@loxtep/sdk 0.2.1 → 0.3.0

package/dist/authoring/types.d.ts

@@ -0,0 +1,64 @@
+/**
+ * Types for the code-first data workflow authoring surface.
+ *
+ * A `DataWorkflowModule` is the developer-facing unit of authoring: it declares
+ * a trigger, an optional filter, and a handler that compiles down to the existing
+ * flow/workflow graph on deploy.
+ */
+/**
+ * Trigger specification describing what event starts a workflow.
+ */
+export interface TriggerSpec {
+    kind: 'queue' | 'connector' | 'schedule' | 'webhook';
+    /** Typed constant reference from the generated artifact (queue or connector). */
+    ref?: {
+        id: string;
+        name?: string;
+    };
+    /** Cron expression, for kind:'schedule'. */
+    schedule?: string;
+    /** URL path, for kind:'webhook'. */
+    path?: string;
+}
+/**
+ * A typed queue constant from the Generated_SDK_Artifact.
+ */
+export interface QueueRef {
+    id: string;
+    name: string;
+}
+/**
+ * A typed connector constant from the Generated_SDK_Artifact.
+ */
+export interface ConnectorRef {
+    id: string;
+    type: string;
+}
+/**
+ * Context object passed to the handler function during execution.
+ */
+export interface HandlerContext {
+    /** The workflow name. */
+    workflowName: string;
+    /** The attached instance ID. */
+    instanceId: string;
+    /** The project ID. */
+    projectId: string;
+}
+/**
+ * A code-first data workflow module declaration.
+ * Created via `defineDataWorkflow()`.
+ */
+export interface DataWorkflowModule {
+    /** Workflow name, 1–64 characters (R3.1, R3.8). */
+    name: string;
+    /** 1–10 triggers that start this workflow (R3.1, R3.8). */
+    triggers: TriggerSpec[];
+    /** Optional event filter predicate. */
+    filter?: (event: unknown) => boolean;
+    /** The workflow handler function. */
+    handler: (ctx: HandlerContext, event: unknown) => Promise<void> | void;
+    /** Operation names requiring human approval, ≤100 entries, each 1–256 chars (R6.1). */
+    requireApproval?: string[];
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/authoring/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/authoring/types.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,OAAO,GAAG,WAAW,GAAG,UAAU,GAAG,SAAS,CAAC;IACrD,iFAAiF;IACjF,GAAG,CAAC,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACpC,4CAA4C;IAC5C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,oCAAoC;IACpC,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED;;GAEG;AACH,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,yBAAyB;IACzB,YAAY,EAAE,MAAM,CAAC;IACrB,gCAAgC;IAChC,UAAU,EAAE,MAAM,CAAC;IACnB,sBAAsB;IACtB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;GAGG;AACH,MAAM,WAAW,kBAAkB;IACjC,mDAAmD;IACnD,IAAI,EAAE,MAAM,CAAC;IACb,2DAA2D;IAC3D,QAAQ,EAAE,WAAW,EAAE,CAAC;IACxB,uCAAuC;IACvC,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,OAAO,CAAC;IACrC,qCAAqC;IACrC,OAAO,EAAE,CAAC,GAAG,EAAE,cAAc,EAAE,KAAK,EAAE,OAAO,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IACvE,uFAAuF;IACvF,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;CAC5B"}

package/dist/authoring/types.js

@@ -0,0 +1,9 @@
+/**
+ * Types for the code-first data workflow authoring surface.
+ *
+ * A `DataWorkflowModule` is the developer-facing unit of authoring: it declares
+ * a trigger, an optional filter, and a handler that compiles down to the existing
+ * flow/workflow graph on deploy.
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/authoring/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/authoring/types.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG"}

package/dist/cli/commands/activity-cmd.d.ts

@@ -0,0 +1,28 @@
+/**
+ * CLI: loxtep activity list [--source <s>] [--actor <a>] [--resource-type <t>] [--from <date>] [--to <date>]
+ *
+ * Lists activity and audit entries from the unified Activity/Audit read-model API.
+ * Ordered by UTC timestamp DESC with stable entry_id tie-break.
+ * Applies source/actor/resource-type/time-range filters combined with AND (R7.4).
+ * Synchronous read — R18.6 carve-out.
+ *
+ * Requirements: 7.4, 18.5
+ */
+import type { LoxtepClient } from '../../client/loxtep-client.js';
+import type { CliResult } from '../project-context.js';
+export interface ActivityListOptions {
+    source?: string;
+    actor?: string;
+    resource_type?: string;
+    from?: string;
+    to?: string;
+    limit?: number;
+}
+/**
+ * Execute `loxtep activity list`.
+ *
+ * Lists activity and audit entries from the platform, applying optional filters.
+ * Does NOT require an attached project — operates at the organization level.
+ */
+export declare function runActivityListCommand(client: LoxtepClient, options?: ActivityListOptions): Promise<CliResult>;
+//# sourceMappingURL=activity-cmd.d.ts.map

package/dist/cli/commands/activity-cmd.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"activity-cmd.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/activity-cmd.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAElE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAIvD,MAAM,WAAW,mBAAmB;IAClC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;;GAKG;AACH,wBAAsB,sBAAsB,CAC1C,MAAM,EAAE,YAAY,EACpB,OAAO,CAAC,EAAE,mBAAmB,GAC5B,OAAO,CAAC,SAAS,CAAC,CA0DpB"}

package/dist/cli/commands/activity-cmd.js

@@ -0,0 +1,78 @@
+/**
+ * CLI: loxtep activity list [--source <s>] [--actor <a>] [--resource-type <t>] [--from <date>] [--to <date>]
+ *
+ * Lists activity and audit entries from the unified Activity/Audit read-model API.
+ * Ordered by UTC timestamp DESC with stable entry_id tie-break.
+ * Applies source/actor/resource-type/time-range filters combined with AND (R7.4).
+ * Synchronous read — R18.6 carve-out.
+ *
+ * Requirements: 7.4, 18.5
+ */
+const VALID_SOURCES = ['cli', 'sdk', 'mcp', 'ui'];
+/**
+ * Execute `loxtep activity list`.
+ *
+ * Lists activity and audit entries from the platform, applying optional filters.
+ * Does NOT require an attached project — operates at the organization level.
+ */
+export async function runActivityListCommand(client, options) {
+    try {
+        // Validate source filter
+        if (options?.source && !VALID_SOURCES.includes(options.source)) {
+            return {
+                exitCode: 1,
+                stdout: [],
+                stderr: [
+                    `Invalid source filter: '${options.source}'. Must be one of: ${VALID_SOURCES.join(', ')}.`,
+                ],
+            };
+        }
+        const filters = {};
+        if (options?.source)
+            filters.source = options.source;
+        if (options?.actor)
+            filters.actor = options.actor;
+        if (options?.resource_type)
+            filters.resource_type = options.resource_type;
+        if (options?.from)
+            filters.start = options.from;
+        if (options?.to)
+            filters.end = options.to;
+        if (options?.limit != null)
+            filters.limit = options.limit;
+        const result = await client.activity.list(filters);
+        const { entries } = result;
+        if (entries.length === 0) {
+            return { exitCode: 0, stdout: ['No activity entries found.'], stderr: [] };
+        }
+        const lines = [];
+        for (const entry of entries) {
+            const kindTag = entry.kind === 'action_trace' ? 'TRACE' : 'AUDIT';
+            const outcomeTag = entry.outcome ? ` [${entry.outcome}]` : '';
+            const sourceTag = entry.source ? ` (${entry.source})` : '';
+            lines.push(`${entry.timestamp}  ${kindTag}${outcomeTag}${sourceTag}  ${entry.operation_name}`);
+            if (entry.workflow_name) {
+                lines.push(`  Workflow: ${entry.workflow_name}`);
+            }
+            if (entry.actor) {
+                lines.push(`  Actor: ${entry.actor}`);
+            }
+            if (entry.target_resource) {
+                lines.push(`  Target: ${entry.target_resource}`);
+            }
+            if (entry.resource_type && entry.resource_id) {
+                lines.push(`  Resource: ${entry.resource_type}/${entry.resource_id}`);
+            }
+            if (entry.skill_name) {
+                lines.push(`  Skill: ${entry.skill_name}`);
+            }
+            lines.push('');
+        }
+        return { exitCode: 0, stdout: lines, stderr: [] };
+    }
+    catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        return { exitCode: 1, stdout: [], stderr: [`Failed to list activity: ${message}`] };
+    }
+}
+//# sourceMappingURL=activity-cmd.js.map

package/dist/cli/commands/activity-cmd.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"activity-cmd.js","sourceRoot":"","sources":["../../../src/cli/commands/activity-cmd.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAMH,MAAM,aAAa,GAAqB,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;AAWpE;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,MAAoB,EACpB,OAA6B;IAE7B,IAAI,CAAC;QACH,yBAAyB;QACzB,IAAI,OAAO,EAAE,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAwB,CAAC,EAAE,CAAC;YACjF,OAAO;gBACL,QAAQ,EAAE,CAAC;gBACX,MAAM,EAAE,EAAE;gBACV,MAAM,EAAE;oBACN,2BAA2B,OAAO,CAAC,MAAM,sBAAsB,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;iBAC3F;aACF,CAAC;QACJ,CAAC;QAED,MAAM,OAAO,GAAwB,EAAE,CAAC;QACxC,IAAI,OAAO,EAAE,MAAM;YAAE,OAAO,CAAC,MAAM,GAAG,OAAO,CAAC,MAAwB,CAAC;QACvE,IAAI,OAAO,EAAE,KAAK;YAAE,OAAO,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QAClD,IAAI,OAAO,EAAE,aAAa;YAAE,OAAO,CAAC,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC;QAC1E,IAAI,OAAO,EAAE,IAAI;YAAE,OAAO,CAAC,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC;QAChD,IAAI,OAAO,EAAE,EAAE;YAAE,OAAO,CAAC,GAAG,GAAG,OAAO,CAAC,EAAE,CAAC;QAC1C,IAAI,OAAO,EAAE,KAAK,IAAI,IAAI;YAAE,OAAO,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QAE1D,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACnD,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC;QAE3B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,4BAA4B,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;QAC7E,CAAC;QAED,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,KAAK,cAAc,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC;YAClE,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9D,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3D,KAAK,CAAC,IAAI,CACR,GAAG,KAAK,CAAC,SAAS,KAAK,OAAO,GAAG,UAAU,GAAG,SAAS,KAAK,KAAK,CAAC,cAAc,EAAE,CACnF,CAAC;YACF,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC;gBACxB,KAAK,CAAC,IAAI,CAAC,eAAe,KAAK,CAAC,aAAa,EAAE,CAAC,CAAC;YACnD,CAAC;YACD,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;gBAChB,KAAK,CAAC,IAAI,CAAC,YAAY,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;YACxC,CAAC;YACD,IAAI,KAAK,CAAC,eAAe,EAAE,CAAC;gBAC1B,KAAK,CAAC,IAAI,CAAC,aAAa,KAAK,CAAC,eAAe,EAAE,CAAC,CAAC;YACnD,CAAC;YACD,IAAI,KAAK,CAAC,aAAa,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;gBAC7C,KAAK,CAAC,IAAI,CAAC,eAAe,KAAK,CAAC,aAAa,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;YACxE,CAAC;YACD,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;gBACrB,KAAK,CAAC,IAAI,CAAC,YAAY,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC;YAC7C,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACjB,CAAC;QACD,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IACpD,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,4BAA4B,OAAO,EAAE,CAAC,EAAE,CAAC;IACtF,CAAC;AACH,CAAC"}

package/dist/cli/commands/attach-cmd.d.ts

@@ -0,0 +1,38 @@
+/**
+ * `loxtep attach [--instance <id>]`
+ *
+ * Links the project to an existing Instance using the same connection mechanism
+ * the Platform_UI uses (client.projects + client.instances / update_project).
+ *
+ * On success: writes resolved `instance_id` + `api_url` atomically into
+ * `.loxtep/project.json`, including a `repository` block when the project is
+ * GitHub-bound (R17.2) and omitting it when unbound (R17.3).
+ *
+ * On failure: exits non-zero, prints the failure reason, and leaves
+ * `.loxtep/project.json` byte-unchanged (R1.9).
+ */
+import type { LoxtepClient } from '../../client/loxtep-client.js';
+import type { Project } from '../../client/projects-types.js';
+import { type CliResult, type ProjectRepository } from '../project-context.js';
+export interface AttachOptions {
+    /** Explicit instance ID from `--instance <id>`. When omitted, the org's sole instance is used. */
+    instanceId?: string;
+    /** Working directory override (defaults to `process.cwd()`). */
+    cwd?: string;
+}
+/**
+ * Project the GitHub binding fields from a project record into a
+ * {@link ProjectRepository} block, or `undefined` when the project is unbound.
+ *
+ * A project is considered bound when it has both `github_repo_url` and
+ * `github_repo_name` present and non-empty.
+ */
+export declare function projectToRepository(project: Project): ProjectRepository | undefined;
+/**
+ * Core attach logic, separated from CLI wiring for testability.
+ *
+ * Returns a {@link CliResult} so the thin CLI `main()` can map `exitCode` to
+ * `process.exitCode` without spawning a process.
+ */
+export declare function runAttach(client: LoxtepClient, options?: AttachOptions): Promise<CliResult>;
+//# sourceMappingURL=attach-cmd.d.ts.map

package/dist/cli/commands/attach-cmd.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"attach-cmd.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/attach-cmd.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAElE,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,gCAAgC,CAAC;AAC9D,OAAO,EAIL,KAAK,SAAS,EAEd,KAAK,iBAAiB,EACvB,MAAM,uBAAuB,CAAC;AAE/B,MAAM,WAAW,aAAa;IAC5B,kGAAkG;IAClG,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,gEAAgE;IAChE,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,OAAO,GAAG,iBAAiB,GAAG,SAAS,CAoBnF;AAED;;;;;GAKG;AACH,wBAAsB,SAAS,CAC7B,MAAM,EAAE,YAAY,EACpB,OAAO,GAAE,aAAkB,GAC1B,OAAO,CAAC,SAAS,CAAC,CAwEpB"}

package/dist/cli/commands/attach-cmd.js

@@ -0,0 +1,141 @@
+/**
+ * `loxtep attach [--instance <id>]`
+ *
+ * Links the project to an existing Instance using the same connection mechanism
+ * the Platform_UI uses (client.projects + client.instances / update_project).
+ *
+ * On success: writes resolved `instance_id` + `api_url` atomically into
+ * `.loxtep/project.json`, including a `repository` block when the project is
+ * GitHub-bound (R17.2) and omitting it when unbound (R17.3).
+ *
+ * On failure: exits non-zero, prints the failure reason, and leaves
+ * `.loxtep/project.json` byte-unchanged (R1.9).
+ */
+import { requireProject, writeProjectConfig, preconditionToCliResult, } from '../project-context.js';
+/**
+ * Project the GitHub binding fields from a project record into a
+ * {@link ProjectRepository} block, or `undefined` when the project is unbound.
+ *
+ * A project is considered bound when it has both `github_repo_url` and
+ * `github_repo_name` present and non-empty.
+ */
+export function projectToRepository(project) {
+    const url = project.github_repo_url;
+    const name = project.github_repo_name;
+    if (!url || !name) {
+        return undefined;
+    }
+    const repo = {
+        url,
+        name,
+        branch: project.github_branch || 'main',
+    };
+    // Only include subpath when it's a non-empty string.
+    if (project.github_repo_path && project.github_repo_path.length > 0) {
+        repo.subpath = project.github_repo_path;
+    }
+    return repo;
+}
+/**
+ * Core attach logic, separated from CLI wiring for testability.
+ *
+ * Returns a {@link CliResult} so the thin CLI `main()` can map `exitCode` to
+ * `process.exitCode` without spawning a process.
+ */
+export async function runAttach(client, options = {}) {
+    const cwd = options.cwd ?? process.cwd();
+    // 1. Resolve the project config (precondition: .loxtep/project.json must exist).
+    const projectResult = requireProject(cwd);
+    if (!projectResult.ok) {
+        return preconditionToCliResult(projectResult.failure);
+    }
+    const { project, projectFilePath } = projectResult;
+    // 2. Resolve the target instance.
+    let instance;
+    try {
+        instance = await resolveInstance(client, options.instanceId);
+    }
+    catch (err) {
+        const reason = err instanceof Error ? err.message : String(err);
+        return {
+            exitCode: 1,
+            stdout: [],
+            stderr: [`Attach failed: ${reason}`],
+        };
+    }
+    // 3. Fetch the project record to read github_* binding fields.
+    let projectRecord;
+    try {
+        projectRecord = await client.projects.get(project.project_id);
+    }
+    catch (err) {
+        const reason = err instanceof Error ? err.message : String(err);
+        return {
+            exitCode: 1,
+            stdout: [],
+            stderr: [`Attach failed: could not fetch project record: ${reason}`],
+        };
+    }
+    // 4. Build the new config with instance_id + api_url and optional repository block.
+    const repository = projectToRepository(projectRecord);
+    const newConfig = {
+        ...project,
+        instance_id: instance.instance_id,
+        api_url: instance.api_url,
+    };
+    // Include the repository block only when bound (R17.2); omit entirely when unbound (R17.3).
+    if (repository) {
+        newConfig.repository = repository;
+    }
+    else {
+        delete newConfig.repository;
+    }
+    // 5. Atomic write via writeProjectConfig (build → validate → write-once).
+    try {
+        await writeProjectConfig(projectFilePath, newConfig);
+    }
+    catch (err) {
+        const reason = err instanceof Error ? err.message : String(err);
+        return {
+            exitCode: 1,
+            stdout: [],
+            stderr: [`Attach failed: could not write project config: ${reason}`],
+        };
+    }
+    // 6. Success output.
+    const lines = [
+        `Attached to instance "${instance.name}" (${instance.instance_id}).`,
+        `  api_url: ${instance.api_url}`,
+    ];
+    if (repository) {
+        lines.push(`  repository: ${repository.url} (${repository.branch})`);
+    }
+    return { exitCode: 0, stdout: lines, stderr: [] };
+}
+/**
+ * Resolve the target instance. If `instanceId` is given, fetch it directly.
+ * Otherwise list all instances for the org and use the sole one (or error if
+ * there are 0 or >1).
+ */
+async function resolveInstance(client, instanceId) {
+    if (instanceId) {
+        try {
+            return await client.instances.get(instanceId);
+        }
+        catch (err) {
+            const msg = err instanceof Error ? err.message : String(err);
+            throw new Error(`Instance "${instanceId}" could not be resolved: ${msg}`);
+        }
+    }
+    // No explicit ID — list all instances and auto-select the sole one.
+    const { items } = await client.instances.list();
+    if (items.length === 0) {
+        throw new Error('No instances found in your organization. Create one first or specify --instance <id>.');
+    }
+    if (items.length > 1) {
+        const ids = items.map(i => `  ${i.instance_id} — ${i.name}`).join('\n');
+        throw new Error(`Multiple instances found. Specify one with --instance <id>:\n${ids}`);
+    }
+    return items[0];
+}
+//# sourceMappingURL=attach-cmd.js.map

package/dist/cli/commands/attach-cmd.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"attach-cmd.js","sourceRoot":"","sources":["../../../src/cli/commands/attach-cmd.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAKH,OAAO,EACL,cAAc,EACd,kBAAkB,EAClB,uBAAuB,GAIxB,MAAM,uBAAuB,CAAC;AAS/B;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAAgB;IAClD,MAAM,GAAG,GAAG,OAAO,CAAC,eAAe,CAAC;IACpC,MAAM,IAAI,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAEtC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAClB,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,IAAI,GAAsB;QAC9B,GAAG;QACH,IAAI;QACJ,MAAM,EAAE,OAAO,CAAC,aAAa,IAAI,MAAM;KACxC,CAAC;IAEF,qDAAqD;IACrD,IAAI,OAAO,CAAC,gBAAgB,IAAI,OAAO,CAAC,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpE,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAC1C,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,MAAoB,EACpB,UAAyB,EAAE;IAE3B,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IAEzC,iFAAiF;IACjF,MAAM,aAAa,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;IAC1C,IAAI,CAAC,aAAa,CAAC,EAAE,EAAE,CAAC;QACtB,OAAO,uBAAuB,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;IACxD,CAAC;IACD,MAAM,EAAE,OAAO,EAAE,eAAe,EAAE,GAAG,aAAa,CAAC;IAEnD,kCAAkC;IAClC,IAAI,QAAkB,CAAC;IACvB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,eAAe,CAAC,MAAM,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;IAC/D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,MAAM,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAChE,OAAO;YACL,QAAQ,EAAE,CAAC;YACX,MAAM,EAAE,EAAE;YACV,MAAM,EAAE,CAAC,kBAAkB,MAAM,EAAE,CAAC;SACrC,CAAC;IACJ,CAAC;IAED,+DAA+D;IAC/D,IAAI,aAAsB,CAAC;IAC3B,IAAI,CAAC;QACH,aAAa,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAChE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,MAAM,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAChE,OAAO;YACL,QAAQ,EAAE,CAAC;YACX,MAAM,EAAE,EAAE;YACV,MAAM,EAAE,CAAC,kDAAkD,MAAM,EAAE,CAAC;SACrE,CAAC;IACJ,CAAC;IAED,oFAAoF;IACpF,MAAM,UAAU,GAAG,mBAAmB,CAAC,aAAa,CAAC,CAAC;IACtD,MAAM,SAAS,GAAkB;QAC/B,GAAG,OAAO;QACV,WAAW,EAAE,QAAQ,CAAC,WAAW;QACjC,OAAO,EAAE,QAAQ,CAAC,OAAO;KAC1B,CAAC;IAEF,4FAA4F;IAC5F,IAAI,UAAU,EAAE,CAAC;QACf,SAAS,CAAC,UAAU,GAAG,UAAU,CAAC;IACpC,CAAC;SAAM,CAAC;QACN,OAAO,SAAS,CAAC,UAAU,CAAC;IAC9B,CAAC;IAED,0EAA0E;IAC1E,IAAI,CAAC;QACH,MAAM,kBAAkB,CAAC,eAAe,EAAE,SAAS,CAAC,CAAC;IACvD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,MAAM,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAChE,OAAO;YACL,QAAQ,EAAE,CAAC;YACX,MAAM,EAAE,EAAE;YACV,MAAM,EAAE,CAAC,kDAAkD,MAAM,EAAE,CAAC;SACrE,CAAC;IACJ,CAAC;IAED,qBAAqB;IACrB,MAAM,KAAK,GAAa;QACtB,yBAAyB,QAAQ,CAAC,IAAI,MAAM,QAAQ,CAAC,WAAW,IAAI;QACpE,cAAc,QAAQ,CAAC,OAAO,EAAE;KACjC,CAAC;IACF,IAAI,UAAU,EAAE,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,iBAAiB,UAAU,CAAC,GAAG,KAAK,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC;IACvE,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;AACpD,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,eAAe,CAAC,MAAoB,EAAE,UAAmB;IACtE,IAAI,UAAU,EAAE,CAAC;QACf,IAAI,CAAC;YACH,OAAO,MAAM,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAChD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,MAAM,IAAI,KAAK,CACb,aAAa,UAAU,4BAA4B,GAAG,EAAE,CACzD,CAAC;QACJ,CAAC;IACH,CAAC;IAED,oEAAoE;IACpE,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;IAChD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CACb,uFAAuF,CACxF,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,WAAW,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxE,MAAM,IAAI,KAAK,CACb,gEAAgE,GAAG,EAAE,CACtE,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC"}

package/dist/cli/commands/deploy-cmd.d.ts

@@ -0,0 +1,101 @@
+/**
+ * CLI: loxtep deploy — compile and deploy Data_Workflow_Modules.
+ *
+ * Steps:
+ * 1. Call requireAttachedProject() to verify preconditions (R1.7, R1.10)
+ * 2. Load all workflow modules from `workflows/` directory
+ * 3. Compile all modules via compileModule (R1.11: collect compile errors with file:line)
+ * 4. On compile errors: reject, print each error with file:line, exit non-zero
+ * 5. Validate referenced resources exist against the instance (R1.8)
+ * 6. On missing refs: reject, print each with file:line, leave running unchanged, exit non-zero
+ * 7. Resolve deploy target by instance type (R14.4, R14.5)
+ * 8. For repo-bound projects: deploy from the synced S3 Code_Bundle (R17.11)
+ * 9. For each compiled module: drive in-place update or create via the workflows microservice
+ * 10. Compute removal set and remove absent workflows (R3.7)
+ * 11. Surface async deploy status via `async_runs` tracking handle (R18.5)
+ *
+ * Requirements: 1.6, 1.8, 1.11, 3.4, 3.5, 3.6, 3.7, 14.4, 14.5, 17.11, 18.5
+ */
+import { type CliResult } from '../project-context.js';
+import type { CompiledWorkflow } from '../../authoring/compiler.js';
+import type { NormalizedContext } from '../../codegen/types.js';
+import type { Instance } from '../../client/instances-types.js';
+/** A compile error with source location. */
+export interface CompileError {
+    file: string;
+    line: number;
+    message: string;
+}
+/** A missing resource reference with source location. */
+export interface MissingRefError {
+    file: string;
+    line: number;
+    type: string;
+    id: string;
+    name?: string;
+}
+/** The deploy target resolved from instance type. */
+export type DeployTarget = {
+    kind: 'loxtep_infra';
+    instanceType: 'shared' | 'managed';
+} | {
+    kind: 'customer_data_plane';
+    instanceType: 'customer';
+};
+/** Async deploy tracking handle (R18.5). */
+export interface DeployTrackingHandle {
+    run_id: string;
+    status: string;
+}
+/** Result of a single workflow deployment. */
+export interface WorkflowDeployResult {
+    name: string;
+    workflow_id: string;
+    status: 'created' | 'updated' | 'failed';
+    error?: string;
+}
+/**
+ * Discover all .ts/.js workflow module files in the `workflows/` directory.
+ * Returns an array of { filename, path } entries.
+ */
+export declare function discoverModuleFiles(projectDir: string): Array<{
+    filename: string;
+    path: string;
+}>;
+/**
+ * Resolve the deploy target from the instance type.
+ *
+ * - shared/managed → Loxtep-operated infrastructure (R14.4)
+ * - self-hosted (backend: 'customer') → customer data plane (R14.5)
+ *
+ * Instance type is determined from metadata or connection_details on the instance.
+ */
+export declare function resolveDeployTarget(instance: Instance): DeployTarget;
+/**
+ * Validate that all referenced resources from compiled modules exist in the
+ * normalized workspace context. Returns missing references with file:line info.
+ */
+export declare function validateReferencedResources(compiledModules: Array<{
+    compiled: CompiledWorkflow;
+    file: string;
+}>, ctx: NormalizedContext): MissingRefError[];
+export interface DeployCommandOptions {
+    /** Working directory (defaults to process.cwd()). */
+    cwd?: string;
+}
+/**
+ * Execute the `loxtep deploy` command.
+ *
+ * Compiles all modules, validates resources, resolves deploy target, then drives
+ * in-place update/create/removal via the workflows microservice + deployWorkflow().
+ *
+ * @param options - Command options.
+ * @returns Structured CLI result for testability.
+ */
+export declare function runDeployCommand(options?: DeployCommandOptions): Promise<CliResult>;
+/**
+ * CLI entry point for `loxtep deploy`.
+ * Prints output and sets process.exitCode from the structured result.
+ */
+export declare function runDeploy(): Promise<void>;
+//# sourceMappingURL=deploy-cmd.d.ts.map

package/dist/cli/commands/deploy-cmd.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deploy-cmd.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/deploy-cmd.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAIH,OAAO,EAGL,KAAK,SAAS,EACf,MAAM,uBAAuB,CAAC;AAK/B,OAAO,KAAK,EAAE,gBAAgB,EAAe,MAAM,6BAA6B,CAAC;AAGjF,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAChE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,iCAAiC,CAAC;AAMhE,4CAA4C;AAC5C,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,yDAAyD;AACzD,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,qDAAqD;AACrD,MAAM,MAAM,YAAY,GACpB;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,YAAY,EAAE,QAAQ,GAAG,SAAS,CAAA;CAAE,GAC5D;IAAE,IAAI,EAAE,qBAAqB,CAAC;IAAC,YAAY,EAAE,UAAU,CAAA;CAAE,CAAC;AAE9D,4CAA4C;AAC5C,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,8CAA8C;AAC9C,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,SAAS,GAAG,SAAS,GAAG,QAAQ,CAAC;IACzC,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAMD;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,UAAU,EAAE,MAAM,GAAG,KAAK,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,CAYjG;AAwBD;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,QAAQ,GAAG,YAAY,CAgBpE;AAMD;;;GAGG;AACH,wBAAgB,2BAA2B,CACzC,eAAe,EAAE,KAAK,CAAC;IAAE,QAAQ,EAAE,gBAAgB,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,EACpE,GAAG,EAAE,iBAAiB,GACrB,eAAe,EAAE,CA2CnB;AAiFD,MAAM,WAAW,oBAAoB;IACnC,qDAAqD;IACrD,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED;;;;;;;;GAQG;AACH,wBAAsB,gBAAgB,CAAC,OAAO,GAAE,oBAAyB,GAAG,OAAO,CAAC,SAAS,CAAC,CA0Q7F;AAED;;;GAGG;AACH,wBAAsB,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC,CAW/C"}