@pleri/olam-cli 0.1.7

package/dist/commands/auth-upgrade.js

@@ -0,0 +1,277 @@
+/**
+ * `olam auth upgrade` — rebuild the olam-auth image and force-recreate the container.
+ *
+ * Steps:
+ *   bash build-auth.sh (rebuilds olam-auth:local with latest source + git SHA)
+ *   docker stop olam-auth + docker rm olam-auth
+ *   olam auth up logic (docker run with correct env vars via AuthContainerController)
+ *   wait for /health
+ *   smoke test: POST /credentials/add provider=codex must NOT return a Claude URL
+ */
+import * as fs from 'node:fs';
+import * as path from 'node:path';
+import { spawnSync } from 'node:child_process';
+import pc from 'picocolors';
+import { printError, printSuccess, printInfo, printWarning } from '../output.js';
+import { readAuthSecret } from './host-cp.js';
+import { AuthContainerController } from '@olam/core/src/auth/index.js';
+const AUTH_PORT = 9999;
+const AUTH_HEALTH_URL = `http://127.0.0.1:${AUTH_PORT}/health`;
+const AUTH_ADD_URL = `http://127.0.0.1:${AUTH_PORT}/credentials/add`;
+/** Normalise raw Commander option object into typed opts. */
+export function parseAuthUpgradeOpts(raw) {
+    return {
+        yes: raw.yes === true,
+        skipRecreate: raw.skipRecreate === true,
+    };
+}
+/**
+ * Check cwd looks like the olam repo root for auth-service.
+ * Verifies packages/auth-service/Dockerfile exists.
+ */
+export function validateAuthRepoRoot(cwd) {
+    const marker = path.join(cwd, 'packages/auth-service/Dockerfile');
+    if (!fs.existsSync(marker)) {
+        return {
+            ok: false,
+            error: `Not an olam repo root (expected ${marker}).\n` +
+                'Run `olam auth upgrade` from the root of your olam checkout.',
+        };
+    }
+    return { ok: true };
+}
+/** Block until auth service /health responds OK or timeout expires. */
+export async function waitForAuthHealth(timeoutMs = 10_000) {
+    const deadline = Date.now() + timeoutMs;
+    while (Date.now() < deadline) {
+        try {
+            const res = await fetch(AUTH_HEALTH_URL, {
+                signal: AbortSignal.timeout(2000),
+            });
+            if (res.ok)
+                return true;
+        }
+        catch {
+            // not up yet
+        }
+        await new Promise((r) => setTimeout(r, 500));
+    }
+    return false;
+}
+/**
+ * Smoke test: POST /credentials/add with provider=codex.
+ *
+ * Passes when the response does NOT contain a claude.com/claude.ai loginUrl.
+ * A stale (pre-codex) image falls through to the Claude PKCE branch and
+ * returns a claude.com URL — this gate catches that.
+ */
+export async function smokeTestCodexProvider(authSecret) {
+    const headers = { 'Content-Type': 'application/json' };
+    if (authSecret)
+        headers['X-Olam-Secret'] = authSecret;
+    let res;
+    try {
+        res = await fetch(AUTH_ADD_URL, {
+            method: 'POST',
+            headers,
+            body: JSON.stringify({ provider: 'codex', label: '__smoke-test__' }),
+            signal: AbortSignal.timeout(5000),
+        });
+    }
+    catch (err) {
+        const msg = err instanceof Error ? err.message : 'fetch failed';
+        return { ok: false, error: `Smoke test request failed: ${msg}` };
+    }
+    let body;
+    try {
+        body = await res.json();
+    }
+    catch {
+        return { ok: false, error: `Smoke test: non-JSON response (status ${res.status})` };
+    }
+    const b = body;
+    // A stale image returns a loginUrl pointing to claude.com.
+    const loginUrl = typeof b['loginUrl'] === 'string' ? b['loginUrl'] : '';
+    if (/claude\.com|claude\.ai/.test(loginUrl)) {
+        return {
+            ok: false,
+            error: `Smoke test FAILED: provider=codex returned a Claude OAuth URL (${loginUrl}). ` +
+                'The deployed image is stale — Codex branch is missing from /app/dist.',
+        };
+    }
+    // Could be a 502 (OpenAI unreachable in CI) — that's not a stale-image failure.
+    // We only fail the smoke test on a Claude URL.
+    return { ok: true };
+}
+function runStep(label, cmd, args, opts = {}) {
+    const start = Date.now();
+    process.stdout.write(`  ${pc.dim(label.padEnd(34))}`);
+    const result = spawnSync(cmd, [...args], {
+        encoding: 'utf-8',
+        stdio: ['ignore', 'pipe', 'pipe'],
+        cwd: opts.cwd ?? process.cwd(),
+        env: { ...process.env, ...(opts.env ?? {}) },
+    });
+    const durationMs = Date.now() - start;
+    const ok = result.status === 0 && result.error === undefined;
+    const dur = `${(durationMs / 1000).toFixed(1)}s`;
+    process.stdout.write(`${ok ? pc.green('✓') : pc.red('✗')} ${dur}\n`);
+    return {
+        ok,
+        stdout: result.stdout ?? '',
+        stderr: result.stderr ?? '',
+        durationMs,
+    };
+}
+async function confirm(message) {
+    if (!process.stdin.isTTY)
+        return true;
+    const { createInterface } = await import('node:readline');
+    const rl = createInterface({ input: process.stdin, output: process.stdout });
+    return new Promise((resolve) => {
+        rl.question(`${message} [y/N] `, (answer) => {
+            rl.close();
+            resolve(answer.toLowerCase() === 'y' || answer.toLowerCase() === 'yes');
+        });
+    });
+}
+function printTimings(timings) {
+    const total = timings.reduce((s, t) => s + t.durationMs, 0);
+    process.stdout.write('\n');
+    for (const t of timings) {
+        printInfo(t.label, `${(t.durationMs / 1000).toFixed(1)}s`);
+    }
+    printInfo('total', `${(total / 1000).toFixed(1)}s`);
+}
+// ── Main handler ──────────────────────────────────────────────────
+async function handleAuthUpgrade(opts) {
+    const cwd = process.cwd();
+    // 1. Verify repo root.
+    const rootCheck = validateAuthRepoRoot(cwd);
+    if (!rootCheck.ok) {
+        printError(rootCheck.error);
+        process.exitCode = 1;
+        return;
+    }
+    // 2. Print plan.
+    printInfo('olam auth upgrade', '');
+    const steps = [
+        'bash build-auth.sh (docker image)',
+        'stop + remove olam-auth container',
+        'docker run olam-auth:local (force-recreate)',
+        'wait for /health',
+        'smoke test: codex provider → OpenAI URL',
+    ];
+    if (opts.skipRecreate)
+        steps.splice(1, 3, '[skipping container recreate]');
+    printInfo('Steps', steps.join(', '));
+    process.stdout.write('\n');
+    // 3. Confirm unless --yes.
+    if (!opts.yes) {
+        const proceed = await confirm('Proceed?');
+        if (!proceed) {
+            printInfo('Aborted', 'no changes made');
+            return;
+        }
+    }
+    const timings = [];
+    // Step a: build the auth image.
+    const buildScript = path.join(cwd, 'packages/adapters/src/docker/build-auth.sh');
+    const imageResult = runStep('bash build-auth.sh', 'bash', [buildScript], { cwd });
+    timings.push({ label: 'docker image build', durationMs: imageResult.durationMs });
+    if (!imageResult.ok) {
+        printError(`Docker image build failed:\n${imageResult.stderr}`);
+        process.exitCode = 1;
+        return;
+    }
+    if (opts.skipRecreate) {
+        process.stdout.write('\n');
+        printSuccess('Image rebuilt (--skip-recreate: container not touched)');
+        printTimings(timings);
+        return;
+    }
+    // Step b: stop the running container (ignore error if not running).
+    const stopStart = Date.now();
+    process.stdout.write(`  ${pc.dim('docker stop olam-auth'.padEnd(34))}`);
+    spawnSync('docker', ['stop', 'olam-auth'], {
+        encoding: 'utf-8',
+        stdio: ['ignore', 'pipe', 'pipe'],
+    });
+    const stopDurationMs = Date.now() - stopStart;
+    process.stdout.write(`${pc.green('✓')} ${(stopDurationMs / 1000).toFixed(1)}s\n`);
+    timings.push({ label: 'container stop', durationMs: stopDurationMs });
+    // Step c: remove the container so force-recreate with new image is clean.
+    const rmStart = Date.now();
+    process.stdout.write(`  ${pc.dim('docker rm olam-auth'.padEnd(34))}`);
+    spawnSync('docker', ['rm', 'olam-auth'], {
+        encoding: 'utf-8',
+        stdio: ['ignore', 'pipe', 'pipe'],
+    });
+    const rmDurationMs = Date.now() - rmStart;
+    process.stdout.write(`${pc.green('✓')} ${(rmDurationMs / 1000).toFixed(1)}s\n`);
+    timings.push({ label: 'container remove', durationMs: rmDurationMs });
+    // Step d: start the new container via AuthContainerController (handles secret injection).
+    const startStart = Date.now();
+    process.stdout.write(`  ${pc.dim('docker run olam-auth:local'.padEnd(34))}`);
+    try {
+        const controller = new AuthContainerController();
+        controller.start();
+        const startDurationMs = Date.now() - startStart;
+        process.stdout.write(`${pc.green('✓')} ${(startDurationMs / 1000).toFixed(1)}s\n`);
+        timings.push({ label: 'container start', durationMs: startDurationMs });
+    }
+    catch (err) {
+        const startDurationMs = Date.now() - startStart;
+        process.stdout.write(`${pc.red('✗')} ${(startDurationMs / 1000).toFixed(1)}s\n`);
+        timings.push({ label: 'container start', durationMs: startDurationMs });
+        printError(`Failed to start auth container: ${err instanceof Error ? err.message : String(err)}`);
+        process.exitCode = 1;
+        return;
+    }
+    // Step e: wait for /health.
+    process.stdout.write(`  ${pc.dim('waiting for /health'.padEnd(34))}`);
+    const healthStart = Date.now();
+    const healthy = await waitForAuthHealth(10_000);
+    const healthDurationMs = Date.now() - healthStart;
+    const healthDur = `${(healthDurationMs / 1000).toFixed(1)}s`;
+    process.stdout.write(`${healthy ? pc.green('✓') : pc.yellow('?')} ${healthDur}\n`);
+    timings.push({ label: '/health', durationMs: healthDurationMs });
+    if (!healthy) {
+        printWarning('Auth service started but /health did not respond within 10s. Check: docker logs olam-auth');
+        process.exitCode = 1;
+        printTimings(timings);
+        return;
+    }
+    // Step f: smoke test — codex provider must not return a Claude URL.
+    process.stdout.write(`  ${pc.dim('smoke test: codex provider'.padEnd(34))}`);
+    const smokeStart = Date.now();
+    const authSecret = readAuthSecret();
+    const smoke = await smokeTestCodexProvider(authSecret);
+    const smokeDurationMs = Date.now() - smokeStart;
+    const smokeDur = `${(smokeDurationMs / 1000).toFixed(1)}s`;
+    process.stdout.write(`${smoke.ok ? pc.green('✓') : pc.red('✗')} ${smokeDur}\n`);
+    timings.push({ label: 'smoke test', durationMs: smokeDurationMs });
+    if (!smoke.ok) {
+        printError(smoke.error);
+        process.exitCode = 1;
+        printTimings(timings);
+        return;
+    }
+    // 4. Summary.
+    process.stdout.write('\n');
+    printSuccess('Auth upgrade complete');
+    printInfo('Next', 'olam auth login --label primary (if needed)');
+    printTimings(timings);
+}
+// ── Register ──────────────────────────────────────────────────────
+export function registerAuthUpgrade(auth) {
+    auth
+        .command('upgrade')
+        .description('Rebuild the olam-auth image and force-recreate the container')
+        .option('-y, --yes', 'Skip the confirmation prompt')
+        .option('--skip-recreate', 'Build the image only; skip container stop/rm/start')
+        .action(async (opts) => {
+        await handleAuthUpgrade(parseAuthUpgradeOpts(opts));
+    });
+}
+//# sourceMappingURL=auth-upgrade.js.map

package/dist/commands/auth-upgrade.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-upgrade.js","sourceRoot":"","sources":["../../src/commands/auth-upgrade.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAGH,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,MAAM,YAAY,CAAC;AAC5B,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACjF,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AAEvE,MAAM,SAAS,GAAG,IAAI,CAAC;AACvB,MAAM,eAAe,GAAG,oBAAoB,SAAS,SAAS,CAAC;AAC/D,MAAM,YAAY,GAAG,oBAAoB,SAAS,kBAAkB,CAAC;AASrE,6DAA6D;AAC7D,MAAM,UAAU,oBAAoB,CAAC,GAGpC;IACC,OAAO;QACL,GAAG,EAAE,GAAG,CAAC,GAAG,KAAK,IAAI;QACrB,YAAY,EAAE,GAAG,CAAC,YAAY,KAAK,IAAI;KACxC,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAAC,GAAW;IAC9C,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,kCAAkC,CAAC,CAAC;IAClE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3B,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EACH,mCAAmC,MAAM,MAAM;gBAC/C,8DAA8D;SACjE,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC;AAED,uEAAuE;AACvE,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,SAAS,GAAG,MAAM;IACxD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;IACxC,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;QAC7B,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,eAAe,EAAE;gBACvC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;aAClC,CAAC,CAAC;YACH,IAAI,GAAG,CAAC,EAAE;gBAAE,OAAO,IAAI,CAAC;QAC1B,CAAC;QAAC,MAAM,CAAC;YACP,aAAa;QACf,CAAC;QACD,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IAC/C,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,UAAyB;IAEzB,MAAM,OAAO,GAA2B,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC;IAC/E,IAAI,UAAU;QAAE,OAAO,CAAC,eAAe,CAAC,GAAG,UAAU,CAAC;IAEtD,IAAI,GAAa,CAAC;IAClB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,KAAK,CAAC,YAAY,EAAE;YAC9B,MAAM,EAAE,MAAM;YACd,OAAO;YACP,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC;YACpE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;SAClC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC;QAChE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,8BAA8B,GAAG,EAAE,EAAE,CAAC;IACnE,CAAC;IAED,IAAI,IAAa,CAAC;IAClB,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,yCAAyC,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC;IACtF,CAAC;IAED,MAAM,CAAC,GAAG,IAA+B,CAAC;IAE1C,2DAA2D;IAC3D,MAAM,QAAQ,GAAG,OAAO,CAAC,CAAC,UAAU,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACxE,IAAI,wBAAwB,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5C,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,kEAAkE,QAAQ,KAAK;gBACpF,uEAAuE;SAC1E,CAAC;IACJ,CAAC;IAED,gFAAgF;IAChF,+CAA+C;IAC/C,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC;AAWD,SAAS,OAAO,CACd,KAAa,EACb,GAAW,EACX,IAAuB,EACvB,OAAuD,EAAE;IAEzD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACzB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;IACtD,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,EAAE;QACvC,QAAQ,EAAE,OAAO;QACjB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;QACjC,GAAG,EAAE,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE;QAC9B,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC,EAAE;KAC7C,CAAC,CAAC;IACH,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;IACtC,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC;IAC7D,MAAM,GAAG,GAAG,GAAG,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC;IACjD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;IACrE,OAAO;QACL,EAAE;QACF,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE;QAC3B,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE;QAC3B,UAAU;KACX,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,OAAO,CAAC,OAAe;IACpC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACtC,MAAM,EAAE,eAAe,EAAE,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,CAAC;IAC1D,MAAM,EAAE,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAC7E,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,EAAE,CAAC,QAAQ,CAAC,GAAG,OAAO,SAAS,EAAE,CAAC,MAAM,EAAE,EAAE;YAC1C,EAAE,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,GAAG,IAAI,MAAM,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,CAAC;QAC1E,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,YAAY,CAAC,OAAqD;IACzE,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;IAC5D,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC3B,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,SAAS,CAAC,CAAC,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAC7D,CAAC;IACD,SAAS,CAAC,OAAO,EAAE,GAAG,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;AACtD,CAAC;AAED,qEAAqE;AAErE,KAAK,UAAU,iBAAiB,CAAC,IAAqB;IACpD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAE1B,uBAAuB;IACvB,MAAM,SAAS,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC;IAC5C,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;QAClB,UAAU,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAC5B,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IAED,iBAAiB;IACjB,SAAS,CAAC,mBAAmB,EAAE,EAAE,CAAC,CAAC;IACnC,MAAM,KAAK,GAAG;QACZ,mCAAmC;QACnC,mCAAmC;QACnC,6CAA6C;QAC7C,kBAAkB;QAClB,yCAAyC;KAC1C,CAAC;IACF,IAAI,IAAI,CAAC,YAAY;QAAE,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,+BAA+B,CAAC,CAAC;IAC3E,SAAS,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACrC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAE3B,2BAA2B;IAC3B,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;QACd,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,CAAC;QAC1C,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,SAAS,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC;YACxC,OAAO;QACT,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAAiD,EAAE,CAAC;IAEjE,gCAAgC;IAChC,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,4CAA4C,CAAC,CAAC;IACjF,MAAM,WAAW,GAAG,OAAO,CAAC,oBAAoB,EAAE,MAAM,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;IAClF,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,oBAAoB,EAAE,UAAU,EAAE,WAAW,CAAC,UAAU,EAAE,CAAC,CAAC;IAClF,IAAI,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC;QACpB,UAAU,CAAC,+BAA+B,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC;QAChE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IAED,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;QACtB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC3B,YAAY,CAAC,wDAAwD,CAAC,CAAC;QACvE,YAAY,CAAC,OAAO,CAAC,CAAC;QACtB,OAAO;IACT,CAAC;IAED,oEAAoE;IACpE,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,uBAAuB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;IACxE,SAAS,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,WAAW,CAAC,EAAE;QACzC,QAAQ,EAAE,OAAO;QACjB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;KAClC,CAAC,CAAC;IACH,MAAM,cAAc,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;IAC9C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAClF,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,UAAU,EAAE,cAAc,EAAE,CAAC,CAAC;IAEtE,0EAA0E;IAC1E,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC3B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;IACtE,SAAS,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,WAAW,CAAC,EAAE;QACvC,QAAQ,EAAE,OAAO;QACjB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;KAClC,CAAC,CAAC;IACH,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC;IAC1C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAChF,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC,CAAC;IAEtE,0FAA0F;IAC1F,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC9B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,4BAA4B,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;IAC7E,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,IAAI,uBAAuB,EAAE,CAAC;QACjD,UAAU,CAAC,KAAK,EAAE,CAAC;QACnB,MAAM,eAAe,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,UAAU,CAAC;QAChD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QACnF,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,UAAU,EAAE,eAAe,EAAE,CAAC,CAAC;IAC1E,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,MAAM,eAAe,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,UAAU,CAAC;QAChD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QACjF,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,UAAU,EAAE,eAAe,EAAE,CAAC,CAAC;QACxE,UAAU,CAAC,mCAAmC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAClG,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IAED,4BAA4B;IAC5B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;IACtE,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC/B,MAAM,OAAO,GAAG,MAAM,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAChD,MAAM,gBAAgB,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,WAAW,CAAC;IAClD,MAAM,SAAS,GAAG,GAAG,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC;IAC7D,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,SAAS,IAAI,CAAC,CAAC;IACnF,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,gBAAgB,EAAE,CAAC,CAAC;IACjE,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,YAAY,CAAC,2FAA2F,CAAC,CAAC;QAC1G,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,YAAY,CAAC,OAAO,CAAC,CAAC;QACtB,OAAO;IACT,CAAC;IAED,oEAAoE;IACpE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,4BAA4B,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;IAC7E,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC9B,MAAM,UAAU,GAAG,cAAc,EAAE,CAAC;IACpC,MAAM,KAAK,GAAG,MAAM,sBAAsB,CAAC,UAAU,CAAC,CAAC;IACvD,MAAM,eAAe,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,UAAU,CAAC;IAChD,MAAM,QAAQ,GAAG,GAAG,CAAC,eAAe,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC;IAC3D,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,QAAQ,IAAI,CAAC,CAAC;IAChF,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,UAAU,EAAE,eAAe,EAAE,CAAC,CAAC;IAEnE,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;QACd,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACxB,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,YAAY,CAAC,OAAO,CAAC,CAAC;QACtB,OAAO;IACT,CAAC;IAED,cAAc;IACd,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC3B,YAAY,CAAC,uBAAuB,CAAC,CAAC;IACtC,SAAS,CAAC,MAAM,EAAE,6CAA6C,CAAC,CAAC;IACjE,YAAY,CAAC,OAAO,CAAC,CAAC;AACxB,CAAC;AAED,qEAAqE;AAErE,MAAM,UAAU,mBAAmB,CAAC,IAAa;IAC/C,IAAI;SACD,OAAO,CAAC,SAAS,CAAC;SAClB,WAAW,CAAC,8DAA8D,CAAC;SAC3E,MAAM,CAAC,WAAW,EAAE,8BAA8B,CAAC;SACnD,MAAM,CAAC,iBAAiB,EAAE,oDAAoD,CAAC;SAC/E,MAAM,CAAC,KAAK,EAAE,IAA+C,EAAE,EAAE;QAChE,MAAM,iBAAiB,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/commands/auth.d.ts

@@ -0,0 +1,16 @@
+/**
+ * olam auth — Manage the local auth container (the long-lived Linux container
+ * that runs the same OAuth PKCE dance as the Cloudflare Worker and stores
+ * Claude tokens in a named docker volume).
+ *
+ * Subcommands:
+ *   olam auth up       — start the auth container (idempotent)
+ *   olam auth down     — stop the auth container
+ *   olam auth status   — show container state + account summary
+ *   olam auth login    — run PKCE login flow (one-time per host)
+ *   olam auth logout   — remove an account from the container
+ *   olam auth refresh  — force-refresh a token
+ */
+import type { Command } from 'commander';
+export declare function registerAuth(program: Command): void;
+//# sourceMappingURL=auth.d.ts.map

package/dist/commands/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/commands/auth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAyCzC,wBAAgB,YAAY,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAgPnD"}

package/dist/commands/auth.js

@@ -0,0 +1,283 @@
+/**
+ * olam auth — Manage the local auth container (the long-lived Linux container
+ * that runs the same OAuth PKCE dance as the Cloudflare Worker and stores
+ * Claude tokens in a named docker volume).
+ *
+ * Subcommands:
+ *   olam auth up       — start the auth container (idempotent)
+ *   olam auth down     — stop the auth container
+ *   olam auth status   — show container state + account summary
+ *   olam auth login    — run PKCE login flow (one-time per host)
+ *   olam auth logout   — remove an account from the container
+ *   olam auth refresh  — force-refresh a token
+ */
+import pc from 'picocolors';
+import { AuthClient, AuthContainerController, runAuthPreflight, } from '@olam/core/src/auth/index.js';
+import { printError, printHeader, printInfo, printSuccess, printWarning } from '../output.js';
+import * as readline from 'node:readline/promises';
+import { spawn } from 'node:child_process';
+import { runAuthStatus } from './auth-status.js';
+import { registerAuthUpgrade } from './auth-upgrade.js';
+/**
+ * Best-effort browser opener. Uses the host's native "open URL" command:
+ * `open` on macOS, `xdg-open` on Linux, `start` on Windows. Silently
+ * no-ops on failure — the URL is still printed for manual copy.
+ */
+function openBrowser(url) {
+    const cmd = process.platform === 'darwin' ? 'open' :
+        process.platform === 'win32' ? 'start' :
+            'xdg-open';
+    try {
+        const child = spawn(cmd, [url], { detached: true, stdio: 'ignore' });
+        child.unref();
+    }
+    catch {
+        // Ignore — caller already printed the URL.
+    }
+}
+async function promptLine(question) {
+    const rl = readline.createInterface({ input: process.stdin, output: process.stdout });
+    try {
+        const answer = await rl.question(question);
+        return answer.trim();
+    }
+    finally {
+        rl.close();
+    }
+}
+export function registerAuth(program) {
+    const auth = program
+        .command('auth')
+        .description('Manage the local Claude auth container');
+    auth
+        .command('up')
+        .description('Start the auth container (idempotent)')
+        .action(async () => {
+        const controller = new AuthContainerController();
+        const initial = controller.status();
+        if (initial.state === 'running') {
+            printSuccess(`Auth container already running on :${initial.port}`);
+            return;
+        }
+        try {
+            controller.start();
+        }
+        catch (err) {
+            printError(err instanceof Error ? err.message : 'failed to start');
+            process.exitCode = 1;
+            return;
+        }
+        const ready = await controller.waitForReady(15_000);
+        if (!ready) {
+            printWarning('Container started but /health did not respond within 15s.');
+            process.exitCode = 1;
+            return;
+        }
+        printHeader('Auth container up');
+        printInfo('Port', String(initial.port));
+        printInfo('Volume', 'olam-auth-data');
+        console.log(`\n${pc.dim('Next: olam auth login')}`);
+    });
+    auth
+        .command('down')
+        .description('Stop the auth container (tokens persist in the volume)')
+        .action(() => {
+        const controller = new AuthContainerController();
+        try {
+            controller.stop();
+            printSuccess('Auth container stopped.');
+        }
+        catch (err) {
+            printError(err instanceof Error ? err.message : 'failed to stop');
+            process.exitCode = 1;
+        }
+    });
+    auth
+        .command('status')
+        .description('Show credential states from auth-service (same source as `auth list`)')
+        .action(async () => {
+        await runAuthStatus();
+    });
+    auth
+        .command('list')
+        .description('List all stored credentials with state, usage, and rate-limit status')
+        .action(async () => {
+        const client = new AuthClient();
+        const status = await client.status();
+        if (!status.reachable) {
+            printError('Auth container is not reachable. Run `olam auth up` first.');
+            process.exitCode = 1;
+            return;
+        }
+        printHeader(`Credentials (${status.accounts.length})`);
+        if (status.accounts.length === 0) {
+            console.log(`  ${pc.dim('No credentials — run: olam auth login --label primary')}`);
+            return;
+        }
+        const stateColor = (s) => {
+            if (s === 'active')
+                return pc.green('active');
+            if (s === 'cooldown')
+                return pc.yellow('cooldown');
+            if (s === 'expired')
+                return pc.red('expired');
+            if (s === 'disabled')
+                return pc.dim('disabled');
+            return pc.dim(s ?? 'unknown');
+        };
+        for (const a of status.accounts) {
+            const label = a.accountLabel ?? a.id;
+            const reqs = a.usage?.requestCount5h ?? 0;
+            const last429 = a.usage?.last429At
+                ? `last429=${a.usage.last429At}`
+                : 'last429=never';
+            const reset = a.rateLimitResetsAt ? `resets=${a.rateLimitResetsAt}` : '';
+            console.log(`  ${pc.bold(label.padEnd(18))} ${stateColor(a.state).padEnd(18)} ` +
+                `${pc.dim(`req5h=${reqs}`)}  ${pc.dim(`exp=${a.expiresIn}`)} ${pc.dim(last429)} ${pc.yellow(reset)}`);
+        }
+    });
+    auth
+        .command('disable')
+        .description('Take a credential out of rotation (manual cooldown)')
+        .argument('<label>', 'Credential label or id')
+        .action(async (label) => {
+        const client = new AuthClient();
+        try {
+            await client.disableAccount(label);
+            printSuccess(`Disabled: ${label}`);
+        }
+        catch (err) {
+            printError(err instanceof Error ? err.message : 'failed to disable');
+            process.exitCode = 1;
+        }
+    });
+    auth
+        .command('enable')
+        .description('Re-enable a disabled credential')
+        .argument('<label>', 'Credential label or id')
+        .action(async (label) => {
+        const client = new AuthClient();
+        try {
+            await client.enableAccount(label);
+            printSuccess(`Enabled: ${label}`);
+        }
+        catch (err) {
+            printError(err instanceof Error ? err.message : 'failed to enable');
+            process.exitCode = 1;
+        }
+    });
+    auth
+        .command('remove')
+        .description('Permanently remove a credential (purge tokens)')
+        .argument('<label>', 'Credential label or id')
+        .action(async (label) => {
+        const client = new AuthClient();
+        try {
+            await client.deleteAccount(label);
+            printSuccess(`Removed: ${label}`);
+        }
+        catch (err) {
+            printError(err instanceof Error ? err.message : 'failed to remove');
+            process.exitCode = 1;
+        }
+    });
+    auth
+        .command('login')
+        .description('Run the OAuth PKCE flow to store a Claude account in the auth container')
+        .option('--label <label>', 'Account label (e.g. primary, burner-1). Defaults to "primary" for the first account, "burner-N" thereafter.')
+        .action(async (opts) => {
+        const preflight = await runAuthPreflight({ autoStart: true });
+        if (preflight.verdict !== 'ok' && preflight.verdict !== 'no-accounts') {
+            printError(preflight.message);
+            console.log(`  ${pc.dim(preflight.remedy)}`);
+            process.exitCode = 1;
+            return;
+        }
+        const client = new AuthClient();
+        // Auto-pick a sensible label when the operator didn't supply one.
+        // First credential → "primary"; subsequent → "burner-N" with N
+        // chosen to dodge any existing label.
+        let label = opts.label;
+        if (!label) {
+            try {
+                const existing = await client.status();
+                if (existing.accounts.length === 0) {
+                    label = 'primary';
+                }
+                else {
+                    const usedLabels = new Set(existing.accounts.map((a) => a.accountLabel ?? a.id));
+                    let n = 1;
+                    while (usedLabels.has(`burner-${n}`))
+                        n += 1;
+                    label = `burner-${n}`;
+                }
+            }
+            catch {
+                label = 'primary';
+            }
+        }
+        let pending;
+        try {
+            pending = await client.startLogin(label);
+        }
+        catch (err) {
+            printError(err instanceof Error ? err.message : 'failed to start login');
+            process.exitCode = 1;
+            return;
+        }
+        printHeader('Claude OAuth — PKCE flow');
+        console.log(`\n  ${pc.bold('1.')} Opening Claude in your default browser…`);
+        console.log(`     ${pc.dim(pending.loginUrl)}`);
+        openBrowser(pending.loginUrl);
+        console.log(`\n  ${pc.bold('2.')} After approving, paste the authorization code from the redirect page.`);
+        console.log(`     ${pc.dim('(Format: <code>#<state> or just <code>.)')}\n`);
+        const raw = await promptLine(`${pc.dim('code:')} `);
+        if (!raw) {
+            printError('No code provided.');
+            process.exitCode = 1;
+            return;
+        }
+        const [codePart, statePart] = raw.includes('#') ? raw.split('#', 2) : [raw, pending.state];
+        try {
+            const result = await client.completeLogin(statePart, codePart);
+            printSuccess(`Account stored: ${result.account} (${result.expiresIn})`);
+            console.log(`\n${pc.dim('Next: olam create --name my-world')}`);
+        }
+        catch (err) {
+            printError(err instanceof Error ? err.message : 'token exchange failed');
+            process.exitCode = 1;
+        }
+    });
+    auth
+        .command('logout')
+        .description('Remove an account from the auth container')
+        .argument('<account>', 'Account id')
+        .action(async (accountId) => {
+        const client = new AuthClient();
+        try {
+            await client.deleteAccount(accountId);
+            printSuccess(`Account removed: ${accountId}`);
+        }
+        catch (err) {
+            printError(err instanceof Error ? err.message : 'failed to delete account');
+            process.exitCode = 1;
+        }
+    });
+    auth
+        .command('refresh')
+        .description('Force-refresh an account token')
+        .argument('<account>', 'Account id')
+        .action(async (accountId) => {
+        const client = new AuthClient();
+        try {
+            const result = await client.refreshAccount(accountId);
+            printSuccess(`Refreshed ${result.account} (${result.expiresIn})`);
+        }
+        catch (err) {
+            printError(err instanceof Error ? err.message : 'refresh failed');
+            process.exitCode = 1;
+        }
+    });
+    registerAuthUpgrade(auth);
+}
+//# sourceMappingURL=auth.js.map

package/dist/commands/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../src/commands/auth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAGH,OAAO,EAAE,MAAM,YAAY,CAAC;AAC5B,OAAO,EACL,UAAU,EACV,uBAAuB,EACvB,gBAAgB,GACjB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,SAAS,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC9F,OAAO,KAAK,QAAQ,MAAM,wBAAwB,CAAC;AACnD,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAExD;;;;GAIG;AACH,SAAS,WAAW,CAAC,GAAW;IAC9B,MAAM,GAAG,GACP,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QACxC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;YACxC,UAAU,CAAC;IACb,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QACrE,KAAK,CAAC,KAAK,EAAE,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,2CAA2C;IAC7C,CAAC;AACH,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,QAAgB;IACxC,MAAM,EAAE,GAAG,QAAQ,CAAC,eAAe,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IACtF,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAC3C,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC;IACvB,CAAC;YAAS,CAAC;QACT,EAAE,CAAC,KAAK,EAAE,CAAC;IACb,CAAC;AACH,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,OAAgB;IAC3C,MAAM,IAAI,GAAG,OAAO;SACjB,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,wCAAwC,CAAC,CAAC;IAEzD,IAAI;SACD,OAAO,CAAC,IAAI,CAAC;SACb,WAAW,CAAC,uCAAuC,CAAC;SACpD,MAAM,CAAC,KAAK,IAAI,EAAE;QACjB,MAAM,UAAU,GAAG,IAAI,uBAAuB,EAAE,CAAC;QACjD,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC;QACpC,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAChC,YAAY,CAAC,sCAAsC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;YACnE,OAAO;QACT,CAAC;QACD,IAAI,CAAC;YACH,UAAU,CAAC,KAAK,EAAE,CAAC;QACrB,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,UAAU,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC;YACnE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QACpD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,YAAY,CAAC,2DAA2D,CAAC,CAAC;YAC1E,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QACD,WAAW,CAAC,mBAAmB,CAAC,CAAC;QACjC,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QACxC,SAAS,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAC;QACtC,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,uBAAuB,CAAC,EAAE,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;IAEL,IAAI;SACD,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,wDAAwD,CAAC;SACrE,MAAM,CAAC,GAAG,EAAE;QACX,MAAM,UAAU,GAAG,IAAI,uBAAuB,EAAE,CAAC;QACjD,IAAI,CAAC;YACH,UAAU,CAAC,IAAI,EAAE,CAAC;YAClB,YAAY,CAAC,yBAAyB,CAAC,CAAC;QAC1C,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,UAAU,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC;YAClE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACvB,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,IAAI;SACD,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,uEAAuE,CAAC;SACpF,MAAM,CAAC,KAAK,IAAI,EAAE;QACjB,MAAM,aAAa,EAAE,CAAC;IACxB,CAAC,CAAC,CAAC;IAEL,IAAI;SACD,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,sEAAsE,CAAC;SACnF,MAAM,CAAC,KAAK,IAAI,EAAE;QACjB,MAAM,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;QAChC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;QACrC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;YACtB,UAAU,CAAC,4DAA4D,CAAC,CAAC;YACzE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QACD,WAAW,CAAC,gBAAgB,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;QACvD,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACjC,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,uDAAuD,CAAC,EAAE,CAAC,CAAC;YACpF,OAAO;QACT,CAAC;QACD,MAAM,UAAU,GAAG,CAAC,CAAU,EAAU,EAAE;YACxC,IAAI,CAAC,KAAK,QAAQ;gBAAE,OAAO,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC9C,IAAI,CAAC,KAAK,UAAU;gBAAE,OAAO,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YACnD,IAAI,CAAC,KAAK,SAAS;gBAAE,OAAO,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YAC9C,IAAI,CAAC,KAAK,UAAU;gBAAE,OAAO,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YAChD,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,SAAS,CAAC,CAAC;QAChC,CAAC,CAAC;QACF,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YAChC,MAAM,KAAK,GAAG,CAAC,CAAC,YAAY,IAAI,CAAC,CAAC,EAAE,CAAC;YACrC,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,cAAc,IAAI,CAAC,CAAC;YAC1C,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,EAAE,SAAS;gBAChC,CAAC,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,SAAS,EAAE;gBAChC,CAAC,CAAC,eAAe,CAAC;YACpB,MAAM,KAAK,GAAG,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzE,OAAO,CAAC,GAAG,CACT,KAAK,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG;gBACjE,GAAG,EAAE,CAAC,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CACvG,CAAC;QACJ,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,IAAI;SACD,OAAO,CAAC,SAAS,CAAC;SAClB,WAAW,CAAC,qDAAqD,CAAC;SAClE,QAAQ,CAAC,SAAS,EAAE,wBAAwB,CAAC;SAC7C,MAAM,CAAC,KAAK,EAAE,KAAa,EAAE,EAAE;QAC9B,MAAM,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;QAChC,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;YACnC,YAAY,CAAC,aAAa,KAAK,EAAE,CAAC,CAAC;QACrC,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,UAAU,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC;YACrE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACvB,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,IAAI;SACD,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,iCAAiC,CAAC;SAC9C,QAAQ,CAAC,SAAS,EAAE,wBAAwB,CAAC;SAC7C,MAAM,CAAC,KAAK,EAAE,KAAa,EAAE,EAAE;QAC9B,MAAM,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;QAChC,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;YAClC,YAAY,CAAC,YAAY,KAAK,EAAE,CAAC,CAAC;QACpC,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,UAAU,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC;YACpE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACvB,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,IAAI;SACD,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,gDAAgD,CAAC;SAC7D,QAAQ,CAAC,SAAS,EAAE,wBAAwB,CAAC;SAC7C,MAAM,CAAC,KAAK,EAAE,KAAa,EAAE,EAAE;QAC9B,MAAM,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;QAChC,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;YAClC,YAAY,CAAC,YAAY,KAAK,EAAE,CAAC,CAAC;QACpC,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,UAAU,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC;YACpE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACvB,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,IAAI;SACD,OAAO,CAAC,OAAO,CAAC;SAChB,WAAW,CAAC,yEAAyE,CAAC;SACtF,MAAM,CAAC,iBAAiB,EAAE,6GAA6G,CAAC;SACxI,MAAM,CAAC,KAAK,EAAE,IAAwB,EAAE,EAAE;QACzC,MAAM,SAAS,GAAG,MAAM,gBAAgB,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9D,IAAI,SAAS,CAAC,OAAO,KAAK,IAAI,IAAI,SAAS,CAAC,OAAO,KAAK,aAAa,EAAE,CAAC;YACtE,UAAU,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YAC9B,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAC7C,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;QAEhC,kEAAkE;QAClE,+DAA+D;QAC/D,sCAAsC;QACtC,IAAI,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QACvB,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;gBACvC,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBACnC,KAAK,GAAG,SAAS,CAAC;gBACpB,CAAC;qBAAM,CAAC;oBACN,MAAM,UAAU,GAAG,IAAI,GAAG,CACxB,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,IAAI,CAAC,CAAC,EAAE,CAAC,CACrD,CAAC;oBACF,IAAI,CAAC,GAAG,CAAC,CAAC;oBACV,OAAO,UAAU,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;wBAAE,CAAC,IAAI,CAAC,CAAC;oBAC7C,KAAK,GAAG,UAAU,CAAC,EAAE,CAAC;gBACxB,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,KAAK,GAAG,SAAS,CAAC;YACpB,CAAC;QACH,CAAC;QAED,IAAI,OAAO,CAAC;QACZ,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QAC3C,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,UAAU,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC;YACzE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QAED,WAAW,CAAC,0BAA0B,CAAC,CAAC;QACxC,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,0CAA0C,CAAC,CAAC;QAC5E,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAChD,WAAW,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC9B,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,wEAAwE,CAAC,CAAC;QAC1G,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,0CAA0C,CAAC,IAAI,CAAC,CAAC;QAE5E,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACpD,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,UAAU,CAAC,mBAAmB,CAAC,CAAC;YAChC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QAED,MAAM,CAAC,QAAQ,EAAE,SAAS,CAAC,GAAG,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAqB,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;QAE/G,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;YAC/D,YAAY,CAAC,mBAAmB,MAAM,CAAC,OAAO,KAAK,MAAM,CAAC,SAAS,GAAG,CAAC,CAAC;YACxE,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,mCAAmC,CAAC,EAAE,CAAC,CAAC;QAClE,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,UAAU,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC;YACzE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACvB,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,IAAI;SACD,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,2CAA2C,CAAC;SACxD,QAAQ,CAAC,WAAW,EAAE,YAAY,CAAC;SACnC,MAAM,CAAC,KAAK,EAAE,SAAiB,EAAE,EAAE;QAClC,MAAM,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;QAChC,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;YACtC,YAAY,CAAC,oBAAoB,SAAS,EAAE,CAAC,CAAC;QAChD,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,UAAU,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC;YAC5E,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACvB,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,IAAI;SACD,OAAO,CAAC,SAAS,CAAC;SAClB,WAAW,CAAC,gCAAgC,CAAC;SAC7C,QAAQ,CAAC,WAAW,EAAE,YAAY,CAAC;SACnC,MAAM,CAAC,KAAK,EAAE,SAAiB,EAAE,EAAE;QAClC,MAAM,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;QAChC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;YACtD,YAAY,CAAC,aAAa,MAAM,CAAC,OAAO,KAAK,MAAM,CAAC,SAAS,GAAG,CAAC,CAAC;QACpE,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,UAAU,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC;YAClE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACvB,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,mBAAmB,CAAC,IAAI,CAAC,CAAC;AAC5B,CAAC"}

package/dist/commands/create.d.ts

@@ -0,0 +1,8 @@
+/**
+ * olam create — Provision a new isolated development world.
+ *
+ * Delegates to WorldManager.createWorld, same as the MCP server tool.
+ */
+import type { Command } from 'commander';
+export declare function registerCreate(program: Command): void;
+//# sourceMappingURL=create.d.ts.map

package/dist/commands/create.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"create.d.ts","sourceRoot":"","sources":["../../src/commands/create.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAKH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAuCzC,wBAAgB,cAAc,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CA6ZrD"}