@hyperstar/mcp 0.1.0

package/dist/auth/local-callback.d.ts

@@ -0,0 +1,18 @@
+export type LocalCallbackResult = {
+    readonly code: string;
+    readonly state: string;
+} | {
+    readonly error: string;
+    readonly state?: string;
+};
+export type LocalCallbackServer = {
+    readonly callbackUrl: string;
+    readonly result: Promise<LocalCallbackResult>;
+    readonly close: () => Promise<void>;
+};
+export type LocalCallbackOptions = {
+    readonly expectedState: string;
+    readonly timeoutMs?: number;
+};
+/** Start a one-shot OAuth callback server bound to 127.0.0.1. */
+export declare function startLocalCallbackServer(options: LocalCallbackOptions): Promise<LocalCallbackServer>;

package/dist/auth/local-callback.js

@@ -0,0 +1,90 @@
+import { createServer } from "node:http";
+/** Start a one-shot OAuth callback server bound to 127.0.0.1. */
+export async function startLocalCallbackServer(options) {
+    let settle;
+    const result = new Promise((resolve) => {
+        settle = resolve;
+    });
+    const timeoutMs = options.timeoutMs ?? 120_000;
+    let settled = false;
+    const server = createServer((request, response) => {
+        const requestUrl = new URL(request.url ?? "/", "http://127.0.0.1");
+        if (requestUrl.pathname !== "/callback") {
+            response.writeHead(404, { "content-type": "text/plain; charset=utf-8" });
+            response.end("Not found");
+            return;
+        }
+        const state = requestUrl.searchParams.get("state") ?? undefined;
+        const code = requestUrl.searchParams.get("code") ?? undefined;
+        const error = requestUrl.searchParams.get("error") ?? undefined;
+        if (state !== options.expectedState) {
+            response.writeHead(400, { "content-type": "text/plain; charset=utf-8" });
+            response.end("Invalid state");
+            return;
+        }
+        if (error !== undefined && error.length > 0) {
+            response.writeHead(400, { "content-type": "text/plain; charset=utf-8" });
+            response.end("Authorization failed");
+            finish({ error, state });
+            return;
+        }
+        if (code === undefined || code.length === 0) {
+            response.writeHead(400, { "content-type": "text/plain; charset=utf-8" });
+            response.end("Missing code");
+            finish({ error: "missing_code", state });
+            return;
+        }
+        response.writeHead(200, { "content-type": "text/plain; charset=utf-8" });
+        response.end("Hyperstar login complete. You can close this window.");
+        finish({ code, state });
+    });
+    const close = async () => closeServer(server);
+    const timeout = setTimeout(() => {
+        finish({ error: "timeout" });
+    }, timeoutMs);
+    timeout.unref();
+    /** Resolve once and close the one-shot callback server. */
+    function finish(callbackResult) {
+        if (settled) {
+            return;
+        }
+        settled = true;
+        clearTimeout(timeout);
+        settle(callbackResult);
+        void close();
+    }
+    await new Promise((resolve, reject) => {
+        server.once("error", reject);
+        server.listen(0, "127.0.0.1", () => {
+            server.off("error", reject);
+            resolve();
+        });
+    });
+    const address = server.address();
+    if (address === null || typeof address === "string") {
+        await close();
+        throw new Error("Failed to bind local callback server");
+    }
+    return {
+        callbackUrl: `http://127.0.0.1:${address.port}/callback`,
+        result,
+        close,
+    };
+}
+/** Close a Node HTTP server if it is still listening. */
+async function closeServer(server) {
+    if (!server.listening) {
+        return;
+    }
+    await new Promise((resolve, reject) => {
+        server.close((error) => {
+            if (error === undefined) {
+                resolve();
+            }
+            else {
+                reject(error);
+            }
+        });
+    });
+}
+//# sourceMappingURL=local-callback.js.map

package/dist/auth/local-callback.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-callback.js","sourceRoot":"","sources":["../../src/auth/local-callback.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAe,MAAM,WAAW,CAAC;AAuBtD,iEAAiE;AACjE,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,OAA6B;IAE7B,IAAI,MAA8C,CAAC;IACnD,MAAM,MAAM,GAAG,IAAI,OAAO,CAAsB,CAAC,OAAO,EAAE,EAAE;QAC1D,MAAM,GAAG,OAAO,CAAC;IACnB,CAAC,CAAC,CAAC;IACH,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC;IAC/C,IAAI,OAAO,GAAG,KAAK,CAAC;IAEpB,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE;QAChD,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,GAAG,EAAE,kBAAkB,CAAC,CAAC;QACnE,IAAI,UAAU,CAAC,QAAQ,KAAK,WAAW,EAAE,CAAC;YACxC,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,2BAA2B,EAAE,CAAC,CAAC;YACzE,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YAC1B,OAAO;QACT,CAAC;QAED,MAAM,KAAK,GAAG,UAAU,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,SAAS,CAAC;QAChE,MAAM,IAAI,GAAG,UAAU,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,SAAS,CAAC;QAC9D,MAAM,KAAK,GAAG,UAAU,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,SAAS,CAAC;QAChE,IAAI,KAAK,KAAK,OAAO,CAAC,aAAa,EAAE,CAAC;YACpC,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,2BAA2B,EAAE,CAAC,CAAC;YACzE,QAAQ,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;YAC9B,OAAO;QACT,CAAC;QACD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5C,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,2BAA2B,EAAE,CAAC,CAAC;YACzE,QAAQ,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;YACrC,MAAM,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;YACzB,OAAO;QACT,CAAC;QACD,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5C,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,2BAA2B,EAAE,CAAC,CAAC;YACzE,QAAQ,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;YAC7B,MAAM,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC,CAAC;YACzC,OAAO;QACT,CAAC;QAED,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,2BAA2B,EAAE,CAAC,CAAC;QACzE,QAAQ,CAAC,GAAG,CAAC,sDAAsD,CAAC,CAAC;QACrE,MAAM,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;IAEH,MAAM,KAAK,GAAG,KAAK,IAAmB,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IAC7D,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE;QAC9B,MAAM,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;IAC/B,CAAC,EAAE,SAAS,CAAC,CAAC;IACd,OAAO,CAAC,KAAK,EAAE,CAAC;IAEhB,2DAA2D;IAC3D,SAAS,MAAM,CAAC,cAAmC;QACjD,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO;QACT,CAAC;QACD,OAAO,GAAG,IAAI,CAAC;QACf,YAAY,CAAC,OAAO,CAAC,CAAC;QACtB,MAAM,CAAC,cAAc,CAAC,CAAC;QACvB,KAAK,KAAK,EAAE,CAAC;IACf,CAAC;IAED,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC7B,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE;YACjC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC5B,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;IACjC,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QACpD,MAAM,KAAK,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC1D,CAAC;IAED,OAAO;QACL,WAAW,EAAE,oBAAoB,OAAO,CAAC,IAAI,WAAW;QACxD,MAAM;QACN,KAAK;KACN,CAAC;AACJ,CAAC;AAED,yDAAyD;AACzD,KAAK,UAAU,WAAW,CAAC,MAAc;IACvC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;QACtB,OAAO;IACT,CAAC;IACD,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;YACrB,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACxB,OAAO,EAAE,CAAC;YACZ,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,KAAK,CAAC,CAAC;YAChB,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/auth/pkce.d.ts

@@ -0,0 +1,8 @@
+export type PkcePair = {
+    readonly verifier: string;
+    readonly challenge: string;
+};
+/** Create a URL-safe PKCE verifier and its S256 challenge. */
+export declare function createPkcePair(): PkcePair;
+/** Create a URL-safe OAuth state value. */
+export declare function createState(): string;

package/dist/auth/pkce.js

@@ -0,0 +1,14 @@
+import { createHash, randomBytes } from "node:crypto";
+/** Create a URL-safe PKCE verifier and its S256 challenge. */
+export function createPkcePair() {
+    const verifier = randomBytes(64).toString("base64url");
+    const challenge = createHash("sha256")
+        .update(verifier, "ascii")
+        .digest("base64url");
+    return { verifier, challenge };
+}
+/** Create a URL-safe OAuth state value. */
+export function createState() {
+    return randomBytes(32).toString("base64url");
+}
+//# sourceMappingURL=pkce.js.map

package/dist/auth/pkce.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pkce.js","sourceRoot":"","sources":["../../src/auth/pkce.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAOtD,8DAA8D;AAC9D,MAAM,UAAU,cAAc;IAC5B,MAAM,QAAQ,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACvD,MAAM,SAAS,GAAG,UAAU,CAAC,QAAQ,CAAC;SACnC,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC;SACzB,MAAM,CAAC,WAAW,CAAC,CAAC;IACvB,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;AACjC,CAAC;AAED,2CAA2C;AAC3C,MAAM,UAAU,WAAW;IACzB,OAAO,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAC/C,CAAC"}

package/dist/cli.d.ts

@@ -0,0 +1,18 @@
+#!/usr/bin/env node
+import { type Fetcher } from "./auth/cli-auth-client.js";
+import { type CliAuthStateStore } from "./auth/cli-auth-state.js";
+import { type LocalCallbackOptions, type LocalCallbackServer } from "./auth/local-callback.js";
+export type CliDependencies = {
+    readonly env?: Readonly<Record<string, string | undefined>>;
+    readonly fetcher?: Fetcher | undefined;
+    readonly openBrowser?: (url: URL) => Promise<void>;
+    readonly startCallback?: (options: LocalCallbackOptions) => Promise<LocalCallbackServer>;
+    readonly stateStore?: CliAuthStateStore;
+    readonly stdout?: (line: string) => void;
+    readonly stderr?: (line: string) => void;
+    readonly now?: (() => Date) | undefined;
+};
+/** Return whether a module URL is the process entrypoint, following npm bin symlinks. */
+export declare function isDirectCliInvocation(moduleUrl: string, argvPath: string | undefined, resolveRealpath?: (path: string) => string): boolean;
+/** Run the Hyperstar CLI with injectable process boundaries for tests. */
+export declare function runCli(argv?: readonly string[], dependencies?: CliDependencies): Promise<number>;

package/dist/cli.js

@@ -0,0 +1,326 @@
+#!/usr/bin/env node
+import { spawn } from "node:child_process";
+import { realpathSync } from "node:fs";
+import { parseArgs } from "node:util";
+import { fileURLToPath } from "node:url";
+import { createCliAuthClient, createStoredCliAccessTokenProvider, tokenPairToAuthState, } from "./auth/cli-auth-client.js";
+import { createFileCliAuthStateStore, } from "./auth/cli-auth-state.js";
+import { startLocalCallbackServer, } from "./auth/local-callback.js";
+import { createPkcePair, createState } from "./auth/pkce.js";
+import { DEFAULT_API_BASE_URL, DEFAULT_APP_BASE_URL, createCliWorkspaceSelection, normalizeBaseUrl, } from "./config.js";
+import { createHyperstarClient } from "./http.js";
+const CLI_USAGE = [
+    "Usage: hyperstar <command> [options]",
+    "",
+    "Commands:",
+    "  login                         Open browser login and save local CLI auth",
+    "  logout                        Revoke and clear local CLI auth",
+    "  whoami [--json]               Print the authenticated principal",
+    "  workspaces list [--json]      List accessible workspaces",
+    "  workspaces use <workspace_id> Select a workspace for Product API calls",
+    "",
+    "Options:",
+    "  --json   Print supported command output as JSON",
+    "  --help   Show this help",
+].join("\n");
+/** Return whether a module URL is the process entrypoint, following npm bin symlinks. */
+export function isDirectCliInvocation(moduleUrl, argvPath, resolveRealpath = realpathSync) {
+    if (argvPath === undefined) {
+        return false;
+    }
+    try {
+        return (resolveRealpath(fileURLToPath(moduleUrl)) === resolveRealpath(argvPath));
+    }
+    catch {
+        return false;
+    }
+}
+/** Run the Hyperstar CLI with injectable process boundaries for tests. */
+export async function runCli(argv = process.argv.slice(2), dependencies = {}) {
+    const stdout = dependencies.stdout ?? ((line) => process.stdout.write(`${line}\n`));
+    const stderr = dependencies.stderr ?? ((line) => process.stderr.write(`${line}\n`));
+    try {
+        const command = parseCommand(argv);
+        if (command.help) {
+            stdout(CLI_USAGE);
+            return 0;
+        }
+        const env = dependencies.env ?? process.env;
+        const store = dependencies.stateStore ?? createFileCliAuthStateStore({ env });
+        const fetcher = dependencies.fetcher;
+        if (command.positionals[0] === "login") {
+            await login({ env, store, fetcher, stdout, dependencies });
+            return 0;
+        }
+        if (command.positionals[0] === "logout") {
+            await logout({ store, fetcher, stdout });
+            return 0;
+        }
+        if (command.positionals[0] === "whoami") {
+            await whoami({
+                store,
+                fetcher,
+                stdout,
+                json: command.json,
+                now: dependencies.now,
+            });
+            return 0;
+        }
+        if (command.positionals[0] === "workspaces" &&
+            command.positionals[1] === "list") {
+            await listWorkspaces({
+                store,
+                fetcher,
+                stdout,
+                json: command.json,
+                now: dependencies.now,
+            });
+            return 0;
+        }
+        if (command.positionals[0] === "workspaces" &&
+            command.positionals[1] === "use") {
+            await useWorkspace({
+                store,
+                fetcher,
+                stdout,
+                workspaceId: command.positionals[2],
+                now: dependencies.now,
+            });
+            return 0;
+        }
+        stderr(CLI_USAGE);
+        return 2;
+    }
+    catch (error) {
+        stderr(error instanceof Error ? error.message : String(error));
+        return 1;
+    }
+}
+/** Parse CLI arguments using Node's standard parser. */
+function parseCommand(argv) {
+    const parsed = parseArgs({
+        args: [...argv],
+        allowPositionals: true,
+        options: {
+            json: { type: "boolean", default: false },
+            help: { type: "boolean", default: false },
+        },
+    });
+    return {
+        positionals: parsed.positionals,
+        json: parsed.values.json ?? false,
+        help: parsed.values.help ?? false,
+    };
+}
+/** Complete browser-based local login and persist token state. */
+async function login(options) {
+    const apiBaseUrl = resolveEnvBaseUrl(options.env.HYPERSTAR_API_BASE_URL, DEFAULT_API_BASE_URL, "HYPERSTAR_API_BASE_URL");
+    const appBaseUrl = resolveLoginAppBaseUrl(options.env, apiBaseUrl);
+    const pkce = createPkcePair();
+    const state = createState();
+    const startCallback = options.dependencies.startCallback ?? startLocalCallbackServer;
+    const callback = await startCallback({ expectedState: state });
+    try {
+        const client = createCliAuthClient({
+            apiBaseUrl,
+            appBaseUrl,
+            fetcher: options.fetcher,
+        });
+        const authorizeUrl = client.buildAuthorizeUrl(callback.callbackUrl, pkce, state);
+        options.stdout(`Open this URL to authorize Hyperstar CLI: ${authorizeUrl.toString()}`);
+        try {
+            await (options.dependencies.openBrowser ?? openBrowser)(authorizeUrl);
+        }
+        catch (error) {
+            void error;
+            options.stdout("Could not open your browser automatically. Copy the URL above into your browser.");
+        }
+        const callbackResult = await callback.result;
+        if ("error" in callbackResult) {
+            throw new Error(`Hyperstar login failed: ${callbackResult.error}`);
+        }
+        const tokenPair = await client.exchangeCode(callbackResult.code, pkce.verifier, callback.callbackUrl);
+        await options.store.withExclusiveLock(async () => {
+            await options.store.write(tokenPairToAuthState(tokenPair, {
+                apiBaseUrl,
+                appBaseUrl,
+                previousState: await options.store.read(),
+            }));
+        });
+        options.stdout("Logged in to Hyperstar.");
+    }
+    finally {
+        await callback.close();
+    }
+}
+/** Log out remotely when possible and remove local auth state. */
+async function logout(options) {
+    await options.store.withExclusiveLock(async () => {
+        const state = await options.store.read();
+        if (state !== null) {
+            const client = createCliAuthClient({
+                apiBaseUrl: state.apiBaseUrl,
+                appBaseUrl: state.appBaseUrl,
+                fetcher: options.fetcher,
+            });
+            try {
+                await client.logout(state.refreshToken);
+            }
+            finally {
+                await options.store.clear();
+            }
+        }
+        else {
+            await options.store.clear();
+        }
+    });
+    options.stdout("Logged out of Hyperstar.");
+}
+/** Print the authenticated principal from the Product API. */
+async function whoami(options) {
+    const client = await createCliProductClient(options);
+    const payload = await client.get("/v1/whoami");
+    printPayload(payload, options.json, options.stdout);
+}
+/** List workspaces available to the logged-in CLI user. */
+async function listWorkspaces(options) {
+    const { authClient, accessToken } = await createWorkspaceClient(options);
+    const payload = await authClient.listWorkspaces(accessToken);
+    if (options.json) {
+        options.stdout(JSON.stringify(payload, null, 2));
+        return;
+    }
+    for (const workspace of payload.workspaces) {
+        options.stdout(`${workspace.organization_id}${workspace.name === undefined ? "" : `\t${workspace.name}`}`);
+    }
+}
+/** Persist the selected workspace after verifying it is accessible. */
+async function useWorkspace(options) {
+    if (options.workspaceId === undefined || options.workspaceId.length === 0) {
+        throw new Error("Workspace id is required");
+    }
+    const { authClient, accessToken } = await createWorkspaceClient(options);
+    const payload = await authClient.listWorkspaces(accessToken);
+    if (!payload.workspaces.some((workspace) => workspace.organization_id === options.workspaceId)) {
+        throw new Error(`Workspace ${options.workspaceId} is not available`);
+    }
+    await createCliWorkspaceSelection(options.store).setSelectedOrganizationId(options.workspaceId);
+    options.stdout(`Selected workspace ${options.workspaceId}.`);
+}
+/** Build an HTTP client authenticated from persisted CLI state. */
+async function createCliProductClient(options) {
+    const state = await requireAuthState(options.store);
+    const authClient = createCliAuthClient({
+        apiBaseUrl: state.apiBaseUrl,
+        appBaseUrl: state.appBaseUrl,
+        fetcher: options.fetcher,
+    });
+    const accessTokenProvider = createStoredCliAccessTokenProvider({
+        store: options.store,
+        client: authClient,
+        now: options.now,
+    });
+    return createHyperstarClient({
+        config: {
+            authMode: "cli",
+            apiBaseUrl: state.apiBaseUrl,
+            appBaseUrl: state.appBaseUrl,
+            accessTokenProvider,
+            workspaceSelection: createCliWorkspaceSelection(options.store),
+        },
+        fetcher: options.fetcher,
+    });
+}
+/** Build workspace-listing dependencies from persisted CLI state. */
+async function createWorkspaceClient(options) {
+    const state = await requireAuthState(options.store);
+    const authClient = createCliAuthClient({
+        apiBaseUrl: state.apiBaseUrl,
+        appBaseUrl: state.appBaseUrl,
+        fetcher: options.fetcher,
+    });
+    const provider = createStoredCliAccessTokenProvider({
+        store: options.store,
+        client: authClient,
+        now: options.now,
+    });
+    return {
+        state,
+        authClient,
+        accessToken: await provider.getAccessToken(),
+    };
+}
+/** Require local CLI auth state or explain how to create it. */
+async function requireAuthState(store) {
+    const state = await store.read();
+    if (state === null) {
+        throw new Error("Run `hyperstar login` or set HYPERSTAR_API_KEY");
+    }
+    return state;
+}
+/** Print structured payloads as JSON or a compact human string. */
+function printPayload(payload, json, stdout) {
+    if (json || typeof payload !== "object" || payload === null) {
+        stdout(JSON.stringify(payload, null, 2));
+        return;
+    }
+    stdout(JSON.stringify(payload));
+}
+/** Resolve and normalize an optional base URL env value. */
+function resolveEnvBaseUrl(rawValue, fallback, envName) {
+    const value = rawValue?.trim();
+    return normalizeBaseUrl(value === undefined || value.length === 0 ? fallback : value, envName);
+}
+/** Resolve the browser app URL used by login so auth and token exchange match. */
+function resolveLoginAppBaseUrl(env, apiBaseUrl) {
+    if (env.HYPERSTAR_APP_BASE_URL !== undefined) {
+        return resolveEnvBaseUrl(env.HYPERSTAR_APP_BASE_URL, DEFAULT_APP_BASE_URL, "HYPERSTAR_APP_BASE_URL");
+    }
+    return appBaseUrlForApiBaseUrl(apiBaseUrl);
+}
+/** Map known deployed Product API origins to their matching frontend origins. */
+function appBaseUrlForApiBaseUrl(apiBaseUrl) {
+    const origin = new URL(apiBaseUrl).origin;
+    if (origin === "https://autopilot.dev.hyper-star.org") {
+        return "https://app.dev.hyper-star.org";
+    }
+    if (origin === "https://autopilot.hyper-star.org") {
+        return DEFAULT_APP_BASE_URL;
+    }
+    if (origin === DEFAULT_API_BASE_URL) {
+        return DEFAULT_APP_BASE_URL;
+    }
+    throw new Error("Set HYPERSTAR_APP_BASE_URL when HYPERSTAR_API_BASE_URL does not use a known Hyperstar API origin");
+}
+/** Open the system browser for the authorization request. */
+async function openBrowser(url) {
+    const command = process.platform === "darwin"
+        ? "open"
+        : process.platform === "win32"
+            ? "cmd"
+            : "xdg-open";
+    const args = process.platform === "win32"
+        ? ["/c", "start", "", url.toString()]
+        : [url.toString()];
+    await new Promise((resolve) => {
+        try {
+            const child = spawn(command, args, {
+                detached: true,
+                stdio: "ignore",
+            });
+            child.once("error", () => resolve());
+            child.once("spawn", () => resolve());
+            child.unref();
+        }
+        catch (error) {
+            void error;
+            resolve();
+        }
+    });
+}
+if (isDirectCliInvocation(import.meta.url, process.argv[1])) {
+    void runCli().then((exitCode) => {
+        process.exitCode = exitCode;
+    });
+}
+//# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AAEA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,OAAO,EACL,mBAAmB,EACnB,kCAAkC,EAClC,oBAAoB,GAErB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,2BAA2B,GAE5B,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,wBAAwB,GAGzB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7D,OAAO,EACL,oBAAoB,EACpB,oBAAoB,EACpB,2BAA2B,EAC3B,gBAAgB,GACjB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,qBAAqB,EAAkB,MAAM,WAAW,CAAC;AAqBlE,MAAM,SAAS,GAAG;IAChB,sCAAsC;IACtC,EAAE;IACF,WAAW;IACX,4EAA4E;IAC5E,iEAAiE;IACjE,mEAAmE;IACnE,4DAA4D;IAC5D,0EAA0E;IAC1E,EAAE;IACF,UAAU;IACV,mDAAmD;IACnD,2BAA2B;CAC5B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAEb,yFAAyF;AACzF,MAAM,UAAU,qBAAqB,CACnC,SAAiB,EACjB,QAA4B,EAC5B,kBAA4C,YAAY;IAExD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,CAAC;QACH,OAAO,CACL,eAAe,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,KAAK,eAAe,CAAC,QAAQ,CAAC,CACxE,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,0EAA0E;AAC1E,MAAM,CAAC,KAAK,UAAU,MAAM,CAC1B,OAA0B,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAC/C,eAAgC,EAAE;IAElC,MAAM,MAAM,GACV,YAAY,CAAC,MAAM,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC;IACvE,MAAM,MAAM,GACV,YAAY,CAAC,MAAM,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC;IAEvE,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;QACnC,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;YACjB,MAAM,CAAC,SAAS,CAAC,CAAC;YAClB,OAAO,CAAC,CAAC;QACX,CAAC;QACD,MAAM,GAAG,GAAG,YAAY,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;QAC5C,MAAM,KAAK,GACT,YAAY,CAAC,UAAU,IAAI,2BAA2B,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;QAClE,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,CAAC;QAErC,IAAI,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,OAAO,EAAE,CAAC;YACvC,MAAM,KAAK,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC;YAC3D,OAAO,CAAC,CAAC;QACX,CAAC;QACD,IAAI,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;YACxC,MAAM,MAAM,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;YACzC,OAAO,CAAC,CAAC;QACX,CAAC;QACD,IAAI,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;YACxC,MAAM,MAAM,CAAC;gBACX,KAAK;gBACL,OAAO;gBACP,MAAM;gBACN,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,GAAG,EAAE,YAAY,CAAC,GAAG;aACtB,CAAC,CAAC;YACH,OAAO,CAAC,CAAC;QACX,CAAC;QACD,IACE,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,YAAY;YACvC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,MAAM,EACjC,CAAC;YACD,MAAM,cAAc,CAAC;gBACnB,KAAK;gBACL,OAAO;gBACP,MAAM;gBACN,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,GAAG,EAAE,YAAY,CAAC,GAAG;aACtB,CAAC,CAAC;YACH,OAAO,CAAC,CAAC;QACX,CAAC;QACD,IACE,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,YAAY;YACvC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,KAAK,EAChC,CAAC;YACD,MAAM,YAAY,CAAC;gBACjB,KAAK;gBACL,OAAO;gBACP,MAAM;gBACN,WAAW,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC;gBACnC,GAAG,EAAE,YAAY,CAAC,GAAG;aACtB,CAAC,CAAC;YACH,OAAO,CAAC,CAAC;QACX,CAAC;QAED,MAAM,CAAC,SAAS,CAAC,CAAC;QAClB,OAAO,CAAC,CAAC;IACX,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAC/D,OAAO,CAAC,CAAC;IACX,CAAC;AACH,CAAC;AAED,wDAAwD;AACxD,SAAS,YAAY,CAAC,IAAuB;IAC3C,MAAM,MAAM,GAAG,SAAS,CAAC;QACvB,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC;QACf,gBAAgB,EAAE,IAAI;QACtB,OAAO,EAAE;YACP,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE;YACzC,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE;SAC1C;KACF,CAAC,CAAC;IACH,OAAO;QACL,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,IAAI,KAAK;QACjC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,IAAI,KAAK;KAClC,CAAC;AACJ,CAAC;AAED,kEAAkE;AAClE,KAAK,UAAU,KAAK,CAAC,OAMpB;IACC,MAAM,UAAU,GAAG,iBAAiB,CAClC,OAAO,CAAC,GAAG,CAAC,sBAAsB,EAClC,oBAAoB,EACpB,wBAAwB,CACzB,CAAC;IACF,MAAM,UAAU,GAAG,sBAAsB,CAAC,OAAO,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;IACnE,MAAM,IAAI,GAAG,cAAc,EAAE,CAAC;IAC9B,MAAM,KAAK,GAAG,WAAW,EAAE,CAAC;IAC5B,MAAM,aAAa,GACjB,OAAO,CAAC,YAAY,CAAC,aAAa,IAAI,wBAAwB,CAAC;IACjE,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,CAAC;IAC/D,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,mBAAmB,CAAC;YACjC,UAAU;YACV,UAAU;YACV,OAAO,EAAE,OAAO,CAAC,OAAO;SACzB,CAAC,CAAC;QACH,MAAM,YAAY,GAAG,MAAM,CAAC,iBAAiB,CAC3C,QAAQ,CAAC,WAAW,EACpB,IAAI,EACJ,KAAK,CACN,CAAC;QACF,OAAO,CAAC,MAAM,CACZ,6CAA6C,YAAY,CAAC,QAAQ,EAAE,EAAE,CACvE,CAAC;QACF,IAAI,CAAC;YACH,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,WAAW,IAAI,WAAW,CAAC,CAAC,YAAY,CAAC,CAAC;QACxE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,KAAK,KAAK,CAAC;YACX,OAAO,CAAC,MAAM,CACZ,kFAAkF,CACnF,CAAC;QACJ,CAAC;QAED,MAAM,cAAc,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC;QAC7C,IAAI,OAAO,IAAI,cAAc,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,2BAA2B,cAAc,CAAC,KAAK,EAAE,CAAC,CAAC;QACrE,CAAC;QACD,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,YAAY,CACzC,cAAc,CAAC,IAAI,EACnB,IAAI,CAAC,QAAQ,EACb,QAAQ,CAAC,WAAW,CACrB,CAAC;QACF,MAAM,OAAO,CAAC,KAAK,CAAC,iBAAiB,CAAC,KAAK,IAAI,EAAE;YAC/C,MAAM,OAAO,CAAC,KAAK,CAAC,KAAK,CACvB,oBAAoB,CAAC,SAAS,EAAE;gBAC9B,UAAU;gBACV,UAAU;gBACV,aAAa,EAAE,MAAM,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE;aAC1C,CAAC,CACH,CAAC;QACJ,CAAC,CAAC,CAAC;QACH,OAAO,CAAC,MAAM,CAAC,yBAAyB,CAAC,CAAC;IAC5C,CAAC;YAAS,CAAC;QACT,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC;IACzB,CAAC;AACH,CAAC;AAED,kEAAkE;AAClE,KAAK,UAAU,MAAM,CAAC,OAIrB;IACC,MAAM,OAAO,CAAC,KAAK,CAAC,iBAAiB,CAAC,KAAK,IAAI,EAAE;QAC/C,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QACzC,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACnB,MAAM,MAAM,GAAG,mBAAmB,CAAC;gBACjC,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,OAAO,EAAE,OAAO,CAAC,OAAO;aACzB,CAAC,CAAC;YACH,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;YAC1C,CAAC;oBAAS,CAAC;gBACT,MAAM,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;YAC9B,CAAC;QACH,CAAC;aAAM,CAAC;YACN,MAAM,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QAC9B,CAAC;IACH,CAAC,CAAC,CAAC;IACH,OAAO,CAAC,MAAM,CAAC,0BAA0B,CAAC,CAAC;AAC7C,CAAC;AAED,8DAA8D;AAC9D,KAAK,UAAU,MAAM,CAAC,OAMrB;IACC,MAAM,MAAM,GAAG,MAAM,sBAAsB,CAAC,OAAO,CAAC,CAAC;IACrD,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IAC/C,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;AACtD,CAAC;AAED,2DAA2D;AAC3D,KAAK,UAAU,cAAc,CAAC,OAM7B;IACC,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,GAAG,MAAM,qBAAqB,CAAC,OAAO,CAAC,CAAC;IACzE,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC;IAC7D,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QACjB,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACjD,OAAO;IACT,CAAC;IACD,KAAK,MAAM,SAAS,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;QAC3C,OAAO,CAAC,MAAM,CACZ,GAAG,SAAS,CAAC,eAAe,GAAG,SAAS,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,IAAI,EAAE,EAAE,CAC3F,CAAC;IACJ,CAAC;AACH,CAAC;AAED,uEAAuE;AACvE,KAAK,UAAU,YAAY,CAAC,OAM3B;IACC,IAAI,OAAO,CAAC,WAAW,KAAK,SAAS,IAAI,OAAO,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1E,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IAC9C,CAAC;IACD,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,GAAG,MAAM,qBAAqB,CAAC,OAAO,CAAC,CAAC;IACzE,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC;IAC7D,IACE,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CACtB,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,eAAe,KAAK,OAAO,CAAC,WAAW,CACjE,EACD,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,aAAa,OAAO,CAAC,WAAW,mBAAmB,CAAC,CAAC;IACvE,CAAC;IACD,MAAM,2BAA2B,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,yBAAyB,CACxE,OAAO,CAAC,WAAW,CACpB,CAAC;IACF,OAAO,CAAC,MAAM,CAAC,sBAAsB,OAAO,CAAC,WAAW,GAAG,CAAC,CAAC;AAC/D,CAAC;AAED,mEAAmE;AACnE,KAAK,UAAU,sBAAsB,CAAC,OAIrC;IACC,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACpD,MAAM,UAAU,GAAG,mBAAmB,CAAC;QACrC,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,OAAO,EAAE,OAAO,CAAC,OAAO;KACzB,CAAC,CAAC;IACH,MAAM,mBAAmB,GAAG,kCAAkC,CAAC;QAC7D,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,MAAM,EAAE,UAAU;QAClB,GAAG,EAAE,OAAO,CAAC,GAAG;KACjB,CAAC,CAAC;IACH,OAAO,qBAAqB,CAAC;QAC3B,MAAM,EAAE;YACN,QAAQ,EAAE,KAAK;YACf,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,mBAAmB;YACnB,kBAAkB,EAAE,2BAA2B,CAAC,OAAO,CAAC,KAAK,CAAC;SAC/D;QACD,OAAO,EAAE,OAAO,CAAC,OAAO;KACzB,CAAC,CAAC;AACL,CAAC;AAED,qEAAqE;AACrE,KAAK,UAAU,qBAAqB,CAAC,OAIpC;IACC,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACpD,MAAM,UAAU,GAAG,mBAAmB,CAAC;QACrC,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,OAAO,EAAE,OAAO,CAAC,OAAO;KACzB,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,kCAAkC,CAAC;QAClD,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,MAAM,EAAE,UAAU;QAClB,GAAG,EAAE,OAAO,CAAC,GAAG;KACjB,CAAC,CAAC;IACH,OAAO;QACL,KAAK;QACL,UAAU;QACV,WAAW,EAAE,MAAM,QAAQ,CAAC,cAAc,EAAE;KAC7C,CAAC;AACJ,CAAC;AAED,gEAAgE;AAChE,KAAK,UAAU,gBAAgB,CAAC,KAAwB;IACtD,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC;IACjC,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,mEAAmE;AACnE,SAAS,YAAY,CACnB,OAAkB,EAClB,IAAa,EACb,MAA8B;IAE9B,IAAI,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QAC5D,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACzC,OAAO;IACT,CAAC;IACD,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;AAClC,CAAC;AAED,4DAA4D;AAC5D,SAAS,iBAAiB,CACxB,QAA4B,EAC5B,QAAgB,EAChB,OAAe;IAEf,MAAM,KAAK,GAAG,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC/B,OAAO,gBAAgB,CACrB,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,EAC5D,OAAO,CACR,CAAC;AACJ,CAAC;AAED,kFAAkF;AAClF,SAAS,sBAAsB,CAC7B,GAAiD,EACjD,UAAkB;IAElB,IAAI,GAAG,CAAC,sBAAsB,KAAK,SAAS,EAAE,CAAC;QAC7C,OAAO,iBAAiB,CACtB,GAAG,CAAC,sBAAsB,EAC1B,oBAAoB,EACpB,wBAAwB,CACzB,CAAC;IACJ,CAAC;IAED,OAAO,uBAAuB,CAAC,UAAU,CAAC,CAAC;AAC7C,CAAC;AAED,iFAAiF;AACjF,SAAS,uBAAuB,CAAC,UAAkB;IACjD,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC;IAC1C,IAAI,MAAM,KAAK,sCAAsC,EAAE,CAAC;QACtD,OAAO,gCAAgC,CAAC;IAC1C,CAAC;IACD,IAAI,MAAM,KAAK,kCAAkC,EAAE,CAAC;QAClD,OAAO,oBAAoB,CAAC;IAC9B,CAAC;IACD,IAAI,MAAM,KAAK,oBAAoB,EAAE,CAAC;QACpC,OAAO,oBAAoB,CAAC;IAC9B,CAAC;IACD,MAAM,IAAI,KAAK,CACb,kGAAkG,CACnG,CAAC;AACJ,CAAC;AAED,6DAA6D;AAC7D,KAAK,UAAU,WAAW,CAAC,GAAQ;IACjC,MAAM,OAAO,GACX,OAAO,CAAC,QAAQ,KAAK,QAAQ;QAC3B,CAAC,CAAC,MAAM;QACR,CAAC,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO;YAC5B,CAAC,CAAC,KAAK;YACP,CAAC,CAAC,UAAU,CAAC;IACnB,MAAM,IAAI,GACR,OAAO,CAAC,QAAQ,KAAK,OAAO;QAC1B,CAAC,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC;QACrC,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;IACvB,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;QAClC,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE;gBACjC,QAAQ,EAAE,IAAI;gBACd,KAAK,EAAE,QAAQ;aAChB,CAAC,CAAC;YACH,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;YACrC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;YACrC,KAAK,CAAC,KAAK,EAAE,CAAC;QAChB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,KAAK,KAAK,CAAC;YACX,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,IAAI,qBAAqB,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5D,KAAK,MAAM,EAAE,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE;QAC9B,OAAO,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC9B,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/config.d.ts

@@ -0,0 +1,35 @@
+import { type CliAccessTokenProvider, type Fetcher } from "./auth/cli-auth-client.js";
+import { type CliAuthStateStore } from "./auth/cli-auth-state.js";
+export type ServiceAccountConfig = {
+    readonly authMode: "service_account";
+    readonly apiBaseUrl: string;
+    readonly apiKey: string;
+};
+export type CliConfig = {
+    readonly authMode: "cli";
+    readonly apiBaseUrl: string;
+    readonly appBaseUrl: string;
+    readonly accessTokenProvider: CliAccessTokenProvider;
+    readonly workspaceSelection: CliWorkspaceSelection;
+};
+export type HyperstarMcpConfig = ServiceAccountConfig | CliConfig;
+export type Env = Readonly<Record<string, string | undefined>>;
+export type CliWorkspaceSelection = {
+    readonly getSelectedOrganizationId: () => Promise<string | undefined>;
+    readonly setSelectedOrganizationId: (organizationId: string) => Promise<void>;
+};
+export declare const DEFAULT_API_BASE_URL = "https://autopilot.hyper-star.org";
+export declare const DEFAULT_APP_BASE_URL = "https://app.hyper-star.org";
+export type LoadConfigOptions = {
+    readonly env?: Env;
+    readonly fetcher?: Fetcher | undefined;
+    readonly now?: (() => Date) | undefined;
+};
+/** Load MCP configuration from env or persisted CLI auth state. */
+export declare function loadConfig(options?: Env | LoadConfigOptions): HyperstarMcpConfig;
+/** Create the local CLI workspace-selection port backed by auth state. */
+export declare function createCliWorkspaceSelection(store: CliAuthStateStore): CliWorkspaceSelection;
+/** Redact an API key or bearer token for error messages. */
+export declare function redactSecret(value: string): string;
+/** Normalize an env-provided base URL. */
+export declare function normalizeBaseUrl(rawBaseUrl: string, envName: string): string;

package/dist/config.js

@@ -0,0 +1,101 @@
+import { createCliAuthClient, createStoredCliAccessTokenProvider, } from "./auth/cli-auth-client.js";
+import { createFileCliAuthStateStore, } from "./auth/cli-auth-state.js";
+export const DEFAULT_API_BASE_URL = "https://autopilot.hyper-star.org";
+export const DEFAULT_APP_BASE_URL = "https://app.hyper-star.org";
+/** Load MCP configuration from env or persisted CLI auth state. */
+export function loadConfig(options = process.env) {
+    const loadOptions = isLoadConfigOptions(options) ? options : { env: options };
+    const env = loadOptions.env ?? process.env;
+    const fetcher = loadOptions.fetcher;
+    const now = loadOptions.now;
+    const apiKey = env.HYPERSTAR_API_KEY?.trim();
+    const rawBaseUrl = env.HYPERSTAR_API_BASE_URL?.trim() ?? DEFAULT_API_BASE_URL;
+    const apiBaseUrl = normalizeBaseUrl(rawBaseUrl.length === 0 ? DEFAULT_API_BASE_URL : rawBaseUrl, "HYPERSTAR_API_BASE_URL");
+    if (apiKey !== undefined && apiKey.length > 0) {
+        if (!isValidApiKeyHeaderValue(apiKey)) {
+            throw new Error("HYPERSTAR_API_KEY contains unsupported characters");
+        }
+        return {
+            authMode: "service_account",
+            apiBaseUrl,
+            apiKey,
+        };
+    }
+    const store = createFileCliAuthStateStore({ env });
+    const state = store.readSync();
+    if (state === null) {
+        throw new Error("Run `hyperstar login` or set HYPERSTAR_API_KEY");
+    }
+    const cliApiBaseUrl = normalizeBaseUrl(env.HYPERSTAR_API_BASE_URL?.trim() ?? state.apiBaseUrl, "HYPERSTAR_API_BASE_URL");
+    const cliAppBaseUrl = normalizeBaseUrl(env.HYPERSTAR_APP_BASE_URL?.trim() ?? state.appBaseUrl, "HYPERSTAR_APP_BASE_URL");
+    const client = createCliAuthClient({
+        apiBaseUrl: cliApiBaseUrl,
+        appBaseUrl: cliAppBaseUrl,
+        fetcher,
+    });
+    return {
+        authMode: "cli",
+        apiBaseUrl: cliApiBaseUrl,
+        appBaseUrl: cliAppBaseUrl,
+        accessTokenProvider: createStoredCliAccessTokenProvider({
+            store,
+            client,
+            now,
+        }),
+        workspaceSelection: createCliWorkspaceSelection(store),
+    };
+}
+/** Create the local CLI workspace-selection port backed by auth state. */
+export function createCliWorkspaceSelection(store) {
+    return {
+        getSelectedOrganizationId: async () => (await store.read())?.selectedOrganizationId,
+        setSelectedOrganizationId: async (organizationId) => {
+            await store.withExclusiveLock(async () => {
+                const state = await store.read();
+                if (state === null) {
+                    throw new Error("Run `hyperstar login` or set HYPERSTAR_API_KEY");
+                }
+                await store.write({
+                    ...state,
+                    selectedOrganizationId: organizationId,
+                });
+            });
+        },
+    };
+}
+/** Return true when loadConfig received its structured options object. */
+function isLoadConfigOptions(options) {
+    return "env" in options || "fetcher" in options || "now" in options;
+}
+/** Redact an API key or bearer token for error messages. */
+export function redactSecret(value) {
+    const separatorIndex = value.indexOf(".");
+    if (separatorIndex <= 0) {
+        return "[redacted]";
+    }
+    return `${value.slice(0, separatorIndex)}.[redacted]`;
+}
+/** Return true when the key can be safely used as one HTTP header value. */
+function isValidApiKeyHeaderValue(value) {
+    return /^[\x21-\x7e]+$/.test(value);
+}
+/** Normalize an env-provided base URL. */
+export function normalizeBaseUrl(rawBaseUrl, envName) {
+    let parsed;
+    try {
+        parsed = new URL(rawBaseUrl);
+    }
+    catch {
+        throw new Error(`${envName} must be a valid URL`);
+    }
+    if (parsed.username.length > 0 || parsed.password.length > 0) {
+        throw new Error(`${envName} must not include credentials`);
+    }
+    const isHttps = parsed.protocol === "https:";
+    const isLocalhostHttp = parsed.protocol === "http:" && parsed.hostname === "localhost";
+    if (!isHttps && !isLocalhostHttp) {
+        throw new Error(`${envName} must use HTTPS, except localhost development URLs`);
+    }
+    return parsed.toString().replace(/\/+$/, "");
+}
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,mBAAmB,EACnB,kCAAkC,GAGnC,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,2BAA2B,GAE5B,MAAM,0BAA0B,CAAC;AAyBlC,MAAM,CAAC,MAAM,oBAAoB,GAAG,kCAAkC,CAAC;AACvE,MAAM,CAAC,MAAM,oBAAoB,GAAG,4BAA4B,CAAC;AAQjE,mEAAmE;AACnE,MAAM,UAAU,UAAU,CACxB,UAAmC,OAAO,CAAC,GAAG;IAE9C,MAAM,WAAW,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC;IAC9E,MAAM,GAAG,GAAG,WAAW,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IAC3C,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC;IACpC,MAAM,GAAG,GAAG,WAAW,CAAC,GAAG,CAAC;IAC5B,MAAM,MAAM,GAAG,GAAG,CAAC,iBAAiB,EAAE,IAAI,EAAE,CAAC;IAC7C,MAAM,UAAU,GAAG,GAAG,CAAC,sBAAsB,EAAE,IAAI,EAAE,IAAI,oBAAoB,CAAC;IAC9E,MAAM,UAAU,GAAG,gBAAgB,CACjC,UAAU,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,UAAU,EAC3D,wBAAwB,CACzB,CAAC;IACF,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9C,IAAI,CAAC,wBAAwB,CAAC,MAAM,CAAC,EAAE,CAAC;YACtC,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;QACvE,CAAC;QAED,OAAO;YACL,QAAQ,EAAE,iBAAiB;YAC3B,UAAU;YACV,MAAM;SACP,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,2BAA2B,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;IACnD,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC;IAC/B,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpE,CAAC;IACD,MAAM,aAAa,GAAG,gBAAgB,CACpC,GAAG,CAAC,sBAAsB,EAAE,IAAI,EAAE,IAAI,KAAK,CAAC,UAAU,EACtD,wBAAwB,CACzB,CAAC;IACF,MAAM,aAAa,GAAG,gBAAgB,CACpC,GAAG,CAAC,sBAAsB,EAAE,IAAI,EAAE,IAAI,KAAK,CAAC,UAAU,EACtD,wBAAwB,CACzB,CAAC;IACF,MAAM,MAAM,GAAG,mBAAmB,CAAC;QACjC,UAAU,EAAE,aAAa;QACzB,UAAU,EAAE,aAAa;QACzB,OAAO;KACR,CAAC,CAAC;IAEH,OAAO;QACL,QAAQ,EAAE,KAAK;QACf,UAAU,EAAE,aAAa;QACzB,UAAU,EAAE,aAAa;QACzB,mBAAmB,EAAE,kCAAkC,CAAC;YACtD,KAAK;YACL,MAAM;YACN,GAAG;SACJ,CAAC;QACF,kBAAkB,EAAE,2BAA2B,CAAC,KAAK,CAAC;KACvD,CAAC;AACJ,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,2BAA2B,CACzC,KAAwB;IAExB,OAAO;QACL,yBAAyB,EAAE,KAAK,IAAI,EAAE,CACpC,CAAC,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC,EAAE,sBAAsB;QAC9C,yBAAyB,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE;YAClD,MAAM,KAAK,CAAC,iBAAiB,CAAC,KAAK,IAAI,EAAE;gBACvC,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC;gBACjC,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;oBACnB,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;gBACpE,CAAC;gBACD,MAAM,KAAK,CAAC,KAAK,CAAC;oBAChB,GAAG,KAAK;oBACR,sBAAsB,EAAE,cAAc;iBACvC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC;AAED,0EAA0E;AAC1E,SAAS,mBAAmB,CAC1B,OAAgC;IAEhC,OAAO,KAAK,IAAI,OAAO,IAAI,SAAS,IAAI,OAAO,IAAI,KAAK,IAAI,OAAO,CAAC;AACtE,CAAC;AAED,4DAA4D;AAC5D,MAAM,UAAU,YAAY,CAAC,KAAa;IACxC,MAAM,cAAc,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC1C,IAAI,cAAc,IAAI,CAAC,EAAE,CAAC;QACxB,OAAO,YAAY,CAAC;IACtB,CAAC;IAED,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,cAAc,CAAC,aAAa,CAAC;AACxD,CAAC;AAED,4EAA4E;AAC5E,SAAS,wBAAwB,CAAC,KAAa;IAC7C,OAAO,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AACtC,CAAC;AAED,0CAA0C;AAC1C,MAAM,UAAU,gBAAgB,CAAC,UAAkB,EAAE,OAAe;IAClE,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,GAAG,OAAO,sBAAsB,CAAC,CAAC;IACpD,CAAC;IAED,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC7D,MAAM,IAAI,KAAK,CAAC,GAAG,OAAO,+BAA+B,CAAC,CAAC;IAC7D,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAC;IAC7C,MAAM,eAAe,GACnB,MAAM,CAAC,QAAQ,KAAK,OAAO,IAAI,MAAM,CAAC,QAAQ,KAAK,WAAW,CAAC;IACjE,IAAI,CAAC,OAAO,IAAI,CAAC,eAAe,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CACb,GAAG,OAAO,oDAAoD,CAC/D,CAAC;IACJ,CAAC;IAED,OAAO,MAAM,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AAC/C,CAAC"}