@paradigma-inc/flywheel 0.1.111 → 0.1.115

package/README.md

@@ -339,9 +339,18 @@ Gemini CLI currently do). On the first MCP tool call the IDE hits
 `/mcp-server`, follows the `WWW-Authenticate` hint to
 `/.well-known/oauth-protected-resource`, reads the authorization-server
 metadata advertising `client_id_metadata_document_supported`, and presents
-its public HTTPS Client ID Metadata Document as `client_id`. There is no
-registration endpoint. The IDE then completes the browser flow and manages
-its own refresh tokens. No API key ever touches the user's filesystem.
+its public HTTPS Client ID Metadata Document as `client_id`. There is no public
+registration endpoint and no private enrollment step. Flywheel validates the
+exact client identity, complete redirect set, selected redirect, PKCE, and
+requested scopes before issuing credentials after authenticated consent.
+
+The IDE manages and persists its own access and single-use refresh credentials.
+It should reuse a valid access credential and rotate the refresh credential
+without opening a browser. Flywheel can also skip repeat consent when the same
+user, exact client identity and redirect, active grant, and equal-or-narrower
+scopes still match. A new or changed identity or redirect, scope expansion,
+expiry, revocation, or disconnect requires consent again. No API key ever
+touches the user's filesystem.
 
 `--api-key` and `--oauth` are mutually exclusive; passing both produces a
 usage error (`exit 2`).

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@paradigma-inc/flywheel",
-  "version": "0.1.111",
+  "version": "0.1.115",
   "description": "One-command setup for Flywheel MCP hosts",
   "type": "module",
   "files": [

package/skills/flywheel/getting-started/flywheel-tutorial-overview.md

@@ -26,6 +26,6 @@ While in SWE we use git to manage changes to code, in research we are interested
 - [Credits and billing](../compute/credits-and-billing.md)
 - [Using local hardware with Flywheel](../usage-and-workflows/using-local-hardware-with-flywheel.md)
 - [Participating in a Campaign](../campaigns/participating-in-a-campaign.md)
-- [OAuth client registration FAQ](../setting-up-flywheel/how-can-i-get-an-authorized-client_id-for-the-oauth-flow.md)
+- [OAuth Client ID Metadata FAQ](../setting-up-flywheel/how-can-i-get-an-authorized-client_id-for-the-oauth-flow.md)
 - [Flywheel MCP tool map](../references/flywheel-mcp-tool-map.md)
 - [Example workflows](../example-workflows/)

package/skills/flywheel/setting-up-flywheel/how-can-i-get-an-authorized-client_id-for-the-oauth-flow.md

@@ -1,8 +1,8 @@
-# FAQ: How Can I Get an Authorized `client_id` for the OAuth Flow?
+# FAQ: How Can I Use a `client_id` for the OAuth Flow?
 
-Flywheel uses [OAuth Client ID Metadata Documents](https://modelcontextprotocol.io/specification/2025-11-25/basic/authorization#client-id-metadata-documents).
-Your public HTTPS metadata-document URL is the OAuth `client_id`; there is no
-separate registration request.
+Flywheel uses [OAuth Client ID Metadata Documents](https://modelcontextprotocol.io/specification/2026-07-28/basic/authorization/client-registration).
+Your public HTTPS metadata-document URL is the OAuth `client_id`. There is no
+Dynamic Client Registration endpoint and no private enrollment or allowlist.
 
 First, query our OAuth authorization-server metadata:
 
@@ -31,3 +31,11 @@ and validates the document during authorization and token exchange. The requeste
 redirect URI must exactly match one listed value; it may be omitted only when the
 document lists exactly one redirect URI. Do not put a client secret in the
 document.
+
+The first connection requires authenticated consent and PKCE. Persist the issued
+access and single-use refresh credentials. Reuse the access credential while it
+is valid and rotate the refresh credential instead of restarting authorization.
+Flywheel skips repeat consent only for the same user, exact client identity and
+selected redirect, active grant, and equal-or-narrower scopes. A new or changed
+client identity or redirect, scope expansion, expiry, revocation, or disconnect
+requires consent again.

package/skills/flywheel/setting-up-flywheel/other-hosts-installation.md

@@ -37,4 +37,11 @@ Authorization = "Bearer <YOUR_MCP_API_KEY>"
 
 Different hosts use different field names (`mcpServers`, `mcp_servers`, `mcp.servers`, etc.), but the server URL and `Authorization` bearer header are the key pieces.
 
-Alternative: for any host that supports MCP OAuth, you can use its OAuth connector install flow and set the MCP URL to `https://flywheel.paradigma.inc/mcp-server`. Web connector hosts (for example ChatGPT.com, Claude.ai) commonly use this path. It can be convenient, but it may prompt re-authorization more often than the API key route depending on the host token lifecycle and refresh behavior.
+Alternative: for any host that supports MCP OAuth, use its OAuth connector
+install flow and set the MCP URL to
+`https://flywheel.paradigma.inc/mcp-server`. Web connector hosts (for example
+ChatGPT.com and Claude.ai) commonly use this path. A host that persists access
+and refresh credentials should authorize once, reuse the access credential, and
+rotate the refresh credential without another browser prompt. Reauthorization
+is needed when the host loses its credentials or the grant expires, is revoked,
+or requests changed authority.

package/src/runtime/required-runtime-commands.json

@@ -80,6 +80,9 @@
   "export:summary:stream",
   "export:summary:pdf",
   "export:summary:render-pdf",
+  "admin:test-users:create",
+  "admin:test-users:delete",
+  "admin:test-users:login",
   "admin:graphs:list",
   "admin:graphs:export",
   "admin:graphs:export:stream",

package/src/runtime/vendor/flywheel-cli-dist/commands/_browser-handoff.d.ts

@@ -1,17 +1,24 @@
-import type { CliGlobals } from '../grammar/globals.js';
+import type { CliGlobals } from "../grammar/globals.js";
 export interface BrowserHandoffResult {
-    status: 'browser_flow_required';
+    status: "browser_flow_required";
     command: string;
     url: string;
     opened: boolean;
     next_action: string;
 }
+export interface PrivateBrowserHandoffResult {
+    status: "private_browser_handoff_started";
+    command: string;
+    opened: true;
+    next_action: string;
+}
 /**
  * Normalizes route-specific browser URLs into the CLI's stable handoff result.
  * Billing routes expose Stripe-shaped checkout/portal fields, while OAuth and
  * generic handoffs use open_url/url.
  */
 export declare function extractOpenUrl(payload: Record<string, unknown>): string;
+export declare function requirePrivateBrowserHandoff(globals: CliGlobals | undefined): void;
 export declare function buildBrowserHandoffResult({ command, url, globals, stderr, nextAction, }: {
     command: string;
     url: string;
@@ -19,3 +26,10 @@ export declare function buildBrowserHandoffResult({ command, url, globals, stder
     stderr?: (chunk: string) => void;
     nextAction: string;
 }): Promise<BrowserHandoffResult>;
+export declare function buildPrivateBrowserHandoffResult({ command, url, globals, stderr, nextAction, }: {
+    command: string;
+    url: string;
+    globals: CliGlobals | undefined;
+    stderr?: (chunk: string) => void;
+    nextAction: string;
+}): Promise<PrivateBrowserHandoffResult>;

package/src/runtime/vendor/flywheel-cli-dist/commands/_browser-handoff.js

@@ -1,11 +1,12 @@
-import { EXIT_TRANSPORT } from '../exit-codes.js';
-import { CliHttpError } from '../http/client.js';
-import { maybeOpenUrl } from './_open-url.js';
+import { CliUsageError } from "../errors.js";
+import { EXIT_TRANSPORT } from "../exit-codes.js";
+import { CliHttpError } from "../http/client.js";
+import { maybeOpenUrl } from "./_open-url.js";
 const BROWSER_HANDOFF_URL_KEYS = [
-    'open_url',
-    'url',
-    'checkout_url',
-    'portal_url',
+    "open_url",
+    "url",
+    "checkout_url",
+    "portal_url",
 ];
 /**
  * Normalizes route-specific browser URLs into the CLI's stable handoff result.
@@ -15,37 +16,58 @@ const BROWSER_HANDOFF_URL_KEYS = [
 export function extractOpenUrl(payload) {
     for (const key of BROWSER_HANDOFF_URL_KEYS) {
         const value = payload[key];
-        if (typeof value === 'string')
+        if (typeof value === "string")
             return value;
     }
-    return '';
+    return "";
 }
 function validatedBrowserHandoffUrl(url) {
     const trimmed = url.trim();
     if (!trimmed) {
-        throw new CliHttpError('browser handoff response missing browser URL', EXIT_TRANSPORT);
+        throw new CliHttpError("browser handoff response missing browser URL", EXIT_TRANSPORT);
     }
     let parsed;
     try {
         parsed = new URL(trimmed);
     }
     catch {
-        throw new CliHttpError('browser handoff response included an invalid browser URL', EXIT_TRANSPORT);
+        throw new CliHttpError("browser handoff response included an invalid browser URL", EXIT_TRANSPORT);
     }
-    if (parsed.protocol !== 'https:' && parsed.protocol !== 'http:') {
-        throw new CliHttpError('browser handoff response included a non-HTTP browser URL', EXIT_TRANSPORT);
+    if (parsed.protocol !== "https:" && parsed.protocol !== "http:") {
+        throw new CliHttpError("browser handoff response included a non-HTTP browser URL", EXIT_TRANSPORT);
     }
     return trimmed;
 }
+export function requirePrivateBrowserHandoff(globals) {
+    if (!globals?.open) {
+        throw new CliUsageError("admin:test-users:login requires --open for private browser handoff");
+    }
+    if (!process.stdout.isTTY) {
+        throw new CliUsageError("admin:test-users:login requires an interactive terminal for private browser handoff");
+    }
+}
 export async function buildBrowserHandoffResult({ command, url, globals, stderr, nextAction, }) {
     const handoffUrl = validatedBrowserHandoffUrl(url);
     const opened = await maybeOpenUrl(handoffUrl, globals, stderr);
     return {
-        status: 'browser_flow_required',
+        status: "browser_flow_required",
         command,
         url: handoffUrl,
         opened,
         next_action: nextAction,
     };
 }
+export async function buildPrivateBrowserHandoffResult({ command, url, globals, stderr, nextAction, }) {
+    requirePrivateBrowserHandoff(globals);
+    const opened = await maybeOpenUrl(validatedBrowserHandoffUrl(url), globals, stderr, true);
+    if (!opened) {
+        throw new CliHttpError("private browser handoff could not be opened", EXIT_TRANSPORT);
+    }
+    return {
+        status: "private_browser_handoff_started",
+        command,
+        opened: true,
+        next_action: nextAction,
+    };
+}
 //# sourceMappingURL=_browser-handoff.js.map

package/src/runtime/vendor/flywheel-cli-dist/commands/_browser-handoff.js.map

@@ -1 +1 @@
-{"version":3,"file":"_browser-handoff.js","sourceRoot":"","sources":["../../src/commands/_browser-handoff.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAU9C,MAAM,wBAAwB,GAAG;IAC/B,UAAU;IACV,KAAK;IACL,cAAc;IACd,YAAY;CACJ,CAAC;AAEX;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,OAAgC;IAC7D,KAAK,MAAM,GAAG,IAAI,wBAAwB,EAAE,CAAC;QAC3C,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;QAC3B,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;IAC9C,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,0BAA0B,CAAC,GAAW;IAC7C,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IAC3B,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,YAAY,CACpB,8CAA8C,EAC9C,cAAc,CACf,CAAC;IACJ,CAAC;IACD,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,YAAY,CACpB,0DAA0D,EAC1D,cAAc,CACf,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QAChE,MAAM,IAAI,YAAY,CACpB,0DAA0D,EAC1D,cAAc,CACf,CAAC;IACJ,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,EAC9C,OAAO,EACP,GAAG,EACH,OAAO,EACP,MAAM,EACN,UAAU,GAOX;IACC,MAAM,UAAU,GAAG,0BAA0B,CAAC,GAAG,CAAC,CAAC;IACnD,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,UAAU,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IAC/D,OAAO;QACL,MAAM,EAAE,uBAAuB;QAC/B,OAAO;QACP,GAAG,EAAE,UAAU;QACf,MAAM;QACN,WAAW,EAAE,UAAU;KACxB,CAAC;AACJ,CAAC"}
+{"version":3,"file":"_browser-handoff.js","sourceRoot":"","sources":["../../src/commands/_browser-handoff.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAiB9C,MAAM,wBAAwB,GAAG;IAC/B,UAAU;IACV,KAAK;IACL,cAAc;IACd,YAAY;CACJ,CAAC;AAEX;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,OAAgC;IAC7D,KAAK,MAAM,GAAG,IAAI,wBAAwB,EAAE,CAAC;QAC3C,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;QAC3B,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;IAC9C,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,0BAA0B,CAAC,GAAW;IAC7C,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IAC3B,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,YAAY,CACpB,8CAA8C,EAC9C,cAAc,CACf,CAAC;IACJ,CAAC;IACD,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,YAAY,CACpB,0DAA0D,EAC1D,cAAc,CACf,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QAChE,MAAM,IAAI,YAAY,CACpB,0DAA0D,EAC1D,cAAc,CACf,CAAC;IACJ,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,4BAA4B,CAC1C,OAA+B;IAE/B,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC;QACnB,MAAM,IAAI,aAAa,CACrB,oEAAoE,CACrE,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QAC1B,MAAM,IAAI,aAAa,CACrB,qFAAqF,CACtF,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,EAC9C,OAAO,EACP,GAAG,EACH,OAAO,EACP,MAAM,EACN,UAAU,GAOX;IACC,MAAM,UAAU,GAAG,0BAA0B,CAAC,GAAG,CAAC,CAAC;IACnD,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,UAAU,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IAC/D,OAAO;QACL,MAAM,EAAE,uBAAuB;QAC/B,OAAO;QACP,GAAG,EAAE,UAAU;QACf,MAAM;QACN,WAAW,EAAE,UAAU;KACxB,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gCAAgC,CAAC,EACrD,OAAO,EACP,GAAG,EACH,OAAO,EACP,MAAM,EACN,UAAU,GAOX;IACC,4BAA4B,CAAC,OAAO,CAAC,CAAC;IACtC,MAAM,MAAM,GAAG,MAAM,YAAY,CAC/B,0BAA0B,CAAC,GAAG,CAAC,EAC/B,OAAO,EACP,MAAM,EACN,IAAI,CACL,CAAC;IACF,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,YAAY,CACpB,6CAA6C,EAC7C,cAAc,CACf,CAAC;IACJ,CAAC;IACD,OAAO;QACL,MAAM,EAAE,iCAAiC;QACzC,OAAO;QACP,MAAM,EAAE,IAAI;QACZ,WAAW,EAAE,UAAU;KACxB,CAAC;AACJ,CAAC"}

package/src/runtime/vendor/flywheel-cli-dist/commands/_open-url.d.ts

@@ -1,2 +1,2 @@
-import type { CliGlobals } from '../grammar/globals.js';
-export declare function maybeOpenUrl(url: string | undefined, globals: CliGlobals | undefined, stderr?: (chunk: string) => void): Promise<boolean>;
+import type { CliGlobals } from "../grammar/globals.js";
+export declare function maybeOpenUrl(url: string | undefined, globals: CliGlobals | undefined, stderr?: (chunk: string) => void, privateBrowser?: boolean): Promise<boolean>;

package/src/runtime/vendor/flywheel-cli-dist/commands/_open-url.js

@@ -1,24 +1,33 @@
-export async function maybeOpenUrl(url, globals, stderr) {
+export async function maybeOpenUrl(url, globals, stderr, privateBrowser = false) {
     if (!url || !globals?.open)
         return false;
     if (!process.stdout.isTTY)
         return false;
     try {
-        const mod = (await import('open'));
+        const mod = (await import("open"));
         let open;
-        if (typeof mod === 'function') {
+        if (typeof mod === "function") {
             open = mod;
         }
-        else if (mod && typeof mod.default === 'function') {
+        else if (mod &&
+            typeof mod.default === "function") {
             open = mod.default;
         }
         if (open) {
-            await open(url);
+            if (privateBrowser) {
+                const browserPrivate = mod.apps?.browserPrivate;
+                if (!browserPrivate)
+                    return false;
+                await open(url, { app: { name: browserPrivate } });
+            }
+            else {
+                await open(url);
+            }
             return true;
         }
     }
     catch {
-        const msg = '--open skipped: install the `open` package to enable browser launch\n';
+        const msg = "--open skipped: install the `open` package to enable browser launch\n";
         if (stderr)
             stderr(msg);
         else

package/src/runtime/vendor/flywheel-cli-dist/commands/_open-url.js.map

@@ -1 +1 @@
-{"version":3,"file":"_open-url.js","sourceRoot":"","sources":["../../src/commands/_open-url.ts"],"names":[],"mappings":"AAIA,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,GAAuB,EACvB,OAA+B,EAC/B,MAAgC;IAEhC,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,EAAE,IAAI;QAAE,OAAO,KAAK,CAAC;IACzC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACxC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,CAAC,MAAM,MAAM,CAAC,MAAgB,CAAC,CAAY,CAAC;QACxD,IAAI,IAAwB,CAAC;QAC7B,IAAI,OAAO,GAAG,KAAK,UAAU,EAAE,CAAC;YAC9B,IAAI,GAAG,GAAa,CAAC;QACvB,CAAC;aAAM,IAAI,GAAG,IAAI,OAAQ,GAA6B,CAAC,OAAO,KAAK,UAAU,EAAE,CAAC;YAC/E,IAAI,GAAI,GAA2B,CAAC,OAAO,CAAC;QAC9C,CAAC;QACD,IAAI,IAAI,EAAE,CAAC;YACT,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC;YAChB,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,GAAG,GAAG,uEAAuE,CAAC;QACpF,IAAI,MAAM;YAAE,MAAM,CAAC,GAAG,CAAC,CAAC;;YACnB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACjC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}
+{"version":3,"file":"_open-url.js","sourceRoot":"","sources":["../../src/commands/_open-url.ts"],"names":[],"mappings":"AAOA,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,GAAuB,EACvB,OAA+B,EAC/B,MAAgC,EAChC,cAAc,GAAG,KAAK;IAEtB,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,EAAE,IAAI;QAAE,OAAO,KAAK,CAAC;IACzC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACxC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,CAAC,MAAM,MAAM,CAAC,MAAgB,CAAC,CAAY,CAAC;QACxD,IAAI,IAAwB,CAAC;QAC7B,IAAI,OAAO,GAAG,KAAK,UAAU,EAAE,CAAC;YAC9B,IAAI,GAAG,GAAa,CAAC;QACvB,CAAC;aAAM,IACL,GAAG;YACH,OAAQ,GAA6B,CAAC,OAAO,KAAK,UAAU,EAC5D,CAAC;YACD,IAAI,GAAI,GAA2B,CAAC,OAAO,CAAC;QAC9C,CAAC;QACD,IAAI,IAAI,EAAE,CAAC;YACT,IAAI,cAAc,EAAE,CAAC;gBACnB,MAAM,cAAc,GAClB,GACD,CAAC,IAAI,EAAE,cAAc,CAAC;gBACvB,IAAI,CAAC,cAAc;oBAAE,OAAO,KAAK,CAAC;gBAClC,MAAM,IAAI,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE,CAAC,CAAC;YACrD,CAAC;iBAAM,CAAC;gBACN,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC;YAClB,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,GAAG,GACP,uEAAuE,CAAC;QAC1E,IAAI,MAAM;YAAE,MAAM,CAAC,GAAG,CAAC,CAAC;;YACnB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACjC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/src/runtime/vendor/flywheel-cli-dist/commands/admin-test-users-create.d.ts

@@ -0,0 +1,2 @@
+import type { CommandHandler } from "./types.js";
+export declare const adminTestUsersCreateCommand: CommandHandler;

package/src/runtime/vendor/flywheel-cli-dist/commands/admin-test-users-create.js

@@ -0,0 +1,9 @@
+import { adminAuthRequestOptions, requireAdminCredential, } from "./_admin-auth.js";
+export const adminTestUsersCreateCommand = async (context) => {
+    requireAdminCredential(context, "admin:test-users:create");
+    const options = {
+        ...adminAuthRequestOptions(context.apiKey),
+    };
+    return context.requestJson("POST", "/admin/test-users", options);
+};
+//# sourceMappingURL=admin-test-users-create.js.map

package/src/runtime/vendor/flywheel-cli-dist/commands/admin-test-users-create.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin-test-users-create.js","sourceRoot":"","sources":["../../src/commands/admin-test-users-create.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,uBAAuB,EACvB,sBAAsB,GACvB,MAAM,kBAAkB,CAAC;AAG1B,MAAM,CAAC,MAAM,2BAA2B,GAAmB,KAAK,EAAE,OAAO,EAAE,EAAE;IAC3E,sBAAsB,CAAC,OAAO,EAAE,yBAAyB,CAAC,CAAC;IAC3D,MAAM,OAAO,GAAmB;QAC9B,GAAG,uBAAuB,CAAC,OAAO,CAAC,MAAM,CAAC;KAC3C,CAAC;IACF,OAAO,OAAO,CAAC,WAAW,CAAC,MAAM,EAAE,mBAAmB,EAAE,OAAO,CAAC,CAAC;AACnE,CAAC,CAAC"}

package/src/runtime/vendor/flywheel-cli-dist/commands/admin-test-users-delete.d.ts

@@ -0,0 +1,2 @@
+import type { CommandHandler } from "./types.js";
+export declare const adminTestUsersDeleteCommand: CommandHandler;

package/src/runtime/vendor/flywheel-cli-dist/commands/admin-test-users-delete.js

@@ -0,0 +1,11 @@
+import { adminAuthRequestOptions, requireAdminCredential, } from "./_admin-auth.js";
+import { requiredString } from "./utils.js";
+export const adminTestUsersDeleteCommand = async (context) => {
+    requireAdminCredential(context, "admin:test-users:delete");
+    const userId = requiredString(context.params, "user_id");
+    const options = {
+        ...adminAuthRequestOptions(context.apiKey),
+    };
+    return context.requestJson("DELETE", `/admin/test-users/${encodeURIComponent(userId)}`, options);
+};
+//# sourceMappingURL=admin-test-users-delete.js.map

package/src/runtime/vendor/flywheel-cli-dist/commands/admin-test-users-delete.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin-test-users-delete.js","sourceRoot":"","sources":["../../src/commands/admin-test-users-delete.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,uBAAuB,EACvB,sBAAsB,GACvB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAE5C,MAAM,CAAC,MAAM,2BAA2B,GAAmB,KAAK,EAAE,OAAO,EAAE,EAAE;IAC3E,sBAAsB,CAAC,OAAO,EAAE,yBAAyB,CAAC,CAAC;IAC3D,MAAM,MAAM,GAAG,cAAc,CAAC,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IACzD,MAAM,OAAO,GAAmB;QAC9B,GAAG,uBAAuB,CAAC,OAAO,CAAC,MAAM,CAAC;KAC3C,CAAC;IACF,OAAO,OAAO,CAAC,WAAW,CACxB,QAAQ,EACR,qBAAqB,kBAAkB,CAAC,MAAM,CAAC,EAAE,EACjD,OAAO,CACR,CAAC;AACJ,CAAC,CAAC"}

package/src/runtime/vendor/flywheel-cli-dist/commands/admin-test-users-login.d.ts

@@ -0,0 +1,2 @@
+import type { CommandHandler } from "./types.js";
+export declare const adminTestUsersLoginCommand: CommandHandler;

package/src/runtime/vendor/flywheel-cli-dist/commands/admin-test-users-login.js

@@ -0,0 +1,20 @@
+import { adminAuthRequestOptions, requireAdminCredential, } from "./_admin-auth.js";
+import { buildPrivateBrowserHandoffResult, requirePrivateBrowserHandoff, } from "./_browser-handoff.js";
+import { requiredString } from "./utils.js";
+export const adminTestUsersLoginCommand = async (context) => {
+    requireAdminCredential(context, "admin:test-users:login");
+    requirePrivateBrowserHandoff(context.globals);
+    const userId = requiredString(context.params, "user_id");
+    const options = {
+        ...adminAuthRequestOptions(context.apiKey),
+    };
+    const payload = (await context.requestJson("POST", `/admin/test-users/${encodeURIComponent(userId)}/login-link`, options)) ?? {};
+    return buildPrivateBrowserHandoffResult({
+        command: "admin:test-users:login",
+        url: typeof payload.action_link === "string" ? payload.action_link : "",
+        globals: context.globals,
+        stderr: context.stderr,
+        nextAction: "Test-user browser session opened.",
+    });
+};
+//# sourceMappingURL=admin-test-users-login.js.map

package/src/runtime/vendor/flywheel-cli-dist/commands/admin-test-users-login.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin-test-users-login.js","sourceRoot":"","sources":["../../src/commands/admin-test-users-login.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,uBAAuB,EACvB,sBAAsB,GACvB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,gCAAgC,EAChC,4BAA4B,GAC7B,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAE5C,MAAM,CAAC,MAAM,0BAA0B,GAAmB,KAAK,EAAE,OAAO,EAAE,EAAE;IAC1E,sBAAsB,CAAC,OAAO,EAAE,wBAAwB,CAAC,CAAC;IAC1D,4BAA4B,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAC9C,MAAM,MAAM,GAAG,cAAc,CAAC,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IACzD,MAAM,OAAO,GAAmB;QAC9B,GAAG,uBAAuB,CAAC,OAAO,CAAC,MAAM,CAAC;KAC3C,CAAC;IACF,MAAM,OAAO,GACX,CAAC,MAAM,OAAO,CAAC,WAAW,CACxB,MAAM,EACN,qBAAqB,kBAAkB,CAAC,MAAM,CAAC,aAAa,EAC5D,OAAO,CACR,CAAC,IAAI,EAAE,CAAC;IACX,OAAO,gCAAgC,CAAC;QACtC,OAAO,EAAE,wBAAwB;QACjC,GAAG,EAAE,OAAO,OAAO,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE;QACvE,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,UAAU,EAAE,mCAAmC;KAChD,CAAC,CAAC;AACL,CAAC,CAAC"}

package/src/runtime/vendor/flywheel-cli-dist/commands/index.d.ts

@@ -1,23 +1,23 @@
-import { artifactsGetCommand } from './artifacts-get.js';
-import { artifactsListCommand } from './artifacts-list.js';
-import { authLoginCommand } from './auth-login.js';
-import { authStatusCommand } from './auth-status.js';
-import { computeStatusCommand } from './compute-status.js';
-import { exportSubgraphCommand } from './export-subgraph.js';
-import { nodesChildrenCommand } from './nodes-children.js';
-import { nodesCommitCommand } from './nodes-commit.js';
-import { nodesCommitNewCommand } from './nodes-commit-new.js';
-import { nodesDeleteCommand } from './nodes-delete.js';
-import { nodesGetCommand } from './nodes-get.js';
-import { nodesListCommand } from './nodes-list.js';
-import { nodesParentsCommand } from './nodes-parents.js';
-import { nodesRenderTreeCommand } from './nodes-render-tree.js';
-import { nodesStageLeaseAcquireCommand } from './nodes-stage-lease-acquire.js';
-import { profileListCommand } from './profile-list.js';
-import { profileShowCommand } from './profile-show.js';
-import { profileSetCommand } from './profile-set.js';
-import { profileUnsetCommand } from './profile-unset.js';
-import { graphGetCommand } from './graph-get.js';
-import type { CommandHandler } from './types.js';
+import { artifactsGetCommand } from "./artifacts-get.js";
+import { artifactsListCommand } from "./artifacts-list.js";
+import { authLoginCommand } from "./auth-login.js";
+import { authStatusCommand } from "./auth-status.js";
+import { computeStatusCommand } from "./compute-status.js";
+import { exportSubgraphCommand } from "./export-subgraph.js";
+import { nodesChildrenCommand } from "./nodes-children.js";
+import { nodesCommitCommand } from "./nodes-commit.js";
+import { nodesCommitNewCommand } from "./nodes-commit-new.js";
+import { nodesDeleteCommand } from "./nodes-delete.js";
+import { nodesGetCommand } from "./nodes-get.js";
+import { nodesListCommand } from "./nodes-list.js";
+import { nodesParentsCommand } from "./nodes-parents.js";
+import { nodesRenderTreeCommand } from "./nodes-render-tree.js";
+import { nodesStageLeaseAcquireCommand } from "./nodes-stage-lease-acquire.js";
+import { profileListCommand } from "./profile-list.js";
+import { profileShowCommand } from "./profile-show.js";
+import { profileSetCommand } from "./profile-set.js";
+import { profileUnsetCommand } from "./profile-unset.js";
+import { graphGetCommand } from "./graph-get.js";
+import type { CommandHandler } from "./types.js";
 export { artifactsGetCommand, artifactsListCommand, authLoginCommand, authStatusCommand, computeStatusCommand, exportSubgraphCommand, graphGetCommand, nodesChildrenCommand, nodesCommitCommand, nodesCommitNewCommand, nodesDeleteCommand, nodesGetCommand, nodesListCommand, nodesParentsCommand, nodesRenderTreeCommand, nodesStageLeaseAcquireCommand, profileListCommand, profileShowCommand, profileSetCommand, profileUnsetCommand, };
 export declare const MVP_COMMAND_HANDLERS: Record<string, CommandHandler>;