@kimchi-dev/kimchictl 0.0.2

package/dist/api/resources.js

@@ -0,0 +1,96 @@
+/**
+ * Kubernetes quantity parsing (port of kimchi-dev:src/sandbox/cloud/resources.ts,
+ * trimmed to what the workspace list/detail rendering needs) plus display
+ * formatters for human tables.
+ */
+/**
+ * Kubernetes quantity: mantissa, then EITHER an exponent OR a decimal/binary
+ * SI suffix — never both.
+ */
+const QUANTITY_RE = /^([0-9]+(?:\.[0-9]+)?|\.[0-9]+)([eE][+-]?[0-9]+|n|u|m|k|M|G|T|P|E|Ki|Mi|Gi|Ti|Pi|Ei)?$/;
+const DECIMAL_SUFFIX = {
+    n: 1e-9,
+    u: 1e-6,
+    m: 1e-3,
+    k: 1e3,
+    M: 1e6,
+    G: 1e9,
+    T: 1e12,
+    P: 1e15,
+    E: 1e18,
+};
+const BINARY_SUFFIX = {
+    Ki: 1024,
+    Mi: 1024 ** 2,
+    Gi: 1024 ** 3,
+    Ti: 1024 ** 4,
+    Pi: 1024 ** 5,
+    Ei: 1024 ** 6,
+};
+function parseQuantity(raw) {
+    if (typeof raw !== "string")
+        return undefined;
+    const match = QUANTITY_RE.exec(raw.trim());
+    if (!match)
+        return undefined;
+    const mantissa = Number.parseFloat(match[1] ?? "");
+    if (!Number.isFinite(mantissa))
+        return undefined;
+    const suffix = match[2];
+    if (suffix === undefined)
+        return mantissa;
+    if (/^[eE][+-]?[0-9]+$/.test(suffix)) {
+        return mantissa * 10 ** Number.parseInt(suffix.slice(1), 10);
+    }
+    return mantissa * (BINARY_SUFFIX[suffix] ?? DECIMAL_SUFFIX[suffix] ?? 1);
+}
+/** "200m" → 200, "1.5" → 1500. Undefined for absent/invalid. */
+export function cpuQuantityToMillicores(raw) {
+    const cores = parseQuantity(raw);
+    return cores === undefined ? undefined : Math.round(cores * 1000);
+}
+/** "512Mi" → 536870912, "1G" → 1000000000. Undefined for absent/invalid. */
+export function byteQuantityToBytes(raw) {
+    const bytes = parseQuantity(raw);
+    return bytes === undefined ? undefined : Math.round(bytes);
+}
+/** 1000 → "1", 1500 → "1.5", 250 → "250m", undefined → "-". */
+export function formatMillicores(millicores) {
+    if (millicores === undefined)
+        return "-";
+    if (millicores < 1000)
+        return `${millicores}m`;
+    const cores = millicores / 1000;
+    return Number.isInteger(cores) ? String(cores) : cores.toFixed(2).replace(/0+$/, "").replace(/\.$/, "");
+}
+/** 2147483648 → "2Gi", 536870912 → "512Mi", undefined → "-". */
+export function formatBytes(bytes) {
+    if (bytes === undefined)
+        return "-";
+    const GI = 1024 ** 3;
+    const MI = 1024 ** 2;
+    if (bytes >= GI)
+        return formatUnit(bytes / GI, "Gi");
+    if (bytes >= MI)
+        return formatUnit(bytes / MI, "Mi");
+    if (bytes >= 1024)
+        return formatUnit(bytes / 1024, "Ki");
+    return `${bytes}B`;
+}
+function formatUnit(value, suffix) {
+    return `${Number.isInteger(value) ? value : value.toFixed(1)}${suffix}`;
+}
+/** Relative age for table columns: "45s", "12m", "3h", "5d". */
+export function formatAge(since, now = new Date()) {
+    const seconds = Math.max(0, Math.floor((now.getTime() - since.getTime()) / 1000));
+    if (seconds < 60)
+        return `${seconds}s`;
+    const minutes = Math.floor(seconds / 60);
+    if (minutes < 60)
+        return `${minutes}m`;
+    const hours = Math.floor(minutes / 60);
+    if (hours < 48)
+        return `${hours}h`;
+    return `${Math.floor(hours / 24)}d`;
+}
+//# sourceMappingURL=resources.js.map

package/dist/api/resources.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resources.js","sourceRoot":"../src/","sources":["api/resources.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH;;;GAGG;AACH,MAAM,WAAW,GAAG,wFAAwF,CAAA;AAE5G,MAAM,cAAc,GAA2B;IAC9C,CAAC,EAAE,IAAI;IACP,CAAC,EAAE,IAAI;IACP,CAAC,EAAE,IAAI;IACP,CAAC,EAAE,GAAG;IACN,CAAC,EAAE,GAAG;IACN,CAAC,EAAE,GAAG;IACN,CAAC,EAAE,IAAI;IACP,CAAC,EAAE,IAAI;IACP,CAAC,EAAE,IAAI;CACP,CAAA;AAED,MAAM,aAAa,GAA2B;IAC7C,EAAE,EAAE,IAAI;IACR,EAAE,EAAE,IAAI,IAAI,CAAC;IACb,EAAE,EAAE,IAAI,IAAI,CAAC;IACb,EAAE,EAAE,IAAI,IAAI,CAAC;IACb,EAAE,EAAE,IAAI,IAAI,CAAC;IACb,EAAE,EAAE,IAAI,IAAI,CAAC;CACb,CAAA;AAED,SAAS,aAAa,CAAC,GAAY;IAClC,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAA;IAC7C,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAA;IAC1C,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAA;IAC5B,MAAM,QAAQ,GAAG,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAA;IAClD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,SAAS,CAAA;IAChD,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,CAAA;IACvB,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAA;IACzC,IAAI,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACtC,OAAO,QAAQ,GAAG,EAAE,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;IAC7D,CAAC;IACD,OAAO,QAAQ,GAAG,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAA;AACzE,CAAC;AAED,gEAAgE;AAChE,MAAM,UAAU,uBAAuB,CAAC,GAAY;IACnD,MAAM,KAAK,GAAG,aAAa,CAAC,GAAG,CAAC,CAAA;IAChC,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC,CAAA;AAClE,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,mBAAmB,CAAC,GAAY;IAC/C,MAAM,KAAK,GAAG,aAAa,CAAC,GAAG,CAAC,CAAA;IAChC,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;AAC3D,CAAC;AAED,+DAA+D;AAC/D,MAAM,UAAU,gBAAgB,CAAC,UAA8B;IAC9D,IAAI,UAAU,KAAK,SAAS;QAAE,OAAO,GAAG,CAAA;IACxC,IAAI,UAAU,GAAG,IAAI;QAAE,OAAO,GAAG,UAAU,GAAG,CAAA;IAC9C,MAAM,KAAK,GAAG,UAAU,GAAG,IAAI,CAAA;IAC/B,OAAO,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;AACxG,CAAC;AAED,gEAAgE;AAChE,MAAM,UAAU,WAAW,CAAC,KAAyB;IACpD,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,GAAG,CAAA;IACnC,MAAM,EAAE,GAAG,IAAI,IAAI,CAAC,CAAA;IACpB,MAAM,EAAE,GAAG,IAAI,IAAI,CAAC,CAAA;IACpB,IAAI,KAAK,IAAI,EAAE;QAAE,OAAO,UAAU,CAAC,KAAK,GAAG,EAAE,EAAE,IAAI,CAAC,CAAA;IACpD,IAAI,KAAK,IAAI,EAAE;QAAE,OAAO,UAAU,CAAC,KAAK,GAAG,EAAE,EAAE,IAAI,CAAC,CAAA;IACpD,IAAI,KAAK,IAAI,IAAI;QAAE,OAAO,UAAU,CAAC,KAAK,GAAG,IAAI,EAAE,IAAI,CAAC,CAAA;IACxD,OAAO,GAAG,KAAK,GAAG,CAAA;AACnB,CAAC;AAED,SAAS,UAAU,CAAC,KAAa,EAAE,MAAc;IAChD,OAAO,GAAG,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,MAAM,EAAE,CAAA;AACxE,CAAC;AAED,gEAAgE;AAChE,MAAM,UAAU,SAAS,CAAC,KAAW,EAAE,MAAY,IAAI,IAAI,EAAE;IAC5D,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC,CAAA;IACjF,IAAI,OAAO,GAAG,EAAE;QAAE,OAAO,GAAG,OAAO,GAAG,CAAA;IACtC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,EAAE,CAAC,CAAA;IACxC,IAAI,OAAO,GAAG,EAAE;QAAE,OAAO,GAAG,OAAO,GAAG,CAAA;IACtC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,EAAE,CAAC,CAAA;IACtC,IAAI,KAAK,GAAG,EAAE;QAAE,OAAO,GAAG,KAAK,GAAG,CAAA;IAClC,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,EAAE,CAAC,GAAG,CAAA;AACpC,CAAC"}

package/dist/api/templates.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Server-side workspace templates — PLACEHOLDER.
+ *
+ * Templates are created and stored in the API (they are not local files).
+ * The API contract is being finalised server-side; until it lands,
+ * `workspace create --template <name>` is accepted at the CLI and fails here
+ * with a graceful, actionable error instead of a 4xx surprise.
+ */
+export declare class TemplatesUnavailableError extends Error {
+    constructor(templateName: string);
+}
+/**
+ * Resolve a template name to its create-time parameters.
+ *
+ * TODO(templates-api): replace with the real call once the contract lands —
+ * expected to return resources/dependencies applied at create time.
+ */
+export declare function resolveTemplate(templateName: string): never;
+//# sourceMappingURL=templates.d.ts.map

package/dist/api/templates.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"templates.d.ts","sourceRoot":"../src/","sources":["api/templates.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,qBAAa,yBAA0B,SAAQ,KAAK;gBACvC,YAAY,EAAE,MAAM;CAOhC;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,YAAY,EAAE,MAAM,GAAG,KAAK,CAE3D"}

package/dist/api/templates.js

@@ -0,0 +1,25 @@
+/**
+ * Server-side workspace templates — PLACEHOLDER.
+ *
+ * Templates are created and stored in the API (they are not local files).
+ * The API contract is being finalised server-side; until it lands,
+ * `workspace create --template <name>` is accepted at the CLI and fails here
+ * with a graceful, actionable error instead of a 4xx surprise.
+ */
+export class TemplatesUnavailableError extends Error {
+    constructor(templateName) {
+        super(`Workspace templates are not available yet (requested "${templateName}") — ` +
+            `the templates API is being finalised. Omit --template for now.`);
+        this.name = "TemplatesUnavailableError";
+    }
+}
+/**
+ * Resolve a template name to its create-time parameters.
+ *
+ * TODO(templates-api): replace with the real call once the contract lands —
+ * expected to return resources/dependencies applied at create time.
+ */
+export function resolveTemplate(templateName) {
+    throw new TemplatesUnavailableError(templateName);
+}
+//# sourceMappingURL=templates.js.map

package/dist/api/templates.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"templates.js","sourceRoot":"../src/","sources":["api/templates.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,MAAM,OAAO,yBAA0B,SAAQ,KAAK;IACnD,YAAY,YAAoB;QAC/B,KAAK,CACJ,yDAAyD,YAAY,OAAO;YAC3E,gEAAgE,CACjE,CAAA;QACD,IAAI,CAAC,IAAI,GAAG,2BAA2B,CAAA;IACxC,CAAC;CACD;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,YAAoB;IACnD,MAAM,IAAI,yBAAyB,CAAC,YAAY,CAAC,CAAA;AAClD,CAAC"}

package/dist/api/tokens.d.ts

@@ -0,0 +1,23 @@
+import type { ApiOptions } from "./types.js";
+/**
+ * Workspace token exchange + lifecycle RPCs (ports of the corresponding
+ * kimchi-dev:src/sandbox/cloud/auth.ts functions, without the harness's
+ * upsert semantics — kimchictl only resumes, never upserts).
+ */
+/** Exchange the API key for a short-lived workspace JWT (WebSocket auth). */
+export declare function exchangeWorkspaceToken(apiKey: string, workspaceId: string, options?: ApiOptions & {
+    orgId?: string;
+}): Promise<{
+    token: string;
+    expireTime: string;
+}>;
+/**
+ * Resume a suspended (hibernated) workspace: POST …/workspaces/{id}:resume.
+ *
+ * Success and "workspace is not suspended" (the control plane's FailedPrecondition
+ * 400) both mean the workspace is running. Every other failure propagates.
+ */
+export declare function resumeWorkspace(apiKey: string, workspaceId: string, options: ApiOptions & {
+    orgId: string;
+}): Promise<void>;
+//# sourceMappingURL=tokens.d.ts.map

package/dist/api/tokens.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tokens.d.ts","sourceRoot":"../src/","sources":["api/tokens.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AAG5C;;;;GAIG;AAEH,6EAA6E;AAC7E,wBAAsB,sBAAsB,CAC3C,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,EACnB,OAAO,CAAC,EAAE,UAAU,GAAG;IAAE,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,GACvC,OAAO,CAAC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAAC,CAwBhD;AAED;;;;;GAKG;AACH,wBAAsB,eAAe,CACpC,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,UAAU,GAAG;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,GACrC,OAAO,CAAC,IAAI,CAAC,CA4Bf"}

package/dist/api/tokens.js

@@ -0,0 +1,51 @@
+import { checkResponse, fetchWithTimeout, resolveEndpoint } from "./http.js";
+import { RemoteNetworkError } from "./types.js";
+/**
+ * Workspace token exchange + lifecycle RPCs (ports of the corresponding
+ * kimchi-dev:src/sandbox/cloud/auth.ts functions, without the harness's
+ * upsert semantics — kimchictl only resumes, never upserts).
+ */
+/** Exchange the API key for a short-lived workspace JWT (WebSocket auth). */
+export async function exchangeWorkspaceToken(apiKey, workspaceId, options) {
+    const endpoint = resolveEndpoint(options);
+    const fetchImpl = options?.fetch ?? globalThis.fetch;
+    const url = `${endpoint}/ai-optimizer/v1beta/workspace-tokens:exchange`;
+    const resp = await fetchWithTimeout(url, {
+        method: "POST",
+        headers: { Authorization: `Bearer ${apiKey}`, "Content-Type": "application/json" },
+        body: JSON.stringify({ workspaceId }),
+    }, fetchImpl, 30_000, options?.signal);
+    await checkResponse(resp, url);
+    const data = (await resp.json().catch(() => undefined));
+    if (typeof data?.token !== "string") {
+        throw new RemoteNetworkError(`Missing token in exchange response from ${endpoint}`);
+    }
+    return { token: data.token, expireTime: typeof data.expireTime === "string" ? data.expireTime : "" };
+}
+/**
+ * Resume a suspended (hibernated) workspace: POST …/workspaces/{id}:resume.
+ *
+ * Success and "workspace is not suspended" (the control plane's FailedPrecondition
+ * 400) both mean the workspace is running. Every other failure propagates.
+ */
+export async function resumeWorkspace(apiKey, workspaceId, options) {
+    const endpoint = resolveEndpoint(options);
+    const fetchImpl = options?.fetch ?? globalThis.fetch;
+    const url = `${endpoint}/ai-optimizer/v1beta/organizations/${encodeURIComponent(options.orgId)}/workspaces/${encodeURIComponent(workspaceId)}:resume`;
+    const resp = await fetchWithTimeout(url, {
+        method: "POST",
+        headers: { Authorization: `Bearer ${apiKey}`, "Content-Type": "application/json" },
+        body: JSON.stringify({}),
+    }, fetchImpl, 30_000, options?.signal);
+    if (resp.ok)
+        return;
+    // Clone BEFORE consuming the body: checkResponse re-reads resp.text() and a
+    // second read of the same body fails in undici.
+    const rest = resp.clone();
+    const body = await resp.text().catch(() => "");
+    if (resp.status >= 400 && resp.status < 500 && body.includes("not suspended")) {
+        return;
+    }
+    await checkResponse(rest, url);
+}
+//# sourceMappingURL=tokens.js.map

package/dist/api/tokens.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tokens.js","sourceRoot":"../src/","sources":["api/tokens.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,WAAW,CAAA;AAE5E,OAAO,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAA;AAE/C;;;;GAIG;AAEH,6EAA6E;AAC7E,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC3C,MAAc,EACd,WAAmB,EACnB,OAAyC;IAEzC,MAAM,QAAQ,GAAG,eAAe,CAAC,OAAO,CAAC,CAAA;IACzC,MAAM,SAAS,GAAG,OAAO,EAAE,KAAK,IAAI,UAAU,CAAC,KAAK,CAAA;IAEpD,MAAM,GAAG,GAAG,GAAG,QAAQ,gDAAgD,CAAA;IACvE,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAClC,GAAG,EACH;QACC,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,MAAM,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAClF,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,WAAW,EAAE,CAAC;KACrC,EACD,SAAS,EACT,MAAM,EACN,OAAO,EAAE,MAAM,CACf,CAAA;IAED,MAAM,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;IAE9B,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAA0D,CAAA;IAChH,IAAI,OAAO,IAAI,EAAE,KAAK,KAAK,QAAQ,EAAE,CAAC;QACrC,MAAM,IAAI,kBAAkB,CAAC,2CAA2C,QAAQ,EAAE,CAAC,CAAA;IACpF,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,UAAU,EAAE,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,EAAE,CAAA;AACrG,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACpC,MAAc,EACd,WAAmB,EACnB,OAAuC;IAEvC,MAAM,QAAQ,GAAG,eAAe,CAAC,OAAO,CAAC,CAAA;IACzC,MAAM,SAAS,GAAG,OAAO,EAAE,KAAK,IAAI,UAAU,CAAC,KAAK,CAAA;IAEpD,MAAM,GAAG,GAAG,GAAG,QAAQ,sCAAsC,kBAAkB,CAAC,OAAO,CAAC,KAAK,CAAC,eAAe,kBAAkB,CAAC,WAAW,CAAC,SAAS,CAAA;IACrJ,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAClC,GAAG,EACH;QACC,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,MAAM,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAClF,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;KACxB,EACD,SAAS,EACT,MAAM,EACN,OAAO,EAAE,MAAM,CACf,CAAA;IAED,IAAI,IAAI,CAAC,EAAE;QAAE,OAAM;IAEnB,4EAA4E;IAC5E,gDAAgD;IAChD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,EAAE,CAAA;IACzB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAA;IAC9C,IAAI,IAAI,CAAC,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,MAAM,GAAG,GAAG,IAAI,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;QAC/E,OAAM;IACP,CAAC;IAED,MAAM,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;AAC/B,CAAC"}

package/dist/api/types.d.ts

@@ -0,0 +1,34 @@
+/**
+ * Control-plane client types — mirror of the harness's
+ * kimchi-dev:src/sandbox/cloud types (trimmed to what kimchictl v1 needs).
+ */
+export declare class RemoteAuthError extends Error {
+    readonly statusCode: number;
+    constructor(message: string, statusCode: number);
+}
+export declare class RemoteNetworkError extends Error {
+    constructor(message: string);
+}
+/**
+ * Thrown when the control plane rejects a request because the user's
+ * resource quota is exhausted (HTTP 429 with a quota body). The message is
+ * already user-facing — surface verbatim.
+ */
+export declare class RemoteQuotaError extends RemoteNetworkError {
+    readonly statusCode: number;
+    constructor(message: string, statusCode: number);
+}
+export interface ApiOptions {
+    /**
+     * Override the cloud API endpoint. Resolution order:
+     *   1. this option
+     *   2. KIMCHI_REMOTE_ENDPOINT env var
+     *   3. production default https://app.kimchi.dev/api
+     */
+    endpoint?: string;
+    /** Override global fetch (tests). */
+    fetch?: typeof globalThis.fetch;
+    /** External abort signal. */
+    signal?: AbortSignal;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/api/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"../src/","sources":["api/types.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,qBAAa,eAAgB,SAAQ,KAAK;aAGxB,UAAU,EAAE,MAAM;gBADlC,OAAO,EAAE,MAAM,EACC,UAAU,EAAE,MAAM;CAKnC;AAED,qBAAa,kBAAmB,SAAQ,KAAK;gBAChC,OAAO,EAAE,MAAM;CAI3B;AAED;;;;GAIG;AACH,qBAAa,gBAAiB,SAAQ,kBAAkB;aAGtC,UAAU,EAAE,MAAM;gBADlC,OAAO,EAAE,MAAM,EACC,UAAU,EAAE,MAAM;CAKnC;AAED,MAAM,WAAW,UAAU;IAC1B;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,qCAAqC;IACrC,KAAK,CAAC,EAAE,OAAO,UAAU,CAAC,KAAK,CAAA;IAC/B,6BAA6B;IAC7B,MAAM,CAAC,EAAE,WAAW,CAAA;CACpB"}

package/dist/api/types.js

@@ -0,0 +1,32 @@
+/**
+ * Control-plane client types — mirror of the harness's
+ * kimchi-dev:src/sandbox/cloud types (trimmed to what kimchictl v1 needs).
+ */
+export class RemoteAuthError extends Error {
+    statusCode;
+    constructor(message, statusCode) {
+        super(message);
+        this.statusCode = statusCode;
+        this.name = "RemoteAuthError";
+    }
+}
+export class RemoteNetworkError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "RemoteNetworkError";
+    }
+}
+/**
+ * Thrown when the control plane rejects a request because the user's
+ * resource quota is exhausted (HTTP 429 with a quota body). The message is
+ * already user-facing — surface verbatim.
+ */
+export class RemoteQuotaError extends RemoteNetworkError {
+    statusCode;
+    constructor(message, statusCode) {
+        super(message);
+        this.statusCode = statusCode;
+        this.name = "RemoteQuotaError";
+    }
+}
+//# sourceMappingURL=types.js.map

package/dist/api/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"../src/","sources":["api/types.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,MAAM,OAAO,eAAgB,SAAQ,KAAK;IAGxB;IAFjB,YACC,OAAe,EACC,UAAkB;QAElC,KAAK,CAAC,OAAO,CAAC,CAAA;QAFE,eAAU,GAAV,UAAU,CAAQ;QAGlC,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAA;IAC9B,CAAC;CACD;AAED,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IAC5C,YAAY,OAAe;QAC1B,KAAK,CAAC,OAAO,CAAC,CAAA;QACd,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAA;IACjC,CAAC;CACD;AAED;;;;GAIG;AACH,MAAM,OAAO,gBAAiB,SAAQ,kBAAkB;IAGtC;IAFjB,YACC,OAAe,EACC,UAAkB;QAElC,KAAK,CAAC,OAAO,CAAC,CAAA;QAFE,eAAU,GAAV,UAAU,CAAQ;QAGlC,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAA;IAC/B,CAAC;CACD"}

package/dist/api/wait.d.ts

@@ -0,0 +1,17 @@
+import type { ApiOptions } from "./types.js";
+import { type Workspace } from "./workspaces.js";
+/**
+ * Poll getWorkspace until the workspace is ACTIVE or the deadline passes.
+ * Shared by `workspace create` (post-create wait) and `ssh` (post-resume
+ * wait) — kap's 2s cadence, deadline-based, progress via onTick.
+ *
+ * Transient get failures (the workspace is still registering with the
+ * control plane) are tolerated until the deadline; auth failures abort.
+ */
+export declare function waitForWorkspaceActive(apiKey: string, id: string, options: ApiOptions & {
+    timeoutMs: number;
+    pollMs?: number;
+    sleep?: (ms: number) => Promise<void>;
+    onTick?: (elapsedSeconds: number) => void;
+}): Promise<Workspace>;
+//# sourceMappingURL=wait.d.ts.map

package/dist/api/wait.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wait.d.ts","sourceRoot":"../src/","sources":["api/wait.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AAE5C,OAAO,EAAgB,KAAK,SAAS,EAAE,MAAM,iBAAiB,CAAA;AAE9D;;;;;;;GAOG;AACH,wBAAsB,sBAAsB,CAC3C,MAAM,EAAE,MAAM,EACd,EAAE,EAAE,MAAM,EACV,OAAO,EAAE,UAAU,GAAG;IACrB,SAAS,EAAE,MAAM,CAAA;IACjB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IACrC,MAAM,CAAC,EAAE,CAAC,cAAc,EAAE,MAAM,KAAK,IAAI,CAAA;CACzC,GACC,OAAO,CAAC,SAAS,CAAC,CAuBpB"}

package/dist/api/wait.js

@@ -0,0 +1,37 @@
+import { RemoteAuthError } from "./types.js";
+import { getWorkspace } from "./workspaces.js";
+/**
+ * Poll getWorkspace until the workspace is ACTIVE or the deadline passes.
+ * Shared by `workspace create` (post-create wait) and `ssh` (post-resume
+ * wait) — kap's 2s cadence, deadline-based, progress via onTick.
+ *
+ * Transient get failures (the workspace is still registering with the
+ * control plane) are tolerated until the deadline; auth failures abort.
+ */
+export async function waitForWorkspaceActive(apiKey, id, options) {
+    const pollMs = options.pollMs ?? 2000;
+    const sleep = options.sleep ?? ((ms) => new Promise((resolve) => setTimeout(resolve, ms)));
+    const start = Date.now();
+    const deadline = start + options.timeoutMs;
+    let current;
+    while (Date.now() < deadline) {
+        await sleep(pollMs);
+        options.onTick?.(Math.round((Date.now() - start) / 1000));
+        try {
+            current = await getWorkspace(apiKey, id, options);
+        }
+        catch (err) {
+            if (err instanceof RemoteAuthError)
+                throw err;
+            continue;
+        }
+        if (current.status === "active")
+            break;
+    }
+    if (!current) {
+        // Every poll failed; fetch once without tolerance so the real error surfaces.
+        current = await getWorkspace(apiKey, id, options);
+    }
+    return current;
+}
+//# sourceMappingURL=wait.js.map

package/dist/api/wait.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wait.js","sourceRoot":"../src/","sources":["api/wait.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAC5C,OAAO,EAAE,YAAY,EAAkB,MAAM,iBAAiB,CAAA;AAE9D;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC3C,MAAc,EACd,EAAU,EACV,OAKC;IAED,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,IAAI,CAAA;IACrC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,CAAC,CAAC,EAAU,EAAE,EAAE,CAAC,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,CAAA;IAElG,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;IACxB,MAAM,QAAQ,GAAG,KAAK,GAAG,OAAO,CAAC,SAAS,CAAA;IAC1C,IAAI,OAA8B,CAAA;IAClC,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;QAC9B,MAAM,KAAK,CAAC,MAAM,CAAC,CAAA;QACnB,OAAO,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC,CAAA;QACzD,IAAI,CAAC;YACJ,OAAO,GAAG,MAAM,YAAY,CAAC,MAAM,EAAE,EAAE,EAAE,OAAO,CAAC,CAAA;QAClD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,IAAI,GAAG,YAAY,eAAe;gBAAE,MAAM,GAAG,CAAA;YAC7C,SAAQ;QACT,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,KAAK,QAAQ;YAAE,MAAK;IACvC,CAAC;IACD,IAAI,CAAC,OAAO,EAAE,CAAC;QACd,8EAA8E;QAC9E,OAAO,GAAG,MAAM,YAAY,CAAC,MAAM,EAAE,EAAE,EAAE,OAAO,CAAC,CAAA;IAClD,CAAC;IACD,OAAO,OAAO,CAAA;AACf,CAAC"}

package/dist/api/workspaces.d.ts

@@ -0,0 +1,33 @@
+import type { ApiOptions } from "./types.js";
+export type WorkspaceStatus = "active" | "initializing" | "suspended" | "deleting" | "idle";
+export interface Workspace {
+    /** Server id — also the command-line identifier (`workspace get <id>`, `ssh <id>`). */
+    id: string;
+    /** First DNS label of the URI — the user-facing name (NOT the server id). */
+    alias: string;
+    description: string;
+    status: WorkspaceStatus;
+    uri?: string;
+    host?: string;
+    createdAt: Date;
+    cpuMillicores?: number;
+    ramBytes?: number;
+    pvcSizeBytes?: number;
+}
+export interface WorkspaceCommandOptions extends ApiOptions {
+    /** Pre-resolved organization id — skips the verifyKey round-trip. */
+    orgId?: string;
+}
+export declare function listWorkspaces(apiKey: string, options?: WorkspaceCommandOptions): Promise<Workspace[]>;
+export declare function getWorkspace(apiKey: string, id: string, options?: WorkspaceCommandOptions): Promise<Workspace>;
+/**
+ * Create a workspace. Server generates the alias (like kap) — there is no
+ * client-side name input. Returns the created workspace (status likely
+ * "initializing"; callers may poll getWorkspace until "active").
+ */
+export declare function createWorkspace(apiKey: string, options: WorkspaceCommandOptions & {
+    description?: string;
+}): Promise<Workspace>;
+export declare function deleteWorkspace(apiKey: string, id: string, options?: WorkspaceCommandOptions): Promise<void>;
+export declare function mapWorkspace(raw: unknown, endpoint: string): Workspace;
+//# sourceMappingURL=workspaces.d.ts.map

package/dist/api/workspaces.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspaces.d.ts","sourceRoot":"../src/","sources":["api/workspaces.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AAe5C,MAAM,MAAM,eAAe,GAAG,QAAQ,GAAG,cAAc,GAAG,WAAW,GAAG,UAAU,GAAG,MAAM,CAAA;AAE3F,MAAM,WAAW,SAAS;IACzB,uFAAuF;IACvF,EAAE,EAAE,MAAM,CAAA;IACV,6EAA6E;IAC7E,KAAK,EAAE,MAAM,CAAA;IACb,WAAW,EAAE,MAAM,CAAA;IACnB,MAAM,EAAE,eAAe,CAAA;IACvB,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,SAAS,EAAE,IAAI,CAAA;IACf,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,YAAY,CAAC,EAAE,MAAM,CAAA;CACrB;AAED,MAAM,WAAW,uBAAwB,SAAQ,UAAU;IAC1D,qEAAqE;IACrE,KAAK,CAAC,EAAE,MAAM,CAAA;CACd;AAMD,wBAAsB,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,uBAAuB,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC,CAsD5G;AAED,wBAAsB,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,uBAAuB,GAAG,OAAO,CAAC,SAAS,CAAC,CAiBpH;AAED;;;;GAIG;AACH,wBAAsB,eAAe,CACpC,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,uBAAuB,GAAG;IAAE,WAAW,CAAC,EAAE,MAAM,CAAA;CAAE,GACzD,OAAO,CAAC,SAAS,CAAC,CAwBpB;AAED,wBAAsB,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,uBAAuB,GAAG,OAAO,CAAC,IAAI,CAAC,CAclH;AAED,wBAAgB,YAAY,CAAC,GAAG,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,GAAG,SAAS,CAiDtE"}

package/dist/api/workspaces.js

@@ -0,0 +1,159 @@
+import { checkResponse, fetchWithTimeout, resolveEndpoint } from "./http.js";
+import { verifyApiKey } from "./keys.js";
+import { byteQuantityToBytes, cpuQuantityToMillicores } from "./resources.js";
+import { RemoteAuthError, RemoteNetworkError } from "./types.js";
+/**
+ * Workspace client — mirrors the harness's (kimchi-dev:src/sandbox/cloud)
+ * calls against the same control-plane API, plus kap's server-named create.
+ *
+ * The control plane addresses workspaces by UUID id; users type the alias
+ * (first DNS label of the URI). api/resolver.ts maps between them.
+ */
+const HARNESS_CLIENT_TYPE = "harness"; // matches kimchi-dev:src/sandbox/constants.ts
+const LIST_WORKSPACES_PAGE_LIMIT = 200;
+const LIST_WORKSPACES_PAGE_HARD_CAP = 10;
+async function resolveOrgId(apiKey, options) {
+    return options?.orgId ?? (await verifyApiKey(apiKey, options));
+}
+export async function listWorkspaces(apiKey, options) {
+    const fetchImpl = options?.fetch ?? globalThis.fetch;
+    const endpoint = resolveEndpoint(options);
+    try {
+        const orgId = await resolveOrgId(apiKey, options);
+        const results = [];
+        let cursor = "";
+        for (let page = 0; page < LIST_WORKSPACES_PAGE_HARD_CAP; page++) {
+            const params = new URLSearchParams();
+            params.set("page.limit", String(LIST_WORKSPACES_PAGE_LIMIT));
+            params.set("clientType", HARNESS_CLIENT_TYPE);
+            if (cursor)
+                params.set("page.cursor", cursor);
+            const url = `${endpoint}/ai-optimizer/v1beta/organizations/${encodeURIComponent(orgId)}/workspaces?${params.toString()}`;
+            const resp = await fetchWithTimeout(url, { method: "GET", headers: { Authorization: `Bearer ${apiKey}`, Accept: "application/json" } }, fetchImpl, 30_000, options?.signal);
+            await checkResponse(resp, url);
+            const data = await resp.json().catch(() => undefined);
+            if (typeof data !== "object" || data === null) {
+                throw new RemoteNetworkError(`Unexpected response shape from ${endpoint}`);
+            }
+            const items = data.items;
+            if (!Array.isArray(items)) {
+                throw new RemoteNetworkError(`Missing items array in list-workspaces response from ${endpoint}`);
+            }
+            for (const item of items) {
+                results.push(mapWorkspace(item, endpoint));
+            }
+            const nextCursor = data.nextPageCursor;
+            if (typeof nextCursor !== "string" || nextCursor.length === 0) {
+                return results;
+            }
+            cursor = nextCursor;
+        }
+        return results;
+    }
+    catch (err) {
+        if (err instanceof RemoteAuthError || err instanceof RemoteNetworkError) {
+            throw err;
+        }
+        throw new RemoteNetworkError(err instanceof Error ? err.message : String(err));
+    }
+}
+export async function getWorkspace(apiKey, id, options) {
+    const fetchImpl = options?.fetch ?? globalThis.fetch;
+    const endpoint = resolveEndpoint(options);
+    const orgId = await resolveOrgId(apiKey, options);
+    const url = `${endpoint}/ai-optimizer/v1beta/organizations/${encodeURIComponent(orgId)}/workspaces/${encodeURIComponent(id)}`;
+    const resp = await fetchWithTimeout(url, { method: "GET", headers: { Authorization: `Bearer ${apiKey}` } }, fetchImpl, 30_000, options?.signal);
+    await checkResponse(resp, url);
+    const data = await resp.json().catch(() => undefined);
+    return mapWorkspace(data, endpoint);
+}
+/**
+ * Create a workspace. Server generates the alias (like kap) — there is no
+ * client-side name input. Returns the created workspace (status likely
+ * "initializing"; callers may poll getWorkspace until "active").
+ */
+export async function createWorkspace(apiKey, options) {
+    const fetchImpl = options?.fetch ?? globalThis.fetch;
+    const endpoint = resolveEndpoint(options);
+    const orgId = await resolveOrgId(apiKey, options);
+    const url = `${endpoint}/ai-optimizer/v1beta/organizations/${encodeURIComponent(orgId)}/workspaces`;
+    const resp = await fetchWithTimeout(url, {
+        method: "POST",
+        headers: { Authorization: `Bearer ${apiKey}`, "Content-Type": "application/json" },
+        body: JSON.stringify({
+            ...(options.description ? { description: options.description } : {}),
+            clientType: HARNESS_CLIENT_TYPE,
+        }),
+    }, fetchImpl, 30_000, options?.signal);
+    await checkResponse(resp, url);
+    const data = await resp.json().catch(() => undefined);
+    return mapWorkspace(data, endpoint);
+}
+export async function deleteWorkspace(apiKey, id, options) {
+    const fetchImpl = options?.fetch ?? globalThis.fetch;
+    const endpoint = resolveEndpoint(options);
+    const orgId = await resolveOrgId(apiKey, options);
+    const url = `${endpoint}/ai-optimizer/v1beta/organizations/${encodeURIComponent(orgId)}/workspaces/${encodeURIComponent(id)}`;
+    const resp = await fetchWithTimeout(url, { method: "DELETE", headers: { Authorization: `Bearer ${apiKey}` } }, fetchImpl, 30_000, options?.signal);
+    await checkResponse(resp, url);
+}
+export function mapWorkspace(raw, endpoint) {
+    if (typeof raw !== "object" || raw === null) {
+        throw new RemoteNetworkError(`Invalid workspace entry in response from ${endpoint}`);
+    }
+    const r = raw;
+    const id = typeof r.id === "string" && r.id.length > 0 ? r.id : undefined;
+    if (!id) {
+        throw new RemoteNetworkError(`Missing workspace id in response from ${endpoint}`);
+    }
+    const uri = typeof r.uri === "string" && r.uri.length > 0 ? r.uri : undefined;
+    const alias = uri?.split(".")[0] || id;
+    let createdAt;
+    if (typeof r.createTime === "string") {
+        const parsed = new Date(r.createTime);
+        if (!Number.isNaN(parsed.getTime()))
+            createdAt = parsed;
+    }
+    let host;
+    if (uri) {
+        try {
+            host = new URL(uri.includes("://") ? uri : `wss://${uri}`).hostname;
+        }
+        catch {
+            host = undefined; // tolerate URIs URL can't parse — host is display-only here
+        }
+    }
+    // Provisioned sizes arrive nested under spec.resources as Kubernetes
+    // quantity strings ("200m", "512Mi", "10Gi").
+    const spec = typeof r.spec === "object" && r.spec !== null ? r.spec : undefined;
+    const res = spec && typeof spec.resources === "object" && spec.resources !== null
+        ? spec.resources
+        : undefined;
+    return {
+        id,
+        alias,
+        description: typeof r.description === "string" ? r.description : "",
+        status: mapWorkspaceStatus(r.status),
+        uri,
+        host,
+        createdAt: createdAt ?? new Date(0),
+        cpuMillicores: cpuQuantityToMillicores(res?.cpu),
+        ramBytes: byteQuantityToBytes(res?.memory),
+        pvcSizeBytes: byteQuantityToBytes(res?.pvcSize),
+    };
+}
+function mapWorkspaceStatus(raw) {
+    switch (raw) {
+        case "ACTIVE":
+            return "active";
+        case "INITIALIZING":
+            return "initializing";
+        case "SUSPENDED":
+            return "suspended";
+        case "DELETING":
+            return "deleting";
+        default:
+            return "idle";
+    }
+}
+//# sourceMappingURL=workspaces.js.map

package/dist/api/workspaces.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspaces.js","sourceRoot":"../src/","sources":["api/workspaces.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,WAAW,CAAA;AAC5E,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAA;AACxC,OAAO,EAAE,mBAAmB,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAA;AAE7E,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAA;AAEhE;;;;;;GAMG;AAEH,MAAM,mBAAmB,GAAG,SAAS,CAAA,CAAC,8CAA8C;AACpF,MAAM,0BAA0B,GAAG,GAAG,CAAA;AACtC,MAAM,6BAA6B,GAAG,EAAE,CAAA;AAwBxC,KAAK,UAAU,YAAY,CAAC,MAAc,EAAE,OAAiC;IAC5E,OAAO,OAAO,EAAE,KAAK,IAAI,CAAC,MAAM,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAA;AAC/D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,MAAc,EAAE,OAAiC;IACrF,MAAM,SAAS,GAAG,OAAO,EAAE,KAAK,IAAI,UAAU,CAAC,KAAK,CAAA;IACpD,MAAM,QAAQ,GAAG,eAAe,CAAC,OAAO,CAAC,CAAA;IAEzC,IAAI,CAAC;QACJ,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;QAEjD,MAAM,OAAO,GAAgB,EAAE,CAAA;QAC/B,IAAI,MAAM,GAAG,EAAE,CAAA;QAEf,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,IAAI,GAAG,6BAA6B,EAAE,IAAI,EAAE,EAAE,CAAC;YACjE,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAA;YACpC,MAAM,CAAC,GAAG,CAAC,YAAY,EAAE,MAAM,CAAC,0BAA0B,CAAC,CAAC,CAAA;YAC5D,MAAM,CAAC,GAAG,CAAC,YAAY,EAAE,mBAAmB,CAAC,CAAA;YAC7C,IAAI,MAAM;gBAAE,MAAM,CAAC,GAAG,CAAC,aAAa,EAAE,MAAM,CAAC,CAAA;YAE7C,MAAM,GAAG,GAAG,GAAG,QAAQ,sCAAsC,kBAAkB,CAAC,KAAK,CAAC,eAAe,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAA;YACxH,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAClC,GAAG,EACH,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,MAAM,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE,EAAE,EAC7F,SAAS,EACT,MAAM,EACN,OAAO,EAAE,MAAM,CACf,CAAA;YAED,MAAM,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;YAE9B,MAAM,IAAI,GAAY,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;YAC9D,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;gBAC/C,MAAM,IAAI,kBAAkB,CAAC,kCAAkC,QAAQ,EAAE,CAAC,CAAA;YAC3E,CAAC;YACD,MAAM,KAAK,GAAI,IAA4B,CAAC,KAAK,CAAA;YACjD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC3B,MAAM,IAAI,kBAAkB,CAAC,wDAAwD,QAAQ,EAAE,CAAC,CAAA;YACjG,CAAC;YAED,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBAC1B,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAA;YAC3C,CAAC;YAED,MAAM,UAAU,GAAI,IAAqC,CAAC,cAAc,CAAA;YACxE,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC/D,OAAO,OAAO,CAAA;YACf,CAAC;YACD,MAAM,GAAG,UAAU,CAAA;QACpB,CAAC;QAED,OAAO,OAAO,CAAA;IACf,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,IAAI,GAAG,YAAY,eAAe,IAAI,GAAG,YAAY,kBAAkB,EAAE,CAAC;YACzE,MAAM,GAAG,CAAA;QACV,CAAC;QACD,MAAM,IAAI,kBAAkB,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAA;IAC/E,CAAC;AACF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,MAAc,EAAE,EAAU,EAAE,OAAiC;IAC/F,MAAM,SAAS,GAAG,OAAO,EAAE,KAAK,IAAI,UAAU,CAAC,KAAK,CAAA;IACpD,MAAM,QAAQ,GAAG,eAAe,CAAC,OAAO,CAAC,CAAA;IACzC,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAEjD,MAAM,GAAG,GAAG,GAAG,QAAQ,sCAAsC,kBAAkB,CAAC,KAAK,CAAC,eAAe,kBAAkB,CAAC,EAAE,CAAC,EAAE,CAAA;IAC7H,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAClC,GAAG,EACH,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,MAAM,EAAE,EAAE,EAAE,EACjE,SAAS,EACT,MAAM,EACN,OAAO,EAAE,MAAM,CACf,CAAA;IACD,MAAM,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;IAE9B,MAAM,IAAI,GAAY,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;IAC9D,OAAO,YAAY,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAA;AACpC,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACpC,MAAc,EACd,OAA2D;IAE3D,MAAM,SAAS,GAAG,OAAO,EAAE,KAAK,IAAI,UAAU,CAAC,KAAK,CAAA;IACpD,MAAM,QAAQ,GAAG,eAAe,CAAC,OAAO,CAAC,CAAA;IACzC,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAEjD,MAAM,GAAG,GAAG,GAAG,QAAQ,sCAAsC,kBAAkB,CAAC,KAAK,CAAC,aAAa,CAAA;IACnG,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAClC,GAAG,EACH;QACC,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,MAAM,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAClF,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;YACpB,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACpE,UAAU,EAAE,mBAAmB;SAC/B,CAAC;KACF,EACD,SAAS,EACT,MAAM,EACN,OAAO,EAAE,MAAM,CACf,CAAA;IACD,MAAM,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;IAE9B,MAAM,IAAI,GAAY,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;IAC9D,OAAO,YAAY,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAA;AACpC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,MAAc,EAAE,EAAU,EAAE,OAAiC;IAClG,MAAM,SAAS,GAAG,OAAO,EAAE,KAAK,IAAI,UAAU,CAAC,KAAK,CAAA;IACpD,MAAM,QAAQ,GAAG,eAAe,CAAC,OAAO,CAAC,CAAA;IACzC,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAEjD,MAAM,GAAG,GAAG,GAAG,QAAQ,sCAAsC,kBAAkB,CAAC,KAAK,CAAC,eAAe,kBAAkB,CAAC,EAAE,CAAC,EAAE,CAAA;IAC7H,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAClC,GAAG,EACH,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,MAAM,EAAE,EAAE,EAAE,EACpE,SAAS,EACT,MAAM,EACN,OAAO,EAAE,MAAM,CACf,CAAA;IACD,MAAM,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;AAC/B,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,GAAY,EAAE,QAAgB;IAC1D,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;QAC7C,MAAM,IAAI,kBAAkB,CAAC,4CAA4C,QAAQ,EAAE,CAAC,CAAA;IACrF,CAAC;IACD,MAAM,CAAC,GAAG,GAA8B,CAAA;IAExC,MAAM,EAAE,GAAG,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,CAAC,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAA;IACzE,IAAI,CAAC,EAAE,EAAE,CAAC;QACT,MAAM,IAAI,kBAAkB,CAAC,yCAAyC,QAAQ,EAAE,CAAC,CAAA;IAClF,CAAC;IAED,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAA;IAC7E,MAAM,KAAK,GAAG,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;IAEtC,IAAI,SAA2B,CAAA;IAC/B,IAAI,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;QACtC,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,CAAA;QACrC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YAAE,SAAS,GAAG,MAAM,CAAA;IACxD,CAAC;IAED,IAAI,IAAwB,CAAA;IAC5B,IAAI,GAAG,EAAE,CAAC;QACT,IAAI,CAAC;YACJ,IAAI,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,GAAG,EAAE,CAAC,CAAC,QAAQ,CAAA;QACpE,CAAC;QAAC,MAAM,CAAC;YACR,IAAI,GAAG,SAAS,CAAA,CAAC,4DAA4D;QAC9E,CAAC;IACF,CAAC;IAED,qEAAqE;IACrE,8CAA8C;IAC9C,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC,IAAgC,CAAC,CAAC,CAAC,SAAS,CAAA;IAC5G,MAAM,GAAG,GACR,IAAI,IAAI,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ,IAAI,IAAI,CAAC,SAAS,KAAK,IAAI;QACpE,CAAC,CAAE,IAAI,CAAC,SAAqC;QAC7C,CAAC,CAAC,SAAS,CAAA;IAEb,OAAO;QACN,EAAE;QACF,KAAK;QACL,WAAW,EAAE,OAAO,CAAC,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE;QACnE,MAAM,EAAE,kBAAkB,CAAC,CAAC,CAAC,MAAM,CAAC;QACpC,GAAG;QACH,IAAI;QACJ,SAAS,EAAE,SAAS,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC;QACnC,aAAa,EAAE,uBAAuB,CAAC,GAAG,EAAE,GAAG,CAAC;QAChD,QAAQ,EAAE,mBAAmB,CAAC,GAAG,EAAE,MAAM,CAAC;QAC1C,YAAY,EAAE,mBAAmB,CAAC,GAAG,EAAE,OAAO,CAAC;KAC/C,CAAA;AACF,CAAC;AAED,SAAS,kBAAkB,CAAC,GAAY;IACvC,QAAQ,GAAG,EAAE,CAAC;QACb,KAAK,QAAQ;YACZ,OAAO,QAAQ,CAAA;QAChB,KAAK,cAAc;YAClB,OAAO,cAAc,CAAA;QACtB,KAAK,WAAW;YACf,OAAO,WAAW,CAAA;QACnB,KAAK,UAAU;YACd,OAAO,UAAU,CAAA;QAClB;YACC,OAAO,MAAM,CAAA;IACf,CAAC;AACF,CAAC"}

package/dist/auth/auth-file.d.ts

@@ -0,0 +1,37 @@
+/**
+ * Shared auth.json access — a port of the kimchi harness's `syncPiAuth`
+ * (kimchi-dev:src/pi-auth.ts). The file format is the harness's pi auth
+ * storage:
+ *
+ *   { "<providerId>": { "type": "api_key", "key": "…" }, … }
+ *
+ * written pretty-printed (2-space indent, trailing newline), mode 0600, under
+ * a proper-lockfile lock. kimchictl must stay byte-compatible: the harness
+ * reads the entries this writes, and vice versa.
+ *
+ * Difference vs the harness port: the harness derives provider ids from
+ * models.json and throws when it is missing; kimchictl takes the ids as a
+ * parameter (the login command derives them from models.json when present and
+ * from the models metadata API otherwise) so it can run on machines that
+ * have never installed the harness.
+ */
+/** Read the raw auth.json map. Returns {} when the file is absent or blank. */
+export declare function readAuthJson(authPath: string): Record<string, unknown>;
+/** Read the saved Kimchi API key, if the shared auth.json has one. */
+export declare function readSavedApiKey(authPath: string): string | undefined;
+/**
+ * Replace all Kimchi-managed entries in auth.json: delete every existing
+ * kimchi provider credential (`kimchi-dev`, `kimchi-dev/*`,
+ * `kimchi-experimental`), then, when apiKey is non-empty, write
+ * `{ type: "api_key", key }` for each id in providerIds (deduped,
+ * "kimchi-dev" always included). Empty apiKey = pure clear.
+ *
+ * Non-Kimchi providers are preserved untouched. Mirrors the harness: no-op
+ * content only re-chmods to 0600 instead of rewriting.
+ */
+export declare function syncSharedAuth(authPath: string, apiKey: string, providerIds: readonly string[]): Promise<void>;
+/** Remove all Kimchi credentials from auth.json (logout path). No-op when absent. */
+export declare function clearSharedAuth(authPath: string): Promise<void>;
+/** Kimchi provider ids listed in an existing harness models.json ({} when absent/unreadable). */
+export declare function kimchiProviderIdsFromModelsJson(modelsPath: string): string[];
+//# sourceMappingURL=auth-file.d.ts.map

package/dist/auth/auth-file.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-file.d.ts","sourceRoot":"../src/","sources":["auth/auth-file.ts"],"names":[],"mappings":"AAMA;;;;;;;;;;;;;;;;GAgBG;AAEH,+EAA+E;AAC/E,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAGtE;AAED,sEAAsE;AACtE,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAMpE;AAED;;;;;;;;;GASG;AACH,wBAAsB,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAgCpH;AAED,qFAAqF;AACrF,wBAAsB,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAErE;AAED,iGAAiG;AACjG,wBAAgB,+BAA+B,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,EAAE,CAa5E"}