@kanonak-protocol/cli 1.4.0 → 1.5.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
|
@@ -20,7 +20,8 @@ export interface DeployedInstance {
|
|
|
20
20
|
*
|
|
21
21
|
* `repository` is the broader repository (local cache + HTTP) that the
|
|
22
22
|
* handler can use to fetch entities from other packages when needed
|
|
23
|
-
* (e.g. a `Tool` instance defined in
|
|
23
|
+
* (e.g. a `Tool` instance or `Client` instance defined in
|
|
24
|
+
* `agent-skills`).
|
|
24
25
|
*/
|
|
25
26
|
export interface DeploymentContext {
|
|
26
27
|
instances: SubjectKanonak[];
|
|
@@ -28,6 +29,16 @@ export interface DeploymentContext {
|
|
|
28
29
|
repository: IKanonakDocumentRepository;
|
|
29
30
|
options: Record<string, string>;
|
|
30
31
|
}
|
|
32
|
+
/**
|
|
33
|
+
* Context passed to a deployment handler for lifecycle operations
|
|
34
|
+
* that are NOT about deploying a fresh instance (undeploy, list).
|
|
35
|
+
* Carries the broader repository so handlers can still resolve
|
|
36
|
+
* ontology entities like `Client` for per-product skill paths.
|
|
37
|
+
*/
|
|
38
|
+
export interface OperationContext {
|
|
39
|
+
repository: IKanonakDocumentRepository;
|
|
40
|
+
options: Record<string, string>;
|
|
41
|
+
}
|
|
31
42
|
/**
|
|
32
43
|
* Handler that deploys/undeploys instances of a managed type to the
|
|
33
44
|
* local system.
|
|
@@ -39,8 +50,8 @@ export interface DeploymentContext {
|
|
|
39
50
|
*/
|
|
40
51
|
export interface DeploymentHandler {
|
|
41
52
|
deploy(context: DeploymentContext): Promise<void>;
|
|
42
|
-
undeploy(name: string,
|
|
43
|
-
list(
|
|
53
|
+
undeploy(name: string, context: OperationContext): Promise<void>;
|
|
54
|
+
list(context: OperationContext): Promise<DeployedInstance[]>;
|
|
44
55
|
}
|
|
45
56
|
/**
|
|
46
57
|
* Registry that maps a DeploymentTarget URI key to its handler.
|
package/dist/index.js
CHANGED
|
@@ -1,71 +1,71 @@
|
|
|
1
1
|
#!/usr/bin/env node
|
|
2
|
-
import{Command as
|
|
3
|
-
`).some(r=>r.trim()===
|
|
4
|
-
${
|
|
5
|
-
`)}else
|
|
6
|
-
`)}getPath(e,
|
|
7
|
-
${
|
|
8
|
-
${
|
|
2
|
+
import{Command as Io}from"commander";import{readFileSync as Ko}from"fs";import{fileURLToPath as Ao}from"url";import{dirname as xo,join as Eo}from"path";import{KanonakParser as To,PublisherIndex as Oo,CredentialStore as Uo,createAuthenticatedFetch as Lo}from"@kanonak-protocol/sdk";import{readFileSync as vt,statSync as $t}from"fs";import{resolve as Rt,dirname as _t}from"path";import{KanonakParser as Ct,KanonakObjectValidator as Dt,ValidationSeverity as Se}from"@kanonak-protocol/sdk";import{readFileSync as ft,readdirSync as yt}from"fs";import{join as ht,dirname as kt,basename as we}from"path";import{InMemoryKanonakDocumentRepository as bt,FileSystemKanonakDocumentRepository as Pt,HttpKanonakDocumentRepository as wt,getGlobalCachePath as St}from"@kanonak-protocol/sdk";import{mkdirSync as lt,readFileSync as be,writeFileSync as Pe,existsSync as re,appendFileSync as pt}from"fs";import{join as dt,dirname as ut,isAbsolute as mt}from"path";import{getGlobalCachePath as gt}from"@kanonak-protocol/sdk";var C=class{constructor(e=gt()){this.cacheDir=e;this.isProjectLocal=!mt(e)}cacheDir;gitignoreChecked=!1;isProjectLocal;get(e,t,o){let r=this.getPath(e,t,o);return re(r)?be(r,"utf-8"):null}put(e,t,o,r){let s=this.getPath(e,t,o);lt(ut(s),{recursive:!0}),Pe(s,r,"utf-8"),this.isProjectLocal&&this.ensureGitignore()}has(e,t,o){return re(this.getPath(e,t,o))}ensureGitignore(){if(this.gitignoreChecked)return;this.gitignoreChecked=!0;let e=".gitignore",t=this.cacheDir;if(re(e)){if(be(e,"utf-8").split(`
|
|
3
|
+
`).some(r=>r.trim()===t||r.trim()===t+"/"))return;pt(e,`
|
|
4
|
+
${t}/
|
|
5
|
+
`)}else Pe(e,`${t}/
|
|
6
|
+
`)}getPath(e,t,o){return dt(this.cacheDir,e,`${t}@${o}.kan.yml`)}};function G(n){let e=n;for(;;){let t=kt(e);if(t===e)break;if(we(e).includes(".")||we(t).includes(".")){e=t;continue}break}return e}function J(n,e){for(let t of yt(n,{withFileTypes:!0})){let o=ht(n,t.name);t.isDirectory()&&t.name!=="node_modules"&&t.name!==".kanonak"?J(o,e):t.name.endsWith(".kan.yml")&&e.push(o)}}var se=class{repos;constructor(...e){this.repos=e}async getHighestCompatibleVersionAsync(e,t){for(let o of this.repos)try{let r=await o.getHighestCompatibleVersionAsync(e,t);if(r)return r}catch{}return null}async getAllDocumentsAsync(){let e=[];for(let t of this.repos)try{e.push(...await t.getAllDocumentsAsync())}catch{}return e}async getDocumentAsync(e){for(let t of this.repos)try{let o=await t.getDocumentAsync(e);if(o)return o}catch{}return null}async getDocumentsByNamespaceAsync(e,t){for(let o of this.repos)try{let r=await o.getDocumentsByNamespaceAsync(e,t);if(r.length>0)return r}catch{}return[]}async saveDocumentAsync(e,t){await this.repos[0].saveDocumentAsync(e,t)}async deleteDocumentAsync(e){await this.repos[0].deleteDocumentAsync(e)}async clearNamespaceAsync(e,t){await this.repos[0].clearNamespaceAsync(e,t)}async getAllDocumentReferencesAsync(){return this.repos[0].getAllDocumentReferencesAsync()}async getDocumentContentAsync(e){for(let t of this.repos)try{let o=await t.getDocumentContentAsync(e);if(o)return o}catch{}return null}async getDocumentUriAsync(e){for(let t of this.repos)try{let o=await t.getDocumentUriAsync(e);if(o)return o}catch{}return null}};async function A(n,e){let t=[];J(n,t);let o=new bt(e);for(let a of t)try{let c=ft(a,"utf-8"),l=e.parse(c),p=l.metadata.namespace_;if(p){let d=`${p.publisher}/${p.package_}@${p.version}`;await o.saveDocumentAsync(l,d)}}catch{}let r=new Pt(St(),!0,e),s=new C,i=new wt({getFromCache:(a,c,l)=>s.get(a,c,l),onFetch:(a,c,l,p)=>s.put(a,c,l,p)});return new se(o,r,i)}async function ve(n){let e=Rt(n),t=$t(e),o=t.isDirectory()?G(e):G(_t(e)),r=new Ct,s=new Dt(r),i=await A(o,r),a=[];if(t.isDirectory()?J(e,a):a.push(e),a.length===0){console.log("No .kan.yml files found.");return}let c=0,l=0;for(let p of a){let d=vt(p,"utf-8"),u=r.parseWithErrors(d);if(u.errors&&u.errors.length>0){console.log(`
|
|
7
|
+
${p}:`);for(let m of u.errors)console.log(` ERROR (parse): ${m.message} [line ${m.line}:${m.column}]`),c++;continue}let g=u.document;if(!g){console.log(`
|
|
8
|
+
${p}:`),console.log(" ERROR: Failed to parse document"),c++;continue}let f=await s.validateAsync(g,i),y=f.errors.filter(m=>m.severity===Se.Error),k=f.errors.filter(m=>m.severity===Se.Warning);if(y.length>0||k.length>0){let m=g.metadata.namespace_,b=m?`${m.publisher}/${m.package_}@${m.version}`:p;console.log(`
|
|
9
9
|
${b}:`);for(let h of y)console.log(` ERROR: ${h.message}`),h.suggestion&&console.log(` -> ${h.suggestion}`);for(let h of k)console.log(` WARN: ${h.message}`)}c+=y.length,l+=k.length}console.log(`
|
|
10
|
-
${a.length} file(s) validated. ${c} error(s), ${l} warning(s).`),c>0&&process.exit(1)}import{KanonakParser as
|
|
11
|
-
`;function
|
|
12
|
-
Installed ${Object.keys(i.packages).length} package(s) from lock file.`);return}let a=U(
|
|
13
|
-
Installed ${
|
|
10
|
+
${a.length} file(s) validated. ${c} error(s), ${l} warning(s).`),c>0&&process.exit(1)}import{KanonakParser as Tt,PublisherIndex as Ot,CredentialStore as Ut,createAuthenticatedFetch as Lt}from"@kanonak-protocol/sdk";import{readFileSync as It,writeFileSync as Kt,existsSync as At}from"fs";import{createHash as xt}from"crypto";import $e from"js-yaml";var ie="kanonak.lock",Et=`# This file is generated by Kanonak CLI. Do not edit manually.
|
|
11
|
+
`;function Re(){if(!At(ie))return null;let n=It(ie,"utf-8"),e=$e.load(n);return!e||typeof e!="object"||e.version!=="1"?null:{version:"1",lastUpdated:e.lastUpdated??new Date().toISOString(),packages:e.packages??{}}}function _e(n){n.lastUpdated=new Date().toISOString();let e={};for(let o of Object.keys(n.packages).sort())e[o]=n.packages[o];n.packages=e;let t=$e.dump(n,{lineWidth:-1,sortKeys:!1,quotingType:'"'});Kt(ie,Et+t,"utf-8")}function O(n){return`sha256:${xt("sha256").update(n).digest("hex")}`}function U(n){let e=n.indexOf("@"),t,o=null;e!==-1?(t=n.substring(0,e),o=n.substring(e+1)||null):t=n;let r=t.indexOf("/");if(r===-1)return null;let s=t.substring(0,r),i=t.substring(r+1);return!s||!i?null:{publisher:s,packageName:i,version:o}}async function Ce(n){let e=new C,t=new Tt,o=new Ut,r=Lt(o),s=new Ot({fetchFn:r}),i=Re()??{version:"1",lastUpdated:new Date().toISOString(),packages:{}};if(!n){Object.keys(i.packages).length===0&&(console.error("No kanonak.lock file found or lock file is empty."),console.error("Usage: kanonak install {publisher}/{package}[@{version}]"),process.exit(1)),console.log(`Installing ${Object.keys(i.packages).length} package(s) from kanonak.lock...`);for(let[g,f]of Object.entries(i.packages)){let y=g.indexOf("/"),k=g.substring(0,y),m=g.substring(y+1),b=e.get(k,m,f.version);if(b)console.log(` ${g}@${f.version} (cached)`);else{let h=f.resolved,w=await r(h,k);if(!w.ok)throw new Error(`Failed to fetch ${h} (${w.status} ${w.statusText})`);b=await w.text(),e.put(k,m,f.version,b),console.log(` ${g}@${f.version}`)}}console.log(`
|
|
12
|
+
Installed ${Object.keys(i.packages).length} package(s) from lock file.`);return}let a=U(n);a||(console.error(`Invalid package reference: ${n}`),console.error("Expected format: {publisher}/{package}@{version} or {publisher}/{package}"),process.exit(1));let{publisher:c,packageName:l,version:p}=a,d=p??await s.getHighestVersion(c,l);d||(console.error(`Could not resolve version for ${c}/${l}`),process.exit(1)),console.log(`Installing ${c}/${l}@${d}...`);let u=new Set;await De(c,l,d,e,t,s,r,u,i),_e(i),console.log(`
|
|
13
|
+
Installed ${u.size} package(s).`)}async function De(n,e,t,o,r,s,i,a,c){let l=`${n}/${e}@${t}`;if(a.has(l))return;a.add(l);let p=`${n}/${e}`,d=o.get(n,e,t),u;if(d)console.log(` ${l} (cached)`),u=await s.getPackageUrl(n,e,t);else{u=await s.getPackageUrl(n,e,t);let y=await i(u,n);if(!y.ok)throw new Error(`Failed to fetch ${u} (${y.status} ${y.statusText})`);d=await y.text(),o.put(n,e,t,d),console.log(` ${l}`)}let g={},f=r.parse(d);if(f.metadata.imports)for(let[y,k]of Object.entries(f.metadata.imports))for(let m of k){let b=await s.resolveVersion(y,m);b?(g[`${y}/${m.packageName}`]=b,await De(y,m.packageName,b,o,r,s,i,a,c)):console.error(` WARNING: Could not resolve ${y}/${m.packageName} ${m.package_}`)}c.packages[p]={version:t,resolved:u,integrity:O(d),dependencies:g}}import{readFileSync as jt}from"fs";import{resolve as Nt,dirname as Ft}from"path";import{KanonakParser as Ht}from"@kanonak-protocol/sdk";async function Ie(n){let e=Nt(n),t=jt(e,"utf-8"),o=new Ht,r=o.parse(t),s=r.metadata.namespace_,i=s?`${s.publisher}/${s.package_}@${s.version}`:n;if(console.log(i),!r.metadata.imports){console.log(" (no imports)");return}let a=G(Ft(e)),c=await A(a,o),l=new Set;for(let[p,d]of Object.entries(r.metadata.imports))for(let u of d)await Ke(p,u,c,l," ")}async function Ke(n,e,t,o,r){let s=`${n}/${e.packageName}`;if(o.has(s)){console.log(`${r}${s} (${e.package_}) [circular]`);return}o.add(s);let i;try{i=await t.getHighestCompatibleVersionAsync(n,e)}catch{console.log(`${r}${s} (${e.package_}) [fetch failed]`);return}if(!i){console.log(`${r}${s} (${e.package_}) [not found]`);return}let a=i.metadata.namespace_?.version?.toString()??"?";if(console.log(`${r}${n}/${e.packageName}@${a}`),i.metadata.imports)for(let[c,l]of Object.entries(i.metadata.imports))for(let p of l)await Ke(c,p,t,o,r+" ")}import{createHash as Vt,randomBytes as Ee}from"crypto";import{createServer as Bt}from"http";import{execFile as ae}from"child_process";import{CredentialStore as zt,generateDPoPKeyPair as Gt,createDPoPProof as Ae,serverSupportsDPoP as Wt}from"@kanonak-protocol/sdk";import{normalizeHost as Mt}from"@kanonak-protocol/sdk";var x=class{cache=new Map;async discover(e){let t=Mt(e);if(this.cache.has(t))return this.cache.get(t);let o=`https://${t}/.well-known/oauth-authorization-server`,r=await this.tryEndpoint(o);if(!r){let s=`https://${t}/.well-known/openid-configuration`;r=await this.tryEndpoint(s)}return this.cache.set(t,r),r}async supportsOAuth(e){return await this.discover(e)!==null}static supportsPkceS256(e){return e.codeChallengeMethodsSupported?.some(t=>t.toUpperCase()==="S256")??!1}static supportsDynamicRegistration(e){return!!e.registrationEndpoint}static supportsAuthorizationCode(e){return e.responseTypesSupported?.some(t=>t.toLowerCase()==="code")??!1}async tryEndpoint(e){let t;try{t=await fetch(e)}catch(r){let s=r instanceof Error?r.message:String(r);return s.includes("ENOTFOUND")||s.includes("ECONNREFUSED")?(console.error(` OAuth discovery: ${e} \u2014 host unreachable (${s})`),console.error(" If the server is behind a VPN, ensure you are connected.")):s.includes("CERT")||s.includes("SSL")||s.includes("TLS")?(console.error(` OAuth discovery: ${e} \u2014 TLS error (${s})`),console.error(" If using a custom CA certificate, set NODE_EXTRA_CA_CERTS=/path/to/ca.pem")):console.error(` OAuth discovery: ${e} \u2014 network error: ${s}`),null}if(!t.ok)return t.status===404||(t.status===403?(console.error(` OAuth discovery: ${e} \u2014 HTTP 403 Forbidden`),console.error(" Access may be blocked by a firewall, proxy, or WAF.")):t.status>=500&&(console.error(` OAuth discovery: ${e} \u2014 HTTP ${t.status} server error`),console.error(" The authorization server returned an internal error. Contact your IDP administrator."))),null;let o;try{o=await t.json()}catch{return console.error(` OAuth discovery: ${e} \u2014 response is not valid JSON`),console.error(" The endpoint may be returning HTML instead of JSON. Check IDP configuration."),null}return{issuer:W(o.issuer),authorizationEndpoint:W(o.authorization_endpoint),tokenEndpoint:W(o.token_endpoint),registrationEndpoint:W(o.registration_endpoint),revocationEndpoint:W(o.revocation_endpoint),scopesSupported:L(o.scopes_supported),responseTypesSupported:L(o.response_types_supported),grantTypesSupported:L(o.grant_types_supported),codeChallengeMethodsSupported:L(o.code_challenge_methods_supported),tokenEndpointAuthMethodsSupported:L(o.token_endpoint_auth_methods_supported),dpopSigningAlgValuesSupported:L(o.dpop_signing_alg_values_supported)}}};function W(n){return typeof n=="string"?n:null}function L(n){return Array.isArray(n)?n.filter(e=>typeof e=="string"):null}var N=class{discovery;credentialStore;constructor(e,t){this.discovery=e??new x,this.credentialStore=t??new zt}async authorize(e,t=[]){console.log(`Starting OAuth flow for ${e}...`);let o=await this.discovery.discover(e);if(!o)return $(`No OAuth discovery endpoint found for '${e}'.
|
|
14
14
|
The server must expose one of:
|
|
15
15
|
- https://${e}/.well-known/oauth-authorization-server (RFC 8414)
|
|
16
16
|
- https://${e}/.well-known/openid-configuration (OpenID Connect)
|
|
17
17
|
Verify the hostname is correct and HTTPS is configured.
|
|
18
18
|
If using a corporate proxy, ensure it is not blocking the discovery request.`);let r=[];if(o.authorizationEndpoint||r.push("authorization_endpoint"),o.tokenEndpoint||r.push("token_endpoint"),r.length>0)return $(`OAuth metadata for '${e}' is missing required fields: ${r.join(", ")}.
|
|
19
|
-
Contact the IDP administrator to ensure these are included in the discovery document.`);let s=
|
|
20
|
-
Ensure your Node.js installation supports EC P-256 curves.`)}}let{redirectUri:a,port:c,waitForCallback:l,close:
|
|
19
|
+
Contact the IDP administrator to ensure these are included in the discovery document.`);let s=Wt(o.dpopSigningAlgValuesSupported),i=null;if(s){console.log(" Server supports DPoP (RFC 9449) \u2014 generating key pair...");try{i=Gt()}catch(R){return $(`Failed to generate DPoP key pair: ${j(R)}
|
|
20
|
+
Ensure your Node.js installation supports EC P-256 curves.`)}}let{redirectUri:a,port:c,waitForCallback:l,close:p}=await en(),d=await this.credentialStore.getCredential(e),u=d?.clientId??null,g=d?.clientSecret??null;if(!u&&o.registrationEndpoint){console.log(" Registering dynamic OAuth client (RFC 7591)...");let R=await this.registerClient(o.registrationEndpoint,a);if(!R.success)return p(),$(R.error);u=R.clientId,g=R.clientSecret??null}if(!u)return p(),$(`No OAuth client credentials for '${e}' and the server does not support dynamic client registration (no registration_endpoint in metadata).
|
|
21
21
|
You must pre-register a client with your IDP and configure the client_id.
|
|
22
22
|
Ask your IDP administrator to enable dynamic client registration (RFC 7591),
|
|
23
|
-
or add a registration_endpoint to the OAuth metadata.`);let f=
|
|
23
|
+
or add a registration_endpoint to the OAuth metadata.`);let f=Yt(),y=Jt(f),k=Xt(),m=Qt(o.authorizationEndpoint,u,a,t,k,y);console.log(` Opening browser for authorization on port ${c}...`),console.log(" If the browser doesn't open, navigate to:"),console.log(` ${m}`),nn(m);let b=await l();if(p(),!b)return $(`Authorization timed out after 5 minutes.
|
|
24
24
|
The browser authorization was not completed in time.
|
|
25
25
|
Re-run 'kanonak login ${e}' and complete the browser authorization promptly.`);if(!b.code){let R=b.error?`: ${b.error}`:"";return $(`No authorization code received${R}.
|
|
26
26
|
The IDP may have rejected the authorization request.
|
|
27
27
|
Check the IDP admin console for error details.`)}if(b.state!==k)return $(`Authorization state mismatch \u2014 possible CSRF attack.
|
|
28
28
|
The response did not match the expected session.
|
|
29
|
-
Re-run 'kanonak login ${e}' to start a fresh authorization flow.`);console.log(" Exchanging authorization code for tokens...");let h=await this.exchangeCode(o.tokenEndpoint,
|
|
29
|
+
Re-run 'kanonak login ${e}' to start a fresh authorization flow.`);console.log(" Exchanging authorization code for tokens...");let h=await this.exchangeCode(o.tokenEndpoint,u,g,b.code,a,f,i);if(!h.success)return $(h.error);let w={clientId:u,clientSecret:g,accessToken:h.tokens.accessToken,refreshToken:h.tokens.refreshToken,expiresAt:h.tokens.expiresIn?new Date(Date.now()+h.tokens.expiresIn*1e3).toISOString():null,tokenEndpoint:o.tokenEndpoint,dpopKeyPair:i};return await this.credentialStore.store(e,w),console.log(` Successfully authenticated with ${e}`),s&&console.log(" DPoP proof-of-possession is active"),{success:!0,host:e}}async refresh(e){let t=await this.credentialStore.getCredential(e);if(!t)return $(`No stored credentials for '${e}'. Run 'kanonak login ${e}' to authenticate first.`);if(!t.refreshToken)return $(`No refresh token available for '${e}'.
|
|
30
30
|
The authorization server may not issue refresh tokens for this client.
|
|
31
|
-
Run 'kanonak login ${e}' to re-authenticate.`);if(!
|
|
32
|
-
The stored credential may be corrupted. Run 'kanonak logout ${e}' then 'kanonak login ${e}'.`);let o=
|
|
31
|
+
Run 'kanonak login ${e}' to re-authenticate.`);if(!t.clientId)return $(`No client ID in stored credentials for '${e}'.
|
|
32
|
+
The stored credential may be corrupted. Run 'kanonak logout ${e}' then 'kanonak login ${e}'.`);let o=t.tokenEndpoint;if(!o){let s=await this.discovery.discover(e);if(!s?.tokenEndpoint)return $(`Cannot find token endpoint for '${e}'.
|
|
33
33
|
The OAuth discovery endpoint may be unreachable.
|
|
34
|
-
Check network connectivity and run 'kanonak login ${e}' to re-authenticate.`);o=s.tokenEndpoint}let r=await this.refreshTokenRequest(o,
|
|
35
|
-
The refresh token may have expired. Run 'kanonak login ${e}' to re-authenticate.`)}async logout(e){let
|
|
36
|
-
You may not be logged in, or credentials may be stored in a different backend.`);let o=await this.discovery.discover(e);if(o?.revocationEndpoint&&
|
|
34
|
+
Check network connectivity and run 'kanonak login ${e}' to re-authenticate.`);o=s.tokenEndpoint}let r=await this.refreshTokenRequest(o,t.clientId,t.clientSecret,t.refreshToken,t.dpopKeyPair);return r.success?(t.accessToken=r.tokens.accessToken,r.tokens.refreshToken&&(t.refreshToken=r.tokens.refreshToken),t.expiresAt=r.tokens.expiresIn?new Date(Date.now()+r.tokens.expiresIn*1e3).toISOString():null,t.tokenEndpoint=o,await this.credentialStore.store(e,t),{success:!0,host:e}):$(`${r.error}
|
|
35
|
+
The refresh token may have expired. Run 'kanonak login ${e}' to re-authenticate.`)}async logout(e){let t=await this.credentialStore.getCredential(e);if(!t)return $(`No stored credentials for '${e}'.
|
|
36
|
+
You may not be logged in, or credentials may be stored in a different backend.`);let o=await this.discovery.discover(e);if(o?.revocationEndpoint&&t.accessToken&&t.clientId)try{await this.revokeToken(o.revocationEndpoint,t.accessToken,t.clientId)}catch{console.warn(` Warning: Token revocation failed for '${e}'. The token has been removed locally but may still be valid on the server until it expires.`)}return await this.credentialStore.remove(e),{success:!0,host:e}}async registerClient(e,t){let o;try{o=await fetch(e,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({client_name:"Kanonak CLI",redirect_uris:[t],grant_types:["authorization_code","refresh_token"],response_types:["code"],token_endpoint_auth_method:"none"})})}catch(i){return{success:!1,error:`Dynamic client registration request to ${e} failed: ${j(i)}
|
|
37
37
|
Ensure the IDP is reachable and HTTPS is properly configured.
|
|
38
|
-
If using a corporate proxy or custom CA, set NODE_EXTRA_CA_CERTS.`}}if(!o.ok){let i=await
|
|
38
|
+
If using a corporate proxy or custom CA, set NODE_EXTRA_CA_CERTS.`}}if(!o.ok){let i=await ce(o);return{success:!1,error:`Dynamic client registration (RFC 7591) failed.
|
|
39
39
|
Endpoint: ${e}
|
|
40
40
|
HTTP ${o.status}: ${i}
|
|
41
41
|
The IDP may not support dynamic registration for public clients.
|
|
42
42
|
Ask your IDP administrator to enable RFC 7591 support, or pre-register a client manually.`}}let r=await o.json(),s=r.client_id;return s?{success:!0,clientId:s,clientSecret:r.client_secret}:{success:!1,error:`Dynamic client registration response from ${e} did not contain a client_id.
|
|
43
|
-
The IDP response may be malformed. Contact your IDP administrator.`}}async exchangeCode(e,
|
|
44
|
-
The stored key pair may be corrupted. Run 'kanonak login' to re-authenticate.`}}let
|
|
45
|
-
Ensure the token endpoint is reachable.`}}if(!
|
|
43
|
+
The IDP response may be malformed. Contact your IDP administrator.`}}async exchangeCode(e,t,o,r,s,i,a){let c=new URLSearchParams({grant_type:"authorization_code",client_id:t,code:r,redirect_uri:s,code_verifier:i});o&&c.set("client_secret",o);let l={"Content-Type":"application/x-www-form-urlencoded"};if(a)try{l.DPoP=Ae(a.privateKey,a.publicKey,"POST",e)}catch(d){return{success:!1,error:`Failed to create DPoP proof for token exchange: ${j(d)}
|
|
44
|
+
The stored key pair may be corrupted. Run 'kanonak login' to re-authenticate.`}}let p;try{p=await fetch(e,{method:"POST",headers:l,body:c.toString()})}catch(d){return{success:!1,error:`Token exchange request to ${e} failed: ${j(d)}
|
|
45
|
+
Ensure the token endpoint is reachable.`}}if(!p.ok){let d=await ce(p),u=qt(d);return{success:!1,error:`Token exchange failed.
|
|
46
46
|
Endpoint: ${e}
|
|
47
|
-
HTTP ${
|
|
48
|
-
${
|
|
49
|
-
Authenticated with ${
|
|
47
|
+
HTTP ${p.status}: ${d}`+(u?`
|
|
48
|
+
${u}`:"")}}return{success:!0,tokens:xe(await p.json())}}async refreshTokenRequest(e,t,o,r,s){let i=new URLSearchParams({grant_type:"refresh_token",client_id:t,refresh_token:r});o&&i.set("client_secret",o);let a={"Content-Type":"application/x-www-form-urlencoded"};if(s)try{a.DPoP=Ae(s.privateKey,s.publicKey,"POST",e)}catch(l){return{success:!1,error:`Failed to create DPoP proof for token refresh: ${j(l)}`}}let c;try{c=await fetch(e,{method:"POST",headers:a,body:i.toString()})}catch(l){return{success:!1,error:`Token refresh request to ${e} failed: ${j(l)}`}}if(!c.ok){let l=await ce(c);return{success:!1,error:`Token refresh failed \u2014 HTTP ${c.status}: ${l}`}}return{success:!0,tokens:xe(await c.json())}}async revokeToken(e,t,o){await fetch(e,{method:"POST",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:new URLSearchParams({token:t,client_id:o}).toString()})}};function $(n){return{success:!1,error:n}}function xe(n){return{accessToken:n.access_token,refreshToken:n.refresh_token,expiresIn:typeof n.expires_in=="number"?n.expires_in:void 0}}function j(n){return n instanceof Error?n.message:String(n)}async function ce(n){try{return await n.text()}catch{return"(could not read response body)"}}function qt(n){try{let e=JSON.parse(n);switch(e.error){case"invalid_grant":return"Hint: The authorization code may have expired or already been used. Re-run the login flow.";case"invalid_client":return"Hint: The client credentials were rejected. The client_id may be invalid or the client_secret may be wrong.";case"redirect_uri_mismatch":return"Hint: The redirect_uri does not match what was registered with the IDP.";case"unsupported_grant_type":return"Hint: The IDP does not support authorization_code grants. Contact your IDP administrator.";case"invalid_scope":return"Hint: One or more requested scopes are not allowed. Check the scopes configured on the IDP.";case"use_dpop_nonce":return"Hint: The server requires a DPoP nonce. This should be handled automatically \u2014 please report this as a bug.";default:return e.error_description?`IDP says: ${e.error_description}`:null}}catch{return null}}function Yt(){return Ee(32).toString("base64url")}function Jt(n){return Vt("sha256").update(n).digest("base64url")}function Xt(){return Ee(16).toString("base64url")}function Qt(n,e,t,o,r,s){let i=new URLSearchParams({client_id:e,response_type:"code",redirect_uri:t,scope:o.join(" "),state:r,code_challenge:s,code_challenge_method:"S256"});return`${n}?${i}`}var Zt=300*1e3;async function en(){return new Promise(n=>{let e=Bt((r,s)=>{let i=new URL(r.url,"http://localhost"),a=i.searchParams.get("code")??void 0,c=i.searchParams.get("state")??void 0,l=i.searchParams.get("error")??i.searchParams.get("error_description")??void 0,p=l?tn(l):null,d=p?`<html><body><h1>Authorization failed</h1><p>${p}</p></body></html>`:"<html><body><h1>Authorization successful!</h1><p>You can close this window.</p></body></html>";s.writeHead(200,{"Content-Type":"text/html"}),s.end(d),t({code:a,state:c,error:l})}),t,o=new Promise(r=>{t=r,setTimeout(()=>{r(null),e.close()},Zt)});e.listen(0,"127.0.0.1",()=>{let r=e.address();n({redirectUri:`http://localhost:${r.port}/callback`,port:r.port,waitForCallback:()=>o,close:()=>e.close()})})})}function tn(n){return n.replace(/&/g,"&").replace(/</g,"<").replace(/>/g,">").replace(/"/g,""")}function nn(n){try{process.platform==="win32"?ae("cmd",["/c","start","",n]):process.platform==="darwin"?ae("open",[n]):ae("xdg-open",[n])}catch{console.log(" Could not open browser automatically. Please navigate to the URL above manually.")}}import{CredentialStore as on}from"@kanonak-protocol/sdk";async function Te(n){try{let e=new x,t=new on,r=await new N(e,t).authorize(n);r.success?console.log(`
|
|
49
|
+
Authenticated with ${n}.`):(console.error(`
|
|
50
50
|
Authentication failed:
|
|
51
|
-
${r.error}`),process.exit(1))}catch(e){let
|
|
51
|
+
${r.error}`),process.exit(1))}catch(e){let t=e instanceof Error?e.message:String(e);console.error(`
|
|
52
52
|
Authentication failed unexpectedly:
|
|
53
|
-
${
|
|
54
|
-
If this persists, file an issue at https://github.com/kanonak-protocol/typescript/issues`),process.exit(1)}}import{CredentialStore as
|
|
53
|
+
${t}`),console.error(`
|
|
54
|
+
If this persists, file an issue at https://github.com/kanonak-protocol/typescript/issues`),process.exit(1)}}import{CredentialStore as rn}from"@kanonak-protocol/sdk";async function Oe(n){try{let e=new x,t=new rn,r=await new N(e,t).logout(n);r.success?console.log(`Logged out from ${n}.`):(console.error(`
|
|
55
55
|
Logout failed:
|
|
56
|
-
${r.error}`),process.exit(1))}catch(e){let
|
|
56
|
+
${r.error}`),process.exit(1))}catch(e){let t=e instanceof Error?e.message:String(e);console.error(`
|
|
57
57
|
Logout failed unexpectedly:
|
|
58
|
-
${
|
|
59
|
-
`;function
|
|
60
|
-
Installed capability "${h}".`),console.log(`Run "kanonak ${h} --help" to get started.`)}async function
|
|
61
|
-
`);for(let[
|
|
62
|
-
`);for(let i of r){let a=i.publisher?`${i.publisher}/${i.package_}@${i.version}`:"unmanaged";console.log(` ${i.name} (${a}) ${i.path}`)}}async update(e,
|
|
63
|
-
Updated ${a} instance(s).`)}async search(e,
|
|
64
|
-
`);let s=new
|
|
65
|
-
`);for(let f of
|
|
58
|
+
${t}`),process.exit(1)}}import{Command as xn}from"commander";import{KanonakParser as En,KanonakObjectParser as Tn,PublisherIndex as On,CredentialStore as Un,createAuthenticatedFetch as Ln}from"@kanonak-protocol/sdk";import{readFileSync as sn,writeFileSync as an,existsSync as cn}from"fs";import{join as ln}from"path";import Ue from"js-yaml";import{getGlobalCachePath as pn}from"@kanonak-protocol/sdk";var dn=`# This file is generated by Kanonak CLI. Do not edit manually.
|
|
59
|
+
`;function Le(){let n=pn();return ln(n,"..","capabilities.lock")}function F(){let n=Le();if(!cn(n))return{version:"1",lastUpdated:new Date().toISOString(),capabilities:{}};let e=sn(n,"utf-8"),t=Ue.load(e);return!t||typeof t!="object"||t.version!=="1"?{version:"1",lastUpdated:new Date().toISOString(),capabilities:{}}:{version:"1",lastUpdated:t.lastUpdated??new Date().toISOString(),capabilities:t.capabilities??{}}}function le(n){n.lastUpdated=new Date().toISOString();let e={};for(let o of Object.keys(n.capabilities).sort())e[o]=n.capabilities[o];n.capabilities=e;let t=Ue.dump(n,{lineWidth:-1,sortKeys:!1,quotingType:'"'});an(Le(),dn+t,"utf-8")}var _=class{constructor(e,t){this.doc=e;this.broader=t}doc;broader;async getAllDocumentsAsync(){return[this.doc]}async getDocumentAsync(e){return this.broader.getDocumentAsync(e)}async getDocumentsByNamespaceAsync(e,t){return this.broader.getDocumentsByNamespaceAsync(e,t)}async getHighestCompatibleVersionAsync(e,t){return this.broader.getHighestCompatibleVersionAsync(e,t)}async saveDocumentAsync(){throw new Error("SingleDocumentRepository is read-only")}async deleteDocumentAsync(){throw new Error("SingleDocumentRepository is read-only")}async clearNamespaceAsync(){throw new Error("SingleDocumentRepository is read-only")}async getAllDocumentReferencesAsync(){return[]}async getDocumentContentAsync(e){return this.broader.getDocumentContentAsync(e)}async getDocumentUriAsync(e){return this.broader.getDocumentUriAsync(e)}};import{KanonakObjectParser as bn,EmbeddedKanonak as Be,ReferenceKanonak as ze}from"@kanonak-protocol/sdk";import{SubjectKanonak as je,DefinedKanonak as un,StringStatement as mn,NumberStatement as gn,BooleanStatement as fn,ReferenceStatement as Ne,EmbeddedStatement as zr,ListStatement as yn}from"@kanonak-protocol/sdk";function I(n){return`${n.publisher}/${n.package_}/${n.name}`}function pe(n,e){return n.publisher===e.publisher&&n.package_===e.package_&&n.name===e.name}function hn(n,e){if(!(n instanceof un))return!1;for(let t of n.statement)if(t.predicate?.subject?.name==="type"&&t instanceof Ne){let r=t.object;if(pe(r.subject,e))return!0}return!1}function D(n,e){let t=[];for(let o of n)o instanceof je&&hn(o,e)&&t.push(o);return t}function Fe(n,e){for(let t of n){if(!(t instanceof je)||t.name!==e.name)continue;if((t.namespace||"").startsWith(`${e.publisher}/${e.package_}@`))return t}}function de(n,e){for(let t of n.statement){let o=t.predicate;if(o?.subject&&pe(o.subject,e))return t}}function kn(n,e){let t=de(n,e);if(t&&(t instanceof mn||t instanceof gn||t instanceof fn))return t.object}function P(n,e){let t=kn(n,e);return typeof t=="string"?t:void 0}function H(n,e){let t=de(n,e);if(t instanceof Ne)return t.object.subject}function M(n,e){let t=de(n,e);return t instanceof yn?t.object??[]:[]}var S="kanonak.org",v="capabilities",ue={publisher:S,package_:v,name:"Capability"},Pn={publisher:S,package_:v,name:"commandName"},Ge={publisher:S,package_:v,name:"description"},wn={publisher:S,package_:v,name:"managesType"},Sn={publisher:S,package_:v,name:"deploymentTarget"},vn={publisher:S,package_:v,name:"hasCommand"},$n={publisher:S,package_:v,name:"subcommandName"},Rn={publisher:S,package_:v,name:"performs"},_n={publisher:S,package_:v,name:"hasArgument"},Cn={publisher:S,package_:v,name:"argumentName"},He={publisher:S,package_:v,name:"isRequired"},Me={publisher:S,package_:v,name:"isOption"},Dn={publisher:S,package_:v,name:"defaultValue"};async function We(n,e,t){let o=F(),r=new bn,s=[];for(let[i,a]of Object.entries(o.capabilities)){let c=n.get(a.publisher,a.package_,a.version);if(!c){console.error(` WARNING: Cached content missing for capability "${i}" (${a.publisher}/${a.package_}@${a.version})`);continue}try{let l=e.parse(c),p=new _(l,t),d=await r.parseKanonaks(p),u=In(d,a.publisher,a.package_,a.version);u?s.push(u):console.error(` WARNING: No Capability instance found in "${i}" (${a.publisher}/${a.package_}@${a.version})`)}catch(l){console.error(` WARNING: Failed to parse capability "${i}": ${l}`)}}return s}function In(n,e,t,o){let r=D(n,ue);if(r.length===0)return;let s=r[0],i=P(s,Pn)??"",a=P(s,Ge)??"",c=H(s,wn),l=H(s,Sn),p=[];for(let d of M(s,vn)){let u=Kn(d,n);u&&p.push(u)}return{commandName:i,description:a,managesTypeKey:c?I(c):"",deploymentTargetKey:l?I(l):"",commands:p,publisher:e,package_:t,version:o}}function Kn(n,e){let t;if(n instanceof Be)t=n;else if(n instanceof ze){let c=qe(e,n.subject.publisher,n.subject.package_,n.subject.name);c&&(t=c)}if(!t)return;let o=P(t,$n)??"",r=P(t,Ge)??"",s=H(t,Rn),i=M(t,_n),a=[];for(let c of i){let l=An(c,e);l&&a.push(l)}return{subcommandName:o,description:r,arguments:a,actionKey:s?I(s):""}}function An(n,e){let t;if(n instanceof Be)t=n;else if(n instanceof ze){let c=qe(e,n.subject.publisher,n.subject.package_,n.subject.name);c&&(t=c)}if(!t)return;let o=P(t,Cn)??"",r=P(t,He)==="true"||Ve(t,He)===!0,s=P(t,Me)==="true"||Ve(t,Me)===!0,i=P(t,Dn),a={argumentName:o,required:r,isOption:s};return i!==void 0&&(a.defaultValue=i),a}function Ve(n,e){for(let t of n.statement){let o=t,r=o.predicate;if(r?.subject&&r.subject.publisher===e.publisher&&r.subject.package_===e.package_&&r.subject.name===e.name)return typeof o.object=="boolean"?o.object:void 0}}function qe(n,e,t,o){for(let r of n){if(!("name"in r)||!("namespace"in r))continue;let s=r;if(s.name===o&&!(!s.namespace||typeof s.namespace!="string")&&s.namespace.startsWith(`${e}/${t}@`))return r}}var jn={publisher:S,package_:v,name:"commandName"};function Ye(){let n=new xn("capability").description("Manage Kanonak CLI capabilities (pluggable command groups)");return n.command("add <package>").description("Install a capability from a Kanonak publisher").action(async e=>{await Nn(e)}),n.command("remove <name>").description("Remove an installed capability").action(async e=>{await Fn(e)}),n.command("list").description("List installed capabilities").action(async()=>{await Hn()}),n}async function Nn(n){let e=U(n);e||(console.error(`Invalid package reference: ${n}`),console.error("Expected format: {publisher}/{package}@{version} or {publisher}/{package}"),process.exit(1));let{publisher:t,packageName:o,version:r}=e,s=new C,i=new En,a=new Tn,c=new Un,l=Ln(c),p=new On({fetchFn:l}),d=r??await p.getHighestVersion(t,o);d||(console.error(`Could not resolve version for ${t}/${o}`),process.exit(1)),console.log(`Installing capability ${t}/${o}@${d}...`);let u=s.get(t,o,d);if(!u){let R=await p.getPackageUrl(t,o,d),Y=await l(R,t);if(!Y.ok)throw new Error(`Failed to fetch ${R} (${Y.status} ${Y.statusText})`);u=await Y.text(),s.put(t,o,d,u)}let g=i.parse(u),f=await A(process.cwd(),i),y=new _(g,f),k=await a.parseKanonaks(y),m=D(k,ue);m.length===0&&(console.error(`Package ${t}/${o}@${d} does not contain a ${S}/${v}/Capability instance.`),process.exit(1));let b=m[0],h=P(b,jn);h||(console.error(`Capability instance in ${t}/${o}@${d} has no commandName property.`),process.exit(1));let w=F();w.capabilities[h]={publisher:t,package_:o,version:d,resolved:await p.getPackageUrl(t,o,d),integrity:O(u)},le(w),console.log(`
|
|
60
|
+
Installed capability "${h}".`),console.log(`Run "kanonak ${h} --help" to get started.`)}async function Fn(n){let e=F();e.capabilities[n]||(console.error(`Capability "${n}" is not installed.`),process.exit(1));let t=e.capabilities[n];delete e.capabilities[n],le(e),console.log(`Removed capability "${n}" (${t.publisher}/${t.package_}@${t.version}).`)}async function Hn(){let n=F(),e=Object.entries(n.capabilities);if(e.length===0){console.log("No capabilities installed."),console.log("Install one with: kanonak capability add {publisher}/{package}");return}console.log(`Installed capabilities:
|
|
61
|
+
`);for(let[t,o]of e)console.log(` ${t} ${o.publisher}/${o.package_}@${o.version}`)}import{Command as Je}from"commander";function V(n){return`${S}/${v}/${n}`}var me={[V("fetchAndDeploy")]:(n,e,t,o)=>n.add(e,t[0],o),[V("removeDeployed")]:(n,e,t,o)=>n.remove(e,t[0],o),[V("listDeployed")]:(n,e,t,o)=>n.list(e,o),[V("updateDeployed")]:(n,e,t,o)=>n.update(e,t[0],o),[V("searchAvailable")]:(n,e,t,o)=>n.search(e,o),[V("showInfo")]:(n,e,t,o)=>n.info(e,t[0],o)};function Xe(n,e,t){for(let o of e){let r=new Je(o.commandName).description(o.description.trim());for(let s of o.commands){let i=r.command(Mn(s));i.description(s.description);for(let a of s.arguments)if(a.isOption){let c=a.defaultValue!=null?`--${a.argumentName} [value]`:`--${a.argumentName} <value>`;i.option(c,"",a.defaultValue)}i.action(async(...a)=>{let c=Vn(a);await Bn(t,o,s,a,c)})}n.addCommand(r)}}function Mn(n){let e=n.arguments.filter(t=>!t.isOption).map(t=>t.required?`<${t.argumentName}>`:`[${t.argumentName}]`);return[n.subcommandName,...e].join(" ")}function Vn(n){for(let e=n.length-1;e>=0;e--)if(n[e]&&typeof n[e]=="object"&&!(n[e]instanceof Je))return n[e];return{}}async function Bn(n,e,t,o,r){let s=[];for(let a of o)if(typeof a=="string")s.push(a);else break;t.actionKey||(console.error(`Capability subcommand '${t.subcommandName}' has no resolved \`performs:\` Action. Every CapabilityCommand must declare a performs value pointing at a named Action instance from the capabilities ontology. Known actions: ${Object.keys(me).join(", ")}.`),process.exit(1));let i=me[t.actionKey];i||(console.error(`Capability subcommand '${t.subcommandName}' references unknown Action '${t.actionKey}'. Known actions: ${Object.keys(me).join(", ")}.`),process.exit(1)),await i(n,e,s,r)}import{KanonakObjectParser as zn,PublisherIndex as ge,PublisherConfigResolver as Gn}from"@kanonak-protocol/sdk";var X=class{constructor(e,t,o,r,s,i){this.fileCache=e;this.parser=t;this.publisherIndex=o;this.fetchFn=r;this.handlerRegistry=s;this.repository=i}fileCache;parser;publisherIndex;fetchFn;handlerRegistry;repository;objectParser=new zn;async add(e,t,o){let r=U(t);r||(console.error(`Invalid package reference: ${t}`),console.error("Expected format: {publisher}/{package}@{version} or {publisher}/{package}"),process.exit(1));let{publisher:s,packageName:i,version:a}=r,c=a??await this.publisherIndex.getHighestVersion(s,i);c||(console.error(`Could not resolve version for ${s}/${i}`),process.exit(1));let l=this.fileCache.get(s,i,c);if(!l){let k=await this.publisherIndex.getPackageUrl(s,i,c),m=await this.fetchFn(k,s);if(!m.ok)throw new Error(`Failed to fetch ${k} (${m.status} ${m.statusText})`);l=await m.text(),this.fileCache.put(s,i,c,l)}let p=this.parser.parse(l),d=new _(p,this.repository),u=await this.objectParser.parseKanonaks(d),g=Qe(e.managesTypeKey);g||(console.error(`Capability "${e.commandName}" has no resolved managesType.`),process.exit(1));let f=D(u,g);f.length===0&&(console.error(`Package ${s}/${i}@${c} does not contain any ${I(g)} instances.`),process.exit(1));let y=this.handlerRegistry.get(e.deploymentTargetKey);y?await y.deploy({instances:f,allKanonaks:u,repository:this.repository,options:o}):console.log(`Cached ${s}/${i}@${c} (no deployment handler for "${e.deploymentTargetKey}")`)}async remove(e,t,o){await this.requireHandler(e).undeploy(t,{repository:this.repository,options:o})}async list(e,t){let r=await this.requireHandler(e).list({repository:this.repository,options:t}),s=e.managesTypeKey||"managed";if(r.length===0){console.log(`No ${s} instances installed.`);return}console.log(`Installed ${s} instances:
|
|
62
|
+
`);for(let i of r){let a=i.publisher?`${i.publisher}/${i.package_}@${i.version}`:"unmanaged";console.log(` ${i.name} (${a}) ${i.path}`)}}async update(e,t,o){let s=await this.requireHandler(e).list({repository:this.repository,options:o}),i=t?s.filter(c=>c.name===t):s.filter(c=>c.publisher);if(i.length===0){console.log(t?`"${t}" not found.`:"No managed instances to update.");return}let a=0;for(let c of i){let l=await this.publisherIndex.getHighestVersion(c.publisher,c.package_);!l||l===c.version||(console.log(`Updating ${c.name}: ${c.version} \u2192 ${l}`),await this.add(e,`${c.publisher}/${c.package_}@${l}`,o),a++)}console.log(a===0?"All instances are up to date.":`
|
|
63
|
+
Updated ${a} instance(s).`)}async search(e,t){let o=t.publisher??"kanonak.org",r=Qe(e.managesTypeKey);if(!r){console.error("Capability has no resolved managesType; nothing to search for.");return}console.log(`Searching ${o} for ${I(r)} instances...
|
|
64
|
+
`);let s=new Gn,i=await s.getConfig(o),a=s.resolveIndexUrl(o,i),c=await this.fetchFn(a,o);if(!c.ok){console.error(`Failed to fetch package index from ${o}.`);return}let l=await c.text(),p=ge.parseIndex(l);if(p.size===0){console.error(`No packages found for publisher "${o}".`);return}let d=new Map;for(let[f,y]of p){let k=[...y].sort((m,b)=>{let h=ge.parseVersion(m),w=ge.parseVersion(b);return!h||!w?0:h.major!==w.major?w.major-h.major:h.minor!==w.minor?w.minor-h.minor:w.patch-h.patch});d.set(f,k[0])}let u=[],g=0;for(let[f,y]of d){let k=this.fileCache.get(o,f,y);if(!k)try{let m=await this.publisherIndex.getPackageUrl(o,f,y),b=await this.fetchFn(m,o);if(!b.ok)continue;k=await b.text(),this.fileCache.put(o,f,y,k)}catch{continue}try{let m=this.parser.parse(k),b=new _(m,this.repository),h=await this.objectParser.parseKanonaks(b),w=D(h,r);for(let R of w)u.push({publisher:o,package_:f,version:y,subject:R});g++}catch{continue}}if(u.length===0){console.log(`No ${I(r)} instances found across ${g} package(s).`);return}console.log(`Found ${u.length} ${I(r)} instance(s):
|
|
65
|
+
`);for(let f of u)console.log(` ${f.publisher}/${f.package_}@${f.version}`),console.log(` ${f.subject.name}`),console.log()}async info(e,t,o){let i=(await this.requireHandler(e).list({repository:this.repository,options:o})).find(a=>a.name===t);i||(console.error(`"${t}" is not installed.`),process.exit(1)),console.log(`Name: ${i.name}`),console.log(`Type: ${e.managesTypeKey||"n/a"}`),console.log(`Publisher: ${i.publisher||"unmanaged"}`),console.log(`Package: ${i.package_||"n/a"}`),console.log(`Version: ${i.version||"n/a"}`),console.log(`Path: ${i.path}`)}requireHandler(e){let t=this.handlerRegistry.get(e.deploymentTargetKey);return t||(console.error(`No deployment handler registered for "${e.deploymentTargetKey}". Ensure the capability's deploymentTarget resolves to a DeploymentTarget instance whose URI is registered in the CLI at startup.`),process.exit(1)),t}};function Qe(n){if(!n)return;let e=n.split("/");if(e.length===3)return{publisher:e[0],package_:e[1],name:e[2]}}var Q=class{handlers=new Map;register(e,t){this.handlers.set(e,t)}get(e){return this.handlers.get(e)??null}};import{mkdirSync as So,rmSync as vo,existsSync as te,readdirSync as $o,writeFileSync as Ro}from"fs";import{join as ne}from"path";import{KanonakObjectParser as _o,KanonakParser as Co}from"@kanonak-protocol/sdk";import{SubjectKanonak as Ze,EmbeddedKanonak as Wn,ReferenceKanonak as qn}from"@kanonak-protocol/sdk";var E="kanonak.org",T="agent-skills",Yn="kanonak.org",Jn="core-spdx";var Xn={publisher:E,package_:T,name:"name"},Qn={publisher:E,package_:T,name:"description"},Zn={publisher:E,package_:T,name:"license"},eo={publisher:E,package_:T,name:"compatibility"},to={publisher:E,package_:T,name:"allowedTools"},no={publisher:E,package_:T,name:"hasSection"},oo={publisher:E,package_:T,name:"title"},ro={publisher:E,package_:T,name:"body"},so={publisher:Yn,package_:Jn,name:"spdxId"};async function et(n,e,t,o,r){let s=[],i=new ye(t,o,r);for(let a of e){let c=await io(a,n,i);c&&s.push(c)}return s}async function io(n,e,t){let o=P(n,Xn),r=P(n,Qn);if(!o||!r)return;let s=[];s.push(`name: ${o}`),s.push(`description: ${fe(r)}`);let i=H(n,Zn);if(i){let u=await t.resolveSubject(i,e),g=u?P(u,so):void 0;s.push(`license: ${g??i.name}`)}let a=P(n,eo);a&&s.push(`compatibility: ${fe(a)}`);let c=M(n,to);if(c.length>0){let u=await co(c,e,t);u&&s.push(`allowed-tools: ${u}`)}let l=[];for(let u of M(n,no)){let g=ao(u);g&&l.push(g)}let p=l.join(`
|
|
66
66
|
|
|
67
|
-
`),
|
|
68
|
-
`);return{name:o,description:r,skillMd:
|
|
67
|
+
`),d=["---",...s,"---","",p].join(`
|
|
68
|
+
`);return{name:o,description:r,skillMd:d}}function ao(n){if(!(n instanceof Wn))return"";let e=P(n,oo),t=P(n,ro),o=[];return e&&o.push(`## ${e}`),t&&o.push(fe(t)),o.join(`
|
|
69
69
|
|
|
70
|
-
`)}async function
|
|
71
|
-
`;function
|
|
70
|
+
`)}async function co(n,e,t){let o=[];for(let r of n)r instanceof qn&&o.push(r.subject.name);return o.join(" ")}function fe(n){return n.trimEnd()}var ye=class{constructor(e,t,o){this.repository=e;this.parser=t;this.objectParser=o}repository;parser;objectParser;cache=new Map;async resolveSubject(e,t){let o=Fe(t,e);if(o)return o;let r=`${e.publisher}/${e.package_}`,s=this.cache.get(r);if(!s){let i=await this.repository.getDocumentsByNamespaceAsync(e.publisher,e.package_);if(i.length===0)return;let a=i[0],c=new _(a,this.repository);s=await this.objectParser.parseKanonaks(c),this.cache.set(r,s)}for(let i of s)if(i instanceof Ze&&i.name===e.name&&i.namespace&&i.namespace.startsWith(`${e.publisher}/${e.package_}@`))return i;for(let i of s)if(i instanceof Ze&&i.name===e.name)return i}};import{join as he}from"path";import{homedir as tt}from"os";import{KanonakObjectParser as lo}from"@kanonak-protocol/sdk";var B="kanonak.org",z="agent-skills",ot={publisher:B,package_:z,name:"Client"},rt={publisher:B,package_:z,name:"clientId"},po={publisher:B,package_:z,name:"projectSkillDir"},uo={publisher:B,package_:z,name:"userSkillDir"},mo="agents";async function q(n,e){let t=(n.client??go()??mo).toLowerCase(),o=n.scope??"project",r=await fo(t,e);if(!r){let a=await yo(e);throw new Error(`Unknown client "${t}". Known clients: ${a.join(", ")||"(none)"}. Add a Client instance to a package that imports kanonak.org/agent-skills and install that package to make it available.`)}let i=P(r,o==="user"?uo:po);if(!i)throw new Error(`Client "${t}" has no ${o==="user"?"userSkillDir":"projectSkillDir"} declared.`);return ho(i)}async function Z(n,e,t){let o=await q(e,t);return he(o,n)}function go(){if(process.env.CLAUDE_CODE||process.env.CLAUDE_PROJECT_DIR)return"claude-code"}var nt=new WeakMap;async function st(n){let e=nt.get(n);if(e)return e;let t=await n.getDocumentsByNamespaceAsync(B,z);if(t.length===0)throw new Error(`Could not find ${B}/${z} in the repository. Install a skill capability (which transitively imports agent-skills) or fetch agent-skills directly to populate the cache.`);let r=[...t].sort((c,l)=>{let p=c.metadata.namespace_?.version,d=l.metadata.namespace_?.version;return!p||!d?0:p.major!==d.major?d.major-p.major:p.minor!==d.minor?d.minor-p.minor:d.patch-p.patch})[0],s=new lo,i=new _(r,n),a=await s.parseKanonaks(i);return nt.set(n,a),a}async function fo(n,e){let t=await st(e),o=D(t,ot);for(let r of o)if(P(r,rt)===n)return r}async function yo(n){let e=await st(n),t=D(e,ot),o=[];for(let r of t){let s=P(r,rt);s&&o.push(s)}return o}function ho(n){return n.startsWith("~/")?he(tt(),n.slice(2)):n==="~"?tt():n.startsWith("/")||/^[A-Za-z]:[\\/]/.test(n)?n:he(process.cwd(),n)}import{readFileSync as ko,writeFileSync as bo,existsSync as Po}from"fs";import{join as it}from"path";import at from"js-yaml";var ct="skills.lock",wo=`# This file is generated by Kanonak CLI. Do not edit manually.
|
|
71
|
+
`;function ee(n){let e=it(n,ct);if(!Po(e))return{version:"1",lastUpdated:new Date().toISOString(),skills:{}};let t=ko(e,"utf-8"),o=at.load(t);return!o||typeof o!="object"||o.version!=="1"?{version:"1",lastUpdated:new Date().toISOString(),skills:{}}:{version:"1",lastUpdated:o.lastUpdated??new Date().toISOString(),skills:o.skills??{}}}function ke(n,e){e.lastUpdated=new Date().toISOString();let t={};for(let s of Object.keys(e.skills).sort())t[s]=e.skills[s];e.skills=t;let o=it(n,ct),r=at.dump(e,{lineWidth:-1,sortKeys:!1,quotingType:'"'});bo(o,wo+r,"utf-8")}var oe=class{parser=new Co;objectParser=new _o;async deploy(e){let{instances:t,allKanonaks:o,repository:r,options:s}=e;if(t.length===0){console.error("No Skill instances to deploy.");return}let i=await et(o,t,r,this.parser,this.objectParser);if(i.length===0){console.error("No skills could be transformed from the package.");return}let a=await q(s,r),c=ee(a),l=t[0].namespace,{publisher:p,package_:d,version:u}=Do(l);for(let g of i){let f=await Z(g.name,s,r),y=te(ne(f,"SKILL.md"));So(f,{recursive:!0}),Ro(ne(f,"SKILL.md"),g.skillMd,"utf-8"),c.skills[g.name]={publisher:p,package_:d,version:u,resolved:p?`kanonak://${p}/${d}@${u}`:"",integrity:O(g.skillMd)},console.log(` ${y?"Updated":"Installed"} skill "${g.name}" \u2192 ${f}`)}ke(a,c)}async undeploy(e,t){let{repository:o,options:r}=t,s=await Z(e,r,o);te(s)||(console.error(`Skill "${e}" is not installed at ${s}`),process.exit(1)),vo(s,{recursive:!0,force:!0});let i=await q(r,o),a=ee(i);delete a.skills[e],ke(i,a),console.log(`Removed skill "${e}" from ${s}`)}async list(e){let{repository:t,options:o}=e,r=await q(o,t),s=ee(r),i=[];for(let[a,c]of Object.entries(s.skills))i.push({name:a,publisher:c.publisher,package_:c.package_,version:c.version,path:await Z(a,o,t)});if(te(r))try{let a=$o(r,{withFileTypes:!0});for(let c of a){if(!c.isDirectory()||s.skills[c.name])continue;let l=ne(r,c.name,"SKILL.md");te(l)&&i.push({name:c.name,publisher:"",package_:"",version:"",path:ne(r,c.name)})}}catch{}return i}};function Do(n){if(!n)return{publisher:"",package_:"",version:""};let e=n.indexOf("@");if(e===-1)return{publisher:"",package_:"",version:""};let t=n.substring(0,e),o=n.substring(e+1),r=t.indexOf("/");return r===-1?{publisher:"",package_:"",version:""}:{publisher:t.substring(0,r),package_:t.substring(r+1),version:o}}var jo=xo(Ao(import.meta.url)),No=JSON.parse(Ko(Eo(jo,"..","package.json"),"utf-8")),K=new Io;K.name("kanonak").description("Kanonak Protocol CLI - Validate and resolve Kanonak ontology packages").version(No.version);K.command("validate <path>").description("Validate .kan.yml file(s). Resolves imports via HTTP from publisher domains.").action(async n=>{await ve(n)});K.command("install [package]").description("Install a package and its dependencies, or install all from kanonak.lock.").action(async n=>{await Ce(n)});K.command("deps <path>").description("Show resolved dependency tree for a .kan.yml file.").action(async n=>{await Ie(n)});K.command("login <publisher>").description("Authenticate with a package publisher using OAuth 2.0.").action(async n=>{await Te(n)});K.command("logout <publisher>").description("Revoke tokens and remove stored credentials for a publisher.").action(async n=>{await Oe(n)});K.addCommand(Ye());async function Fo(){try{let n=new C,e=new To,t=new Uo,o=Lo(t),r=new Oo({fetchFn:o}),s=await A(process.cwd(),e),i=new Q;i.register("kanonak.org/capabilities/AgentSkillDeployment",new oe);let a=await We(n,e,s),c=new X(n,e,r,o,i,s);Xe(K,a,c)}catch{}}await Fo();K.parse();
|
|
@@ -1,16 +1,17 @@
|
|
|
1
|
-
import type { DeploymentContext, DeploymentHandler, DeployedInstance } from '../capabilities/DeploymentHandlerRegistry.js';
|
|
1
|
+
import type { DeploymentContext, DeploymentHandler, DeployedInstance, OperationContext } from '../capabilities/DeploymentHandlerRegistry.js';
|
|
2
2
|
/**
|
|
3
3
|
* Deployment handler for the `AgentSkillDeployment` DeploymentTarget.
|
|
4
4
|
*
|
|
5
5
|
* Transforms `kanonak.org/agent-skills/Skill` instances into SKILL.md
|
|
6
|
-
* files and places them in
|
|
7
|
-
*
|
|
8
|
-
*
|
|
6
|
+
* files and places them in the directory declared by the named
|
|
7
|
+
* Client instance selected via the `--client` option (defaulting to
|
|
8
|
+
* the "agents" cross-client layout). All path resolution and
|
|
9
|
+
* reference following goes through the SDK object model.
|
|
9
10
|
*/
|
|
10
11
|
export declare class SkillDeploymentHandler implements DeploymentHandler {
|
|
11
12
|
private readonly parser;
|
|
12
13
|
private readonly objectParser;
|
|
13
14
|
deploy(context: DeploymentContext): Promise<void>;
|
|
14
|
-
undeploy(name: string,
|
|
15
|
-
list(
|
|
15
|
+
undeploy(name: string, context: OperationContext): Promise<void>;
|
|
16
|
+
list(context: OperationContext): Promise<DeployedInstance[]>;
|
|
16
17
|
}
|
|
@@ -1,27 +1,40 @@
|
|
|
1
|
+
import type { IKanonakDocumentRepository } from '@kanonak-protocol/sdk';
|
|
1
2
|
/**
|
|
2
3
|
* Options for resolving skill discovery paths.
|
|
3
4
|
*/
|
|
4
5
|
export interface SkillPathOptions {
|
|
6
|
+
/**
|
|
7
|
+
* clientId of a named Client instance in the agent-skills ontology
|
|
8
|
+
* (e.g. "agents", "claude-code"). When omitted, the CLI first tries
|
|
9
|
+
* `detectClient()` on process env vars, then falls back to the
|
|
10
|
+
* "agents" cross-client default.
|
|
11
|
+
*/
|
|
5
12
|
client?: string;
|
|
13
|
+
/** "project" (default) or "user". */
|
|
6
14
|
scope?: string;
|
|
7
15
|
}
|
|
8
16
|
/**
|
|
9
|
-
* Resolve the skills directory
|
|
17
|
+
* Resolve the skills directory for the requested client and scope.
|
|
10
18
|
*
|
|
11
|
-
*
|
|
12
|
-
*
|
|
13
|
-
*
|
|
14
|
-
*
|
|
15
|
-
*
|
|
19
|
+
* This goes through the SDK object model: the agent-skills ontology
|
|
20
|
+
* is parsed, Client instances are looked up by URI, and the matching
|
|
21
|
+
* Client's `projectSkillDir` or `userSkillDir` is read. No hardcoded
|
|
22
|
+
* path templates, no alias string-stripping — the installer adapts
|
|
23
|
+
* to whatever named Client instances exist in the ontology at
|
|
24
|
+
* runtime.
|
|
16
25
|
*/
|
|
17
|
-
export declare function resolveSkillsDir(options: SkillPathOptions): string
|
|
26
|
+
export declare function resolveSkillsDir(options: SkillPathOptions, repository: IKanonakDocumentRepository): Promise<string>;
|
|
18
27
|
/**
|
|
19
|
-
* Resolve the directory for a specific skill.
|
|
28
|
+
* Resolve the directory for a specific skill by name.
|
|
20
29
|
*/
|
|
21
|
-
export declare function resolveSkillDir(skillName: string, options: SkillPathOptions): string
|
|
30
|
+
export declare function resolveSkillDir(skillName: string, options: SkillPathOptions, repository: IKanonakDocumentRepository): Promise<string>;
|
|
22
31
|
/**
|
|
23
32
|
* Auto-detect the current AI agent client from environment variables.
|
|
33
|
+
* Returns a clientId matching a named Client instance in the
|
|
34
|
+
* agent-skills ontology, or undefined when nothing is detected.
|
|
24
35
|
*
|
|
25
|
-
*
|
|
36
|
+
* Matches the default Client instances declared in
|
|
37
|
+
* kanonak.org/agent-skills@1.1.0. Extend this mapping when adding
|
|
38
|
+
* new named Client instances with their own env-var signature.
|
|
26
39
|
*/
|
|
27
40
|
export declare function detectClient(): string | undefined;
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@kanonak-protocol/cli",
|
|
3
|
-
"version": "1.
|
|
3
|
+
"version": "1.5.0",
|
|
4
4
|
"description": "Kanonak Protocol CLI - Validate and resolve Kanonak ontology packages",
|
|
5
5
|
"type": "module",
|
|
6
6
|
"main": "./dist/index.js",
|
|
@@ -34,8 +34,8 @@
|
|
|
34
34
|
"semantic-web"
|
|
35
35
|
],
|
|
36
36
|
"dependencies": {
|
|
37
|
-
"@kanonak-protocol/sdk": "^1.
|
|
38
|
-
"@kanonak-protocol/types": "^1.
|
|
37
|
+
"@kanonak-protocol/sdk": "^1.5.0",
|
|
38
|
+
"@kanonak-protocol/types": "^1.5.0",
|
|
39
39
|
"commander": "^13.0.0",
|
|
40
40
|
"js-yaml": "^4.1.1"
|
|
41
41
|
},
|