@masculinecache/warp-axi 0.0.0-stage → 0.1.0

package/dist/src/warp.js

@@ -0,0 +1,131 @@
+import { spawn } from "node:child_process";
+import { AxiError } from "axi-sdk-js";
+const MAX_OUTPUT = 64 * 1024 * 1024;
+export function realRunner(cwd) {
+    return {
+        async run(args, options) {
+            return new Promise((resolve, reject) => {
+                const proc = spawn("warp-cli", args, {
+                    cwd,
+                    env: { ...process.env },
+                    stdio: ["pipe", "pipe", "pipe"],
+                });
+                let stdout = "";
+                let stderr = "";
+                proc.stdout.on("data", (data) => {
+                    if (stdout.length < MAX_OUTPUT) {
+                        stdout += data.toString();
+                    }
+                });
+                proc.stderr.on("data", (data) => {
+                    if (stderr.length < MAX_OUTPUT) {
+                        stderr += data.toString();
+                    }
+                });
+                if (options?.input) {
+                    proc.stdin.write(options.input);
+                    proc.stdin.end();
+                }
+                proc.on("error", (err) => {
+                    if (err.code === "ENOENT") {
+                        reject(new AxiError("WARP_NOT_INSTALLED", "warp-cli is not installed. Install cloudflare-warp package first.", ["Install: https://pkg.cloudflareclient.com/", "Or: brew install cloudflare-warp"]));
+                    }
+                    else {
+                        reject(err);
+                    }
+                });
+                proc.on("close", (code) => {
+                    resolve({
+                        stdout: stdout.trim(),
+                        stderr: stderr.trim(),
+                        exitCode: code ?? 0,
+                    });
+                });
+            });
+        },
+    };
+}
+export async function callWarp(runner, args, options) {
+    const result = await runner.run(args, options);
+    if (result.exitCode !== 0) {
+        throw mapWarpError(result.stderr || result.stdout, result.exitCode);
+    }
+    return result;
+}
+export async function callWarpLenient(runner, args, options) {
+    return runner.run(args, options);
+}
+const ERROR_PATTERNS = [
+    {
+        pattern: /Registration\+failed|Unable to register/i,
+        code: "REGISTRATION_FAILED",
+        message: "WARP registration failed. The device could not enroll in the Zero Trust organization.",
+        suggestions: [
+            "Check that the MDM service token is valid and not expired",
+            "Verify the organization name in the MDM configuration",
+            "Ensure the device can reach api.cloudflareclient.com",
+        ],
+    },
+    {
+        pattern: /not\s+registered|No\s+registration/i,
+        code: "NOT_REGISTERED",
+        message: "WARP is not registered with a Zero Trust organization.",
+        suggestions: [
+            "Run: warp-axi registration new --org <org-name>",
+            "Or: warp-cli registration new --organization <org>",
+        ],
+    },
+    {
+        pattern: /already\s+registered/i,
+        code: "ALREADY_REGISTERED",
+        message: "WARP is already registered. Delete the existing registration first.",
+        suggestions: ["Run: warp-axi registration delete", "Then: warp-axi registration new --org <org>"],
+    },
+    {
+        pattern: /connection\s+failed|Unable to connect/i,
+        code: "CONNECTION_FAILED",
+        message: "WARP could not establish a connection.",
+        suggestions: [
+            "Check network connectivity",
+            "Run: warp-axi debug connectivity-check",
+            "Check if another VPN is active",
+        ],
+    },
+    {
+        pattern: /authentication\s+failed|auth\s+error/i,
+        code: "AUTH_FAILED",
+        message: "WARP authentication failed. The Zero Trust enrollment may have expired.",
+        suggestions: [
+            "Delete and re-register: warp-axi registration delete && warp-axi registration new --org <org>",
+            "Check that the MDM service token is still valid",
+        ],
+    },
+    {
+        pattern: /daemon\s+not\s+running|warp-svc/i,
+        code: "DAEMON_NOT_RUNNING",
+        message: "The WARP daemon (warp-svc) is not running.",
+        suggestions: [
+            "Start the service: sudo systemctl start warp-svc",
+            "Check status: systemctl status warp-svc",
+        ],
+    },
+    {
+        pattern: /permission\s+denied|Operation\s+not\s+permitted/i,
+        code: "PERMISSION_DENIED",
+        message: "Permission denied. This command requires elevated privileges.",
+        suggestions: ["Run with sudo or as root", "Check warp-svc daemon permissions"],
+    },
+];
+function stripAnsi(text) {
+    return text.replace(/[\u001b\u009b][[()#;?]*(?:[0-9]{1,4}(?:;[0-9]{0,4})*)?[0-9A-ORZcf-nqry=><]/g, "");
+}
+export function mapWarpError(stderr, _exitCode) {
+    const clean = stripAnsi(stderr);
+    for (const { pattern, code, message, suggestions } of ERROR_PATTERNS) {
+        if (pattern.test(clean)) {
+            return new AxiError(code, message, suggestions);
+        }
+    }
+    const firstLine = clean.split("\n").find((l) => l.trim()) ?? "Unknown error";
+    return new AxiError("UNKNOWN", firstLine.trim());
+}

package/package.json

@@ -1,6 +1,56 @@
 {
   "name": "@masculinecache/warp-axi",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "0.1.0",
+  "description": "Agent-ergonomic Cloudflare WARP CLI wrapper with TOON output — status, registration, connectivity, split tunnels, and debug diagnostics via warp-cli",
+  "type": "module",
+  "bin": {
+    "warp-axi": "dist/bin/warp-axi.js"
+  },
+  "files": [
+    "dist",
+    "!dist/test",
+    "skills/warp-axi",
+    "LICENSE",
+    "README.md"
+  ],
+  "engines": {
+    "node": ">=20"
+  },
+  "publishConfig": {
+    "access": "public",
+    "provenance": true
+  },
+  "scripts": {
+    "build": "tsc",
+    "test": "vitest run --config vitest.config.mts",
+    "test:watch": "vitest",
+    "dev": "tsx bin/warp-axi.ts",
+    "prepublishOnly": "npm run build"
+  },
+  "dependencies": {
+    "@toon-format/toon": "^4.1.1",
+    "axi-sdk-js": "^0.1.10"
+  },
+  "devDependencies": {
+    "@types/node": "^26.6.6",
+    "tsx": "^4.0.0",
+    "typescript": "^7.0.2",
+    "vitest": "^5.0.1"
+  },
+  "keywords": [
+    "cloudflare",
+    "warp",
+    "warp-cli",
+    "axi",
+    "toon",
+    "agent-ergonomic",
+    "zero-trust",
+    "mesh"
+  ],
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/masculinecache/warp-axi.git"
+  },
+  "homepage": "https://github.com/masculinecache/warp-axi#readme"
+}

package/skills/warp-axi/SKILL.md

@@ -0,0 +1,74 @@
+---
+name: warp-axi
+description: Manage Cloudflare WARP client (warp-cli) through an agent-ergonomic TOON wrapper. Use when checking WARP connection status, registering/enrolling devices, managing split tunnel routes, virtual networks, infrastructure targets, or running network diagnostics on fleet nodes with WARP installed.
+---
+
+# warp-axi
+
+Agent-ergonomic wrapper for the Cloudflare WARP CLI (`warp-cli`).
+
+## Invocation
+
+```bash
+warp-axi <area> [subcommand] [flags]
+# or via npx:
+npx @masculinecache/warp-axi <area> [subcommand] [flags]
+```
+
+## Areas
+
+| Area | Subcommands | Description |
+|------|-------------|-------------|
+| `status` | (none), `--detail`, `--json` | Connection status and account info |
+| `connect` | (none) | Connect to WARP |
+| `disconnect` | (none) | Disconnect from WARP |
+| `registration` | `show`, `new [--org <org>] [--token <token>]`, `delete` | Device registration management |
+| `tunnel` | `dump`, `stats` | Split tunnel routes and tunnel statistics |
+| `settings` | (none) | Client settings display |
+| `debug` | `network`, `posture`, `connectivity-check` | Diagnostics |
+| `vnet` | `list`, `add <name>`, `remove <name>` | Virtual network management |
+| `target` | `list` | Infrastructure target listing |
+
+## Global flags
+
+- `--help`, `-h` — Show help
+- `--version`, `-V` — Show version
+
+## Exit codes
+
+| Code | Meaning |
+|------|---------|
+| 0 | Success |
+| 1 | General error |
+| 2 | WARP not installed |
+
+## Error codes
+
+| Code | When |
+|------|------|
+| `WARP_NOT_INSTALLED` | `warp-cli` binary not found on PATH |
+| `REGISTRATION_FAILED` | Registration attempt failed |
+| `NOT_REGISTERED` | Device not registered with organization |
+| `ALREADY_REGISTERED` | Device already registered |
+| `CONNECTION_FAILED` | Could not establish WARP connection |
+| `AUTH_FAILED` | Authentication failed |
+| `DAEMON_NOT_RUNNING` | warp-svc daemon not running |
+| `PERMISSION_DENIED` | Insufficient permissions |
+
+## Installation
+
+```bash
+npm install -g @masculinecache/warp-axi
+# or use without installing:
+npx @masculinecache/warp-axi status
+```
+
+## MDM headless enrollment
+
+For zero-touch fleet enrollment, use the service token flow:
+
+```bash
+warp-axi registration new --org <team-name> --token <service-token>
+```
+
+The service token is obtained from the Zero Trust dashboard under Settings → Devices → Service Tokens.