@pantheon.ai/agents 0.3.4 → 0.3.5

package/README.md

@@ -172,6 +172,12 @@ pantheon-agents gen-migration-sql --provider tidb --from 0.3.0
 pantheon-agents delete-task <agent-name> <task-id>
 ```
 
+## Task Dependencies & Retries
+
+- A dependent task (with `parent_task_id`) only starts after its parent reaches `completed`.
+- If the parent is `failed`/`canceled`, the child stays `pending` (so the parent can be retried).
+- If the parent is permanently failing, manually `retry-task` / `cancel-task` the child / `kill` the subtree.
+
 For full options of any command:
 
 ```bash

package/dist/index.js

@@ -399,7 +399,7 @@ var require_cli_options = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 
 //#endregion
 //#region package.json
-var version = "0.3.4";
+var version = "0.3.5";
 
 //#endregion
 //#region src/db/db9.ts
@@ -1177,9 +1177,9 @@ const snapSchema = z.object({
 	step_index: z.number(),
 	event_stream_id: z.string().nullable(),
 	tool_use_id: z.string().nullable(),
-	manifest_status: z.string().nullable(),
-	manifest_task_id: z.string().nullable(),
-	manifest_snap_id: z.string().nullable()
+	manifest_status: z.string().nullable().optional(),
+	manifest_task_id: z.string().nullable().optional(),
+	manifest_snap_id: z.string().nullable().optional()
 });
 const snapDetailsSchema = snapSchema.extend({
 	output: z.string().nullable(),
@@ -1207,7 +1207,7 @@ const branchSchema = z.object({
 	updated_at: zodJsonDate,
 	latest_snap_id: z.string().nullable(),
 	latest_snap: snapSchema.nullable(),
-	manifest: branchManifestSchema.nullable()
+	manifest: branchManifestSchema.nullable().optional()
 });
 const branchSnapsSchema = z.object({
 	branch_id: z.string(),
@@ -2131,7 +2131,7 @@ async function killPantheonBranchExecution({ projectId, branchId }) {
 const DEFAULT_CONCURRENCY = 1;
 const DEFAULT_MAX_RETRY_ATTEMPTS$1 = 3;
 const DEFAULT_RETRY_BACKOFF_SECONDS$1 = 30;
-const AUTO_RECONFIG_PROMPT = "Config outdated. Reconfigure this branch against the latest agent config.";
+const AUTO_RECONFIG_PROMPT = "Reconfigure this branch to match the latest agent config.";
 function getTaskAttemptCount(task) {
 	if (Number.isInteger(task.attempt_count) && task.attempt_count > 0) return task.attempt_count;
 	return 1;
@@ -2321,24 +2321,14 @@ async function getPendingChildren(provider, projectId, parentTaskId) {
 		status: ["pending"]
 	})).filter((item) => item.parent_task_id === parentTaskId);
 }
-async function cancelAndRecreatePendingTask(options) {
-	const pendingDescendants = await getPendingChildren(options.provider, options.task.project_id, options.task.id);
-	await options.provider.cancelTask(options.task, "Config outdated");
-	const recreated = await options.provider.createTask({
-		project_id: options.task.project_id,
-		task: options.task.task,
-		base_branch_id: options.task.base_branch_id,
-		parent_task_id: options.nextParentTaskId,
-		skipConfigTaskAutoParent: true
-	});
-	for (const descendant of pendingDescendants) await options.provider.updateTask({
-		...descendant,
-		parent_task_id: recreated.id
-	});
-	return {
-		recreated,
-		rewiredCount: pendingDescendants.length
+async function rebasePendingTaskToNewParent(options) {
+	if (options.task.parent_task_id === options.nextParentTaskId) return { rebased: options.task };
+	const rebased = {
+		...options.task,
+		parent_task_id: options.nextParentTaskId
 	};
+	await options.provider.updateTask(rebased);
+	return { rebased };
 }
 async function handleOutdatedCompletedTask(provider, task, currentVersion, expectedVersion, logger) {
 	const expectedVersionResolved = Math.max(expectedVersion, currentVersion + 1, 1);
@@ -2357,12 +2347,12 @@ async function handleOutdatedCompletedTask(provider, task, currentVersion, expec
 		steps
 	});
 	for (const child of pendingDirectChildren) {
-		const { recreated, rewiredCount } = await cancelAndRecreatePendingTask({
+		const { rebased } = await rebasePendingTaskToNewParent({
 			provider,
 			task: child,
 			nextParentTaskId
 		});
-		logger.info("Rebase outdated task %s to %s (with %d reconfig steps, rewired %d descendant tasks). Triggered by completion of task %s.", child.id, recreated.id, steps.length, rewiredCount, task.id);
+		logger.info("Rebase outdated task %s under new parent %s (with %d reconfig steps). Triggered by completion of task %s.", child.id, rebased.parent_task_id, steps.length, task.id);
 	}
 }
 async function startPendingTask(provider, task, config, logger) {
@@ -2483,7 +2473,7 @@ async function preparePendingTaskForStart(provider, task, config, logger) {
 async function handleOutdatedParentAtStart(provider, task, parentTask, currentVersion, expectedVersion, logger) {
 	const steps = await getNormalizedReconfigSteps(provider, currentVersion, expectedVersion);
 	const workingBranchId = getTaskWorkingBranchId(parentTask);
-	const { recreated, rewiredCount } = await cancelAndRecreatePendingTask({
+	const { rebased } = await rebasePendingTaskToNewParent({
 		provider,
 		task,
 		nextParentTaskId: await createReconfigStepChain({
@@ -2494,7 +2484,7 @@ async function handleOutdatedParentAtStart(provider, task, parentTask, currentVe
 			steps
 		})
 	});
-	logger.info("Rebase outdated task %s to %s (with %d reconfig steps, rewired %d descendant tasks). Triggered by starting of task %s.", task.id, recreated.id, steps.length, rewiredCount, task.id);
+	logger.info("Rebase outdated task %s under new parent %s (with %d reconfig steps). Triggered by starting of task %s.", task.id, rebased.parent_task_id, steps.length, task.id);
 }
 
 //#endregion
@@ -2879,8 +2869,8 @@ function resolveConfigRole(options) {
 	if (options.previousRole?.trim()) return { role: options.previousRole.trim() };
 	return { error: "--role is required for first-time config in a project." };
 }
-async function configAgent(name, options) {
-	const provider = createTaskListProvider(name, pino());
+async function configAgent(name, options, deps = {}) {
+	const provider = (deps.createProvider ?? createTaskListProvider)(name, pino());
 	try {
 		const previousConfig = await provider.getAgentConfig(options.projectId);
 		const resolvedRoleResult = resolveConfigRole({
@@ -2926,21 +2916,24 @@ async function configAgent(name, options) {
 			const task = await provider.getTask(options.taskId);
 			if (!task) throw new Error(`Task ${options.taskId} not found.`);
 			if (task.project_id !== options.projectId) throw new Error(`Task ${options.taskId} belongs to project ${task.project_id}, expected ${options.projectId}.`);
-			if (task.type !== "default" || task.parent_task_id == null || task.status !== "completed") throw new Error(`Cannot use task ${options.taskId} (type = ${task.type}, type = ${task.status}) as configured base branch.`);
+			if (task.type !== "default" || task.parent_task_id == null || task.status !== "completed") throw new Error(`Cannot use task ${options.taskId} (type = ${task.type}, status = ${task.status}) as configured base branch.`);
 			const configuredBaseBranchId = task.branch_id;
+			const baseConfigVersion = previousConfig.config_version + 1;
+			const nextConfigVersion = options.prompt ? baseConfigVersion + 1 : baseConfigVersion;
 			if (options.prompt) configTaskId = (await provider.createTask({
 				task: options.prompt,
 				project_id: options.projectId,
 				base_branch_id: configuredBaseBranchId,
+				parent_task_id: task.id,
 				type: "reconfig",
-				configVersion: previousConfig.config_version + 1
+				configVersion: nextConfigVersion
 			})).id;
 			else configTaskId = options.taskId;
 			await provider.updateAgentConfig({
 				project_id: previousConfig.project_id,
 				base_branch_id: configuredBaseBranchId,
 				config_task_id: configTaskId,
-				config_version: previousConfig.config_version + (options.prompt ? 2 : 1),
+				config_version: nextConfigVersion,
 				concurrency,
 				max_retry_attempts: maxRetryAttempts,
 				retry_backoff_seconds: retryBackoffSeconds,
@@ -2950,9 +2943,9 @@ async function configAgent(name, options) {
 				envs: resolvedEnvs,
 				prototype_url: resolvedPrototypeUrl
 			});
-			if (!options.prompt) await provider.updateTask({
+			await provider.updateTask({
 				...task,
-				config_version: previousConfig.config_version + 1
+				config_version: baseConfigVersion
 			});
 			const tasks = await provider.getTasks({
 				parent_task_id: task.parent_task_id,
@@ -4031,7 +4024,7 @@ function createRetryTaskCommand(version, deps = {}) {
 
 //#endregion
 //#region src/cli/commands/skill-sh.ts
-const EMBEDDED_SKILL_MARKDOWN = "---\nname: pantheon-agents\ndescription: \"Pantheon Agents CLI Usage\"\n---\n\n> Pantheon is the project name of an internal VM environment management project. Do not guess any usage from the name.\n\n\n## Pantheon Agents CLI Usage\n\n### Concepts\n\n- agent: Each agent has a role (like `developer`) and several skills to use.\n- environment: The context of tools, codes or anything else for agents to run tasks. You don't need to know the details.\n- tasks: tasks for each agent to run, each task will create a new environment.\n\n#### Task structure\n\n- agent: The agent to executing the task\n- task (text): The task content\n- attempt: Attempt number (starts from 1 and increases on retries)\n- parent_task_id: The parent task id\n- status: `pending`, `running`, `completed`, `failed`, `canceled`\n- queued_at\n- started_at\n- ended_at\n- finished_at\n- canceled_at\n- cancel_reason\n- output: The output of the completed task.\n- error: The last known error message (failed task error is kept across retries).\n\n#### Other internal implementation details you don't need to know or use\n\n- project\n- branches\n\n### CLI Commands\n\n**You can only use the CLI commands listed below.**\n\n#### Setup a base environment for an agent:\n\n```shell\n# Use default setup script at first time configuration\npantheon-agents config 'Kris' \\\n    --role 'developer' \\\n    --skills pantheon-issue-resolve,pantheon-solution-design \\\n    --max-retry-attempts 3 \\\n    --retry-backoff-seconds 30\n\n# Add some custom prompts\npantheon-agents config 'Kris' \\\n    --role 'developer' \\\n    --skills pantheon-issue-resolve,pantheon-solution-design \\\n    'Update tools to the latest version.'\n```\n\n#### Update agent's environment\n\n##### Configure agent environment by prompt\n\n```shell\npantheon-agents config 'Kris' 'Install some tools'\n```\n\n##### Configure agent to a task result environment\n\npantheon-agents config 'Kris' --task-id 42\n\n#### Enqueue tasks\n\n```shell\npantheon-agents add-task 'Kris' 'Some awesome task'\n ```\n\nWhen adding tasks, cli will output the task id. You can add tasks with `--parent-task-id` to create a task hierarchy.\n\n```shell\npantheon-agents add-task 'Kris' 'Some awesome task' --parent-task-id 42\n```\n\n\n#### List tasks\n\n```shell\npantheon-agents show-tasks --json 'Kris'\n```\n\n\n#### Show single task info\n\n```shell\npantheon-agents get-task 'Kris' 42\n```\n\nReturns task info using this task structure (without internal project/branch fields):\n\n```json\n{\n  \"agent\": \"Kris\",\n  \"task\": \"Some awesome task\",\n  \"attempt\": 1,\n  \"parent_task_id\": \"41\",\n  \"status\": \"completed\",\n  \"queued_at\": \"2026-02-12T00:00:00.000Z\",\n  \"started_at\": \"2026-02-12T00:00:05.000Z\",\n  \"ended_at\": \"2026-02-12T00:05:00.000Z\",\n  \"finished_at\": \"2026-02-12T00:05:00.000Z\",\n  \"canceled_at\": null,\n  \"cancel_reason\": null,\n  \"output\": \"Task output\",\n  \"error\": null\n}\n```\n\n#### Cancel task\n\n```shell\npantheon-agents cancel-task 'Kris' 42 'Reason'\n```\n\n#### Retry failed task\n\n```shell\n# Manual retry (immediate requeue and increases attempt)\npantheon-agents retry-task 'Kris' 42 'Reason'\n```\n\n#### Print embedded skill markdown\n\n```shell\npantheon-agents skill.sh\n```\n";
+const EMBEDDED_SKILL_MARKDOWN = "---\nname: pantheon-agents\ndescription: \"Pantheon Agents CLI Usage\"\n---\n\n> Pantheon is the project name of an internal VM environment management project. Do not guess any usage from the name.\n\n\n## Pantheon Agents CLI Usage\n\n### Concepts\n\n- agent: Each agent has a role (like `developer`) and several skills to use.\n- environment: The context of tools, codes or anything else for agents to run tasks. You don't need to know the details.\n- tasks: tasks for each agent to run, each task will create a new environment.\n\n#### Task structure\n\n- agent: The agent to executing the task\n- task (text): The task content\n- attempt: Attempt number (starts from 1 and increases on retries)\n- parent_task_id: The parent task id\n- status: `pending`, `running`, `completed`, `failed`, `canceled`\n- queued_at\n- started_at\n- ended_at\n- finished_at\n- canceled_at\n- cancel_reason\n- output: The output of the completed task.\n- error: The last known error message (failed task error is kept across retries).\n\n#### Dependency & retry behavior\n\n- A task with `parent_task_id` only starts after its parent reaches `completed`.\n- If the parent is `failed`/`canceled`, the child stays `pending` so the parent can be retried.\n- If the parent has exhausted retries or is permanently failing, manually `retry-task`, `cancel-task`, or `kill` the task subtree.\n\n#### Other internal implementation details you don't need to know or use\n\n- project\n- branches\n\n### CLI Commands\n\n**You can only use the CLI commands listed below.**\n\n#### Setup a base environment for an agent:\n\n```shell\n# Use default setup script at first time configuration\npantheon-agents config 'Kris' \\\n    --role 'developer' \\\n    --skills pantheon-issue-resolve,pantheon-solution-design \\\n    --max-retry-attempts 3 \\\n    --retry-backoff-seconds 30\n\n# Add some custom prompts\npantheon-agents config 'Kris' \\\n    --role 'developer' \\\n    --skills pantheon-issue-resolve,pantheon-solution-design \\\n    'Update tools to the latest version.'\n```\n\n#### Update agent's environment\n\n##### Configure agent environment by prompt\n\n```shell\npantheon-agents config 'Kris' 'Install some tools'\n```\n\n##### Configure agent to a task result environment\n\npantheon-agents config 'Kris' --task-id 42\n\n#### Enqueue tasks\n\n```shell\npantheon-agents add-task 'Kris' 'Some awesome task'\n ```\n\nWhen adding tasks, cli will output the task id. You can add tasks with `--parent-task-id` to create a task hierarchy.\n\n```shell\npantheon-agents add-task 'Kris' 'Some awesome task' --parent-task-id 42\n```\n\n\n#### List tasks\n\n```shell\npantheon-agents show-tasks --json 'Kris'\n```\n\n\n#### Show single task info\n\n```shell\npantheon-agents get-task 'Kris' 42\n```\n\nReturns task info using this task structure (without internal project/branch fields):\n\n```json\n{\n  \"agent\": \"Kris\",\n  \"task\": \"Some awesome task\",\n  \"attempt\": 1,\n  \"parent_task_id\": \"41\",\n  \"status\": \"completed\",\n  \"queued_at\": \"2026-02-12T00:00:00.000Z\",\n  \"started_at\": \"2026-02-12T00:00:05.000Z\",\n  \"ended_at\": \"2026-02-12T00:05:00.000Z\",\n  \"finished_at\": \"2026-02-12T00:05:00.000Z\",\n  \"canceled_at\": null,\n  \"cancel_reason\": null,\n  \"output\": \"Task output\",\n  \"error\": null\n}\n```\n\n#### Cancel task\n\n```shell\npantheon-agents cancel-task 'Kris' 42 'Reason'\n```\n\n#### Retry failed task\n\n```shell\n# Manual retry (immediate requeue and increases attempt)\npantheon-agents retry-task 'Kris' 42 'Reason'\n```\n\n#### Print embedded skill markdown\n\n```shell\npantheon-agents skill.sh\n```\n";
 function createSkillShCommand(version) {
 	return createCommand("skill.sh").version(version).description("Print embedded pantheon-agents skill markdown").action(() => {
 		process$1.stdout.write(EMBEDDED_SKILL_MARKDOWN);

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@pantheon.ai/agents",
   "type": "module",
-  "version": "0.3.4",
+  "version": "0.3.5",
   "bin": {
     "pantheon-agents": "dist/index.js"
   },

package/dist/token-B1_fh4ov.js

@@ -1,50 +0,0 @@
-#!/usr/bin/env node
-import { n as __commonJSMin, t as require_token_error } from "./token-error-B9tnlSZq.js";
-import { t as require_token_util } from "./token-util-rhrS-6qe.js";
-
-//#region ../../node_modules/@vercel/oidc/dist/token.js
-var require_token = /* @__PURE__ */ __commonJSMin(((exports, module) => {
-	var __defProp = Object.defineProperty;
-	var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-	var __getOwnPropNames = Object.getOwnPropertyNames;
-	var __hasOwnProp = Object.prototype.hasOwnProperty;
-	var __export = (target, all) => {
-		for (var name in all) __defProp(target, name, {
-			get: all[name],
-			enumerable: true
-		});
-	};
-	var __copyProps = (to, from, except, desc) => {
-		if (from && typeof from === "object" || typeof from === "function") {
-			for (let key of __getOwnPropNames(from)) if (!__hasOwnProp.call(to, key) && key !== except) __defProp(to, key, {
-				get: () => from[key],
-				enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable
-			});
-		}
-		return to;
-	};
-	var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-	var token_exports = {};
-	__export(token_exports, { refreshToken: () => refreshToken });
-	module.exports = __toCommonJS(token_exports);
-	var import_token_error = require_token_error();
-	var import_token_util = require_token_util();
-	async function refreshToken() {
-		const { projectId, teamId } = (0, import_token_util.findProjectInfo)();
-		let maybeToken = (0, import_token_util.loadToken)(projectId);
-		if (!maybeToken || (0, import_token_util.isExpired)((0, import_token_util.getTokenPayload)(maybeToken.token))) {
-			const authToken = await (0, import_token_util.getVercelCliToken)();
-			if (!authToken) throw new import_token_error.VercelOidcTokenError("Failed to refresh OIDC token: Log in to Vercel CLI and link your project with `vc link`");
-			if (!projectId) throw new import_token_error.VercelOidcTokenError("Failed to refresh OIDC token: Try re-linking your project with `vc link`");
-			maybeToken = await (0, import_token_util.getVercelOidcToken)(authToken, projectId, teamId);
-			if (!maybeToken) throw new import_token_error.VercelOidcTokenError("Failed to refresh OIDC token");
-			(0, import_token_util.saveToken)(maybeToken, projectId);
-		}
-		process.env.VERCEL_OIDC_TOKEN = maybeToken.token;
-	}
-}));
-
-//#endregion
-export default require_token();
-
-export {  };

package/dist/token-error-B9tnlSZq.js

@@ -1,72 +0,0 @@
-#!/usr/bin/env node
-import { createRequire } from "node:module";
-
-//#region \0rolldown/runtime.js
-var __create = Object.create;
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __getProtoOf = Object.getPrototypeOf;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __commonJSMin = (cb, mod) => () => (mod || cb((mod = { exports: {} }).exports, mod), mod.exports);
-var __copyProps = (to, from, except, desc) => {
-	if (from && typeof from === "object" || typeof from === "function") {
-		for (var keys = __getOwnPropNames(from), i = 0, n = keys.length, key; i < n; i++) {
-			key = keys[i];
-			if (!__hasOwnProp.call(to, key) && key !== except) {
-				__defProp(to, key, {
-					get: ((k) => from[k]).bind(null, key),
-					enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable
-				});
-			}
-		}
-	}
-	return to;
-};
-var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", {
-	value: mod,
-	enumerable: true
-}) : target, mod));
-var __require = /* @__PURE__ */ createRequire(import.meta.url);
-
-//#endregion
-//#region ../../node_modules/@vercel/oidc/dist/token-error.js
-var require_token_error = /* @__PURE__ */ __commonJSMin(((exports, module) => {
-	var __defProp = Object.defineProperty;
-	var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-	var __getOwnPropNames = Object.getOwnPropertyNames;
-	var __hasOwnProp = Object.prototype.hasOwnProperty;
-	var __export = (target, all) => {
-		for (var name in all) __defProp(target, name, {
-			get: all[name],
-			enumerable: true
-		});
-	};
-	var __copyProps = (to, from, except, desc) => {
-		if (from && typeof from === "object" || typeof from === "function") {
-			for (let key of __getOwnPropNames(from)) if (!__hasOwnProp.call(to, key) && key !== except) __defProp(to, key, {
-				get: () => from[key],
-				enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable
-			});
-		}
-		return to;
-	};
-	var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-	var token_error_exports = {};
-	__export(token_error_exports, { VercelOidcTokenError: () => VercelOidcTokenError });
-	module.exports = __toCommonJS(token_error_exports);
-	var VercelOidcTokenError = class extends Error {
-		constructor(message, cause) {
-			super(message);
-			this.name = "VercelOidcTokenError";
-			this.cause = cause;
-		}
-		toString() {
-			if (this.cause) return `${this.name}: ${this.message}: ${this.cause}`;
-			return `${this.name}: ${this.message}`;
-		}
-	};
-}));
-
-//#endregion
-export { __toESM as i, __commonJSMin as n, __require as r, require_token_error as t };

package/dist/token-util-TO_8V0Wr.js

@@ -1,7 +0,0 @@
-#!/usr/bin/env node
-import "./token-error-B9tnlSZq.js";
-import { t as require_token_util } from "./token-util-rhrS-6qe.js";
-
-export default require_token_util();
-
-export {  };

package/dist/token-util-rhrS-6qe.js

@@ -1,356 +0,0 @@
-#!/usr/bin/env node
-import { n as __commonJSMin, r as __require, t as require_token_error } from "./token-error-B9tnlSZq.js";
-
-//#region ../../node_modules/@vercel/oidc/dist/token-io.js
-var require_token_io = /* @__PURE__ */ __commonJSMin(((exports, module) => {
-	var __create = Object.create;
-	var __defProp = Object.defineProperty;
-	var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-	var __getOwnPropNames = Object.getOwnPropertyNames;
-	var __getProtoOf = Object.getPrototypeOf;
-	var __hasOwnProp = Object.prototype.hasOwnProperty;
-	var __export = (target, all) => {
-		for (var name in all) __defProp(target, name, {
-			get: all[name],
-			enumerable: true
-		});
-	};
-	var __copyProps = (to, from, except, desc) => {
-		if (from && typeof from === "object" || typeof from === "function") {
-			for (let key of __getOwnPropNames(from)) if (!__hasOwnProp.call(to, key) && key !== except) __defProp(to, key, {
-				get: () => from[key],
-				enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable
-			});
-		}
-		return to;
-	};
-	var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", {
-		value: mod,
-		enumerable: true
-	}) : target, mod));
-	var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-	var token_io_exports = {};
-	__export(token_io_exports, {
-		findRootDir: () => findRootDir,
-		getUserDataDir: () => getUserDataDir
-	});
-	module.exports = __toCommonJS(token_io_exports);
-	var import_path = __toESM(__require("path"));
-	var import_fs = __toESM(__require("fs"));
-	var import_os$1 = __toESM(__require("os"));
-	var import_token_error = require_token_error();
-	function findRootDir() {
-		try {
-			let dir = process.cwd();
-			while (dir !== import_path.default.dirname(dir)) {
-				const pkgPath = import_path.default.join(dir, ".vercel");
-				if (import_fs.default.existsSync(pkgPath)) return dir;
-				dir = import_path.default.dirname(dir);
-			}
-		} catch (e) {
-			throw new import_token_error.VercelOidcTokenError("Token refresh only supported in node server environments");
-		}
-		return null;
-	}
-	function getUserDataDir() {
-		if (process.env.XDG_DATA_HOME) return process.env.XDG_DATA_HOME;
-		switch (import_os$1.default.platform()) {
-			case "darwin": return import_path.default.join(import_os$1.default.homedir(), "Library/Application Support");
-			case "linux": return import_path.default.join(import_os$1.default.homedir(), ".local/share");
-			case "win32":
-				if (process.env.LOCALAPPDATA) return process.env.LOCALAPPDATA;
-				return null;
-			default: return null;
-		}
-	}
-}));
-
-//#endregion
-//#region ../../node_modules/@vercel/oidc/dist/auth-config.js
-var require_auth_config = /* @__PURE__ */ __commonJSMin(((exports, module) => {
-	var __create = Object.create;
-	var __defProp = Object.defineProperty;
-	var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-	var __getOwnPropNames = Object.getOwnPropertyNames;
-	var __getProtoOf = Object.getPrototypeOf;
-	var __hasOwnProp = Object.prototype.hasOwnProperty;
-	var __export = (target, all) => {
-		for (var name in all) __defProp(target, name, {
-			get: all[name],
-			enumerable: true
-		});
-	};
-	var __copyProps = (to, from, except, desc) => {
-		if (from && typeof from === "object" || typeof from === "function") {
-			for (let key of __getOwnPropNames(from)) if (!__hasOwnProp.call(to, key) && key !== except) __defProp(to, key, {
-				get: () => from[key],
-				enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable
-			});
-		}
-		return to;
-	};
-	var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", {
-		value: mod,
-		enumerable: true
-	}) : target, mod));
-	var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-	var auth_config_exports = {};
-	__export(auth_config_exports, {
-		isValidAccessToken: () => isValidAccessToken,
-		readAuthConfig: () => readAuthConfig,
-		writeAuthConfig: () => writeAuthConfig
-	});
-	module.exports = __toCommonJS(auth_config_exports);
-	var fs$1 = __toESM(__require("fs"));
-	var path$1 = __toESM(__require("path"));
-	var import_token_util = require_token_util();
-	function getAuthConfigPath() {
-		const dataDir = (0, import_token_util.getVercelDataDir)();
-		if (!dataDir) throw new Error(`Unable to find Vercel CLI data directory. Your platform: ${process.platform}. Supported: darwin, linux, win32.`);
-		return path$1.join(dataDir, "auth.json");
-	}
-	function readAuthConfig() {
-		try {
-			const authPath = getAuthConfigPath();
-			if (!fs$1.existsSync(authPath)) return null;
-			const content = fs$1.readFileSync(authPath, "utf8");
-			if (!content) return null;
-			return JSON.parse(content);
-		} catch (error) {
-			return null;
-		}
-	}
-	function writeAuthConfig(config) {
-		const authPath = getAuthConfigPath();
-		const authDir = path$1.dirname(authPath);
-		if (!fs$1.existsSync(authDir)) fs$1.mkdirSync(authDir, {
-			mode: 504,
-			recursive: true
-		});
-		fs$1.writeFileSync(authPath, JSON.stringify(config, null, 2), { mode: 384 });
-	}
-	function isValidAccessToken(authConfig) {
-		if (!authConfig.token) return false;
-		if (typeof authConfig.expiresAt !== "number") return true;
-		const nowInSeconds = Math.floor(Date.now() / 1e3);
-		return authConfig.expiresAt >= nowInSeconds;
-	}
-}));
-
-//#endregion
-//#region ../../node_modules/@vercel/oidc/dist/oauth.js
-var require_oauth = /* @__PURE__ */ __commonJSMin(((exports, module) => {
-	var __defProp = Object.defineProperty;
-	var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-	var __getOwnPropNames = Object.getOwnPropertyNames;
-	var __hasOwnProp = Object.prototype.hasOwnProperty;
-	var __export = (target, all) => {
-		for (var name in all) __defProp(target, name, {
-			get: all[name],
-			enumerable: true
-		});
-	};
-	var __copyProps = (to, from, except, desc) => {
-		if (from && typeof from === "object" || typeof from === "function") {
-			for (let key of __getOwnPropNames(from)) if (!__hasOwnProp.call(to, key) && key !== except) __defProp(to, key, {
-				get: () => from[key],
-				enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable
-			});
-		}
-		return to;
-	};
-	var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-	var oauth_exports = {};
-	__export(oauth_exports, {
-		processTokenResponse: () => processTokenResponse,
-		refreshTokenRequest: () => refreshTokenRequest
-	});
-	module.exports = __toCommonJS(oauth_exports);
-	var import_os = __require("os");
-	const VERCEL_ISSUER = "https://vercel.com";
-	const VERCEL_CLI_CLIENT_ID = "cl_HYyOPBNtFMfHhaUn9L4QPfTZz6TP47bp";
-	const userAgent = `@vercel/oidc node-${process.version} ${(0, import_os.platform)()} (${(0, import_os.arch)()}) ${(0, import_os.hostname)()}`;
-	let _tokenEndpoint = null;
-	async function getTokenEndpoint() {
-		if (_tokenEndpoint) return _tokenEndpoint;
-		const discoveryUrl = `${VERCEL_ISSUER}/.well-known/openid-configuration`;
-		const response = await fetch(discoveryUrl, { headers: { "user-agent": userAgent } });
-		if (!response.ok) throw new Error("Failed to discover OAuth endpoints");
-		const metadata = await response.json();
-		if (!metadata || typeof metadata.token_endpoint !== "string") throw new Error("Invalid OAuth discovery response");
-		const endpoint = metadata.token_endpoint;
-		_tokenEndpoint = endpoint;
-		return endpoint;
-	}
-	async function refreshTokenRequest(options) {
-		const tokenEndpoint = await getTokenEndpoint();
-		return await fetch(tokenEndpoint, {
-			method: "POST",
-			headers: {
-				"Content-Type": "application/x-www-form-urlencoded",
-				"user-agent": userAgent
-			},
-			body: new URLSearchParams({
-				client_id: VERCEL_CLI_CLIENT_ID,
-				grant_type: "refresh_token",
-				...options
-			})
-		});
-	}
-	async function processTokenResponse(response) {
-		const json = await response.json();
-		if (!response.ok) {
-			const errorMsg = typeof json === "object" && json && "error" in json ? String(json.error) : "Token refresh failed";
-			return [new Error(errorMsg)];
-		}
-		if (typeof json !== "object" || json === null) return [/* @__PURE__ */ new Error("Invalid token response")];
-		if (typeof json.access_token !== "string") return [/* @__PURE__ */ new Error("Missing access_token in response")];
-		if (json.token_type !== "Bearer") return [/* @__PURE__ */ new Error("Invalid token_type in response")];
-		if (typeof json.expires_in !== "number") return [/* @__PURE__ */ new Error("Missing expires_in in response")];
-		return [null, json];
-	}
-}));
-
-//#endregion
-//#region ../../node_modules/@vercel/oidc/dist/token-util.js
-var require_token_util = /* @__PURE__ */ __commonJSMin(((exports, module) => {
-	var __create = Object.create;
-	var __defProp = Object.defineProperty;
-	var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-	var __getOwnPropNames = Object.getOwnPropertyNames;
-	var __getProtoOf = Object.getPrototypeOf;
-	var __hasOwnProp = Object.prototype.hasOwnProperty;
-	var __export = (target, all) => {
-		for (var name in all) __defProp(target, name, {
-			get: all[name],
-			enumerable: true
-		});
-	};
-	var __copyProps = (to, from, except, desc) => {
-		if (from && typeof from === "object" || typeof from === "function") {
-			for (let key of __getOwnPropNames(from)) if (!__hasOwnProp.call(to, key) && key !== except) __defProp(to, key, {
-				get: () => from[key],
-				enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable
-			});
-		}
-		return to;
-	};
-	var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", {
-		value: mod,
-		enumerable: true
-	}) : target, mod));
-	var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-	var token_util_exports = {};
-	__export(token_util_exports, {
-		assertVercelOidcTokenResponse: () => assertVercelOidcTokenResponse,
-		findProjectInfo: () => findProjectInfo,
-		getTokenPayload: () => getTokenPayload,
-		getVercelCliToken: () => getVercelCliToken,
-		getVercelDataDir: () => getVercelDataDir,
-		getVercelOidcToken: () => getVercelOidcToken,
-		isExpired: () => isExpired,
-		loadToken: () => loadToken,
-		saveToken: () => saveToken
-	});
-	module.exports = __toCommonJS(token_util_exports);
-	var path = __toESM(__require("path"));
-	var fs = __toESM(__require("fs"));
-	var import_token_error = require_token_error();
-	var import_token_io = require_token_io();
-	var import_auth_config = require_auth_config();
-	var import_oauth = require_oauth();
-	function getVercelDataDir() {
-		const vercelFolder = "com.vercel.cli";
-		const dataDir = (0, import_token_io.getUserDataDir)();
-		if (!dataDir) return null;
-		return path.join(dataDir, vercelFolder);
-	}
-	async function getVercelCliToken() {
-		const authConfig = (0, import_auth_config.readAuthConfig)();
-		if (!authConfig) return null;
-		if ((0, import_auth_config.isValidAccessToken)(authConfig)) return authConfig.token || null;
-		if (!authConfig.refreshToken) {
-			(0, import_auth_config.writeAuthConfig)({});
-			return null;
-		}
-		try {
-			const tokenResponse = await (0, import_oauth.refreshTokenRequest)({ refresh_token: authConfig.refreshToken });
-			const [tokensError, tokens] = await (0, import_oauth.processTokenResponse)(tokenResponse);
-			if (tokensError || !tokens) {
-				(0, import_auth_config.writeAuthConfig)({});
-				return null;
-			}
-			const updatedConfig = {
-				token: tokens.access_token,
-				expiresAt: Math.floor(Date.now() / 1e3) + tokens.expires_in
-			};
-			if (tokens.refresh_token) updatedConfig.refreshToken = tokens.refresh_token;
-			(0, import_auth_config.writeAuthConfig)(updatedConfig);
-			return updatedConfig.token ?? null;
-		} catch (error) {
-			(0, import_auth_config.writeAuthConfig)({});
-			return null;
-		}
-	}
-	async function getVercelOidcToken(authToken, projectId, teamId) {
-		const url = `https://api.vercel.com/v1/projects/${projectId}/token?source=vercel-oidc-refresh${teamId ? `&teamId=${teamId}` : ""}`;
-		const res = await fetch(url, {
-			method: "POST",
-			headers: { Authorization: `Bearer ${authToken}` }
-		});
-		if (!res.ok) throw new import_token_error.VercelOidcTokenError(`Failed to refresh OIDC token: ${res.statusText}`);
-		const tokenRes = await res.json();
-		assertVercelOidcTokenResponse(tokenRes);
-		return tokenRes;
-	}
-	function assertVercelOidcTokenResponse(res) {
-		if (!res || typeof res !== "object") throw new TypeError("Vercel OIDC token is malformed. Expected an object. Please run `vc env pull` and try again");
-		if (!("token" in res) || typeof res.token !== "string") throw new TypeError("Vercel OIDC token is malformed. Expected a string-valued token property. Please run `vc env pull` and try again");
-	}
-	function findProjectInfo() {
-		const dir = (0, import_token_io.findRootDir)();
-		if (!dir) throw new import_token_error.VercelOidcTokenError("Unable to find project root directory. Have you linked your project with `vc link?`");
-		const prjPath = path.join(dir, ".vercel", "project.json");
-		if (!fs.existsSync(prjPath)) throw new import_token_error.VercelOidcTokenError("project.json not found, have you linked your project with `vc link?`");
-		const prj = JSON.parse(fs.readFileSync(prjPath, "utf8"));
-		if (typeof prj.projectId !== "string" && typeof prj.orgId !== "string") throw new TypeError("Expected a string-valued projectId property. Try running `vc link` to re-link your project.");
-		return {
-			projectId: prj.projectId,
-			teamId: prj.orgId
-		};
-	}
-	function saveToken(token, projectId) {
-		const dir = (0, import_token_io.getUserDataDir)();
-		if (!dir) throw new import_token_error.VercelOidcTokenError("Unable to find user data directory. Please reach out to Vercel support.");
-		const tokenPath = path.join(dir, "com.vercel.token", `${projectId}.json`);
-		const tokenJson = JSON.stringify(token);
-		fs.mkdirSync(path.dirname(tokenPath), {
-			mode: 504,
-			recursive: true
-		});
-		fs.writeFileSync(tokenPath, tokenJson);
-		fs.chmodSync(tokenPath, 432);
-	}
-	function loadToken(projectId) {
-		const dir = (0, import_token_io.getUserDataDir)();
-		if (!dir) throw new import_token_error.VercelOidcTokenError("Unable to find user data directory. Please reach out to Vercel support.");
-		const tokenPath = path.join(dir, "com.vercel.token", `${projectId}.json`);
-		if (!fs.existsSync(tokenPath)) return null;
-		const token = JSON.parse(fs.readFileSync(tokenPath, "utf8"));
-		assertVercelOidcTokenResponse(token);
-		return token;
-	}
-	function getTokenPayload(token) {
-		const tokenParts = token.split(".");
-		if (tokenParts.length !== 3) throw new import_token_error.VercelOidcTokenError("Invalid token. Please run `vc env pull` and try again");
-		const base64 = tokenParts[1].replace(/-/g, "+").replace(/_/g, "/");
-		const padded = base64.padEnd(base64.length + (4 - base64.length % 4) % 4, "=");
-		return JSON.parse(Buffer.from(padded, "base64").toString("utf8"));
-	}
-	function isExpired(token) {
-		return token.exp * 1e3 < Date.now();
-	}
-}));
-
-//#endregion
-export { require_token_util as t };