@michinarai/cli 0.0.0-stage → 0.1.0

package/dist/auth/oauth.d.ts

@@ -0,0 +1,52 @@
+import { NaraiError } from "../lib/errors.js";
+/** What a developer's session may do: the dev scopes of the registry (mo-narai-sdk schema/scopes.json). */
+export declare const SCOPES: readonly ["dev:tools.read", "dev:tools.write", "dev:versions.upload", "dev:launch"];
+export declare const clientId: (naraiUrl: string) => string;
+export declare const resource: (naraiUrl: string) => string;
+export interface ServerMetadata {
+    issuer: string;
+    authorization_endpoint: string;
+    token_endpoint: string;
+    revocation_endpoint: string;
+    iss_parameter: boolean;
+}
+export declare class OAuthError extends NaraiError {
+    readonly error: string;
+    constructor(error: string, description: string, exitCode?: number);
+}
+/** RFC 8414. The issuer is Narai's own address byte for byte, and every endpoint is on it: a document that points
+ *  the code or the refresh token anywhere else is refused, not followed. */
+export declare function discover(naraiUrl: string): Promise<ServerMetadata>;
+export interface Pkce {
+    verifier: string;
+    challenge: string;
+}
+export declare function pkce(): Pkce;
+export declare const newState: () => string;
+export declare function authorizationUrl(meta: ServerMetadata, p: {
+    naraiUrl: string;
+    redirectUri: string;
+    challenge: string;
+    state: string;
+}): string;
+export interface TokenSet {
+    accessToken: string;
+    refreshToken: string;
+    expiresIn: number;
+    scopes: string[];
+}
+export declare function exchangeCode(meta: ServerMetadata, p: {
+    naraiUrl: string;
+    code: string;
+    verifier: string;
+    redirectUri: string;
+}): Promise<TokenSet>;
+/** Rotation: the answer carries a new refresh token and the old one is dead; store the new one before anything else. */
+export declare function refresh(meta: ServerMetadata, p: {
+    naraiUrl: string;
+    refreshToken: string;
+}): Promise<TokenSet>;
+export declare function revoke(meta: ServerMetadata, p: {
+    naraiUrl: string;
+    token: string;
+}): Promise<void>;

package/dist/auth/oauth.js

@@ -0,0 +1,101 @@
+// Narai's OAuth 2.1 authorization server, as a public native client (RFC 8252): authorization code + PKCE (S256) +
+// state, the response's issuer checked (RFC 9207), tokens for the tools API only (RFC 8707), refresh tokens that
+// rotate on every use, revocation on sign-out (RFC 7009). The client is identified by its metadata document (CIMD).
+import { createHash, randomBytes } from "node:crypto";
+import { NaraiError } from "../lib/errors.js";
+import { send } from "../lib/http.js";
+/** What a developer's session may do: the dev scopes of the registry (mo-narai-sdk schema/scopes.json). */
+export const SCOPES = ["dev:tools.read", "dev:tools.write", "dev:versions.upload", "dev:launch"];
+export const clientId = (naraiUrl) => `${naraiUrl}/oauth/clients/narai-cli.json`;
+export const resource = (naraiUrl) => `${naraiUrl}/api/tools`;
+export class OAuthError extends NaraiError {
+    error;
+    constructor(error, description, exitCode = 3) {
+        super(`sign-in failed: ${error}${description ? ` (${description})` : ""}`, `oauth_${error}`, exitCode);
+        this.error = error;
+    }
+}
+/** RFC 8414. The issuer is Narai's own address byte for byte, and every endpoint is on it: a document that points
+ *  the code or the refresh token anywhere else is refused, not followed. */
+export async function discover(naraiUrl) {
+    const response = await send(`${naraiUrl}/.well-known/oauth-authorization-server`, { headers: { accept: "application/json" } });
+    if (!response.ok)
+        throw new NaraiError(`${naraiUrl} has no sign-in (HTTP ${response.status})`, "oauth_metadata_missing");
+    const doc = (await response.json().catch(() => ({})));
+    if (doc["issuer"] !== naraiUrl)
+        throw new NaraiError(`${naraiUrl} names another issuer; not signing in`, "oauth_issuer_mismatch");
+    const endpoint = (field) => {
+        const value = doc[field];
+        if (typeof value !== "string" || new URL(value).origin !== naraiUrl) {
+            throw new NaraiError(`${naraiUrl}'s ${field} is missing or not on ${naraiUrl}`, "oauth_metadata_invalid");
+        }
+        return value;
+    };
+    const methods = doc["code_challenge_methods_supported"];
+    if (!Array.isArray(methods) || !methods.includes("S256"))
+        throw new NaraiError(`${naraiUrl} doesn't do PKCE S256`, "oauth_metadata_invalid");
+    return {
+        issuer: naraiUrl,
+        authorization_endpoint: endpoint("authorization_endpoint"),
+        token_endpoint: endpoint("token_endpoint"),
+        revocation_endpoint: endpoint("revocation_endpoint"),
+        iss_parameter: doc["authorization_response_iss_parameter_supported"] === true,
+    };
+}
+export function pkce() {
+    const verifier = randomBytes(32).toString("base64url");
+    return { verifier, challenge: createHash("sha256").update(verifier).digest("base64url") };
+}
+export const newState = () => randomBytes(32).toString("base64url");
+export function authorizationUrl(meta, p) {
+    const url = new URL(meta.authorization_endpoint);
+    url.search = new URLSearchParams({
+        response_type: "code",
+        client_id: clientId(p.naraiUrl),
+        redirect_uri: p.redirectUri,
+        code_challenge: p.challenge,
+        code_challenge_method: "S256",
+        scope: SCOPES.join(" "),
+        state: p.state,
+        resource: resource(p.naraiUrl),
+    }).toString();
+    return url.toString();
+}
+async function tokenRequest(meta, form) {
+    const response = await send(meta.token_endpoint, {
+        method: "POST",
+        headers: { "content-type": "application/x-www-form-urlencoded", accept: "application/json" },
+        body: new URLSearchParams(form).toString(),
+    });
+    const body = (await response.json().catch(() => null));
+    if (!response.ok) {
+        const error = typeof body?.["error"] === "string" ? body["error"] : `http_${response.status}`;
+        throw new OAuthError(error, typeof body?.["error_description"] === "string" ? body["error_description"] : "");
+    }
+    if (typeof body?.["access_token"] !== "string" || typeof body["refresh_token"] !== "string" || typeof body["expires_in"] !== "number"
+        || String(body["token_type"]).toLowerCase() !== "bearer") {
+        throw new NaraiError("the token endpoint answered without a bearer token and a refresh token", "oauth_bad_response");
+    }
+    const scopes = typeof body["scope"] === "string" ? body["scope"].split(" ").filter(Boolean) : [];
+    return { accessToken: body["access_token"], refreshToken: body["refresh_token"], expiresIn: body["expires_in"], scopes };
+}
+export function exchangeCode(meta, p) {
+    return tokenRequest(meta, {
+        grant_type: "authorization_code", client_id: clientId(p.naraiUrl), code: p.code, code_verifier: p.verifier,
+        redirect_uri: p.redirectUri, resource: resource(p.naraiUrl),
+    });
+}
+/** Rotation: the answer carries a new refresh token and the old one is dead; store the new one before anything else. */
+export function refresh(meta, p) {
+    return tokenRequest(meta, { grant_type: "refresh_token", client_id: clientId(p.naraiUrl), refresh_token: p.refreshToken, resource: resource(p.naraiUrl) });
+}
+export async function revoke(meta, p) {
+    const response = await send(meta.revocation_endpoint, {
+        method: "POST",
+        headers: { "content-type": "application/x-www-form-urlencoded" },
+        body: new URLSearchParams({ token: p.token, token_type_hint: "refresh_token", client_id: clientId(p.naraiUrl) }).toString(),
+    });
+    if (!response.ok)
+        throw new NaraiError(`Narai didn't revoke the session (HTTP ${response.status})`, "oauth_revoke_failed");
+}
+//# sourceMappingURL=oauth.js.map

package/dist/auth/oauth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth.js","sourceRoot":"","sources":["../../src/auth/oauth.ts"],"names":[],"mappings":"AAAA,mHAAmH;AACnH,iHAAiH;AACjH,oHAAoH;AAEpH,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAEtC,2GAA2G;AAC3G,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,gBAAgB,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,YAAY,CAAU,CAAC;AAE1G,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,QAAgB,EAAU,EAAE,CAAC,GAAG,QAAQ,+BAA+B,CAAC;AACjG,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,QAAgB,EAAU,EAAE,CAAC,GAAG,QAAQ,YAAY,CAAC;AAU9E,MAAM,OAAO,UAAW,SAAQ,UAAU;IACnB;IAArB,YAAqB,KAAa,EAAE,WAAmB,EAAE,QAAQ,GAAG,CAAC;QACnE,KAAK,CAAC,mBAAmB,KAAK,GAAG,WAAW,CAAC,CAAC,CAAC,KAAK,WAAW,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,SAAS,KAAK,EAAE,EAAE,QAAQ,CAAC,CAAC;QADpF,UAAK,GAAL,KAAK,CAAQ;IAElC,CAAC;CACF;AAED;4EAC4E;AAC5E,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,QAAgB;IAC7C,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,GAAG,QAAQ,yCAAyC,EAAE,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE,EAAE,CAAC,CAAC;IAC/H,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,MAAM,IAAI,UAAU,CAAC,GAAG,QAAQ,yBAAyB,QAAQ,CAAC,MAAM,GAAG,EAAE,wBAAwB,CAAC,CAAC;IACzH,MAAM,GAAG,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAA4B,CAAC;IACjF,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,QAAQ;QAAE,MAAM,IAAI,UAAU,CAAC,GAAG,QAAQ,uCAAuC,EAAE,uBAAuB,CAAC,CAAC;IAClI,MAAM,QAAQ,GAAG,CAAC,KAAa,EAAU,EAAE;QACzC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC;QACzB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YACpE,MAAM,IAAI,UAAU,CAAC,GAAG,QAAQ,MAAM,KAAK,yBAAyB,QAAQ,EAAE,EAAE,wBAAwB,CAAC,CAAC;QAC5G,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;IACF,MAAM,OAAO,GAAG,GAAG,CAAC,kCAAkC,CAAC,CAAC;IACxD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,UAAU,CAAC,GAAG,QAAQ,uBAAuB,EAAE,wBAAwB,CAAC,CAAC;IAC7I,OAAO;QACL,MAAM,EAAE,QAAQ;QAChB,sBAAsB,EAAE,QAAQ,CAAC,wBAAwB,CAAC;QAC1D,cAAc,EAAE,QAAQ,CAAC,gBAAgB,CAAC;QAC1C,mBAAmB,EAAE,QAAQ,CAAC,qBAAqB,CAAC;QACpD,aAAa,EAAE,GAAG,CAAC,gDAAgD,CAAC,KAAK,IAAI;KAC9E,CAAC;AACJ,CAAC;AAID,MAAM,UAAU,IAAI;IAClB,MAAM,QAAQ,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACvD,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC;AAC5F,CAAC;AAED,MAAM,CAAC,MAAM,QAAQ,GAAG,GAAW,EAAE,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAE5E,MAAM,UAAU,gBAAgB,CAAC,IAAoB,EAAE,CAA8E;IACnI,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;IACjD,GAAG,CAAC,MAAM,GAAG,IAAI,eAAe,CAAC;QAC/B,aAAa,EAAE,MAAM;QACrB,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC;QAC/B,YAAY,EAAE,CAAC,CAAC,WAAW;QAC3B,cAAc,EAAE,CAAC,CAAC,SAAS;QAC3B,qBAAqB,EAAE,MAAM;QAC7B,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;QACvB,KAAK,EAAE,CAAC,CAAC,KAAK;QACd,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC;KAC/B,CAAC,CAAC,QAAQ,EAAE,CAAC;IACd,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;AACxB,CAAC;AAID,KAAK,UAAU,YAAY,CAAC,IAAoB,EAAE,IAA4B;IAC5E,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE;QAC/C,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE,MAAM,EAAE,kBAAkB,EAAE;QAC5F,IAAI,EAAE,IAAI,eAAe,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;KAC3C,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAmC,CAAC;IACzF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,KAAK,GAAG,OAAO,IAAI,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,QAAQ,CAAC,MAAM,EAAE,CAAC;QAC9F,MAAM,IAAI,UAAU,CAAC,KAAK,EAAE,OAAO,IAAI,EAAE,CAAC,mBAAmB,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAChH,CAAC;IACD,IAAI,OAAO,IAAI,EAAE,CAAC,cAAc,CAAC,KAAK,QAAQ,IAAI,OAAO,IAAI,CAAC,eAAe,CAAC,KAAK,QAAQ,IAAI,OAAO,IAAI,CAAC,YAAY,CAAC,KAAK,QAAQ;WAChI,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,QAAQ,EAAE,CAAC;QAC3D,MAAM,IAAI,UAAU,CAAC,wEAAwE,EAAE,oBAAoB,CAAC,CAAC;IACvH,CAAC;IACD,MAAM,MAAM,GAAG,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACjG,OAAO,EAAE,WAAW,EAAE,IAAI,CAAC,cAAc,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,eAAe,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;AAC3H,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,IAAoB,EAAE,CAA4E;IAC7H,OAAO,YAAY,CAAC,IAAI,EAAE;QACxB,UAAU,EAAE,oBAAoB,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,aAAa,EAAE,CAAC,CAAC,QAAQ;QAC1G,YAAY,EAAE,CAAC,CAAC,WAAW,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC;KAC5D,CAAC,CAAC;AACL,CAAC;AAED,wHAAwH;AACxH,MAAM,UAAU,OAAO,CAAC,IAAoB,EAAE,CAA6C;IACzF,OAAO,YAAY,CAAC,IAAI,EAAE,EAAE,UAAU,EAAE,eAAe,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,YAAY,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;AAC7J,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,IAAoB,EAAE,CAAsC;IACvF,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE;QACpD,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;QAChE,IAAI,EAAE,IAAI,eAAe,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,eAAe,EAAE,eAAe,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;KAC5H,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,MAAM,IAAI,UAAU,CAAC,yCAAyC,QAAQ,CAAC,MAAM,GAAG,EAAE,qBAAqB,CAAC,CAAC;AAC7H,CAAC"}

package/dist/auth/session.d.ts

@@ -0,0 +1,7 @@
+/** Where the lock that serializes a refresh lives: one per Narai host, shared by every `narai` on this machine. */
+export declare const lockFile: (naraiUrl: string) => string;
+/** The bearer token for a call: NARAI_TOKEN when set (a CI token, never stored), else an access token from the stored
+ *  session's refresh token. The refresh rotates it, so it runs under the lock and stores the new one first. */
+export declare function bearer(naraiUrl: string): Promise<string>;
+/** For tests: forget the access tokens held in this process. */
+export declare const forgetAccessTokens: () => void;

package/dist/auth/session.js

@@ -0,0 +1,41 @@
+import { homedir } from "node:os";
+import { join } from "node:path";
+import { deps } from "../lib/deps.js";
+import { AuthError } from "../lib/errors.js";
+import { withFileLock } from "../lib/lock.js";
+import { discover, OAuthError, refresh } from "./oauth.js";
+/** Where the lock that serializes a refresh lives: one per Narai host, shared by every `narai` on this machine. */
+export const lockFile = (naraiUrl) => join(process.env["XDG_STATE_HOME"] ?? join(homedir(), ".local", "state"), "narai", `${new URL(naraiUrl).host}.lock`);
+const fresh = new Map();
+/** The bearer token for a call: NARAI_TOKEN when set (a CI token, never stored), else an access token from the stored
+ *  session's refresh token. The refresh rotates it, so it runs under the lock and stores the new one first. */
+export async function bearer(naraiUrl) {
+    const env = process.env["NARAI_TOKEN"];
+    if (env)
+        return env;
+    const cached = fresh.get(naraiUrl);
+    if (cached && cached.until > deps.now())
+        return cached.token;
+    return withFileLock(lockFile(naraiUrl), async () => {
+        const stored = await deps.credentials.get(naraiUrl);
+        if (!stored)
+            throw new AuthError(`not signed in to ${new URL(naraiUrl).host}: run narai login`);
+        const meta = await discover(naraiUrl);
+        try {
+            const tokens = await refresh(meta, { naraiUrl, refreshToken: stored });
+            await deps.credentials.set(naraiUrl, tokens.refreshToken);
+            fresh.set(naraiUrl, { token: tokens.accessToken, until: deps.now() + Math.max(0, tokens.expiresIn - 30) * 1000 });
+            return tokens.accessToken;
+        }
+        catch (error) {
+            if (error instanceof OAuthError && error.error === "invalid_grant") {
+                await deps.credentials.delete(naraiUrl);
+                throw new AuthError("the session has ended (signed out elsewhere, or expired): run narai login", "session_ended");
+            }
+            throw error;
+        }
+    });
+}
+/** For tests: forget the access tokens held in this process. */
+export const forgetAccessTokens = () => fresh.clear();
+//# sourceMappingURL=session.js.map

package/dist/auth/session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.js","sourceRoot":"","sources":["../../src/auth/session.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AACtC,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAE3D,mHAAmH;AACnH,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,QAAgB,EAAU,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,EAAE,OAAO,EAAE,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC;AAE3K,MAAM,KAAK,GAAG,IAAI,GAAG,EAA4C,CAAC;AAElE;+GAC+G;AAC/G,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,QAAgB;IAC3C,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IACvC,IAAI,GAAG;QAAE,OAAO,GAAG,CAAC;IACpB,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACnC,IAAI,MAAM,IAAI,MAAM,CAAC,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE;QAAE,OAAO,MAAM,CAAC,KAAK,CAAC;IAC7D,OAAO,YAAY,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,KAAK,IAAI,EAAE;QACjD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACpD,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,SAAS,CAAC,oBAAoB,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,mBAAmB,CAAC,CAAC;QAChG,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACtC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC,CAAC;YACvE,MAAM,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC;YAC1D,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,WAAW,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,SAAS,GAAG,EAAE,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC;YAClH,OAAO,MAAM,CAAC,WAAW,CAAC;QAC5B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,UAAU,IAAI,KAAK,CAAC,KAAK,KAAK,eAAe,EAAE,CAAC;gBACnE,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;gBACxC,MAAM,IAAI,SAAS,CAAC,2EAA2E,EAAE,eAAe,CAAC,CAAC;YACpH,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,gEAAgE;AAChE,MAAM,CAAC,MAAM,kBAAkB,GAAG,GAAS,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC"}

package/dist/base-command.d.ts

@@ -0,0 +1,29 @@
+import { Command, type Interfaces } from "@oclif/core";
+import { Output } from "./lib/output.js";
+export type FlagsOf<T extends typeof Command> = Interfaces.InferredFlags<(typeof NaraiCommand)["baseFlags"] & T["flags"]>;
+export type ArgsOf<T extends typeof Command> = Interfaces.InferredArgs<T["args"]>;
+/** Narai's own address: the beta, where Narai runs today (the developer beta included). */
+export declare const NARAI_URL = "https://beta.michinar.ai";
+/** Every command: the global flags, one output (results to stdout, progress to stderr), and every failure mapped to
+ *  the exit codes: 0 ok, 1 error, 2 usage, 3 auth. */
+export declare abstract class NaraiCommand<T extends typeof Command = typeof Command> extends Command {
+    static baseFlags: {
+        json: Interfaces.BooleanFlag<boolean>;
+        yes: Interfaces.BooleanFlag<boolean>;
+        "no-input": Interfaces.BooleanFlag<boolean>;
+        "narai-url": Interfaces.OptionFlag<string | undefined, Interfaces.CustomOptions>;
+    };
+    protected flags: FlagsOf<T>;
+    protected args: ArgsOf<T>;
+    protected out: Output;
+    init(): Promise<void>;
+    /** The Narai this command talks to: `--narai-url`, else NARAI_URL, else Narai. No trailing slash. */
+    protected get naraiUrl(): string;
+    /** Prompts only with a person at the keyboard. */
+    protected get interactive(): boolean;
+    /** Confirm a change: `--yes` answers; with no one to ask, fail with what would have been asked. */
+    protected confirm(question: string, details?: Record<string, unknown>): Promise<void>;
+    catch(error: Error & {
+        exitCode?: number;
+    }): Promise<never>;
+}

package/dist/base-command.js

@@ -0,0 +1,65 @@
+import { Command, Errors, Flags } from "@oclif/core";
+import { deps } from "./lib/deps.js";
+import { ExitCode, NaraiError, NeedsInputError } from "./lib/errors.js";
+import { Output } from "./lib/output.js";
+/** Narai's own address: the beta, where Narai runs today (the developer beta included). */
+export const NARAI_URL = "https://beta.michinar.ai";
+/** Every command: the global flags, one output (results to stdout, progress to stderr), and every failure mapped to
+ *  the exit codes: 0 ok, 1 error, 2 usage, 3 auth. */
+export class NaraiCommand extends Command {
+    static baseFlags = {
+        json: Flags.boolean({ description: "Print the result as JSON (the default when stdout isn't a terminal).", helpGroup: "GLOBAL" }),
+        yes: Flags.boolean({ description: "Answer yes to every confirmation.", helpGroup: "GLOBAL" }),
+        "no-input": Flags.boolean({ description: "Never prompt: a needed confirmation fails instead.", helpGroup: "GLOBAL" }),
+        "narai-url": Flags.string({ description: `Narai's address (default ${NARAI_URL}; also NARAI_URL).`, helpGroup: "GLOBAL" }),
+    };
+    flags;
+    args;
+    out;
+    async init() {
+        await super.init();
+        const ctor = this.ctor;
+        const { args, flags } = await this.parse({ args: ctor.args, baseFlags: ctor.baseFlags, flags: ctor.flags, strict: ctor.strict });
+        this.flags = flags;
+        this.args = args;
+        this.out = new Output({ json: this.flags.json || !deps.stdoutIsTTY() });
+    }
+    /** The Narai this command talks to: `--narai-url`, else NARAI_URL, else Narai. No trailing slash. */
+    get naraiUrl() {
+        const url = new URL(this.flags["narai-url"] ?? process.env["NARAI_URL"] ?? NARAI_URL);
+        const local = url.protocol === "http:" && ["localhost", "127.0.0.1"].includes(url.hostname);
+        if (url.protocol !== "https:" && !local)
+            throw new NaraiError(`${url.origin} isn't https`, "insecure_url");
+        return url.origin;
+    }
+    /** Prompts only with a person at the keyboard. */
+    get interactive() {
+        return !this.flags["no-input"] && deps.stdinIsTTY();
+    }
+    /** Confirm a change: `--yes` answers; with no one to ask, fail with what would have been asked. */
+    async confirm(question, details = {}) {
+        if (this.flags.yes)
+            return;
+        if (!this.interactive)
+            throw new NeedsInputError(`${question}: needs confirmation; run again with --yes`, details);
+        if (!(await deps.confirm(`${question}?`)))
+            throw new NaraiError("cancelled", "cancelled");
+    }
+    async catch(error) {
+        if (error instanceof Errors.ExitError)
+            throw error;
+        const out = this.out ?? new Output({ json: this.argv.includes("--json") });
+        if (error instanceof NaraiError) {
+            out.error(error.code, error.message, error.details);
+            this.exit(error.exitCode);
+        }
+        if (error instanceof Errors.CLIError) {
+            // flag and argument parsing
+            out.error("usage", error.message);
+            this.exit(ExitCode.usage);
+        }
+        out.error("unexpected", error.message);
+        this.exit(ExitCode.error);
+    }
+}
+//# sourceMappingURL=base-command.js.map

package/dist/base-command.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"base-command.js","sourceRoot":"","sources":["../src/base-command.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAmB,MAAM,aAAa,CAAC;AACtE,OAAO,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;AACrC,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AACxE,OAAO,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAKzC,2FAA2F;AAC3F,MAAM,CAAC,MAAM,SAAS,GAAG,0BAA0B,CAAC;AAEpD;sDACsD;AACtD,MAAM,OAAgB,YAAwD,SAAQ,OAAO;IAC3F,MAAM,CAAU,SAAS,GAAG;QAC1B,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,sEAAsE,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;QACjI,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,mCAAmC,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;QAC7F,UAAU,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,oDAAoD,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;QACrH,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,4BAA4B,SAAS,oBAAoB,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;KAC3H,CAAC;IAEQ,KAAK,CAAc;IACnB,IAAI,CAAa;IACjB,GAAG,CAAU;IAEd,KAAK,CAAC,IAAI;QACjB,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,MAAM,IAAI,GAAG,IAAI,CAAC,IAA2B,CAAC;QAC9C,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QACjI,IAAI,CAAC,KAAK,GAAG,KAAmB,CAAC;QACjC,IAAI,CAAC,IAAI,GAAG,IAAiB,CAAC;QAC9B,IAAI,CAAC,GAAG,GAAG,IAAI,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IAC1E,CAAC;IAED,qGAAqG;IACrG,IAAc,QAAQ;QACpB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,SAAS,CAAC,CAAC;QACtF,MAAM,KAAK,GAAG,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC5F,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,UAAU,CAAC,GAAG,GAAG,CAAC,MAAM,cAAc,EAAE,cAAc,CAAC,CAAC;QAC3G,OAAO,GAAG,CAAC,MAAM,CAAC;IACpB,CAAC;IAED,kDAAkD;IAClD,IAAc,WAAW;QACvB,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;IACtD,CAAC;IAED,mGAAmG;IACzF,KAAK,CAAC,OAAO,CAAC,QAAgB,EAAE,UAAmC,EAAE;QAC7E,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG;YAAE,OAAO;QAC3B,IAAI,CAAC,IAAI,CAAC,WAAW;YAAE,MAAM,IAAI,eAAe,CAAC,GAAG,QAAQ,4CAA4C,EAAE,OAAO,CAAC,CAAC;QACnH,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,QAAQ,GAAG,CAAC,CAAC;YAAE,MAAM,IAAI,UAAU,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;IAC5F,CAAC;IAEQ,KAAK,CAAC,KAAK,CAAC,KAAoC;QACvD,IAAI,KAAK,YAAY,MAAM,CAAC,SAAS;YAAE,MAAM,KAAK,CAAC;QACnD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAC3E,IAAI,KAAK,YAAY,UAAU,EAAE,CAAC;YAChC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;YACpD,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC5B,CAAC;QACD,IAAI,KAAK,YAAY,MAAM,CAAC,QAAQ,EAAE,CAAC;YACrC,4BAA4B;YAC5B,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;YAClC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC5B,CAAC;QACD,GAAG,CAAC,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QACvC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC5B,CAAC"}

package/dist/commands/build.d.ts

@@ -0,0 +1,9 @@
+import { NaraiCommand } from "../base-command.js";
+export default class Build extends NaraiCommand<typeof Build> {
+    static summary: string;
+    static description: string;
+    static flags: {
+        dir: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
+    };
+    run(): Promise<void>;
+}

package/dist/commands/build.js

@@ -0,0 +1,34 @@
+import { stat, writeFile } from "node:fs/promises";
+import { join, resolve } from "node:path";
+import { Flags } from "@oclif/core";
+import { manifestProblems } from "@michinarai/sdk";
+import { NaraiCommand } from "../base-command.js";
+import { bundleDigest, digestFiles } from "../lib/digest.js";
+import { NaraiError } from "../lib/errors.js";
+import { MANIFEST, checkedManifest, toolRoot } from "../lib/project.js";
+export default class Build extends NaraiCommand {
+    static summary = "Seal a release: every built file with its sha256, and the bundle digest, in the release's manifest.";
+    static description = `Run after the tool's own build. Writes <dir>/${MANIFEST}: the manifest with \`files\` (sorted by path) and \`bundle_digest\`, which Narai checks an upload against.`;
+    static flags = {
+        dir: Flags.string({ description: "The tool's built files.", default: "dist" }),
+    };
+    async run() {
+        const root = await toolRoot(process.cwd());
+        const manifest = await checkedManifest(root);
+        const dir = resolve(root, this.flags.dir);
+        if (!(await stat(dir).catch(() => null))?.isDirectory()) {
+            throw new NaraiError(`${this.flags.dir}/ isn't there: build the tool first`, "no_build");
+        }
+        const files = await digestFiles(dir);
+        if (files.length === 0)
+            throw new NaraiError(`${this.flags.dir}/ is empty`, "no_build");
+        const release = { ...manifest, files, bundle_digest: bundleDigest(files) };
+        const problems = manifestProblems(release);
+        if (problems.length)
+            throw new NaraiError("the release doesn't match the contract", "release_invalid", 1, { problems });
+        await writeFile(join(dir, MANIFEST), `${JSON.stringify(release, null, 2)}\n`);
+        const bytes = files.reduce((n, f) => n + f.size, 0);
+        this.out.result({ id: manifest.id, version: manifest.version, files: files.length, bytes, bundle_digest: release.bundle_digest, manifest: join(this.flags.dir, MANIFEST) }, () => [`${manifest.id} ${manifest.version}: ${files.length} files, ${bytes} bytes`, release.bundle_digest]);
+    }
+}
+//# sourceMappingURL=build.js.map

package/dist/commands/build.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"build.js","sourceRoot":"","sources":["../../src/commands/build.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AACpC,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC7D,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAExE,MAAM,CAAC,OAAO,OAAO,KAAM,SAAQ,YAA0B;IAC3D,MAAM,CAAU,OAAO,GAAG,qGAAqG,CAAC;IAChI,MAAM,CAAU,WAAW,GAAG,gDAAgD,QAAQ,6GAA6G,CAAC;IACpM,MAAM,CAAU,KAAK,GAAG;QACtB,GAAG,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,yBAAyB,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;KAC/E,CAAC;IAEF,KAAK,CAAC,GAAG;QACP,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;QAC3C,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,CAAC;QAC7C,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC1C,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,EAAE,WAAW,EAAE,EAAE,CAAC;YACxD,MAAM,IAAI,UAAU,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,qCAAqC,EAAE,UAAU,CAAC,CAAC;QAC3F,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,IAAI,UAAU,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,YAAY,EAAE,UAAU,CAAC,CAAC;QACxF,MAAM,OAAO,GAAG,EAAE,GAAG,QAAQ,EAAE,KAAK,EAAE,aAAa,EAAE,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3E,MAAM,QAAQ,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;QAC3C,IAAI,QAAQ,CAAC,MAAM;YAAE,MAAM,IAAI,UAAU,CAAC,wCAAwC,EAAE,iBAAiB,EAAE,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;QACxH,MAAM,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;QAC9E,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QACpD,IAAI,CAAC,GAAG,CAAC,MAAM,CACb,EAAE,EAAE,EAAE,QAAQ,CAAC,EAAE,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,QAAQ,CAAC,EAAE,EAC1J,GAAG,EAAE,CAAC,CAAC,GAAG,QAAQ,CAAC,EAAE,IAAI,QAAQ,CAAC,OAAO,KAAK,KAAK,CAAC,MAAM,WAAW,KAAK,QAAQ,EAAE,OAAO,CAAC,aAAa,CAAC,CAC3G,CAAC;IACJ,CAAC"}

package/dist/commands/dev.d.ts

@@ -0,0 +1,14 @@
+import { NaraiCommand } from "../base-command.js";
+export default class Dev extends NaraiCommand<typeof Dev> {
+    static summary: string;
+    static description: string;
+    static flags: {
+        dir: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
+        port: import("@oclif/core/interfaces").OptionFlag<number | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        "tool-port": import("@oclif/core/interfaces").OptionFlag<number | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        locale: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        task: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        preset: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    };
+    run(): Promise<void>;
+}

package/dist/commands/dev.js

@@ -0,0 +1,55 @@
+import { readFile } from "node:fs/promises";
+import { resolve } from "node:path";
+import { Flags } from "@oclif/core";
+import { startHarness } from "@michinarai/sdk/harness";
+import { NaraiCommand } from "../base-command.js";
+import { NaraiError } from "../lib/errors.js";
+import { checkedManifest, toolRoot } from "../lib/project.js";
+async function json(path, what) {
+    if (!path)
+        return undefined;
+    try {
+        return JSON.parse(await readFile(path, "utf8"));
+    }
+    catch (error) {
+        throw new NaraiError(`${what} ${path}: ${error.message}`, "bad_input");
+    }
+}
+export default class Dev extends NaraiCommand {
+    static summary = "Run the tool in the local harness, mounted as a lesson mounts it.";
+    static description = "Narai's host on http://localhost, the tool on http://127.0.0.1 in a sandboxed iframe: two origins, the real handshake, every message checked against the manifest. Open the host's address in a browser; stop with Ctrl-C.";
+    static flags = {
+        dir: Flags.string({ description: "The tool's built files (served at the embed URL's path).", default: "dist" }),
+        port: Flags.integer({ description: "The host page's port (default: any free one)." }),
+        "tool-port": Flags.integer({ description: "The tool's port (default: any free one)." }),
+        locale: Flags.string({ description: "The locale the tool starts in (default: its first)." }),
+        task: Flags.string({ description: "A JSON file: the task Narai would start it on ({id, kind, assist, prompt})." }),
+        preset: Flags.string({ description: "A JSON file: the step's preset payload ({schema, ...})." }),
+    };
+    async run() {
+        const root = await toolRoot(process.cwd());
+        const manifest = await checkedManifest(root);
+        const options = { manifest, toolDir: resolve(root, this.flags.dir) };
+        if (this.flags.port !== undefined)
+            options.hostPort = this.flags.port;
+        if (this.flags["tool-port"] !== undefined)
+            options.toolPort = this.flags["tool-port"];
+        if (this.flags.locale)
+            options.locale = this.flags.locale;
+        const task = await json(this.flags.task, "task");
+        const preset = await json(this.flags.preset, "preset");
+        if (task)
+            options.task = task;
+        if (preset)
+            options.preset = preset;
+        const harness = await startHarness(options);
+        this.out.result({ host: harness.hostUrl, tool: harness.toolUrl }, () => [`host  ${harness.hostUrl}`, `tool  ${harness.toolUrl}`]);
+        this.out.progress("Ctrl-C to stop");
+        await new Promise((done) => {
+            const stop = () => { void harness.close().then(done); };
+            process.once("SIGINT", stop);
+            process.once("SIGTERM", stop);
+        });
+    }
+}
+//# sourceMappingURL=dev.js.map

package/dist/commands/dev.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dev.js","sourceRoot":"","sources":["../../src/commands/dev.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AACpC,OAAO,EAAE,YAAY,EAAuB,MAAM,yBAAyB,CAAC;AAC5E,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,eAAe,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAE9D,KAAK,UAAU,IAAI,CAAC,IAAwB,EAAE,IAAY;IACxD,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC;IAC5B,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAY,CAAC;IAC7D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,UAAU,CAAC,GAAG,IAAI,IAAI,IAAI,KAAM,KAAe,CAAC,OAAO,EAAE,EAAE,WAAW,CAAC,CAAC;IACpF,CAAC;AACH,CAAC;AAED,MAAM,CAAC,OAAO,OAAO,GAAI,SAAQ,YAAwB;IACvD,MAAM,CAAU,OAAO,GAAG,mEAAmE,CAAC;IAC9F,MAAM,CAAU,WAAW,GAAG,4NAA4N,CAAC;IAC3P,MAAM,CAAU,KAAK,GAAG;QACtB,GAAG,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,0DAA0D,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;QAC/G,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,+CAA+C,EAAE,CAAC;QACrF,WAAW,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,0CAA0C,EAAE,CAAC;QACvF,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,qDAAqD,EAAE,CAAC;QAC5F,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,6EAA6E,EAAE,CAAC;QAClH,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,yDAAyD,EAAE,CAAC;KACjG,CAAC;IAEF,KAAK,CAAC,GAAG;QACP,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;QAC3C,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,CAAC;QAC7C,MAAM,OAAO,GAAmB,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACrF,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS;YAAE,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;QACtE,IAAI,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,KAAK,SAAS;YAAE,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QACtF,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM;YAAE,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;QAC1D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACjD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QACvD,IAAI,IAAI;YAAE,OAAO,CAAC,IAAI,GAAG,IAA2C,CAAC;QACrE,IAAI,MAAM;YAAE,OAAO,CAAC,MAAM,GAAG,MAA+C,CAAC;QAC7E,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,CAAC;QAC5C,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,OAAO,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,SAAS,OAAO,CAAC,OAAO,EAAE,EAAE,SAAS,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QAClI,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC;QACpC,MAAM,IAAI,OAAO,CAAO,CAAC,IAAI,EAAE,EAAE;YAC/B,MAAM,IAAI,GAAG,GAAG,EAAE,GAAG,KAAK,OAAO,CAAC,KAAK,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YACxD,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;YAC7B,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAChC,CAAC,CAAC,CAAC;IACL,CAAC"}

package/dist/commands/init.d.ts

@@ -0,0 +1,12 @@
+import { NaraiCommand } from "../base-command.js";
+export default class Init extends NaraiCommand<typeof Init> {
+    static summary: string;
+    static args: {
+        name: import("@oclif/core/interfaces").Arg<string, Record<string, unknown>>;
+    };
+    static flags: {
+        publisher: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
+        dir: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    };
+    run(): Promise<void>;
+}

package/dist/commands/init.js

@@ -0,0 +1,63 @@
+import { mkdir, readdir, readFile, writeFile } from "node:fs/promises";
+import { dirname, join, relative, resolve } from "node:path";
+import { fileURLToPath } from "node:url";
+import { Args, Flags } from "@oclif/core";
+import { manifestProblems } from "@michinarai/sdk";
+import { NaraiCommand } from "../base-command.js";
+import { NaraiError } from "../lib/errors.js";
+import { MANIFEST } from "../lib/project.js";
+/** The template, shipped in the package beside dist/. */
+const TEMPLATE = fileURLToPath(new URL("../../templates/tool/", import.meta.url));
+const SLUG = /^[a-z0-9][a-z0-9-]{0,62}$/;
+async function walk(dir) {
+    const entries = await readdir(dir, { recursive: true, withFileTypes: true });
+    return entries.filter((e) => e.isFile()).map((e) => join(e.parentPath, e.name));
+}
+/** The SDK the template depends on: the version this CLI is built with (it pins one), or a later compatible one. */
+async function sdkSpec() {
+    const pkg = JSON.parse(await readFile(fileURLToPath(new URL("../../package.json", import.meta.url)), "utf8"));
+    const own = pkg.dependencies["@michinarai/sdk"] ?? "^1";
+    return /^\d+\.\d+\.\d+$/.test(own) ? `^${own}` : own;
+}
+export default class Init extends NaraiCommand {
+    static summary = "Start a new tool from the template: a manifest, a page, the SDK, an AGENTS.md and its skill.";
+    static args = { name: Args.string({ description: "The tool's name (lowercase, digits, -).", required: true }) };
+    static flags = {
+        publisher: Flags.string({ description: "Your publisher's slug: the tool's id is <publisher>/<name>.", required: true }),
+        dir: Flags.string({ description: "Where to write it (default: ./<name>)." }),
+    };
+    async run() {
+        const { name } = this.args;
+        const { publisher } = this.flags;
+        for (const [what, value] of [["name", name], ["publisher", publisher]]) {
+            if (!SLUG.test(value))
+                throw new NaraiError(`${what} ${value}: lowercase letters, digits and -, up to 63`, "bad_slug", 2);
+        }
+        const target = resolve(this.flags.dir ?? name);
+        const existing = await readdir(target).catch(() => []);
+        if (existing.length > 0)
+            throw new NaraiError(`${relative(process.cwd(), target) || "."} isn't empty`, "not_empty");
+        const family = name.replace(/[^a-z0-9]+/g, "-").replace(/^-|-$/g, "").replace(/^(\d)/, "t$1");
+        const values = { id: `${publisher}/${name}`, name, publisher, family, sdk: await sdkSpec() };
+        const fill = (text) => text.replace(/\{\{(\w+)\}\}/g, (m, key) => values[key] ?? m);
+        const written = [];
+        for (const source of await walk(TEMPLATE)) {
+            const path = relative(TEMPLATE, source);
+            const out = join(target, path);
+            await mkdir(dirname(out), { recursive: true });
+            await writeFile(out, fill(await readFile(source, "utf8")));
+            written.push(path.split("\\").join("/"));
+        }
+        const problems = manifestProblems(JSON.parse(await readFile(join(target, MANIFEST), "utf8")));
+        if (problems.length)
+            throw new NaraiError("the template's manifest doesn't match the contract (a bug in narai)", "template_invalid", 1, { problems });
+        written.sort();
+        this.out.result({ id: values["id"], dir: target, files: written }, () => [
+            `${values["id"]} in ${relative(process.cwd(), target) || "."}`,
+            ...written.map((f) => `  ${f}`),
+            "",
+            `next: cd ${relative(process.cwd(), target) || "."} && npm install && npm run dev`,
+        ]);
+    }
+}
+//# sourceMappingURL=init.js.map

package/dist/commands/init.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"init.js","sourceRoot":"","sources":["../../src/commands/init.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACvE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAE7C,yDAAyD;AACzD,MAAM,QAAQ,GAAG,aAAa,CAAC,IAAI,GAAG,CAAC,uBAAuB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAClF,MAAM,IAAI,GAAG,2BAA2B,CAAC;AAEzC,KAAK,UAAU,IAAI,CAAC,GAAW;IAC7B,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7E,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;AAClF,CAAC;AAED,oHAAoH;AACpH,KAAK,UAAU,OAAO;IACpB,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,aAAa,CAAC,IAAI,GAAG,CAAC,oBAAoB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAA6C,CAAC;IAC1J,MAAM,GAAG,GAAG,GAAG,CAAC,YAAY,CAAC,iBAAiB,CAAC,IAAI,IAAI,CAAC;IACxD,OAAO,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;AACvD,CAAC;AAED,MAAM,CAAC,OAAO,OAAO,IAAK,SAAQ,YAAyB;IACzD,MAAM,CAAU,OAAO,GAAG,8FAA8F,CAAC;IACzH,MAAM,CAAU,IAAI,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,yCAAyC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;IACzH,MAAM,CAAU,KAAK,GAAG;QACtB,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,6DAA6D,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;QACvH,GAAG,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,wCAAwC,EAAE,CAAC;KAC7E,CAAC;IAEF,KAAK,CAAC,GAAG;QACP,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC;QAC3B,MAAM,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC;QACjC,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,WAAW,EAAE,SAAS,CAAC,CAAU,EAAE,CAAC;YAChF,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC;gBAAE,MAAM,IAAI,UAAU,CAAC,GAAG,IAAI,IAAI,KAAK,6CAA6C,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC;QAC5H,CAAC;QACD,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC;QAC/C,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAc,CAAC,CAAC;QACnE,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;YAAE,MAAM,IAAI,UAAU,CAAC,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,CAAC,IAAI,GAAG,cAAc,EAAE,WAAW,CAAC,CAAC;QACpH,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC9F,MAAM,MAAM,GAA2B,EAAE,EAAE,EAAE,GAAG,SAAS,IAAI,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,OAAO,EAAE,EAAE,CAAC;QACrH,MAAM,IAAI,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC,EAAE,GAAW,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;QACpG,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,KAAK,MAAM,MAAM,IAAI,MAAM,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC1C,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YACxC,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YAC/B,MAAM,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC/C,MAAM,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,MAAM,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;YAC3D,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QAC3C,CAAC;QACD,MAAM,QAAQ,GAAG,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;QAC9F,IAAI,QAAQ,CAAC,MAAM;YAAE,MAAM,IAAI,UAAU,CAAC,qEAAqE,EAAE,kBAAkB,EAAE,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;QACtJ,OAAO,CAAC,IAAI,EAAE,CAAC;QACf,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,CAAC;YACvE,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,CAAC,IAAI,GAAG,EAAE;YAC9D,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC;YAC/B,EAAE;YACF,YAAY,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,CAAC,IAAI,GAAG,gCAAgC;SACnF,CAAC,CAAC;IACL,CAAC"}

package/dist/commands/login.d.ts

@@ -0,0 +1,10 @@
+import { NaraiCommand } from "../base-command.js";
+export default class Login extends NaraiCommand<typeof Login> {
+    static summary: string;
+    static description: string;
+    static flags: {
+        "no-browser": import("@oclif/core/interfaces").BooleanFlag<boolean>;
+        timeout: import("@oclif/core/interfaces").OptionFlag<number, import("@oclif/core/interfaces").CustomOptions>;
+    };
+    run(): Promise<void>;
+}

package/dist/commands/login.js

@@ -0,0 +1,37 @@
+import { Flags } from "@oclif/core";
+import { NaraiCommand } from "../base-command.js";
+import { startLoopback } from "../auth/loopback.js";
+import { lockFile } from "../auth/session.js";
+import { authorizationUrl, discover, exchangeCode, newState, pkce } from "../auth/oauth.js";
+import { deps } from "../lib/deps.js";
+import { withFileLock } from "../lib/lock.js";
+export default class Login extends NaraiCommand {
+    static summary = "Sign in to Narai in the browser; the session stays in the OS keychain.";
+    static description = "Opens Narai's sign-in page; the answer comes back to this machine only (127.0.0.1). The session's refresh token is kept in the OS keychain and rotates on every use. In CI, set NARAI_TOKEN to a tool's token instead.";
+    static flags = {
+        "no-browser": Flags.boolean({ description: "Print the sign-in address; don't open it." }),
+        timeout: Flags.integer({ description: "Seconds to wait for the browser.", default: 300 }),
+    };
+    async run() {
+        const naraiUrl = this.naraiUrl;
+        const meta = await discover(naraiUrl);
+        const { verifier, challenge } = pkce();
+        const state = newState();
+        const loopback = await startLoopback({ state, issuer: meta.iss_parameter ? meta.issuer : null, timeoutMs: this.flags.timeout * 1000 });
+        try {
+            const url = authorizationUrl(meta, { naraiUrl, redirectUri: loopback.redirectUri, challenge, state });
+            this.out.prompt(`Sign in to Narai: ${url}`);
+            if (!this.flags["no-browser"])
+                deps.openBrowser(url);
+            const code = await loopback.code;
+            const tokens = await exchangeCode(meta, { naraiUrl, code, verifier, redirectUri: loopback.redirectUri });
+            const host = new URL(naraiUrl).host;
+            await withFileLock(lockFile(naraiUrl), () => deps.credentials.set(naraiUrl, tokens.refreshToken));
+            this.out.result({ signed_in: host, scopes: tokens.scopes }, () => `signed in to ${host}`);
+        }
+        finally {
+            loopback.close();
+        }
+    }
+}
+//# sourceMappingURL=login.js.map

package/dist/commands/login.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"login.js","sourceRoot":"","sources":["../../src/commands/login.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AACpC,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,gBAAgB,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAC5F,OAAO,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AACtC,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAE9C,MAAM,CAAC,OAAO,OAAO,KAAM,SAAQ,YAA0B;IAC3D,MAAM,CAAU,OAAO,GAAG,wEAAwE,CAAC;IACnG,MAAM,CAAU,WAAW,GAAG,wNAAwN,CAAC;IACvP,MAAM,CAAU,KAAK,GAAG;QACtB,YAAY,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,2CAA2C,EAAE,CAAC;QACzF,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,kCAAkC,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;KAC1F,CAAC;IAEF,KAAK,CAAC,GAAG;QACP,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC/B,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACtC,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,IAAI,EAAE,CAAC;QACvC,MAAM,KAAK,GAAG,QAAQ,EAAE,CAAC;QACzB,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,IAAI,EAAE,CAAC,CAAC;QACvI,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,gBAAgB,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,WAAW,EAAE,QAAQ,CAAC,WAAW,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;YACtG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,qBAAqB,GAAG,EAAE,CAAC,CAAC;YAC5C,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC;gBAAE,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;YACrD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC;YACjC,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;YACzG,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC;YACpC,MAAM,YAAY,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC;YAClG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,CAAC,gBAAgB,IAAI,EAAE,CAAC,CAAC;QAC5F,CAAC;gBAAS,CAAC;YACT,QAAQ,CAAC,KAAK,EAAE,CAAC;QACnB,CAAC;IACH,CAAC"}

package/dist/commands/logout.d.ts

@@ -0,0 +1,5 @@
+import { NaraiCommand } from "../base-command.js";
+export default class Logout extends NaraiCommand<typeof Logout> {
+    static summary: string;
+    run(): Promise<void>;
+}