@meshy-ai/cli 0.1.0

package/dist/cmd/text-to-image.js

@@ -0,0 +1,53 @@
+/**
+ * text-to-image — https://docs.meshy.ai/en/api/text-to-image
+ */
+import { Option } from "commander";
+import { parseBool } from "../internal/flags.js";
+import { UsageError } from "../internal/errors.js";
+import { ASPECT_RATIOS, ASPECT_RATIO_HELP, DEFAULT_IMAGE_MODEL, IMAGE_MODELS, IMAGE_MODEL_HELP, checkImageCombo, } from "../internal/image-models.js";
+import { buildResourceCommand } from "../internal/task-command.js";
+const spec = {
+    name: "text-to-image",
+    description: "Generate a 2D image from a text prompt. For edits based on existing images use " +
+        "image-to-image instead",
+    create: {
+        description: "Create a text-to-image task",
+        configure(cmd) {
+            return cmd
+                .addOption(new Option("--ai-model <model>", IMAGE_MODEL_HELP).choices([...IMAGE_MODELS]))
+                .option("--prompt <text>", "required — image description; be descriptive for best results")
+                .option("--generate-multi-view <bool>", "generate multi-angle views of the subject (feeds multi-image-to-3d); mutually exclusive with --aspect-ratio", parseBool)
+                .addOption(new Option("--pose-mode <pose>", "a-pose | t-pose character pose preset").choices([
+                "a-pose",
+                "t-pose",
+            ]))
+                .addOption(new Option("--aspect-ratio <ratio>", ASPECT_RATIO_HELP).choices([...ASPECT_RATIOS]));
+        },
+        toPayload(opts) {
+            if (!opts.prompt && !opts.data) {
+                throw new UsageError("--prompt is required");
+            }
+            checkImageCombo({
+                // With --data in play an unset flag may be supplied there; leave the
+                // ratio check to the server rather than validating against a model
+                // the request won't use.
+                aiModel: opts.aiModel ?? (opts.data ? undefined : DEFAULT_IMAGE_MODEL),
+                aspectRatio: opts.aspectRatio,
+                generateMultiView: opts.generateMultiView,
+            });
+            return {
+                ai_model: opts.aiModel,
+                prompt: opts.prompt,
+                generate_multi_view: opts.generateMultiView,
+                pose_mode: opts.poseMode,
+                aspect_ratio: opts.aspectRatio,
+            };
+        },
+        toDefaults() {
+            return { ai_model: DEFAULT_IMAGE_MODEL };
+        },
+    },
+    endpointOf: (c) => c.textToImage,
+};
+export const textToImageCommand = buildResourceCommand(spec);
+//# sourceMappingURL=text-to-image.js.map

package/dist/cmd/text-to-image.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"text-to-image.js","sourceRoot":"","sources":["../../src/cmd/text-to-image.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AACnC,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD,OAAO,EACL,aAAa,EACb,iBAAiB,EACjB,mBAAmB,EACnB,YAAY,EACZ,gBAAgB,EAChB,eAAe,GAChB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,oBAAoB,EAA4B,MAAM,6BAA6B,CAAC;AAE7F,MAAM,IAAI,GAAwB;IAChC,IAAI,EAAE,eAAe;IACrB,WAAW,EACT,iFAAiF;QACjF,wBAAwB;IAC1B,MAAM,EAAE;QACN,WAAW,EAAE,6BAA6B;QAC1C,SAAS,CAAC,GAAG;YACX,OAAO,GAAG;iBACP,SAAS,CAAC,IAAI,MAAM,CAAC,oBAAoB,EAAE,gBAAgB,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,YAAY,CAAC,CAAC,CAAC;iBACxF,MAAM,CAAC,iBAAiB,EAAE,+DAA+D,CAAC;iBAC1F,MAAM,CACL,8BAA8B,EAC9B,6GAA6G,EAC7G,SAAS,CACV;iBACA,SAAS,CACR,IAAI,MAAM,CAAC,oBAAoB,EAAE,uCAAuC,CAAC,CAAC,OAAO,CAAC;gBAChF,QAAQ;gBACR,QAAQ;aACT,CAAC,CACH;iBACA,SAAS,CAAC,IAAI,MAAM,CAAC,wBAAwB,EAAE,iBAAiB,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC;QACpG,CAAC;QACD,SAAS,CAAC,IAAI;YACZ,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;gBAC/B,MAAM,IAAI,UAAU,CAAC,sBAAsB,CAAC,CAAC;YAC/C,CAAC;YACD,eAAe,CAAC;gBACd,qEAAqE;gBACrE,mEAAmE;gBACnE,yBAAyB;gBACzB,OAAO,EAAG,IAAI,CAAC,OAA8B,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,mBAAmB,CAAC;gBAC9F,WAAW,EAAE,IAAI,CAAC,WAAiC;gBACnD,iBAAiB,EAAE,IAAI,CAAC,iBAAwC;aACjE,CAAC,CAAC;YACH,OAAO;gBACL,QAAQ,EAAE,IAAI,CAAC,OAAO;gBACtB,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,mBAAmB,EAAE,IAAI,CAAC,iBAAiB;gBAC3C,SAAS,EAAE,IAAI,CAAC,QAAQ;gBACxB,YAAY,EAAE,IAAI,CAAC,WAAW;aAC/B,CAAC;QACJ,CAAC;QACD,UAAU;YACR,OAAO,EAAE,QAAQ,EAAE,mBAAmB,EAAE,CAAC;QAC3C,CAAC;KACF;IACD,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW;CACjC,CAAC;AAEF,MAAM,CAAC,MAAM,kBAAkB,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,6 @@
+#!/usr/bin/env node
+/**
+ * meshy-cli entry point.
+ */
+export {};
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA;;GAEG"}

package/dist/index.js

@@ -0,0 +1,46 @@
+#!/usr/bin/env node
+/**
+ * meshy-cli entry point.
+ */
+import { buildRootCommand } from "./root.js";
+import { exitCodeFor, reportError } from "./internal/errors.js";
+import { refreshCache } from "./internal/update-notifier.js";
+async function main() {
+    refreshCache(); // fire-and-forget; internally guarded; never throws
+    const program = buildRootCommand();
+    try {
+        await program.parseAsync(process.argv);
+        const code = process.exitCode ?? 0;
+        return typeof code === "number" ? code : 1;
+    }
+    catch (err) {
+        const fmt = resolveErrorFormat(program);
+        reportError(err, fmt);
+        return exitCodeFor(err);
+    }
+}
+/**
+ * Resolve the output format for the error path.
+ *
+ * Mirrors the same --json override that readGlobalFlags applies on the success
+ * path: --json (or --json combined with --format pretty) must still emit JSON
+ * on stdout so machine consumers get a parseable error payload.
+ *
+ * The program tree is read directly here because the error may have been
+ * thrown before any subcommand action ran (e.g. unknown flag), so
+ * readGlobalFlags (which requires a fully-parsed Command) is not safe to
+ * call. --json may be typed at ANY command level (global flags are mirrored
+ * to descendants, and --json has no default, so a truthy value always means
+ * the user passed it) — scanning only root opts would miss
+ * `meshy --format pretty auth login --json`.
+ */
+function resolveErrorFormat(program) {
+    const anyJson = (cmd) => Boolean(cmd.opts()["json"]) || cmd.commands.some(anyJson);
+    if (anyJson(program))
+        return "json";
+    const raw = program.opts()["format"];
+    const v = (typeof raw === "string" ? raw : "json").toLowerCase();
+    return v === "pretty" || v === "ndjson" ? v : "json";
+}
+main().then((code) => process.exit(code));
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA;;GAEG;AAIH,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAChE,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAE7D,KAAK,UAAU,IAAI;IACjB,YAAY,EAAE,CAAC,CAAC,oDAAoD;IACpE,MAAM,OAAO,GAAG,gBAAgB,EAAE,CAAC;IACnC,IAAI,CAAC;QACH,MAAM,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACvC,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,IAAI,CAAC,CAAC;QACnC,OAAO,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;QACxC,WAAW,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACtB,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC;IAC1B,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,SAAS,kBAAkB,CACzB,OAAgB;IAEhB,MAAM,OAAO,GAAG,CAAC,GAAY,EAAW,EAAE,CACxC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC5D,IAAI,OAAO,CAAC,OAAO,CAAC;QAAE,OAAO,MAAM,CAAC;IACpC,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,CAAC;IACrC,MAAM,CAAC,GAAG,CAAC,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC;IACjE,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;AACvD,CAAC;AAED,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC"}

package/dist/internal/config.d.ts

@@ -0,0 +1,46 @@
+/**
+ * Resolve config in this priority order:
+ *   1. CLI flags (--api-key, --base-url-v1, --base-url-v2, --verbose)
+ *   2. Environment variables (MESHY_*)
+ *   3. The active profile in the credentials file (written by `meshy auth login`)
+ *   4. Built-in defaults
+ *
+ * The env var keeps priority over the stored credential on purpose: CI and
+ * containers export MESHY_API_KEY and must not be silently overridden by
+ * whatever a developer once logged into on that machine.
+ *
+ * Fail-fast on a missing/placeholder credential — with the command that fixes
+ * it attached, not just a complaint.
+ */
+import { type CredentialKind } from "./credentials.js";
+import { type LogLevel } from "./logger.js";
+/** Where the credential in use came from — surfaced by `meshy auth status`. */
+export type CredentialSource = "flag" | "env" | "file";
+export interface MeshyConfig {
+    apiKey: string;
+    baseUrlV1: string;
+    baseUrlV2: string;
+    connectTimeoutMs: number;
+    readTimeoutMs: number;
+    pollIntervalMs: number;
+    logLevel: LogLevel;
+    credentialSource: CredentialSource;
+    /** Set only when credentialSource === "file". */
+    credentialProfile?: string;
+    /** The credentials file consulted for this invocation, whether or not it exists. */
+    credentialsFile: string;
+    /**
+     * The kind of credential in use — "oauth" for browser-login tokens, "api_key" for static keys.
+     * "api_key" when credentialSource is "flag" or "env" (those paths only accept static keys).
+     * Derived from the stored profile kind when credentialSource is "file".
+     */
+    credentialKind: CredentialKind;
+}
+export interface ConfigOverrides {
+    apiKey?: string;
+    baseUrlV1?: string;
+    baseUrlV2?: string;
+    logLevel?: LogLevel;
+}
+export declare function loadConfig(overrides?: ConfigOverrides): MeshyConfig;
+//# sourceMappingURL=config.d.ts.map

package/dist/internal/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/internal/config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAA4C,KAAK,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAEjG,OAAO,EAAe,KAAK,QAAQ,EAAE,MAAM,aAAa,CAAC;AAIzD,+EAA+E;AAC/E,MAAM,MAAM,gBAAgB,GAAG,MAAM,GAAG,KAAK,GAAG,MAAM,CAAC;AAEvD,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,gBAAgB,EAAE,MAAM,CAAC;IACzB,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,EAAE,MAAM,CAAC;IACvB,QAAQ,EAAE,QAAQ,CAAC;IACnB,gBAAgB,EAAE,gBAAgB,CAAC;IACnC,iDAAiD;IACjD,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,oFAAoF;IACpF,eAAe,EAAE,MAAM,CAAC;IACxB;;;;OAIG;IACH,cAAc,EAAE,cAAc,CAAC;CAChC;AAED,MAAM,WAAW,eAAe;IAC9B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,QAAQ,CAAC;CACrB;AAyBD,wBAAgB,UAAU,CAAC,SAAS,GAAE,eAAoB,GAAG,WAAW,CA4DvE"}

package/dist/internal/config.js

@@ -0,0 +1,94 @@
+/**
+ * Resolve config in this priority order:
+ *   1. CLI flags (--api-key, --base-url-v1, --base-url-v2, --verbose)
+ *   2. Environment variables (MESHY_*)
+ *   3. The active profile in the credentials file (written by `meshy auth login`)
+ *   4. Built-in defaults
+ *
+ * The env var keeps priority over the stored credential on purpose: CI and
+ * containers export MESHY_API_KEY and must not be silently overridden by
+ * whatever a developer once logged into on that machine.
+ *
+ * Fail-fast on a missing/placeholder credential — with the command that fixes
+ * it attached, not just a complaint.
+ */
+import { credentialsPath, resolveStoredCredential } from "./credentials.js";
+import { authRequiredError } from "./errors.js";
+import { setLogLevel } from "./logger.js";
+const PLACEHOLDER_KEYS = new Set(["", "YOUR_MESHY_API_KEY_HERE"]);
+function readNumber(name, fallback) {
+    const raw = process.env[name];
+    if (raw === undefined || raw === "")
+        return fallback;
+    const n = Number(raw);
+    if (!Number.isFinite(n) || n < 0) {
+        throw new Error(`${name} must be a non-negative number (got ${JSON.stringify(raw)})`);
+    }
+    return n;
+}
+function readLogLevel(fallback) {
+    const raw = (process.env.MESHY_LOG_LEVEL || "").toLowerCase();
+    if (!raw)
+        return fallback;
+    if (raw === "debug" || raw === "info" || raw === "warn" || raw === "error" || raw === "silent") {
+        return raw;
+    }
+    return fallback;
+}
+function stripTrail(s) {
+    return s.replace(/\/+$/, "");
+}
+export function loadConfig(overrides = {}) {
+    // Base URLs resolve first: they decide which credentials file applies
+    // (production vs. a staging override).
+    const baseUrlV1 = stripTrail(overrides.baseUrlV1 ?? process.env.MESHY_BASE_URL_V1 ?? "https://api.meshy.ai/openapi/v1");
+    const baseUrlV2 = stripTrail(overrides.baseUrlV2 ?? process.env.MESHY_BASE_URL_V2 ?? "https://api.meshy.ai/openapi/v2");
+    const credFile = credentialsPath(baseUrlV1);
+    const flagKey = overrides.apiKey?.trim() ?? "";
+    const envKey = process.env.MESHY_API_KEY?.trim() ?? "";
+    let apiKey = "";
+    let credentialSource = "flag";
+    let credentialProfile;
+    let credentialKind = "api_key";
+    if (!PLACEHOLDER_KEYS.has(flagKey)) {
+        apiKey = flagKey;
+        credentialSource = "flag";
+        credentialKind = "api_key";
+    }
+    else if (!PLACEHOLDER_KEYS.has(envKey)) {
+        apiKey = envKey;
+        credentialSource = "env";
+        credentialKind = "api_key";
+    }
+    else {
+        // A corrupt credentials file throws out of resolveStoredCredential rather
+        // than being swallowed into "not logged in" — see credentials.ts.
+        const stored = resolveStoredCredential(credFile);
+        const secret = stored?.apiKey ?? stored?.accessToken ?? "";
+        if (stored && !PLACEHOLDER_KEYS.has(secret)) {
+            apiKey = secret;
+            credentialSource = "file";
+            credentialProfile = stored.profile;
+            credentialKind = stored.kind;
+        }
+        else {
+            throw authRequiredError("No credentials found. Pass --api-key, export MESHY_API_KEY, or log in.");
+        }
+    }
+    const cfg = {
+        apiKey,
+        baseUrlV1,
+        baseUrlV2,
+        connectTimeoutMs: readNumber("MESHY_CONNECT_TIMEOUT_MS", 10_000),
+        readTimeoutMs: readNumber("MESHY_READ_TIMEOUT_MS", 120_000),
+        pollIntervalMs: readNumber("MESHY_POLL_INTERVAL_MS", 3_000),
+        logLevel: overrides.logLevel ?? readLogLevel("warn"),
+        credentialSource,
+        credentialProfile,
+        credentialsFile: credFile,
+        credentialKind,
+    };
+    setLogLevel(cfg.logLevel);
+    return cfg;
+}
+//# sourceMappingURL=config.js.map

package/dist/internal/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/internal/config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,eAAe,EAAE,uBAAuB,EAAuB,MAAM,kBAAkB,CAAC;AACjG,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAAE,WAAW,EAAiB,MAAM,aAAa,CAAC;AAEzD,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,CAAC,EAAE,EAAE,yBAAyB,CAAC,CAAC,CAAC;AAiClE,SAAS,UAAU,CAAC,IAAY,EAAE,QAAgB;IAChD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC9B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,EAAE;QAAE,OAAO,QAAQ,CAAC;IACrD,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IACtB,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,uCAAuC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACxF,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,YAAY,CAAC,QAAkB;IACtC,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IAC9D,IAAI,CAAC,GAAG;QAAE,OAAO,QAAQ,CAAC;IAC1B,IAAI,GAAG,KAAK,OAAO,IAAI,GAAG,KAAK,MAAM,IAAI,GAAG,KAAK,MAAM,IAAI,GAAG,KAAK,OAAO,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC/F,OAAO,GAAG,CAAC;IACb,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,UAAU,CAAC,CAAS;IAC3B,OAAO,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,YAA6B,EAAE;IACxD,sEAAsE;IACtE,uCAAuC;IACvC,MAAM,SAAS,GAAG,UAAU,CAC1B,SAAS,CAAC,SAAS,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,iCAAiC,CAC1F,CAAC;IACF,MAAM,SAAS,GAAG,UAAU,CAC1B,SAAS,CAAC,SAAS,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,iCAAiC,CAC1F,CAAC;IACF,MAAM,QAAQ,GAAG,eAAe,CAAC,SAAS,CAAC,CAAC;IAE5C,MAAM,OAAO,GAAG,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAC/C,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAEvD,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,IAAI,gBAAgB,GAAqB,MAAM,CAAC;IAChD,IAAI,iBAAqC,CAAC;IAC1C,IAAI,cAAc,GAAmB,SAAS,CAAC;IAE/C,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QACnC,MAAM,GAAG,OAAO,CAAC;QACjB,gBAAgB,GAAG,MAAM,CAAC;QAC1B,cAAc,GAAG,SAAS,CAAC;IAC7B,CAAC;SAAM,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QACzC,MAAM,GAAG,MAAM,CAAC;QAChB,gBAAgB,GAAG,KAAK,CAAC;QACzB,cAAc,GAAG,SAAS,CAAC;IAC7B,CAAC;SAAM,CAAC;QACN,0EAA0E;QAC1E,kEAAkE;QAClE,MAAM,MAAM,GAAG,uBAAuB,CAAC,QAAQ,CAAC,CAAC;QACjD,MAAM,MAAM,GAAG,MAAM,EAAE,MAAM,IAAI,MAAM,EAAE,WAAW,IAAI,EAAE,CAAC;QAC3D,IAAI,MAAM,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YAC5C,MAAM,GAAG,MAAM,CAAC;YAChB,gBAAgB,GAAG,MAAM,CAAC;YAC1B,iBAAiB,GAAG,MAAM,CAAC,OAAO,CAAC;YACnC,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC;QAC/B,CAAC;aAAM,CAAC;YACN,MAAM,iBAAiB,CACrB,wEAAwE,CACzE,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,GAAG,GAAgB;QACvB,MAAM;QACN,SAAS;QACT,SAAS;QACT,gBAAgB,EAAE,UAAU,CAAC,0BAA0B,EAAE,MAAM,CAAC;QAChE,aAAa,EAAE,UAAU,CAAC,uBAAuB,EAAE,OAAO,CAAC;QAC3D,cAAc,EAAE,UAAU,CAAC,wBAAwB,EAAE,KAAK,CAAC;QAC3D,QAAQ,EAAE,SAAS,CAAC,QAAQ,IAAI,YAAY,CAAC,MAAM,CAAC;QACpD,gBAAgB;QAChB,iBAAiB;QACjB,eAAe,EAAE,QAAQ;QACzB,cAAc;KACf,CAAC;IAEF,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC1B,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/internal/credentials.d.ts

@@ -0,0 +1,106 @@
+/**
+ * Credential store — the on-disk half of `meshy auth`.
+ *
+ * Layout: ~/.config/meshy/credentials.json, one file holding named profiles so
+ * a user can keep several accounts side by side. `~/.config` is used on every
+ * platform (including macOS, where the native spot would be Application
+ * Support) because the file is meant to be scriptable and dotfile-friendly.
+ *
+ * Non-production hosts get their own file — credentials.dev.json — so pointing
+ * MESHY_BASE_URL_V1 at staging cannot overwrite the production login, and
+ * logging out of one leaves the other alone.
+ *
+ * Every mutation runs under a cross-process lock and lands via a temp file +
+ * rename, because several agents driving this CLI in parallel is the normal
+ * case, not the exception.
+ *
+ * This module deliberately knows nothing about config.ts — it takes the base
+ * URL it needs as an argument, so config can depend on it and not vice versa.
+ */
+export declare const AUTH_VERSION = 1;
+export declare const DEFAULT_PROFILE = "default";
+export declare const PROD_API_HOST = "api.meshy.ai";
+export type CredentialKind = "api_key" | "oauth";
+export interface CredentialProfile {
+    kind: CredentialKind;
+    /** Present when kind === "api_key". */
+    api_key?: string;
+    /** Present when kind === "oauth" (CLI-4 writes these; nothing reads them yet). */
+    access_token?: string;
+    refresh_token?: string;
+    /** Unix epoch millis. */
+    expires_at?: number;
+    user_id?: string;
+    created_at?: number;
+}
+export interface CredentialsFile {
+    auth_version: number;
+    active_profile: string;
+    profiles: Record<string, CredentialProfile>;
+}
+/** Thrown when the file exists but cannot be understood — never on a missing file. */
+export declare class CredentialsFileError extends Error {
+    readonly path: string;
+    constructor(path: string, detail: string);
+}
+/** Root config directory. MESHY_CONFIG_DIR wins when set. */
+export declare function configDir(env?: NodeJS.ProcessEnv): string;
+/**
+ * True when the given v1 base URL points somewhere other than production.
+ * An unparseable URL counts as non-production: a typo should not be able to
+ * touch the production credential file.
+ */
+export declare function isNonProdBaseUrl(baseUrlV1: string | undefined): boolean;
+/**
+ * Resolves the credentials file path.
+ *
+ * MESHY_CREDENTIALS_PATH is absolute and wins over everything, including the
+ * prod/dev split — a caller that names a file gets that exact file.
+ */
+export declare function credentialsPath(baseUrlV1?: string, env?: NodeJS.ProcessEnv): string;
+/**
+ * Runs `fn` while holding an exclusive lock keyed to `file`.
+ *
+ * O_EXCL creation is the atomic primitive here — `flock` is not exposed by
+ * Node's fs module. A lock whose mtime is older than LOCK_STALE_MS is treated
+ * as abandoned and broken, so a killed process cannot wedge the CLI forever.
+ */
+export declare function withCredentialsLock<T>(file: string, fn: () => T): T;
+/**
+ * Reads the credentials file. Returns null when it does not exist — that is
+ * "not logged in", not an error. A file that exists but is unreadable throws
+ * CredentialsFileError so the user hears about it instead of silently falling
+ * back to "no credentials".
+ */
+export declare function readCredentials(file: string): CredentialsFile | null;
+/**
+ * Writes the file with 0600 via a temp file + rename, so a crash mid-write
+ * cannot leave a half-written credentials file behind. Callers that mutate
+ * existing state must hold the lock; see updateCredentials.
+ */
+export declare function writeCredentials(state: CredentialsFile, file: string): void;
+/** Read-modify-write under the lock. The mutator may return a new state or mutate in place. */
+export declare function updateCredentials(file: string, mutate: (state: CredentialsFile) => CredentialsFile | void): CredentialsFile;
+export declare function saveProfile(file: string, name: string, profile: CredentialProfile, opts?: {
+    makeActive?: boolean;
+}): CredentialsFile;
+/** Removes one profile. Returns false when it was not there to begin with. */
+export declare function removeProfile(file: string, name: string): boolean;
+export declare function setActiveProfile(file: string, name: string): void;
+/** Deletes the whole file. Returns false when there was nothing to delete. */
+export declare function deleteCredentialsFile(file: string): boolean;
+export interface ResolvedStoredCredential {
+    profile: string;
+    kind: CredentialKind;
+    apiKey?: string;
+    accessToken?: string;
+    expiresAt?: number;
+}
+/**
+ * Returns the usable secret from the active profile, or null when there is no
+ * file, no active profile, or the profile carries nothing usable.
+ */
+export declare function resolveStoredCredential(file: string): ResolvedStoredCredential | null;
+/** `msy_abcd…wxyz` — enough to tell two keys apart, not enough to use one. */
+export declare function maskSecret(secret: string): string;
+//# sourceMappingURL=credentials.d.ts.map

package/dist/internal/credentials.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"credentials.d.ts","sourceRoot":"","sources":["../../src/internal/credentials.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAgBH,eAAO,MAAM,YAAY,IAAI,CAAC;AAC9B,eAAO,MAAM,eAAe,YAAY,CAAC;AACzC,eAAO,MAAM,aAAa,iBAAiB,CAAC;AAM5C,MAAM,MAAM,cAAc,GAAG,SAAS,GAAG,OAAO,CAAC;AAEjD,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,cAAc,CAAC;IACrB,uCAAuC;IACvC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,kFAAkF;IAClF,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,yBAAyB;IACzB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,eAAe;IAC9B,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,MAAM,CAAC;IACvB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;CAC7C;AAED,sFAAsF;AACtF,qBAAa,oBAAqB,SAAQ,KAAK;IAC7C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;gBACV,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;CAKzC;AAMD,6DAA6D;AAC7D,wBAAgB,SAAS,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,CAItE;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAOvE;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAC7B,SAAS,CAAC,EAAE,MAAM,EAClB,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,MAAM,CAKR;AAoBD;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,CAuCnE;AAUD;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,eAAe,GAAG,IAAI,CA6BpE;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,eAAe,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAiB3E;AAED,+FAA+F;AAC/F,wBAAgB,iBAAiB,CAC/B,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,CAAC,KAAK,EAAE,eAAe,KAAK,eAAe,GAAG,IAAI,GACzD,eAAe,CAOjB;AAMD,wBAAgB,WAAW,CACzB,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,iBAAiB,EAC1B,IAAI,GAAE;IAAE,UAAU,CAAC,EAAE,OAAO,CAAA;CAAO,GAClC,eAAe,CAKjB;AAED,8EAA8E;AAC9E,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAYjE;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAOjE;AAED,8EAA8E;AAC9E,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAU3D;AAED,MAAM,WAAW,wBAAwB;IACvC,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,cAAc,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;GAGG;AACH,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,GAAG,wBAAwB,GAAG,IAAI,CAiBrF;AAED,8EAA8E;AAC9E,wBAAgB,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAGjD"}