@pleri/olam-cli 0.1.201 → 0.1.205

package/dist/commands/auth-status.js

@@ -1,250 +0,0 @@
-/**
- * Auth credential inspector — reads from auth-service (single source of truth).
- *
- * Falls back to local accounts.json only if needed for token redaction tests.
- * Auth-service is always authoritative; reading local files risks showing
- * phantom credentials that no longer exist in the live vault.
- *
- * Token security (T4): accessToken and refreshToken fields are NEVER read
- * into variables used in output. Only safe fields are touched.
- */
-import * as fs from 'node:fs';
-import * as os from 'node:os';
-import * as path from 'node:path';
-import pc from 'picocolors';
-import { effectiveState, pickCredential, nextCooldownReset } from '@olam/auth-logic';
-import { AuthClient } from '@olam/core/src/auth/index.js';
-import { printError } from '../output.js';
-import { EXIT_AUTH_NEEDS_ATTENTION } from '../exit-codes.js';
-// ----- file path (mirrors auth-service/src/store.ts) -------------------
-const DOCKER_DATA_DIR = '/auth-data';
-const LOCAL_DATA_DIR = path.join(os.homedir(), '.olam', 'auth-data');
-function resolveAccountsPath() {
-    if (fs.existsSync(DOCKER_DATA_DIR)) {
-        return path.join(DOCKER_DATA_DIR, 'accounts.json');
-    }
-    return path.join(LOCAL_DATA_DIR, 'accounts.json');
-}
-export function readAccountsFile(filePath) {
-    if (!fs.existsSync(filePath))
-        return [];
-    try {
-        const raw = fs.readFileSync(filePath, 'utf-8');
-        const parsed = JSON.parse(raw);
-        if (!Array.isArray(parsed))
-            return [];
-        // Project only safe fields; accessToken / refreshToken are never extracted.
-        return parsed.map((r) => ({
-            id: String(r['id'] ?? ''),
-            accountLabel: r['accountLabel'] != null ? String(r['accountLabel']) : undefined,
-            expiresAt: typeof r['expiresAt'] === 'number' ? r['expiresAt'] : undefined,
-            rateLimited: typeof r['rateLimited'] === 'boolean' ? r['rateLimited'] : undefined,
-            rateLimitResetsAt: typeof r['rateLimitResetsAt'] === 'string' ? r['rateLimitResetsAt'] : undefined,
-            weeklyResetsAt: typeof r['weeklyResetsAt'] === 'string' ? r['weeklyResetsAt'] : undefined,
-            lastUsed: typeof r['lastUsed'] === 'string' ? r['lastUsed'] : undefined,
-            state: isCredentialState(r['state']) ? r['state'] : undefined,
-            usage: r['usage'] != null && typeof r['usage'] === 'object'
-                ? {
-                    requestCount5h: typeof r['usage']['requestCount5h'] === 'number'
-                        ? r['usage']['requestCount5h']
-                        : 0,
-                    last429At: typeof r['usage']['last429At'] === 'string'
-                        ? r['usage']['last429At']
-                        : null,
-                }
-                : undefined,
-        }));
-    }
-    catch {
-        return [];
-    }
-}
-function isCredentialState(v) {
-    return (v === 'active' ||
-        v === 'cooldown' ||
-        v === 'expired' ||
-        v === 'disabled' ||
-        v === 'usage-capped');
-}
-// ----- formatting helpers -----------------------------------------------
-function localHHMM(isoStr) {
-    const d = new Date(isoStr);
-    return d.toLocaleTimeString(undefined, {
-        hour: '2-digit',
-        minute: '2-digit',
-        hour12: false,
-    });
-}
-function daysAgoStr(expiresAt, now) {
-    const diffDays = Math.floor((now - expiresAt) / (1000 * 60 * 60 * 24));
-    if (diffDays <= 0)
-        return 'expired today';
-    return `expired ${diffDays} day${diffDays === 1 ? '' : 's'} ago`;
-}
-/**
- * Render a reset timestamp's offset in a human-friendly unit. Used by the
- * reason column for weekly-limit and billing-cap rows — minutes are too
- * fine-grained for week-out resets, so we step up to hours then days.
- */
-function untilStr(iso, now) {
-    const ms = new Date(iso).getTime() - now;
-    if (!Number.isFinite(ms) || ms <= 0)
-        return 'shortly';
-    const mins = Math.floor(ms / 60_000);
-    if (mins < 60)
-        return `${mins}m`;
-    const hours = Math.floor(mins / 60);
-    if (hours < 24)
-        return `${hours}h`;
-    const days = Math.floor(hours / 24);
-    return `${days}d`;
-}
-function trunc(s, maxLen) {
-    return s.length > maxLen ? s.slice(0, maxLen) : s;
-}
-// ----- table builder -----------------------------------------------------
-const STATE_PRIORITY = {
-    active: 0,
-    cooldown: 1,
-    'usage-capped': 2,
-    disabled: 3,
-    expired: 4,
-};
-export function formatAuthStatus(accounts, now = Date.now()) {
-    const picked = pickCredential(accounts, now);
-    const rows = accounts.map((account) => {
-        const state = effectiveState(account, now);
-        const isPicked = picked != null && account.id === picked.id;
-        const req5h = account.usage?.requestCount5h ?? 0;
-        const last429 = account.usage?.last429At ? localHHMM(account.usage.last429At) : 'never';
-        let reason;
-        if (isPicked) {
-            reason = '← selected';
-        }
-        else if (state === 'active') {
-            reason = `req5h=${req5h} (higher than candidate)`;
-        }
-        else if (state === 'cooldown') {
-            const resetTime = account.rateLimitResetsAt ? localHHMM(account.rateLimitResetsAt) : '?';
-            reason = `cooldown until ${resetTime}`;
-        }
-        else if (state === 'usage-capped') {
-            // Weekly-window 429 sets `weeklyResetsAt` distinctly from the 30-day
-            // billing-cycle cap (which uses `rateLimitResetsAt`). Surface both so
-            // operators can act differently: weekly resolves on its own in <=8d;
-            // billing-cap typically needs a plan change or an account-tier lift.
-            if (account.weeklyResetsAt && new Date(account.weeklyResetsAt).getTime() > now) {
-                reason = `weekly limit · resets in ${untilStr(account.weeklyResetsAt, now)}`;
-            }
-            else if (account.rateLimitResetsAt) {
-                reason = `usage cap · resets in ${untilStr(account.rateLimitResetsAt, now)}`;
-            }
-            else {
-                reason = 'usage-capped';
-            }
-        }
-        else if (state === 'expired') {
-            reason = daysAgoStr(account.expiresAt ?? 0, now);
-        }
-        else {
-            reason = 'disabled';
-        }
-        return { id: account.id, label: account.accountLabel ?? account.id, state, reason, req5h, last429, isPicked };
-    });
-    rows.sort((a, b) => {
-        if (a.isPicked !== b.isPicked)
-            return a.isPicked ? -1 : 1;
-        return STATE_PRIORITY[a.state] - STATE_PRIORITY[b.state];
-    });
-    const COL = { id: 17, label: 17, state: 11, reason: 28, req5h: 7 };
-    const lines = [];
-    const hdr = 'id'.padEnd(COL.id) +
-        'label'.padEnd(COL.label) +
-        'state'.padEnd(COL.state) +
-        'reason'.padEnd(COL.reason) +
-        'req5h'.padEnd(COL.req5h) +
-        'last429';
-    lines.push(pc.dim(hdr));
-    lines.push(pc.dim('-'.repeat(hdr.length)));
-    for (const row of rows) {
-        const id = trunc(row.id, 16).padEnd(COL.id);
-        const label = trunc(row.label, 16).padEnd(COL.label);
-        const stateRaw = row.state.padEnd(COL.state);
-        const stateColored = row.state === 'active'
-            ? pc.green(stateRaw)
-            : row.state === 'cooldown'
-                ? pc.yellow(stateRaw)
-                : row.state === 'usage-capped'
-                    ? pc.yellow(stateRaw)
-                    : row.state === 'expired'
-                        ? pc.red(stateRaw)
-                        : pc.dim(stateRaw);
-        const reason = row.reason.padEnd(COL.reason);
-        const req5h = String(row.req5h).padEnd(COL.req5h);
-        if (row.isPicked) {
-            lines.push(pc.bold(id) + pc.bold(label) + stateColored + pc.green(reason) + pc.dim(req5h) + pc.dim(row.last429));
-        }
-        else {
-            lines.push(id + label + stateColored + reason + pc.dim(req5h) + pc.dim(row.last429));
-        }
-    }
-    if (picked == null) {
-        const resetIso = nextCooldownReset(accounts, now);
-        lines.push('');
-        lines.push(resetIso
-            ? pc.yellow(`Next reset: ${localHHMM(resetIso)}`)
-            : pc.dim('No reset scheduled'));
-        return { output: lines.join('\n'), exitCode: EXIT_AUTH_NEEDS_ATTENTION };
-    }
-    return { output: lines.join('\n'), exitCode: 0 };
-}
-// ----- CLI entry point ---------------------------------------------------
-/** Projects auth-service account summary to safe local format for formatting. */
-function toSafeAccount(a) {
-    return {
-        id: a.id,
-        accountLabel: a.accountLabel,
-        // expiresAt not exposed in summary — state is pre-computed server-side
-        rateLimited: a.rateLimited,
-        rateLimitResetsAt: a.rateLimitResetsAt,
-        weeklyResetsAt: a.weeklyResetsAt,
-        lastUsed: a.lastUsed,
-        state: a.state,
-        usage: a.usage
-            ? { requestCount5h: a.usage.requestCount5h, last429At: a.usage.last429At }
-            : undefined,
-    };
-}
-/**
- * Run `olam auth status`.
- *
- * @param getStatus - Injectable status fetcher for tests; defaults to AuthClient.status().
- */
-export async function runAuthStatus(getStatus) {
-    const fetchStatus = getStatus ?? (() => new AuthClient().status());
-    let status;
-    try {
-        status = await fetchStatus();
-    }
-    catch {
-        printError('Failed to contact auth service. Run `olam services up` first.');
-        process.exitCode = 1;
-        return;
-    }
-    if (!status.reachable) {
-        printError('Auth container is not reachable. Run `olam services up` first.');
-        process.exitCode = 1;
-        return;
-    }
-    if (status.accounts.length === 0) {
-        console.log(pc.dim('No credentials found. Run: olam auth login'));
-        return;
-    }
-    const accounts = status.accounts.map(toSafeAccount);
-    const result = formatAuthStatus(accounts);
-    console.log(result.output);
-    if (result.exitCode !== 0) {
-        process.exitCode = result.exitCode;
-    }
-}
-//# sourceMappingURL=auth-status.js.map

package/dist/commands/auth-status.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"auth-status.js","sourceRoot":"","sources":["../../src/commands/auth-status.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,MAAM,YAAY,CAAC;AAC5B,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,iBAAiB,EAAwB,MAAM,kBAAkB,CAAC;AAC3G,OAAO,EAAE,UAAU,EAAE,MAAM,8BAA8B,CAAC;AAC1D,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,yBAAyB,EAAE,MAAM,kBAAkB,CAAC;AAqB7D,0EAA0E;AAE1E,MAAM,eAAe,GAAG,YAAY,CAAC;AACrC,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;AAErE,SAAS,mBAAmB;IAC1B,IAAI,EAAE,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;QACnC,OAAO,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,eAAe,CAAC,CAAC;IACrD,CAAC;IACD,OAAO,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,eAAe,CAAC,CAAC;AACpD,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,QAAgB;IAC/C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,EAAE,CAAC;IACxC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC/C,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,OAAO,EAAE,CAAC;QACtC,4EAA4E;QAC5E,OAAQ,MAAoC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACvD,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YACzB,YAAY,EAAE,CAAC,CAAC,cAAc,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS;YAC/E,SAAS,EAAE,OAAO,CAAC,CAAC,WAAW,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS;YAC1E,WAAW,EAAE,OAAO,CAAC,CAAC,aAAa,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,SAAS;YACjF,iBAAiB,EACf,OAAO,CAAC,CAAC,mBAAmB,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,SAAS;YACjF,cAAc,EACZ,OAAO,CAAC,CAAC,gBAAgB,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,SAAS;YAC3E,QAAQ,EAAE,OAAO,CAAC,CAAC,UAAU,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS;YACvE,KAAK,EAAE,iBAAiB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS;YAC7D,KAAK,EACH,CAAC,CAAC,OAAO,CAAC,IAAI,IAAI,IAAI,OAAO,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ;gBAClD,CAAC,CAAC;oBACE,cAAc,EACZ,OAAQ,CAAC,CAAC,OAAO,CAA6B,CAAC,gBAAgB,CAAC,KAAK,QAAQ;wBAC3E,CAAC,CAAG,CAAC,CAAC,OAAO,CAA6B,CAAC,gBAAgB,CAAY;wBACvE,CAAC,CAAC,CAAC;oBACP,SAAS,EACP,OAAQ,CAAC,CAAC,OAAO,CAA6B,CAAC,WAAW,CAAC,KAAK,QAAQ;wBACtE,CAAC,CAAG,CAAC,CAAC,OAAO,CAA6B,CAAC,WAAW,CAAY;wBAClE,CAAC,CAAC,IAAI;iBACX;gBACH,CAAC,CAAC,SAAS;SAChB,CAAC,CAAC,CAAC;IACN,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,CAAU;IACnC,OAAO,CACL,CAAC,KAAK,QAAQ;QACd,CAAC,KAAK,UAAU;QAChB,CAAC,KAAK,SAAS;QACf,CAAC,KAAK,UAAU;QAChB,CAAC,KAAK,cAAc,CACrB,CAAC;AACJ,CAAC;AAED,2EAA2E;AAE3E,SAAS,SAAS,CAAC,MAAc;IAC/B,MAAM,CAAC,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC;IAC3B,OAAO,CAAC,CAAC,kBAAkB,CAAC,SAAS,EAAE;QACrC,IAAI,EAAE,SAAS;QACf,MAAM,EAAE,SAAS;QACjB,MAAM,EAAE,KAAK;KACd,CAAC,CAAC;AACL,CAAC;AAED,SAAS,UAAU,CAAC,SAAiB,EAAE,GAAW;IAChD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,GAAG,SAAS,CAAC,GAAG,CAAC,IAAI,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;IACvE,IAAI,QAAQ,IAAI,CAAC;QAAE,OAAO,eAAe,CAAC;IAC1C,OAAO,WAAW,QAAQ,OAAO,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC;AACnE,CAAC;AAED;;;;GAIG;AACH,SAAS,QAAQ,CAAC,GAAW,EAAE,GAAW;IACxC,MAAM,EAAE,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,GAAG,GAAG,CAAC;IACzC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IACtD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,MAAM,CAAC,CAAC;IACrC,IAAI,IAAI,GAAG,EAAE;QAAE,OAAO,GAAG,IAAI,GAAG,CAAC;IACjC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC;IACpC,IAAI,KAAK,GAAG,EAAE;QAAE,OAAO,GAAG,KAAK,GAAG,CAAC;IACnC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,EAAE,CAAC,CAAC;IACpC,OAAO,GAAG,IAAI,GAAG,CAAC;AACpB,CAAC;AAED,SAAS,KAAK,CAAC,CAAS,EAAE,MAAc;IACtC,OAAO,CAAC,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACpD,CAAC;AAED,4EAA4E;AAE5E,MAAM,cAAc,GAAoC;IACtD,MAAM,EAAE,CAAC;IACT,QAAQ,EAAE,CAAC;IACX,cAAc,EAAE,CAAC;IACjB,QAAQ,EAAE,CAAC;IACX,OAAO,EAAE,CAAC;CACX,CAAC;AAuBF,MAAM,UAAU,gBAAgB,CAC9B,QAAuB,EACvB,MAAc,IAAI,CAAC,GAAG,EAAE;IAExB,MAAM,MAAM,GAAG,cAAc,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IAE7C,MAAM,IAAI,GAAe,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE;QAChD,MAAM,KAAK,GAAG,cAAc,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAC3C,MAAM,QAAQ,GAAG,MAAM,IAAI,IAAI,IAAI,OAAO,CAAC,EAAE,KAAK,MAAM,CAAC,EAAE,CAAC;QAC5D,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,EAAE,cAAc,IAAI,CAAC,CAAC;QACjD,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;QAExF,IAAI,MAAc,CAAC;QACnB,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,GAAG,YAAY,CAAC;QACxB,CAAC;aAAM,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,MAAM,GAAG,SAAS,KAAK,0BAA0B,CAAC;QACpD,CAAC;aAAM,IAAI,KAAK,KAAK,UAAU,EAAE,CAAC;YAChC,MAAM,SAAS,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;YACzF,MAAM,GAAG,kBAAkB,SAAS,EAAE,CAAC;QACzC,CAAC;aAAM,IAAI,KAAK,KAAK,cAAc,EAAE,CAAC;YACpC,qEAAqE;YACrE,sEAAsE;YACtE,qEAAqE;YACrE,qEAAqE;YACrE,IAAI,OAAO,CAAC,cAAc,IAAI,IAAI,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,OAAO,EAAE,GAAG,GAAG,EAAE,CAAC;gBAC/E,MAAM,GAAG,4BAA4B,QAAQ,CAAC,OAAO,CAAC,cAAc,EAAE,GAAG,CAAC,EAAE,CAAC;YAC/E,CAAC;iBAAM,IAAI,OAAO,CAAC,iBAAiB,EAAE,CAAC;gBACrC,MAAM,GAAG,yBAAyB,QAAQ,CAAC,OAAO,CAAC,iBAAiB,EAAE,GAAG,CAAC,EAAE,CAAC;YAC/E,CAAC;iBAAM,CAAC;gBACN,MAAM,GAAG,cAAc,CAAC;YAC1B,CAAC;QACH,CAAC;aAAM,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YAC/B,MAAM,GAAG,UAAU,CAAC,OAAO,CAAC,SAAS,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC;QACnD,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,UAAU,CAAC;QACtB,CAAC;QAED,OAAO,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,YAAY,IAAI,OAAO,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;IAChH,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACjB,IAAI,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,QAAQ;YAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1D,OAAO,cAAc,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,cAAc,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;IAEH,MAAM,GAAG,GAAG,EAAE,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;IAEnE,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,MAAM,GAAG,GACP,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;QACnB,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC;QACzB,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC;QACzB,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC;QAC3B,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC;QACzB,SAAS,CAAC;IACZ,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IACxB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAE3C,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,EAAE,GAAG,KAAK,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC5C,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACrD,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC7C,MAAM,YAAY,GAChB,GAAG,CAAC,KAAK,KAAK,QAAQ;YACpB,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC;YACpB,CAAC,CAAC,GAAG,CAAC,KAAK,KAAK,UAAU;gBACxB,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC;gBACrB,CAAC,CAAC,GAAG,CAAC,KAAK,KAAK,cAAc;oBAC5B,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC;oBACrB,CAAC,CAAC,GAAG,CAAC,KAAK,KAAK,SAAS;wBACvB,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC;wBAClB,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC7B,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC7C,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAElD,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;YACjB,KAAK,CAAC,IAAI,CACR,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,YAAY,GAAG,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CACrG,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,KAAK,GAAG,YAAY,GAAG,MAAM,GAAG,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;QACvF,CAAC;IACH,CAAC;IAED,IAAI,MAAM,IAAI,IAAI,EAAE,CAAC;QACnB,MAAM,QAAQ,GAAG,iBAAiB,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QAClD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CACR,QAAQ;YACN,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,eAAe,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC;YACjD,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,oBAAoB,CAAC,CACjC,CAAC;QACF,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,yBAAyB,EAAE,CAAC;IAC3E,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;AACnD,CAAC;AAED,4EAA4E;AAE5E,iFAAiF;AACjF,SAAS,aAAa,CAAC,CAAqB;IAC1C,OAAO;QACL,EAAE,EAAE,CAAC,CAAC,EAAE;QACR,YAAY,EAAE,CAAC,CAAC,YAAY;QAC5B,uEAAuE;QACvE,WAAW,EAAE,CAAC,CAAC,WAAW;QAC1B,iBAAiB,EAAE,CAAC,CAAC,iBAAiB;QACtC,cAAc,EAAE,CAAC,CAAC,cAAc;QAChC,QAAQ,EAAE,CAAC,CAAC,QAAQ;QACpB,KAAK,EAAE,CAAC,CAAC,KAAK;QACd,KAAK,EAAE,CAAC,CAAC,KAAK;YACZ,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,KAAK,CAAC,cAAc,EAAE,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,SAAS,EAAE;YAC1E,CAAC,CAAC,SAAS;KACd,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,SAA0F;IAE1F,MAAM,WAAW,GAAG,SAAS,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,UAAU,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC;IACnE,IAAI,MAAuE,CAAC;IAE5E,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,WAAW,EAAE,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,UAAU,CAAC,+DAA+D,CAAC,CAAC;QAC5E,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IAED,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;QACtB,UAAU,CAAC,gEAAgE,CAAC,CAAC;QAC7E,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IAED,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,4CAA4C,CAAC,CAAC,CAAC;QAClE,OAAO;IACT,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IACpD,MAAM,MAAM,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAC1C,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAE3B,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;IACrC,CAAC;AACH,CAAC"}

package/dist/commands/auth-upgrade.d.ts

@@ -1,88 +0,0 @@
-/**
- * `olam auth upgrade` — rebuild the olam-auth image and force-recreate the container.
- *
- * Steps:
- *   bash build-auth.sh (rebuilds olam-auth:local with latest source + git SHA)
- *   docker stop olam-auth + docker rm olam-auth
- *   olam auth up logic (docker run with correct env vars via AuthContainerController)
- *   wait for /health
- *   smoke test: POST /credentials/add provider=codex must NOT return a Claude URL
- */
-import type { Command } from 'commander';
-import { type DockerImpl, type ImageDigests } from './bootstrap.js';
-export interface AuthUpgradeOpts {
-    readonly yes: boolean;
-    readonly skipRecreate: boolean;
-    /**
-     * Phase C — C6: opt into the legacy source-build path for auth-service.
-     * Only works when isDevMode() is true. Default false → pull
-     * `olam-auth@sha256:<digest>` from ghcr.io and recreate.
-     */
-    readonly fromSource: boolean;
-}
-/** Normalise raw Commander option object into typed opts. */
-export declare function parseAuthUpgradeOpts(raw: {
-    yes?: boolean;
-    skipRecreate?: boolean;
-    fromSource?: boolean;
-}): AuthUpgradeOpts;
-/**
- * Check cwd looks like the olam repo root for auth-service.
- * Verifies packages/auth-service/Dockerfile exists.
- */
-export declare function validateAuthRepoRoot(cwd: string): {
-    ok: true;
-} | {
-    ok: false;
-    error: string;
-};
-/** Block until auth service /health responds OK or timeout expires. */
-export declare function waitForAuthHealth(timeoutMs?: number): Promise<boolean>;
-/**
- * Smoke test: POST /credentials/add with provider=codex.
- *
- * Passes when the response does NOT contain a claude.com/claude.ai loginUrl.
- * A stale (pre-codex) image falls through to the Claude PKCE branch and
- * returns a claude.com URL — this gate catches that.
- */
-export declare function smokeTestCodexProvider(authSecret: string | null): Promise<{
-    ok: true;
-} | {
-    ok: false;
-    error: string;
-}>;
-/**
- * Phase C — C6: default `olam auth upgrade` flow for installed CLIs.
- *
- * Pulls `olam-auth@sha256:<digest>` from ghcr.io (via bootstrap.ts's
- * retry-throttle-coalesce helper), runs the protocol-version handshake,
- * re-tags to `olam-auth:local` (the canonical tag the
- * AuthContainerController expects), then docker stop + docker rm +
- * controller.start() — same recreate path as the legacy --from-source
- * flow uses post-build.
- */
-export interface AuthUpgradePullDeps {
-    readonly docker?: DockerImpl;
-    readonly digests?: ImageDigests;
-    readonly registry?: string;
-    /**
-     * Recreate driver. Default: stop + rm + AuthContainerController.start
-     * + waitForAuthHealth. Tests stub to avoid real docker calls.
-     */
-    readonly recreateAuth?: () => Promise<{
-        ok: boolean;
-        error?: string;
-    }>;
-    /** Test-only: skip the docker-tag step (e.g. when injecting). */
-    readonly tagImpl?: (from: string, to: string) => {
-        ok: boolean;
-        error?: string;
-    };
-}
-export interface AuthUpgradePullResult {
-    readonly exitCode: number;
-    readonly summary: string;
-}
-export declare function runAuthUpgradePullByDigest(deps?: AuthUpgradePullDeps): Promise<AuthUpgradePullResult>;
-export declare function registerAuthUpgrade(auth: Command): void;
-//# sourceMappingURL=auth-upgrade.d.ts.map

package/dist/commands/auth-upgrade.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"auth-upgrade.d.ts","sourceRoot":"","sources":["../../src/commands/auth-upgrade.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AASzC,OAAO,EAIL,KAAK,UAAU,EACf,KAAK,YAAY,EAClB,MAAM,gBAAgB,CAAC;AAexB,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC;IACtB,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;IAC/B;;;;OAIG;IACH,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;CAC9B;AAED,6DAA6D;AAC7D,wBAAgB,oBAAoB,CAAC,GAAG,EAAE;IACxC,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB,GAAG,eAAe,CAMlB;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,GAAG;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAW7F;AAED,uEAAuE;AACvE,wBAAsB,iBAAiB,CAAC,SAAS,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,CAc5E;AAED;;;;;;GAMG;AACH,wBAAsB,sBAAsB,CAC1C,UAAU,EAAE,MAAM,GAAG,IAAI,GACxB,OAAO,CAAC;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CAuCtD;AA4DD;;;;;;;;;GASG;AAEH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,MAAM,CAAC,EAAE,UAAU,CAAC;IAC7B,QAAQ,CAAC,OAAO,CAAC,EAAE,YAAY,CAAC;IAChC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B;;;OAGG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,OAAO,CAAC;QAAE,EAAE,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACvE,iEAAiE;IACjE,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,KAAK;QAAE,EAAE,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CAClF;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,wBAAsB,0BAA0B,CAC9C,IAAI,GAAE,mBAAwB,GAC7B,OAAO,CAAC,qBAAqB,CAAC,CAqFhC;AAkMD,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,OAAO,GAAG,IAAI,CAqCvD"}