@jini-ai/cli 0.1.0

package/dist/http.js

@@ -0,0 +1,226 @@
+/**
+ * @module http
+ *
+ * HTTP-client-mode transport plumbing, ported from OD's
+ * `apps/daemon/src/cli.ts` `surfaceFetchError`/`postJsonToDaemon` (see
+ * `source-map.md`). This is the "HTTP-client mode default" half of
+ * extraction-plan §3's `@jini-ai/cli` spec: fetch a daemon route, translate a
+ * network failure or a daemon error envelope into the structured exit-code
+ * contract from `errors.ts`.
+ */
+import { DEFAULT_CLI_EXIT_CODES, exitWithStructuredError, structuredErrorData } from './errors.js';
+import { sanitizeDaemonUrlForDisplay } from './daemon-url.js';
+import { sanitizeUntrustedText } from './redact.js';
+/**
+ * Format a `fetch()` rejection (network-unreachable, sandbox-denied) into a
+ * human-readable stderr line, with a hint when the underlying cause looks
+ * like a sandboxed-environment outbound-connect denial. Per CR-004/SEC-RB-009,
+ * `daemonUrl` and the failure detail are both sanitized before they reach
+ * stderr — a `daemonUrl` with embedded userinfo, or a cause message that
+ * embeds terminal control sequences or a leaked credential, must not be
+ * printed verbatim.
+ */
+export function surfaceFetchError(err, daemonUrl, options = {}) {
+    const write = options.write ?? ((text) => { process.stderr.write(text); });
+    const cause = err !== null && typeof err === 'object' ? err.cause : null;
+    const code = cause !== null && typeof cause === 'object' && typeof cause.code === 'string'
+        ? cause.code
+        : null;
+    const causeMessage = cause !== null && typeof cause === 'object' && typeof cause.message === 'string'
+        ? cause.message
+        : '';
+    let detail = err instanceof Error ? err.message : String(err);
+    if (code !== null)
+        detail = `${code}${causeMessage.length > 0 ? ` — ${causeMessage}` : ''}`;
+    else if (causeMessage.length > 0)
+        detail = causeMessage;
+    write(`failed to reach daemon at ${sanitizeDaemonUrlForDisplay(daemonUrl)}: ${sanitizeUntrustedText(detail)}\n`);
+    if (code === 'EPERM' || code === 'ENETUNREACH') {
+        write('hint: outbound connect was denied, likely by a sandbox policy. ' +
+            'If this command ran inside an agent sandbox, check its network policy — ' +
+            'the daemon itself is unaffected and can be reached from a regular shell.\n');
+    }
+}
+/** Default request deadline. Generous enough for a slow agent run kickoff, short enough that a stalled daemon doesn't hang a CLI invocation forever. */
+const DEFAULT_TIMEOUT_MS = 15_000;
+/** Default cap on a daemon response body. Comfortably larger than any real status/error envelope, small enough to bound worst-case memory from a hostile/broken daemon. */
+const DEFAULT_MAX_RESPONSE_BYTES = 10 * 1024 * 1024;
+/** Thrown internally by {@link readJsonWithLimit} when a response exceeds its byte cap; never escapes {@link postJsonToDaemon}. */
+class ResponseTooLargeError extends Error {
+    limitBytes;
+    constructor(limitBytes) {
+        super(`response exceeded the ${limitBytes}-byte limit`);
+        this.limitBytes = limitBytes;
+        this.name = 'ResponseTooLargeError';
+    }
+}
+/**
+ * Read `resp`'s body as JSON without ever buffering past `maxBytes`. Prefers streaming via
+ * `resp.body`'s reader (what a real `fetch()` `Response` provides) so a huge response is
+ * rejected mid-stream instead of first being buffered whole; falls back to `resp.text()` (still
+ * byte-checked before parsing) and finally to `resp.json()` for response-like objects that
+ * implement neither — the shape test doubles in this package's own suite use. A body that isn't
+ * valid JSON resolves to `{}`, matching this module's previous behavior.
+ */
+async function readJsonWithLimit(resp, maxBytes) {
+    const contentLength = resp.headers?.get?.('content-length');
+    if (contentLength !== null && contentLength !== undefined) {
+        const declared = Number(contentLength);
+        if (Number.isFinite(declared) && declared > maxBytes)
+            throw new ResponseTooLargeError(maxBytes);
+    }
+    const body = resp.body;
+    if (body != null && typeof body.getReader === 'function') {
+        const reader = body.getReader();
+        const decoder = new TextDecoder();
+        let text = '';
+        let total = 0;
+        try {
+            for (;;) {
+                const { done, value } = await reader.read();
+                if (done === true)
+                    break;
+                if (value !== undefined) {
+                    total += value.byteLength;
+                    if (total > maxBytes)
+                        throw new ResponseTooLargeError(maxBytes);
+                    text += decoder.decode(value, { stream: true });
+                }
+            }
+            text += decoder.decode();
+        }
+        finally {
+            reader.releaseLock();
+        }
+        try {
+            return text.length > 0 ? JSON.parse(text) : {};
+        }
+        catch {
+            return {};
+        }
+    }
+    if (typeof resp.text === 'function') {
+        const text = await resp.text();
+        if (Buffer.byteLength(text, 'utf8') > maxBytes)
+            throw new ResponseTooLargeError(maxBytes);
+        try {
+            return text.length > 0 ? JSON.parse(text) : {};
+        }
+        catch {
+            return {};
+        }
+    }
+    return await resp.json().catch(() => ({}));
+}
+/**
+ * Shared transport core behind {@link postJsonToDaemon} and {@link getJsonFromDaemon}: fetch
+ * `<base><route>` with a bounded timeout and response-size cap, and map a network failure or a
+ * non-2xx daemon response through the structured error contract (`errors.ts`) instead of
+ * returning — this function either resolves with the parsed body or never returns. Per
+ * CR-004/SEC-RB-009, daemon-supplied error detail is redacted before it reaches stderr rather than
+ * dumped verbatim. Both public wrappers exist only to fix `init.method`/`init.body` at their own
+ * call site — nothing method-specific lives here beyond that.
+ */
+async function requestJsonFromDaemon(base, route, init, options = {}) {
+    const fetchImpl = options.fetchImpl ?? fetch;
+    const write = options.write ?? ((text) => { process.stderr.write(text); });
+    const exit = options.exit ?? ((exitCode) => process.exit(exitCode));
+    const timeoutMs = options.timeoutMs ?? DEFAULT_TIMEOUT_MS;
+    const maxResponseBytes = options.maxResponseBytes ?? DEFAULT_MAX_RESPONSE_BYTES;
+    const structuredOptions = {
+        write,
+        exit,
+        ...(options.exitCodes !== undefined ? { exitCodes: options.exitCodes } : {}),
+    };
+    const timeoutController = new AbortController();
+    const timeoutHandle = setTimeout(() => {
+        timeoutController.abort(new Error(`request to ${route} timed out after ${timeoutMs}ms`));
+    }, timeoutMs);
+    // A short-lived CLI invocation shouldn't be kept alive purely by this timer.
+    timeoutHandle.unref?.();
+    const signal = options.signal !== undefined ? AbortSignal.any([options.signal, timeoutController.signal]) : timeoutController.signal;
+    // The timeout signal stays live through both the initial fetch *and* the body read below — a
+    // daemon that returns headers promptly but then drips its body slowly should still be bounded
+    // by the same deadline, not just the connection phase.
+    let resp;
+    let data;
+    try {
+        try {
+            resp = await fetchImpl(`${base}${route}`, {
+                method: init.method,
+                headers: init.method === 'POST' ? { 'content-type': 'application/json', ...options.headers } : { ...options.headers },
+                ...(init.method === 'POST' ? { body: JSON.stringify(init.body) } : {}),
+                signal,
+            });
+        }
+        catch (err) {
+            surfaceFetchError(err, base, { write });
+            return exitWithStructuredError({ code: 'daemon-not-running', message: `Cannot reach daemon at ${sanitizeDaemonUrlForDisplay(base)}` }, structuredOptions);
+        }
+        try {
+            data = await readJsonWithLimit(resp, maxResponseBytes);
+        }
+        catch (err) {
+            if (err instanceof ResponseTooLargeError) {
+                write(`response from ${sanitizeDaemonUrlForDisplay(base)}${route} exceeded the ${err.limitBytes}-byte limit; aborting.\n`);
+                return exit(1);
+            }
+            throw err;
+        }
+    }
+    finally {
+        clearTimeout(timeoutHandle);
+    }
+    if (!resp.ok) {
+        const errorObj = data.error;
+        const exitCodes = { ...DEFAULT_CLI_EXIT_CODES, ...options.exitCodes };
+        const code = typeof errorObj?.code === 'string' && errorObj.code in exitCodes ? errorObj.code : null;
+        if (code !== null) {
+            const rawMessage = typeof errorObj?.message === 'string' ? errorObj.message : `HTTP ${resp.status}`;
+            const message = sanitizeUntrustedText(rawMessage);
+            const errorData = structuredErrorData(errorObj);
+            return exitWithStructuredError({ code, message, ...(errorData !== undefined ? { data: errorData } : {}) }, structuredOptions);
+        }
+        const rawExcerpt = describeUnrecognizedDaemonPayload(data);
+        write(`${init.method} ${route} failed: ${resp.status}${rawExcerpt}\n`);
+        return exit(1);
+    }
+    return data;
+}
+/**
+ * `POST` a JSON body to `<base><route>` and return the parsed JSON response.
+ * A network failure or a non-2xx daemon response both exit via the
+ * structured error contract (`errors.ts`) instead of returning — this
+ * function either resolves with the parsed body or never returns.
+ *
+ * Per CR-004/SEC-RB-009, this now enforces a request deadline (combined with
+ * an optional caller `signal`) and a maximum response size, and redacts
+ * daemon-supplied error detail before it reaches stderr instead of dumping
+ * it verbatim.
+ */
+export async function postJsonToDaemon(base, route, body, options = {}) {
+    return requestJsonFromDaemon(base, route, { method: 'POST', body }, options);
+}
+/**
+ * `GET` `<base><route>` and return the parsed JSON response. Same transport contract as
+ * {@link postJsonToDaemon} (timeout, response-size cap, structured-error mapping, redaction) with
+ * no request body — for read-only daemon routes such as `@jini-ai/http`'s `GET /api/runs` and
+ * `GET /api/runs/:runId`.
+ */
+export async function getJsonFromDaemon(base, route, options = {}) {
+    return requestJsonFromDaemon(base, route, { method: 'GET' }, options);
+}
+/** A bounded, redacted excerpt of an unrecognized daemon error payload — never the full raw body. */
+function describeUnrecognizedDaemonPayload(data) {
+    let raw;
+    try {
+        raw = JSON.stringify(data) ?? '';
+    }
+    catch {
+        raw = String(data);
+    }
+    if (raw.length === 0)
+        return '';
+    return ` (daemon response, redacted/truncated): ${sanitizeUntrustedText(raw)}`;
+}
+//# sourceMappingURL=http.js.map

package/dist/http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.js","sourceRoot":"","sources":["../src/http.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,sBAAsB,EAAE,uBAAuB,EAAE,mBAAmB,EAAsB,MAAM,aAAa,CAAC;AACvH,OAAO,EAAE,2BAA2B,EAAE,MAAM,iBAAiB,CAAC;AAC9D,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAOpD;;;;;;;;GAQG;AACH,MAAM,UAAU,iBAAiB,CAAC,GAAY,EAAE,SAAiB,EAAE,UAAoC,EAAE;IACvG,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,CAAC,CAAC,IAAY,EAAE,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACnF,MAAM,KAAK,GAAG,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAE,GAA2B,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IAClG,MAAM,IAAI,GACR,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAQ,KAA4B,CAAC,IAAI,KAAK,QAAQ;QACnG,CAAC,CAAE,KAA0B,CAAC,IAAI;QAClC,CAAC,CAAC,IAAI,CAAC;IACX,MAAM,YAAY,GAChB,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAQ,KAA+B,CAAC,OAAO,KAAK,QAAQ;QACzG,CAAC,CAAE,KAA6B,CAAC,OAAO;QACxC,CAAC,CAAC,EAAE,CAAC;IACT,IAAI,MAAM,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC9D,IAAI,IAAI,KAAK,IAAI;QAAE,MAAM,GAAG,GAAG,IAAI,GAAG,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;SACvF,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,GAAG,YAAY,CAAC;IACxD,KAAK,CAAC,6BAA6B,2BAA2B,CAAC,SAAS,CAAC,KAAK,qBAAqB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACjH,IAAI,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,aAAa,EAAE,CAAC;QAC/C,KAAK,CACH,iEAAiE;YAC/D,0EAA0E;YAC1E,4EAA4E,CAC/E,CAAC;IACJ,CAAC;AACH,CAAC;AAMD,wJAAwJ;AACxJ,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAClC,2KAA2K;AAC3K,MAAM,0BAA0B,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAEpD,mIAAmI;AACnI,MAAM,qBAAsB,SAAQ,KAAK;IACX;IAA5B,YAA4B,UAAkB;QAC5C,KAAK,CAAC,yBAAyB,UAAU,aAAa,CAAC,CAAC;QAD9B,eAAU,GAAV,UAAU,CAAQ;QAE5C,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;IACtC,CAAC;CACF;AAED;;;;;;;GAOG;AACH,KAAK,UAAU,iBAAiB,CAAC,IAAc,EAAE,QAAgB;IAC/D,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,gBAAgB,CAAC,CAAC;IAC5D,IAAI,aAAa,KAAK,IAAI,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;QAC1D,MAAM,QAAQ,GAAG,MAAM,CAAC,aAAa,CAAC,CAAC;QACvC,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,QAAQ;YAAE,MAAM,IAAI,qBAAqB,CAAC,QAAQ,CAAC,CAAC;IAClG,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;IACvB,IAAI,IAAI,IAAI,IAAI,IAAI,OAAO,IAAI,CAAC,SAAS,KAAK,UAAU,EAAE,CAAC;QACzD,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAChC,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;QAClC,IAAI,IAAI,GAAG,EAAE,CAAC;QACd,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,IAAI,CAAC;YACH,SAAS,CAAC;gBACR,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;gBAC5C,IAAI,IAAI,KAAK,IAAI;oBAAE,MAAM;gBACzB,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;oBACxB,KAAK,IAAI,KAAK,CAAC,UAAU,CAAC;oBAC1B,IAAI,KAAK,GAAG,QAAQ;wBAAE,MAAM,IAAI,qBAAqB,CAAC,QAAQ,CAAC,CAAC;oBAChE,IAAI,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;gBAClD,CAAC;YACH,CAAC;YACD,IAAI,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QAC3B,CAAC;gBAAS,CAAC;YACT,MAAM,CAAC,WAAW,EAAE,CAAC;QACvB,CAAC;QACD,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACjD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAED,IAAI,OAAQ,IAA2B,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QAC5D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAC/B,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,QAAQ;YAAE,MAAM,IAAI,qBAAqB,CAAC,QAAQ,CAAC,CAAC;QAC1F,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACjD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAED,OAAO,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAC7C,CAAC;AA2BD;;;;;;;;GAQG;AACH,KAAK,UAAU,qBAAqB,CAClC,IAAY,EACZ,KAAa,EACb,IAAkB,EAClB,UAAmC,EAAE;IAErC,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,KAAK,CAAC;IAC7C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,CAAC,CAAC,IAAY,EAAE,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACnF,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,CAAC,CAAC,QAAgB,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC5E,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,kBAAkB,CAAC;IAC1D,MAAM,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,IAAI,0BAA0B,CAAC;IAChF,MAAM,iBAAiB,GAAG;QACxB,KAAK;QACL,IAAI;QACJ,GAAG,CAAC,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC7E,CAAC;IAEF,MAAM,iBAAiB,GAAG,IAAI,eAAe,EAAE,CAAC;IAChD,MAAM,aAAa,GAAG,UAAU,CAAC,GAAG,EAAE;QACpC,iBAAiB,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,cAAc,KAAK,oBAAoB,SAAS,IAAI,CAAC,CAAC,CAAC;IAC3F,CAAC,EAAE,SAAS,CAAC,CAAC;IACd,6EAA6E;IAC5E,aAAmD,CAAC,KAAK,EAAE,EAAE,CAAC;IAC/D,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,MAAM,CAAC;IAErI,6FAA6F;IAC7F,8FAA8F;IAC9F,uDAAuD;IACvD,IAAI,IAAc,CAAC;IACnB,IAAI,IAAa,CAAC;IAClB,IAAI,CAAC;QACH,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,SAAS,CAAC,GAAG,IAAI,GAAG,KAAK,EAAE,EAAE;gBACxC,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,OAAO,EAAE,IAAI,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,OAAO,CAAC,OAAO,EAAE;gBACrH,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACtE,MAAM;aACP,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,iBAAiB,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;YACxC,OAAO,uBAAuB,CAC5B,EAAE,IAAI,EAAE,oBAAoB,EAAE,OAAO,EAAE,0BAA0B,2BAA2B,CAAC,IAAI,CAAC,EAAE,EAAE,EACtG,iBAAiB,CAClB,CAAC;QACJ,CAAC;QAED,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,iBAAiB,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;QACzD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,qBAAqB,EAAE,CAAC;gBACzC,KAAK,CAAC,iBAAiB,2BAA2B,CAAC,IAAI,CAAC,GAAG,KAAK,iBAAiB,GAAG,CAAC,UAAU,0BAA0B,CAAC,CAAC;gBAC3H,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC;YACjB,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,aAAa,CAAC,CAAC;IAC9B,CAAC;IAED,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;QACb,MAAM,QAAQ,GAAI,IAA4B,CAAC,KAAK,CAAC;QACrD,MAAM,SAAS,GAAkB,EAAE,GAAG,sBAAsB,EAAE,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC;QACrF,MAAM,IAAI,GAAG,OAAO,QAAQ,EAAE,IAAI,KAAK,QAAQ,IAAI,QAAQ,CAAC,IAAI,IAAI,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;QACrG,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAClB,MAAM,UAAU,GAAG,OAAO,QAAQ,EAAE,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,MAAM,EAAE,CAAC;YACpG,MAAM,OAAO,GAAG,qBAAqB,CAAC,UAAU,CAAC,CAAC;YAClD,MAAM,SAAS,GAAG,mBAAmB,CAAC,QAAQ,CAAC,CAAC;YAChD,OAAO,uBAAuB,CAC5B,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAC1E,iBAAiB,CAClB,CAAC;QACJ,CAAC;QACD,MAAM,UAAU,GAAG,iCAAiC,CAAC,IAAI,CAAC,CAAC;QAC3D,KAAK,CAAC,GAAG,IAAI,CAAC,MAAM,IAAI,KAAK,YAAY,IAAI,CAAC,MAAM,GAAG,UAAU,IAAI,CAAC,CAAC;QACvE,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC;IACjB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,IAAY,EACZ,KAAa,EACb,IAAa,EACb,UAAmC,EAAE;IAErC,OAAO,qBAAqB,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,OAAO,CAAC,CAAC;AAC/E,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,IAAY,EACZ,KAAa,EACb,UAAoC,EAAE;IAEtC,OAAO,qBAAqB,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,OAAO,CAAC,CAAC;AACxE,CAAC;AAED,qGAAqG;AACrG,SAAS,iCAAiC,CAAC,IAAa;IACtD,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IACrB,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAChC,OAAO,2CAA2C,qBAAqB,CAAC,GAAG,CAAC,EAAE,CAAC;AACjF,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,24 @@
+/**
+ * @module @jini-ai/cli
+ *
+ * CLI transport-shell: HTTP-client-mode generic transport/infra ported from
+ * OD's `apps/daemon/src/cli.ts` (extraction-plan §3 / §8 task 9). See
+ * `source-map.md` for the full classification of what was and wasn't
+ * ported. This is a first generic slice, not the full `@jini-ai/cli` package —
+ * no pack has registered against `CommandRegistry` yet because no HTTP-
+ * client-mode pack exists in this repo to call.
+ */
+export * from './flags.js';
+export * from './daemon-url.js';
+export * from './errors.js';
+export * from './http.js';
+export * from './prompt.js';
+export * from './redact.js';
+export * from './usage.js';
+export * from './command-registry.js';
+export * from './run-command.js';
+export * from './daemon-command.js';
+export * from './version-command.js';
+export * from './local-daemon-discovery.js';
+export * from './tokens.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,cAAc,YAAY,CAAC;AAC3B,cAAc,iBAAiB,CAAC;AAChC,cAAc,aAAa,CAAC;AAC5B,cAAc,WAAW,CAAC;AAC1B,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC;AAC3B,cAAc,uBAAuB,CAAC;AACtC,cAAc,kBAAkB,CAAC;AACjC,cAAc,qBAAqB,CAAC;AACpC,cAAc,sBAAsB,CAAC;AACrC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,aAAa,CAAC"}

package/dist/index.js

@@ -0,0 +1,30 @@
+/**
+ * @module @jini-ai/cli
+ *
+ * CLI transport-shell: HTTP-client-mode generic transport/infra ported from
+ * OD's `apps/daemon/src/cli.ts` (extraction-plan §3 / §8 task 9). See
+ * `source-map.md` for the full classification of what was and wasn't
+ * ported. This is a first generic slice, not the full `@jini-ai/cli` package —
+ * no pack has registered against `CommandRegistry` yet because no HTTP-
+ * client-mode pack exists in this repo to call.
+ */
+export * from './flags.js';
+export * from './daemon-url.js';
+export * from './errors.js';
+export * from './http.js';
+export * from './prompt.js';
+export * from './redact.js';
+export * from './usage.js';
+export * from './command-registry.js';
+export * from './run-command.js';
+export * from './daemon-command.js';
+export * from './version-command.js';
+export * from './local-daemon-discovery.js';
+export * from './tokens.js';
+// NOTE: `main.ts` (the bootable `jini` binary, wired via `package.json`'s `"bin"` field) is
+// deliberately NOT re-exported here. This barrel is imported as a plain library dependency;
+// `main.ts` parses `process.argv` and may call `process.exit` as a side effect of being
+// imported for real (guarded so that merely importing its named `main` export does not trigger
+// that side effect — see `main.ts`'s own module doc) — bundling it into this barrel would mean
+// `import '@jini-ai/cli'` could start behaving like a CLI invocation.
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,cAAc,YAAY,CAAC;AAC3B,cAAc,iBAAiB,CAAC;AAChC,cAAc,aAAa,CAAC;AAC5B,cAAc,WAAW,CAAC;AAC1B,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC;AAC3B,cAAc,uBAAuB,CAAC;AACtC,cAAc,kBAAkB,CAAC;AACjC,cAAc,qBAAqB,CAAC;AACpC,cAAc,sBAAsB,CAAC;AACrC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,aAAa,CAAC;AAC5B,4FAA4F;AAC5F,4FAA4F;AAC5F,wFAAwF;AACxF,+FAA+F;AAC/F,+FAA+F;AAC/F,sEAAsE"}

package/dist/local-daemon-discovery.d.ts

@@ -0,0 +1,31 @@
+import type { ResolveDaemonUrlOptions } from './daemon-url.js';
+export interface LocalDaemonDiscoveryOptions {
+    /**
+     * The same `dataDir` the target `createLocalNodeDaemon({ dataDir, ... })` call was given. The
+     * registry path is derived from it via `@jini-ai/sidecar`'s `resolveDaemonRegistryPath` — the
+     * identical derivation `@jini-ai/node-host` uses for its own `discoveryFile` default. Ignored when
+     * `registryPath` is also given.
+     */
+    dataDir?: string;
+    /**
+     * The exact registry file path, for when the host overrode `createLocalNodeDaemon`'s
+     * `discoveryFile` away from its `dataDir`-derived default. Takes precedence over `dataDir`.
+     */
+    registryPath?: string;
+}
+/**
+ * Build a `resolveDaemonUrl({ discover })`-compatible probe backed by a local, on-disk daemon
+ * registry record: reads the record at the resolved registry path, confirms the recording
+ * process's pid is still alive (a stale record left behind by a daemon that crashed rather than
+ * shut down cleanly is never trusted — see `readLiveDaemonRegistryRecord`), and returns its
+ * `url`. Resolves to `null` (never rejects) when no live record is found, so `resolveDaemonUrl`
+ * falls through to its own `defaultUrl`/error exactly as if no `discover` had been supplied at
+ * all — a missing or stale local daemon is an ordinary, expected outcome here, not a failure.
+ *
+ * @throws Synchronously, at build time (not when the returned probe is later called), when
+ * neither `dataDir` nor `registryPath` is given — there is nothing to resolve a path from, and a
+ * probe that silently always discovers nothing would hide a caller's config mistake instead of
+ * surfacing it immediately.
+ */
+export declare function createLocalDaemonDiscovery(options: LocalDaemonDiscoveryOptions): NonNullable<ResolveDaemonUrlOptions['discover']>;
+//# sourceMappingURL=local-daemon-discovery.d.ts.map

package/dist/local-daemon-discovery.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-daemon-discovery.d.ts","sourceRoot":"","sources":["../src/local-daemon-discovery.ts"],"names":[],"mappings":"AAqBA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAC;AAE/D,MAAM,WAAW,2BAA2B;IAC1C;;;;;OAKG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;OAGG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAYD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,0BAA0B,CACxC,OAAO,EAAE,2BAA2B,GACnC,WAAW,CAAC,uBAAuB,CAAC,UAAU,CAAC,CAAC,CAMlD"}

package/dist/local-daemon-discovery.js

@@ -0,0 +1,53 @@
+/**
+ * @module local-daemon-discovery
+ *
+ * The real `discover` callback `resolveDaemonUrl` (`daemon-url.ts`) has always accepted but this
+ * package never implemented — see `source-map.md`'s "Deferred" item 1 and its own 2026-07-21
+ * investigation, which found `@jini-ai/node-host`'s `createLocalNodeDaemon` wrote nothing anywhere a
+ * separate CLI process could read. That daemon side is now built (`@jini-ai/node-host`'s
+ * `discoveryFile` config, backed by `@jini-ai/sidecar`'s `daemon-registry.ts`); this module is the
+ * matching CLI-side reader: `createLocalDaemonDiscovery(...)` builds a probe over that same
+ * on-disk record, verified live (not just present — see `readLiveDaemonRegistryRecord`'s own
+ * doc), that plugs directly into `resolveDaemonUrl({ discover })`.
+ *
+ * Deliberately not wired to a hardcoded default `dataDir`: exactly like `resolveDaemonUrl` itself
+ * has no baked-in env var name or default URL, this package has no opinion on where a given
+ * product's daemon keeps its data — the caller (whatever wires a `@jini-ai/node-host` daemon and a
+ * `@jini-ai/cli`-transport pack together for one product) supplies the same `dataDir` (or an
+ * explicit `registryPath`, when `createLocalNodeDaemon`'s own `discoveryFile` was overridden away
+ * from its default) to both sides.
+ */
+import { readLiveDaemonRegistryRecord, resolveDaemonRegistryPath } from '@jini-ai/sidecar';
+/**
+ * @internal Resolve the registry path this discovery probe should read, from whichever of
+ * `registryPath`/`dataDir` was supplied.
+ */
+function resolveRegistryPathFromOptions(options) {
+    if (options.registryPath !== undefined)
+        return options.registryPath;
+    if (options.dataDir !== undefined)
+        return resolveDaemonRegistryPath(options.dataDir);
+    throw new Error('createLocalDaemonDiscovery requires either dataDir or registryPath');
+}
+/**
+ * Build a `resolveDaemonUrl({ discover })`-compatible probe backed by a local, on-disk daemon
+ * registry record: reads the record at the resolved registry path, confirms the recording
+ * process's pid is still alive (a stale record left behind by a daemon that crashed rather than
+ * shut down cleanly is never trusted — see `readLiveDaemonRegistryRecord`), and returns its
+ * `url`. Resolves to `null` (never rejects) when no live record is found, so `resolveDaemonUrl`
+ * falls through to its own `defaultUrl`/error exactly as if no `discover` had been supplied at
+ * all — a missing or stale local daemon is an ordinary, expected outcome here, not a failure.
+ *
+ * @throws Synchronously, at build time (not when the returned probe is later called), when
+ * neither `dataDir` nor `registryPath` is given — there is nothing to resolve a path from, and a
+ * probe that silently always discovers nothing would hide a caller's config mistake instead of
+ * surfacing it immediately.
+ */
+export function createLocalDaemonDiscovery(options) {
+    const registryPath = resolveRegistryPathFromOptions(options);
+    return async () => {
+        const record = await readLiveDaemonRegistryRecord(registryPath);
+        return record?.url ?? null;
+    };
+}
+//# sourceMappingURL=local-daemon-discovery.js.map

package/dist/local-daemon-discovery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-daemon-discovery.js","sourceRoot":"","sources":["../src/local-daemon-discovery.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,EAAE,4BAA4B,EAAE,yBAAyB,EAAE,MAAM,kBAAkB,CAAC;AAmB3F;;;GAGG;AACH,SAAS,8BAA8B,CAAC,OAAoC;IAC1E,IAAI,OAAO,CAAC,YAAY,KAAK,SAAS;QAAE,OAAO,OAAO,CAAC,YAAY,CAAC;IACpE,IAAI,OAAO,CAAC,OAAO,KAAK,SAAS;QAAE,OAAO,yBAAyB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACrF,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAAC;AACxF,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,0BAA0B,CACxC,OAAoC;IAEpC,MAAM,YAAY,GAAG,8BAA8B,CAAC,OAAO,CAAC,CAAC;IAC7D,OAAO,KAAK,IAAI,EAAE;QAChB,MAAM,MAAM,GAAG,MAAM,4BAA4B,CAAC,YAAY,CAAC,CAAC;QAChE,OAAO,MAAM,EAAE,GAAG,IAAI,IAAI,CAAC;IAC7B,CAAC,CAAC;AACJ,CAAC"}

package/dist/main.d.ts

@@ -0,0 +1,21 @@
+#!/usr/bin/env node
+export interface MainDeps {
+    /** Defaults to `process.stdout.write`; inject for tests. */
+    write?: (text: string) => void;
+    /** Defaults to `process.stderr.write`; inject for tests. */
+    writeErr?: (text: string) => void;
+    /** Defaults to `process.exit`; inject for tests (must not return). */
+    exit?: (code: number) => never;
+    /** Defaults to the global `fetch`; inject for tests. */
+    fetchImpl?: typeof fetch;
+    /** Defaults to `process.env`; inject for tests. */
+    env?: NodeJS.ProcessEnv;
+}
+/**
+ * Parse `argv` (already stripped of `node`/script-path, i.e. `process.argv.slice(2)`) and
+ * dispatch to the registered `run`/`daemon`/`version` commands. Never throws a raw error to its
+ * caller under normal use — usage errors and daemon failures both exit through this package's
+ * structured-error contract (`errors.ts`), via the injected (or default, real) `exit`.
+ */
+export declare function main(argv: readonly string[], deps?: MainDeps): Promise<void>;
+//# sourceMappingURL=main.d.ts.map

package/dist/main.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"main.d.ts","sourceRoot":"","sources":["../src/main.ts"],"names":[],"mappings":";AAsFA,MAAM,WAAW,QAAQ;IACvB,4DAA4D;IAC5D,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC/B,4DAA4D;IAC5D,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAClC,sEAAsE;IACtE,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,KAAK,CAAC;IAC/B,wDAAwD;IACxD,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB,mDAAmD;IACnD,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;CACzB;AA+FD;;;;;GAKG;AACH,wBAAsB,IAAI,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,EAAE,IAAI,GAAE,QAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CA2DtF"}