@layr-labs/ecloud-cli 0.0.1-dev → 0.0.1-rfc.1

package/dist/keys/mainnet-alpha/prod/kms-signing-public-key.pem

@@ -0,0 +1,4 @@
+-----BEGIN PUBLIC KEY-----
+MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEfxbhXJjH4D0DH/iW5/rK1HzWS+f9
+EyooZTrCYjCfezuOEmRuOWNaZLvwXN8SdzrvjWA7gSvOS85hLzp4grANRQ==
+-----END PUBLIC KEY-----

package/dist/keys/sepolia/dev/kms-encryption-public-key.pem

@@ -0,0 +1,14 @@
+-----BEGIN PUBLIC KEY-----
+MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAr/vqttU6aXX35HtsXavU
+5teysunDzZB3HyaFM4qcuRnqj+70KxqLOwZsERN5SwZ/56Jm8T2ds1CcXsQCMUMw
++MPlsF6KMGfzghLtYHONwvKLnn+U9y886aAay6W8a0A7O7YCZehNYD3kQnCXjOIc
+Mj6v8AEvMw+w/lNabjRXnwSBMKVIGp/cSL0hGwt8fGoC3TsxQN9opzvU1Z4rAw9K
+a119l6dlPnqezDva378TCaXDjqKe/jSZOI1CcYpaSK2SJ+95Wbvte5j3lXbg1oT2
+0rXeJUHEJ68QxMtJplfw0Sg+Ek4CUJ2c/kbdg0u7sIIO5wcB4WHL/Lfbw2XPmcBI
+t0r0EC575D3iHF/aI01Ms2IRA0GDeHnNcr5FJLWJljTjNLEt4tFITrXwBe1Ealm3
+NCxamApl5bBSwQ72Gb5fiQFwB8Fl2/XG3wfGTFInFEvWE4c/H8dtu1wHTsyEFZcG
+B47IkD5GBSZq90Hd9xuZva55dxGpqUVrEJO88SqHGP9Oa+HLTYdEe5AR5Hitw4Mu
+dk1cCH+X5OqY9dfpdoCNbKAM0N2SJvNAnDTU2JKGYheXrnDslXR6atBmU5gDkH+W
+QVryDYl9xbwWIACMQsAQjrrtKw5xqJ4V89+06FN/wyEVF7KWAcJ4AhKiVnCvLqzb
+BbISc+gOkRsefhCDJVPEKDkCAwEAAQ==
+-----END PUBLIC KEY-----

package/dist/keys/sepolia/dev/kms-signing-public-key.pem

@@ -0,0 +1,4 @@
+-----BEGIN PUBLIC KEY-----
+MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEb2Q88/cxdic2xi4jS2V0dtYHjLwq
+4wVFBFmaY8TTXoMXNggKEdU6PuE8EovocVKMpw3SIlaM27z9uxksNVL2xw==
+-----END PUBLIC KEY-----

package/dist/keys/sepolia/prod/kms-encryption-public-key.pem

@@ -0,0 +1,14 @@
+-----BEGIN PUBLIC KEY-----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+-----END PUBLIC KEY-----

package/dist/keys/sepolia/prod/kms-signing-public-key.pem

@@ -0,0 +1,4 @@
+-----BEGIN PUBLIC KEY-----
+MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEsk6ZdmmvBqFfKHs+1cYjIemRGN7h
+1NatIEitFRyx+3q8wmTJ9LknTE1FwWBLcCNTseJDti8Rh+SaVxfGOyJuuA==
+-----END PUBLIC KEY-----

package/dist/templates/Dockerfile.layered.tmpl

@@ -0,0 +1,58 @@
+{{#if includeTLS}}
+# Get Caddy from official image
+FROM caddy:2.10.2-alpine AS caddy
+{{/if}}
+
+FROM {{baseImage}}
+
+{{#if originalUser}}
+# Switch to root to perform setup (base image has non-root USER: {{originalUser}})
+USER root
+{{/if}}
+
+# Copy core TEE components
+COPY compute-source-env.sh /usr/local/bin/
+COPY kms-client /usr/local/bin/
+COPY kms-signing-public-key.pem /usr/local/bin/
+
+{{#if includeTLS}}
+# Copy Caddy from official image
+COPY --from=caddy /usr/bin/caddy /usr/local/bin/caddy
+
+# Copy TLS components
+COPY tls-keygen /usr/local/bin/
+COPY Caddyfile /etc/caddy/
+{{/if}}
+
+{{#if originalUser}}
+# Make binaries executable (755 for executables, 644 for keys)
+RUN chmod 755 /usr/local/bin/compute-source-env.sh \
+    && chmod 755 /usr/local/bin/kms-client{{#if includeTLS}} \
+    && chmod 755 /usr/local/bin/tls-keygen \
+    && chmod 755 /usr/local/bin/caddy{{/if}} \
+    && chmod 644 /usr/local/bin/kms-signing-public-key.pem
+
+# Switch back to the original user from base image
+USER {{originalUser}}
+{{else}}
+# Make binaries executable (preserve existing permissions, just add execute)
+RUN chmod +x /usr/local/bin/compute-source-env.sh \
+    && chmod +x /usr/local/bin/kms-client{{#if includeTLS}} \
+    && chmod +x /usr/local/bin/tls-keygen{{/if}}
+{{/if}}
+
+{{#if logRedirect}}
+
+LABEL tee.launch_policy.log_redirect={{logRedirect}}
+{{/if}}
+
+LABEL eigenx_cli_version={{ecloudCLIVersion}}
+LABEL eigenx_use_ita=True
+
+{{#if includeTLS}}
+# Expose both HTTP and HTTPS ports for Caddy
+EXPOSE 80 443
+{{/if}}
+
+ENTRYPOINT ["/usr/local/bin/compute-source-env.sh"]
+CMD {{{originalCmd}}}

package/dist/templates/compute-source-env.sh.tmpl

@@ -0,0 +1,110 @@
+#!/bin/sh
+echo "compute-source-env.sh: Running setup script..."
+
+# Fetch and source environment variables from KMS
+echo "Fetching secrets from KMS..."
+if /usr/local/bin/kms-client \
+  --kms-server-url "{{kmsServerURL}}" \
+  --kms-signing-key-file /usr/local/bin/kms-signing-public-key.pem \
+  --userapi-url "{{userAPIURL}}" \
+  --output /tmp/.env; then
+    echo "compute-source-env.sh: Successfully fetched environment variables from KMS"
+    set -a && . /tmp/.env && set +a
+    rm -f /tmp/.env
+else
+    echo "compute-source-env.sh: ERROR - Failed to fetch environment variables from KMS"
+    echo "compute-source-env.sh: Exiting - cannot start user workload without KMS secrets"
+    exit 1
+fi
+
+# Setup TLS if tls-keygen is present (which means TLS was configured at build time)
+setup_tls() {
+    # If tls-keygen isn't present, TLS wasn't configured during build
+    if [ ! -x /usr/local/bin/tls-keygen ]; then
+        echo "compute-source-env.sh: TLS not configured (no tls-keygen binary)"
+        return 0
+    fi
+    
+    local domain="${DOMAIN:-}"
+    local mnemonic="${MNEMONIC:-}"
+    
+    # Since tls-keygen is present, TLS is expected - validate requirements
+    if [ -z "$domain" ] || [ "$domain" = "localhost" ]; then
+        echo "compute-source-env.sh: ERROR - TLS binary present but DOMAIN not configured or is localhost"
+        echo "compute-source-env.sh: Set DOMAIN environment variable to a valid domain"
+        exit 1
+    fi
+    
+    if [ -z "$mnemonic" ]; then
+        echo "compute-source-env.sh: ERROR - TLS binary present but MNEMONIC not available"
+        echo "compute-source-env.sh: Cannot obtain TLS certificate without mnemonic"
+        exit 1
+    fi
+    
+    if [ ! -x /usr/local/bin/caddy ]; then
+        echo "compute-source-env.sh: ERROR - TLS binary present but Caddy not found"
+        exit 1
+    fi
+    
+    echo "compute-source-env.sh: Setting up TLS for domain: $domain"
+    
+    # Obtain TLS certificate using ACME
+    # Default to http-01, but allow override via ACME_CHALLENGE env var
+    local challenge="${ACME_CHALLENGE:-http-01}"
+    
+    # Check if we should use staging (for testing)
+    local staging_flag=""
+    if [ "${ACME_STAGING:-false}" = "true" ]; then
+        staging_flag="-staging"
+        echo "compute-source-env.sh: Using Let's Encrypt STAGING environment (certificates won't be trusted)"
+    fi
+    
+    echo "compute-source-env.sh: Obtaining TLS certificate using $challenge challenge..."
+    # Pass the API URL for certificate persistence
+    if ! MNEMONIC="$mnemonic" DOMAIN="$domain" API_URL="{{userAPIURL}}" /usr/local/bin/tls-keygen \
+        -challenge "$challenge" \
+        $staging_flag; then
+        echo "compute-source-env.sh: ERROR - Failed to obtain TLS certificate"
+        echo "compute-source-env.sh: Certificate issuance failed for $domain"
+        exit 1
+    fi
+    
+    echo "compute-source-env.sh: TLS certificate obtained successfully"
+    
+    # Validate Caddyfile before starting
+    if ! /usr/local/bin/caddy validate --config /etc/caddy/Caddyfile --adapter caddyfile 2>/dev/null; then
+        echo "compute-source-env.sh: ERROR - Invalid Caddyfile"
+        echo "compute-source-env.sh: TLS was requested (DOMAIN=$domain) but setup failed"
+        exit 1
+    fi
+    
+    # Start Caddy in background
+    echo "compute-source-env.sh: Starting Caddy reverse proxy..."
+    
+    # Check if Caddy logs should be enabled
+    if [ "${ENABLE_CADDY_LOGS:-false}" = "true" ]; then
+        if ! /usr/local/bin/caddy start --config /etc/caddy/Caddyfile --adapter caddyfile 2>&1; then
+            echo "compute-source-env.sh: ERROR - Failed to start Caddy"
+            echo "compute-source-env.sh: TLS was requested (DOMAIN=$domain) but setup failed"
+            exit 1
+        fi
+    else
+        # Redirect Caddy output to /dev/null to silence logs
+        if ! /usr/local/bin/caddy start --config /etc/caddy/Caddyfile --adapter caddyfile >/dev/null 2>&1; then
+            echo "compute-source-env.sh: ERROR - Failed to start Caddy"
+            echo "compute-source-env.sh: TLS was requested (DOMAIN=$domain) but setup failed"
+            exit 1
+        fi
+    fi
+    
+    # Give Caddy a moment to fully initialize
+    sleep 2
+    echo "compute-source-env.sh: Caddy started successfully"
+    return 0
+}
+
+# Run TLS setup
+setup_tls
+
+echo "compute-source-env.sh: Environment sourced."
+exec "$@"

package/package.json

@@ -1,11 +1,10 @@
 {
   "name": "@layr-labs/ecloud-cli",
-  "version": "0.0.1-dev",
+  "version": "0.0.1-rfc.1",
   "type": "module",
   "files": [
     "dist",
     "bin",
-    "VERSION",
     "README.md"
   ],
   "bin": {
@@ -13,7 +12,7 @@
   },
   "dependencies": {
     "@inquirer/prompts": "^7.10.1",
-    "@layr-labs/ecloud-sdk": "0.0.1-dev",
+    "@layr-labs/ecloud-sdk": "0.0.1-rfc.1",
     "@napi-rs/keyring": "^1.0.5",
     "@oclif/core": "^4.8.0",
     "axios": "^1.13.2",
@@ -28,12 +27,11 @@
     "viem": "^2.38.6"
   },
   "scripts": {
-    "build": "tsup",
-    "prepublishOnly": "cp ../../README.md .",
+    "build": "tsup && npm run build:copy-templates",
+    "build:copy-templates": "node scripts/copy-templates.js",
     "lint": "eslint .",
     "format": "prettier --check .",
     "format:fix": "prettier --write .",
-    "typecheck": "tsc --noEmit",
     "ecloud": "node bin/run.js"
   },
   "oclif": {
@@ -42,36 +40,13 @@
     "dirname": "",
     "topicSeparator": " ",
     "topics": {
-      "auth": {
-        "description": "Manage authentication with private keys stored in OS keyring"
-      },
       "billing": {
         "description": "Manage billing and subscriptions"
-      },
-      "compute": {
-        "description": "Manage compute projects and resources"
-      },
-      "compute:app": {
-        "description": "Manage projects"
-      },
-      "compute:app:profile": {
-        "description": "Manage app profiles"
-      },
-      "compute:app:configure": {
-        "description": "Configure app settings"
-      },
-      "compute:environment": {
-        "description": "Manage deployment environment [alias: env]"
-      },
-      "compute:env": {
-        "hidden": true,
-        "description": "Manage deployment environment [alias: env]"
       }
     }
   },
   "devDependencies": {
     "@types/form-data": "^2.5.2",
-    "@types/js-yaml": "^4.0.9",
     "@types/node": "^18",
     "ts-node": "^10.9.2"
   }

package/VERSION

@@ -1,2 +0,0 @@
-version=0.0.1-dev
-commit=2a2ded958d857bea5ae70faae0100b97a40227e7

package/dist/commands/compute/app/configure/tls.js

@@ -1,150 +0,0 @@
-#!/usr/bin/env node
-
-// src/commands/compute/app/configure/tls.ts
-import { Command } from "@oclif/core";
-import * as fs from "fs";
-import * as path from "path";
-import chalk from "chalk";
-
-// src/templates/tls/Caddyfile.tmpl
-var Caddyfile_default = `# Caddy configuration for automatic HTTPS
-# The DOMAIN environment variable will be injected at runtime
-
-{$DOMAIN:localhost} {
-    # TLS configuration - always use provided certificates generated by tls-keygen
-    tls /run/tls/fullchain.pem /run/tls/privkey.pem
-
-    # Reverse proxy to your Node.js application
-    # Modify the port to match your application (default: 3000)
-    reverse_proxy localhost:{$APP_PORT:3000} {
-        # Health check configuration
-        health_uri /health
-        health_interval 30s
-        health_timeout 5s
-        health_status 200
-    }
-
-    # Custom headers
-    header {
-        # Security headers
-        X-Content-Type-Options "nosniff"
-        X-Frame-Options "DENY"
-        X-XSS-Protection "1; mode=block"
-        Referrer-Policy "strict-origin-when-cross-origin"
-
-        # Remove server header
-        -Server
-    }
-
-    # Logging
-    log {
-        output stdout
-        format console
-        level INFO
-    }
-
-    # Request size limits
-    request_body {
-        max_size 10MB
-    }
-}
-
-# HTTP endpoint (optional, for health checks or redirects)
-:80 {
-    # Redirect to HTTPS only when host isn't localhost
-    @for_domain expression {host} != "localhost"
-    redir @for_domain https://{host}{uri} permanent
-
-    # Health check endpoint (always available via HTTP)
-    handle /health {
-        respond "OK" 200
-    }
-}
-`;
-
-// src/templates/tls/templates.ts
-function getCaddyfileTemplate() {
-  return Caddyfile_default;
-}
-var ENV_EXAMPLE_TLS = `# TLS Configuration
-# Set these variables to enable TLS for your application
-
-# Your domain name (required for TLS)
-DOMAIN=yourdomain.com
-
-# Port your application listens on
-APP_PORT=3000
-
-# Enable Caddy debug logs
-ENABLE_CADDY_LOGS=false
-
-# Use Let's Encrypt staging environment (for testing)
-# Set to true to avoid rate limits during development
-ACME_STAGING=false
-
-# Force certificate reissue even if a valid one exists
-# Useful when you need to update SANs or force a renewal
-ACME_FORCE_ISSUE=false
-`;
-
-// src/commands/compute/app/configure/tls.ts
-var ConfigureTLS = class extends Command {
-  static description = "Configure TLS for your application";
-  static summary = `Adds TLS configuration to your EigenCloud application.
-
-This command creates:
-- Caddyfile: Reverse proxy configuration for automatic HTTPS
-- .env.example.tls: Example environment variables for TLS
-
-TLS certificates are automatically obtained via Let's Encrypt using the tls-keygen tool.`;
-  async run() {
-    const cwd = process.cwd();
-    const caddyfilePath = path.join(cwd, "Caddyfile");
-    if (fs.existsSync(caddyfilePath)) {
-      this.warn("Caddyfile already exists. Skipping...");
-    } else {
-      const caddyfileContent = getCaddyfileTemplate();
-      fs.writeFileSync(caddyfilePath, caddyfileContent, { mode: 420 });
-      this.log("Created Caddyfile");
-    }
-    const envTLSPath = path.join(cwd, ".env.example.tls");
-    if (fs.existsSync(envTLSPath)) {
-      this.warn(".env.example.tls already exists. Skipping...");
-    } else {
-      fs.writeFileSync(envTLSPath, ENV_EXAMPLE_TLS, { mode: 420 });
-      this.log("Created .env.example.tls");
-    }
-    this.log("");
-    this.log(chalk.green("TLS configuration added successfully"));
-    this.log("");
-    this.log("Created:");
-    this.log("  - Caddyfile");
-    this.log("  - .env.example.tls");
-    this.log("");
-    this.log("To enable TLS:");
-    this.log("");
-    this.log("1. Add TLS variables to .env:");
-    this.log("   cat .env.example.tls >> .env");
-    this.log("");
-    this.log("2. Configure required variables:");
-    this.log("   DOMAIN=yourdomain.com");
-    this.log("");
-    this.log("   For first deployment (recommended):");
-    this.log("   ENABLE_CADDY_LOGS=true");
-    this.log("   ACME_STAGING=true");
-    this.log("");
-    this.log("3. Set up DNS A record pointing to instance IP");
-    this.log("   Run 'ecloud compute app list' to get IP address");
-    this.log("");
-    this.log("4. Upgrade:");
-    this.log("   ecloud compute app upgrade");
-    this.log("");
-    this.log("Note: Let's Encrypt rate limit is 5 certificates/week per domain");
-    this.log("      To switch staging -> production: set ACME_STAGING=false");
-    this.log("      If cert exists, use ACME_FORCE_ISSUE=true once to replace");
-  }
-};
-export {
-  ConfigureTLS as default
-};
-//# sourceMappingURL=tls.js.map

package/dist/commands/compute/app/configure/tls.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../../../../src/commands/compute/app/configure/tls.ts","../../../../../src/templates/tls/Caddyfile.tmpl","../../../../../src/templates/tls/templates.ts"],"sourcesContent":["import { Command } from \"@oclif/core\";\nimport * as fs from \"fs\";\nimport * as path from \"path\";\nimport chalk from \"chalk\";\nimport { getCaddyfileTemplate, ENV_EXAMPLE_TLS } from \"../../../../templates/tls/templates.js\";\n\nexport default class ConfigureTLS extends Command {\n  static description = \"Configure TLS for your application\";\n\n  static summary = `Adds TLS configuration to your EigenCloud application.\n\nThis command creates:\n- Caddyfile: Reverse proxy configuration for automatic HTTPS\n- .env.example.tls: Example environment variables for TLS\n\nTLS certificates are automatically obtained via Let's Encrypt using the tls-keygen tool.`;\n\n  async run() {\n    const cwd = process.cwd();\n\n    // Write Caddyfile\n    const caddyfilePath = path.join(cwd, \"Caddyfile\");\n    if (fs.existsSync(caddyfilePath)) {\n      this.warn(\"Caddyfile already exists. Skipping...\");\n    } else {\n      const caddyfileContent = getCaddyfileTemplate();\n      fs.writeFileSync(caddyfilePath, caddyfileContent, { mode: 0o644 });\n      this.log(\"Created Caddyfile\");\n    }\n\n    // Write .env.example.tls\n    const envTLSPath = path.join(cwd, \".env.example.tls\");\n    if (fs.existsSync(envTLSPath)) {\n      this.warn(\".env.example.tls already exists. Skipping...\");\n    } else {\n      fs.writeFileSync(envTLSPath, ENV_EXAMPLE_TLS, { mode: 0o644 });\n      this.log(\"Created .env.example.tls\");\n    }\n\n    // Print success message and instructions\n    this.log(\"\");\n    this.log(chalk.green(\"TLS configuration added successfully\"));\n    this.log(\"\");\n    this.log(\"Created:\");\n    this.log(\"  - Caddyfile\");\n    this.log(\"  - .env.example.tls\");\n    this.log(\"\");\n\n    this.log(\"To enable TLS:\");\n    this.log(\"\");\n    this.log(\"1. Add TLS variables to .env:\");\n    this.log(\"   cat .env.example.tls >> .env\");\n    this.log(\"\");\n\n    this.log(\"2. Configure required variables:\");\n    this.log(\"   DOMAIN=yourdomain.com\");\n    this.log(\"\");\n    this.log(\"   For first deployment (recommended):\");\n    this.log(\"   ENABLE_CADDY_LOGS=true\");\n    this.log(\"   ACME_STAGING=true\");\n    this.log(\"\");\n\n    this.log(\"3. Set up DNS A record pointing to instance IP\");\n    this.log(\"   Run 'ecloud compute app list' to get IP address\");\n    this.log(\"\");\n\n    this.log(\"4. Upgrade:\");\n    this.log(\"   ecloud compute app upgrade\");\n    this.log(\"\");\n\n    this.log(\"Note: Let's Encrypt rate limit is 5 certificates/week per domain\");\n    this.log(\"      To switch staging -> production: set ACME_STAGING=false\");\n    this.log(\"      If cert exists, use ACME_FORCE_ISSUE=true once to replace\");\n  }\n}\n","# Caddy configuration for automatic HTTPS\n# The DOMAIN environment variable will be injected at runtime\n\n{$DOMAIN:localhost} {\n    # TLS configuration - always use provided certificates generated by tls-keygen\n    tls /run/tls/fullchain.pem /run/tls/privkey.pem\n\n    # Reverse proxy to your Node.js application\n    # Modify the port to match your application (default: 3000)\n    reverse_proxy localhost:{$APP_PORT:3000} {\n        # Health check configuration\n        health_uri /health\n        health_interval 30s\n        health_timeout 5s\n        health_status 200\n    }\n\n    # Custom headers\n    header {\n        # Security headers\n        X-Content-Type-Options \"nosniff\"\n        X-Frame-Options \"DENY\"\n        X-XSS-Protection \"1; mode=block\"\n        Referrer-Policy \"strict-origin-when-cross-origin\"\n\n        # Remove server header\n        -Server\n    }\n\n    # Logging\n    log {\n        output stdout\n        format console\n        level INFO\n    }\n\n    # Request size limits\n    request_body {\n        max_size 10MB\n    }\n}\n\n# HTTP endpoint (optional, for health checks or redirects)\n:80 {\n    # Redirect to HTTPS only when host isn't localhost\n    @for_domain expression {host} != \"localhost\"\n    redir @for_domain https://{host}{uri} permanent\n\n    # Health check endpoint (always available via HTTP)\n    handle /health {\n        respond \"OK\" 200\n    }\n}\n","/**\n * TLS configuration templates\n */\n\nimport caddyfileTemplate from \"./Caddyfile.tmpl\";\n\n/**\n * Get the Caddyfile template\n */\nexport function getCaddyfileTemplate(): string {\n  return caddyfileTemplate;\n}\n\n/**\n * Embedded .env.example.tls content\n * (embedded directly since .env files are gitignored)\n */\nexport const ENV_EXAMPLE_TLS = `# TLS Configuration\n# Set these variables to enable TLS for your application\n\n# Your domain name (required for TLS)\nDOMAIN=yourdomain.com\n\n# Port your application listens on\nAPP_PORT=3000\n\n# Enable Caddy debug logs\nENABLE_CADDY_LOGS=false\n\n# Use Let's Encrypt staging environment (for testing)\n# Set to true to avoid rate limits during development\nACME_STAGING=false\n\n# Force certificate reissue even if a valid one exists\n# Useful when you need to update SANs or force a renewal\nACME_FORCE_ISSUE=false\n`;\n"],"mappings":";;;AAAA,SAAS,eAAe;AACxB,YAAY,QAAQ;AACpB,YAAY,UAAU;AACtB,OAAO,WAAW;;;ACHlB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACSO,SAAS,uBAA+B;AAC7C,SAAO;AACT;AAMO,IAAM,kBAAkB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;AFX/B,IAAqB,eAArB,cAA0C,QAAQ;AAAA,EAChD,OAAO,cAAc;AAAA,EAErB,OAAO,UAAU;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQjB,MAAM,MAAM;AACV,UAAM,MAAM,QAAQ,IAAI;AAGxB,UAAM,gBAAqB,UAAK,KAAK,WAAW;AAChD,QAAO,cAAW,aAAa,GAAG;AAChC,WAAK,KAAK,uCAAuC;AAAA,IACnD,OAAO;AACL,YAAM,mBAAmB,qBAAqB;AAC9C,MAAG,iBAAc,eAAe,kBAAkB,EAAE,MAAM,IAAM,CAAC;AACjE,WAAK,IAAI,mBAAmB;AAAA,IAC9B;AAGA,UAAM,aAAkB,UAAK,KAAK,kBAAkB;AACpD,QAAO,cAAW,UAAU,GAAG;AAC7B,WAAK,KAAK,8CAA8C;AAAA,IAC1D,OAAO;AACL,MAAG,iBAAc,YAAY,iBAAiB,EAAE,MAAM,IAAM,CAAC;AAC7D,WAAK,IAAI,0BAA0B;AAAA,IACrC;AAGA,SAAK,IAAI,EAAE;AACX,SAAK,IAAI,MAAM,MAAM,sCAAsC,CAAC;AAC5D,SAAK,IAAI,EAAE;AACX,SAAK,IAAI,UAAU;AACnB,SAAK,IAAI,eAAe;AACxB,SAAK,IAAI,sBAAsB;AAC/B,SAAK,IAAI,EAAE;AAEX,SAAK,IAAI,gBAAgB;AACzB,SAAK,IAAI,EAAE;AACX,SAAK,IAAI,+BAA+B;AACxC,SAAK,IAAI,iCAAiC;AAC1C,SAAK,IAAI,EAAE;AAEX,SAAK,IAAI,kCAAkC;AAC3C,SAAK,IAAI,0BAA0B;AACnC,SAAK,IAAI,EAAE;AACX,SAAK,IAAI,wCAAwC;AACjD,SAAK,IAAI,2BAA2B;AACpC,SAAK,IAAI,sBAAsB;AAC/B,SAAK,IAAI,EAAE;AAEX,SAAK,IAAI,gDAAgD;AACzD,SAAK,IAAI,oDAAoD;AAC7D,SAAK,IAAI,EAAE;AAEX,SAAK,IAAI,aAAa;AACtB,SAAK,IAAI,+BAA+B;AACxC,SAAK,IAAI,EAAE;AAEX,SAAK,IAAI,kEAAkE;AAC3E,SAAK,IAAI,+DAA+D;AACxE,SAAK,IAAI,iEAAiE;AAAA,EAC5E;AACF;","names":[]}

package/dist/commands/compute/app/create.js

@@ -1,134 +0,0 @@
-#!/usr/bin/env node
-
-// src/commands/compute/app/create.ts
-import { Command, Flags } from "@oclif/core";
-import { createApp } from "@layr-labs/ecloud-sdk";
-
-// src/utils/prompts.ts
-import { input, select, password, confirm as inquirerConfirm } from "@inquirer/prompts";
-import fs3 from "fs";
-import path3 from "path";
-import os3 from "os";
-import { isAddress as isAddress2 } from "viem";
-import { privateKeyToAccount as privateKeyToAccount2 } from "viem/accounts";
-import {
-  getEnvironmentConfig,
-  getAvailableEnvironments,
-  isEnvironmentAvailable,
-  getAllAppsByDeveloper as getAllAppsByDeveloper2,
-  getCategoryDescriptions,
-  fetchTemplateCatalog,
-  PRIMARY_LANGUAGES,
-  validateAppName,
-  validateImageReference,
-  validateFilePath,
-  validatePrivateKeyFormat,
-  extractAppNameFromImage,
-  UserApiClient as UserApiClient2
-} from "@layr-labs/ecloud-sdk";
-
-// src/utils/appResolver.ts
-import { isAddress } from "viem";
-import { privateKeyToAccount } from "viem/accounts";
-import {
-  UserApiClient,
-  getAllAppsByDeveloper
-} from "@layr-labs/ecloud-sdk";
-
-// src/utils/globalConfig.ts
-import * as fs from "fs";
-import * as path from "path";
-import * as os from "os";
-import { load as loadYaml, dump as dumpYaml } from "js-yaml";
-import { getBuildType } from "@layr-labs/ecloud-sdk";
-var PROFILE_CACHE_TTL_MS = 24 * 60 * 60 * 1e3;
-
-// src/utils/appNames.ts
-import * as fs2 from "fs";
-import * as path2 from "path";
-import * as os2 from "os";
-import { load as loadYaml2, dump as dumpYaml2 } from "js-yaml";
-var CONFIG_DIR = path2.join(os2.homedir(), ".eigenx");
-var APPS_DIR = path2.join(CONFIG_DIR, "apps");
-
-// src/utils/prompts.ts
-async function promptProjectName() {
-  return input({ message: "Enter project name:" });
-}
-async function promptLanguage() {
-  return select({
-    message: "Select language:",
-    choices: PRIMARY_LANGUAGES
-  });
-}
-async function selectTemplateInteractive(language) {
-  const catalog = await fetchTemplateCatalog();
-  const categoryDescriptions = getCategoryDescriptions(catalog, language);
-  if (Object.keys(categoryDescriptions).length === 0) {
-    throw new Error(`No templates found for language ${language}`);
-  }
-  const categories = Object.keys(categoryDescriptions).sort();
-  const options = categories.map((category) => {
-    const description = categoryDescriptions[category];
-    if (description) {
-      return { name: `${category}: ${description}`, value: category };
-    }
-    return { name: category, value: category };
-  });
-  const selected = await select({
-    message: "Select template:",
-    choices: options
-  });
-  return selected;
-}
-var MAX_IMAGE_SIZE = 4 * 1024 * 1024;
-
-// src/commands/compute/app/create.ts
-var AppCreate = class _AppCreate extends Command {
-  static description = "Create a new app from a template";
-  static flags = {
-    name: Flags.string({
-      description: "Project name"
-    }),
-    language: Flags.string({
-      description: "Programming language (typescript, golang, rust, python)",
-      options: ["typescript", "golang", "rust", "python"]
-    }),
-    "template-repo": Flags.string({
-      description: "Template name or custom template URL"
-    }),
-    "template-version": Flags.string({
-      description: "Template version/ref"
-    }),
-    verbose: Flags.boolean({
-      description: "Verbose output",
-      default: false
-    })
-  };
-  async run() {
-    const { flags } = await this.parse(_AppCreate);
-    const logger = {
-      info: (msg, ...args) => console.log(msg, ...args),
-      warn: (msg, ...args) => console.warn(msg, ...args),
-      error: (msg, ...args) => console.error(msg, ...args),
-      debug: (msg, ...args) => flags.verbose && console.debug(msg, ...args)
-    };
-    const name = flags.name || await promptProjectName();
-    const language = flags.language || await promptLanguage();
-    const template = flags["template-repo"] || await selectTemplateInteractive(language);
-    return createApp(
-      {
-        name,
-        language,
-        template: template || void 0,
-        templateVersion: flags["template-version"],
-        verbose: flags.verbose
-      },
-      logger
-    );
-  }
-};
-export {
-  AppCreate as default
-};
-//# sourceMappingURL=create.js.map