@nebulr-group/bridge-cli 0.6.6 → 1.0.0-alpha.1

package/dist/core/errors.js

@@ -0,0 +1,33 @@
+export class CliError extends Error {
+    kind;
+    status;
+    hint;
+    details;
+    constructor(kind, message, options = {}) {
+        super(message);
+        this.name = 'CliError';
+        this.kind = kind;
+        this.status = options.status;
+        this.hint = options.hint;
+        this.details = options.details;
+    }
+}
+export function isCliError(value) {
+    return value instanceof CliError;
+}
+/**
+ * Exit codes: 1 for a refused or failed command, 2 when Bridge could not be
+ * reached or could not answer, 3 when the CLI is not set up (no issuer, not
+ * signed in, a setting that is wrong).
+ */
+export function exitCodeOf(error) {
+    if (!isCliError(error))
+        return 1;
+    if (error.kind === 'unavailable' || error.kind === 'network')
+        return 2;
+    if (error.kind === 'misconfigured' || error.kind === 'not-signed-in' || error.kind === 'session-ended')
+        return 3;
+    return 1;
+}
+export const SIGN_IN_AGAIN = 'Sign in again with `bridge auth login` (or `bridge auth login --password`).';
+//# sourceMappingURL=errors.js.map

package/dist/core/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/core/errors.ts"],"names":[],"mappings":"AA6BA,MAAM,OAAO,QAAS,SAAQ,KAAK;IACxB,IAAI,CAAe;IACnB,MAAM,CAAqB;IAC3B,IAAI,CAAqB;IACzB,OAAO,CAAU;IAE1B,YAAY,IAAkB,EAAE,OAAe,EAAE,UAA2B,EAAE;QAC5E,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC;QACvB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC7B,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;QACzB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IACjC,CAAC;CACF;AAED,MAAM,UAAU,UAAU,CAAC,KAAc;IACvC,OAAO,KAAK,YAAY,QAAQ,CAAC;AACnC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,UAAU,CAAC,KAAc;IACvC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC;IACjC,IAAI,KAAK,CAAC,IAAI,KAAK,aAAa,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,CAAC,CAAC;IACvE,IAAI,KAAK,CAAC,IAAI,KAAK,eAAe,IAAI,KAAK,CAAC,IAAI,KAAK,eAAe,IAAI,KAAK,CAAC,IAAI,KAAK,eAAe;QAAE,OAAO,CAAC,CAAC;IACjH,OAAO,CAAC,CAAC;AACX,CAAC;AAED,MAAM,CAAC,MAAM,aAAa,GAAG,6EAA6E,CAAC"}

package/dist/core/http.d.ts

@@ -0,0 +1,23 @@
+import { CliError } from './errors.js';
+export type Fetch = (input: string, init?: RequestInit) => Promise<Response>;
+export interface HttpRequest {
+    readonly method: string;
+    readonly url: string;
+    readonly headers?: Readonly<Record<string, string>>;
+    /** Sent as JSON. */
+    readonly body?: unknown;
+}
+export interface HttpResponse<T = unknown> {
+    readonly status: number;
+    readonly headers: Headers;
+    readonly body: T;
+}
+/**
+ * One call to Bridge: JSON in, JSON out. A redirect is never followed, so a
+ * token is never sent anywhere but the address the issuer listed. Anything
+ * but a 2xx becomes a {@link CliError}.
+ */
+export declare function call<T = unknown>(fetchFn: Fetch, request: HttpRequest): Promise<HttpResponse<T>>;
+/** What Bridge said, read from any of the shapes its answers take, as one error. */
+export declare function errorFrom(status: number, body: unknown, headers?: Headers): CliError;
+//# sourceMappingURL=http.d.ts.map

package/dist/core/http.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.d.ts","sourceRoot":"","sources":["../../src/core/http.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAoC,MAAM,aAAa,CAAC;AAEzE,MAAM,MAAM,KAAK,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;AAE7E,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACpD,oBAAoB;IACpB,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC;CACzB;AAED,MAAM,WAAW,YAAY,CAAC,CAAC,GAAG,OAAO;IACvC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;CAClB;AAID;;;;GAIG;AACH,wBAAsB,IAAI,CAAC,CAAC,GAAG,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CA4BtG;AAqED,oFAAoF;AACpF,wBAAgB,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,OAAO,GAAG,QAAQ,CAkBpF"}

package/dist/core/http.js

@@ -0,0 +1,153 @@
+import { CliError, SIGN_IN_AGAIN } from './errors.js';
+const TIMEOUT_MS = 30_000;
+/**
+ * One call to Bridge: JSON in, JSON out. A redirect is never followed, so a
+ * token is never sent anywhere but the address the issuer listed. Anything
+ * but a 2xx becomes a {@link CliError}.
+ */
+export async function call(fetchFn, request) {
+    const headers = { accept: 'application/json', ...request.headers };
+    let body;
+    if (request.body !== undefined) {
+        headers['content-type'] = 'application/json';
+        body = JSON.stringify(request.body);
+    }
+    let response;
+    try {
+        response = await fetchFn(request.url, {
+            method: request.method,
+            headers,
+            body,
+            redirect: 'manual',
+            signal: AbortSignal.timeout(TIMEOUT_MS),
+        });
+    }
+    catch (error) {
+        const reason = error instanceof Error ? error.message : String(error);
+        throw new CliError('network', `Could not reach ${new URL(request.url).host}: ${reason}`);
+    }
+    const parsed = await readBody(response);
+    if (response.status >= 300 && response.status < 400) {
+        throw new CliError('misconfigured', `Bridge answered ${request.method} ${pathOf(request.url)} with a redirect, which the CLI never follows.`, {
+            status: response.status,
+        });
+    }
+    if (!response.ok)
+        throw errorFrom(response.status, parsed, response.headers);
+    return { status: response.status, headers: response.headers, body: parsed };
+}
+async function readBody(response) {
+    const text = await response.text();
+    if (text === '')
+        return null;
+    const type = response.headers.get('content-type') ?? '';
+    if (type.includes('json')) {
+        try {
+            return JSON.parse(text);
+        }
+        catch {
+            return text;
+        }
+    }
+    return text;
+}
+function pathOf(url) {
+    try {
+        return new URL(url).pathname;
+    }
+    catch {
+        return url;
+    }
+}
+/** The kinds of Bridge's RFC 9457 problems (`urn:bridge:problem:<kind>`), as CLI errors. */
+const PROBLEM_KINDS = {
+    'identity-recheck': 'reauthenticate',
+    'privilege-missing': 'forbidden',
+    'entitlement-missing': 'plan-required',
+    'credential-missing': 'not-signed-in',
+    'credential-refused': 'session-ended',
+    'rate-limited': 'rate-limited',
+    unavailable: 'unavailable',
+    conflict: 'conflict',
+};
+/** OAuth and sign-in errors (`{ error: "…" }`), as CLI errors. */
+const OAUTH_KINDS = {
+    wrong_credentials: 'wrong-credentials',
+    invalid_grant: 'session-ended',
+    flow_expired: 'flow-expired',
+    invalid_link: 'invalid',
+    wrong_device: 'invalid',
+    invalid_request: 'invalid',
+    invalid_client: 'misconfigured',
+    unsupported_grant_type: 'misconfigured',
+    access_denied: 'forbidden',
+    not_found: 'not-found',
+    conflict: 'conflict',
+    temporarily_unavailable: 'unavailable',
+};
+function kindOfStatus(status) {
+    if (status === 401)
+        return 'not-signed-in';
+    if (status === 402)
+        return 'plan-required';
+    if (status === 403)
+        return 'forbidden';
+    if (status === 404)
+        return 'not-found';
+    if (status === 409 || status === 412 || status === 428)
+        return 'conflict';
+    if (status === 429)
+        return 'rate-limited';
+    if (status >= 500)
+        return 'unavailable';
+    return 'invalid';
+}
+function text(value) {
+    if (typeof value === 'string' && value.trim() !== '')
+        return value.trim();
+    if (Array.isArray(value) && value.every((each) => typeof each === 'string'))
+        return value.join(' ');
+    return undefined;
+}
+/** What Bridge said, read from any of the shapes its answers take, as one error. */
+export function errorFrom(status, body, headers) {
+    const fields = typeof body === 'object' && body !== null && !Array.isArray(body) ? body : {};
+    let kind = kindOfStatus(status);
+    let message;
+    const type = typeof fields['type'] === 'string' ? fields['type'] : '';
+    if (type.startsWith('urn:bridge:problem:')) {
+        kind = PROBLEM_KINDS[type.slice('urn:bridge:problem:'.length)] ?? kind;
+        message = text(fields['detail']) ?? text(fields['title']);
+    }
+    else if (typeof fields['error'] === 'string' && OAUTH_KINDS[fields['error']] !== undefined) {
+        kind = OAUTH_KINDS[fields['error']];
+        message = text(fields['error_description']) ?? fields['error'].replace(/_/g, ' ');
+    }
+    else {
+        message = text(fields['message']) ?? text(fields['detail']) ?? text(fields['title']) ?? text(body);
+    }
+    const hint = hintFor(kind, fields, headers);
+    return new CliError(kind, message ?? `Bridge answered ${String(status)}.`, { status, hint, details: body ?? undefined });
+}
+function hintFor(kind, fields, headers) {
+    switch (kind) {
+        case 'reauthenticate': {
+            const maxAge = typeof fields['maxAge'] === 'number' ? ` within ${String(Math.round(fields['maxAge'] / 60))} minutes of signing in` : '';
+            return `This needs a recent sign-in. Sign in again with \`bridge auth login\`, then run it again${maxAge}.`;
+        }
+        case 'not-signed-in':
+        case 'session-ended':
+            return SIGN_IN_AGAIN;
+        case 'rate-limited': {
+            const after = headers?.get('retry-after');
+            return after ? `Try again in ${after} seconds.` : 'Try again in a moment.';
+        }
+        case 'unavailable':
+            return 'Bridge could not answer right now. Try again in a moment.';
+        case 'forbidden':
+            return typeof fields['privilege'] === 'string' ? `This needs the privilege ${fields['privilege']}.` : undefined;
+        default:
+            return undefined;
+    }
+}
+//# sourceMappingURL=http.js.map

package/dist/core/http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.js","sourceRoot":"","sources":["../../src/core/http.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAqB,MAAM,aAAa,CAAC;AAkBzE,MAAM,UAAU,GAAG,MAAM,CAAC;AAE1B;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,IAAI,CAAc,OAAc,EAAE,OAAoB;IAC1E,MAAM,OAAO,GAA2B,EAAE,MAAM,EAAE,kBAAkB,EAAE,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;IAC3F,IAAI,IAAwB,CAAC;IAC7B,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC/B,OAAO,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;QAC7C,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACtC,CAAC;IACD,IAAI,QAAkB,CAAC;IACvB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE;YACpC,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,OAAO;YACP,IAAI;YACJ,QAAQ,EAAE,QAAQ;YAClB,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,UAAU,CAAC;SACxC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,MAAM,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACtE,MAAM,IAAI,QAAQ,CAAC,SAAS,EAAE,mBAAmB,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC,CAAC;IAC3F,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACxC,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;QACpD,MAAM,IAAI,QAAQ,CAAC,eAAe,EAAE,mBAAmB,OAAO,CAAC,MAAM,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,gDAAgD,EAAE;YAC5I,MAAM,EAAE,QAAQ,CAAC,MAAM;SACxB,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,MAAM,SAAS,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC7E,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,IAAI,EAAE,MAAW,EAAE,CAAC;AACnF,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,QAAkB;IACxC,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IACnC,IAAI,IAAI,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC;IAC7B,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;IACxD,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1B,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC1B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,MAAM,CAAC,GAAW;IACzB,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,CAAC;IACb,CAAC;AACH,CAAC;AAED,4FAA4F;AAC5F,MAAM,aAAa,GAA2C;IAC5D,kBAAkB,EAAE,gBAAgB;IACpC,mBAAmB,EAAE,WAAW;IAChC,qBAAqB,EAAE,eAAe;IACtC,oBAAoB,EAAE,eAAe;IACrC,oBAAoB,EAAE,eAAe;IACrC,cAAc,EAAE,cAAc;IAC9B,WAAW,EAAE,aAAa;IAC1B,QAAQ,EAAE,UAAU;CACrB,CAAC;AAEF,kEAAkE;AAClE,MAAM,WAAW,GAA2C;IAC1D,iBAAiB,EAAE,mBAAmB;IACtC,aAAa,EAAE,eAAe;IAC9B,YAAY,EAAE,cAAc;IAC5B,YAAY,EAAE,SAAS;IACvB,YAAY,EAAE,SAAS;IACvB,eAAe,EAAE,SAAS;IAC1B,cAAc,EAAE,eAAe;IAC/B,sBAAsB,EAAE,eAAe;IACvC,aAAa,EAAE,WAAW;IAC1B,SAAS,EAAE,WAAW;IACtB,QAAQ,EAAE,UAAU;IACpB,uBAAuB,EAAE,aAAa;CACvC,CAAC;AAEF,SAAS,YAAY,CAAC,MAAc;IAClC,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,eAAe,CAAC;IAC3C,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,eAAe,CAAC;IAC3C,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,WAAW,CAAC;IACvC,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,WAAW,CAAC;IACvC,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,UAAU,CAAC;IAC1E,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,cAAc,CAAC;IAC1C,IAAI,MAAM,IAAI,GAAG;QAAE,OAAO,aAAa,CAAC;IACxC,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,IAAI,CAAC,KAAc;IAC1B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC;IAC1E,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC;QAAE,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACpG,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,SAAS,CAAC,MAAc,EAAE,IAAa,EAAE,OAAiB;IACxE,MAAM,MAAM,GAAG,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAE,IAAgC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1H,IAAI,IAAI,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;IAChC,IAAI,OAA2B,CAAC;IAEhC,MAAM,IAAI,GAAG,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAE,MAAM,CAAC,MAAM,CAAY,CAAC,CAAC,CAAC,EAAE,CAAC;IAClF,IAAI,IAAI,CAAC,UAAU,CAAC,qBAAqB,CAAC,EAAE,CAAC;QAC3C,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,qBAAqB,CAAC,MAAM,CAAC,CAAC,IAAI,IAAI,CAAC;QACvE,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;IAC5D,CAAC;SAAM,IAAI,OAAO,MAAM,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,WAAW,CAAC,MAAM,CAAC,OAAO,CAAW,CAAC,KAAK,SAAS,EAAE,CAAC;QACvG,IAAI,GAAG,WAAW,CAAC,MAAM,CAAC,OAAO,CAAW,CAAiB,CAAC;QAC9D,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC,IAAK,MAAM,CAAC,OAAO,CAAY,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAChG,CAAC;SAAM,CAAC;QACN,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC;IACrG,CAAC;IAED,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;IAC5C,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,OAAO,IAAI,mBAAmB,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,IAAI,SAAS,EAAE,CAAC,CAAC;AAC3H,CAAC;AAED,SAAS,OAAO,CAAC,IAAkB,EAAE,MAA+B,EAAE,OAAiB;IACrF,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,gBAAgB,CAAC,CAAC,CAAC;YACtB,MAAM,MAAM,GAAG,OAAO,MAAM,CAAC,QAAQ,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,WAAW,MAAM,CAAC,IAAI,CAAC,KAAK,CAAE,MAAM,CAAC,QAAQ,CAAY,GAAG,EAAE,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,EAAE,CAAC;YACpJ,OAAO,2FAA2F,MAAM,GAAG,CAAC;QAC9G,CAAC;QACD,KAAK,eAAe,CAAC;QACrB,KAAK,eAAe;YAClB,OAAO,aAAa,CAAC;QACvB,KAAK,cAAc,CAAC,CAAC,CAAC;YACpB,MAAM,KAAK,GAAG,OAAO,EAAE,GAAG,CAAC,aAAa,CAAC,CAAC;YAC1C,OAAO,KAAK,CAAC,CAAC,CAAC,gBAAgB,KAAK,WAAW,CAAC,CAAC,CAAC,wBAAwB,CAAC;QAC7E,CAAC;QACD,KAAK,aAAa;YAChB,OAAO,2DAA2D,CAAC;QACrE,KAAK,WAAW;YACd,OAAO,OAAO,MAAM,CAAC,WAAW,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,4BAA4B,MAAM,CAAC,WAAW,CAAW,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;QAC5H;YACE,OAAO,SAAS,CAAC;IACrB,CAAC;AACH,CAAC"}

package/dist/core/private-files.d.ts

@@ -0,0 +1,6 @@
+export declare function ensurePrivateDir(dir: string): Promise<void>;
+/** The file's text, or null when there is none. A file others could read is tightened to 0600 first. */
+export declare function readPrivateFile(dir: string, name: string): Promise<string | null>;
+export declare function writePrivateFile(dir: string, name: string, content: string): Promise<void>;
+export declare function removePrivateFile(dir: string, name: string): Promise<void>;
+//# sourceMappingURL=private-files.d.ts.map

package/dist/core/private-files.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"private-files.d.ts","sourceRoot":"","sources":["../../src/core/private-files.ts"],"names":[],"mappings":"AAsBA,wBAAsB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAOjE;AAaD,wGAAwG;AACxG,wBAAsB,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAiBvF;AAED,wBAAsB,gBAAgB,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAkBhG;AAED,wBAAsB,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAIhF"}

package/dist/core/private-files.js

@@ -0,0 +1,96 @@
+import { randomBytes } from 'node:crypto';
+import { constants } from 'node:fs';
+import { chmod, lstat, mkdir, open, rename, unlink } from 'node:fs/promises';
+import { join } from 'node:path';
+import { CliError } from './errors.js';
+/**
+ * Files only their owner may read: the session and the settings.
+ *
+ * - The directory is made 0700, and an existing one must be a real
+ *   directory (not a symlink) that this user owns; it is tightened to 0700.
+ * - A file is written to a temporary file with a random name in the same
+ *   directory, created with O_EXCL (which never follows a symlink) and mode
+ *   0600, then renamed over the file.
+ * - A file that is a symlink is refused, for reading and for writing.
+ */
+const POSIX = process.platform !== 'win32';
+function refuse(message) {
+    return new CliError('misconfigured', message, { hint: 'Point BRIDGE_CONFIG_DIR at a directory only you can write to.' });
+}
+export async function ensurePrivateDir(dir) {
+    await mkdir(dir, { recursive: true, mode: 0o700 });
+    const info = await lstat(dir);
+    if (info.isSymbolicLink() || !info.isDirectory())
+        throw refuse(`${dir} is not a directory of its own (it is a symlink or a file).`);
+    if (!POSIX)
+        return;
+    if (typeof process.getuid === 'function' && info.uid !== process.getuid())
+        throw refuse(`${dir} belongs to another user.`);
+    if ((info.mode & 0o077) !== 0)
+        await chmod(dir, 0o700);
+}
+async function notALink(path) {
+    try {
+        const info = await lstat(path);
+        if (info.isSymbolicLink())
+            throw refuse(`${path} is a symlink; the CLI does not follow it.`);
+        return true;
+    }
+    catch (error) {
+        if (error.code === 'ENOENT')
+            return false;
+        throw error;
+    }
+}
+/** The file's text, or null when there is none. A file others could read is tightened to 0600 first. */
+export async function readPrivateFile(dir, name) {
+    const path = join(dir, name);
+    if (!(await notALink(path)))
+        return null;
+    const flags = constants.O_RDONLY | (POSIX ? constants.O_NOFOLLOW : 0);
+    let handle;
+    try {
+        handle = await open(path, flags);
+    }
+    catch (error) {
+        if (error.code === 'ENOENT')
+            return null;
+        throw error;
+    }
+    try {
+        if (POSIX && ((await handle.stat()).mode & 0o077) !== 0)
+            await handle.chmod(0o600);
+        return await handle.readFile('utf8');
+    }
+    finally {
+        await handle.close();
+    }
+}
+export async function writePrivateFile(dir, name, content) {
+    await ensurePrivateDir(dir);
+    const path = join(dir, name);
+    await notALink(path);
+    const temp = join(dir, `.${name}.${randomBytes(8).toString('hex')}.tmp`);
+    const handle = await open(temp, 'wx', 0o600);
+    try {
+        await handle.writeFile(content, 'utf8');
+        // The umask may have narrowed or widened the mode; it is 0600 whatever it is.
+        if (POSIX)
+            await handle.chmod(0o600);
+        await handle.sync();
+    }
+    catch (error) {
+        await handle.close();
+        await unlink(temp).catch(() => undefined);
+        throw error;
+    }
+    await handle.close();
+    await rename(temp, path);
+}
+export async function removePrivateFile(dir, name) {
+    await unlink(join(dir, name)).catch((error) => {
+        if (error.code !== 'ENOENT')
+            throw error;
+    });
+}
+//# sourceMappingURL=private-files.js.map

package/dist/core/private-files.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"private-files.js","sourceRoot":"","sources":["../../src/core/private-files.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC7E,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAEvC;;;;;;;;;GASG;AACH,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC;AAE3C,SAAS,MAAM,CAAC,OAAe;IAC7B,OAAO,IAAI,QAAQ,CAAC,eAAe,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,+DAA+D,EAAE,CAAC,CAAC;AAC3H,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,GAAW;IAChD,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACnD,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;IAC9B,IAAI,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE;QAAE,MAAM,MAAM,CAAC,GAAG,GAAG,6DAA6D,CAAC,CAAC;IACpI,IAAI,CAAC,KAAK;QAAE,OAAO;IACnB,IAAI,OAAO,OAAO,CAAC,MAAM,KAAK,UAAU,IAAI,IAAI,CAAC,GAAG,KAAK,OAAO,CAAC,MAAM,EAAE;QAAE,MAAM,MAAM,CAAC,GAAG,GAAG,2BAA2B,CAAC,CAAC;IAC3H,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC;QAAE,MAAM,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;AACzD,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,IAAY;IAClC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,IAAI,CAAC,cAAc,EAAE;YAAE,MAAM,MAAM,CAAC,GAAG,IAAI,4CAA4C,CAAC,CAAC;QAC7F,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QACrE,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,wGAAwG;AACxG,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,GAAW,EAAE,IAAY;IAC7D,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC7B,IAAI,CAAC,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACzC,MAAM,KAAK,GAAG,SAAS,CAAC,QAAQ,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACtE,IAAI,MAAM,CAAC;IACX,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACnC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QACpE,MAAM,KAAK,CAAC;IACd,CAAC;IACD,IAAI,CAAC;QACH,IAAI,KAAK,IAAI,CAAC,CAAC,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC;YAAE,MAAM,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACnF,OAAO,MAAM,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACvC,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,GAAW,EAAE,IAAY,EAAE,OAAe;IAC/E,MAAM,gBAAgB,CAAC,GAAG,CAAC,CAAC;IAC5B,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC7B,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;IACrB,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACzE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IAC7C,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,SAAS,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACxC,8EAA8E;QAC9E,IAAI,KAAK;YAAE,MAAM,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACrC,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;IACtB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QACrB,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC1C,MAAM,KAAK,CAAC;IACd,CAAC;IACD,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IACrB,MAAM,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AAC3B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,GAAW,EAAE,IAAY;IAC/D,MAAM,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,KAA4B,EAAE,EAAE;QACnE,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,KAAK,CAAC;IAC3C,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/core/routes.d.ts

@@ -0,0 +1,100 @@
+/**
+ * Every Bridge endpoint the CLI calls, pinned to version 2 of Bridge's API.
+ *
+ * A route names its microservice and its path under that microservice's
+ * base; the base comes from the issuer's metadata (`bridge_endpoints["2"]`),
+ * so the CLI is given only the issuer. The contract test checks every route
+ * here against a pinned copy of the API's contract, so a route the server
+ * does not promise at version 2 fails the build.
+ *
+ * `auth` says which credential the route takes:
+ *   - `person`: the signed-in developer's token, from the Bridge App. The
+ *     `/apps/{appId}/…` routes act on one of the developer's apps.
+ *   - `app-key`: an app key of the app, in `x-api-key`. Used where version 2
+ *     has no route for the developer: roles, privileges, members, invites
+ *     into the app's workspaces, and a pasted Stripe key.
+ *   - `none`: before sign-in (the issuer's own endpoints).
+ */
+export declare const API_VERSION = 2;
+export type Service = 'app-registry' | 'identity-access' | 'billing' | 'flags' | 'accounts';
+export type Method = 'GET' | 'POST' | 'PUT' | 'PATCH' | 'DELETE';
+export type Auth = 'person' | 'app-key' | 'none';
+export interface Route {
+    readonly method: Method;
+    readonly service: Service;
+    readonly path: string;
+    readonly auth: Auth;
+    /** App-key routes that act in one workspace send it in `Bridge-Workspace`. */
+    readonly workspace?: true;
+}
+export declare const ROUTES: {
+    readonly signIn: Route;
+    readonly token: Route;
+    readonly revoke: Route;
+    readonly signOut: Route;
+    readonly me: Route;
+    readonly appsList: Route;
+    readonly appsCreate: Route;
+    readonly appsGet: Route;
+    readonly appsUpdate: Route;
+    readonly appsDelete: Route;
+    readonly keysList: Route;
+    readonly keysCreate: Route;
+    readonly keysRevoke: Route;
+    readonly plansList: Route;
+    readonly plansCreate: Route;
+    readonly plansGet: Route;
+    readonly plansReplace: Route;
+    readonly plansUpdate: Route;
+    readonly plansDelete: Route;
+    readonly plansArchive: Route;
+    readonly plansDeletionPreview: Route;
+    readonly productsList: Route;
+    readonly productsCreate: Route;
+    readonly productsGet: Route;
+    readonly productsUpdate: Route;
+    readonly productsDelete: Route;
+    readonly productsArchive: Route;
+    readonly metricsList: Route;
+    readonly metricsPut: Route;
+    readonly metricsDelete: Route;
+    readonly taxesList: Route;
+    readonly taxesPut: Route;
+    readonly taxesDelete: Route;
+    readonly billingSettingsGet: Route;
+    readonly billingSettingsUpdate: Route;
+    readonly connectionGet: Route;
+    readonly connectionDelete: Route;
+    readonly connectionPasteKey: Route;
+    readonly flagsList: Route;
+    readonly flagsCreate: Route;
+    readonly flagsGet: Route;
+    readonly flagsUpdate: Route;
+    readonly flagsDelete: Route;
+    readonly flagsKill: Route;
+    readonly flagsRestore: Route;
+    readonly segmentsList: Route;
+    readonly rolesList: Route;
+    readonly rolesCreate: Route;
+    readonly rolesUpdate: Route;
+    readonly rolesDelete: Route;
+    readonly privilegesList: Route;
+    readonly privilegesCreate: Route;
+    readonly privilegesUpdate: Route;
+    readonly privilegesDelete: Route;
+    readonly workspacesList: Route;
+    readonly membersList: Route;
+    readonly membersGet: Route;
+    readonly membersUpdate: Route;
+    readonly membersRemove: Route;
+    readonly invitesList: Route;
+    readonly invitesSend: Route;
+    readonly invitesRevoke: Route;
+    readonly appInvitesList: Route;
+    readonly appInvitesSend: Route;
+    readonly appInvitesRevoke: Route;
+};
+export type RouteName = keyof typeof ROUTES;
+/** The route as the API's contract writes it: `/v2/<microservice><path>`, with `{appId}` for an app. */
+export declare function contractPath(route: Route): string;
+//# sourceMappingURL=routes.d.ts.map

package/dist/core/routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.d.ts","sourceRoot":"","sources":["../../src/core/routes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,WAAW,IAAI,CAAC;AAE7B,MAAM,MAAM,OAAO,GAAG,cAAc,GAAG,iBAAiB,GAAG,SAAS,GAAG,OAAO,GAAG,UAAU,CAAC;AAC5F,MAAM,MAAM,MAAM,GAAG,KAAK,GAAG,MAAM,GAAG,KAAK,GAAG,OAAO,GAAG,QAAQ,CAAC;AACjE,MAAM,MAAM,IAAI,GAAG,QAAQ,GAAG,SAAS,GAAG,MAAM,CAAC;AAEjD,MAAM,WAAW,KAAK;IACpB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC;IACpB,8EAA8E;IAC9E,QAAQ,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC;CAC3B;AAKD,eAAO,MAAM,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAgFuB,CAAC;AAE3C,MAAM,MAAM,SAAS,GAAG,MAAM,OAAO,MAAM,CAAC;AAE5C,wGAAwG;AACxG,wBAAgB,YAAY,CAAC,KAAK,EAAE,KAAK,GAAG,MAAM,CAEjD"}

package/dist/core/routes.js

@@ -0,0 +1,99 @@
+/**
+ * Every Bridge endpoint the CLI calls, pinned to version 2 of Bridge's API.
+ *
+ * A route names its microservice and its path under that microservice's
+ * base; the base comes from the issuer's metadata (`bridge_endpoints["2"]`),
+ * so the CLI is given only the issuer. The contract test checks every route
+ * here against a pinned copy of the API's contract, so a route the server
+ * does not promise at version 2 fails the build.
+ *
+ * `auth` says which credential the route takes:
+ *   - `person`: the signed-in developer's token, from the Bridge App. The
+ *     `/apps/{appId}/…` routes act on one of the developer's apps.
+ *   - `app-key`: an app key of the app, in `x-api-key`. Used where version 2
+ *     has no route for the developer: roles, privileges, members, invites
+ *     into the app's workspaces, and a pasted Stripe key.
+ *   - `none`: before sign-in (the issuer's own endpoints).
+ */
+export const API_VERSION = 2;
+const r = (method, service, path, auth, workspace) => workspace ? { method, service, path, auth, workspace } : { method, service, path, auth };
+export const ROUTES = {
+    // The issuer's own endpoints: sign-in, tokens, sign-out.
+    signIn: r('POST', 'identity-access', '/apps/{issuerApp}/sign-in', 'none'),
+    token: r('POST', 'identity-access', '/apps/{issuerApp}/token', 'none'),
+    revoke: r('POST', 'identity-access', '/apps/{issuerApp}/revoke', 'none'),
+    signOut: r('POST', 'identity-access', '/sign-out', 'person'),
+    me: r('GET', 'accounts', '/me', 'person'),
+    // Apps and their addresses.
+    appsList: r('GET', 'app-registry', '/apps', 'person'),
+    appsCreate: r('POST', 'app-registry', '/apps', 'person'),
+    appsGet: r('GET', 'app-registry', '/apps/{appId}', 'person'),
+    appsUpdate: r('PATCH', 'app-registry', '/apps/{appId}', 'person'),
+    appsDelete: r('DELETE', 'app-registry', '/apps/{appId}', 'person'),
+    // App keys.
+    keysList: r('GET', 'identity-access', '/apps/{appId}/keys', 'person'),
+    keysCreate: r('POST', 'identity-access', '/apps/{appId}/keys', 'person'),
+    keysRevoke: r('DELETE', 'identity-access', '/apps/{appId}/keys/{keyId}', 'person'),
+    // Billing: plans, products, metrics, taxes, settings, the payment connection.
+    plansList: r('GET', 'billing', '/apps/{appId}/plans', 'person'),
+    plansCreate: r('POST', 'billing', '/apps/{appId}/plans', 'person'),
+    plansGet: r('GET', 'billing', '/apps/{appId}/plans/{key}', 'person'),
+    plansReplace: r('PUT', 'billing', '/apps/{appId}/plans/{key}', 'person'),
+    plansUpdate: r('PATCH', 'billing', '/apps/{appId}/plans/{key}', 'person'),
+    plansDelete: r('DELETE', 'billing', '/apps/{appId}/plans/{key}', 'person'),
+    plansArchive: r('POST', 'billing', '/apps/{appId}/plans/{key}/archive', 'person'),
+    plansDeletionPreview: r('GET', 'billing', '/apps/{appId}/plans/{key}/deletion-preview', 'person'),
+    productsList: r('GET', 'billing', '/apps/{appId}/products', 'person'),
+    productsCreate: r('POST', 'billing', '/apps/{appId}/products', 'person'),
+    productsGet: r('GET', 'billing', '/apps/{appId}/products/{key}', 'person'),
+    productsUpdate: r('PATCH', 'billing', '/apps/{appId}/products/{key}', 'person'),
+    productsDelete: r('DELETE', 'billing', '/apps/{appId}/products/{key}', 'person'),
+    productsArchive: r('POST', 'billing', '/apps/{appId}/products/{key}/archive', 'person'),
+    metricsList: r('GET', 'billing', '/apps/{appId}/metrics', 'person'),
+    metricsPut: r('PUT', 'billing', '/apps/{appId}/metrics/{key}', 'person'),
+    metricsDelete: r('DELETE', 'billing', '/apps/{appId}/metrics/{key}', 'person'),
+    taxesList: r('GET', 'billing', '/apps/{appId}/taxes', 'person'),
+    taxesPut: r('PUT', 'billing', '/apps/{appId}/taxes/{country}', 'person'),
+    taxesDelete: r('DELETE', 'billing', '/apps/{appId}/taxes/{country}', 'person'),
+    billingSettingsGet: r('GET', 'billing', '/apps/{appId}/settings', 'person'),
+    billingSettingsUpdate: r('PATCH', 'billing', '/apps/{appId}/settings', 'person'),
+    connectionGet: r('GET', 'billing', '/apps/{appId}/connection', 'person'),
+    connectionDelete: r('DELETE', 'billing', '/apps/{appId}/connection', 'person'),
+    connectionPasteKey: r('POST', 'billing', '/connection', 'app-key'),
+    // Flags and their rules.
+    flagsList: r('GET', 'flags', '/apps/{appId}/flags', 'person'),
+    flagsCreate: r('POST', 'flags', '/apps/{appId}/flags', 'person'),
+    flagsGet: r('GET', 'flags', '/apps/{appId}/flags/{key}', 'person'),
+    flagsUpdate: r('PATCH', 'flags', '/apps/{appId}/flags/{key}', 'person'),
+    flagsDelete: r('DELETE', 'flags', '/apps/{appId}/flags/{key}', 'person'),
+    flagsKill: r('POST', 'flags', '/apps/{appId}/flags/{key}/kill', 'person'),
+    flagsRestore: r('POST', 'flags', '/apps/{appId}/flags/{key}/restore', 'person'),
+    segmentsList: r('GET', 'flags', '/apps/{appId}/segments', 'person'),
+    // Roles and privileges, members and workspaces of the app (app-key routes).
+    rolesList: r('GET', 'accounts', '/roles', 'app-key'),
+    rolesCreate: r('POST', 'accounts', '/roles', 'app-key'),
+    rolesUpdate: r('PATCH', 'accounts', '/roles/{roleId}', 'app-key'),
+    rolesDelete: r('DELETE', 'accounts', '/roles/{roleId}', 'app-key'),
+    privilegesList: r('GET', 'accounts', '/privileges', 'app-key'),
+    privilegesCreate: r('POST', 'accounts', '/privileges', 'app-key'),
+    privilegesUpdate: r('PATCH', 'accounts', '/privileges/{privilegeId}', 'app-key'),
+    privilegesDelete: r('DELETE', 'accounts', '/privileges/{privilegeId}', 'app-key'),
+    workspacesList: r('GET', 'accounts', '/workspaces', 'app-key'),
+    membersList: r('GET', 'accounts', '/members', 'app-key', true),
+    membersGet: r('GET', 'accounts', '/members/{memberId}', 'app-key', true),
+    membersUpdate: r('PATCH', 'accounts', '/members/{memberId}', 'app-key', true),
+    membersRemove: r('DELETE', 'accounts', '/members/{memberId}', 'app-key', true),
+    // Invites into the developer's own workspace on Bridge, the one their token is for.
+    invitesList: r('GET', 'accounts', '/invites', 'person'),
+    invitesSend: r('POST', 'accounts', '/invites', 'person'),
+    invitesRevoke: r('DELETE', 'accounts', '/invites/{inviteId}', 'person'),
+    // Invites into one of the app's workspaces (app-key routes).
+    appInvitesList: r('GET', 'accounts', '/invites', 'app-key', true),
+    appInvitesSend: r('POST', 'accounts', '/invites', 'app-key', true),
+    appInvitesRevoke: r('DELETE', 'accounts', '/invites/{inviteId}', 'app-key', true),
+};
+/** The route as the API's contract writes it: `/v2/<microservice><path>`, with `{appId}` for an app. */
+export function contractPath(route) {
+    return `/v${String(API_VERSION)}/${route.service}${route.path.replace('{issuerApp}', '{appId}')}`;
+}
+//# sourceMappingURL=routes.js.map

package/dist/core/routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.js","sourceRoot":"","sources":["../../src/core/routes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,CAAC;AAe7B,MAAM,CAAC,GAAG,CAAC,MAAc,EAAE,OAAgB,EAAE,IAAY,EAAE,IAAU,EAAE,SAAgB,EAAS,EAAE,CAChG,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AAE3F,MAAM,CAAC,MAAM,MAAM,GAAG;IACpB,yDAAyD;IACzD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,iBAAiB,EAAE,2BAA2B,EAAE,MAAM,CAAC;IACzE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,iBAAiB,EAAE,yBAAyB,EAAE,MAAM,CAAC;IACtE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,iBAAiB,EAAE,0BAA0B,EAAE,MAAM,CAAC;IACxE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,iBAAiB,EAAE,WAAW,EAAE,QAAQ,CAAC;IAC5D,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,CAAC;IAEzC,4BAA4B;IAC5B,QAAQ,EAAE,CAAC,CAAC,KAAK,EAAE,cAAc,EAAE,OAAO,EAAE,QAAQ,CAAC;IACrD,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,cAAc,EAAE,OAAO,EAAE,QAAQ,CAAC;IACxD,OAAO,EAAE,CAAC,CAAC,KAAK,EAAE,cAAc,EAAE,eAAe,EAAE,QAAQ,CAAC;IAC5D,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,QAAQ,CAAC;IACjE,UAAU,EAAE,CAAC,CAAC,QAAQ,EAAE,cAAc,EAAE,eAAe,EAAE,QAAQ,CAAC;IAElE,YAAY;IACZ,QAAQ,EAAE,CAAC,CAAC,KAAK,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,QAAQ,CAAC;IACrE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,QAAQ,CAAC;IACxE,UAAU,EAAE,CAAC,CAAC,QAAQ,EAAE,iBAAiB,EAAE,4BAA4B,EAAE,QAAQ,CAAC;IAElF,8EAA8E;IAC9E,SAAS,EAAE,CAAC,CAAC,KAAK,EAAE,SAAS,EAAE,qBAAqB,EAAE,QAAQ,CAAC;IAC/D,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,SAAS,EAAE,qBAAqB,EAAE,QAAQ,CAAC;IAClE,QAAQ,EAAE,CAAC,CAAC,KAAK,EAAE,SAAS,EAAE,2BAA2B,EAAE,QAAQ,CAAC;IACpE,YAAY,EAAE,CAAC,CAAC,KAAK,EAAE,SAAS,EAAE,2BAA2B,EAAE,QAAQ,CAAC;IACxE,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE,SAAS,EAAE,2BAA2B,EAAE,QAAQ,CAAC;IACzE,WAAW,EAAE,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,2BAA2B,EAAE,QAAQ,CAAC;IAC1E,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,SAAS,EAAE,mCAAmC,EAAE,QAAQ,CAAC;IACjF,oBAAoB,EAAE,CAAC,CAAC,KAAK,EAAE,SAAS,EAAE,4CAA4C,EAAE,QAAQ,CAAC;IACjG,YAAY,EAAE,CAAC,CAAC,KAAK,EAAE,SAAS,EAAE,wBAAwB,EAAE,QAAQ,CAAC;IACrE,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,SAAS,EAAE,wBAAwB,EAAE,QAAQ,CAAC;IACxE,WAAW,EAAE,CAAC,CAAC,KAAK,EAAE,SAAS,EAAE,8BAA8B,EAAE,QAAQ,CAAC;IAC1E,cAAc,EAAE,CAAC,CAAC,OAAO,EAAE,SAAS,EAAE,8BAA8B,EAAE,QAAQ,CAAC;IAC/E,cAAc,EAAE,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,8BAA8B,EAAE,QAAQ,CAAC;IAChF,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,SAAS,EAAE,sCAAsC,EAAE,QAAQ,CAAC;IACvF,WAAW,EAAE,CAAC,CAAC,KAAK,EAAE,SAAS,EAAE,uBAAuB,EAAE,QAAQ,CAAC;IACnE,UAAU,EAAE,CAAC,CAAC,KAAK,EAAE,SAAS,EAAE,6BAA6B,EAAE,QAAQ,CAAC;IACxE,aAAa,EAAE,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,6BAA6B,EAAE,QAAQ,CAAC;IAC9E,SAAS,EAAE,CAAC,CAAC,KAAK,EAAE,SAAS,EAAE,qBAAqB,EAAE,QAAQ,CAAC;IAC/D,QAAQ,EAAE,CAAC,CAAC,KAAK,EAAE,SAAS,EAAE,+BAA+B,EAAE,QAAQ,CAAC;IACxE,WAAW,EAAE,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,+BAA+B,EAAE,QAAQ,CAAC;IAC9E,kBAAkB,EAAE,CAAC,CAAC,KAAK,EAAE,SAAS,EAAE,wBAAwB,EAAE,QAAQ,CAAC;IAC3E,qBAAqB,EAAE,CAAC,CAAC,OAAO,EAAE,SAAS,EAAE,wBAAwB,EAAE,QAAQ,CAAC;IAChF,aAAa,EAAE,CAAC,CAAC,KAAK,EAAE,SAAS,EAAE,0BAA0B,EAAE,QAAQ,CAAC;IACxE,gBAAgB,EAAE,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,0BAA0B,EAAE,QAAQ,CAAC;IAC9E,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,SAAS,EAAE,aAAa,EAAE,SAAS,CAAC;IAElE,yBAAyB;IACzB,SAAS,EAAE,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,qBAAqB,EAAE,QAAQ,CAAC;IAC7D,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,qBAAqB,EAAE,QAAQ,CAAC;IAChE,QAAQ,EAAE,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,2BAA2B,EAAE,QAAQ,CAAC;IAClE,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,2BAA2B,EAAE,QAAQ,CAAC;IACvE,WAAW,EAAE,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,2BAA2B,EAAE,QAAQ,CAAC;IACxE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,gCAAgC,EAAE,QAAQ,CAAC;IACzE,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,mCAAmC,EAAE,QAAQ,CAAC;IAC/E,YAAY,EAAE,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,wBAAwB,EAAE,QAAQ,CAAC;IAEnE,4EAA4E;IAC5E,SAAS,EAAE,CAAC,CAAC,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,CAAC;IACpD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,CAAC;IACvD,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE,UAAU,EAAE,iBAAiB,EAAE,SAAS,CAAC;IACjE,WAAW,EAAE,CAAC,CAAC,QAAQ,EAAE,UAAU,EAAE,iBAAiB,EAAE,SAAS,CAAC;IAClE,cAAc,EAAE,CAAC,CAAC,KAAK,EAAE,UAAU,EAAE,aAAa,EAAE,SAAS,CAAC;IAC9D,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,UAAU,EAAE,aAAa,EAAE,SAAS,CAAC;IACjE,gBAAgB,EAAE,CAAC,CAAC,OAAO,EAAE,UAAU,EAAE,2BAA2B,EAAE,SAAS,CAAC;IAChF,gBAAgB,EAAE,CAAC,CAAC,QAAQ,EAAE,UAAU,EAAE,2BAA2B,EAAE,SAAS,CAAC;IACjF,cAAc,EAAE,CAAC,CAAC,KAAK,EAAE,UAAU,EAAE,aAAa,EAAE,SAAS,CAAC;IAC9D,WAAW,EAAE,CAAC,CAAC,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,IAAI,CAAC;IAC9D,UAAU,EAAE,CAAC,CAAC,KAAK,EAAE,UAAU,EAAE,qBAAqB,EAAE,SAAS,EAAE,IAAI,CAAC;IACxE,aAAa,EAAE,CAAC,CAAC,OAAO,EAAE,UAAU,EAAE,qBAAqB,EAAE,SAAS,EAAE,IAAI,CAAC;IAC7E,aAAa,EAAE,CAAC,CAAC,QAAQ,EAAE,UAAU,EAAE,qBAAqB,EAAE,SAAS,EAAE,IAAI,CAAC;IAE9E,oFAAoF;IACpF,WAAW,EAAE,CAAC,CAAC,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,QAAQ,CAAC;IACvD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,QAAQ,CAAC;IACxD,aAAa,EAAE,CAAC,CAAC,QAAQ,EAAE,UAAU,EAAE,qBAAqB,EAAE,QAAQ,CAAC;IACvE,6DAA6D;IAC7D,cAAc,EAAE,CAAC,CAAC,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,IAAI,CAAC;IACjE,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,IAAI,CAAC;IAClE,gBAAgB,EAAE,CAAC,CAAC,QAAQ,EAAE,UAAU,EAAE,qBAAqB,EAAE,SAAS,EAAE,IAAI,CAAC;CACzC,CAAC;AAI3C,wGAAwG;AACxG,MAAM,UAAU,YAAY,CAAC,KAAY;IACvC,OAAO,KAAK,MAAM,CAAC,WAAW,CAAC,IAAI,KAAK,CAAC,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,SAAS,CAAC,EAAE,CAAC;AACpG,CAAC"}

package/dist/core/urls.d.ts

@@ -0,0 +1,15 @@
+export declare function isLocalHost(hostname: string): boolean;
+/**
+ * An address Bridge is reached at: https, or http only on this machine.
+ * No user name or password in it. Returns null for anything else.
+ */
+export declare function secureUrl(value: unknown): URL | null;
+/**
+ * The issuer, checked and normalized: https (http only on this machine), no
+ * query or fragment, no trailing slash. The issuer is the one address the
+ * CLI is given; every endpoint comes from its metadata.
+ */
+export declare function normalizeIssuer(value: string): string;
+/** Fills `{name}` placeholders with URL-encoded values. */
+export declare function fillPath(path: string, params?: Readonly<Record<string, string>>): string;
+//# sourceMappingURL=urls.d.ts.map

package/dist/core/urls.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"urls.d.ts","sourceRoot":"","sources":["../../src/core/urls.ts"],"names":[],"mappings":"AAKA,wBAAgB,WAAW,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAErD;AAED;;;GAGG;AACH,wBAAgB,SAAS,CAAC,KAAK,EAAE,OAAO,GAAG,GAAG,GAAG,IAAI,CAYpD;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAWrD;AAED,2DAA2D;AAC3D,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,GAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAM,GAAG,MAAM,CAM5F"}

package/dist/core/urls.js

@@ -0,0 +1,55 @@
+import { CliError } from './errors.js';
+/** The hosts plain http is allowed on: this machine only, for local development. */
+const LOCAL_HOSTS = new Set(['localhost', '127.0.0.1', '[::1]']);
+export function isLocalHost(hostname) {
+    return LOCAL_HOSTS.has(hostname);
+}
+/**
+ * An address Bridge is reached at: https, or http only on this machine.
+ * No user name or password in it. Returns null for anything else.
+ */
+export function secureUrl(value) {
+    if (typeof value !== 'string' || value === '')
+        return null;
+    let url;
+    try {
+        url = new URL(value);
+    }
+    catch {
+        return null;
+    }
+    if (url.username !== '' || url.password !== '')
+        return null;
+    if (url.protocol === 'https:')
+        return url;
+    if (url.protocol === 'http:' && isLocalHost(url.hostname))
+        return url;
+    return null;
+}
+/**
+ * The issuer, checked and normalized: https (http only on this machine), no
+ * query or fragment, no trailing slash. The issuer is the one address the
+ * CLI is given; every endpoint comes from its metadata.
+ */
+export function normalizeIssuer(value) {
+    const url = secureUrl(value.trim());
+    if (url === null) {
+        throw new CliError('misconfigured', `The issuer must be an https address (http only on localhost): ${value}`, {
+            hint: 'Pass the Bridge App\'s issuer, for example `--issuer https://api.example.com/identity-access/apps/<app-id>`.',
+        });
+    }
+    if (url.search !== '' || url.hash !== '') {
+        throw new CliError('misconfigured', `The issuer has no query or fragment: ${value}`);
+    }
+    return url.toString().replace(/\/+$/, '');
+}
+/** Fills `{name}` placeholders with URL-encoded values. */
+export function fillPath(path, params = {}) {
+    return path.replace(/\{([A-Za-z]+)\}/g, (_, name) => {
+        const value = params[name];
+        if (value === undefined || value === '')
+            throw new CliError('invalid', `Missing ${name}.`);
+        return encodeURIComponent(value);
+    });
+}
+//# sourceMappingURL=urls.js.map