@lztek/sarah-sells 0.1.0

package/dist/lib/auth.js

@@ -0,0 +1,151 @@
+import * as fs from 'node:fs';
+import * as path from 'node:path';
+import * as os from 'node:os';
+const ENV_ACCESS_TOKEN = 'SARAH_ACCESS_TOKEN';
+const ENV_SERVICE_SECRET = 'SARAH_SERVICE_SECRET';
+const ENV_API_URL = 'SARAH_API_URL';
+const ENV_SUPABASE_URL = 'SARAH_SUPABASE_URL';
+const ENV_SUPABASE_ANON_KEY = 'SARAH_SUPABASE_ANON_KEY';
+const DEFAULT_API_URL = 'http://localhost:3010';
+const DEFAULT_SUPABASE_URL = 'https://sjcgecmfcyplmtiqombq.supabase.co';
+const DEFAULT_SUPABASE_ANON_KEY = 'eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6InNqY2dlY21mY3lwbG10aXFvbWJxIiwicm9sZSI6ImFub24iLCJpYXQiOjE3NTg3NTMyOTEsImV4cCI6MjA3NDMyOTI5MX0.OGJomPK5-74WTQteh7YX7yCClFUxvh66zRJWys8WyPY';
+function getConfigDir() {
+    const dir = path.join(os.homedir(), '.config', 'sarah');
+    if (!fs.existsSync(dir)) {
+        fs.mkdirSync(dir, { recursive: true });
+    }
+    return dir;
+}
+function getSessionPath() {
+    return path.join(getConfigDir(), 'session.json');
+}
+function loadStoredSession() {
+    const sessionPath = getSessionPath();
+    if (!fs.existsSync(sessionPath))
+        return null;
+    try {
+        const data = JSON.parse(fs.readFileSync(sessionPath, 'utf-8'));
+        return data;
+    }
+    catch {
+        return null;
+    }
+}
+function saveSession(session) {
+    const sessionPath = getSessionPath();
+    fs.writeFileSync(sessionPath, JSON.stringify(session, null, 2), { mode: 0o600 });
+}
+export function clearSession() {
+    const sessionPath = getSessionPath();
+    if (fs.existsSync(sessionPath)) {
+        fs.unlinkSync(sessionPath);
+    }
+}
+function getSupabaseUrl() {
+    return process.env[ENV_SUPABASE_URL] || DEFAULT_SUPABASE_URL;
+}
+function getSupabaseAnonKey() {
+    return process.env[ENV_SUPABASE_ANON_KEY] || DEFAULT_SUPABASE_ANON_KEY;
+}
+export async function loginWithPassword(email, password) {
+    const supabaseUrl = getSupabaseUrl();
+    const anonKey = getSupabaseAnonKey();
+    const response = await fetch(`${supabaseUrl}/auth/v1/token?grant_type=password`, {
+        method: 'POST',
+        headers: {
+            'Content-Type': 'application/json',
+            'apikey': anonKey,
+        },
+        body: JSON.stringify({ email, password }),
+    });
+    if (!response.ok) {
+        const error = await response.json().catch(() => ({ message: 'Unknown error' }));
+        throw new Error(error.error_description ||
+            error.msg ||
+            error.message ||
+            `Login failed (${response.status})`);
+    }
+    const data = await response.json();
+    const session = {
+        access_token: data.access_token,
+        refresh_token: data.refresh_token,
+        expires_at: Math.floor(Date.now() / 1000) + data.expires_in,
+        user_email: data.user.email,
+    };
+    saveSession(session);
+    return session;
+}
+async function refreshSession(session) {
+    const supabaseUrl = getSupabaseUrl();
+    const anonKey = getSupabaseAnonKey();
+    const response = await fetch(`${supabaseUrl}/auth/v1/token?grant_type=refresh_token`, {
+        method: 'POST',
+        headers: {
+            'Content-Type': 'application/json',
+            'apikey': anonKey,
+        },
+        body: JSON.stringify({ refresh_token: session.refresh_token }),
+    });
+    if (!response.ok) {
+        clearSession();
+        throw new Error('Session expired. Run `sarah auth login` to re-authenticate.');
+    }
+    const data = await response.json();
+    const newSession = {
+        access_token: data.access_token,
+        refresh_token: data.refresh_token,
+        expires_at: Math.floor(Date.now() / 1000) + data.expires_in,
+        user_email: data.user.email,
+    };
+    saveSession(newSession);
+    return newSession;
+}
+export async function getAccessToken() {
+    // 1. Env var takes precedence (for CI/CD, agents with pre-set tokens)
+    const envToken = process.env[ENV_ACCESS_TOKEN];
+    if (envToken)
+        return envToken;
+    // 2. Try stored session
+    let session = loadStoredSession();
+    if (!session) {
+        throw new Error('Not authenticated. Run `sarah auth login` or set SARAH_ACCESS_TOKEN.');
+    }
+    // 3. Auto-refresh if expired (with 60s buffer)
+    const now = Math.floor(Date.now() / 1000);
+    if (now >= session.expires_at - 60) {
+        session = await refreshSession(session);
+    }
+    return session.access_token;
+}
+export function getServiceSecret() {
+    return process.env[ENV_SERVICE_SECRET];
+}
+export function getApiUrl() {
+    return process.env[ENV_API_URL] || DEFAULT_API_URL;
+}
+export async function getAuthHeaders() {
+    const serviceSecret = getServiceSecret();
+    if (serviceSecret) {
+        return {
+            'x-service-secret': serviceSecret,
+            'Content-Type': 'application/json',
+        };
+    }
+    const token = await getAccessToken();
+    return {
+        'Authorization': `Bearer ${token}`,
+        'X-Auth-Token': token,
+        'Content-Type': 'application/json',
+    };
+}
+export function getStoredSessionInfo() {
+    const session = loadStoredSession();
+    if (!session)
+        return null;
+    return {
+        email: session.user_email,
+        expires_at: session.expires_at,
+        authenticated: true,
+    };
+}
+//# sourceMappingURL=auth.js.map

package/dist/lib/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../src/lib/auth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAE9B,MAAM,gBAAgB,GAAG,oBAAoB,CAAC;AAC9C,MAAM,kBAAkB,GAAG,sBAAsB,CAAC;AAClD,MAAM,WAAW,GAAG,eAAe,CAAC;AACpC,MAAM,gBAAgB,GAAG,oBAAoB,CAAC;AAC9C,MAAM,qBAAqB,GAAG,yBAAyB,CAAC;AAExD,MAAM,eAAe,GAAG,uBAAuB,CAAC;AAChD,MAAM,oBAAoB,GAAG,0CAA0C,CAAC;AACxE,MAAM,yBAAyB,GAAG,kNAAkN,CAAC;AASrP,SAAS,YAAY;IACnB,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;IACxD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACxB,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACzC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,cAAc;IACrB,OAAO,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,cAAc,CAAC,CAAC;AACnD,CAAC;AAED,SAAS,iBAAiB;IACxB,MAAM,WAAW,GAAG,cAAc,EAAE,CAAC;IACrC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7C,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC;QAC/D,OAAO,IAAqB,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,OAAsB;IACzC,MAAM,WAAW,GAAG,cAAc,EAAE,CAAC;IACrC,EAAE,CAAC,aAAa,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AACnF,CAAC;AAED,MAAM,UAAU,YAAY;IAC1B,MAAM,WAAW,GAAG,cAAc,EAAE,CAAC;IACrC,IAAI,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QAC/B,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;IAC7B,CAAC;AACH,CAAC;AAED,SAAS,cAAc;IACrB,OAAO,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,oBAAoB,CAAC;AAC/D,CAAC;AAED,SAAS,kBAAkB;IACzB,OAAO,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,IAAI,yBAAyB,CAAC;AACzE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,KAAa,EAAE,QAAgB;IACrE,MAAM,WAAW,GAAG,cAAc,EAAE,CAAC;IACrC,MAAM,OAAO,GAAG,kBAAkB,EAAE,CAAC;IAErC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,WAAW,oCAAoC,EAAE;QAC/E,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,cAAc,EAAE,kBAAkB;YAClC,QAAQ,EAAE,OAAO;SAClB;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;KAC1C,CAAC,CAAC;IAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC;QAChF,MAAM,IAAI,KAAK,CACZ,KAAgC,CAAC,iBAAiB;YAClD,KAAgC,CAAC,GAAG;YACpC,KAAgC,CAAC,OAAO;YACzC,iBAAiB,QAAQ,CAAC,MAAM,GAAG,CACpC,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAK/B,CAAC;IAEF,MAAM,OAAO,GAAkB;QAC7B,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,UAAU;QAC3D,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK;KAC5B,CAAC;IAEF,WAAW,CAAC,OAAO,CAAC,CAAC;IACrB,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,OAAsB;IAClD,MAAM,WAAW,GAAG,cAAc,EAAE,CAAC;IACrC,MAAM,OAAO,GAAG,kBAAkB,EAAE,CAAC;IAErC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,WAAW,yCAAyC,EAAE;QACpF,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,cAAc,EAAE,kBAAkB;YAClC,QAAQ,EAAE,OAAO;SAClB;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE,CAAC;KAC/D,CAAC,CAAC;IAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,YAAY,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;IACjF,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAK/B,CAAC;IAEF,MAAM,UAAU,GAAkB;QAChC,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,UAAU;QAC3D,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK;KAC5B,CAAC;IAEF,WAAW,CAAC,UAAU,CAAC,CAAC;IACxB,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc;IAClC,sEAAsE;IACtE,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IAC/C,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAE9B,wBAAwB;IACxB,IAAI,OAAO,GAAG,iBAAiB,EAAE,CAAC;IAClC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CACb,sEAAsE,CACvE,CAAC;IACJ,CAAC;IAED,+CAA+C;IAC/C,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAC1C,IAAI,GAAG,IAAI,OAAO,CAAC,UAAU,GAAG,EAAE,EAAE,CAAC;QACnC,OAAO,GAAG,MAAM,cAAc,CAAC,OAAO,CAAC,CAAC;IAC1C,CAAC;IAED,OAAO,OAAO,CAAC,YAAY,CAAC;AAC9B,CAAC;AAED,MAAM,UAAU,gBAAgB;IAC9B,OAAO,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;AACzC,CAAC;AAED,MAAM,UAAU,SAAS;IACvB,OAAO,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,eAAe,CAAC;AACrD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc;IAClC,MAAM,aAAa,GAAG,gBAAgB,EAAE,CAAC;IACzC,IAAI,aAAa,EAAE,CAAC;QAClB,OAAO;YACL,kBAAkB,EAAE,aAAa;YACjC,cAAc,EAAE,kBAAkB;SACnC,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,cAAc,EAAE,CAAC;IACrC,OAAO;QACL,eAAe,EAAE,UAAU,KAAK,EAAE;QAClC,cAAc,EAAE,KAAK;QACrB,cAAc,EAAE,kBAAkB;KACnC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,oBAAoB;IAClC,MAAM,OAAO,GAAG,iBAAiB,EAAE,CAAC;IACpC,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC1B,OAAO;QACL,KAAK,EAAE,OAAO,CAAC,UAAU;QACzB,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,aAAa,EAAE,IAAI;KACpB,CAAC;AACJ,CAAC"}

package/dist/lib/http-client.d.ts

@@ -0,0 +1,21 @@
+export interface ApiResponse<T = unknown> {
+    ok: boolean;
+    status: number;
+    data: T;
+    error?: string;
+}
+export interface RequestOptions {
+    method?: string;
+    body?: unknown;
+    params?: Record<string, string>;
+    fields?: string;
+    headers?: Record<string, string>;
+}
+export declare function apiRequest<T = unknown>(path: string, options?: RequestOptions): Promise<ApiResponse<T>>;
+export declare const api: {
+    get: <T = unknown>(path: string, opts?: Omit<RequestOptions, "method">) => Promise<ApiResponse<T>>;
+    post: <T = unknown>(path: string, body?: unknown, opts?: Omit<RequestOptions, "method" | "body">) => Promise<ApiResponse<T>>;
+    patch: <T = unknown>(path: string, body?: unknown, opts?: Omit<RequestOptions, "method" | "body">) => Promise<ApiResponse<T>>;
+    delete: <T = unknown>(path: string, opts?: Omit<RequestOptions, "method">) => Promise<ApiResponse<T>>;
+};
+//# sourceMappingURL=http-client.d.ts.map

package/dist/lib/http-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-client.d.ts","sourceRoot":"","sources":["../../src/lib/http-client.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,WAAW,CAAC,CAAC,GAAG,OAAO;IACtC,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,CAAC,CAAC;IACR,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,cAAc;IAC7B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAClC;AAaD,wBAAsB,UAAU,CAAC,CAAC,GAAG,OAAO,EAC1C,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE,cAAmB,GAC3B,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAiDzB;AAED,eAAO,MAAM,GAAG;UACR,CAAC,kBAAkB,MAAM,SAAS,IAAI,CAAC,cAAc,EAAE,QAAQ,CAAC;WAG/D,CAAC,kBAAkB,MAAM,SAAS,OAAO,SAAS,IAAI,CAAC,cAAc,EAAE,QAAQ,GAAG,MAAM,CAAC;YAGxF,CAAC,kBAAkB,MAAM,SAAS,OAAO,SAAS,IAAI,CAAC,cAAc,EAAE,QAAQ,GAAG,MAAM,CAAC;aAGxF,CAAC,kBAAkB,MAAM,SAAS,IAAI,CAAC,cAAc,EAAE,QAAQ,CAAC;CAE1E,CAAC"}

package/dist/lib/http-client.js

@@ -0,0 +1,62 @@
+import { getApiUrl, getAuthHeaders } from './auth.js';
+function buildUrl(path, params) {
+    const base = getApiUrl();
+    const url = new URL(path, base);
+    if (params) {
+        for (const [key, value] of Object.entries(params)) {
+            url.searchParams.set(key, value);
+        }
+    }
+    return url.toString();
+}
+export async function apiRequest(path, options = {}) {
+    const { method = 'GET', body, params, fields, headers: extraHeaders } = options;
+    const queryParams = { ...params };
+    if (fields) {
+        queryParams.fields = fields;
+    }
+    const url = buildUrl(path, Object.keys(queryParams).length > 0 ? queryParams : undefined);
+    const authHeaders = await getAuthHeaders();
+    const headers = { ...authHeaders, ...extraHeaders };
+    const fetchOptions = {
+        method,
+        headers,
+    };
+    if (body && method !== 'GET') {
+        fetchOptions.body = JSON.stringify(body);
+    }
+    try {
+        const response = await fetch(url, fetchOptions);
+        const contentType = response.headers.get('content-type') || '';
+        let data;
+        if (contentType.includes('application/json')) {
+            data = await response.json();
+        }
+        else {
+            data = await response.text();
+        }
+        if (!response.ok) {
+            const errorMsg = typeof data === 'object' && data !== null && 'error' in data
+                ? String(data.error)
+                : `HTTP ${response.status}`;
+            return { ok: false, status: response.status, data, error: errorMsg };
+        }
+        return { ok: true, status: response.status, data };
+    }
+    catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        return {
+            ok: false,
+            status: 0,
+            data: null,
+            error: `Network error: ${message}`,
+        };
+    }
+}
+export const api = {
+    get: (path, opts) => apiRequest(path, { ...opts, method: 'GET' }),
+    post: (path, body, opts) => apiRequest(path, { ...opts, method: 'POST', body }),
+    patch: (path, body, opts) => apiRequest(path, { ...opts, method: 'PATCH', body }),
+    delete: (path, opts) => apiRequest(path, { ...opts, method: 'DELETE' }),
+};
+//# sourceMappingURL=http-client.js.map

package/dist/lib/http-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-client.js","sourceRoot":"","sources":["../../src/lib/http-client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAiBtD,SAAS,QAAQ,CAAC,IAAY,EAAE,MAA+B;IAC7D,MAAM,IAAI,GAAG,SAAS,EAAE,CAAC;IACzB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAChC,IAAI,MAAM,EAAE,CAAC;QACX,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAClD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACnC,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;AACxB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,IAAY,EACZ,UAA0B,EAAE;IAE5B,MAAM,EAAE,MAAM,GAAG,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,GAAG,OAAO,CAAC;IAEhF,MAAM,WAAW,GAAG,EAAE,GAAG,MAAM,EAAE,CAAC;IAClC,IAAI,MAAM,EAAE,CAAC;QACX,WAAW,CAAC,MAAM,GAAG,MAAM,CAAC;IAC9B,CAAC;IAED,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAC1F,MAAM,WAAW,GAAG,MAAM,cAAc,EAAE,CAAC;IAC3C,MAAM,OAAO,GAAG,EAAE,GAAG,WAAW,EAAE,GAAG,YAAY,EAAE,CAAC;IAEpD,MAAM,YAAY,GAAgB;QAChC,MAAM;QACN,OAAO;KACR,CAAC;IAEF,IAAI,IAAI,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;QAC7B,YAAY,CAAC,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAC3C,CAAC;IAED,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;QAChD,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;QAE/D,IAAI,IAAO,CAAC;QACZ,IAAI,WAAW,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;YAC7C,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAO,CAAC;QACpC,CAAC;aAAM,CAAC;YACN,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAkB,CAAC;QAC/C,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,QAAQ,GAAG,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,IAAI;gBAC3E,CAAC,CAAC,MAAM,CAAE,IAAgC,CAAC,KAAK,CAAC;gBACjD,CAAC,CAAC,QAAQ,QAAQ,CAAC,MAAM,EAAE,CAAC;YAC9B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;QACvE,CAAC;QAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC;IACrD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,CAAC;YACT,IAAI,EAAE,IAAoB;YAC1B,KAAK,EAAE,kBAAkB,OAAO,EAAE;SACnC,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,MAAM,GAAG,GAAG;IACjB,GAAG,EAAE,CAAc,IAAY,EAAE,IAAqC,EAAE,EAAE,CACxE,UAAU,CAAI,IAAI,EAAE,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IAEjD,IAAI,EAAE,CAAc,IAAY,EAAE,IAAc,EAAE,IAA8C,EAAE,EAAE,CAClG,UAAU,CAAI,IAAI,EAAE,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAExD,KAAK,EAAE,CAAc,IAAY,EAAE,IAAc,EAAE,IAA8C,EAAE,EAAE,CACnG,UAAU,CAAI,IAAI,EAAE,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAEzD,MAAM,EAAE,CAAc,IAAY,EAAE,IAAqC,EAAE,EAAE,CAC3E,UAAU,CAAI,IAAI,EAAE,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;CACrD,CAAC"}

package/dist/lib/output.d.ts

@@ -0,0 +1,7 @@
+import type { ApiResponse } from './http-client.js';
+export declare function outputJson(data: unknown): void;
+export declare function outputNdjson(items: unknown[]): void;
+export declare function outputError(message: string): void;
+export declare function handleApiResponse<T>(response: ApiResponse<T>): T;
+export declare function outputSuccess(message: string): void;
+//# sourceMappingURL=output.d.ts.map

package/dist/lib/output.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"output.d.ts","sourceRoot":"","sources":["../../src/lib/output.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAEpD,wBAAgB,UAAU,CAAC,IAAI,EAAE,OAAO,GAAG,IAAI,CAE9C;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,IAAI,CAInD;AAED,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAEjD;AAED,wBAAgB,iBAAiB,CAAC,CAAC,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,CAMhE;AAED,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAEnD"}

package/dist/lib/output.js

@@ -0,0 +1,22 @@
+export function outputJson(data) {
+    process.stdout.write(JSON.stringify(data, null, 2) + '\n');
+}
+export function outputNdjson(items) {
+    for (const item of items) {
+        process.stdout.write(JSON.stringify(item) + '\n');
+    }
+}
+export function outputError(message) {
+    process.stderr.write(`Error: ${message}\n`);
+}
+export function handleApiResponse(response) {
+    if (!response.ok) {
+        outputError(response.error || `Request failed with status ${response.status}`);
+        process.exit(1);
+    }
+    return response.data;
+}
+export function outputSuccess(message) {
+    process.stderr.write(`${message}\n`);
+}
+//# sourceMappingURL=output.js.map

package/dist/lib/output.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"output.js","sourceRoot":"","sources":["../../src/lib/output.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,UAAU,CAAC,IAAa;IACtC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;AAC7D,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,KAAgB;IAC3C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;IACpD,CAAC;AACH,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,OAAe;IACzC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,OAAO,IAAI,CAAC,CAAC;AAC9C,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAI,QAAwB;IAC3D,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,WAAW,CAAC,QAAQ,CAAC,KAAK,IAAI,8BAA8B,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QAC/E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,OAAO,QAAQ,CAAC,IAAI,CAAC;AACvB,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,OAAe;IAC3C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,OAAO,IAAI,CAAC,CAAC;AACvC,CAAC"}

package/dist/lib/safety.d.ts

@@ -0,0 +1,8 @@
+export declare function validateUuid(value: string, name: string): string;
+export declare function validateEmail(value: string): string;
+export declare function rejectControlChars(value: string, name: string): string;
+export declare function validateFilePath(value: string): string;
+export declare function validateResourceName(value: string, name: string): string;
+export declare function parseJsonArg(value: string, name: string): unknown;
+export declare function confirmAction(message: string): Promise<boolean>;
+//# sourceMappingURL=safety.d.ts.map

package/dist/lib/safety.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"safety.d.ts","sourceRoot":"","sources":["../../src/lib/safety.ts"],"names":[],"mappings":"AAMA,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAKhE;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAKnD;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAKtE;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAQtD;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAQxE;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAMjE;AAED,wBAAsB,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAgBrE"}

package/dist/lib/safety.js

@@ -0,0 +1,64 @@
+import * as readline from 'node:readline';
+const UUID_REGEX = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+const CONTROL_CHAR_REGEX = /[\x00-\x1f]/;
+const TRAVERSAL_REGEX = /\.\.\//;
+export function validateUuid(value, name) {
+    if (!UUID_REGEX.test(value)) {
+        throw new Error(`Invalid ${name}: "${value}" is not a valid UUID`);
+    }
+    return value;
+}
+export function validateEmail(value) {
+    if (!value.includes('@') || !value.includes('.')) {
+        throw new Error(`Invalid email: "${value}"`);
+    }
+    return value.toLowerCase().trim();
+}
+export function rejectControlChars(value, name) {
+    if (CONTROL_CHAR_REGEX.test(value)) {
+        throw new Error(`${name} contains invalid control characters`);
+    }
+    return value;
+}
+export function validateFilePath(value) {
+    if (TRAVERSAL_REGEX.test(value)) {
+        throw new Error(`File path "${value}" contains directory traversal`);
+    }
+    if (value.includes('\0')) {
+        throw new Error('File path contains null bytes');
+    }
+    return value;
+}
+export function validateResourceName(value, name) {
+    if (value.includes('?') || value.includes('#')) {
+        throw new Error(`${name} "${value}" contains invalid characters (? or #)`);
+    }
+    if (value.includes('%')) {
+        throw new Error(`${name} "${value}" appears to be pre-encoded (contains %)`);
+    }
+    return rejectControlChars(value, name);
+}
+export function parseJsonArg(value, name) {
+    try {
+        return JSON.parse(value);
+    }
+    catch {
+        throw new Error(`Invalid JSON for ${name}: ${value}`);
+    }
+}
+export async function confirmAction(message) {
+    if (process.env.SARAH_CONFIRM === 'true') {
+        return true;
+    }
+    const rl = readline.createInterface({
+        input: process.stdin,
+        output: process.stderr,
+    });
+    return new Promise((resolve) => {
+        rl.question(`${message} [y/N] `, (answer) => {
+            rl.close();
+            resolve(answer.toLowerCase() === 'y' || answer.toLowerCase() === 'yes');
+        });
+    });
+}
+//# sourceMappingURL=safety.js.map

package/dist/lib/safety.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"safety.js","sourceRoot":"","sources":["../../src/lib/safety.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,QAAQ,MAAM,eAAe,CAAC;AAE1C,MAAM,UAAU,GAAG,iEAAiE,CAAC;AACrF,MAAM,kBAAkB,GAAG,aAAa,CAAC;AACzC,MAAM,eAAe,GAAG,QAAQ,CAAC;AAEjC,MAAM,UAAU,YAAY,CAAC,KAAa,EAAE,IAAY;IACtD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,WAAW,IAAI,MAAM,KAAK,uBAAuB,CAAC,CAAC;IACrE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAAa;IACzC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACjD,MAAM,IAAI,KAAK,CAAC,mBAAmB,KAAK,GAAG,CAAC,CAAC;IAC/C,CAAC;IACD,OAAO,KAAK,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;AACpC,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,KAAa,EAAE,IAAY;IAC5D,IAAI,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,sCAAsC,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,KAAa;IAC5C,IAAI,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CAAC,cAAc,KAAK,gCAAgC,CAAC,CAAC;IACvE,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACnD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,KAAa,EAAE,IAAY;IAC9D,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/C,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,KAAK,KAAK,wCAAwC,CAAC,CAAC;IAC7E,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,KAAK,KAAK,0CAA0C,CAAC,CAAC;IAC/E,CAAC;IACD,OAAO,kBAAkB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;AACzC,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,KAAa,EAAE,IAAY;IACtD,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,oBAAoB,IAAI,KAAK,KAAK,EAAE,CAAC,CAAC;IACxD,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,OAAe;IACjD,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa,KAAK,MAAM,EAAE,CAAC;QACzC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,EAAE,GAAG,QAAQ,CAAC,eAAe,CAAC;QAClC,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,MAAM,EAAE,OAAO,CAAC,MAAM;KACvB,CAAC,CAAC;IAEH,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,EAAE,CAAC,QAAQ,CAAC,GAAG,OAAO,SAAS,EAAE,CAAC,MAAM,EAAE,EAAE;YAC1C,EAAE,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,GAAG,IAAI,MAAM,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,CAAC;QAC1E,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/lib/schema-registry.d.ts

@@ -0,0 +1,42 @@
+interface SchemaEntry {
+    resource: string;
+    method: string;
+    description: string;
+    httpMethod: string;
+    path: string;
+    params?: Record<string, SchemaField>;
+    body?: Record<string, SchemaField>;
+    response?: string;
+}
+interface SchemaField {
+    type: string;
+    required?: boolean;
+    description?: string;
+    enum?: string[];
+}
+export declare const schemaRegistry: {
+    get(key: string): SchemaEntry | undefined;
+    listAll(): string[];
+    getByResource(resource: string): SchemaEntry[];
+    toToolDefinitions(): {
+        name: string;
+        description: string;
+        inputSchema: {
+            type: "object";
+            properties: {
+                [x: string]: {
+                    enum?: string[] | undefined;
+                    type: string;
+                    description: string | undefined;
+                } | {
+                    enum?: string[] | undefined;
+                    type: string;
+                    description: string | undefined;
+                };
+            };
+            required: string[];
+        };
+    }[];
+};
+export {};
+//# sourceMappingURL=schema-registry.d.ts.map

package/dist/lib/schema-registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema-registry.d.ts","sourceRoot":"","sources":["../../src/lib/schema-registry.ts"],"names":[],"mappings":"AAAA,UAAU,WAAW;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IACrC,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IACnC,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,UAAU,WAAW;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;CACjB;AA8UD,eAAO,MAAM,cAAc;aAChB,MAAM,GAAG,WAAW,GAAG,SAAS;eAI9B,MAAM,EAAE;4BAIK,MAAM,GAAG,WAAW,EAAE;;;;;;;;;;;;;;;;;;;;CAiC/C,CAAC"}