@hitch42/applet 0.1.1-beta.23 → 0.1.1-beta.24

package/dist/applet.js

@@ -76,7 +76,7 @@ async function main() {
 	if (process.argv[2] === "git-credential") {
 		const args = process.argv.slice(3);
 		if (args[0] !== "--instance" || args.length !== 3) throw new Error("Use applet git-credential --instance <url> <get|store|erase>.");
-		await (await import("./git-credential-DuLNowIb.js")).runGitCredential(args[2] ?? "", args[1]);
+		await (await import("./git-credential-CK0sHQ5a.js")).runGitCredential(args[2] ?? "", args[1]);
 		return;
 	}
 	const { positionals, values } = parseArgs({
@@ -109,19 +109,19 @@ async function main() {
 		strict: true
 	});
 	if ((positionals.length === 2 || positionals.length === 3) && positionals[0] === "clone" && Object.keys(values).every((key) => key === "message")) {
-		await (await import("./git-deploy-CByu_uli.js")).runClone(positionals[1], positionals[2], values.message);
+		await (await import("./git-deploy-CCVbXqbO.js")).runClone(positionals[1], positionals[2], values.message);
 		return;
 	}
 	if (positionals.length === 1 && positionals[0] === "logout" && Object.keys(values).length === 0) {
-		await (await import("./login-B41-WWtD.js")).runLogout();
+		await (await import("./login-ChKZbUOt.js")).runLogout();
 		return;
 	}
 	if (positionals.length === 1 && positionals[0] === "login" && Object.keys(values).every((key) => key === "no-browser")) {
-		await (await import("./login-B41-WWtD.js")).runLogin({ noBrowser: values["no-browser"] });
+		await (await import("./login-ChKZbUOt.js")).runLogin({ noBrowser: values["no-browser"] });
 		return;
 	}
 	if (positionals.length === 1 && positionals[0] === "parent" && Object.keys(values).length === 0) {
-		await (await import("./parent-D52Kxp8U.js")).runParent();
+		await (await import("./parent-QxKvaC2E.js")).runParent();
 		return;
 	}
 	if (values["no-browser"] !== void 0) throw new Error(usage);
@@ -130,33 +130,33 @@ async function main() {
 	const noLogFlags = values.run === void 0 && values.filter === void 0 && values.level === void 0 && values.limit === void 0 && values.live === void 0 && values.search === void 0 && values.since === void 0;
 	const noModeFlags = values["client-only"] === void 0 && values["server-only"] === void 0;
 	if (positionals.length === 1 && positionals[0] === "bootstrap" && noModeFlags && noGitFlags && noVariableFlags && noLogFlags && values.dist === void 0) {
-		await (await import("./init-C5HqIRt8.js")).runBootstrap({
+		await (await import("./init-CAyEoy4P.js")).runBootstrap({
 			message: values.message,
 			install: values["no-install"] !== true
 		});
 		return;
 	}
 	if (positionals.length === 1 && positionals[0] === "generate" && values["no-install"] === void 0 && noModeFlags && noGitFlags && noVariableFlags && noLogFlags && values.message === void 0 && values.dist === void 0) {
-		await (await import("./generate-_u-zFzrv.js")).runGenerate();
+		await (await import("./generate-cwMuaQE9.js")).runGenerate();
 		return;
 	}
 	if (positionals.length === 1 && positionals[0] === "build" && values["no-install"] === void 0 && noModeFlags && noGitFlags && noVariableFlags && noLogFlags && values.message === void 0 && values.dist === void 0) {
-		await (await import("./build-YzjhhLw0.js")).runBuild();
+		await (await import("./build-C3LFcX0i.js")).runBuild();
 		return;
 	}
 	if (positionals.length === 1 && positionals[0] === "deploy" && values["no-install"] === void 0 && noModeFlags && noGitFlags && noVariableFlags && noLogFlags) {
-		await (await import("./deploy-WdARFHmA.js")).runDeploy({
+		await (await import("./deploy-oCP6VmLT.js")).runDeploy({
 			message: values.message,
 			dist: values.dist
 		});
 		return;
 	}
 	if (positionals.length === 2 && positionals[0] === "rollback" && values.message === void 0 && values.dist === void 0 && values["no-install"] === void 0 && noModeFlags && noGitFlags && noVariableFlags && noLogFlags) {
-		await (await import("./deploy-WdARFHmA.js")).runRollback(positionals[1]);
+		await (await import("./deploy-oCP6VmLT.js")).runRollback(positionals[1]);
 		return;
 	}
 	if (positionals.length === 2 && positionals[0] === "init" && noModeFlags && noVariableFlags && noLogFlags) {
-		await (await import("./init-C5HqIRt8.js")).runInit(positionals[1], {
+		await (await import("./init-CAyEoy4P.js")).runInit(positionals[1], {
 			commit: values["no-commit"] !== true,
 			git: values["no-git"] !== true,
 			install: values["no-install"] !== true
@@ -164,7 +164,7 @@ async function main() {
 		return;
 	}
 	if (positionals.length === 2 && positionals[0] === "new" && noGitFlags && noVariableFlags && noLogFlags) {
-		await (await import("./init-C5HqIRt8.js")).runNew({
+		await (await import("./init-CAyEoy4P.js")).runNew({
 			code: positionals[1],
 			message: values.message,
 			clientOnly: values["client-only"],
@@ -174,7 +174,7 @@ async function main() {
 		return;
 	}
 	if ((positionals.length === 1 || positionals.length === 2) && positionals[0] === "logs" && values["no-install"] === void 0 && noModeFlags && noGitFlags && noVariableFlags) {
-		await (await import("./logs-DrL2ytmg.js")).runLogs({
+		await (await import("./logs-C4QXSsBW.js")).runLogs({
 			code: positionals[1],
 			filter: values.filter,
 			run: values.run,
@@ -187,14 +187,14 @@ async function main() {
 		return;
 	}
 	if (positionals.length === 3 && positionals[0] === "schedules" && positionals[1] === "run" && values["no-install"] === void 0 && noModeFlags && noGitFlags && noLogFlags && values.secret === void 0) {
-		await (await import("./schedules-2Q_fkY_a.js")).runSchedule({
+		await (await import("./schedules-CThe3MC1.js")).runSchedule({
 			code: positionals[2],
 			yes: values.yes
 		});
 		return;
 	}
 	if ((positionals.length === 3 || positionals.length === 4) && positionals[0] === "variables" && positionals[1] === "set" && values["no-install"] === void 0 && noModeFlags && noGitFlags && noLogFlags) {
-		await (await import("./variables-CGwbmUom.js")).runVariablesSet({
+		await (await import("./variables-Cpd05u5N.js")).runVariablesSet({
 			key: positionals[2],
 			secret: values.secret,
 			value: positionals[3],
@@ -203,11 +203,11 @@ async function main() {
 		return;
 	}
 	if (positionals.length === 2 && positionals[0] === "variables" && positionals[1] === "list" && values["no-install"] === void 0 && noModeFlags && noGitFlags && noVariableFlags && noLogFlags) {
-		await (await import("./variables-CGwbmUom.js")).runVariablesList();
+		await (await import("./variables-Cpd05u5N.js")).runVariablesList();
 		return;
 	}
 	if (positionals.length === 3 && positionals[0] === "variables" && positionals[1] === "delete" && values["no-install"] === void 0 && noModeFlags && noGitFlags && values.secret === void 0 && noLogFlags) {
-		await (await import("./variables-CGwbmUom.js")).runVariablesDelete({
+		await (await import("./variables-Cpd05u5N.js")).runVariablesDelete({
 			key: positionals[2],
 			yes: values.yes
 		});

package/dist/auth-DGCFAqPX.js

@@ -0,0 +1,47 @@
+import { c as organizationInstanceUrl, f as resolveAuthForOrg, i as bearerToken, l as readCredentialStore, p as resolveInstanceUrl, r as LoginRequiredError, t as AuthenticationError, u as rejectEnvironmentKey } from "./store-Dq9l7Qmw.js";
+import { n as parseMe, t as loginWithDevice } from "./device-CcsD_wOD.js";
+import "./workspace-BRRW36wG.js";
+// src/auth.ts
+async function fetchWithOrgAuth(orgCode, request) {
+	return withOrgAuth(orgCode, async (organizationUrl, accessToken) => {
+		const response = await request(organizationUrl, accessToken);
+		return {
+			response,
+			unauthorized: response.status === 401
+		};
+	}).then(({ response }) => response);
+}
+async function withOrgAuth(orgCode, request) {
+	const instanceUrl = await resolveInstanceUrl();
+	const organizationUrl = organizationInstanceUrl(instanceUrl, orgCode);
+	const auth = await resolveAuthForOrg(instanceUrl, orgCode).catch((error) => {
+		if (error instanceof LoginRequiredError && process.stdin.isTTY === true) return void 0;
+		throw error;
+	});
+	if (auth !== void 0) {
+		const result = await request(organizationUrl, bearerToken(auth));
+		if ("response" in result && result.response instanceof Response) rejectEnvironmentKey(result.response, auth);
+		if (!result.unauthorized) return result;
+		if (auth.source === "environment") throw new AuthenticationError("HITCH_API_KEY was rejected.");
+	}
+	if (process.stdin.isTTY !== true) throw new LoginRequiredError();
+	await loginWithDevice(instanceUrl, { expectedOrg: orgCode });
+	const credentials = await resolveAuthForOrg(instanceUrl, orgCode);
+	if (credentials === void 0) throw new Error(`login did not provide credentials for organization "${orgCode}"`);
+	return request(organizationUrl, bearerToken(credentials));
+}
+async function orgUsesHitchGit(org) {
+	const response = await fetchWithOrgAuth(org, (organizationUrl, token) => fetch(`${organizationUrl}/api/me/v1`, { headers: { Authorization: `Bearer ${token}` } }));
+	if (!response.ok) throw new AuthenticationError(`Could not read organization membership (${response.status}).`);
+	const membership = parseMe(await response.json()).memberships.find((item) => item.code === org);
+	if (membership === void 0) throw new AuthenticationError(`You are not a member of ${org}.`);
+	if (typeof membership.gitEnabled !== "boolean") throw new Error("The membership response has no \"gitEnabled\" flag. Update the Hitch server.");
+	return membership.gitEnabled;
+}
+async function canCheckHitchGit() {
+	if (process.env.GITHUB_ACTIONS === "true") return false;
+	if (process.env.HITCH_API_KEY) return true;
+	const instance = await resolveInstanceUrl();
+	return Object.entries((await readCredentialStore()).instances).some(([url, credentials]) => url === instance && Object.keys(credentials).length > 0);
+}
+export { withOrgAuth as i, fetchWithOrgAuth as n, orgUsesHitchGit as r, canCheckHitchGit as t };

package/dist/build-C3LFcX0i.js

@@ -0,0 +1 @@
+export { i as runBuild } from "./build-Cnh7Owss.js";

package/dist/{build-CrrTAX6T.js → build-Cnh7Owss.js}

@@ -1,5 +1,5 @@
-import { n as findAppletRoot } from "./workspace-CtIKSgMD.js";
-import { a as prepareAppletProjects, i as prepareAppletProject } from "./project-BbpU_VN2.js";
+import { n as findAppletRoot } from "./workspace-BRRW36wG.js";
+import { a as prepareAppletProjects, i as prepareAppletProject } from "./project-BRwNCUCi.js";
 import { rm } from "node:fs/promises";
 import { resolve } from "node:path";
 import { spawn } from "node:child_process";

package/dist/{ci-B1XyXpHa.js → ci-PuUsFgnN.js}

@@ -1,5 +1,5 @@
-import { _ as resolveInstanceUrl } from "./auth-OvyoB6M-.js";
-import { o as userAgent } from "./project-BbpU_VN2.js";
+import { p as resolveInstanceUrl } from "./store-Dq9l7Qmw.js";
+import { o as userAgent } from "./project-BRwNCUCi.js";
 // src/ci.ts
 function githubActionsContext() {
 	const env = process.env;

package/dist/{deploy-WdARFHmA.js → deploy-oCP6VmLT.js}

@@ -1,13 +1,13 @@
-import { n as fetchWithOrgAuth, r as orgUsesHitchGit, t as canCheckHitchGit } from "./auth-OvyoB6M-.js";
-import { a as findWorkspaceRoot, n as findAppletRoot, o as isRootLayout, r as findParentRoot, s as readWorkspaceConfig } from "./workspace-CtIKSgMD.js";
-import { n as loadAppletSourceDefinition } from "./load-config-Df-zmfrd.js";
-import { i as prepareAppletProject } from "./project-BbpU_VN2.js";
-import { a as loadGitHubActionsSources, n as githubActionsContext, t as fetchWithGitHubActions } from "./ci-B1XyXpHa.js";
-import { n as buildPreparedApplet, r as prepareWorkspaceBuild, t as buildApplet } from "./build-CrrTAX6T.js";
-import { n as gitEnvironment, r as sourceHashes, t as SourceHashUnavailableError } from "./source-hash-BbvtRaus.js";
-import { a as prepareGitDeploy, o as pushStagedCommit, s as refreshHitchMain, t as deployErrorMessage } from "./git-deploy-BjSAv5Qm.js";
-import { n as childApplets, r as childHasChanges } from "./parent-Zx8Eg1Ki.js";
-import { n as migrateWorkspace } from "./git-migration-6V31iafL.js";
+import { a as findWorkspaceRoot, n as findAppletRoot, o as isRootLayout, r as findParentRoot, s as readWorkspaceConfig } from "./workspace-BRRW36wG.js";
+import { n as fetchWithOrgAuth, r as orgUsesHitchGit, t as canCheckHitchGit } from "./auth-DGCFAqPX.js";
+import { n as loadAppletSourceDefinition } from "./load-config-0lXPytAo.js";
+import { i as prepareAppletProject } from "./project-BRwNCUCi.js";
+import { a as loadGitHubActionsSources, n as githubActionsContext, t as fetchWithGitHubActions } from "./ci-PuUsFgnN.js";
+import { n as buildPreparedApplet, r as prepareWorkspaceBuild, t as buildApplet } from "./build-Cnh7Owss.js";
+import { n as gitEnvironment, r as sourceHashes, t as SourceHashUnavailableError } from "./source-hash-Bp8v9JY1.js";
+import { a as prepareGitDeploy, o as pushStagedCommit, s as refreshHitchMain, t as deployErrorMessage } from "./git-deploy-Cz-FCa93.js";
+import { n as childApplets, r as childHasChanges } from "./parent-BGZHFiDn.js";
+import { n as migrateWorkspace } from "./git-migration-BIw2cVoP.js";
 import { createRequire } from "node:module";
 import { existsSync } from "node:fs";
 import { readFile, readdir } from "node:fs/promises";

package/dist/device-CcsD_wOD.js

@@ -0,0 +1,155 @@
+import { a as credentialStorageMessage, c as organizationInstanceUrl, h as saveOAuthCredentials, l as readCredentialStore, s as normalizeInstanceUrl, t as AuthenticationError, u as rejectEnvironmentKey } from "./store-Dq9l7Qmw.js";
+import { spawn } from "node:child_process";
+import readline from "node:readline/promises";
+// ../shared/auth/src/device.ts
+const CLIENT_ID = "hitch-cli-oauth";
+const DEVICE_GRANT = "urn:ietf:params:oauth:grant-type:device_code";
+function defaultOpenUrl(url) {
+	try {
+		const child = spawn(process.platform === "darwin" ? "open" : "xdg-open", [url], {
+			detached: true,
+			stdio: "ignore"
+		});
+		child.on("error", () => void 0);
+		child.unref();
+	} catch {}
+}
+function requiredObject(value, message) {
+	if (value === null || typeof value !== "object" || Array.isArray(value)) throw new Error(message);
+	return value;
+}
+async function jsonResponse(response) {
+	try {
+		return requiredObject(await response.json(), "Expected a JSON object response.");
+	} catch (error) {
+		throw new Error(`Invalid JSON response from ${response.url || "Hitch"}.`, { cause: error });
+	}
+}
+async function postJson(fetcher, url, body) {
+	const response = await fetcher(url, {
+		method: "POST",
+		headers: { "content-type": "application/json" },
+		body: JSON.stringify(body)
+	});
+	return {
+		body: await jsonResponse(response),
+		response
+	};
+}
+function parseDeviceCode(value) {
+	if (typeof value.device_code !== "string" || typeof value.user_code !== "string" || typeof value.verification_uri !== "string" || typeof value.verification_uri_complete !== "string" || typeof value.expires_in !== "number" || value.interval !== void 0 && typeof value.interval !== "number") throw new AuthenticationError("Hitch returned an invalid device authorization response.");
+	return value;
+}
+function parseToken(value) {
+	return typeof value.access_token === "string" && typeof value.refresh_token === "string" && typeof value.expires_in === "number" && typeof value.token_type === "string" ? value : void 0;
+}
+function parseMe(input) {
+	const value = requiredObject(input, "Hitch returned an invalid identity response.");
+	const person = requiredObject(value.person, "Hitch returned an invalid identity response.");
+	if (typeof person.id !== "string" || typeof person.firstName !== "string" || typeof person.lastName !== "string" || typeof person.email !== "string" || !Array.isArray(value.memberships)) throw new Error("Hitch returned an invalid identity response.");
+	const organization = value.organization === void 0 || value.organization === null ? null : requiredObject(value.organization, "Hitch returned an invalid identity response.");
+	if (organization !== null && (typeof organization.id !== "string" || typeof organization.code !== "string")) throw new Error("Hitch returned an invalid identity response.");
+	return {
+		memberships: value.memberships.map((membership) => {
+			const item = requiredObject(membership, "Hitch returned an invalid membership.");
+			if (typeof item.orgId !== "string" || typeof item.code !== "string" || typeof item.name !== "string") throw new Error("Hitch returned an invalid membership.");
+			return item;
+		}),
+		organization,
+		person
+	};
+}
+async function fetchMe(fetcher, instanceUrl, auth) {
+	const response = await fetcher(`${instanceUrl}/api/me/v1`, { headers: { Authorization: `Bearer ${auth.accessToken}` } });
+	rejectEnvironmentKey(response, auth);
+	if (auth.credentialType === "apiKey" && response.status === 401) throw new AuthenticationError("API key rejected.");
+	const body = await jsonResponse(response);
+	if (!response.ok) throw new AuthenticationError(typeof body.message === "string" ? body.message : `Failed to load the signed-in identity (${response.status}).`);
+	return parseMe(body);
+}
+async function pollForToken(fetcher, instanceUrl, resource, device, now, sleep) {
+	const deadline = now() + device.expires_in * 1e3;
+	let interval = (device.interval ?? 5) * 1e3;
+	while (now() < deadline) {
+		await sleep(Math.min(interval, deadline - now()));
+		if (now() >= deadline) break;
+		const response = await fetcher(`${instanceUrl}/api/auth/oauth2/token`, {
+			method: "POST",
+			headers: { "content-type": "application/x-www-form-urlencoded" },
+			body: new URLSearchParams({
+				grant_type: DEVICE_GRANT,
+				device_code: device.device_code,
+				client_id: CLIENT_ID,
+				resource
+			})
+		});
+		const body = await jsonResponse(response);
+		const token = parseToken(body);
+		if (response.ok && token !== void 0) return token;
+		switch (body.error) {
+			case "authorization_pending": break;
+			case "slow_down":
+				interval += 5e3;
+				break;
+			case "expired_token": throw new AuthenticationError("The sign-in request expired. Run hitch login again.");
+			case "access_denied": throw new AuthenticationError("Sign-in was denied.");
+			default: throw new AuthenticationError(typeof body.error_description === "string" ? body.error_description : `Sign-in failed (${response.status}).`);
+		}
+	}
+	throw new AuthenticationError("The sign-in request expired. Run hitch login again.");
+}
+async function loginWithDevice(instanceUrl, options = {}) {
+	const fetcher = globalThis.fetch;
+	const now = Date.now;
+	const storedOrgs = Object.keys((await readCredentialStore()).instances[normalizeInstanceUrl(instanceUrl)] ?? {});
+	let orgCode = options.expectedOrg ?? process.env.HITCH_DEFAULT_ORG ?? (storedOrgs.length === 1 ? storedOrgs[0] : void 0);
+	if (orgCode === void 0 && process.stdin.isTTY === true) {
+		const terminal = readline.createInterface({
+			input: process.stdin,
+			output: process.stdout
+		});
+		try {
+			orgCode = (await terminal.question("Organization code: ")).trim();
+		} finally {
+			terminal.close();
+		}
+	}
+	if (!orgCode) throw new AuthenticationError("Select an organization with --org or HITCH_DEFAULT_ORG.");
+	const organizationUrl = organizationInstanceUrl(instanceUrl, orgCode);
+	const resource = `${organizationUrl}/mcp`;
+	const { body, response } = await postJson(fetcher, `${instanceUrl}/api/auth/device/code`, {
+		client_id: CLIENT_ID,
+		scope: "openid offline_access",
+		resource
+	});
+	if (!response.ok) throw new AuthenticationError(typeof body.error_description === "string" ? body.error_description : `Could not start sign-in (${response.status}).`);
+	const device = parseDeviceCode(body);
+	const verificationUrl = device.verification_uri_complete;
+	console.log(`Open ${verificationUrl} and confirm code ${device.user_code}.`);
+	if (!options.noBrowser) try {
+		defaultOpenUrl(verificationUrl);
+	} catch {}
+	const token = await pollForToken(fetcher, instanceUrl, resource, device, now, (milliseconds) => new Promise((resolve) => setTimeout(resolve, milliseconds)));
+	const me = await fetchMe(fetcher, organizationUrl, {
+		accessToken: token.access_token,
+		credentialType: "session",
+		source: "store"
+	});
+	const membership = me.memberships.find(({ code }) => code === orgCode);
+	if (membership === void 0) throw new AuthenticationError(`You are not a member of the Hitch organization "${orgCode}".`);
+	const credentials = await saveOAuthCredentials(instanceUrl, {
+		type: "oauth",
+		accessToken: token.access_token,
+		expiresAt: now() + token.expires_in * 1e3,
+		organizationId: membership.orgId,
+		orgCode
+	}, token.refresh_token);
+	const storageMessage = credentialStorageMessage();
+	if (storageMessage !== void 0) console.log(storageMessage);
+	return {
+		credentials,
+		me,
+		membership
+	};
+}
+export { parseMe as n, loginWithDevice as t };

package/dist/{generate-Ct-Rbh0f.js → generate-DIgN2KC4.js}

@@ -1,8 +1,9 @@
-import { _ as resolveInstanceUrl, f as organizationInstanceUrl, n as fetchWithOrgAuth } from "./auth-OvyoB6M-.js";
-import { n as findAppletRoot } from "./workspace-CtIKSgMD.js";
-import { t as loadAppletConfig } from "./load-config-Df-zmfrd.js";
-import { i as prepareAppletProject, o as userAgent } from "./project-BbpU_VN2.js";
-import { i as loadGitHubActionsBuildInputs, n as githubActionsContext, r as hitchResponseError } from "./ci-B1XyXpHa.js";
+import { c as organizationInstanceUrl, p as resolveInstanceUrl } from "./store-Dq9l7Qmw.js";
+import { n as findAppletRoot } from "./workspace-BRRW36wG.js";
+import { n as fetchWithOrgAuth } from "./auth-DGCFAqPX.js";
+import { t as loadAppletConfig } from "./load-config-0lXPytAo.js";
+import { i as prepareAppletProject, o as userAgent } from "./project-BRwNCUCi.js";
+import { i as loadGitHubActionsBuildInputs, n as githubActionsContext, r as hitchResponseError } from "./ci-PuUsFgnN.js";
 import { createRequire } from "node:module";
 import { isContractProcedure, minifyContractRouter } from "@orpc/contract";
 import { randomUUID } from "node:crypto";

package/dist/generate-cwMuaQE9.js

@@ -0,0 +1 @@
+export { r as runGenerate } from "./generate-DIgN2KC4.js";

package/dist/{generated-agents-BUnJ0FQA.js → generated-agents-XYtnda2w.js}

@@ -1,4 +1,4 @@
-import { r as findParentRoot } from "./workspace-CtIKSgMD.js";
+import { r as findParentRoot } from "./workspace-BRRW36wG.js";
 import { createHash, randomUUID } from "node:crypto";
 import { fileURLToPath } from "node:url";
 import { existsSync } from "node:fs";

package/dist/{git-credential-DuLNowIb.js → git-credential-CK0sHQ5a.js}

@@ -1,4 +1,4 @@
-import { c as LoginRequiredError, f as organizationInstanceUrl, g as resolveAuthForOrg, o as AuthenticationError } from "./auth-OvyoB6M-.js";
+import { c as organizationInstanceUrl, f as resolveAuthForOrg, r as LoginRequiredError, t as AuthenticationError } from "./store-Dq9l7Qmw.js";
 // src/git-credential.ts
 function parseGitCredentialHost(input, instanceUrl) {
 	const host = input.split(/\r?\n/).find((line) => line.startsWith("host="))?.slice(5);

package/dist/git-deploy-CCVbXqbO.js

@@ -0,0 +1 @@
+export { c as runClone } from "./git-deploy-Cz-FCa93.js";

package/dist/{git-deploy-BjSAv5Qm.js → git-deploy-Cz-FCa93.js}

@@ -1,7 +1,8 @@
-import { _ as resolveInstanceUrl, i as withOrgAuth } from "./auth-OvyoB6M-.js";
-import { a as findWorkspaceRoot, o as isRootLayout, r as findParentRoot, t as SDK_VERSION_PATTERN } from "./workspace-CtIKSgMD.js";
+import { p as resolveInstanceUrl } from "./store-Dq9l7Qmw.js";
+import { a as findWorkspaceRoot, o as isRootLayout, r as findParentRoot, t as SDK_VERSION_PATTERN } from "./workspace-BRRW36wG.js";
+import { i as withOrgAuth } from "./auth-DGCFAqPX.js";
 import { n as ORG_CODE_PATTERN, t as APPLET_CODE_PATTERN } from "./manifest-patterns-BfxqImlp.js";
-import { n as gitEnvironment } from "./source-hash-BbvtRaus.js";
+import { n as gitEnvironment } from "./source-hash-Bp8v9JY1.js";
 import { n as stagedSecretPaths, t as StagedSecretsError } from "./git-safety-Ck3X7jvA.js";
 import { existsSync } from "node:fs";
 import { readFile } from "node:fs/promises";

package/dist/{git-migration-6V31iafL.js → git-migration-BIw2cVoP.js}

@@ -1,10 +1,10 @@
-import { n as generatedAgentContents, r as writeGeneratedAgents } from "./generated-agents-BUnJ0FQA.js";
-import { r as orgUsesHitchGit, t as canCheckHitchGit } from "./auth-OvyoB6M-.js";
-import { a as findWorkspaceRoot, n as findAppletRoot, o as isRootLayout, s as readWorkspaceConfig } from "./workspace-CtIKSgMD.js";
-import { n as loadAppletSourceDefinition } from "./load-config-Df-zmfrd.js";
-import { c as writeGitignore, r as loadPackageManifest } from "./project-BbpU_VN2.js";
+import { n as generatedAgentContents, r as writeGeneratedAgents } from "./generated-agents-XYtnda2w.js";
+import { a as findWorkspaceRoot, n as findAppletRoot, o as isRootLayout, s as readWorkspaceConfig } from "./workspace-BRRW36wG.js";
+import { r as orgUsesHitchGit, t as canCheckHitchGit } from "./auth-DGCFAqPX.js";
+import { n as loadAppletSourceDefinition } from "./load-config-0lXPytAo.js";
+import { c as writeGitignore, r as loadPackageManifest } from "./project-BRwNCUCi.js";
 import { n as stagedSecretPaths, t as StagedSecretsError } from "./git-safety-Ck3X7jvA.js";
-import { o as gitLocal } from "./parent-Zx8Eg1Ki.js";
+import { o as gitLocal } from "./parent-BGZHFiDn.js";
 import fs from "node:fs";
 import fs$1 from "node:fs/promises";
 import { basename, dirname, posix, resolve, sep } from "node:path";

package/dist/{init-C5HqIRt8.js → init-CAyEoy4P.js}

@@ -1,12 +1,13 @@
-import { r as writeGeneratedAgents } from "./generated-agents-BUnJ0FQA.js";
-import { _ as resolveInstanceUrl, g as resolveAuthForOrg, h as resolveAuth, r as orgUsesHitchGit, t as canCheckHitchGit } from "./auth-OvyoB6M-.js";
-import { a as findWorkspaceRoot, i as findWorkspaceConfig, o as isRootLayout, r as findParentRoot, s as readWorkspaceConfig } from "./workspace-CtIKSgMD.js";
-import { n as loadAppletSourceDefinition } from "./load-config-Df-zmfrd.js";
-import { r as runGenerate } from "./generate-Ct-Rbh0f.js";
+import { r as writeGeneratedAgents } from "./generated-agents-XYtnda2w.js";
+import { d as resolveAuth, f as resolveAuthForOrg, p as resolveInstanceUrl } from "./store-Dq9l7Qmw.js";
+import { a as findWorkspaceRoot, i as findWorkspaceConfig, o as isRootLayout, r as findParentRoot, s as readWorkspaceConfig } from "./workspace-BRRW36wG.js";
+import { r as orgUsesHitchGit, t as canCheckHitchGit } from "./auth-DGCFAqPX.js";
+import { n as loadAppletSourceDefinition } from "./load-config-0lXPytAo.js";
+import { r as runGenerate } from "./generate-DIgN2KC4.js";
 import { n as ORG_CODE_PATTERN, t as APPLET_CODE_PATTERN } from "./manifest-patterns-BfxqImlp.js";
-import { l as writeRootSupport, n as loadCliManifest, r as loadPackageManifest, s as writeAppletSupport, t as assertWorkspaceCli, u as writeWorkspaceSupport } from "./project-BbpU_VN2.js";
-import { n as childApplets } from "./parent-Zx8Eg1Ki.js";
-import { t as migrateIfEnabled } from "./git-migration-6V31iafL.js";
+import { l as writeRootSupport, n as loadCliManifest, r as loadPackageManifest, s as writeAppletSupport, t as assertWorkspaceCli, u as writeWorkspaceSupport } from "./project-BRwNCUCi.js";
+import { n as childApplets } from "./parent-BGZHFiDn.js";
+import { t as migrateIfEnabled } from "./git-migration-BIw2cVoP.js";
 import { access, cp, mkdir, readdir, writeFile } from "node:fs/promises";
 import { relative, resolve } from "node:path";
 import { spawn } from "node:child_process";

package/dist/{load-config-Df-zmfrd.js → load-config-0lXPytAo.js}

@@ -1,5 +1,4 @@
-import "./auth-OvyoB6M-.js";
-import { c as validateRootManifest, i as findWorkspaceConfig, n as findAppletRoot, o as isRootLayout } from "./workspace-CtIKSgMD.js";
+import { c as validateRootManifest, i as findWorkspaceConfig, n as findAppletRoot, o as isRootLayout } from "./workspace-BRRW36wG.js";
 import { n as ORG_CODE_PATTERN, t as APPLET_CODE_PATTERN } from "./manifest-patterns-BfxqImlp.js";
 import { z } from "zod";
 import { existsSync } from "node:fs";

package/dist/{login-B41-WWtD.js → login-ChKZbUOt.js}

@@ -1,5 +1,6 @@
-import { _ as resolveInstanceUrl, a as loginWithDevice, d as normalizeInstanceUrl, o as AuthenticationError, p as readCredentialStore, u as deleteCredentials, v as revokeOAuthCredentials } from "./auth-OvyoB6M-.js";
-import { i as findWorkspaceConfig } from "./workspace-CtIKSgMD.js";
+import { l as readCredentialStore, m as revokeOAuthCredentials, o as deleteCredentials, p as resolveInstanceUrl, s as normalizeInstanceUrl, t as AuthenticationError } from "./store-Dq9l7Qmw.js";
+import { t as loginWithDevice } from "./device-CcsD_wOD.js";
+import { i as findWorkspaceConfig } from "./workspace-BRRW36wG.js";
 // src/login.ts
 async function runLogin(options) {
 	if (process.env.HITCH_API_KEY !== void 0) throw new AuthenticationError("HITCH_API_KEY is set — unset it to manage stored logins.");

package/dist/{logs-DrL2ytmg.js → logs-C4QXSsBW.js}

@@ -1,6 +1,6 @@
-import { n as fetchWithOrgAuth } from "./auth-OvyoB6M-.js";
-import { s as readWorkspaceConfig } from "./workspace-CtIKSgMD.js";
-import { o as resolveWorkspaceOrg, t as loadAppletConfig } from "./load-config-Df-zmfrd.js";
+import { s as readWorkspaceConfig } from "./workspace-BRRW36wG.js";
+import { n as fetchWithOrgAuth } from "./auth-DGCFAqPX.js";
+import { o as resolveWorkspaceOrg, t as loadAppletConfig } from "./load-config-0lXPytAo.js";
 import { t as APPLET_CODE_PATTERN } from "./manifest-patterns-BfxqImlp.js";
 import { z } from "zod";
 // src/logs.ts

package/dist/{parent-Zx8Eg1Ki.js → parent-BGZHFiDn.js}

@@ -1,6 +1,6 @@
-import { r as writeGeneratedAgents } from "./generated-agents-BUnJ0FQA.js";
-import { a as findWorkspaceRoot, o as isRootLayout, r as findParentRoot } from "./workspace-CtIKSgMD.js";
-import { n as gitEnvironment } from "./source-hash-BbvtRaus.js";
+import { r as writeGeneratedAgents } from "./generated-agents-XYtnda2w.js";
+import { a as findWorkspaceRoot, o as isRootLayout, r as findParentRoot } from "./workspace-BRRW36wG.js";
+import { n as gitEnvironment } from "./source-hash-Bp8v9JY1.js";
 import { existsSync } from "node:fs";
 import { readdir, writeFile } from "node:fs/promises";
 import { dirname, resolve } from "node:path";

package/dist/parent-QxKvaC2E.js

@@ -0,0 +1 @@
+export { i as runParent } from "./parent-BGZHFiDn.js";

package/dist/{project-BbpU_VN2.js → project-BRwNCUCi.js}

@@ -1,7 +1,7 @@
-import { r as writeGeneratedAgents, t as GENERATED_SKILLS } from "./generated-agents-BUnJ0FQA.js";
-import { f as organizationInstanceUrl, s as DEFAULT_INSTANCE_URL } from "./auth-OvyoB6M-.js";
-import { a as findWorkspaceRoot, n as findAppletRoot, o as isRootLayout, s as readWorkspaceConfig } from "./workspace-CtIKSgMD.js";
-import { n as loadAppletSourceDefinition, r as appletMountPath } from "./load-config-Df-zmfrd.js";
+import { r as writeGeneratedAgents, t as GENERATED_SKILLS } from "./generated-agents-XYtnda2w.js";
+import { c as organizationInstanceUrl, n as DEFAULT_INSTANCE_URL } from "./store-Dq9l7Qmw.js";
+import { a as findWorkspaceRoot, n as findAppletRoot, o as isRootLayout, s as readWorkspaceConfig } from "./workspace-BRRW36wG.js";
+import { n as loadAppletSourceDefinition, r as appletMountPath } from "./load-config-0lXPytAo.js";
 import { z } from "zod";
 import { existsSync } from "node:fs";
 import { cp, mkdir, readFile, readdir, rm, writeFile } from "node:fs/promises";

package/dist/{schedules-2Q_fkY_a.js → schedules-CThe3MC1.js}

@@ -1,5 +1,5 @@
-import { n as findAppletRoot } from "./workspace-CtIKSgMD.js";
-import { t as loadAppletConfig } from "./load-config-Df-zmfrd.js";
+import { n as findAppletRoot } from "./workspace-BRRW36wG.js";
+import { t as loadAppletConfig } from "./load-config-0lXPytAo.js";
 import { t as question } from "./prompt-CW98R-Un.js";
 import { RPCLink } from "@orpc/client/fetch";
 import { readFile } from "node:fs/promises";

package/dist/{source-hash-BbvtRaus.js → source-hash-Bp8v9JY1.js}

@@ -1,4 +1,4 @@
-import { a as findWorkspaceRoot } from "./workspace-CtIKSgMD.js";
+import { a as findWorkspaceRoot } from "./workspace-BRRW36wG.js";
 import { createHash } from "node:crypto";
 import { lstat, readlink } from "node:fs/promises";
 import { dirname, relative, resolve, sep } from "node:path";

package/dist/{auth-OvyoB6M-.js → store-Dq9l7Qmw.js}

@@ -1,12 +1,9 @@
-import "./workspace-CtIKSgMD.js";
 import { randomUUID } from "node:crypto";
 import fs from "node:fs/promises";
 import { dirname, join } from "node:path";
-import { spawn } from "node:child_process";
-import readline from "node:readline/promises";
 import { homedir } from "node:os";
 import { Entry, findCredentials } from "@napi-rs/keyring";
-// ../shared/auth/src/lock.mts
+// ../shared/auth/src/lock.ts
 const LOCK_AGE = 3e4;
 function canTakeOverRefreshLock(age) {
 	return age > LOCK_AGE;
@@ -48,8 +45,8 @@ async function withFileLock(path, action) {
 	}
 	throw new AuthenticationError("Timed out while waiting for the credential lock.");
 }
-// ../shared/auth/src/oauth.mts
-const CLIENT_ID$1 = "hitch-cli-oauth";
+// ../shared/auth/src/oauth.ts
+const CLIENT_ID = "hitch-cli-oauth";
 const REFRESH_GRANT = "refresh_token";
 async function saveOAuthCredentials(instanceUrl, credentials, refreshToken) {
 	const stored = {
@@ -82,7 +79,7 @@ async function refreshAccessToken(instanceUrl, orgCode) {
 			body: new URLSearchParams({
 				grant_type: REFRESH_GRANT,
 				refresh_token: refreshToken,
-				client_id: CLIENT_ID$1,
+				client_id: CLIENT_ID,
 				resource: `${organizationInstanceUrl(instanceUrl, orgCode)}/mcp`
 			})
 		});
@@ -118,7 +115,7 @@ async function revokeOAuthCredentials(instanceUrl, credentials, warn = console.w
 			body: new URLSearchParams({
 				token: credentials.refreshToken,
 				token_type_hint: "refresh_token",
-				client_id: CLIENT_ID$1
+				client_id: CLIENT_ID
 			})
 		});
 		if (!response.ok) warn(`Warning: server sign-out failed (${response.status}).`);
@@ -128,7 +125,7 @@ async function revokeOAuthCredentials(instanceUrl, credentials, warn = console.w
 		await removeOAuthCredentials(instanceUrl, credentials.orgCode);
 	}
 }
-// ../shared/auth/src/store.mts
+// ../shared/auth/src/store.ts
 const DEFAULT_INSTANCE_URL = "https://app.hitch42.com";
 var AuthenticationError = class extends Error {};
 var LoginRequiredError = class extends AuthenticationError {
@@ -137,21 +134,12 @@ var LoginRequiredError = class extends AuthenticationError {
 	}
 };
 let selectedStore;
-let keyringClass;
-let findKeyringCredentials;
-function configureKeyring(entryClass, findCredentials) {
-	keyringClass = entryClass;
-	findKeyringCredentials = findCredentials;
-	selectedStore = void 0;
-}
 function keyringEntry(account) {
-	if (keyringClass === void 0) throw new Error("Keyring is not configured.");
 	const options = process.platform === "linux" ? { linux: { store: "secret-service" } } : void 0;
-	return new keyringClass("hitch", account, options);
+	return new Entry("hitch", account, options);
 }
 function credentialStorage() {
 	if (selectedStore !== void 0) return selectedStore;
-	if (keyringClass === void 0) throw new Error("Keyring is not configured.");
 	selectedStore = (process.platform === "linux" || process.platform === "darwin" || process.platform === "win32" ? ["secret"] : []).find((candidate) => {
 		const probe = `__probe__${randomUUID()}`;
 		try {
@@ -177,8 +165,7 @@ function account(instanceUrl, orgCode) {
 	return `${normalizeInstanceUrl(instanceUrl)} ${orgCode}`;
 }
 function listKeyringCredentials() {
-	if (findKeyringCredentials === void 0) throw new Error("Keyring listing is not configured.");
-	return findKeyringCredentials("hitch").filter(({ account }) => account !== "__index__");
+	return findCredentials("hitch").filter(({ account }) => account !== "__index__");
 }
 function readKeychainCredential(instanceUrl, orgCode) {
 	const value = keyringEntry(account(instanceUrl, orgCode)).getPassword();
@@ -449,199 +436,4 @@ async function updateFileCredentialStore(path, update) {
 		}
 	});
 }
-// ../shared/auth/src/device.mts
-const CLIENT_ID = "hitch-cli-oauth";
-const DEVICE_GRANT = "urn:ietf:params:oauth:grant-type:device_code";
-function defaultOpenUrl(url) {
-	try {
-		const child = spawn(process.platform === "darwin" ? "open" : "xdg-open", [url], {
-			detached: true,
-			stdio: "ignore"
-		});
-		child.on("error", () => void 0);
-		child.unref();
-	} catch {}
-}
-function requiredObject(value, message) {
-	if (value === null || typeof value !== "object" || Array.isArray(value)) throw new Error(message);
-	return value;
-}
-async function jsonResponse(response) {
-	try {
-		return requiredObject(await response.json(), "Expected a JSON object response.");
-	} catch (error) {
-		throw new Error(`Invalid JSON response from ${response.url || "Hitch"}.`, { cause: error });
-	}
-}
-async function postJson(fetcher, url, body) {
-	const response = await fetcher(url, {
-		method: "POST",
-		headers: { "content-type": "application/json" },
-		body: JSON.stringify(body)
-	});
-	return {
-		body: await jsonResponse(response),
-		response
-	};
-}
-function parseDeviceCode(value) {
-	if (typeof value.device_code !== "string" || typeof value.user_code !== "string" || typeof value.verification_uri !== "string" || typeof value.verification_uri_complete !== "string" || typeof value.expires_in !== "number" || value.interval !== void 0 && typeof value.interval !== "number") throw new AuthenticationError("Hitch returned an invalid device authorization response.");
-	return value;
-}
-function parseToken(value) {
-	return typeof value.access_token === "string" && typeof value.refresh_token === "string" && typeof value.expires_in === "number" && typeof value.token_type === "string" ? value : void 0;
-}
-function parseMe(input) {
-	const value = requiredObject(input, "Hitch returned an invalid identity response.");
-	const person = requiredObject(value.person, "Hitch returned an invalid identity response.");
-	if (typeof person.id !== "string" || typeof person.firstName !== "string" || typeof person.lastName !== "string" || typeof person.email !== "string" || !Array.isArray(value.memberships)) throw new Error("Hitch returned an invalid identity response.");
-	const organization = value.organization === void 0 || value.organization === null ? null : requiredObject(value.organization, "Hitch returned an invalid identity response.");
-	if (organization !== null && (typeof organization.id !== "string" || typeof organization.code !== "string")) throw new Error("Hitch returned an invalid identity response.");
-	return {
-		memberships: value.memberships.map((membership) => {
-			const item = requiredObject(membership, "Hitch returned an invalid membership.");
-			if (typeof item.orgId !== "string" || typeof item.code !== "string" || typeof item.name !== "string") throw new Error("Hitch returned an invalid membership.");
-			return item;
-		}),
-		organization,
-		person
-	};
-}
-async function fetchMe(fetcher, instanceUrl, auth) {
-	const response = await fetcher(`${instanceUrl}/api/me/v1`, { headers: { Authorization: `Bearer ${auth.accessToken}` } });
-	rejectEnvironmentKey(response, auth);
-	if (auth.credentialType === "apiKey" && response.status === 401) throw new AuthenticationError("API key rejected.");
-	const body = await jsonResponse(response);
-	if (!response.ok) throw new AuthenticationError(typeof body.message === "string" ? body.message : `Failed to load the signed-in identity (${response.status}).`);
-	return parseMe(body);
-}
-async function pollForToken(fetcher, instanceUrl, resource, device, now, sleep) {
-	const deadline = now() + device.expires_in * 1e3;
-	let interval = (device.interval ?? 5) * 1e3;
-	while (now() < deadline) {
-		await sleep(Math.min(interval, deadline - now()));
-		if (now() >= deadline) break;
-		const response = await fetcher(`${instanceUrl}/api/auth/oauth2/token`, {
-			method: "POST",
-			headers: { "content-type": "application/x-www-form-urlencoded" },
-			body: new URLSearchParams({
-				grant_type: DEVICE_GRANT,
-				device_code: device.device_code,
-				client_id: CLIENT_ID,
-				resource
-			})
-		});
-		const body = await jsonResponse(response);
-		const token = parseToken(body);
-		if (response.ok && token !== void 0) return token;
-		switch (body.error) {
-			case "authorization_pending": break;
-			case "slow_down":
-				interval += 5e3;
-				break;
-			case "expired_token": throw new AuthenticationError("The sign-in request expired. Run hitch login again.");
-			case "access_denied": throw new AuthenticationError("Sign-in was denied.");
-			default: throw new AuthenticationError(typeof body.error_description === "string" ? body.error_description : `Sign-in failed (${response.status}).`);
-		}
-	}
-	throw new AuthenticationError("The sign-in request expired. Run hitch login again.");
-}
-async function loginWithDevice(instanceUrl, options = {}) {
-	const fetcher = globalThis.fetch;
-	const now = Date.now;
-	const storedOrgs = Object.keys((await readCredentialStore()).instances[normalizeInstanceUrl(instanceUrl)] ?? {});
-	let orgCode = options.expectedOrg ?? process.env.HITCH_DEFAULT_ORG ?? (storedOrgs.length === 1 ? storedOrgs[0] : void 0);
-	if (orgCode === void 0 && process.stdin.isTTY === true) {
-		const terminal = readline.createInterface({
-			input: process.stdin,
-			output: process.stdout
-		});
-		try {
-			orgCode = (await terminal.question("Organization code: ")).trim();
-		} finally {
-			terminal.close();
-		}
-	}
-	if (!orgCode) throw new AuthenticationError("Select an organization with --org or HITCH_DEFAULT_ORG.");
-	const organizationUrl = organizationInstanceUrl(instanceUrl, orgCode);
-	const resource = `${organizationUrl}/mcp`;
-	const { body, response } = await postJson(fetcher, `${instanceUrl}/api/auth/device/code`, {
-		client_id: CLIENT_ID,
-		scope: "openid offline_access",
-		resource
-	});
-	if (!response.ok) throw new AuthenticationError(typeof body.error_description === "string" ? body.error_description : `Could not start sign-in (${response.status}).`);
-	const device = parseDeviceCode(body);
-	const verificationUrl = device.verification_uri_complete;
-	console.log(`Open ${verificationUrl} and confirm code ${device.user_code}.`);
-	if (!options.noBrowser) try {
-		defaultOpenUrl(verificationUrl);
-	} catch {}
-	const token = await pollForToken(fetcher, instanceUrl, resource, device, now, (milliseconds) => new Promise((resolve) => setTimeout(resolve, milliseconds)));
-	const me = await fetchMe(fetcher, organizationUrl, {
-		accessToken: token.access_token,
-		credentialType: "session",
-		source: "store"
-	});
-	const membership = me.memberships.find(({ code }) => code === orgCode);
-	if (membership === void 0) throw new AuthenticationError(`You are not a member of the Hitch organization "${orgCode}".`);
-	const credentials = await saveOAuthCredentials(instanceUrl, {
-		type: "oauth",
-		accessToken: token.access_token,
-		expiresAt: now() + token.expires_in * 1e3,
-		organizationId: membership.orgId,
-		orgCode
-	}, token.refresh_token);
-	const storageMessage = credentialStorageMessage();
-	if (storageMessage !== void 0) console.log(storageMessage);
-	return {
-		credentials,
-		me,
-		membership
-	};
-}
-// src/auth.ts
-configureKeyring(Entry, findCredentials);
-async function fetchWithOrgAuth(orgCode, request) {
-	return withOrgAuth(orgCode, async (organizationUrl, accessToken) => {
-		const response = await request(organizationUrl, accessToken);
-		return {
-			response,
-			unauthorized: response.status === 401
-		};
-	}).then(({ response }) => response);
-}
-async function withOrgAuth(orgCode, request) {
-	const instanceUrl = await resolveInstanceUrl();
-	const organizationUrl = organizationInstanceUrl(instanceUrl, orgCode);
-	const auth = await resolveAuthForOrg(instanceUrl, orgCode).catch((error) => {
-		if (error instanceof LoginRequiredError && process.stdin.isTTY === true) return void 0;
-		throw error;
-	});
-	if (auth !== void 0) {
-		const result = await request(organizationUrl, bearerToken(auth));
-		if ("response" in result && result.response instanceof Response) rejectEnvironmentKey(result.response, auth);
-		if (!result.unauthorized) return result;
-		if (auth.source === "environment") throw new AuthenticationError("HITCH_API_KEY was rejected.");
-	}
-	if (process.stdin.isTTY !== true) throw new LoginRequiredError();
-	await loginWithDevice(instanceUrl, { expectedOrg: orgCode });
-	const credentials = await resolveAuthForOrg(instanceUrl, orgCode);
-	if (credentials === void 0) throw new Error(`login did not provide credentials for organization "${orgCode}"`);
-	return request(organizationUrl, bearerToken(credentials));
-}
-async function orgUsesHitchGit(org) {
-	const response = await fetchWithOrgAuth(org, (organizationUrl, token) => fetch(`${organizationUrl}/api/me/v1`, { headers: { Authorization: `Bearer ${token}` } }));
-	if (!response.ok) throw new AuthenticationError(`Could not read organization membership (${response.status}).`);
-	const membership = parseMe(await response.json()).memberships.find((item) => item.code === org);
-	if (membership === void 0) throw new AuthenticationError(`You are not a member of ${org}.`);
-	if (typeof membership.gitEnabled !== "boolean") throw new Error("The membership response has no \"gitEnabled\" flag. Update the Hitch server.");
-	return membership.gitEnabled;
-}
-async function canCheckHitchGit() {
-	if (process.env.GITHUB_ACTIONS === "true") return false;
-	if (process.env.HITCH_API_KEY) return true;
-	const instance = await resolveInstanceUrl();
-	return Object.entries((await readCredentialStore()).instances).some(([url, credentials]) => url === instance && Object.keys(credentials).length > 0);
-}
-export { resolveInstanceUrl as _, loginWithDevice as a, LoginRequiredError as c, normalizeInstanceUrl as d, organizationInstanceUrl as f, resolveAuthForOrg as g, resolveAuth as h, withOrgAuth as i, bearerToken as l, rejectEnvironmentKey as m, fetchWithOrgAuth as n, AuthenticationError as o, readCredentialStore as p, orgUsesHitchGit as r, DEFAULT_INSTANCE_URL as s, canCheckHitchGit as t, deleteCredentials as u, revokeOAuthCredentials as v };
+export { credentialStorageMessage as a, organizationInstanceUrl as c, resolveAuth as d, resolveAuthForOrg as f, saveOAuthCredentials as h, bearerToken as i, readCredentialStore as l, revokeOAuthCredentials as m, DEFAULT_INSTANCE_URL as n, deleteCredentials as o, resolveInstanceUrl as p, LoginRequiredError as r, normalizeInstanceUrl as s, AuthenticationError as t, rejectEnvironmentKey as u };

package/dist/{variables-CGwbmUom.js → variables-Cpd05u5N.js}

@@ -1,5 +1,5 @@
-import { n as fetchWithOrgAuth } from "./auth-OvyoB6M-.js";
-import { t as loadAppletConfig } from "./load-config-Df-zmfrd.js";
+import { n as fetchWithOrgAuth } from "./auth-DGCFAqPX.js";
+import { t as loadAppletConfig } from "./load-config-0lXPytAo.js";
 import { t as question } from "./prompt-CW98R-Un.js";
 import { z } from "zod";
 // src/variables.ts

package/dist/vite.js

@@ -2,11 +2,11 @@ import { t as pruneContract } from "./contract-D9LCNGjD.js";
 import { a as openQueryCacheDatabase } from "./query-cache-DQJy45RT.js";
 import { d as HITCH_SESSION_HEADER, f as HITCH_USER_HEADER } from "./headers-BcEMIVCo.js";
 import { a as workflowOutcomeSchema, n as runWorkflowJournal } from "./workflow-engine-CyyaVENo.js";
-import { r as writeGeneratedAgents } from "./generated-agents-BUnJ0FQA.js";
-import { _ as resolveInstanceUrl, f as organizationInstanceUrl, g as resolveAuthForOrg, l as bearerToken, m as rejectEnvironmentKey } from "./auth-OvyoB6M-.js";
-import { c as validateRootManifest, o as isRootLayout } from "./workspace-CtIKSgMD.js";
-import { a as appletSourceDefinitionSchema, i as appletReleaseManifest, o as resolveWorkspaceOrg, r as appletMountPath } from "./load-config-Df-zmfrd.js";
-import { a as writeRegisterDeclaration, c as writeAppletRoot, d as writeServerEntry, i as syncContract, l as writeClientEntry, n as routesModuleSource, u as writeManifestGen } from "./generate-Ct-Rbh0f.js";
+import { r as writeGeneratedAgents } from "./generated-agents-XYtnda2w.js";
+import { c as organizationInstanceUrl, f as resolveAuthForOrg, i as bearerToken, p as resolveInstanceUrl, u as rejectEnvironmentKey } from "./store-Dq9l7Qmw.js";
+import { c as validateRootManifest, o as isRootLayout } from "./workspace-BRRW36wG.js";
+import { a as appletSourceDefinitionSchema, i as appletReleaseManifest, o as resolveWorkspaceOrg, r as appletMountPath } from "./load-config-0lXPytAo.js";
+import { a as writeRegisterDeclaration, c as writeAppletRoot, d as writeServerEntry, i as syncContract, l as writeClientEntry, n as routesModuleSource, u as writeManifestGen } from "./generate-DIgN2KC4.js";
 import { t as APPLET_CODE_PATTERN } from "./manifest-patterns-BfxqImlp.js";
 import { z } from "zod";
 import { randomUUID } from "node:crypto";

package/dist/{workspace-CtIKSgMD.js → workspace-BRRW36wG.js}

@@ -2,7 +2,7 @@ import { createRequire, registerHooks } from "node:module";
 import { pathToFileURL } from "node:url";
 import fs from "node:fs";
 import { basename, dirname, resolve } from "node:path";
-// ../shared/auth/src/workspace.mts
+// ../shared/auth/src/workspace.ts
 const ORG_CODE_PATTERN = /^[a-z][a-z0-9]*(?:-[a-z0-9]+)*$/;
 const require = createRequire(import.meta.url);
 var WorkspaceValidationError = class extends Error {};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hitch42/applet",
-  "version": "0.1.1-beta.23",
+  "version": "0.1.1-beta.24",
   "license": "MIT",
   "bin": {
     "applet": "./dist/applet.js"
@@ -13,8 +13,7 @@
   ],
   "type": "module",
   "sideEffects": [
-    "*.css",
-    "./src/auth.ts"
+    "*.css"
   ],
   "exports": {
     ".": {

package/dist/build-YzjhhLw0.js

@@ -1 +0,0 @@
-export { i as runBuild } from "./build-CrrTAX6T.js";

package/dist/generate-_u-zFzrv.js

@@ -1 +0,0 @@
-export { r as runGenerate } from "./generate-Ct-Rbh0f.js";

package/dist/git-deploy-CByu_uli.js

@@ -1 +0,0 @@
-export { c as runClone } from "./git-deploy-BjSAv5Qm.js";

package/dist/parent-D52Kxp8U.js

@@ -1 +0,0 @@
-export { i as runParent } from "./parent-Zx8Eg1Ki.js";