@nocobase/app-cli-client 0.0.0-stage → 0.1.0-beta.1

package/dist/lib/envelope.js

@@ -0,0 +1,87 @@
+// The one JSON document `--json` prints on stdout, success or failure: the application CLI's envelope, built by
+// `@nocobase/cli-envelope`, so a script reads `acme … --json` the way it reads `pnpm nocobase … --json`. A business
+// command's `result` is the API's answer, `{ data, meta? }`; a failure's `error.code` is the error body's `reason`, and
+// `details` carries the HTTP status, the canonical status and the body's metadata.
+import { commandFailureJson, commandSuccessJson, } from '@nocobase/cli-envelope';
+import { EXIT_CODES } from '@nocobase/agent-protocol';
+import { ZodError } from 'zod';
+import { UsageError } from "./command.js";
+import { AppApiError } from "./http.js";
+/** A failure the CLI raises itself, with what the envelope says of it. */
+export class CliCommandError extends Error {
+    code;
+    suggestions;
+    details;
+    /** The exit code; 1 when not given. */
+    exit;
+    constructor(code, message, options = {}) {
+        super(message);
+        this.name = 'CliCommandError';
+        this.code = code;
+        this.suggestions = options.suggestions ?? [];
+        this.details = options.details;
+        this.exit = options.exit ?? EXIT_CODES.general;
+    }
+}
+/** What a step the caller can take next says, for the failures that have one. */
+function suggestionsFor(reason, bin) {
+    switch (reason) {
+        case 'UNAUTHENTICATED':
+        case 'AUTHENTICATION_REQUIRED':
+        case 'CLI_UNAUTHENTICATED':
+            return [
+                { message: `Sign in again with \`${bin} login --server <url>\`.` },
+            ];
+        case 'PLAN_REQUIRED':
+            return [
+                {
+                    message: `Propose an operation plan instead: \`${bin} plan create --file plan.json\`.`,
+                },
+            ];
+        default:
+            return [];
+    }
+}
+/** A failure as the envelope's `error`. */
+export function errorJsonOf(error, bin = 'nocobase-cli') {
+    if (error instanceof CliCommandError)
+        return {
+            code: error.code,
+            message: error.message,
+            suggestions: error.suggestions,
+            ...(error.details === undefined ? {} : { details: error.details }),
+        };
+    if (error instanceof AppApiError) {
+        const details = {
+            ...(error.status ? { httpStatus: error.status } : {}),
+            ...(error.apiStatus ? { status: error.apiStatus } : {}),
+            ...(error.metadata === undefined ? {} : { metadata: error.metadata }),
+        };
+        return {
+            code: error.reason,
+            message: error.message,
+            suggestions: suggestionsFor(error.reason, bin),
+            ...(Object.keys(details).length > 0 ? { details } : {}),
+        };
+    }
+    if (error instanceof UsageError)
+        return { code: 'INVALID_USAGE', message: error.message, suggestions: [] };
+    if (error instanceof ZodError)
+        return {
+            code: 'UNEXPECTED_RESPONSE',
+            message: `The server answered in an unexpected shape: ${error.issues[0]?.message ?? 'invalid'}`,
+            suggestions: [],
+        };
+    return {
+        code: 'UNEXPECTED',
+        message: error instanceof Error ? error.message : String(error),
+        suggestions: [],
+    };
+}
+export function successEnvelope(command, result, warnings = [], status = 'success') {
+    return commandSuccessJson(command, status, result, warnings);
+}
+export function failureEnvelope(command, error, warnings = [], bin) {
+    return commandFailureJson(command, errorJsonOf(error, bin), warnings);
+}
+//# sourceMappingURL=envelope.js.map

package/dist/lib/envelope.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"envelope.js","sourceRoot":"","sources":["../../src/lib/envelope.ts"],"names":[],"mappings":"AAAA,gHAAgH;AAChH,oHAAoH;AACpH,wHAAwH;AACxH,mFAAmF;AACnF,OAAO,EACL,kBAAkB,EAClB,kBAAkB,GAInB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,UAAU,EAAiB,MAAM,0BAA0B,CAAC;AACrE,OAAO,EAAE,QAAQ,EAAE,MAAM,KAAK,CAAC;AAE/B,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAIxC,0EAA0E;AAC1E,MAAM,OAAO,eAAgB,SAAQ,KAAK;IAC/B,IAAI,CAAS;IACb,WAAW,CAA+B;IAC1C,OAAO,CAAU;IAC1B,uCAAuC;IAC9B,IAAI,CAAW;IAExB,YACE,IAAY,EACZ,OAAe,EACf,UAII,EAAE;QAEN,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;QAC9B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,EAAE,CAAC;QAC7C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QAC/B,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,UAAU,CAAC,OAAO,CAAC;IACjD,CAAC;CACF;AAED,iFAAiF;AACjF,SAAS,cAAc,CAAC,MAAc,EAAE,GAAW;IACjD,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,iBAAiB,CAAC;QACvB,KAAK,yBAAyB,CAAC;QAC/B,KAAK,qBAAqB;YACxB,OAAO;gBACL,EAAE,OAAO,EAAE,wBAAwB,GAAG,0BAA0B,EAAE;aACnE,CAAC;QACJ,KAAK,eAAe;YAClB,OAAO;gBACL;oBACE,OAAO,EAAE,wCAAwC,GAAG,kCAAkC;iBACvF;aACF,CAAC;QACJ;YACE,OAAO,EAAE,CAAC;IACd,CAAC;AACH,CAAC;AAED,2CAA2C;AAC3C,MAAM,UAAU,WAAW,CACzB,KAAc,EACd,GAAG,GAAG,cAAc;IAEpB,IAAI,KAAK,YAAY,eAAe;QAClC,OAAO;YACL,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,GAAG,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;SACnE,CAAC;IACJ,IAAI,KAAK,YAAY,WAAW,EAAE,CAAC;QACjC,MAAM,OAAO,GAAG;YACd,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrD,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvD,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC;SACtE,CAAC;QACF,OAAO;YACL,IAAI,EAAE,KAAK,CAAC,MAAM;YAClB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,WAAW,EAAE,cAAc,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,CAAC;YAC9C,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACxD,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,YAAY,UAAU;QAC7B,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;IAC5E,IAAI,KAAK,YAAY,QAAQ;QAC3B,OAAO;YACL,IAAI,EAAE,qBAAqB;YAC3B,OAAO,EAAE,+CAA+C,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,IAAI,SAAS,EAAE;YAC/F,WAAW,EAAE,EAAE;SAChB,CAAC;IACJ,OAAO;QACL,IAAI,EAAE,YAAY;QAClB,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;QAC/D,WAAW,EAAE,EAAE;KAChB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,eAAe,CAC7B,OAAe,EACf,MAAe,EACf,WAA8B,EAAE,EAChC,SAAqC,SAAS;IAE9C,OAAO,kBAAkB,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;AAC/D,CAAC;AAED,MAAM,UAAU,eAAe,CAC7B,OAAe,EACf,KAAc,EACd,WAA8B,EAAE,EAChC,GAAY;IAEZ,OAAO,kBAAkB,CAAC,OAAO,EAAE,WAAW,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,QAAQ,CAAC,CAAC;AACxE,CAAC"}

package/dist/lib/files.d.ts

@@ -0,0 +1,4 @@
+export declare function readJson<T>(file: string): Promise<T | undefined>;
+/** Writes through a temporary file and a rename, so a reader never sees half a file. */
+export declare function writeJsonAtomic(file: string, value: unknown, mode?: number): Promise<void>;
+//# sourceMappingURL=files.d.ts.map

package/dist/lib/files.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"files.d.ts","sourceRoot":"","sources":["../../src/lib/files.ts"],"names":[],"mappings":"AAIA,wBAAsB,QAAQ,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,GAAG,SAAS,CAAC,CAOtE;AAED,wFAAwF;AACxF,wBAAsB,eAAe,CACnC,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,OAAO,EACd,IAAI,SAAQ,GACX,OAAO,CAAC,IAAI,CAAC,CAOf"}

package/dist/lib/files.js

@@ -0,0 +1,23 @@
+// Small file helpers: JSON reads that treat a missing file as absent, and atomic 0600 writes.
+import { chmod, mkdir, readFile, rename, writeFile } from 'node:fs/promises';
+import path from 'node:path';
+export async function readJson(file) {
+    try {
+        return JSON.parse(await readFile(file, 'utf8'));
+    }
+    catch (error) {
+        if (error.code === 'ENOENT')
+            return undefined;
+        throw error;
+    }
+}
+/** Writes through a temporary file and a rename, so a reader never sees half a file. */
+export async function writeJsonAtomic(file, value, mode = 0o600) {
+    await mkdir(path.dirname(file), { recursive: true, mode: 0o700 });
+    const temporary = `${file}.${process.pid}.${Date.now()}.tmp`;
+    await writeFile(temporary, `${JSON.stringify(value, null, 2)}\n`, { mode });
+    // The mode on writeFile is masked by umask; chmod sets it exactly.
+    await chmod(temporary, mode);
+    await rename(temporary, file);
+}
+//# sourceMappingURL=files.js.map

package/dist/lib/files.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"files.js","sourceRoot":"","sources":["../../src/lib/files.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7E,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAI,IAAY;IAC5C,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAM,CAAC;IACvD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QACzE,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,wFAAwF;AACxF,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,IAAY,EACZ,KAAc,EACd,IAAI,GAAG,KAAK;IAEZ,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAClE,MAAM,SAAS,GAAG,GAAG,IAAI,IAAI,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC;IAC7D,MAAM,SAAS,CAAC,SAAS,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5E,mEAAmE;IACnE,MAAM,KAAK,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAC7B,MAAM,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;AAChC,CAAC"}

package/dist/lib/globals.d.ts

@@ -0,0 +1,25 @@
+export interface GlobalFlags {
+    /** The profile to act as, over `<PREFIX>_PROFILE` and the current one. */
+    readonly profile?: string | undefined;
+    /** Go ahead without asking. */
+    readonly yes: boolean;
+    /** Ask the server what would happen and change nothing; refused where the server offers no dry run. */
+    readonly dryRun: boolean;
+    /** Print nothing on success but what a script needs; failures still go to stderr. */
+    readonly quiet: boolean;
+    /** Plain text, without colors. */
+    readonly noColor: boolean;
+}
+export declare class GlobalFlagError extends Error {
+    constructor(message: string);
+}
+/** The line without the global flags, and the flags. */
+export declare function extractGlobalFlags(argv: readonly string[]): {
+    readonly argv: string[];
+    readonly flags: GlobalFlags;
+};
+export declare function setGlobalFlags(flags: GlobalFlags): void;
+export declare function globalFlags(): GlobalFlags;
+/** The global flags as help lists them. */
+export declare const GLOBAL_FLAG_HELP: readonly (readonly [string, string])[];
+//# sourceMappingURL=globals.d.ts.map

package/dist/lib/globals.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"globals.d.ts","sourceRoot":"","sources":["../../src/lib/globals.ts"],"names":[],"mappings":"AAIA,MAAM,WAAW,WAAW;IAC1B,0EAA0E;IAC1E,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,+BAA+B;IAC/B,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC;IACtB,uGAAuG;IACvG,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,qFAAqF;IACrF,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,kCAAkC;IAClC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;CAC3B;AAWD,qBAAa,eAAgB,SAAQ,KAAK;gBAC5B,OAAO,EAAE,MAAM;CAI5B;AAED,wDAAwD;AACxD,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG;IAC3D,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC;CAC7B,CAuCA;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,WAAW,GAAG,IAAI,CAEvD;AAED,wBAAgB,WAAW,IAAI,WAAW,CAEzC;AAED,2CAA2C;AAC3C,eAAO,MAAM,gBAAgB,EAAE,SAAS,CAAC,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,EAOlE,CAAC"}

package/dist/lib/globals.js

@@ -0,0 +1,77 @@
+// The flags every command takes, wherever they appear on the line (before `--`): `--profile <name>`, `--yes` (`-y`),
+// `--dry-run`, `--quiet` (`-q`) and `--no-color`. `runAppCli` takes them off the line before oclif or a business
+// command reads it, so each command sees only its own flags; `--json` and `--help` stay where they are.
+const NONE = {
+    yes: false,
+    dryRun: false,
+    quiet: false,
+    noColor: false,
+};
+let current = NONE;
+export class GlobalFlagError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'GlobalFlagError';
+    }
+}
+/** The line without the global flags, and the flags. */
+export function extractGlobalFlags(argv) {
+    const rest = [];
+    let profile;
+    let yes = false;
+    let dryRun = false;
+    let quiet = false;
+    let noColor = false;
+    for (let index = 0; index < argv.length; index += 1) {
+        const word = argv[index];
+        if (word === '--') {
+            rest.push(...argv.slice(index));
+            break;
+        }
+        if (word === '--profile' || word.startsWith('--profile=')) {
+            const value = word === '--profile'
+                ? argv[(index += 1)]
+                : word.slice('--profile='.length);
+            if (value === undefined || value === '' || value.startsWith('-'))
+                throw new GlobalFlagError('--profile needs a profile name.');
+            profile = value;
+            continue;
+        }
+        if (word === '--yes' || word === '-y')
+            yes = true;
+        else if (word === '--dry-run')
+            dryRun = true;
+        else if (word === '--quiet' || word === '-q')
+            quiet = true;
+        else if (word === '--no-color')
+            noColor = true;
+        else
+            rest.push(word);
+    }
+    return {
+        argv: rest,
+        flags: {
+            ...(profile === undefined ? {} : { profile }),
+            yes,
+            dryRun,
+            quiet,
+            noColor,
+        },
+    };
+}
+export function setGlobalFlags(flags) {
+    current = flags;
+}
+export function globalFlags() {
+    return current;
+}
+/** The global flags as help lists them. */
+export const GLOBAL_FLAG_HELP = [
+    ['--json', 'Print the result as one JSON document (the cli-envelope).'],
+    ['--profile <name>', 'Act as this signed-in profile.'],
+    ['-y, --yes', 'Go ahead without asking.'],
+    ['--dry-run', 'Change nothing; refused where the server offers no dry run.'],
+    ['-q, --quiet', 'Print only what a script needs.'],
+    ['--no-color', 'Plain text, without colors.'],
+];
+//# sourceMappingURL=globals.js.map

package/dist/lib/globals.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"globals.js","sourceRoot":"","sources":["../../src/lib/globals.ts"],"names":[],"mappings":"AAAA,qHAAqH;AACrH,iHAAiH;AACjH,wGAAwG;AAexG,MAAM,IAAI,GAAgB;IACxB,GAAG,EAAE,KAAK;IACV,MAAM,EAAE,KAAK;IACb,KAAK,EAAE,KAAK;IACZ,OAAO,EAAE,KAAK;CACf,CAAC;AAEF,IAAI,OAAO,GAAgB,IAAI,CAAC;AAEhC,MAAM,OAAO,eAAgB,SAAQ,KAAK;IACxC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;IAChC,CAAC;CACF;AAED,wDAAwD;AACxD,MAAM,UAAU,kBAAkB,CAAC,IAAuB;IAIxD,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,IAAI,OAA2B,CAAC;IAChC,IAAI,GAAG,GAAG,KAAK,CAAC;IAChB,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,IAAI,KAAK,GAAG,KAAK,CAAC;IAClB,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;QACzB,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAClB,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;YAChC,MAAM;QACR,CAAC;QACD,IAAI,IAAI,KAAK,WAAW,IAAI,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YAC1D,MAAM,KAAK,GACT,IAAI,KAAK,WAAW;gBAClB,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC;gBACpB,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;YACtC,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;gBAC9D,MAAM,IAAI,eAAe,CAAC,iCAAiC,CAAC,CAAC;YAC/D,OAAO,GAAG,KAAK,CAAC;YAChB,SAAS;QACX,CAAC;QACD,IAAI,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,IAAI;YAAE,GAAG,GAAG,IAAI,CAAC;aAC7C,IAAI,IAAI,KAAK,WAAW;YAAE,MAAM,GAAG,IAAI,CAAC;aACxC,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,IAAI;YAAE,KAAK,GAAG,IAAI,CAAC;aACtD,IAAI,IAAI,KAAK,YAAY;YAAE,OAAO,GAAG,IAAI,CAAC;;YAC1C,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACvB,CAAC;IACD,OAAO;QACL,IAAI,EAAE,IAAI;QACV,KAAK,EAAE;YACL,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC;YAC7C,GAAG;YACH,MAAM;YACN,KAAK;YACL,OAAO;SACR;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,KAAkB;IAC/C,OAAO,GAAG,KAAK,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,WAAW;IACzB,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,2CAA2C;AAC3C,MAAM,CAAC,MAAM,gBAAgB,GAA2C;IACtE,CAAC,QAAQ,EAAE,2DAA2D,CAAC;IACvE,CAAC,kBAAkB,EAAE,gCAAgC,CAAC;IACtD,CAAC,WAAW,EAAE,0BAA0B,CAAC;IACzC,CAAC,WAAW,EAAE,6DAA6D,CAAC;IAC5E,CAAC,aAAa,EAAE,iCAAiC,CAAC;IAClD,CAAC,YAAY,EAAE,6BAA6B,CAAC;CAC9C,CAAC"}

package/dist/lib/http.d.ts

@@ -0,0 +1,45 @@
+import type { z } from 'zod';
+import { type ExitCode } from '@nocobase/agent-protocol';
+export declare class AppApiError extends Error {
+    /** The HTTP status; 0 when no response arrived. */
+    readonly status: number;
+    /** The error body's `reason`, or a local one (`NETWORK`, `HTTP_<status>`). */
+    readonly reason: string;
+    /** The error body's canonical `status`, when it carried one. */
+    readonly apiStatus: string | undefined;
+    readonly metadata: unknown;
+    constructor(status: number, reason: string, message: string, metadata?: unknown, apiStatus?: string);
+    /** No response, or a server-side failure worth retrying. */
+    get transient(): boolean;
+    get exitCode(): ExitCode;
+}
+/** The `data` of a `{ data }` answer; anything else as it is. */
+export declare function dataOf(body: unknown): unknown;
+export interface ApiClientOptions {
+    server: string;
+    headers: Record<string, string>;
+    /** Per-request timeout; long polls pass their own. */
+    timeoutMs?: number;
+    fetch?: typeof fetch;
+}
+export interface RequestOptions {
+    query?: Record<string, string>;
+    timeoutMs?: number;
+    signal?: AbortSignal;
+}
+export declare class ApiClient {
+    private readonly options;
+    constructor(options: ApiClientOptions);
+    get server(): string;
+    get<T>(route: string, schema: z.ZodType<T>, options?: RequestOptions): Promise<T>;
+    post<T>(route: string, body: unknown, schema: z.ZodType<T>, options?: RequestOptions): Promise<T>;
+    /**
+     * The bytes at `route` (a path on the server, or a URL on its origin), with this client's headers. Another origin is
+     * refused, so a credential never leaves the application it belongs to.
+     */
+    download(route: string, options?: {
+        timeoutMs?: number;
+    }): Promise<Uint8Array>;
+    request(method: string, route: string, body: unknown, options?: RequestOptions): Promise<unknown>;
+}
+//# sourceMappingURL=http.d.ts.map

package/dist/lib/http.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.d.ts","sourceRoot":"","sources":["../../src/lib/http.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAE7B,OAAO,EAAiB,KAAK,QAAQ,EAAE,MAAM,0BAA0B,CAAC;AAIxE,qBAAa,WAAY,SAAQ,KAAK;IACpC,mDAAmD;IACnD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,8EAA8E;IAC9E,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,gEAAgE;IAChE,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;gBAGzB,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,EACf,QAAQ,CAAC,EAAE,OAAO,EAClB,SAAS,CAAC,EAAE,MAAM;IAUpB,4DAA4D;IAC5D,IAAI,SAAS,IAAI,OAAO,CAOvB;IAED,IAAI,QAAQ,IAAI,QAAQ,CAEvB;CACF;AAED,iEAAiE;AACjE,wBAAgB,MAAM,CAAC,IAAI,EAAE,OAAO,GAAG,OAAO,CAI7C;AAED,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,sDAAsD;IACtD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;CACtB;AAED,MAAM,WAAW,cAAc;IAC7B,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED,qBAAa,SAAS;IACpB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAmB;gBAE/B,OAAO,EAAE,gBAAgB;IAIrC,IAAI,MAAM,IAAI,MAAM,CAEnB;IAEK,GAAG,CAAC,CAAC,EACT,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EACpB,OAAO,GAAE,cAAmB,GAC3B,OAAO,CAAC,CAAC,CAAC;IAMP,IAAI,CAAC,CAAC,EACV,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,OAAO,EACb,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EACpB,OAAO,GAAE,cAAmB,GAC3B,OAAO,CAAC,CAAC,CAAC;IAMb;;;OAGG;IACG,QAAQ,CACZ,KAAK,EAAE,MAAM,EACb,OAAO,GAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAA;KAAO,GACnC,OAAO,CAAC,UAAU,CAAC;IAqDhB,OAAO,CACX,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,OAAO,EACb,OAAO,GAAE,cAAmB,GAC3B,OAAO,CAAC,OAAO,CAAC;CAqEpB"}

package/dist/lib/http.js

@@ -0,0 +1,141 @@
+import { readErrorBody } from '@nocobase/agent-protocol';
+import { apiExitCode } from "../parse/exit.js";
+export class AppApiError extends Error {
+    /** The HTTP status; 0 when no response arrived. */
+    status;
+    /** The error body's `reason`, or a local one (`NETWORK`, `HTTP_<status>`). */
+    reason;
+    /** The error body's canonical `status`, when it carried one. */
+    apiStatus;
+    metadata;
+    constructor(status, reason, message, metadata, apiStatus) {
+        super(message);
+        this.name = 'AppApiError';
+        this.status = status;
+        this.reason = reason;
+        this.metadata = metadata;
+        this.apiStatus = apiStatus;
+    }
+    /** No response, or a server-side failure worth retrying. */
+    get transient() {
+        return (this.status === 0 ||
+            this.status === 408 ||
+            this.status === 429 ||
+            this.status >= 500);
+    }
+    get exitCode() {
+        return apiExitCode(this.status, this.reason, this.apiStatus);
+    }
+}
+/** The `data` of a `{ data }` answer; anything else as it is. */
+export function dataOf(body) {
+    return typeof body === 'object' && body !== null && 'data' in body
+        ? body.data
+        : body;
+}
+export class ApiClient {
+    options;
+    constructor(options) {
+        this.options = options;
+    }
+    get server() {
+        return this.options.server;
+    }
+    async get(route, schema, options = {}) {
+        return schema.parse(dataOf(await this.request('GET', route, undefined, options)));
+    }
+    async post(route, body, schema, options = {}) {
+        return schema.parse(dataOf(await this.request('POST', route, body, options)));
+    }
+    /**
+     * The bytes at `route` (a path on the server, or a URL on its origin), with this client's headers. Another origin is
+     * refused, so a credential never leaves the application it belongs to.
+     */
+    async download(route, options = {}) {
+        const base = this.options.server.endsWith('/')
+            ? this.options.server
+            : `${this.options.server}/`;
+        const url = /^[a-z][a-z0-9+.-]*:\/\//iu.test(route)
+            ? new URL(route)
+            : new URL(route.replace(/^\//, ''), base);
+        if (url.origin !== new URL(base).origin)
+            throw new AppApiError(0, 'INVALID_REQUEST', `Refusing to download from another origin: ${url.origin}`);
+        let response;
+        try {
+            response = await (this.options.fetch ?? fetch)(url, {
+                headers: this.options.headers,
+                signal: AbortSignal.timeout(options.timeoutMs ?? 30 * 60_000),
+            });
+        }
+        catch (error) {
+            const reason = error instanceof Error ? error.message : String(error);
+            throw new AppApiError(0, 'NETWORK', `Could not reach ${url.origin}: ${reason}`);
+        }
+        if (!response.ok) {
+            const text = await response.text().catch(() => '');
+            let parsed;
+            try {
+                parsed = JSON.parse(text);
+            }
+            catch {
+                parsed = undefined;
+            }
+            const error = readErrorBody(parsed);
+            if (error)
+                throw new AppApiError(response.status, error.reason, error.message, error.metadata, error.status);
+            throw new AppApiError(response.status, `HTTP_${response.status}`, `GET ${url.pathname} answered ${response.status}`);
+        }
+        return new Uint8Array(await response.arrayBuffer());
+    }
+    async request(method, route, body, options = {}) {
+        // A route already naming the server's base path (`serverPath`) is taken below the origin, not below the base again.
+        const base = new URL(this.options.server).pathname.replace(/\/+$/u, '');
+        const relative = base && (route === base || route.startsWith(`${base}/`))
+            ? route.slice(base.length)
+            : route;
+        const url = new URL(relative.replace(/^\//, ''), this.options.server.endsWith('/')
+            ? this.options.server
+            : `${this.options.server}/`);
+        for (const [key, value] of Object.entries(options.query ?? {}))
+            url.searchParams.set(key, value);
+        const timeout = AbortSignal.timeout(options.timeoutMs ?? this.options.timeoutMs ?? 30_000);
+        const signal = options.signal === undefined
+            ? timeout
+            : AbortSignal.any([timeout, options.signal]);
+        let response;
+        try {
+            response = await (this.options.fetch ?? fetch)(url, {
+                method,
+                headers: {
+                    accept: 'application/json',
+                    ...(body === undefined ? {} : { 'content-type': 'application/json' }),
+                    ...this.options.headers,
+                },
+                body: body === undefined ? undefined : JSON.stringify(body),
+                signal,
+            });
+        }
+        catch (error) {
+            const reason = error instanceof Error ? error.message : String(error);
+            throw new AppApiError(0, 'NETWORK', `Could not reach ${url.origin}: ${reason}`);
+        }
+        const text = await response.text().catch(() => '');
+        let parsed = undefined;
+        if (text !== '') {
+            try {
+                parsed = JSON.parse(text);
+            }
+            catch {
+                parsed = undefined;
+            }
+        }
+        if (!response.ok) {
+            const error = readErrorBody(parsed);
+            if (error)
+                throw new AppApiError(response.status, error.reason, error.message, error.metadata, error.status);
+            throw new AppApiError(response.status, `HTTP_${response.status}`, `${method} ${url.pathname} answered ${response.status}`);
+        }
+        return parsed;
+    }
+}
+//# sourceMappingURL=http.js.map

package/dist/lib/http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.js","sourceRoot":"","sources":["../../src/lib/http.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,aAAa,EAAiB,MAAM,0BAA0B,CAAC;AAExE,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAE/C,MAAM,OAAO,WAAY,SAAQ,KAAK;IACpC,mDAAmD;IAC1C,MAAM,CAAS;IACxB,8EAA8E;IACrE,MAAM,CAAS;IACxB,gEAAgE;IACvD,SAAS,CAAqB;IAC9B,QAAQ,CAAU;IAE3B,YACE,MAAc,EACd,MAAc,EACd,OAAe,EACf,QAAkB,EAClB,SAAkB;QAElB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,aAAa,CAAC;QAC1B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;IAC7B,CAAC;IAED,4DAA4D;IAC5D,IAAI,SAAS;QACX,OAAO,CACL,IAAI,CAAC,MAAM,KAAK,CAAC;YACjB,IAAI,CAAC,MAAM,KAAK,GAAG;YACnB,IAAI,CAAC,MAAM,KAAK,GAAG;YACnB,IAAI,CAAC,MAAM,IAAI,GAAG,CACnB,CAAC;IACJ,CAAC;IAED,IAAI,QAAQ;QACV,OAAO,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;IAC/D,CAAC;CACF;AAED,iEAAiE;AACjE,MAAM,UAAU,MAAM,CAAC,IAAa;IAClC,OAAO,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,IAAI,MAAM,IAAI,IAAI;QAChE,CAAC,CAAC,IAAI,CAAC,IAAI;QACX,CAAC,CAAC,IAAI,CAAC;AACX,CAAC;AAgBD,MAAM,OAAO,SAAS;IACH,OAAO,CAAmB;IAE3C,YAAY,OAAyB;QACnC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;IAED,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;IAC7B,CAAC;IAED,KAAK,CAAC,GAAG,CACP,KAAa,EACb,MAAoB,EACpB,UAA0B,EAAE;QAE5B,OAAO,MAAM,CAAC,KAAK,CACjB,MAAM,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC,CAC7D,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,IAAI,CACR,KAAa,EACb,IAAa,EACb,MAAoB,EACpB,UAA0B,EAAE;QAE5B,OAAO,MAAM,CAAC,KAAK,CACjB,MAAM,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,CACzD,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,QAAQ,CACZ,KAAa,EACb,UAAkC,EAAE;QAEpC,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC;YAC5C,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM;YACrB,CAAC,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC;QAC9B,MAAM,GAAG,GAAG,2BAA2B,CAAC,IAAI,CAAC,KAAK,CAAC;YACjD,CAAC,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC;YAChB,CAAC,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;QAC5C,IAAI,GAAG,CAAC,MAAM,KAAK,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,MAAM;YACrC,MAAM,IAAI,WAAW,CACnB,CAAC,EACD,iBAAiB,EACjB,6CAA6C,GAAG,CAAC,MAAM,EAAE,CAC1D,CAAC;QACJ,IAAI,QAAkB,CAAC;QACvB,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,KAAK,CAAC,CAAC,GAAG,EAAE;gBAClD,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO;gBAC7B,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,IAAI,EAAE,GAAG,MAAM,CAAC;aAC9D,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,MAAM,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACtE,MAAM,IAAI,WAAW,CACnB,CAAC,EACD,SAAS,EACT,mBAAmB,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAC3C,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;YACnD,IAAI,MAAe,CAAC;YACpB,IAAI,CAAC;gBACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC5B,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,GAAG,SAAS,CAAC;YACrB,CAAC;YACD,MAAM,KAAK,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;YACpC,IAAI,KAAK;gBACP,MAAM,IAAI,WAAW,CACnB,QAAQ,CAAC,MAAM,EACf,KAAK,CAAC,MAAM,EACZ,KAAK,CAAC,OAAO,EACb,KAAK,CAAC,QAAQ,EACd,KAAK,CAAC,MAAM,CACb,CAAC;YACJ,MAAM,IAAI,WAAW,CACnB,QAAQ,CAAC,MAAM,EACf,QAAQ,QAAQ,CAAC,MAAM,EAAE,EACzB,OAAO,GAAG,CAAC,QAAQ,aAAa,QAAQ,CAAC,MAAM,EAAE,CAClD,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,UAAU,CAAC,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;IACtD,CAAC;IAED,KAAK,CAAC,OAAO,CACX,MAAc,EACd,KAAa,EACb,IAAa,EACb,UAA0B,EAAE;QAE5B,oHAAoH;QACpH,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QACxE,MAAM,QAAQ,GACZ,IAAI,IAAI,CAAC,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC;YACtD,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC;YAC1B,CAAC,CAAC,KAAK,CAAC;QACZ,MAAM,GAAG,GAAG,IAAI,GAAG,CACjB,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,EAC3B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC;YAC/B,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM;YACrB,CAAC,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAC9B,CAAC;QACF,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC;YAC5D,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACnC,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,CACjC,OAAO,CAAC,SAAS,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,MAAM,CACtD,CAAC;QACF,MAAM,MAAM,GACV,OAAO,CAAC,MAAM,KAAK,SAAS;YAC1B,CAAC,CAAC,OAAO;YACT,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;QACjD,IAAI,QAAkB,CAAC;QACvB,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,KAAK,CAAC,CAAC,GAAG,EAAE;gBAClD,MAAM;gBACN,OAAO,EAAE;oBACP,MAAM,EAAE,kBAAkB;oBAC1B,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC;oBACrE,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO;iBACxB;gBACD,IAAI,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;gBAC3D,MAAM;aACP,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,MAAM,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACtE,MAAM,IAAI,WAAW,CACnB,CAAC,EACD,SAAS,EACT,mBAAmB,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAC3C,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QACnD,IAAI,MAAM,GAAY,SAAS,CAAC;QAChC,IAAI,IAAI,KAAK,EAAE,EAAE,CAAC;YAChB,IAAI,CAAC;gBACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC5B,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,GAAG,SAAS,CAAC;YACrB,CAAC;QACH,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,KAAK,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;YACpC,IAAI,KAAK;gBACP,MAAM,IAAI,WAAW,CACnB,QAAQ,CAAC,MAAM,EACf,KAAK,CAAC,MAAM,EACZ,KAAK,CAAC,OAAO,EACb,KAAK,CAAC,QAAQ,EACd,KAAK,CAAC,MAAM,CACb,CAAC;YACJ,MAAM,IAAI,WAAW,CACnB,QAAQ,CAAC,MAAM,EACf,QAAQ,QAAQ,CAAC,MAAM,EAAE,EACzB,GAAG,MAAM,IAAI,GAAG,CAAC,QAAQ,aAAa,QAAQ,CAAC,MAAM,EAAE,CACxD,CAAC;QACJ,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;CACF"}

package/dist/lib/mime.d.ts

@@ -0,0 +1,3 @@
+/** The media type of `file` by its extension; `application/octet-stream` when it has none the CLI knows. */
+export declare function mediaTypeOf(file: string): string;
+//# sourceMappingURL=mime.d.ts.map

package/dist/lib/mime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mime.d.ts","sourceRoot":"","sources":["../../src/lib/mime.ts"],"names":[],"mappings":"AAkCA,4GAA4G;AAC5G,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAGhD"}

package/dist/lib/mime.js

@@ -0,0 +1,38 @@
+// A file's media type from its extension, for files the CLI uploads: the server keeps the type it is sent, and a
+// browser previews a screenshot only when it is sent as an image.
+import path from 'node:path';
+const TYPES = {
+    png: 'image/png',
+    jpg: 'image/jpeg',
+    jpeg: 'image/jpeg',
+    gif: 'image/gif',
+    webp: 'image/webp',
+    avif: 'image/avif',
+    svg: 'image/svg+xml',
+    pdf: 'application/pdf',
+    txt: 'text/plain',
+    log: 'text/plain',
+    md: 'text/markdown',
+    csv: 'text/csv',
+    json: 'application/json',
+    html: 'text/html',
+    xml: 'application/xml',
+    yaml: 'application/yaml',
+    yml: 'application/yaml',
+    zip: 'application/zip',
+    gz: 'application/gzip',
+    tgz: 'application/gzip',
+    har: 'application/json',
+    mp4: 'video/mp4',
+    webm: 'video/webm',
+    mov: 'video/quicktime',
+    docx: 'application/vnd.openxmlformats-officedocument.wordprocessingml.document',
+    xlsx: 'application/vnd.openxmlformats-officedocument.spreadsheetml.sheet',
+    pptx: 'application/vnd.openxmlformats-officedocument.presentationml.presentation',
+};
+/** The media type of `file` by its extension; `application/octet-stream` when it has none the CLI knows. */
+export function mediaTypeOf(file) {
+    const ext = path.extname(file).slice(1).toLowerCase();
+    return TYPES[ext] ?? 'application/octet-stream';
+}
+//# sourceMappingURL=mime.js.map

package/dist/lib/mime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mime.js","sourceRoot":"","sources":["../../src/lib/mime.ts"],"names":[],"mappings":"AAAA,iHAAiH;AACjH,kEAAkE;AAClE,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,MAAM,KAAK,GAAqC;IAC9C,GAAG,EAAE,WAAW;IAChB,GAAG,EAAE,YAAY;IACjB,IAAI,EAAE,YAAY;IAClB,GAAG,EAAE,WAAW;IAChB,IAAI,EAAE,YAAY;IAClB,IAAI,EAAE,YAAY;IAClB,GAAG,EAAE,eAAe;IACpB,GAAG,EAAE,iBAAiB;IACtB,GAAG,EAAE,YAAY;IACjB,GAAG,EAAE,YAAY;IACjB,EAAE,EAAE,eAAe;IACnB,GAAG,EAAE,UAAU;IACf,IAAI,EAAE,kBAAkB;IACxB,IAAI,EAAE,WAAW;IACjB,GAAG,EAAE,iBAAiB;IACtB,IAAI,EAAE,kBAAkB;IACxB,GAAG,EAAE,kBAAkB;IACvB,GAAG,EAAE,iBAAiB;IACtB,EAAE,EAAE,kBAAkB;IACtB,GAAG,EAAE,kBAAkB;IACvB,GAAG,EAAE,kBAAkB;IACvB,GAAG,EAAE,WAAW;IAChB,IAAI,EAAE,YAAY;IAClB,GAAG,EAAE,iBAAiB;IACtB,IAAI,EAAE,yEAAyE;IAC/E,IAAI,EAAE,mEAAmE;IACzE,IAAI,EAAE,2EAA2E;CAClF,CAAC;AAEF,4GAA4G;AAC5G,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;IACtD,OAAO,KAAK,CAAC,GAAG,CAAC,IAAI,0BAA0B,CAAC;AAClD,CAAC"}

package/dist/lib/secrets/index.d.ts

@@ -0,0 +1,18 @@
+import type { AppCliConfig } from '../../config.ts';
+import type { SecretStore, SecretStoreKind } from './store.ts';
+export { SecretStoreError, type RunTool, type SecretStore, type SecretStoreKind, type ToolResult, } from './store.ts';
+export { MacKeychain } from './macos.ts';
+export { SecretService } from './secret-service.ts';
+export { CredentialManager } from './windows.ts';
+export type KeyStorage = SecretStoreKind | 'file';
+/** `AppCliConfig.keychainEnv` set to `off` (`ACME_KEYCHAIN=off`) turns the keychain off: the key goes into `config.json`. */
+export declare function keychainDisabled(config: AppCliConfig, env?: NodeJS.ProcessEnv): boolean;
+/** The keychain of this platform, or undefined when it has none or it is turned off. */
+export declare function defaultSecretStore(config: AppCliConfig, env?: NodeJS.ProcessEnv, platform?: NodeJS.Platform): SecretStore | undefined;
+/** The keychain service of the CLI's items, such as `acme-cli`. */
+export declare function keychainService(config: AppCliConfig): string;
+/** One item per state directory, so a test home or a second profile never overwrites the real one. */
+export declare function keychainAccount(home: string): string;
+export declare function keychainLabel(config: AppCliConfig, server: string): string;
+export declare function describeStorage(storage: KeyStorage, file: string): string;
+//# sourceMappingURL=index.d.ts.map

package/dist/lib/secrets/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/lib/secrets/index.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAGpD,OAAO,KAAK,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAG/D,OAAO,EACL,gBAAgB,EAChB,KAAK,OAAO,EACZ,KAAK,WAAW,EAChB,KAAK,eAAe,EACpB,KAAK,UAAU,GAChB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAEjD,MAAM,MAAM,UAAU,GAAG,eAAe,GAAG,MAAM,CAAC;AAElD,6HAA6H;AAC7H,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,YAAY,EACpB,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,OAAO,CAGT;AAED,wFAAwF;AACxF,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,YAAY,EACpB,GAAG,GAAE,MAAM,CAAC,UAAwB,EACpC,QAAQ,GAAE,MAAM,CAAC,QAA2B,GAC3C,WAAW,GAAG,SAAS,CAYzB;AAED,mEAAmE;AACnE,wBAAgB,eAAe,CAAC,MAAM,EAAE,YAAY,GAAG,MAAM,CAE5D;AAED,sGAAsG;AACtG,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEpD;AAED,wBAAgB,aAAa,CAAC,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAE1E;AAED,wBAAgB,eAAe,CAAC,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAWzE"}

package/dist/lib/secrets/index.js

@@ -0,0 +1,55 @@
+// Where the signed-in person's API key is kept: the system keychain (`AppCliConfig.keychainService`, one item per state
+// directory), or, where there is none, `config.json` itself (0600), with a warning. `config.json` says which.
+import path from 'node:path';
+import { cliKeychainService } from '@nocobase/agent-protocol';
+import { MacKeychain } from "./macos.js";
+import { SecretService } from "./secret-service.js";
+import { CredentialManager } from "./windows.js";
+export { SecretStoreError, } from "./store.js";
+export { MacKeychain } from "./macos.js";
+export { SecretService } from "./secret-service.js";
+export { CredentialManager } from "./windows.js";
+/** `AppCliConfig.keychainEnv` set to `off` (`ACME_KEYCHAIN=off`) turns the keychain off: the key goes into `config.json`. */
+export function keychainDisabled(config, env = process.env) {
+    const name = config.keychainEnv;
+    return name !== undefined && /^(off|0|false|no)$/iu.test(env[name] ?? '');
+}
+/** The keychain of this platform, or undefined when it has none or it is turned off. */
+export function defaultSecretStore(config, env = process.env, platform = process.platform) {
+    if (keychainDisabled(config, env))
+        return undefined;
+    switch (platform) {
+        case 'darwin':
+            return new MacKeychain();
+        case 'linux':
+            return new SecretService(undefined, undefined, env);
+        case 'win32':
+            return new CredentialManager();
+        default:
+            return undefined;
+    }
+}
+/** The keychain service of the CLI's items, such as `acme-cli`. */
+export function keychainService(config) {
+    return config.keychainService ?? cliKeychainService(config.bin);
+}
+/** One item per state directory, so a test home or a second profile never overwrites the real one. */
+export function keychainAccount(home) {
+    return path.resolve(home);
+}
+export function keychainLabel(config, server) {
+    return `${config.displayName} CLI sign-in (${server})`;
+}
+export function describeStorage(storage, file) {
+    switch (storage) {
+        case 'keychain':
+            return 'the macOS Keychain';
+        case 'secret-service':
+            return 'the Secret Service keyring';
+        case 'credential-manager':
+            return 'the Windows Credential Manager';
+        case 'file':
+            return `plain text in ${file} (0600)`;
+    }
+}
+//# sourceMappingURL=index.js.map

package/dist/lib/secrets/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/lib/secrets/index.ts"],"names":[],"mappings":"AAAA,wHAAwH;AACxH,8GAA8G;AAC9G,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAG9D,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEpD,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAEjD,OAAO,EACL,gBAAgB,GAKjB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAIjD,6HAA6H;AAC7H,MAAM,UAAU,gBAAgB,CAC9B,MAAoB,EACpB,MAAyB,OAAO,CAAC,GAAG;IAEpC,MAAM,IAAI,GAAG,MAAM,CAAC,WAAW,CAAC;IAChC,OAAO,IAAI,KAAK,SAAS,IAAI,sBAAsB,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;AAC5E,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,kBAAkB,CAChC,MAAoB,EACpB,MAAyB,OAAO,CAAC,GAAG,EACpC,WAA4B,OAAO,CAAC,QAAQ;IAE5C,IAAI,gBAAgB,CAAC,MAAM,EAAE,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IACpD,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,QAAQ;YACX,OAAO,IAAI,WAAW,EAAE,CAAC;QAC3B,KAAK,OAAO;YACV,OAAO,IAAI,aAAa,CAAC,SAAS,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;QACtD,KAAK,OAAO;YACV,OAAO,IAAI,iBAAiB,EAAE,CAAC;QACjC;YACE,OAAO,SAAS,CAAC;IACrB,CAAC;AACH,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,eAAe,CAAC,MAAoB;IAClD,OAAO,MAAM,CAAC,eAAe,IAAI,kBAAkB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;AAClE,CAAC;AAED,sGAAsG;AACtG,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;AAC5B,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,MAAoB,EAAE,MAAc;IAChE,OAAO,GAAG,MAAM,CAAC,WAAW,iBAAiB,MAAM,GAAG,CAAC;AACzD,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,OAAmB,EAAE,IAAY;IAC/D,QAAQ,OAAO,EAAE,CAAC;QAChB,KAAK,UAAU;YACb,OAAO,oBAAoB,CAAC;QAC9B,KAAK,gBAAgB;YACnB,OAAO,4BAA4B,CAAC;QACtC,KAAK,oBAAoB;YACvB,OAAO,gCAAgC,CAAC;QAC1C,KAAK,MAAM;YACT,OAAO,iBAAiB,IAAI,SAAS,CAAC;IAC1C,CAAC;AACH,CAAC"}

package/dist/lib/secrets/macos.d.ts

@@ -0,0 +1,13 @@
+import { type RunTool, type SecretStore } from './store.ts';
+export declare const SECURITY = "/usr/bin/security";
+export declare class MacKeychain implements SecretStore {
+    readonly kind: "keychain";
+    private readonly run;
+    private readonly platform;
+    constructor(run?: RunTool, platform?: NodeJS.Platform);
+    available(): Promise<boolean>;
+    get(service: string, account: string): Promise<string | undefined>;
+    set(service: string, account: string, secret: string, label: string): Promise<void>;
+    delete(service: string, account: string): Promise<void>;
+}
+//# sourceMappingURL=macos.d.ts.map

package/dist/lib/secrets/macos.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"macos.d.ts","sourceRoot":"","sources":["../../../src/lib/secrets/macos.ts"],"names":[],"mappings":"AAGA,OAAO,EAKL,KAAK,OAAO,EACZ,KAAK,WAAW,EACjB,MAAM,YAAY,CAAC;AAEpB,eAAO,MAAM,QAAQ,sBAAsB,CAAC;AAa5C,qBAAa,WAAY,YAAW,WAAW;IAC7C,QAAQ,CAAC,IAAI,EAAG,UAAU,CAAU;IAEpC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAU;IAC9B,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAkB;gBAGzC,GAAG,GAAE,OAAiB,EACtB,QAAQ,GAAE,MAAM,CAAC,QAA2B;IAMxC,SAAS,IAAI,OAAO,CAAC,OAAO,CAAC;IAK7B,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;IAiBlE,GAAG,CACP,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,IAAI,CAAC;IAWV,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAa9D"}