as u, revokeOAuthCredentials as v };

package/dist/{build-FAQSHJgm.js → build-CrrTAX6T.js}

@@ -1,5 +1,5 @@
 import { n as findAppletRoot } from "./workspace-CtIKSgMD.js";
-import { a as prepareAppletProjects, i as prepareAppletProject } from "./project-DZGk765E.js";
+import { a as prepareAppletProjects, i as prepareAppletProject } from "./project-BbpU_VN2.js";
 import { rm } from "node:fs/promises";
 import { resolve } from "node:path";
 import { spawn } from "node:child_process";

package/dist/build-YzjhhLw0.js

@@ -0,0 +1 @@
+export { i as runBuild } from "./build-CrrTAX6T.js";

package/dist/{ci-oWlUJKm9.js → ci-B1XyXpHa.js}

@@ -1,5 +1,5 @@
-import { m as resolveInstanceUrl } from "./store-E5NhITHl.js";
-import { o as userAgent } from "./project-DZGk765E.js";
+import { _ as resolveInstanceUrl } from "./auth-OvyoB6M-.js";
+import { o as userAgent } from "./project-BbpU_VN2.js";
 // src/ci.ts
 function githubActionsContext() {
 	const env = process.env;

package/dist/client/react/markdown.js

@@ -1 +1 @@
-export { t as Markdown } from "../../markdown-BA_XzFxq.js";
+export { t as Markdown } from "../../markdown-DLdJOJ59.js";

package/dist/client/react.js

@@ -1,3 +1,3 @@
-import { t as Markdown } from "../markdown-BA_XzFxq.js";
+import { t as Markdown } from "../markdown-DLdJOJ59.js";
 import { t as MarkdownEditor } from "../markdown-editor-CaUuphfc.js";
 export { Markdown, MarkdownEditor };

package/dist/{deploy-BM55ZoSp.js → deploy-WdARFHmA.js}

@@ -1,13 +1,13 @@
+import { n as fetchWithOrgAuth, r as orgUsesHitchGit, t as canCheckHitchGit } from "./auth-OvyoB6M-.js";
 import { a as findWorkspaceRoot, n as findAppletRoot, o as isRootLayout, r as findParentRoot, s as readWorkspaceConfig } from "./workspace-CtIKSgMD.js";
-import { n as fetchWithOrgAuth, r as orgUsesHitchGit, t as canCheckHitchGit } from "./auth-DuMRqSGe.js";
-import { n as loadAppletSourceDefinition } from "./load-config-Cffvj-aM.js";
-import { i as prepareAppletProject } from "./project-DZGk765E.js";
-import { a as loadGitHubActionsSources, n as githubActionsContext, t as fetchWithGitHubActions } from "./ci-oWlUJKm9.js";
-import { n as buildPreparedApplet, r as prepareWorkspaceBuild, t as buildApplet } from "./build-FAQSHJgm.js";
+import { n as loadAppletSourceDefinition } from "./load-config-Df-zmfrd.js";
+import { i as prepareAppletProject } from "./project-BbpU_VN2.js";
+import { a as loadGitHubActionsSources, n as githubActionsContext, t as fetchWithGitHubActions } from "./ci-B1XyXpHa.js";
+import { n as buildPreparedApplet, r as prepareWorkspaceBuild, t as buildApplet } from "./build-CrrTAX6T.js";
 import { n as gitEnvironment, r as sourceHashes, t as SourceHashUnavailableError } from "./source-hash-BbvtRaus.js";
-import { a as prepareGitDeploy, o as pushStagedCommit, s as refreshHitchMain, t as deployErrorMessage } from "./git-deploy-C12nMNB6.js";
+import { a as prepareGitDeploy, o as pushStagedCommit, s as refreshHitchMain, t as deployErrorMessage } from "./git-deploy-BjSAv5Qm.js";
 import { n as childApplets, r as childHasChanges } from "./parent-Zx8Eg1Ki.js";
-import { n as migrateWorkspace } from "./git-migration-CIq-sN61.js";
+import { n as migrateWorkspace } from "./git-migration-6V31iafL.js";
 import { createRequire } from "node:module";
 import { existsSync } from "node:fs";
 import { readFile, readdir } from "node:fs/promises";

package/dist/{generate-DNgO44RO.js → generate-Ct-Rbh0f.js}

@@ -1,9 +1,8 @@
-import { l as organizationInstanceUrl, m as resolveInstanceUrl } from "./store-E5NhITHl.js";
+import { _ as resolveInstanceUrl, f as organizationInstanceUrl, n as fetchWithOrgAuth } from "./auth-OvyoB6M-.js";
 import { n as findAppletRoot } from "./workspace-CtIKSgMD.js";
-import { n as fetchWithOrgAuth } from "./auth-DuMRqSGe.js";
-import { t as loadAppletConfig } from "./load-config-Cffvj-aM.js";
-import { i as prepareAppletProject, o as userAgent } from "./project-DZGk765E.js";
-import { i as loadGitHubActionsBuildInputs, n as githubActionsContext, r as hitchResponseError } from "./ci-oWlUJKm9.js";
+import { t as loadAppletConfig } from "./load-config-Df-zmfrd.js";
+import { i as prepareAppletProject, o as userAgent } from "./project-BbpU_VN2.js";
+import { i as loadGitHubActionsBuildInputs, n as githubActionsContext, r as hitchResponseError } from "./ci-B1XyXpHa.js";
 import { createRequire } from "node:module";
 import { isContractProcedure, minifyContractRouter } from "@orpc/contract";
 import { randomUUID } from "node:crypto";

package/dist/generate-_u-zFzrv.js

@@ -0,0 +1 @@
+export { r as runGenerate } from "./generate-Ct-Rbh0f.js";

package/dist/{git-credential-CU7-Erzs.js → git-credential-DuLNowIb.js}

@@ -1,4 +1,4 @@
-import { l as organizationInstanceUrl, p as resolveAuthForOrg, r as LoginRequiredError, t as AuthenticationError } from "./store-E5NhITHl.js";
+import { c as LoginRequiredError, f as organizationInstanceUrl, g as resolveAuthForOrg, o as AuthenticationError } from "./auth-OvyoB6M-.js";
 // src/git-credential.ts
 function parseGitCredentialHost(input, instanceUrl) {
 	const host = input.split(/\r?\n/).find((line) => line.startsWith("host="))?.slice(5);

package/dist/{git-deploy-C12nMNB6.js → git-deploy-BjSAv5Qm.js}

@@ -1,6 +1,5 @@
-import { m as resolveInstanceUrl } from "./store-E5NhITHl.js";
+import { _ as resolveInstanceUrl, i as withOrgAuth } from "./auth-OvyoB6M-.js";
 import { a as findWorkspaceRoot, o as isRootLayout, r as findParentRoot, t as SDK_VERSION_PATTERN } from "./workspace-CtIKSgMD.js";
-import { i as withOrgAuth } from "./auth-DuMRqSGe.js";
 import { n as ORG_CODE_PATTERN, t as APPLET_CODE_PATTERN } from "./manifest-patterns-BfxqImlp.js";
 import { n as gitEnvironment } from "./source-hash-BbvtRaus.js";
 import { n as stagedSecretPaths, t as StagedSecretsError } from "./git-safety-Ck3X7jvA.js";

package/dist/git-deploy-CByu_uli.js

@@ -0,0 +1 @@
+export { c as runClone } from "./git-deploy-BjSAv5Qm.js";

package/dist/{git-migration-CIq-sN61.js → git-migration-6V31iafL.js}

@@ -1,8 +1,8 @@
 import { n as generatedAgentContents, r as writeGeneratedAgents } from "./generated-agents-BUnJ0FQA.js";
+import { r as orgUsesHitchGit, t as canCheckHitchGit } from "./auth-OvyoB6M-.js";
 import { a as findWorkspaceRoot, n as findAppletRoot, o as isRootLayout, s as readWorkspaceConfig } from "./workspace-CtIKSgMD.js";
-import { r as orgUsesHitchGit, t as canCheckHitchGit } from "./auth-DuMRqSGe.js";
-import { n as loadAppletSourceDefinition } from "./load-config-Cffvj-aM.js";
-import { c as writeGitignore, r as loadPackageManifest } from "./project-DZGk765E.js";
+import { n as loadAppletSourceDefinition } from "./load-config-Df-zmfrd.js";
+import { c as writeGitignore, r as loadPackageManifest } from "./project-BbpU_VN2.js";
 import { n as stagedSecretPaths, t as StagedSecretsError } from "./git-safety-Ck3X7jvA.js";
 import { o as gitLocal } from "./parent-Zx8Eg1Ki.js";
 import fs from "node:fs";

package/dist/{init-BD5mC_9L.js → init-C5HqIRt8.js}

@@ -1,13 +1,12 @@
 import { r as writeGeneratedAgents } from "./generated-agents-BUnJ0FQA.js";
-import { f as resolveAuth, m as resolveInstanceUrl, p as resolveAuthForOrg } from "./store-E5NhITHl.js";
+import { _ as resolveInstanceUrl, g as resolveAuthForOrg, h as resolveAuth, r as orgUsesHitchGit, t as canCheckHitchGit } from "./auth-OvyoB6M-.js";
 import { a as findWorkspaceRoot, i as findWorkspaceConfig, o as isRootLayout, r as findParentRoot, s as readWorkspaceConfig } from "./workspace-CtIKSgMD.js";
-import { r as orgUsesHitchGit, t as canCheckHitchGit } from "./auth-DuMRqSGe.js";
-import { n as loadAppletSourceDefinition } from "./load-config-Cffvj-aM.js";
-import { r as runGenerate } from "./generate-DNgO44RO.js";
+import { n as loadAppletSourceDefinition } from "./load-config-Df-zmfrd.js";
+import { r as runGenerate } from "./generate-Ct-Rbh0f.js";
 import { n as ORG_CODE_PATTERN, t as APPLET_CODE_PATTERN } from "./manifest-patterns-BfxqImlp.js";
-import { l as writeRootSupport, n as loadCliManifest, r as loadPackageManifest, s as writeAppletSupport, t as assertWorkspaceCli, u as writeWorkspaceSupport } from "./project-DZGk765E.js";
+import { l as writeRootSupport, n as loadCliManifest, r as loadPackageManifest, s as writeAppletSupport, t as assertWorkspaceCli, u as writeWorkspaceSupport } from "./project-BbpU_VN2.js";
 import { n as childApplets } from "./parent-Zx8Eg1Ki.js";
-import { t as migrateIfEnabled } from "./git-migration-CIq-sN61.js";
+import { t as migrateIfEnabled } from "./git-migration-6V31iafL.js";
 import { access, cp, mkdir, readdir, writeFile } from "node:fs/promises";
 import { relative, resolve } from "node:path";
 import { spawn } from "node:child_process";

package/dist/{load-config-Cffvj-aM.js → load-config-Df-zmfrd.js}

@@ -1,3 +1,4 @@
+import "./auth-OvyoB6M-.js";
 import { c as validateRootManifest, i as findWorkspaceConfig, n as findAppletRoot, o as isRootLayout } from "./workspace-CtIKSgMD.js";
 import { n as ORG_CODE_PATTERN, t as APPLET_CODE_PATTERN } from "./manifest-patterns-BfxqImlp.js";
 import { z } from "zod";

package/dist/{login-BWZKo7Ui.js → login-B41-WWtD.js}

@@ -1,5 +1,4 @@
-import { c as normalizeInstanceUrl, h as revokeOAuthCredentials, m as resolveInstanceUrl, s as deleteCredentials, t as AuthenticationError, u as readCredentialStore } from "./store-E5NhITHl.js";
-import { t as loginWithDevice } from "./device-CZWWckCq.js";
+import { _ as resolveInstanceUrl, a as loginWithDevice, d as normalizeInstanceUrl, o as AuthenticationError, p as readCredentialStore, u as deleteCredentials, v as revokeOAuthCredentials } from "./auth-OvyoB6M-.js";
 import { i as findWorkspaceConfig } from "./workspace-CtIKSgMD.js";
 // src/login.ts
 async function runLogin(options) {

package/dist/{logs-glCVHI-8.js → logs-DrL2ytmg.js}

@@ -1,6 +1,6 @@
+import { n as fetchWithOrgAuth } from "./auth-OvyoB6M-.js";
 import { s as readWorkspaceConfig } from "./workspace-CtIKSgMD.js";
-import { n as fetchWithOrgAuth } from "./auth-DuMRqSGe.js";
-import { o as resolveWorkspaceOrg, t as loadAppletConfig } from "./load-config-Cffvj-aM.js";
+import { o as resolveWorkspaceOrg, t as loadAppletConfig } from "./load-config-Df-zmfrd.js";
 import { t as APPLET_CODE_PATTERN } from "./manifest-patterns-BfxqImlp.js";
 import { z } from "zod";
 // src/logs.ts

package/dist/{markdown-BA_XzFxq.js → markdown-DLdJOJ59.js}

@@ -70,6 +70,7 @@ function HitchImage({ src, alt, files, node: _node, ...props }) {
 		}
 	});
 }
+const LINK_SAFETY = { enabled: false };
 function Markdown({ children, files, className }) {
 	const rehypePlugins = useMemo(withHitchFileProtocol, []);
 	const components = useMemo(() => ({ img: (props) => /* @__PURE__ */ jsx(HitchImage, {
@@ -79,6 +80,7 @@ function Markdown({ children, files, className }) {
 	return /* @__PURE__ */ jsx(Streamdown, {
 		className,
 		components,
+		linkSafety: LINK_SAFETY,
 		rehypePlugins,
 		urlTransform: (url, key, node) => url.startsWith("hitch-file://") ? url : defaultUrlTransform(url, key, node),
 		children

package/dist/{project-DZGk765E.js → project-BbpU_VN2.js}

@@ -1,7 +1,7 @@
 import { r as writeGeneratedAgents, t as GENERATED_SKILLS } from "./generated-agents-BUnJ0FQA.js";
-import { l as organizationInstanceUrl, n as DEFAULT_INSTANCE_URL } from "./store-E5NhITHl.js";
+import { f as organizationInstanceUrl, s as DEFAULT_INSTANCE_URL } from "./auth-OvyoB6M-.js";
 import { a as findWorkspaceRoot, n as findAppletRoot, o as isRootLayout, s as readWorkspaceConfig } from "./workspace-CtIKSgMD.js";
-import { n as loadAppletSourceDefinition, r as appletMountPath } from "./load-config-Cffvj-aM.js";
+import { n as loadAppletSourceDefinition, r as appletMountPath } from "./load-config-Df-zmfrd.js";
 import { z } from "zod";
 import { existsSync } from "node:fs";
 import { cp, mkdir, readFile, readdir, rm, writeFile } from "node:fs/promises";

package/dist/{schedules-CSUb84e2.js → schedules-2Q_fkY_a.js}

@@ -1,5 +1,5 @@
 import { n as findAppletRoot } from "./workspace-CtIKSgMD.js";
-import { t as loadAppletConfig } from "./load-config-Cffvj-aM.js";
+import { t as loadAppletConfig } from "./load-config-Df-zmfrd.js";
 import { t as question } from "./prompt-CW98R-Un.js";
 import { RPCLink } from "@orpc/client/fetch";
 import { readFile } from "node:fs/promises";

package/dist/{variables-CgZstC7I.js → variables-CGwbmUom.js}

@@ -1,5 +1,5 @@
-import { n as fetchWithOrgAuth } from "./auth-DuMRqSGe.js";
-import { t as loadAppletConfig } from "./load-config-Cffvj-aM.js";
+import { n as fetchWithOrgAuth } from "./auth-OvyoB6M-.js";
+import { t as loadAppletConfig } from "./load-config-Df-zmfrd.js";
 import { t as question } from "./prompt-CW98R-Un.js";
 import { z } from "zod";
 // src/variables.ts

package/dist/vite.js

@@ -3,10 +3,10 @@ import { a as openQueryCacheDatabase } from "./query-cache-DQJy45RT.js";
 import { d as HITCH_SESSION_HEADER, f as HITCH_USER_HEADER } from "./headers-BcEMIVCo.js";
 import { a as workflowOutcomeSchema, n as runWorkflowJournal } from "./workflow-engine-CyyaVENo.js";
 import { r as writeGeneratedAgents } from "./generated-agents-BUnJ0FQA.js";
-import { d as rejectEnvironmentKey, i as bearerToken, l as organizationInstanceUrl, m as resolveInstanceUrl, p as resolveAuthForOrg } from "./store-E5NhITHl.js";
+import { _ as resolveInstanceUrl, f as organizationInstanceUrl, g as resolveAuthForOrg, l as bearerToken, m as rejectEnvironmentKey } from "./auth-OvyoB6M-.js";
 import { c as validateRootManifest, o as isRootLayout } from "./workspace-CtIKSgMD.js";
-import { a as appletSourceDefinitionSchema, i as appletReleaseManifest, o as resolveWorkspaceOrg, r as appletMountPath } from "./load-config-Cffvj-aM.js";
-import { a as writeRegisterDeclaration, c as writeAppletRoot, d as writeServerEntry, i as syncContract, l as writeClientEntry, n as routesModuleSource, u as writeManifestGen } from "./generate-DNgO44RO.js";
+import { a as appletSourceDefinitionSchema, i as appletReleaseManifest, o as resolveWorkspaceOrg, r as appletMountPath } from "./load-config-Df-zmfrd.js";
+import { a as writeRegisterDeclaration, c as writeAppletRoot, d as writeServerEntry, i as syncContract, l as writeClientEntry, n as routesModuleSource, u as writeManifestGen } from "./generate-Ct-Rbh0f.js";
 import { t as APPLET_CODE_PATTERN } from "./manifest-patterns-BfxqImlp.js";
 import { z } from "zod";
 import { randomUUID } from "node:crypto";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hitch42/applet",
-  "version": "0.1.1-beta.22",
+  "version": "0.1.1-beta.23",
   "license": "MIT",
   "bin": {
     "applet": "./dist/applet.js"
@@ -13,7 +13,8 @@
   ],
   "type": "module",
   "sideEffects": [
-    "*.css"
+    "*.css",
+    "./src/auth.ts"
   ],
   "exports": {
     ".": {
@@ -55,10 +56,10 @@
     }
   },
   "dependencies": {
-    "@cloudflare/vite-plugin": "^1.51.1",
+    "@cloudflare/vite-plugin": "^1.66.0",
     "@fontsource-variable/geist-mono": "^5.3.0",
     "@fontsource-variable/inter": "^5.3.0",
-    "@hey-api/openapi-ts": "0.0.0-next-20260824173136",
+    "@hey-api/openapi-ts": "0.0.0-next-20260930190945",
     "@napi-rs/keyring": "2.1.2",
     "@orpc/client": "^1.15.0",
     "@orpc/contract": "^1.15.0",
@@ -67,8 +68,8 @@
     "@react-aria/optimize-locales-plugin": "^2.1.0",
     "@tailwindcss/vite": "^4.3.0",
     "@tanstack/react-query-persist-client": "5.101.4",
-    "@tanstack/router-cli": "^1.167.24",
-    "@tanstack/router-plugin": "^1.168.23",
+    "@tanstack/router-cli": "^1.167.46",
+    "@tanstack/router-plugin": "^1.168.48",
     "@telnyx/webrtc": "^2.27.10",
     "@tiptap/core": "^3.30.3",
     "@tiptap/extension-image": "^3.30.3",
@@ -101,7 +102,7 @@
   "peerDependencies": {
     "@orpc/server": "^1.15.0",
     "@tanstack/react-query": "5.101.4",
-    "@tanstack/react-router": "^1.170.18",
+    "@tanstack/react-router": "^1.170.46",
     "@types/node": "^24",
     "@types/react": "^19.2.0",
     "@types/react-dom": "^19.2.0",

package/dist/auth-DuMRqSGe.js

@@ -1,49 +0,0 @@
-import { a as configureKeyring, d as rejectEnvironmentKey, i as bearerToken, l as organizationInstanceUrl, m as resolveInstanceUrl, p as resolveAuthForOrg, r as LoginRequiredError, t as AuthenticationError, u as readCredentialStore } from "./store-E5NhITHl.js";
-import { n as parseMe, t as loginWithDevice } from "./device-CZWWckCq.js";
-import "./workspace-CtIKSgMD.js";
-import { Entry, findCredentials } from "@napi-rs/keyring";
-// src/auth.ts
-configureKeyring(Entry, findCredentials);
-async function fetchWithOrgAuth(orgCode, request) {
-	return withOrgAuth(orgCode, async (organizationUrl, accessToken) => {
-		const response = await request(organizationUrl, accessToken);
-		return {
-			response,
-			unauthorized: response.status === 401
-		};
-	}).then(({ response }) => response);
-}
-async function withOrgAuth(orgCode, request) {
-	const instanceUrl = await resolveInstanceUrl();
-	const organizationUrl = organizationInstanceUrl(instanceUrl, orgCode);
-	const auth = await resolveAuthForOrg(instanceUrl, orgCode).catch((error) => {
-		if (error instanceof LoginRequiredError && process.stdin.isTTY === true) return void 0;
-		throw error;
-	});
-	if (auth !== void 0) {
-		const result = await request(organizationUrl, bearerToken(auth));
-		if ("response" in result && result.response instanceof Response) rejectEnvironmentKey(result.response, auth);
-		if (!result.unauthorized) return result;
-		if (auth.source === "environment") throw new AuthenticationError("HITCH_API_KEY was rejected.");
-	}
-	if (process.stdin.isTTY !== true) throw new LoginRequiredError();
-	await loginWithDevice(instanceUrl, { expectedOrg: orgCode });
-	const credentials = await resolveAuthForOrg(instanceUrl, orgCode);
-	if (credentials === void 0) throw new Error(`login did not provide credentials for organization "${orgCode}"`);
-	return request(organizationUrl, bearerToken(credentials));
-}
-async function orgUsesHitchGit(org) {
-	const response = await fetchWithOrgAuth(org, (organizationUrl, token) => fetch(`${organizationUrl}/api/me/v1`, { headers: { Authorization: `Bearer ${token}` } }));
-	if (!response.ok) throw new AuthenticationError(`Could not read organization membership (${response.status}).`);
-	const membership = parseMe(await response.json()).memberships.find((item) => item.code === org);
-	if (membership === void 0) throw new AuthenticationError(`You are not a member of ${org}.`);
-	if (typeof membership.gitEnabled !== "boolean") throw new Error("The membership response has no \"gitEnabled\" flag. Update the Hitch server.");
-	return membership.gitEnabled;
-}
-async function canCheckHitchGit() {
-	if (process.env.GITHUB_ACTIONS === "true") return false;
-	if (process.env.HITCH_API_KEY) return true;
-	const instance = await resolveInstanceUrl();
-	return Object.entries((await readCredentialStore()).instances).some(([url, credentials]) => url === instance && Object.keys(credentials).length > 0);
-}
-export { withOrgAuth as i, fetchWithOrgAuth as n, orgUsesHitchGit as r, canCheckHitchGit as t };

package/dist/build-C7hi2yg4.js

@@ -1 +0,0 @@
-export { i as runBuild } from "./build-FAQSHJgm.js";

package/dist/device-CZWWckCq.js

@@ -1,155 +0,0 @@
-import { c as normalizeInstanceUrl, d as rejectEnvironmentKey, g as saveOAuthCredentials, l as organizationInstanceUrl, o as credentialStorageMessage, t as AuthenticationError, u as readCredentialStore } from "./store-E5NhITHl.js";
-import { spawn } from "node:child_process";
-import readline from "node:readline/promises";
-// ../shared/auth/src/device.mts
-const CLIENT_ID = "hitch-cli-oauth";
-const DEVICE_GRANT = "urn:ietf:params:oauth:grant-type:device_code";
-function defaultOpenUrl(url) {
-	try {
-		const child = spawn(process.platform === "darwin" ? "open" : "xdg-open", [url], {
-			detached: true,
-			stdio: "ignore"
-		});
-		child.on("error", () => void 0);
-		child.unref();
-	} catch {}
-}
-function requiredObject(value, message) {
-	if (value === null || typeof value !== "object" || Array.isArray(value)) throw new Error(message);
-	return value;
-}
-async function jsonResponse(response) {
-	try {
-		return requiredObject(await response.json(), "Expected a JSON object response.");
-	} catch (error) {
-		throw new Error(`Invalid JSON response from ${response.url || "Hitch"}.`, { cause: error });
-	}
-}
-async function postJson(fetcher, url, body) {
-	const response = await fetcher(url, {
-		method: "POST",
-		headers: { "content-type": "application/json" },
-		body: JSON.stringify(body)
-	});
-	return {
-		body: await jsonResponse(response),
-		response
-	};
-}
-function parseDeviceCode(value) {
-	if (typeof value.device_code !== "string" || typeof value.user_code !== "string" || typeof value.verification_uri !== "string" || typeof value.verification_uri_complete !== "string" || typeof value.expires_in !== "number" || value.interval !== void 0 && typeof value.interval !== "number") throw new AuthenticationError("Hitch returned an invalid device authorization response.");
-	return value;
-}
-function parseToken(value) {
-	return typeof value.access_token === "string" && typeof value.refresh_token === "string" && typeof value.expires_in === "number" && typeof value.token_type === "string" ? value : void 0;
-}
-function parseMe(input) {
-	const value = requiredObject(input, "Hitch returned an invalid identity response.");
-	const person = requiredObject(value.person, "Hitch returned an invalid identity response.");
-	if (typeof person.id !== "string" || typeof person.firstName !== "string" || typeof person.lastName !== "string" || typeof person.email !== "string" || !Array.isArray(value.memberships)) throw new Error("Hitch returned an invalid identity response.");
-	const organization = value.organization === void 0 || value.organization === null ? null : requiredObject(value.organization, "Hitch returned an invalid identity response.");
-	if (organization !== null && (typeof organization.id !== "string" || typeof organization.code !== "string")) throw new Error("Hitch returned an invalid identity response.");
-	return {
-		memberships: value.memberships.map((membership) => {
-			const item = requiredObject(membership, "Hitch returned an invalid membership.");
-			if (typeof item.orgId !== "string" || typeof item.code !== "string" || typeof item.name !== "string") throw new Error("Hitch returned an invalid membership.");
-			return item;
-		}),
-		organization,
-		person
-	};
-}
-async function fetchMe(fetcher, instanceUrl, auth) {
-	const response = await fetcher(`${instanceUrl}/api/me/v1`, { headers: { Authorization: `Bearer ${auth.accessToken}` } });
-	rejectEnvironmentKey(response, auth);
-	if (auth.credentialType === "apiKey" && response.status === 401) throw new AuthenticationError("API key rejected.");
-	const body = await jsonResponse(response);
-	if (!response.ok) throw new AuthenticationError(typeof body.message === "string" ? body.message : `Failed to load the signed-in identity (${response.status}).`);
-	return parseMe(body);
-}
-async function pollForToken(fetcher, instanceUrl, resource, device, now, sleep) {
-	const deadline = now() + device.expires_in * 1e3;
-	let interval = (device.interval ?? 5) * 1e3;
-	while (now() < deadline) {
-		await sleep(Math.min(interval, deadline - now()));
-		if (now() >= deadline) break;
-		const response = await fetcher(`${instanceUrl}/api/auth/oauth2/token`, {
-			method: "POST",
-			headers: { "content-type": "application/x-www-form-urlencoded" },
-			body: new URLSearchParams({
-				grant_type: DEVICE_GRANT,
-				device_code: device.device_code,
-				client_id: CLIENT_ID,
-				resource
-			})
-		});
-		const body = await jsonResponse(response);
-		const token = parseToken(body);
-		if (response.ok && token !== void 0) return token;
-		switch (body.error) {
-			case "authorization_pending": break;
-			case "slow_down":
-				interval += 5e3;
-				break;
-			case "expired_token": throw new AuthenticationError("The sign-in request expired. Run hitch login again.");
-			case "access_denied": throw new AuthenticationError("Sign-in was denied.");
-			default: throw new AuthenticationError(typeof body.error_description === "string" ? body.error_description : `Sign-in failed (${response.status}).`);
-		}
-	}
-	throw new AuthenticationError("The sign-in request expired. Run hitch login again.");
-}
-async function loginWithDevice(instanceUrl, options = {}) {
-	const fetcher = globalThis.fetch;
-	const now = Date.now;
-	const storedOrgs = Object.keys((await readCredentialStore()).instances[normalizeInstanceUrl(instanceUrl)] ?? {});
-	let orgCode = options.expectedOrg ?? process.env.HITCH_DEFAULT_ORG ?? (storedOrgs.length === 1 ? storedOrgs[0] : void 0);
-	if (orgCode === void 0 && process.stdin.isTTY === true) {
-		const terminal = readline.createInterface({
-			input: process.stdin,
-			output: process.stdout
-		});
-		try {
-			orgCode = (await terminal.question("Organization code: ")).trim();
-		} finally {
-			terminal.close();
-		}
-	}
-	if (!orgCode) throw new AuthenticationError("Select an organization with --org or HITCH_DEFAULT_ORG.");
-	const organizationUrl = organizationInstanceUrl(instanceUrl, orgCode);
-	const resource = `${organizationUrl}/mcp`;
-	const { body, response } = await postJson(fetcher, `${instanceUrl}/api/auth/device/code`, {
-		client_id: CLIENT_ID,
-		scope: "openid offline_access",
-		resource
-	});
-	if (!response.ok) throw new AuthenticationError(typeof body.error_description === "string" ? body.error_description : `Could not start sign-in (${response.status}).`);
-	const device = parseDeviceCode(body);
-	const verificationUrl = device.verification_uri_complete;
-	console.log(`Open ${verificationUrl} and confirm code ${device.user_code}.`);
-	if (!options.noBrowser) try {
-		defaultOpenUrl(verificationUrl);
-	} catch {}
-	const token = await pollForToken(fetcher, instanceUrl, resource, device, now, (milliseconds) => new Promise((resolve) => setTimeout(resolve, milliseconds)));
-	const me = await fetchMe(fetcher, organizationUrl, {
-		accessToken: token.access_token,
-		credentialType: "session",
-		source: "store"
-	});
-	const membership = me.memberships.find(({ code }) => code === orgCode);
-	if (membership === void 0) throw new AuthenticationError(`You are not a member of the Hitch organization "${orgCode}".`);
-	const credentials = await saveOAuthCredentials(instanceUrl, {
-		type: "oauth",
-		accessToken: token.access_token,
-		expiresAt: now() + token.expires_in * 1e3,
-		organizationId: membership.orgId,
-		orgCode
-	}, token.refresh_token);
-	const storageMessage = credentialStorageMessage();
-	if (storageMessage !== void 0) console.log(storageMessage);
-	return {
-		credentials,
-		me,
-		membership
-	};
-}
-export { parseMe as n, loginWithDevice as t };

package/dist/generate-DG9vVkBO.js

@@ -1 +0,0 @@
-export { r as runGenerate } from "./generate-DNgO44RO.js";

package/dist/git-deploy-CNz6mxiF.js

@@ -1 +0,0 @@
-export { c as runClone } from "./git-deploy-C12nMNB6.js";