@ora-ai/cli 0.1.0

package/dist/core/http.js

@@ -0,0 +1,82 @@
+/**
+ * The one HTTP door for every generated command.
+ *
+ * Auth policy mirrors the platform's createServiceClient: on a 401 the token
+ * is force-re-exchanged and the request retried EXACTLY once. 5xx is never
+ * retried — a POST /runs may have been admitted and billed; at-most-once is
+ * the CLI's promise for mutations.
+ *
+ * Non-ok responses map to ApiError carrying the platform envelope
+ * {error, code, details?} so output.ts can tell the 402/403 stories.
+ */
+export class ApiError extends Error {
+    status;
+    code;
+    details;
+    constructor(message, status, code, details) {
+        super(message);
+        this.status = status;
+        this.code = code;
+        this.details = details;
+        this.name = "ApiError";
+    }
+}
+export class HttpClient {
+    apiUrl;
+    auth;
+    fetchFn;
+    constructor(deps) {
+        this.apiUrl = deps.apiUrl;
+        this.auth = deps.auth;
+        this.fetchFn = deps.fetchFn ?? fetch;
+    }
+    /** JSON operations: parsed body (null when empty), ApiError on non-ok. */
+    async call(opts) {
+        const res = await this.send(opts, "application/json");
+        const text = await res.text();
+        if (!text)
+            return null;
+        try {
+            return JSON.parse(text);
+        }
+        catch {
+            return text;
+        }
+    }
+    /** Stream operations: the raw ok Response, for core/sse.ts to consume. */
+    async open(opts) {
+        return this.send(opts, "text/event-stream");
+    }
+    url(opts) {
+        const u = new URL(`${this.apiUrl}${opts.path}`);
+        for (const [key, value] of Object.entries(opts.query ?? {})) {
+            if (value !== undefined)
+                u.searchParams.set(key, String(value));
+        }
+        return u.toString();
+    }
+    async send(opts, accept) {
+        const attempt = async (token) => this.fetchFn(this.url(opts), {
+            method: opts.method.toUpperCase(),
+            headers: {
+                authorization: `Bearer ${token}`,
+                accept,
+                ...(opts.body !== undefined ? { "content-type": "application/json" } : {}),
+            },
+            ...(opts.body !== undefined ? { body: JSON.stringify(opts.body) } : {}),
+        });
+        let res = await attempt(await this.auth.getToken());
+        if (res.status === 401) {
+            res = await attempt(await this.auth.forceRefresh());
+        }
+        if (!res.ok)
+            throw await toApiError(res);
+        return res;
+    }
+}
+async function toApiError(res) {
+    const body = (await res.json().catch(() => ({})));
+    const retryAfter = res.headers.get("retry-after");
+    return new ApiError(body.error ?? `HTTP ${res.status}`, res.status, body.code ?? "HTTP_ERROR", retryAfter ? { ...(body.details ?? {}), retryAfter } : body.details);
+}
+//# sourceMappingURL=http.js.map

package/dist/core/http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.js","sourceRoot":"","sources":["../../src/core/http.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,MAAM,OAAO,QAAS,SAAQ,KAAK;IAGtB;IACA;IACA;IAJX,YACE,OAAe,EACN,MAAc,EACd,IAAY,EACZ,OAAiC;QAE1C,KAAK,CAAC,OAAO,CAAC,CAAC;QAJN,WAAM,GAAN,MAAM,CAAQ;QACd,SAAI,GAAJ,IAAI,CAAQ;QACZ,YAAO,GAAP,OAAO,CAA0B;QAG1C,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC;IACzB,CAAC;CACF;AAqBD,MAAM,OAAO,UAAU;IACJ,MAAM,CAAS;IACf,IAAI,CAAc;IAClB,OAAO,CAAe;IAEvC,YAAY,IAAoB;QAC9B,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC1B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACtB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,KAAK,CAAC;IACvC,CAAC;IAED,0EAA0E;IAC1E,KAAK,CAAC,IAAI,CAAC,IAAiB;QAC1B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,kBAAkB,CAAC,CAAC;QACtD,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC9B,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC;QACvB,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,CAAC;QACrC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,0EAA0E;IAC1E,KAAK,CAAC,IAAI,CAAC,IAAiB;QAC1B,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,mBAAmB,CAAC,CAAC;IAC9C,CAAC;IAEO,GAAG,CAAC,IAAiB;QAC3B,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QAChD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,CAAC;YAC5D,IAAI,KAAK,KAAK,SAAS;gBAAE,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAClE,CAAC;QACD,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC;IACtB,CAAC;IAEO,KAAK,CAAC,IAAI,CAAC,IAAiB,EAAE,MAAc;QAClD,MAAM,OAAO,GAAG,KAAK,EAAE,KAAa,EAAqB,EAAE,CACzD,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE;YAC3B,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE;YACjC,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,KAAK,EAAE;gBAChC,MAAM;gBACN,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC3E;YACD,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACxE,CAAC,CAAC;QAEL,IAAI,GAAG,GAAG,MAAM,OAAO,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;QACpD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACvB,GAAG,GAAG,MAAM,OAAO,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;QACtD,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,MAAM,MAAM,UAAU,CAAC,GAAG,CAAC,CAAC;QACzC,OAAO,GAAG,CAAC;IACb,CAAC;CACF;AAED,KAAK,UAAU,UAAU,CAAC,GAAa;IACrC,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAI/C,CAAC;IACF,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IAClD,OAAO,IAAI,QAAQ,CACjB,IAAI,CAAC,KAAK,IAAI,QAAQ,GAAG,CAAC,MAAM,EAAE,EAClC,GAAG,CAAC,MAAM,EACV,IAAI,CAAC,IAAI,IAAI,YAAY,EACzB,UAAU,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CACpE,CAAC;AACJ,CAAC"}

package/dist/core/login.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Interactive api-key entry. The key is masked while typed and NEVER echoed —
+ * the one hard rule of the login UX. Non-TTY stdin (pipes) degrades to a plain
+ * single-line read so `echo $KEY | ora login` works in scripts.
+ *
+ * Raw mode delivers a PASTE as one data event carrying the whole string
+ * (possibly with a trailing newline) — never one event per keypress. The
+ * handler therefore iterates characters WITHIN each chunk: per-char masking,
+ * submit on the first newline wherever it appears, and control-byte noise
+ * stripped. A per-event handler here renders one star per paste and swallows
+ * a pasted trailing newline, leaving the prompt hung.
+ */
+export declare function promptForKey(input?: NodeJS.ReadStream, output?: NodeJS.WriteStream): Promise<string>;
+//# sourceMappingURL=login.d.ts.map

package/dist/core/login.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"login.d.ts","sourceRoot":"","sources":["../../src/core/login.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAKH,wBAAsB,YAAY,CAChC,KAAK,GAAE,MAAM,CAAC,UAA0B,EACxC,MAAM,GAAE,MAAM,CAAC,WAA4B,GAC1C,OAAO,CAAC,MAAM,CAAC,CA0DjB"}

package/dist/core/login.js

@@ -0,0 +1,70 @@
+/**
+ * Interactive api-key entry. The key is masked while typed and NEVER echoed —
+ * the one hard rule of the login UX. Non-TTY stdin (pipes) degrades to a plain
+ * single-line read so `echo $KEY | ora login` works in scripts.
+ *
+ * Raw mode delivers a PASTE as one data event carrying the whole string
+ * (possibly with a trailing newline) — never one event per keypress. The
+ * handler therefore iterates characters WITHIN each chunk: per-char masking,
+ * submit on the first newline wherever it appears, and control-byte noise
+ * stripped. A per-event handler here renders one star per paste and swallows
+ * a pasted trailing newline, leaving the prompt hung.
+ */
+const CTRL_C = "\u0003";
+const DEL = "\u007f";
+export async function promptForKey(input = process.stdin, output = process.stdout) {
+    output.write("Paste your api key (ora_sk_…): ");
+    if (!input.isTTY) {
+        return new Promise((resolve) => {
+            let buf = "";
+            input.setEncoding("utf8");
+            input.on("data", (chunk) => {
+                buf += chunk;
+            });
+            input.on("end", () => resolve(buf.trim()));
+        });
+    }
+    return new Promise((resolve) => {
+        let key = "";
+        input.setRawMode(true);
+        input.resume();
+        input.setEncoding("utf8");
+        const finish = () => {
+            input.setRawMode(false);
+            input.pause();
+            input.off("data", onData);
+            output.write("\n");
+            resolve(key.trim());
+        };
+        const onData = (chunk) => {
+            if (chunk === CTRL_C) {
+                // A real Ctrl+C keypress arrives as a lone  chunk. Restore the
+                // terminal, then exit. (A  EMBEDDED in a paste is clipboard
+                // noise, stripped by the control-char filter below instead.)
+                input.setRawMode(false);
+                output.write("\n");
+                process.exit(130);
+            }
+            for (const char of chunk) {
+                if (char === "\r" || char === "\n") {
+                    // Submit — and drop anything after the newline: a secret is one line.
+                    finish();
+                    return;
+                }
+                if (char === DEL || char === "\b") {
+                    if (key.length > 0) {
+                        key = key.slice(0, -1);
+                        output.write("\b \b"); // erase the star, not just the buffer
+                    }
+                    continue;
+                }
+                if (char < " ")
+                    continue; // strip other control bytes from pastes
+                key += char;
+                output.write("*");
+            }
+        };
+        input.on("data", onData);
+    });
+}
+//# sourceMappingURL=login.js.map

package/dist/core/login.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"login.js","sourceRoot":"","sources":["../../src/core/login.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,MAAM,MAAM,GAAG,QAAQ,CAAC;AACxB,MAAM,GAAG,GAAG,QAAQ,CAAC;AAErB,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,QAA2B,OAAO,CAAC,KAAK,EACxC,SAA6B,OAAO,CAAC,MAAM;IAE3C,MAAM,CAAC,KAAK,CAAC,iCAAiC,CAAC,CAAC;IAEhD,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACjB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YAC7B,IAAI,GAAG,GAAG,EAAE,CAAC;YACb,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;YAC1B,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;gBACjC,GAAG,IAAI,KAAK,CAAC;YACf,CAAC,CAAC,CAAC;YACH,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QAC7C,CAAC,CAAC,CAAC;IACL,CAAC;IAED,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,IAAI,GAAG,GAAG,EAAE,CAAC;QACb,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACvB,KAAK,CAAC,MAAM,EAAE,CAAC;QACf,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAE1B,MAAM,MAAM,GAAG,GAAS,EAAE;YACxB,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;YACxB,KAAK,CAAC,KAAK,EAAE,CAAC;YACd,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YAC1B,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACnB,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;QACtB,CAAC,CAAC;QAEF,MAAM,MAAM,GAAG,CAAC,KAAa,EAAQ,EAAE;YACrC,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;gBACrB,gEAAgE;gBAChE,6DAA6D;gBAC7D,6DAA6D;gBAC7D,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;gBACxB,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBACnB,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACpB,CAAC;YACD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;oBACnC,sEAAsE;oBACtE,MAAM,EAAE,CAAC;oBACT,OAAO;gBACT,CAAC;gBACD,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;oBAClC,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;wBACnB,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;wBACvB,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,sCAAsC;oBAC/D,CAAC;oBACD,SAAS;gBACX,CAAC;gBACD,IAAI,IAAI,GAAG,GAAG;oBAAE,SAAS,CAAC,wCAAwC;gBAClE,GAAG,IAAI,IAAI,CAAC;gBACZ,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACpB,CAAC;QACH,CAAC,CAAC;QAEF,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC3B,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/core/output.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Presentation. --json is a raw, scriptable passthrough; plain mode favours
+ * tables for list payloads; rich mode delegates to the renderer registry
+ * (render/registry.ts), populated by the side-effect import below (Task 6's
+ * trajectory/insight/journey/run-list renderers — render/index.ts), falling
+ * back to the same plain rendering when none of them claims the payload.
+ * renderError is where the CLI earns its keep: the 402 paywall and 403 scope
+ * stories are precomputed guidance, not bare codes.
+ */
+import "../render/index.js";
+import type { OutputMode } from "../render/mode.js";
+export declare function renderResult(data: unknown, opts: {
+    mode: OutputMode;
+}): string;
+export declare function renderError(err: unknown, ctx?: {
+    scope?: string | null;
+}): string;
+//# sourceMappingURL=output.d.ts.map

package/dist/core/output.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"output.d.ts","sourceRoot":"","sources":["../../src/core/output.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAIH,OAAO,oBAAoB,CAAC;AAE5B,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAMpD,wBAAgB,YAAY,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE;IAAE,IAAI,EAAE,UAAU,CAAA;CAAE,GAAG,MAAM,CAI9E;AAsCD,wBAAgB,WAAW,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,GAAE;IAAE,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAAO,GAAG,MAAM,CAIrF"}

package/dist/core/output.js

@@ -0,0 +1,94 @@
+/**
+ * Presentation. --json is a raw, scriptable passthrough; plain mode favours
+ * tables for list payloads; rich mode delegates to the renderer registry
+ * (render/registry.ts), populated by the side-effect import below (Task 6's
+ * trajectory/insight/journey/run-list renderers — render/index.ts), falling
+ * back to the same plain rendering when none of them claims the payload.
+ * renderError is where the CLI earns its keep: the 402 paywall and 403 scope
+ * stories are precomputed guidance, not bare codes.
+ */
+import chalk from "chalk";
+import "../render/index.js"; // side-effect: registers the four rich renderers (Task 6)
+import { renderRich } from "../render/registry.js";
+import { MAX_COLUMNS, cell, columnWidths, padLine, rowCountLabel } from "../render/table.js";
+import { AuthError } from "./auth.js";
+import { ApiError } from "./http.js";
+export function renderResult(data, opts) {
+    if (opts.mode === "json")
+        return JSON.stringify(data, null, 2);
+    if (opts.mode === "rich")
+        return renderRich(data, renderPlain);
+    return renderPlain(data);
+}
+function renderPlain(data) {
+    const list = extractList(data);
+    if (list) {
+        const rows = list.filter(isRow);
+        const nonNull = list.filter((v) => v !== null && v !== undefined);
+        if (nonNull.length !== rows.length)
+            return JSON.stringify(data, null, 2); // primitive elements — not tabular
+        if (rows.length === 0)
+            return chalk.dim(rowCountLabel(0));
+        return renderTable(rows);
+    }
+    return JSON.stringify(data, null, 2);
+}
+function extractList(data) {
+    if (Array.isArray(data))
+        return data;
+    if (data && typeof data === "object" && Array.isArray(data.results)) {
+        return data.results;
+    }
+    return null;
+}
+function isRow(value) {
+    return typeof value === "object" && value !== null;
+}
+function renderTable(rows) {
+    const columns = Object.keys(rows[0]).slice(0, MAX_COLUMNS);
+    const cellRows = rows.map((r) => columns.map((c) => cell(r[c])));
+    const widths = columnWidths(columns, cellRows);
+    return [
+        chalk.bold(padLine(columns, widths)),
+        ...cellRows.map((cells) => padLine(cells, widths)),
+        chalk.dim(rowCountLabel(rows.length)),
+    ].join("\n");
+}
+export function renderError(err, ctx = {}) {
+    if (err instanceof ApiError)
+        return renderApiError(err, ctx);
+    if (err instanceof AuthError)
+        return authFailureStory(err.code, err.message);
+    return chalk.red(err instanceof Error ? err.message : String(err));
+}
+function authFailureStory(code, message) {
+    return [chalk.red(`Authentication failed (${code}): ${message}`), "Run `ora login` with a valid api key."].join("\n");
+}
+function renderApiError(err, ctx) {
+    if (err.status === 402) {
+        return [
+            chalk.red(`Limit exceeded: ${err.message}`),
+            ...(err.details ? [chalk.dim(JSON.stringify(err.details))] : []),
+            "Upgrade your plan (ora dashboard → Billing) or reduce usage.",
+        ].join("\n");
+    }
+    if (err.status === 403 && err.code === "INSUFFICIENT_SCOPE") {
+        const fromDetails = err.details?.missing;
+        const missing = Array.isArray(fromDetails) && fromDetails.length > 0 ? fromDetails.join(", ") : (ctx.scope ?? "unknown");
+        return [
+            chalk.red(`This api key is missing the required scope: ${missing}`),
+            "Mint a key with that scope (ora dashboard → Settings → API keys), then `ora login` again.",
+        ].join("\n");
+    }
+    if (err.status === 401)
+        return authFailureStory(err.code, err.message);
+    if (err.status === 429) {
+        const retryAfter = err.details?.retryAfter;
+        if (typeof retryAfter === "string") {
+            return chalk.red(`Rate limited: ${err.message}. Retry after ${retryAfter}s.`);
+        }
+        return chalk.red(`Rate limited: ${err.message}. Retry in a moment.`);
+    }
+    return chalk.red(`API error ${err.status} (${err.code}): ${err.message}`);
+}
+//# sourceMappingURL=output.js.map

package/dist/core/output.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"output.js","sourceRoot":"","sources":["../../src/core/output.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,MAAM,OAAO,CAAC;AAE1B,OAAO,oBAAoB,CAAC,CAAC,0DAA0D;AAGvF,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAC7F,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAErC,MAAM,UAAU,YAAY,CAAC,IAAa,EAAE,IAA0B;IACpE,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAC/D,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM;QAAE,OAAO,UAAU,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IAC/D,OAAO,WAAW,CAAC,IAAI,CAAC,CAAC;AAC3B,CAAC;AAED,SAAS,WAAW,CAAC,IAAa;IAChC,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IAC/B,IAAI,IAAI,EAAE,CAAC;QACT,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAChC,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,SAAS,CAAC,CAAC;QAClE,IAAI,OAAO,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,mCAAmC;QAC7G,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1D,OAAO,WAAW,CAAC,IAAI,CAAC,CAAC;IAC3B,CAAC;IACD,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AACvC,CAAC;AAED,SAAS,WAAW,CAAC,IAAa;IAChC,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACrC,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAE,IAA8B,CAAC,OAAO,CAAC,EAAE,CAAC;QAC/F,OAAQ,IAA+B,CAAC,OAAO,CAAC;IAClD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,KAAK,CAAC,KAAc;IAC3B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,CAAC;AACrD,CAAC;AAED,SAAS,WAAW,CAAC,IAA+B;IAClD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;IAC3D,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACjE,MAAM,MAAM,GAAG,YAAY,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAE/C,OAAO;QACL,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACpC,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAClD,KAAK,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;KACtC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,GAAY,EAAE,MAAiC,EAAE;IAC3E,IAAI,GAAG,YAAY,QAAQ;QAAE,OAAO,cAAc,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAC7D,IAAI,GAAG,YAAY,SAAS;QAAE,OAAO,gBAAgB,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;IAC7E,OAAO,KAAK,CAAC,GAAG,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;AACrE,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAY,EAAE,OAAe;IACrD,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,0BAA0B,IAAI,MAAM,OAAO,EAAE,CAAC,EAAE,uCAAuC,CAAC,CAAC,IAAI,CAC7G,IAAI,CACL,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,GAAa,EAAE,GAA8B;IACnE,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACvB,OAAO;YACL,KAAK,CAAC,GAAG,CAAC,mBAAmB,GAAG,CAAC,OAAO,EAAE,CAAC;YAC3C,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAChE,8DAA8D;SAC/D,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACf,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,IAAI,KAAK,oBAAoB,EAAE,CAAC;QAC5D,MAAM,WAAW,GAAG,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC;QACzC,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,IAAI,SAAS,CAAC,CAAC;QACzH,OAAO;YACL,KAAK,CAAC,GAAG,CAAC,+CAA+C,OAAO,EAAE,CAAC;YACnE,2FAA2F;SAC5F,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACf,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;QAAE,OAAO,gBAAgB,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;IACvE,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACvB,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,EAAE,UAAU,CAAC;QAC3C,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE,CAAC;YACnC,OAAO,KAAK,CAAC,GAAG,CAAC,iBAAiB,GAAG,CAAC,OAAO,iBAAiB,UAAU,IAAI,CAAC,CAAC;QAChF,CAAC;QACD,OAAO,KAAK,CAAC,GAAG,CAAC,iBAAiB,GAAG,CAAC,OAAO,sBAAsB,CAAC,CAAC;IACvE,CAAC;IACD,OAAO,KAAK,CAAC,GAAG,CAAC,aAAa,GAAG,CAAC,MAAM,KAAK,GAAG,CAAC,IAAI,MAAM,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;AAC5E,CAAC"}

package/dist/core/run-operation.d.ts

@@ -0,0 +1,57 @@
+/**
+ * The execution core: credentials resolution, path/query/body derivation, and
+ * the ONE call/stream dispatch path (runOperation) shared verbatim by the
+ * scripted commander action (program.ts's attachOperation) and the
+ * interactive session (interactive/session.ts).
+ *
+ * ResolvedDeps/OperationMeta are imported type-only from program.ts /
+ * generated/operations.ts — no runtime edge back to program.ts, so this
+ * module stays a leaf auth-commands.ts and session.ts can both depend on.
+ */
+import { type OperationMeta } from "../generated/operations.js";
+import type { ResolvedDeps } from "../program.js";
+/** Resolves the api key + api url for a call, or reports the missing-key error and returns null. Shared by runOperation and the auth commands (login/whoami both need the same story). */
+export declare function credentials(deps: ResolvedDeps, apiUrlFlag: string | undefined): {
+    apiKey: string;
+    apiUrl: string;
+} | null;
+/** Substitutes `{param}` placeholders in a path template with URI-encoded positionals, in declared order. */
+export declare function buildPath(meta: Pick<OperationMeta, "pathTemplate" | "pathParams">, positionals: string[]): string;
+/** Builds the query object from parsed commander opts, converting each param to its declared kind and omitting absent values. */
+export declare function buildQuery(meta: Pick<OperationMeta, "queryParams">, opts: Record<string, unknown>): Record<string, string | number | boolean | undefined>;
+export interface RunValues {
+    positionals: string[];
+    query: Record<string, string | number | boolean | undefined>;
+    body?: unknown;
+    json: boolean;
+    plain: boolean;
+    watch: boolean;
+    apiUrlFlag?: string;
+}
+/**
+ * The ONE execution path for a manifest operation: credentials → path/query
+ * → call/stream → mode-aware render. Shared verbatim by the scripted
+ * commander action and (Task 4) the interactive session — sets
+ * `process.exitCode` on failure and never throws.
+ */
+export declare function runOperation(meta: OperationMeta, values: RunValues, deps: ResolvedDeps): Promise<void>;
+export type ReadBodyResult = {
+    kind: "ok";
+    body: unknown;
+} | {
+    kind: "error";
+};
+/** The one message for "a bodyRequired op has no body" — shared verbatim with the interactive session's own bodyRequired guard (session.ts) so the two doors never drift apart. */
+export declare const MISSING_BODY_MESSAGE = "This command requires a JSON body: pass --file <path> (or \"-\" for stdin).";
+/**
+ * Reads and parses --file for a body op. Returns a discriminated result, not
+ * a bare `unknown`, on purpose: `undefined` is also the legitimate "ok" body
+ * for an omitted OPTIONAL body, so the caller cannot tell "omitted" apart
+ * from "malformed" by checking `=== undefined` alone. On "error" this has
+ * already reported the message and set process.exitCode(2); the caller must
+ * abort unconditionally on "error" — regardless of bodyRequired — or it
+ * silently dispatches the request with the bad body dropped while still
+ * exiting non-zero (the desync a future optional-body op would hit).
+ */
+export declare function readBody(file: string | undefined, meta: Pick<OperationMeta, "bodyRequired">, deps: Pick<ResolvedDeps, "errOut">): ReadBodyResult;
+//# sourceMappingURL=run-operation.d.ts.map

package/dist/core/run-operation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-operation.d.ts","sourceRoot":"","sources":["../../src/core/run-operation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAOH,OAAO,EAAQ,KAAK,aAAa,EAAE,MAAM,4BAA4B,CAAC;AACtE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAIlD,0LAA0L;AAC1L,wBAAgB,WAAW,CAAC,IAAI,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,GAAG,SAAS,GAAG;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAUzH;AAED,6GAA6G;AAC7G,wBAAgB,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,aAAa,EAAE,cAAc,GAAG,YAAY,CAAC,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,MAAM,CAMjH;AAED,iIAAiI;AACjI,wBAAgB,UAAU,CACxB,IAAI,EAAE,IAAI,CAAC,aAAa,EAAE,aAAa,CAAC,EACxC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC5B,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC,CAQvD;AAED,MAAM,WAAW,SAAS;IACxB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC,CAAC;IAC7D,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,IAAI,EAAE,OAAO,CAAC;IACd,KAAK,EAAE,OAAO,CAAC;IACf,KAAK,EAAE,OAAO,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;;;;GAKG;AACH,wBAAsB,YAAY,CAAC,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAkC5G;AAED,MAAM,MAAM,cAAc,GAAG;IAAE,IAAI,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,OAAO,CAAA;CAAE,GAAG;IAAE,IAAI,EAAE,OAAO,CAAA;CAAE,CAAC;AAE/E,mLAAmL;AACnL,eAAO,MAAM,oBAAoB,gFAA8E,CAAC;AAEhH;;;;;;;;;GASG;AACH,wBAAgB,QAAQ,CACtB,IAAI,EAAE,MAAM,GAAG,SAAS,EACxB,IAAI,EAAE,IAAI,CAAC,aAAa,EAAE,cAAc,CAAC,EACzC,IAAI,EAAE,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAC,GACjC,cAAc,CAmBhB"}

package/dist/core/run-operation.js

@@ -0,0 +1,119 @@
+/**
+ * The execution core: credentials resolution, path/query/body derivation, and
+ * the ONE call/stream dispatch path (runOperation) shared verbatim by the
+ * scripted commander action (program.ts's attachOperation) and the
+ * interactive session (interactive/session.ts).
+ *
+ * ResolvedDeps/OperationMeta are imported type-only from program.ts /
+ * generated/operations.ts — no runtime edge back to program.ts, so this
+ * module stays a leaf auth-commands.ts and session.ts can both depend on.
+ */
+import { readFileSync } from "node:fs";
+import { readConfig, resolveApiKey, resolveApiUrl } from "./config.js";
+import { renderError, renderResult } from "./output.js";
+import { readSse } from "./sse.js";
+import { SPEC } from "../generated/operations.js";
+import { resolveOutputMode } from "../render/mode.js";
+import { renderEventStream, watchAfterCreate } from "../watch.js";
+/** Resolves the api key + api url for a call, or reports the missing-key error and returns null. Shared by runOperation and the auth commands (login/whoami both need the same story). */
+export function credentials(deps, apiUrlFlag) {
+    const cfg = readConfig(deps.dir);
+    const apiKey = resolveApiKey(cfg, deps.env);
+    const apiUrl = resolveApiUrl(cfg, apiUrlFlag, SPEC.server, deps.env);
+    if (!apiKey) {
+        deps.errOut(renderError(new Error("No api key configured. Run `ora login` or set ORA_API_KEY.")));
+        process.exitCode = 1;
+        return null;
+    }
+    return { apiKey, apiUrl };
+}
+/** Substitutes `{param}` placeholders in a path template with URI-encoded positionals, in declared order. */
+export function buildPath(meta, positionals) {
+    let path = meta.pathTemplate;
+    meta.pathParams.forEach((p, i) => {
+        path = path.replace(`{${p.name}}`, encodeURIComponent(positionals[i] ?? ""));
+    });
+    return path;
+}
+/** Builds the query object from parsed commander opts, converting each param to its declared kind and omitting absent values. */
+export function buildQuery(meta, opts) {
+    const query = {};
+    for (const q of meta.queryParams) {
+        const value = opts[q.optionKey];
+        if (value === undefined)
+            continue;
+        query[q.name] = q.kind === "number" ? Number(value) : q.kind === "boolean" ? Boolean(value) : String(value);
+    }
+    return query;
+}
+/**
+ * The ONE execution path for a manifest operation: credentials → path/query
+ * → call/stream → mode-aware render. Shared verbatim by the scripted
+ * commander action and (Task 4) the interactive session — sets
+ * `process.exitCode` on failure and never throws.
+ */
+export async function runOperation(meta, values, deps) {
+    // Resolved ONCE and threaded through — no other call in this path
+    // re-derives mode from opts/env/tty.
+    const mode = resolveOutputMode({ json: values.json, plain: values.plain }, deps.env, deps.stdoutIsTty);
+    const creds = credentials(deps, values.apiUrlFlag);
+    if (!creds)
+        return;
+    const path = buildPath(meta, values.positionals);
+    const query = values.query;
+    const client = deps.makeClient(creds);
+    try {
+        if (meta.isStream) {
+            const res = await client.open({ method: meta.method, path, query });
+            await renderEventStream(readSse(res), { deps, mode });
+            return;
+        }
+        const data = await client.call({
+            method: meta.method,
+            path,
+            query,
+            ...(values.body !== undefined ? { body: values.body } : {}),
+        });
+        if (meta.watchable && values.watch) {
+            await watchAfterCreate(data, { client, deps, mode });
+            return;
+        }
+        deps.out(renderResult(data, { mode }));
+    }
+    catch (err) {
+        deps.errOut(renderError(err, { scope: meta.scope }));
+        process.exitCode = 1;
+    }
+}
+/** The one message for "a bodyRequired op has no body" — shared verbatim with the interactive session's own bodyRequired guard (session.ts) so the two doors never drift apart. */
+export const MISSING_BODY_MESSAGE = 'This command requires a JSON body: pass --file <path> (or "-" for stdin).';
+/**
+ * Reads and parses --file for a body op. Returns a discriminated result, not
+ * a bare `unknown`, on purpose: `undefined` is also the legitimate "ok" body
+ * for an omitted OPTIONAL body, so the caller cannot tell "omitted" apart
+ * from "malformed" by checking `=== undefined` alone. On "error" this has
+ * already reported the message and set process.exitCode(2); the caller must
+ * abort unconditionally on "error" — regardless of bodyRequired — or it
+ * silently dispatches the request with the bad body dropped while still
+ * exiting non-zero (the desync a future optional-body op would hit).
+ */
+export function readBody(file, meta, deps) {
+    if (!file) {
+        if (meta.bodyRequired) {
+            deps.errOut(renderError(new Error(MISSING_BODY_MESSAGE)));
+            process.exitCode = 2;
+            return { kind: "error" };
+        }
+        return { kind: "ok", body: undefined };
+    }
+    try {
+        const raw = file === "-" ? readFileSync(0, "utf8") : readFileSync(file, "utf8");
+        return { kind: "ok", body: JSON.parse(raw) };
+    }
+    catch (err) {
+        deps.errOut(renderError(new Error(`Could not read JSON body from ${file === "-" ? "stdin" : file}: ${err.message}`)));
+        process.exitCode = 2;
+        return { kind: "error" };
+    }
+}
+//# sourceMappingURL=run-operation.js.map

package/dist/core/run-operation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-operation.js","sourceRoot":"","sources":["../../src/core/run-operation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAEvC,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACvE,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AACxD,OAAO,EAAE,OAAO,EAAE,MAAM,UAAU,CAAC;AACnC,OAAO,EAAE,IAAI,EAAsB,MAAM,4BAA4B,CAAC;AAEtE,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAElE,0LAA0L;AAC1L,MAAM,UAAU,WAAW,CAAC,IAAkB,EAAE,UAA8B;IAC5E,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACjC,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;IAC5C,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,EAAE,UAAU,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;IACrE,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC,CAAC,CAAC;QAClG,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AAC5B,CAAC;AAED,6GAA6G;AAC7G,MAAM,UAAU,SAAS,CAAC,IAAwD,EAAE,WAAqB;IACvG,IAAI,IAAI,GAAG,IAAI,CAAC,YAAY,CAAC;IAC7B,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QAC/B,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,GAAG,EAAE,kBAAkB,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAC/E,CAAC,CAAC,CAAC;IACH,OAAO,IAAI,CAAC;AACd,CAAC;AAED,iIAAiI;AACjI,MAAM,UAAU,UAAU,CACxB,IAAwC,EACxC,IAA6B;IAE7B,MAAM,KAAK,GAA0D,EAAE,CAAC;IACxE,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;QACjC,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAChC,IAAI,KAAK,KAAK,SAAS;YAAE,SAAS;QAClC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC9G,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAYD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IAAmB,EAAE,MAAiB,EAAE,IAAkB;IAC3F,kEAAkE;IAClE,qCAAqC;IACrC,MAAM,IAAI,GAAG,iBAAiB,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;IAEvG,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;IACnD,IAAI,CAAC,KAAK;QAAE,OAAO;IAEnB,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;IACjD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;IAE3B,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;IACtC,IAAI,CAAC;QACH,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACpE,MAAM,iBAAiB,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YACtD,OAAO;QACT,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC;YAC7B,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,IAAI;YACJ,KAAK;YACL,GAAG,CAAC,MAAM,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5D,CAAC,CAAC;QAEH,IAAI,IAAI,CAAC,SAAS,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YACnC,MAAM,gBAAgB,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YACrD,OAAO;QACT,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IACzC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QACrD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACvB,CAAC;AACH,CAAC;AAID,mLAAmL;AACnL,MAAM,CAAC,MAAM,oBAAoB,GAAG,2EAA2E,CAAC;AAEhH;;;;;;;;;GASG;AACH,MAAM,UAAU,QAAQ,CACtB,IAAwB,EACxB,IAAyC,EACzC,IAAkC;IAElC,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YACtB,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC;YAC1D,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;QAC3B,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IACzC,CAAC;IACD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAChF,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,EAAE,CAAC;IAC1D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,MAAM,CACT,WAAW,CAAC,IAAI,KAAK,CAAC,iCAAiC,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,KAAM,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC,CACpH,CAAC;QACF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IAC3B,CAAC;AACH,CAAC"}

package/dist/core/sse.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Minimal EventSource-over-fetch. Enough SSE for the public stream ops:
+ * event/data fields, ":" heartbeats skipped, multi-line data joined, CRLF
+ * tolerated, correct across arbitrary chunk boundaries. Reconnection is
+ * deliberately out of scope for v1 — the command exits when the server ends
+ * the stream.
+ */
+export interface SseEvent {
+    event: string;
+    data: string;
+}
+export declare function readSse(res: Response): AsyncGenerator<SseEvent>;
+//# sourceMappingURL=sse.d.ts.map

package/dist/core/sse.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sse.d.ts","sourceRoot":"","sources":["../../src/core/sse.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,MAAM,WAAW,QAAQ;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;CACd;AAED,wBAAuB,OAAO,CAAC,GAAG,EAAE,QAAQ,GAAG,cAAc,CAAC,QAAQ,CAAC,CAoDtE"}

package/dist/core/sse.js

@@ -0,0 +1,63 @@
+/**
+ * Minimal EventSource-over-fetch. Enough SSE for the public stream ops:
+ * event/data fields, ":" heartbeats skipped, multi-line data joined, CRLF
+ * tolerated, correct across arbitrary chunk boundaries. Reconnection is
+ * deliberately out of scope for v1 — the command exits when the server ends
+ * the stream.
+ */
+export async function* readSse(res) {
+    const body = res.body;
+    if (!body)
+        return;
+    const decoder = new TextDecoder();
+    let buffer = "";
+    let eventName = "message";
+    let dataLines = [];
+    const takeEvent = () => {
+        if (dataLines.length === 0) {
+            eventName = "message";
+            return null;
+        }
+        const event = { event: eventName, data: dataLines.join("\n") };
+        eventName = "message";
+        dataLines = [];
+        return event;
+    };
+    const handleLine = (rawLine) => {
+        const line = rawLine.replace(/\r$/, "");
+        if (line === "")
+            return takeEvent();
+        if (line.startsWith(":"))
+            return null; // heartbeat / comment
+        const colon = line.indexOf(":");
+        const field = colon === -1 ? line : line.slice(0, colon);
+        const value = colon === -1 ? "" : line.slice(colon + 1).replace(/^ /, "");
+        if (field === "event")
+            eventName = value;
+        else if (field === "data")
+            dataLines.push(value);
+        return null;
+    };
+    for await (const chunk of body) {
+        buffer += decoder.decode(chunk, { stream: true });
+        let newline;
+        while ((newline = buffer.indexOf("\n")) >= 0) {
+            const line = buffer.slice(0, newline);
+            buffer = buffer.slice(newline + 1);
+            const event = handleLine(line);
+            if (event)
+                yield event;
+        }
+    }
+    buffer += decoder.decode(); // flush any dangling partial character as U+FFFD
+    // Trailing line without a newline, then whatever is buffered as an event.
+    if (buffer.length > 0) {
+        const event = handleLine(buffer);
+        if (event)
+            yield event;
+    }
+    const tail = takeEvent();
+    if (tail)
+        yield tail;
+}
+//# sourceMappingURL=sse.js.map

package/dist/core/sse.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sse.js","sourceRoot":"","sources":["../../src/core/sse.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAOH,MAAM,CAAC,KAAK,SAAS,CAAC,CAAC,OAAO,CAAC,GAAa;IAC1C,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC;IACtB,IAAI,CAAC,IAAI;QAAE,OAAO;IAElB,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;IAClC,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,IAAI,SAAS,GAAG,SAAS,CAAC;IAC1B,IAAI,SAAS,GAAa,EAAE,CAAC;IAE7B,MAAM,SAAS,GAAG,GAAoB,EAAE;QACtC,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3B,SAAS,GAAG,SAAS,CAAC;YACtB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,KAAK,GAAa,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACzE,SAAS,GAAG,SAAS,CAAC;QACtB,SAAS,GAAG,EAAE,CAAC;QACf,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;IAEF,MAAM,UAAU,GAAG,CAAC,OAAe,EAAmB,EAAE;QACtD,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACxC,IAAI,IAAI,KAAK,EAAE;YAAE,OAAO,SAAS,EAAE,CAAC;QACpC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC,CAAC,sBAAsB;QAC7D,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAChC,MAAM,KAAK,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QACzD,MAAM,KAAK,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAC1E,IAAI,KAAK,KAAK,OAAO;YAAE,SAAS,GAAG,KAAK,CAAC;aACpC,IAAI,KAAK,KAAK,MAAM;YAAE,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACjD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IAEF,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,IAAI,EAAE,CAAC;QAC/B,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAClD,IAAI,OAAe,CAAC;QACpB,OAAO,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7C,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;YACtC,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC;YACnC,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;YAC/B,IAAI,KAAK;gBAAE,MAAM,KAAK,CAAC;QACzB,CAAC;IACH,CAAC;IAED,MAAM,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,iDAAiD;IAE7E,0EAA0E;IAC1E,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;QACjC,IAAI,KAAK;YAAE,MAAM,KAAK,CAAC;IACzB,CAAC;IACD,MAAM,IAAI,GAAG,SAAS,EAAE,CAAC;IACzB,IAAI,IAAI;QAAE,MAAM,IAAI,CAAC;AACvB,CAAC"}

package/dist/generated/operations.d.ts

@@ -0,0 +1,47 @@
+export interface PathParamMeta {
+    name: string;
+}
+export interface QueryParamMeta {
+    name: string;
+    flag: string;
+    optionKey: string;
+    required: boolean;
+    kind: "string" | "number" | "boolean";
+    description?: string;
+    enum?: string[];
+}
+export interface BodyFieldMeta {
+    name: string;
+    required: boolean;
+    kind: "string" | "number" | "boolean" | "object" | "array";
+    enum?: string[];
+    placeholder: string;
+}
+export interface OperationMeta {
+    id: string;
+    commandPath: string[];
+    method: "get" | "post" | "put" | "patch" | "delete";
+    pathTemplate: string;
+    summary: string;
+    scope: string | null;
+    product: string | null;
+    pathParams: PathParamMeta[];
+    queryParams: QueryParamMeta[];
+    hasBody: boolean;
+    bodyRequired: boolean;
+    isStream: boolean;
+    watchable: boolean;
+    help: {
+        command: string;
+        body?: string;
+    };
+    bodyFields?: BodyFieldMeta[];
+}
+export declare const SPEC: {
+    readonly version: "1.0.0";
+    readonly contentHash: "d1aeca5bf5255cdfbdf7836aace5a10fc4242ce23a30dd16761092e8383291b0";
+    readonly server: "https://api.agentfront.sh";
+    readonly bin: "ora";
+};
+export declare const OPERATIONS: OperationMeta[];
+//# sourceMappingURL=operations.d.ts.map

package/dist/generated/operations.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"operations.d.ts","sourceRoot":"","sources":["../../src/generated/operations.ts"],"names":[],"mappings":"AAIA,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,OAAO,CAAC;IAClB,IAAI,EAAE,QAAQ,GAAG,QAAQ,GAAG,SAAS,CAAC;IACtC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;CACjB;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,OAAO,CAAC;IAClB,IAAI,EAAE,QAAQ,GAAG,QAAQ,GAAG,SAAS,GAAG,QAAQ,GAAG,OAAO,CAAC;IAC3D,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,MAAM,EAAE,KAAK,GAAG,MAAM,GAAG,KAAK,GAAG,OAAO,GAAG,QAAQ,CAAC;IACpD,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,UAAU,EAAE,aAAa,EAAE,CAAC;IAC5B,WAAW,EAAE,cAAc,EAAE,CAAC;IAC9B,OAAO,EAAE,OAAO,CAAC;IACjB,YAAY,EAAE,OAAO,CAAC;IACtB,QAAQ,EAAE,OAAO,CAAC;IAClB,SAAS,EAAE,OAAO,CAAC;IACnB,IAAI,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACzC,UAAU,CAAC,EAAE,aAAa,EAAE,CAAC;CAC9B;AAED,eAAO,MAAM,IAAI;;;;;CAKP,CAAC;AAEX,eAAO,MAAM,UAAU,EAAE,aAAa,EAu/DrC,CAAC"}