@paradigma-inc/flywheel 0.1.115 → 0.1.134

package/src/setup/modes/mcp.mjs

@@ -47,6 +47,8 @@ export async function runMcpSetupMode({
   // entry; when false, they stay idempotent by name so a benign rerun does
   // not wipe the previously-minted bearer key.
   enforceAuthMode = false,
+  privateCodexConfig = false,
+  replaceExisting = false,
   supportedCliHosts = SUPPORTED_INSTALL_SKILL_HOSTS,
   detectPriorMode = detectPriorModeForSetup,
   reconcilePriorMode = null,
@@ -85,9 +87,9 @@ export async function runMcpSetupMode({
     const reconcileEntries = Array.isArray(priorModeMatch.entries)
       ? priorModeMatch.entries
       : priorModeMatch.affectedHosts.map((hostName) => ({
-          hostName,
-          serverNames: [],
-        }));
+        hostName,
+        serverNames: [],
+      }));
 
     // Reconcile each detected entry using its actual serverName(s). Prior CLI
     // installs carry no MCP entry names and the callback falls back to the
@@ -150,6 +152,8 @@ export async function runMcpSetupMode({
           serverName,
           entry,
           enforceAuthMode,
+          privateConfig: privateCodexConfig && hostName === "codex",
+          replaceExisting,
         });
       } else if (host.mcp.configType === "yaml") {
         patchResult = await patchYamlServer({

package/src/setup/shared/prior-mode-detect.mjs

@@ -7,7 +7,6 @@ import {
   SKILL_ONLY_HOST_NAMES,
 } from "../../agents.mjs";
 import {
-  parseTomlSectionName,
   parseTomlStringValue,
   readEntryServerUrl,
   readJsonConfig as defaultReadJsonConfig,
@@ -16,6 +15,7 @@ import {
   readYamlConfig as defaultReadYamlConfig,
   resolveMcpPath as defaultResolveMcpPath,
 } from "../../mcp-writer.mjs";
+import { scanTomlLines } from "../../toml-lines.mjs";
 import {
   listBundledSkills as defaultListBundledSkills,
   resolveInstalledSkillDir as defaultResolveInstalledSkillDir,
@@ -157,7 +157,6 @@ async function findFlywheelTomlEntries(
   } catch {
     return [];
   }
-  const lines = raw.replace(/\r\n/g, "\n").split("\n");
   const matches = [];
   let currentServerName = null;
   let currentUrl = null;
@@ -179,23 +178,16 @@ async function findFlywheelTomlEntries(
     currentUrl = null;
   };
 
-  for (const line of lines) {
+  for (const { line, inString, sectionPath: sectionName } of scanTomlLines(
+    raw,
+  )) {
+    if (inString) continue;
     const trimmed = line.trim();
-    const sectionName = parseTomlSectionName(trimmed);
 
     if (sectionName) {
       commitCurrent();
-      // Capture any tail after `mcp_servers.` as the candidate server name.
-      // `normalizeServerName` in setup accepts names containing dots (TOML
-      // allows dotted section keys as a single server name, e.g.
-      // `[mcp_servers.legacy.flywheel]`), so restricting to `[A-Za-z0-9_-]+`
-      // would let a valid cross-mode install slip through detection. The
-      // `url` presence check in commitCurrent() is what discriminates real
-      // server sections from sub-tables like `.http_headers`: sub-tables
-      // carry headers, not urls, so they never commit.
-      const serverMatch = sectionName.match(/^mcp_servers\.(.+)$/);
-      if (serverMatch) {
-        currentServerName = serverMatch[1];
+      if (sectionName.length === 2 && sectionName[0] === "mcp_servers") {
+        currentServerName = sectionName[1];
       }
       continue;
     }
@@ -342,7 +334,11 @@ async function skillsRootClaimedBySkillOnlyHost({
   // should be raised. In the second case, codex had a real CLI install of
   // its own and the cross-mode conflict must fire.
   try {
-    const selfMarkerPath = resolveFlywheelInstalledMarkerPath(cwd, hostName, scope);
+    const selfMarkerPath = resolveFlywheelInstalledMarkerPath(
+      cwd,
+      hostName,
+      scope,
+    );
     if (await pathExists(selfMarkerPath)) {
       return false;
     }
@@ -369,7 +365,11 @@ async function skillsRootClaimedBySkillOnlyHost({
     // skills-root are load-bearing.
     let markerPath;
     try {
-      markerPath = resolveFlywheelInstalledMarkerPath(cwd, skillOnlyHostName, scope);
+      markerPath = resolveFlywheelInstalledMarkerPath(
+        cwd,
+        skillOnlyHostName,
+        scope,
+      );
     } catch {
       continue;
     }
@@ -419,10 +419,7 @@ async function hostHasBundledSkillArtifacts({
   return !claimed;
 }
 
-export function formatPriorModeConflictError({
-  priorMode,
-  affectedHosts,
-}) {
+export function formatPriorModeConflictError({ priorMode, affectedHosts }) {
   const hostList = sortHosts(affectedHosts).join(", ");
   return `Flywheel is already installed in --mode ${priorMode} for host(s) ${hostList}. Run \`npx --yes @paradigma-inc/flywheel uninstall\` first, or re-run this command with --force to reconcile automatically.`;
 }

package/src/setup/test-seams.mjs

@@ -0,0 +1,25 @@
+/**
+ * Master switch for setup test seams.
+ *
+ * A seam is only permitted to change behavior when this is set. On its own it
+ * grants nothing: each seam reads its own explicit override variable, so a
+ * test that enables seams still gets production behavior unless it also asks
+ * for the specific override it needs.
+ */
+export const ENABLE_TEST_SEAMS_ENV = "FLYWHEEL_ENABLE_TEST_SEAMS";
+
+export function testSeamsEnabled(env = process.env) {
+  return String(env[ENABLE_TEST_SEAMS_ENV] || "").trim() === "1";
+}
+
+/**
+ * Read a seam override, or return undefined when seams are off or the
+ * override is unset.
+ */
+export function testSeamOverride(name, env = process.env) {
+  if (!testSeamsEnabled(env)) {
+    return undefined;
+  }
+  const value = String(env[name] || "").trim();
+  return value === "" ? undefined : value;
+}

package/src/setup-auth.mjs

@@ -1,6 +1,10 @@
 import crypto from "node:crypto";
 import http from "node:http";
 import { spawn } from "node:child_process";
+import { read as readFd } from "node:fs";
+import { promisify } from "node:util";
+import { isatty } from "node:tty";
+import { setTimeout as delay } from "node:timers/promises";
 
 import { SetupInputUsageError } from "./setup/mode.mjs";
 
@@ -8,6 +12,68 @@ const DEFAULT_AUTH_TIMEOUT_MS = 5 * 60 * 1000;
 const MIN_POLL_DELAY_MS = 1000;
 const MAX_POLL_DELAY_MS = 10_000;
 const SETUP_DEVICE_API_PREFIX = "/api/v1/auth/mcp-api-keys/setup-device";
+const readDescriptor = promisify(readFd);
+
+async function readStdin(fd, buffer, offset, length, position) {
+  for (; ;) {
+    try {
+      return await readDescriptor(fd, buffer, offset, length, position);
+    } catch (error) {
+      // Node may mark inherited pipes nonblocking. EAGAIN is not EOF;
+      // wait for the producer without reading beyond the credential limit.
+      if (error.code !== "EAGAIN") throw error;
+      await delay(10);
+    }
+  }
+}
+
+export function createSetupStdinAuthReader(
+  options,
+  { isTTY = isatty(0), read = readStdin } = {},
+) {
+  if (options.apiKey !== undefined || options.oauth === true ||
+    (options.authMode && options.authMode !== "auto")) {
+    throw new SetupInputUsageError(
+      "--api-key-stdin cannot be combined with --api-key, --oauth, or an explicit browser/device auth mode.",
+    );
+  }
+  if (isTTY) {
+    throw new SetupInputUsageError("--api-key-stdin requires non-terminal input.");
+  }
+  return async () => {
+    const buffer = Buffer.alloc(4096);
+    let length = 0;
+    try {
+      while (length < buffer.length) {
+        const { bytesRead } = await read(0, buffer, length, buffer.length - length, null);
+        if (bytesRead === 0) break;
+        length += bytesRead;
+      }
+      if (length === buffer.length) {
+        const overflow = Buffer.alloc(1);
+        try {
+          const { bytesRead } = await read(0, overflow, 0, 1, null);
+          if (bytesRead !== 0) {
+            throw new SetupInputUsageError("API key input exceeds 4096 bytes.");
+          }
+        } finally {
+          overflow.fill(0);
+        }
+      }
+      let apiKey = new TextDecoder("utf-8", { fatal: true, ignoreBOM: true }).decode(buffer.subarray(0, length));
+      if (apiKey.endsWith("\n")) apiKey = apiKey.slice(0, -1);
+      if (!apiKey || apiKey.trim() !== apiKey || /[\r\n]/.test(apiKey)) {
+        throw new SetupInputUsageError("API key input must be one nonempty line without surrounding whitespace.");
+      }
+      return { apiKey, authMode: null };
+    } catch (error) {
+      if (error instanceof SetupInputUsageError) throw error;
+      throw new SetupInputUsageError("API key input could not be read as valid UTF-8.");
+    } finally {
+      buffer.fill(0);
+    }
+  };
+}
 
 function openUrlInBrowser(url) {
   const platform = process.platform;
@@ -326,14 +392,14 @@ export async function resolveSetupApiKey({
   const authResult =
     resolvedAuthMode === "device"
       ? await acquireDeviceFlow({
-          baseUrl,
-          keyName,
-          verificationBaseUrl: baseUrl,
-        })
+        baseUrl,
+        keyName,
+        verificationBaseUrl: baseUrl,
+      })
       : await acquireBrowserBridge({
-          baseUrl,
-          keyName,
-        });
+        baseUrl,
+        keyName,
+      });
 
   const normalizedResultApiKey = String(authResult?.apiKey || "").trim();
   if (!normalizedResultApiKey) {
@@ -357,9 +423,9 @@ export async function acquireApiKeyViaBrowserBridge(_args) {
   // makes this error a dead end.
   throw new Error(
     "FLY-416: loopback (browser-bridge) auth has been removed. " +
-      "Re-run with --auth-mode device (or --auth-mode auto) to use the " +
-      "RFC 8628 device flow. Run flywheel setup --help for " +
-      "the full CLI auth contract.",
+    "Re-run with --auth-mode device (or --auth-mode auto) to use the " +
+    "RFC 8628 device flow. Run flywheel setup --help for " +
+    "the full CLI auth contract.",
   );
 }
 

package/src/toml-lines.mjs

@@ -0,0 +1,52 @@
+import { parse } from "smol-toml";
+
+function sectionPath(line) {
+  if (!/^\s*\[/.test(line)) return null;
+  let table;
+  try {
+    table = parse(line);
+  } catch {
+    return null;
+  }
+  const path = [];
+  for (; ;) {
+    const [key] = Object.keys(table);
+    if (key === undefined) return path;
+    path.push(key);
+    table = table[key];
+  }
+}
+
+// Keep source lines intact while excluding table-like text inside TOML strings.
+// Parsing each actual header delegates quoted/dotted key semantics to smol-toml.
+export function* scanTomlLines(text) {
+  let multiline = null;
+  for (const line of text.replace(/\r\n/g, "\n").split("\n")) {
+    const inString = multiline !== null;
+    let quote = null;
+    for (let index = 0; index < line.length; index += 1) {
+      const char = line[index];
+      if (multiline) {
+        if (multiline === '"' && char === "\\") {
+          index += 1;
+        } else if (line.startsWith(multiline.repeat(3), index)) {
+          while (line[index + 1] === multiline) index += 1;
+          multiline = null;
+        }
+      } else if (quote) {
+        if (quote === '"' && char === "\\") index += 1;
+        else if (char === quote) quote = null;
+      } else if (char === "#") {
+        break;
+      } else if (char === '"' || char === "'") {
+        if (line.startsWith(char.repeat(3), index)) {
+          multiline = char;
+          index += 2;
+        } else {
+          quote = char;
+        }
+      }
+    }
+    yield { line, inString, sectionPath: inString ? null : sectionPath(line) };
+  }
+}

package/src/unified-cli.mjs

@@ -7,6 +7,7 @@ import {
 } from "./public-command-metadata.mjs";
 import { runRuntimeCli } from "./runtime/delegate.mjs";
 import { RUNTIME_ALIASES } from "./runtime/vendor/flywheel-cli-dist/commands/aliases.js";
+import { RETIRED_COMMAND_NAMES } from "./runtime/vendor/flywheel-cli-dist/commands/retired-command-names.js";
 import { runUpdateCommand } from "./update/command.mjs";
 import { runCommandWithDeferredUpdateWarning } from "./update/warning.mjs";
 
@@ -95,7 +96,7 @@ function setupHelpArgvFor(target, subcommand) {
   return null;
 }
 
-async function routeExplicitHelp(argv) {
+async function routeExplicitHelp(argv, { runSetup, runRuntime }) {
   const [, target, subcommand] = argv;
   if (target === "--aliases" || target === "-a") {
     renderAliasesHelp();
@@ -103,10 +104,9 @@ async function routeExplicitHelp(argv) {
   }
   const setupHelpArgv = setupHelpArgvFor(target, subcommand);
   if (setupHelpArgv) {
-    process.exitCode = await runSetupCli(
-      ["node", "flywheel", ...setupHelpArgv],
-      { exitOverride: true },
-    );
+    process.exitCode = await runSetup(["node", "flywheel", ...setupHelpArgv], {
+      exitOverride: true,
+    });
     return;
   }
   if (target === "update") {
@@ -117,7 +117,7 @@ async function routeExplicitHelp(argv) {
     // Defensive: `isCombinedHelpRequest` normally catches this path first,
     // but keep the fallback so any accidental routing still surfaces the
     // grouped help + extras instead of a blank runtime call.
-    const exitCode = await runRuntimeCli(["help", helpExtrasArg()]);
+    const exitCode = await runRuntime(["help", helpExtrasArg()]);
     process.exitCode = exitCode;
     return;
   }
@@ -126,7 +126,7 @@ async function routeExplicitHelp(argv) {
     Object.prototype.hasOwnProperty.call(RUNTIME_ALIASES, target)
       ? ["help", RUNTIME_ALIASES[target], ...argv.slice(2)]
       : argv;
-  const exitCode = await runRuntimeCli(resolvedArgv);
+  const exitCode = await runRuntime(resolvedArgv);
   process.exitCode = exitCode;
 }
 
@@ -141,10 +141,20 @@ async function runWithDeferredUpdateWarning(argv, runCommand) {
   }
 }
 
-export async function runUnifiedCli(argv = process.argv.slice(2)) {
+export async function runUnifiedCli(
+  argv = process.argv.slice(2),
+  dependencies = {},
+) {
   if (!Array.isArray(argv)) {
     throw new Error("runUnifiedCli expects an argv array.");
   }
+  const runSetup = dependencies.runSetupCli ?? runSetupCli;
+  const runtimeDependencies = dependencies.runtimeDependencies ?? {};
+  const runRuntime = (runtimeArgv) =>
+    (dependencies.runRuntimeCli ?? runRuntimeCli)(
+      runtimeArgv,
+      runtimeDependencies,
+    );
 
   if (isVersionRequest(argv)) {
     process.stdout.write(`${await loadPackageVersion()}\n`);
@@ -155,7 +165,7 @@ export async function runUnifiedCli(argv = process.argv.slice(2)) {
   if (argv.length === 1 && USAGE_REQUEST_TOKENS.has(argv[0])) {
     await runWithDeferredUpdateWarning(argv, async () => {
       const publicPackageVersion = await loadPackageVersion();
-      return await runRuntimeCli([
+      return await runRuntime([
         argv[0],
         usageExtrasArg(),
         usageVersionArg(publicPackageVersion),
@@ -186,8 +196,9 @@ export async function runUnifiedCli(argv = process.argv.slice(2)) {
       }
     }
     const passthrough = ["help", helpExtrasArg(), ...formatArgs];
-    await runWithDeferredUpdateWarning(argv, async () =>
-      await runRuntimeCli(passthrough),
+    await runWithDeferredUpdateWarning(
+      argv,
+      async () => await runRuntime(passthrough),
     );
     return;
   }
@@ -208,7 +219,7 @@ export async function runUnifiedCli(argv = process.argv.slice(2)) {
 
   if (command === "help") {
     await runWithDeferredUpdateWarning(argv, async () => {
-      await routeExplicitHelp(argv);
+      await routeExplicitHelp(argv, { runSetup, runRuntime });
       return process.exitCode ?? 0;
     });
     return;
@@ -220,16 +231,20 @@ export async function runUnifiedCli(argv = process.argv.slice(2)) {
     command === "completion"
   ) {
     await runWithDeferredUpdateWarning(argv, async () => {
-      return await runSetupCli(["node", "flywheel", ...argv], {
+      return await runSetup(["node", "flywheel", ...argv], {
         exitOverride: true,
       });
     });
     return;
   }
 
-  if (command.includes(":")) {
-    await runWithDeferredUpdateWarning(argv, async () =>
-      await runRuntimeCli(argv),
+  if (
+    command.includes(":") ||
+    Object.prototype.hasOwnProperty.call(RETIRED_COMMAND_NAMES, command)
+  ) {
+    await runWithDeferredUpdateWarning(
+      argv,
+      async () => await runRuntime(argv),
     );
     return;
   }

package/src/runtime/vendor/flywheel-cli-dist/auth/active-key-id.d.ts

@@ -1 +0,0 @@
-export declare function activeKeyIdFromToken(token: string | undefined): string | null;

package/src/runtime/vendor/flywheel-cli-dist/auth/baseurl.d.ts

@@ -1,35 +0,0 @@
-/**
- * Canonical equality for CLI baseUrls.
- *
- * Several CLI paths compare a "resolved" baseUrl (env override, profile
- * pointer, etc.) against a "stored" baseUrl (built-in profile constant,
- * `config.baseUrl`) to decide credential routing — both at write time
- * (`auth:login` choosing the per-profile bucket vs. the legacy flat
- * fields) and at read time (the runtime resolver deciding which stored
- * key, if any, applies to the resolved origin).
- *
- * Raw `===` makes those checks fragile under semantically equivalent URL
- * variants — most commonly a trailing slash, but also default-port and
- * scheme/host casing — and the failure mode is silent: tokens land in
- * the wrong slot or are dropped at runtime, and requests go out
- * unauthenticated against the same server. The HTTP client at
- * `src/http/client.ts` already strips trailing slashes from `baseUrl`
- * before issuing requests, so two variants that the routing layer
- * treated as different origins would still hit the same server — making
- * the mismatch impossible for the user to diagnose.
- *
- * The normalisation rules below match RFC 3986 §6.2.2 (Syntax-Based
- * Normalisation): scheme + host are case-insensitive, default ports are
- * dropped, and a trailing-slash-only path is treated as equivalent to
- * the bare origin. Path beyond the bare root remains case-sensitive
- * (RFC 3986 §6.2.2.3); we only strip trailing slashes there. Query and
- * fragment are not part of a CLI baseUrl in this codebase, so we do not
- * preserve them.
- */
-export declare function canonicalizeBaseUrl(raw: string | null | undefined): string | null;
-/**
- * Returns true iff both inputs canonicalise to the same baseUrl. Returns
- * false for any input the canonicaliser rejects (null/undefined/garbage),
- * because an unparseable URL has no provable identity to compare against.
- */
-export declare function baseUrlsEqual(a: string | null | undefined, b: string | null | undefined): boolean;

package/src/runtime/vendor/flywheel-cli-dist/auth/config.d.ts

@@ -1,34 +0,0 @@
-export interface ProfileKeyRecord {
-    apiKey?: string | null;
-}
-export interface AuthConfig {
-    baseUrl: string;
-    apiKey: string | null;
-    activeProfile?: string | null;
-    profileKeys?: Record<string, ProfileKeyRecord>;
-}
-/**
- * Delta shape accepted by `saveAuthConfig`. Every field is optional —
- * only the provided keys are merged into the on-disk config, so callers
- * writing per-profile state (e.g. `auth:login` under an active built-in
- * profile) can omit `baseUrl` / `apiKey` instead of passing `undefined`
- * through an `as unknown as string` cast that lies about the contract
- * to injected `saveConfig` implementations.
- */
-export type AuthConfigDelta = Partial<AuthConfig>;
-export declare const DEFAULT_BASE_URL = "http://localhost:8000";
-export declare function resolveConfigPath(): string;
-export declare function loadAuthConfig(filePath?: string): Promise<AuthConfig>;
-/**
- * Merge-write the on-disk config.
- *
- * FLY-416: previously `saveAuthConfig` serialised the `{ baseUrl, apiKey }`
- * AuthConfig shape verbatim, which wiped `activeProfile`, `profileKeys`, and
- * every other top-level key the user might have added. That made
- * `env:switch staging; auth:login` ephemeral: the login erased the pointer.
- *
- * The new behaviour reads the existing file, merges the provided delta onto
- * the parsed object (per-key overwrite for AuthConfig-owned fields), and
- * writes the merged result. Unknown keys are preserved untouched.
- */
-export declare function saveAuthConfig(filePath: string, delta: AuthConfigDelta): Promise<void>;

package/src/runtime/vendor/flywheel-cli-dist/auth/config.js

@@ -1,92 +0,0 @@
-import { mkdir, readFile, writeFile } from 'node:fs/promises';
-import os from 'node:os';
-import path from 'node:path';
-export const DEFAULT_BASE_URL = 'http://localhost:8000';
-export function resolveConfigPath() {
-    const fromEnv = process.env.FLYWHEEL_CLI_CONFIG_PATH?.trim();
-    if (fromEnv) {
-        return fromEnv;
-    }
-    return path.join(os.homedir(), '.config', 'flywheel-cli', 'config.json');
-}
-export async function loadAuthConfig(filePath = resolveConfigPath()) {
-    try {
-        const contents = await readFile(filePath, 'utf8');
-        const parsed = JSON.parse(contents);
-        const config = {
-            baseUrl: typeof parsed.baseUrl === 'string' && parsed.baseUrl.trim()
-                ? parsed.baseUrl
-                : DEFAULT_BASE_URL,
-            apiKey: typeof parsed.apiKey === 'string' && parsed.apiKey.trim() ? parsed.apiKey : null,
-        };
-        if (typeof parsed.activeProfile === 'string' && parsed.activeProfile.trim()) {
-            config.activeProfile = parsed.activeProfile.trim();
-        }
-        if (parsed.profileKeys && typeof parsed.profileKeys === 'object') {
-            const raw = parsed.profileKeys;
-            const normalized = {};
-            for (const [name, value] of Object.entries(raw)) {
-                if (value && typeof value === 'object') {
-                    const entry = value;
-                    if (typeof entry.apiKey === 'string' && entry.apiKey.trim()) {
-                        normalized[name] = { apiKey: entry.apiKey };
-                    }
-                }
-            }
-            if (Object.keys(normalized).length > 0) {
-                config.profileKeys = normalized;
-            }
-        }
-        return config;
-    }
-    catch {
-        return {
-            baseUrl: DEFAULT_BASE_URL,
-            apiKey: null,
-        };
-    }
-}
-async function readRawConfigObject(filePath) {
-    try {
-        const raw = await readFile(filePath, 'utf8');
-        const parsed = JSON.parse(raw);
-        return parsed && typeof parsed === 'object' ? parsed : {};
-    }
-    catch {
-        return {};
-    }
-}
-/**
- * Merge-write the on-disk config.
- *
- * FLY-416: previously `saveAuthConfig` serialised the `{ baseUrl, apiKey }`
- * AuthConfig shape verbatim, which wiped `activeProfile`, `profileKeys`, and
- * every other top-level key the user might have added. That made
- * `env:switch staging; auth:login` ephemeral: the login erased the pointer.
- *
- * The new behaviour reads the existing file, merges the provided delta onto
- * the parsed object (per-key overwrite for AuthConfig-owned fields), and
- * writes the merged result. Unknown keys are preserved untouched.
- */
-export async function saveAuthConfig(filePath, delta) {
-    await mkdir(path.dirname(filePath), { recursive: true });
-    const existing = await readRawConfigObject(filePath);
-    const merged = { ...existing };
-    // AuthConfig-owned fields overwrite whatever was there, but undefined
-    // fields leave the existing value alone so per-profile callers can pass
-    // the shape they want to mutate without specifying defaults.
-    if (delta.baseUrl !== undefined) {
-        merged.baseUrl = delta.baseUrl;
-    }
-    if (delta.apiKey !== undefined) {
-        merged.apiKey = delta.apiKey;
-    }
-    if (delta.activeProfile !== undefined) {
-        merged.activeProfile = delta.activeProfile;
-    }
-    if (delta.profileKeys !== undefined) {
-        merged.profileKeys = delta.profileKeys;
-    }
-    await writeFile(filePath, `${JSON.stringify(merged, null, 2)}\n`, 'utf8');
-}
-//# sourceMappingURL=config.js.map

package/src/runtime/vendor/flywheel-cli-dist/auth/config.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/auth/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC9D,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AA4B7B,MAAM,CAAC,MAAM,gBAAgB,GAAG,uBAAuB,CAAC;AAExD,MAAM,UAAU,iBAAiB;IAC/B,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,wBAAwB,EAAE,IAAI,EAAE,CAAC;IAC7D,IAAI,OAAO,EAAE,CAAC;QACZ,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,cAAc,EAAE,aAAa,CAAC,CAAC;AAC3E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,QAAQ,GAAG,iBAAiB,EAAE;IACjE,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAClD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAkD,CAAC;QACrF,MAAM,MAAM,GAAe;YACzB,OAAO,EACL,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE;gBACzD,CAAC,CAAC,MAAM,CAAC,OAAO;gBAChB,CAAC,CAAC,gBAAgB;YACtB,MAAM,EACJ,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI;SACnF,CAAC;QACF,IAAI,OAAO,MAAM,CAAC,aAAa,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa,CAAC,IAAI,EAAE,EAAE,CAAC;YAC5E,MAAM,CAAC,aAAa,GAAG,MAAM,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC;QACrD,CAAC;QACD,IAAI,MAAM,CAAC,WAAW,IAAI,OAAO,MAAM,CAAC,WAAW,KAAK,QAAQ,EAAE,CAAC;YACjE,MAAM,GAAG,GAAG,MAAM,CAAC,WAAsC,CAAC;YAC1D,MAAM,UAAU,GAAqC,EAAE,CAAC;YACxD,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;gBAChD,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;oBACvC,MAAM,KAAK,GAAG,KAA6B,CAAC;oBAC5C,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;wBAC5D,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;oBAC9C,CAAC;gBACH,CAAC;YACH,CAAC;YACD,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACvC,MAAM,CAAC,WAAW,GAAG,UAAU,CAAC;YAClC,CAAC;QACH,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;YACL,OAAO,EAAE,gBAAgB;YACzB,MAAM,EAAE,IAAI;SACb,CAAC;IACJ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,mBAAmB,CAAC,QAAgB;IACjD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC7C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,CAAC;QAC1C,OAAO,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAE,MAAkC,CAAC,CAAC,CAAC,EAAE,CAAC;IACzF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,QAAgB,EAChB,KAAsB;IAEtB,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACzD,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC,QAAQ,CAAC,CAAC;IACrD,MAAM,MAAM,GAA4B,EAAE,GAAG,QAAQ,EAAE,CAAC;IAExD,sEAAsE;IACtE,wEAAwE;IACxE,6DAA6D;IAC7D,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAChC,MAAM,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;IACjC,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC/B,MAAM,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;IAC/B,CAAC;IACD,IAAI,KAAK,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;QACtC,MAAM,CAAC,aAAa,GAAG,KAAK,CAAC,aAAa,CAAC;IAC7C,CAAC;IACD,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QACpC,MAAM,CAAC,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC;IACzC,CAAC;IAED,MAAM,SAAS,CAAC,QAAQ,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;AAC5E,CAAC"}

package/src/runtime/vendor/flywheel-cli-dist/auth/fingerprint.d.ts

@@ -1,5 +0,0 @@
-export interface Fingerprint {
-    short: string;
-    full: string;
-}
-export declare function fingerprint(token: string): Fingerprint;

package/src/runtime/vendor/flywheel-cli-dist/auth/keychain.d.ts

@@ -1,4 +0,0 @@
-export declare function getKey(service: string, account: string): Promise<string | null>;
-export declare function setKey(service: string, account: string, value: string): Promise<void>;
-export declare function deleteKey(service: string, account: string): Promise<boolean>;
-export declare function resetKeychainCache(): void;

package/src/runtime/vendor/flywheel-cli-dist/auth/keychain.js

@@ -1,31 +0,0 @@
-let cached;
-async function loadKeytar() {
-    if (cached !== undefined && cached !== null) {
-        return cached;
-    }
-    try {
-        const mod = (await import('keytar'));
-        cached = 'default' in mod ? mod.default : mod;
-        return cached;
-    }
-    catch (err) {
-        cached = null;
-        throw new Error(`keytar could not be loaded; native module likely failed to build on this platform. Original error: ${err.message}`, { cause: err });
-    }
-}
-export async function getKey(service, account) {
-    const mod = await loadKeytar();
-    return mod.getPassword(service, account);
-}
-export async function setKey(service, account, value) {
-    const mod = await loadKeytar();
-    await mod.setPassword(service, account, value);
-}
-export async function deleteKey(service, account) {
-    const mod = await loadKeytar();
-    return mod.deletePassword(service, account);
-}
-export function resetKeychainCache() {
-    cached = undefined;
-}
-//# sourceMappingURL=keychain.js.map

package/src/runtime/vendor/flywheel-cli-dist/auth/keychain.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"keychain.js","sourceRoot":"","sources":["../../src/auth/keychain.ts"],"names":[],"mappings":"AAMA,IAAI,MAAuC,CAAC;AAE5C,KAAK,UAAU,UAAU;IACvB,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QAC5C,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,CAAC,MAAM,MAAM,CAAC,QAAkB,CAAC,CAEhB,CAAC;QAC9B,MAAM,GAAG,SAAS,IAAI,GAAG,CAAC,CAAC,CAAE,GAAiC,CAAC,OAAO,CAAC,CAAC,CAAE,GAAoB,CAAC;QAC/F,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,GAAG,IAAI,CAAC;QACd,MAAM,IAAI,KAAK,CACb,sGAAuG,GAAa,CAAC,OAAO,EAAE,EAC9H,EAAE,KAAK,EAAE,GAAG,EAAE,CACf,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,OAAe,EAAE,OAAe;IAC3D,MAAM,GAAG,GAAG,MAAM,UAAU,EAAE,CAAC;IAC/B,OAAO,GAAG,CAAC,WAAW,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;AAC3C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,OAAe,EAAE,OAAe,EAAE,KAAa;IAC1E,MAAM,GAAG,GAAG,MAAM,UAAU,EAAE,CAAC;IAC/B,MAAM,GAAG,CAAC,WAAW,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;AACjD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,OAAe,EAAE,OAAe;IAC9D,MAAM,GAAG,GAAG,MAAM,UAAU,EAAE,CAAC;IAC/B,OAAO,GAAG,CAAC,cAAc,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;AAC9C,CAAC;AAED,MAAM,UAAU,kBAAkB;IAChC,MAAM,GAAG,SAAS,CAAC;AACrB,CAAC"}