@knowzai/cli 0.1.0

package/dist/lib/platform-command-shared.d.ts

@@ -0,0 +1,132 @@
+import type { AuthState } from '@knowzai/core';
+import type { PlatformProviderPreset } from './platform-runtime.js';
+import type { PlatformApplyInput } from './platform-lifecycle.js';
+export type PlatformApplyAction = 'up' | 'upgrade';
+export declare const platformIdentityFlags: {
+    name: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
+    'config-dir': import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+};
+export declare const setupConsoleFlags: {
+    version: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    'api-port': import("@oclif/core/interfaces").OptionFlag<number | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    'web-port': import("@oclif/core/interfaces").OptionFlag<number | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    'mcp-port': import("@oclif/core/interfaces").OptionFlag<number | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    'public-site-port': import("@oclif/core/interfaces").OptionFlag<number | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    'with-mcp': import("@oclif/core/interfaces").BooleanFlag<boolean>;
+    'with-public-site': import("@oclif/core/interfaces").BooleanFlag<boolean>;
+    open: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+    name: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
+    'config-dir': import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+};
+export interface SetupConsoleFlagValues {
+    profile?: string;
+    'api-url'?: string;
+    name?: string;
+    'config-dir'?: string;
+    version?: string;
+    'api-port'?: number;
+    'web-port'?: number;
+    'mcp-port'?: number;
+    'public-site-port'?: number;
+    'with-mcp'?: boolean;
+    'with-public-site'?: boolean;
+    open?: boolean;
+}
+export interface SetupConsoleCommandContext {
+    authState(flags: SetupConsoleFlagValues): Promise<Pick<AuthState, 'store'>>;
+    cliVersion: string;
+    jsonEnabled(): boolean;
+    log(line: string): void;
+}
+export interface SetupConsoleCommandResult {
+    status: string;
+    url: string;
+    result?: unknown;
+}
+/** Shared command adapter for `knowz setup` and `knowz platform setup`. */
+export declare function runSetupConsoleCommand(ctx: SetupConsoleCommandContext, flags: SetupConsoleFlagValues): Promise<SetupConsoleCommandResult>;
+export declare const platformApplyFlags: {
+    version: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    provider: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    storage: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    'api-port': import("@oclif/core/interfaces").OptionFlag<number | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    'web-port': import("@oclif/core/interfaces").OptionFlag<number | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    'mcp-port': import("@oclif/core/interfaces").OptionFlag<number | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    'public-site-port': import("@oclif/core/interfaces").OptionFlag<number | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    'with-mcp': import("@oclif/core/interfaces").BooleanFlag<boolean>;
+    'with-public-site': import("@oclif/core/interfaces").BooleanFlag<boolean>;
+    'public-api-url': import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    'public-web-origin': import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    'public-mcp-url': import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    'embedding-dimensions': import("@oclif/core/interfaces").OptionFlag<number | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    'azure-endpoint': import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    'azure-api-key': import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    'azure-embedding-model': import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    'gcp-project': import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    'gcp-region': import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    'gcp-adc-path': import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    'gcp-chat-model': import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    'gcp-embedding-model': import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    'openai-endpoint': import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    'openai-api-key': import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    'openai-chat-model': import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    'openai-embedding-model': import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    'ai-provider': import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    'doc-intelligence-provider': import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    'vision-provider': import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    'transcription-provider': import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    name: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
+    'config-dir': import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+};
+export interface PlatformApplyFlagValues {
+    name: string;
+    'config-dir'?: string;
+    version?: string;
+    provider?: string;
+    storage?: string;
+    'api-port'?: number;
+    'web-port'?: number;
+    'mcp-port'?: number;
+    'public-site-port'?: number;
+    'with-mcp'?: boolean;
+    'with-public-site'?: boolean;
+    'public-api-url'?: string;
+    'public-web-origin'?: string;
+    'public-mcp-url'?: string;
+    'embedding-dimensions'?: number;
+    'azure-endpoint'?: string;
+    'azure-api-key'?: string;
+    'azure-embedding-model'?: string;
+    'gcp-project'?: string;
+    'gcp-region'?: string;
+    'gcp-adc-path'?: string;
+    'gcp-chat-model'?: string;
+    'gcp-embedding-model'?: string;
+    'openai-endpoint'?: string;
+    'openai-api-key'?: string;
+    'openai-chat-model'?: string;
+    'openai-embedding-model'?: string;
+    'ai-provider'?: string;
+    'doc-intelligence-provider'?: string;
+    'vision-provider'?: string;
+    'transcription-provider'?: string;
+}
+export declare function platformApplyInputFromFlags(action: PlatformApplyAction, flags: PlatformApplyFlagValues): PlatformApplyInput;
+export declare function printableApplyResult(result: Awaited<ReturnType<typeof import('./platform-lifecycle.js')['applyPlatform']>>): {
+    runtimeDir: string;
+    composeFile: string;
+    output: string;
+    schemaVersion: 1;
+    name: string;
+    version: string;
+    provider: PlatformProviderPreset;
+    storage: import("./platform-runtime.js").PlatformStorageMode;
+    imageFlavor: "" | "-gcp";
+    axes: import("./platform-runtime.js").PlatformProviderAxes;
+    ports: import("./platform-runtime.js").PlatformPorts;
+    serviceUrls: import("./platform-runtime.js").PlatformPublicUrls;
+    components?: import("./platform-runtime.js").PlatformComponents;
+    imageMode?: "build" | "pull" | "preloaded";
+    updatedAt: string;
+};
+//# sourceMappingURL=platform-command-shared.d.ts.map

package/dist/lib/platform-command-shared.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"platform-command-shared.d.ts","sourceRoot":"","sources":["../../src/lib/platform-command-shared.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAE/C,OAAO,KAAK,EAA0B,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAC5F,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAIlE,MAAM,MAAM,mBAAmB,GAAG,IAAI,GAAG,SAAS,CAAC;AAInD,eAAO,MAAM,qBAAqB;;;CAGjC,CAAC;AAEF,eAAO,MAAM,iBAAiB;;;;;;;;;;;CAU7B,CAAC;AAEF,MAAM,WAAW,sBAAsB;IACrC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,0BAA0B;IACzC,SAAS,CAAC,KAAK,EAAE,sBAAsB,GAAG,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC;IAC5E,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,IAAI,OAAO,CAAC;IACvB,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB;AAED,MAAM,WAAW,yBAAyB;IACxC,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,2EAA2E;AAC3E,wBAAsB,sBAAsB,CAC1C,GAAG,EAAE,0BAA0B,EAC/B,KAAK,EAAE,sBAAsB,GAC5B,OAAO,CAAC,yBAAyB,CAAC,CA0BpC;AAED,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA8C9B,CAAC;AAEF,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,2BAA2B,CAAC,EAAE,MAAM,CAAC;IACrC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,wBAAwB,CAAC,EAAE,MAAM,CAAC;CACnC;AAMD,wBAAgB,2BAA2B,CACzC,MAAM,EAAE,mBAAmB,EAC3B,KAAK,EAAE,uBAAuB,GAC7B,kBAAkB,CAkDpB;AAED,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,OAAO,CAAC,UAAU,CAAC,cAAc,yBAAyB,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC;;;;;;;;;;;;;;;;EAO1H"}

package/dist/lib/platform-command-shared.js

@@ -0,0 +1,159 @@
+import { Flags } from '@oclif/core';
+import { resolveDefaultPortableVersion } from './platform-frontdoor.js';
+import { launchSetupConsole } from './setup-console.js';
+import { PLATFORM_PROVIDERS } from './provider-presets.js';
+const AXIS_OPTIONS = ['azure', 'gcp', 'openai-compatible', 'none'];
+export const platformIdentityFlags = {
+    name: Flags.string({ description: 'Runtime project name', default: 'knowz' }),
+    'config-dir': Flags.string({ description: 'Knowz configuration root (defaults to KNOWZ_CONFIG_DIR or ~/.knowz)' }),
+};
+export const setupConsoleFlags = {
+    ...platformIdentityFlags,
+    version: Flags.string({ description: 'Pinned platform SemVer' }),
+    'api-port': Flags.integer({ description: 'Public API port' }),
+    'web-port': Flags.integer({ description: 'Public web port' }),
+    'mcp-port': Flags.integer({ description: 'Public MCP port' }),
+    'public-site-port': Flags.integer({ description: 'Public site port' }),
+    'with-mcp': Flags.boolean({ description: 'Run the MCP server', allowNo: true }),
+    'with-public-site': Flags.boolean({ description: 'Run the public site', allowNo: true }),
+    open: Flags.boolean({ description: 'Open the setup page in the default browser', default: true, allowNo: true }),
+};
+/** Shared command adapter for `knowz setup` and `knowz platform setup`. */
+export async function runSetupConsoleCommand(ctx, flags) {
+    const store = (await ctx.authState(flags)).store;
+    const quiet = ctx.jsonEnabled();
+    const completion = await launchSetupConsole({
+        store,
+        cwd: process.cwd(),
+        env: process.env,
+        quiet,
+        emit: (line) => ctx.log(line),
+        open: flags.open,
+        name: flags.name,
+        configDir: flags['config-dir'],
+        version: flags.version
+            ?? (process.env.KNOWZ_PLATFORM_VERSION ? resolveDefaultPortableVersion(process.env) : undefined),
+        cliVersion: ctx.cliVersion,
+        versionExplicit: Boolean(flags.version || process.env.KNOWZ_PLATFORM_VERSION),
+        ports: {
+            api: flags['api-port'],
+            web: flags['web-port'],
+            mcp: flags['mcp-port'],
+            publicSite: flags['public-site-port'],
+        },
+        components: { mcp: flags['with-mcp'], publicSite: flags['with-public-site'] },
+    });
+    if (!quiet)
+        ctx.log(`Knowz local setup finished (${completion.status}).`);
+    return { status: completion.status, url: completion.url, result: completion.result };
+}
+export const platformApplyFlags = {
+    ...platformIdentityFlags,
+    version: Flags.string({ description: 'Pinned platform SemVer (or KNOWZ_VERSION)' }),
+    provider: Flags.string({
+        description: 'AI provider preset (or KNOWZ_PROVIDER)',
+        options: [...PLATFORM_PROVIDERS],
+    }),
+    storage: Flags.string({ description: 'Object storage mode', options: ['minio', 'filesystem'] }),
+    'api-port': Flags.integer({ description: 'Public API port (or API_PORT)' }),
+    'web-port': Flags.integer({ description: 'Public web port (or WEB_PORT)' }),
+    'mcp-port': Flags.integer({ description: 'Public MCP port (or MCP_PORT)' }),
+    'public-site-port': Flags.integer({ description: 'Public site port (or PUBLIC_SITE_PORT)' }),
+    'with-mcp': Flags.boolean({ description: 'Run the MCP server', allowNo: true }),
+    'with-public-site': Flags.boolean({ description: 'Run the public site', allowNo: true }),
+    'public-api-url': Flags.string({ description: 'Browser-facing API URL (HTTPS unless localhost)' }),
+    'public-web-origin': Flags.string({ description: 'Browser-facing web origin (HTTPS unless localhost)' }),
+    'public-mcp-url': Flags.string({ description: 'Browser-facing MCP URL (HTTPS unless localhost)' }),
+    'embedding-dimensions': Flags.integer({
+        description: 'Embedding dimensions; must match the selected provider model',
+    }),
+    'azure-endpoint': Flags.string({ description: 'Azure OpenAI HTTPS endpoint (or AZURE_OPENAI_ENDPOINT)' }),
+    'azure-api-key': Flags.string({
+        description: 'Azure OpenAI API key (prefer AZURE_OPENAI_API_KEY to keep secrets out of shell history)',
+    }),
+    'azure-embedding-model': Flags.string({ description: 'Azure OpenAI embedding deployment/model name' }),
+    'gcp-project': Flags.string({ description: 'Vertex AI project (or VERTEX__PROJECT)' }),
+    'gcp-region': Flags.string({ description: 'Vertex AI region (or VERTEX__REGION)' }),
+    'gcp-adc-path': Flags.string({ description: 'Absolute readable ADC JSON path (or GCLOUD_ADC_PATH)' }),
+    'gcp-chat-model': Flags.string({ description: 'Vertex AI chat model (or VERTEX__CHATMODEL)' }),
+    'gcp-embedding-model': Flags.string({ description: 'Vertex AI embedding model (or VERTEX__EMBEDDINGMODEL)' }),
+    'openai-endpoint': Flags.string({ description: 'OpenAI-compatible HTTP(S) endpoint (or OPENAICOMPAT__ENDPOINT)' }),
+    'openai-api-key': Flags.string({
+        description: 'OpenAI-compatible key (prefer OPENAICOMPAT__APIKEY to keep secrets out of shell history)',
+    }),
+    'openai-chat-model': Flags.string({ description: 'OpenAI-compatible chat model' }),
+    'openai-embedding-model': Flags.string({ description: 'OpenAI-compatible embedding model' }),
+    'ai-provider': Flags.string({ description: 'Override the primary AI provider axis', options: AXIS_OPTIONS }),
+    'doc-intelligence-provider': Flags.string({
+        description: 'Override document-intelligence provider axis',
+        options: AXIS_OPTIONS,
+    }),
+    'vision-provider': Flags.string({ description: 'Override vision provider axis', options: AXIS_OPTIONS }),
+    'transcription-provider': Flags.string({
+        description: 'Override transcription provider axis',
+        options: AXIS_OPTIONS,
+    }),
+};
+function axis(value) {
+    return value;
+}
+export function platformApplyInputFromFlags(action, flags) {
+    const dimensions = flags['embedding-dimensions'];
+    return {
+        action,
+        name: flags.name,
+        configDir: flags['config-dir'],
+        version: flags.version,
+        provider: flags.provider,
+        storage: flags.storage,
+        ports: {
+            api: flags['api-port'],
+            web: flags['web-port'],
+            mcp: flags['mcp-port'],
+            publicSite: flags['public-site-port'],
+        },
+        components: { mcp: flags['with-mcp'], publicSite: flags['with-public-site'] },
+        publicUrls: {
+            api: flags['public-api-url'],
+            web: flags['public-web-origin'],
+            mcp: flags['public-mcp-url'],
+        },
+        embeddingDimensions: dimensions,
+        axes: {
+            ai: axis(flags['ai-provider']),
+            docIntelligence: axis(flags['doc-intelligence-provider']),
+            vision: axis(flags['vision-provider']),
+            transcription: axis(flags['transcription-provider']),
+        },
+        azure: {
+            endpoint: flags['azure-endpoint'],
+            apiKey: flags['azure-api-key'],
+            embeddingModel: flags['azure-embedding-model'],
+            embeddingDimensions: dimensions,
+        },
+        gcp: {
+            project: flags['gcp-project'],
+            region: flags['gcp-region'],
+            adcPath: flags['gcp-adc-path'],
+            chatModel: flags['gcp-chat-model'],
+            embeddingModel: flags['gcp-embedding-model'],
+            embeddingDimensions: dimensions,
+        },
+        openAiCompatible: {
+            endpoint: flags['openai-endpoint'],
+            apiKey: flags['openai-api-key'],
+            chatModel: flags['openai-chat-model'],
+            embeddingModel: flags['openai-embedding-model'],
+            embeddingDimensions: dimensions,
+        },
+    };
+}
+export function printableApplyResult(result) {
+    return {
+        ...result.state,
+        runtimeDir: result.paths.runtimeDir,
+        composeFile: result.paths.composeFile,
+        output: result.output,
+    };
+}
+//# sourceMappingURL=platform-command-shared.js.map

package/dist/lib/platform-command-shared.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"platform-command-shared.js","sourceRoot":"","sources":["../../src/lib/platform-command-shared.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAEpC,OAAO,EAAE,6BAA6B,EAAE,MAAM,yBAAyB,CAAC;AAGxE,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAI3D,MAAM,YAAY,GAAG,CAAC,OAAO,EAAE,KAAK,EAAE,mBAAmB,EAAE,MAAM,CAAU,CAAC;AAE5E,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,sBAAsB,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;IAC7E,YAAY,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,qEAAqE,EAAE,CAAC;CACnH,CAAC;AAEF,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,GAAG,qBAAqB;IACxB,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,wBAAwB,EAAE,CAAC;IAChE,UAAU,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,iBAAiB,EAAE,CAAC;IAC7D,UAAU,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,iBAAiB,EAAE,CAAC;IAC7D,UAAU,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,iBAAiB,EAAE,CAAC;IAC7D,kBAAkB,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,kBAAkB,EAAE,CAAC;IACtE,UAAU,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,oBAAoB,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC/E,kBAAkB,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,qBAAqB,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACxF,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,4CAA4C,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;CACjH,CAAC;AA8BF,2EAA2E;AAC3E,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,GAA+B,EAC/B,KAA6B;IAE7B,MAAM,KAAK,GAAG,CAAC,MAAM,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC;IACjD,MAAM,KAAK,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;IAChC,MAAM,UAAU,GAAG,MAAM,kBAAkB,CAAC;QAC1C,KAAK;QACL,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE;QAClB,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,KAAK;QACL,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC;QAC7B,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,SAAS,EAAE,KAAK,CAAC,YAAY,CAAC;QAC9B,OAAO,EAAE,KAAK,CAAC,OAAO;eACjB,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC,CAAC,6BAA6B,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAClG,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,eAAe,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC;QAC7E,KAAK,EAAE;YACL,GAAG,EAAE,KAAK,CAAC,UAAU,CAAC;YACtB,GAAG,EAAE,KAAK,CAAC,UAAU,CAAC;YACtB,GAAG,EAAE,KAAK,CAAC,UAAU,CAAC;YACtB,UAAU,EAAE,KAAK,CAAC,kBAAkB,CAAC;SACtC;QACD,UAAU,EAAE,EAAE,GAAG,EAAE,KAAK,CAAC,UAAU,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,kBAAkB,CAAC,EAAE;KAC9E,CAAC,CAAC;IACH,IAAI,CAAC,KAAK;QAAE,GAAG,CAAC,GAAG,CAAC,+BAA+B,UAAU,CAAC,MAAM,IAAI,CAAC,CAAC;IAC1E,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,GAAG,EAAE,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC;AACvF,CAAC;AAED,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,GAAG,qBAAqB;IACxB,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,2CAA2C,EAAE,CAAC;IACnF,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC;QACrB,WAAW,EAAE,wCAAwC;QACrD,OAAO,EAAE,CAAC,GAAG,kBAAkB,CAAC;KACjC,CAAC;IACF,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,qBAAqB,EAAE,OAAO,EAAE,CAAC,OAAO,EAAE,YAAY,CAAC,EAAE,CAAC;IAC/F,UAAU,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,+BAA+B,EAAE,CAAC;IAC3E,UAAU,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,+BAA+B,EAAE,CAAC;IAC3E,UAAU,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,+BAA+B,EAAE,CAAC;IAC3E,kBAAkB,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,wCAAwC,EAAE,CAAC;IAC5F,UAAU,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,oBAAoB,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC/E,kBAAkB,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,qBAAqB,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACxF,gBAAgB,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,iDAAiD,EAAE,CAAC;IAClG,mBAAmB,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,oDAAoD,EAAE,CAAC;IACxG,gBAAgB,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,iDAAiD,EAAE,CAAC;IAClG,sBAAsB,EAAE,KAAK,CAAC,OAAO,CAAC;QACpC,WAAW,EAAE,8DAA8D;KAC5E,CAAC;IACF,gBAAgB,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,wDAAwD,EAAE,CAAC;IACzG,eAAe,EAAE,KAAK,CAAC,MAAM,CAAC;QAC5B,WAAW,EAAE,yFAAyF;KACvG,CAAC;IACF,uBAAuB,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,8CAA8C,EAAE,CAAC;IACtG,aAAa,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,wCAAwC,EAAE,CAAC;IACtF,YAAY,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,sCAAsC,EAAE,CAAC;IACnF,cAAc,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,sDAAsD,EAAE,CAAC;IACrG,gBAAgB,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,6CAA6C,EAAE,CAAC;IAC9F,qBAAqB,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,uDAAuD,EAAE,CAAC;IAC7G,iBAAiB,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,gEAAgE,EAAE,CAAC;IAClH,gBAAgB,EAAE,KAAK,CAAC,MAAM,CAAC;QAC7B,WAAW,EAAE,0FAA0F;KACxG,CAAC;IACF,mBAAmB,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,8BAA8B,EAAE,CAAC;IAClF,wBAAwB,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,mCAAmC,EAAE,CAAC;IAC5F,aAAa,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,uCAAuC,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC;IAC5G,2BAA2B,EAAE,KAAK,CAAC,MAAM,CAAC;QACxC,WAAW,EAAE,8CAA8C;QAC3D,OAAO,EAAE,YAAY;KACtB,CAAC;IACF,iBAAiB,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,+BAA+B,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC;IACxG,wBAAwB,EAAE,KAAK,CAAC,MAAM,CAAC;QACrC,WAAW,EAAE,sCAAsC;QACnD,OAAO,EAAE,YAAY;KACtB,CAAC;CACH,CAAC;AAoCF,SAAS,IAAI,CAAC,KAAyB;IACrC,OAAO,KAA2C,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,2BAA2B,CACzC,MAA2B,EAC3B,KAA8B;IAE9B,MAAM,UAAU,GAAG,KAAK,CAAC,sBAAsB,CAAC,CAAC;IACjD,OAAO;QACL,MAAM;QACN,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,SAAS,EAAE,KAAK,CAAC,YAAY,CAAC;QAC9B,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,QAAQ,EAAE,KAAK,CAAC,QAA8C;QAC9D,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,KAAK,EAAE;YACL,GAAG,EAAE,KAAK,CAAC,UAAU,CAAC;YACtB,GAAG,EAAE,KAAK,CAAC,UAAU,CAAC;YACtB,GAAG,EAAE,KAAK,CAAC,UAAU,CAAC;YACtB,UAAU,EAAE,KAAK,CAAC,kBAAkB,CAAC;SACtC;QACD,UAAU,EAAE,EAAE,GAAG,EAAE,KAAK,CAAC,UAAU,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,kBAAkB,CAAC,EAAE;QAC7E,UAAU,EAAE;YACV,GAAG,EAAE,KAAK,CAAC,gBAAgB,CAAC;YAC5B,GAAG,EAAE,KAAK,CAAC,mBAAmB,CAAC;YAC/B,GAAG,EAAE,KAAK,CAAC,gBAAgB,CAAC;SAC7B;QACD,mBAAmB,EAAE,UAAU;QAC/B,IAAI,EAAE;YACJ,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;YAC9B,eAAe,EAAE,IAAI,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC;YACzD,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;YACtC,aAAa,EAAE,IAAI,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;SACrD;QACD,KAAK,EAAE;YACL,QAAQ,EAAE,KAAK,CAAC,gBAAgB,CAAC;YACjC,MAAM,EAAE,KAAK,CAAC,eAAe,CAAC;YAC9B,cAAc,EAAE,KAAK,CAAC,uBAAuB,CAAC;YAC9C,mBAAmB,EAAE,UAAU;SAChC;QACD,GAAG,EAAE;YACH,OAAO,EAAE,KAAK,CAAC,aAAa,CAAC;YAC7B,MAAM,EAAE,KAAK,CAAC,YAAY,CAAC;YAC3B,OAAO,EAAE,KAAK,CAAC,cAAc,CAAC;YAC9B,SAAS,EAAE,KAAK,CAAC,gBAAgB,CAAC;YAClC,cAAc,EAAE,KAAK,CAAC,qBAAqB,CAAC;YAC5C,mBAAmB,EAAE,UAAU;SAChC;QACD,gBAAgB,EAAE;YAChB,QAAQ,EAAE,KAAK,CAAC,iBAAiB,CAAC;YAClC,MAAM,EAAE,KAAK,CAAC,gBAAgB,CAAC;YAC/B,SAAS,EAAE,KAAK,CAAC,mBAAmB,CAAC;YACrC,cAAc,EAAE,KAAK,CAAC,wBAAwB,CAAC;YAC/C,mBAAmB,EAAE,UAAU;SAChC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,MAAsF;IACzH,OAAO;QACL,GAAG,MAAM,CAAC,KAAK;QACf,UAAU,EAAE,MAAM,CAAC,KAAK,CAAC,UAAU;QACnC,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,WAAW;QACrC,MAAM,EAAE,MAAM,CAAC,MAAM;KACtB,CAAC;AACJ,CAAC"}

package/dist/lib/platform-frontdoor-runtime.d.ts

@@ -0,0 +1,33 @@
+import { type CredentialStore } from '@knowzai/core';
+import { type FrontDoorDeps } from './platform-frontdoor.js';
+import { type BootstrapAdminInput, type BootstrapAdminResult } from './platform-onboarding.js';
+import { type InstallationActivationResult } from './activate.js';
+import type { EngineStatus } from './container-engine.js';
+import type { RegistryCredentialPreflightResult } from './platform-frontdoor.js';
+export interface PlatformFrontDoorRuntimeOptions {
+    store: CredentialStore;
+    cwd: string;
+    env: Readonly<Record<string, string | undefined>>;
+    isTty: boolean;
+    quiet: boolean;
+    validateProvider: boolean;
+    emit: (line: string) => void;
+    /** Intentional terminal-only credential output; false for browser/SSE consumers. */
+    allowCredentialOutput?: boolean;
+}
+/** Never-throw binding for the one-time portable bootstrap endpoint. */
+export declare function bootstrapPortableAdmin(apiUrl: string, passphrase: string, creds: BootstrapAdminInput, fetchFn?: typeof fetch): Promise<BootstrapAdminResult>;
+/** Read the existing activation without copying its credential into argv or a host file. */
+export declare function loadStoredInstallationActivation(input: {
+    projectName: string;
+    engine: EngineStatus;
+    env: Readonly<Record<string, string | undefined>>;
+}): Promise<InstallationActivationResult | null>;
+export declare function preflightRegistryCredential(input: {
+    mothershipUrl: string;
+    activation: InstallationActivationResult;
+    fetchFn?: typeof fetch;
+}): Promise<RegistryCredentialPreflightResult>;
+/** Shared real dependency binding used by terminal `up` and the HTML setup console. */
+export declare function createPlatformFrontDoorDeps(options: PlatformFrontDoorRuntimeOptions): FrontDoorDeps;
+//# sourceMappingURL=platform-frontdoor-runtime.d.ts.map

package/dist/lib/platform-frontdoor-runtime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"platform-frontdoor-runtime.d.ts","sourceRoot":"","sources":["../../src/lib/platform-frontdoor-runtime.ts"],"names":[],"mappings":"AAAA,OAAO,EAIL,KAAK,eAAe,EACrB,MAAM,eAAe,CAAC;AAKvB,OAAO,EAA2B,KAAK,aAAa,EAAE,MAAM,yBAAyB,CAAC;AACtF,OAAO,EACL,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EAG1B,MAAM,0BAA0B,CAAC;AAOlC,OAAO,EAIL,KAAK,4BAA4B,EAClC,MAAM,eAAe,CAAC;AACvB,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAE1D,OAAO,KAAK,EAAE,iCAAiC,EAAE,MAAM,yBAAyB,CAAC;AAEjF,MAAM,WAAW,+BAA+B;IAC9C,KAAK,EAAE,eAAe,CAAC;IACvB,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC;IAClD,KAAK,EAAE,OAAO,CAAC;IACf,KAAK,EAAE,OAAO,CAAC;IACf,gBAAgB,EAAE,OAAO,CAAC;IAC1B,IAAI,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC7B,oFAAoF;IACpF,qBAAqB,CAAC,EAAE,OAAO,CAAC;CACjC;AAmGD,wEAAwE;AACxE,wBAAsB,sBAAsB,CAC1C,MAAM,EAAE,MAAM,EACd,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE,mBAAmB,EAC1B,OAAO,GAAE,OAAO,KAAa,GAC5B,OAAO,CAAC,oBAAoB,CAAC,CA6B/B;AAuBD,4FAA4F;AAC5F,wBAAsB,gCAAgC,CAAC,KAAK,EAAE;IAC5D,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,YAAY,CAAC;IACrB,GAAG,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC;CACnD,GAAG,OAAO,CAAC,4BAA4B,GAAG,IAAI,CAAC,CA0C/C;AAED,wBAAsB,2BAA2B,CAAC,KAAK,EAAE;IACvD,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,4BAA4B,CAAC;IACzC,OAAO,CAAC,EAAE,OAAO,KAAK,CAAC;CACxB,GAAG,OAAO,CAAC,iCAAiC,CAAC,CAwB7C;AAED,uFAAuF;AACvF,wBAAgB,2BAA2B,CAAC,OAAO,EAAE,+BAA+B,GAAG,aAAa,CAgGnG"}

package/dist/lib/platform-frontdoor-runtime.js

@@ -0,0 +1,285 @@
+import { loadConfig, saveConfig, validateInstallCredentialFormat, } from '@knowzai/core';
+import { registerSecret } from '@knowzai/core';
+import { createApiClient } from '@knowzai/api-client';
+import { nodeProcessRunner, resolvePlatformPaths } from './platform-runtime.js';
+import { createInquirerPromptFn } from './platform-provider-prompt.js';
+import { loadRequiredEnvByPreset } from './platform-frontdoor.js';
+import { openBrowser } from './browser.js';
+import { performLogin } from './login.js';
+import { promptHidden } from './prompt.js';
+import { runPreflight } from './platform-preflight.js';
+import { probeProvider } from './platform-provider-probe.js';
+import { discoverKnowzCloudModels } from './platform-provider-probe.js';
+import { persistActivation, normalizeMothershipOrigin, runDeviceCodeFlow, } from './activate.js';
+import { PlatformReleaseCatalogHttpError } from './platform-release-manifest.js';
+function sink(quiet, emit) {
+    return quiet ? () => { } : emit;
+}
+async function reuseExistingProfile(store, profileName, apiUrl) {
+    const secret = await store.getSecret(profileName);
+    if (!secret)
+        return null;
+    try {
+        const result = await performLogin({ profile: profileName, apiUrl, mode: 'self-hosted', key: secret }, {
+            store,
+            config: loadConfig(),
+            saveConfig,
+            validateKey: (apiKey) => createApiClient({ baseUrl: apiUrl }).auth.validateKey({ apiKey }),
+            register: (request) => createApiClient({ baseUrl: apiUrl }).auth.register(request),
+        });
+        return { tenantId: result.tenantId };
+    }
+    catch {
+        return null;
+    }
+}
+function seedClient(store, apiUrl, profileName) {
+    let cached;
+    const client = () => {
+        if (!cached) {
+            cached = store.getSecret(profileName).then((secret) => createApiClient({
+                baseUrl: apiUrl,
+                auth: () => (secret ? { header: 'X-Api-Key', value: secret } : undefined),
+            }));
+        }
+        return cached;
+    };
+    return {
+        vaults: { create: async (request) => (await client()).vaults.create(request) },
+        knowledge: { create: async (request) => (await client()).knowledge.create(request) },
+        providerProbe: async () => {
+            await (await client()).search.search({ q: '__knowz_provider_connectivity_probe__', limit: 1 });
+        },
+    };
+}
+function onboardingDeps(store, apiUrl, superAdminPassphrase, quiet, allowCredentialOutput, validateProvider, emit) {
+    const base = apiUrl.replace(/\/$/, '');
+    return {
+        probe: async () => {
+            try {
+                const response = await fetch(`${base}/health/ready`);
+                return response.ok;
+            }
+            catch {
+                return false;
+            }
+        },
+        performLogin: (loginInput) => performLogin(loginInput, {
+            store,
+            config: loadConfig(),
+            saveConfig,
+            validateKey: (apiKey) => createApiClient({ baseUrl: apiUrl }).auth.validateKey({ apiKey }),
+            register: (request) => createApiClient({ baseUrl: apiUrl }).auth.register(request),
+        }),
+        apiClientFor: (profileName) => seedClient(store, apiUrl, profileName),
+        openBrowser: (url) => openBrowser(url),
+        log: sink(quiet, emit),
+        printAccess: allowCredentialOutput ? sink(quiet, emit) : () => { },
+        bootstrapAdmin: superAdminPassphrase
+            ? (creds) => bootstrapPortableAdmin(apiUrl, superAdminPassphrase, creds)
+            : undefined,
+        providerProbe: validateProvider
+            ? async (client) => {
+                try {
+                    await client.providerProbe?.();
+                    return { ok: true };
+                }
+                catch {
+                    return { ok: false };
+                }
+            }
+            : undefined,
+    };
+}
+/** Never-throw binding for the one-time portable bootstrap endpoint. */
+export async function bootstrapPortableAdmin(apiUrl, passphrase, creds, fetchFn = fetch) {
+    registerSecret(passphrase);
+    try {
+        const response = await fetchFn(`${apiUrl.replace(/\/$/, '')}/api/v1/bootstrap/admin`, {
+            method: 'POST',
+            redirect: 'manual',
+            headers: {
+                'Content-Type': 'application/json',
+                'X-Super-User-Key': passphrase,
+            },
+            body: JSON.stringify(creds),
+        });
+        if (response.status === 409)
+            return { status: 'locked' };
+        if (!response.ok)
+            return { status: 'error' };
+        let apiKey;
+        try {
+            const body = await response.json();
+            apiKey = body.data?.apiKey ?? body.apiKey;
+        }
+        catch {
+            return { status: 'confirmed' };
+        }
+        if (typeof apiKey === 'string' && apiKey.startsWith('ukz_')) {
+            registerSecret(apiKey);
+            return { status: 'created', apiKey };
+        }
+        return { status: 'confirmed' };
+    }
+    catch {
+        return { status: 'error' };
+    }
+}
+const INSTALLATION_ID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+function validActivation(credential, installationId) {
+    if (typeof credential !== 'string' ||
+        !validateInstallCredentialFormat(credential.trim()).ok ||
+        typeof installationId !== 'string' ||
+        !INSTALLATION_ID_RE.test(installationId.trim())) {
+        return null;
+    }
+    return {
+        credential: credential.trim(),
+        installationId: installationId.trim().toLowerCase(),
+    };
+}
+/** Read the existing activation without copying its credential into argv or a host file. */
+export async function loadStoredInstallationActivation(input) {
+    const fromEnvironment = validActivation(input.env.KNOWZ_LICENSING_INSTALL_CREDENTIAL, input.env.KNOWZ_LICENSING_INSTALLATION_ID);
+    if (fromEnvironment)
+        return fromEnvironment;
+    const command = input.engine.engine === 'podman' ? 'podman' : 'docker';
+    const volume = `${input.projectName}_knowz-portable-identity`;
+    const engineEnvironment = input.engine.composeFront?.env;
+    const inspected = await Promise.resolve(nodeProcessRunner(command, ['volume', 'inspect', volume], {
+        cwd: process.cwd(),
+        shell: false,
+        ...(engineEnvironment ? { env: engineEnvironment } : {}),
+    }));
+    if (inspected.status !== 0)
+        return null;
+    const result = await Promise.resolve(nodeProcessRunner(command, [
+        'run',
+        '--rm',
+        '-v',
+        `${volume}:/identity:ro`,
+        'alpine',
+        'sh',
+        '-c',
+        'set -eu; cat /identity/credential; printf "\\n"; cat /identity/installation.json',
+    ], {
+        cwd: process.cwd(),
+        shell: false,
+        ...(engineEnvironment ? { env: engineEnvironment } : {}),
+    }));
+    if (result.status !== 0 || !result.stdout)
+        return null;
+    const [credentialLine, ...jsonLines] = result.stdout.replace(/\r\n/g, '\n').split('\n');
+    try {
+        const identity = JSON.parse(jsonLines.join('\n'));
+        return validActivation(credentialLine, identity.installationId);
+    }
+    catch {
+        return null;
+    }
+}
+export async function preflightRegistryCredential(input) {
+    const mothershipUrl = normalizeMothershipOrigin(input.mothershipUrl);
+    const token = Buffer.from(`${input.activation.installationId}:${input.activation.credential}`, 'utf8').toString('base64');
+    registerSecret(input.activation.credential);
+    try {
+        const response = await (input.fetchFn ?? fetch)(`${mothershipUrl}/api/v1/registry/token?service=pull.knowz.io`, {
+            method: 'GET',
+            redirect: 'manual',
+            headers: {
+                accept: 'application/json',
+                authorization: `Basic ${token}`,
+            },
+            signal: AbortSignal.timeout(10_000),
+        });
+        return { kind: 'http-response', status: response.status };
+    }
+    catch {
+        return { kind: 'transport-failure' };
+    }
+}
+/** Shared real dependency binding used by terminal `up` and the HTML setup console. */
+export function createPlatformFrontDoorDeps(options) {
+    const { store, cwd, env, isTty, quiet, validateProvider, emit } = options;
+    return {
+        cwd,
+        env,
+        isTty,
+        prompt: createInquirerPromptFn(),
+        ghcrPrompt: isTty ? () => promptHidden('GHCR token (or set GHCR_PULL_TOKEN): ') : undefined,
+        requiredEnvByPreset: loadRequiredEnvByPreset(),
+        loadConfig,
+        saveConfig,
+        runner: nodeProcessRunner,
+        onboardingDepsFor: (apiUrl, onboardingOptions) => onboardingDeps(store, apiUrl, onboardingOptions?.superAdminPassphrase, quiet, options.allowCredentialOutput !== false, validateProvider, emit),
+        reuseExistingProfile: (profileName, apiUrl) => reuseExistingProfile(store, profileName, apiUrl),
+        fetchReleaseManifest: async (url) => {
+            const response = await fetch(url, {
+                headers: { accept: 'application/json' },
+                signal: AbortSignal.timeout(10_000),
+            });
+            if (!response.ok)
+                throw new PlatformReleaseCatalogHttpError(response.status);
+            return response.json();
+        },
+        loadStoredActivation: ({ projectName, engine }) => loadStoredInstallationActivation({ projectName, engine, env }),
+        activateInstallation: async ({ projectName, configDir, mothershipUrl, engine }) => {
+            const result = await runDeviceCodeFlow(mothershipUrl, {
+                fetch: globalThis.fetch,
+                runner: nodeProcessRunner,
+                openBrowser,
+                now: Date.now,
+                sleep: ms => new Promise(resolve => setTimeout(resolve, ms)),
+                emit: sink(quiet, emit),
+            }, { installationName: projectName });
+            registerSecret(result.credential);
+            await persistActivation({
+                paths: resolvePlatformPaths(projectName, configDir),
+                projectName,
+                mothershipUrl,
+                credential: result.credential,
+                installationId: result.installationId,
+                store: 'identity',
+                engine,
+                runner: nodeProcessRunner,
+            });
+            return result;
+        },
+        preflightRegistryCredential: ({ mothershipUrl, activation }) => preflightRegistryCredential({ mothershipUrl, activation }),
+        confirmReactivation: async (installationId) => {
+            const { confirm } = await import('@inquirer/prompts');
+            return confirm({
+                default: true,
+                message: `Stored installation ${installationId} is invalid. Link this device again?`,
+            });
+        },
+        log: sink(quiet, emit),
+        preflight: (preflightInput) => runPreflight(preflightInput, { runner: nodeProcessRunner }),
+        probeProvider: (selection) => probeProvider(selection),
+        activateCloudAi: async (installationName) => {
+            const result = await runDeviceCodeFlow(env.KNOWZ_LICENSING_MOTHERSHIP_URL ?? 'https://api.knowz.io', {
+                fetch: globalThis.fetch,
+                runner: nodeProcessRunner,
+                openBrowser,
+                now: Date.now,
+                sleep: ms => new Promise(resolve => setTimeout(resolve, ms)),
+                emit: sink(quiet, emit),
+            }, { scope: 'cloud-ai', installationName });
+            registerSecret(result.credential);
+            return result.credential;
+        },
+        discoverCloudAiModels: (credential) => discoverKnowzCloudModels(credential),
+        confirmPrompt: async (summary) => {
+            const { confirm } = await import('@inquirer/prompts');
+            const account = `${summary.identity.name} <${summary.identity.email}>`;
+            return confirm({
+                default: true,
+                message: `Start Knowz with provider=${summary.provider}, image=${summary.imageMode}, version=${summary.version}, ` +
+                    `ports=${summary.ports.api}/${summary.ports.web}/${summary.ports.mcp}, ` +
+                    `profile=${summary.profileName}, account=${account}?`,
+            });
+        },
+    };
+}
+//# sourceMappingURL=platform-frontdoor-runtime.js.map