@positronic/cli 0.0.61 → 0.0.62

package/dist/src/cli.js

@@ -954,9 +954,9 @@ export function buildCli(options) {
         }).demandCommand(1, 'You need to specify a users command (list, create, delete, keys)');
         return yargsUsers;
     });
-    // --- Auth Commands (Global Mode Only) ---
-    if (!isLocalDevMode) {
-        var authCommand = new AuthCommand();
+    // --- Auth Commands (Available in both local and global mode) ---
+    var authCommand = new AuthCommand();
+    {
         cli = cli.command('auth', 'Manage authentication configuration\n', function(yargsAuth) {
             yargsAuth.command('status', 'Show current auth configuration\n', function() {}, function() {
                 var element = authCommand.status();

package/dist/src/commands/helpers.js

@@ -267,7 +267,7 @@ var isLocalDevMode = true;
 export var apiClient = {
     fetch: function(apiPath, options) {
         return _async_to_generator(function() {
-            var baseUrl, port, fullUrl, requestOptions, existingHeaders, headersObj, authHeader;
+            var baseUrl, port, fullUrl, existingHeaders, headersObj, authHeader, requestOptions;
             return _ts_generator(this, function(_state) {
                 switch(_state.label){
                     case 0:
@@ -279,12 +279,7 @@ export var apiClient = {
                             baseUrl = "http://localhost:".concat(port);
                         }
                         fullUrl = "".concat(baseUrl).concat(apiPath.startsWith('/') ? apiPath : '/' + apiPath);
-                        // Add auth header when not in local dev mode
-                        requestOptions = options || {};
-                        if (!!isLocalDevMode) return [
-                            3,
-                            2
-                        ];
+                        // Add auth header to all requests
                         existingHeaders = (options === null || options === void 0 ? void 0 : options.headers) || {};
                         headersObj = {};
                         // Convert headers to plain object
@@ -309,8 +304,6 @@ export var apiClient = {
                         requestOptions = _object_spread_props(_object_spread({}, options), {
                             headers: _object_spread({}, headersObj, authHeader)
                         });
-                        _state.label = 2;
-                    case 2:
                         return [
                             2,
                             fetch(fullUrl, requestOptions)

package/dist/src/components/event-detail.js

@@ -42,6 +42,8 @@ function getStatusIcon(status) {
     switch(status){
         case 'complete':
             return '✓';
+        case 'halted':
+            return '-';
         case 'running':
             return '•';
         case 'error':

package/dist/src/components/project-auth-setup.js

@@ -0,0 +1,241 @@
+function _array_like_to_array(arr, len) {
+    if (len == null || len > arr.length) len = arr.length;
+    for(var i = 0, arr2 = new Array(len); i < len; i++)arr2[i] = arr[i];
+    return arr2;
+}
+function _array_with_holes(arr) {
+    if (Array.isArray(arr)) return arr;
+}
+function _instanceof(left, right) {
+    if (right != null && typeof Symbol !== "undefined" && right[Symbol.hasInstance]) {
+        return !!right[Symbol.hasInstance](left);
+    } else {
+        return left instanceof right;
+    }
+}
+function _iterable_to_array_limit(arr, i) {
+    var _i = arr == null ? null : typeof Symbol !== "undefined" && arr[Symbol.iterator] || arr["@@iterator"];
+    if (_i == null) return;
+    var _arr = [];
+    var _n = true;
+    var _d = false;
+    var _s, _e;
+    try {
+        for(_i = _i.call(arr); !(_n = (_s = _i.next()).done); _n = true){
+            _arr.push(_s.value);
+            if (i && _arr.length === i) break;
+        }
+    } catch (err) {
+        _d = true;
+        _e = err;
+    } finally{
+        try {
+            if (!_n && _i["return"] != null) _i["return"]();
+        } finally{
+            if (_d) throw _e;
+        }
+    }
+    return _arr;
+}
+function _non_iterable_rest() {
+    throw new TypeError("Invalid attempt to destructure non-iterable instance.\\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.");
+}
+function _sliced_to_array(arr, i) {
+    return _array_with_holes(arr) || _iterable_to_array_limit(arr, i) || _unsupported_iterable_to_array(arr, i) || _non_iterable_rest();
+}
+function _unsupported_iterable_to_array(o, minLen) {
+    if (!o) return;
+    if (typeof o === "string") return _array_like_to_array(o, minLen);
+    var n = Object.prototype.toString.call(o).slice(8, -1);
+    if (n === "Object" && o.constructor) n = o.constructor.name;
+    if (n === "Map" || n === "Set") return Array.from(n);
+    if (n === "Arguments" || /^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(n)) return _array_like_to_array(o, minLen);
+}
+import React, { useState, useEffect } from 'react';
+import { Box, Text, useApp } from 'ink';
+import { ProjectConfigManager } from '../commands/project-config-manager.js';
+import { discoverSSHKeys, generateSSHKey, convertSSHPubKeyToJWK } from '../lib/ssh-key-utils.js';
+import { resetJwtAuthProvider } from '../lib/jwt-auth.js';
+import { SelectList } from './select-list.js';
+import { appendFileSync, existsSync, writeFileSync } from 'fs';
+import { join } from 'path';
+export var ProjectAuthSetup = function(param) {
+    var projectDir = param.projectDir, onComplete = param.onComplete;
+    var exit = useApp().exit;
+    var _useState = _sliced_to_array(useState('checking'), 2), state = _useState[0], setState = _useState[1];
+    var _useState1 = _sliced_to_array(useState([]), 2), discoveredKeys = _useState1[0], setDiscoveredKeys = _useState1[1];
+    var _useState2 = _sliced_to_array(useState(null), 2), selectedKey = _useState2[0], setSelectedKey = _useState2[1];
+    var _useState3 = _sliced_to_array(useState(null), 2), error = _useState3[0], setError = _useState3[1];
+    var _useState4 = _sliced_to_array(useState(null), 2), generatedKeyPath = _useState4[0], setGeneratedKeyPath = _useState4[1];
+    // Check for existing keys on mount
+    useEffect(function() {
+        var keys = discoverSSHKeys();
+        setDiscoveredKeys(keys);
+        if (keys.length === 0) {
+            // No keys found, generate one
+            setState('generating');
+        } else if (keys.length === 1) {
+            // Auto-select single key
+            setSelectedKey(keys[0]);
+            setState('configuring');
+        } else {
+            // Multiple keys, show selection
+            setState('selecting');
+        }
+    }, []);
+    // Generate key when in generating state
+    useEffect(function() {
+        if (state !== 'generating') return;
+        var result = generateSSHKey();
+        if (result.success) {
+            setGeneratedKeyPath(result.path);
+            // Re-discover keys to get the newly generated key
+            var keys = discoverSSHKeys();
+            var newKey = keys.find(function(k) {
+                return k.path === result.path;
+            });
+            if (newKey) {
+                setSelectedKey(newKey);
+                setState('configuring');
+            } else {
+                setError('Generated key but could not find it');
+                setState('error');
+            }
+        } else {
+            setError(result.error || 'Failed to generate SSH key');
+            setState('error');
+        }
+    }, [
+        state
+    ]);
+    // Configure project when key is selected
+    useEffect(function() {
+        if (state !== 'configuring' || !selectedKey) return;
+        try {
+            // Convert public key to JWK
+            var pubKeyPath = selectedKey.path + '.pub';
+            if (!existsSync(pubKeyPath)) {
+                setError("Public key not found at ".concat(pubKeyPath));
+                setState('error');
+                return;
+            }
+            var keyInfo = convertSSHPubKeyToJWK(pubKeyPath);
+            var jwkString = JSON.stringify(keyInfo.jwk);
+            // Write ROOT_PUBLIC_KEY to project .env file
+            var envPath = join(projectDir, '.env');
+            var envLine = "ROOT_PUBLIC_KEY='".concat(jwkString, "'\n");
+            if (existsSync(envPath)) {
+                appendFileSync(envPath, envLine);
+            } else {
+                writeFileSync(envPath, envLine);
+            }
+            // Set the CLI to use this key globally
+            var configManager = new ProjectConfigManager();
+            var displayPath = selectedKey.path.replace(process.env.HOME || '', '~');
+            configManager.setDefaultPrivateKeyPath(displayPath);
+            // Reset JWT provider to use the new key
+            resetJwtAuthProvider();
+            setState('success');
+        } catch (err) {
+            setError(_instanceof(err, Error) ? err.message : 'Failed to configure auth');
+            setState('error');
+        }
+    }, [
+        state,
+        selectedKey,
+        projectDir
+    ]);
+    // Auto-complete on success after a short delay
+    useEffect(function() {
+        if (state === 'success') {
+            var timer = setTimeout(function() {
+                onComplete();
+            }, 100);
+            return function() {
+                return clearTimeout(timer);
+            };
+        }
+    }, [
+        state,
+        onComplete
+    ]);
+    // Checking state
+    if (state === 'checking') {
+        return /*#__PURE__*/ React.createElement(Box, {
+            flexDirection: "column"
+        }, /*#__PURE__*/ React.createElement(Text, null, "Checking for SSH keys..."));
+    }
+    // Generating state
+    if (state === 'generating') {
+        return /*#__PURE__*/ React.createElement(Box, {
+            flexDirection: "column"
+        }, /*#__PURE__*/ React.createElement(Text, null, "No SSH keys found. Generating a new Ed25519 key..."));
+    }
+    // Selecting state - show key picker
+    if (state === 'selecting') {
+        var items = discoveredKeys.map(function(key) {
+            return {
+                id: key.path,
+                label: key.path.replace(process.env.HOME || '', '~'),
+                description: "".concat(key.algorithm, " - ").concat(key.fingerprint).concat(key.comment ? " (".concat(key.comment, ")") : '')
+            };
+        });
+        var handleSelect = function(item) {
+            var key = discoveredKeys.find(function(k) {
+                return k.path === item.id;
+            });
+            if (key) {
+                setSelectedKey(key);
+                setState('configuring');
+            }
+        };
+        var handleCancel = function() {
+            exit();
+        };
+        return /*#__PURE__*/ React.createElement(SelectList, {
+            items: items,
+            header: "Select an SSH key to use for this project",
+            onSelect: handleSelect,
+            onCancel: handleCancel,
+            footer: "Use arrow keys to navigate, Enter to select, q to cancel"
+        });
+    }
+    // Configuring state
+    if (state === 'configuring') {
+        return /*#__PURE__*/ React.createElement(Box, {
+            flexDirection: "column"
+        }, /*#__PURE__*/ React.createElement(Text, null, "Configuring authentication..."));
+    }
+    // Success state
+    if (state === 'success' && selectedKey) {
+        var displayPath = selectedKey.path.replace(process.env.HOME || '', '~');
+        return /*#__PURE__*/ React.createElement(Box, {
+            flexDirection: "column",
+            marginTop: 1
+        }, /*#__PURE__*/ React.createElement(Text, {
+            color: "green"
+        }, "Authentication configured!"), /*#__PURE__*/ React.createElement(Box, {
+            paddingLeft: 2,
+            flexDirection: "column"
+        }, /*#__PURE__*/ React.createElement(Text, null, /*#__PURE__*/ React.createElement(Text, {
+            bold: true
+        }, "SSH Key:"), " ", displayPath), generatedKeyPath && /*#__PURE__*/ React.createElement(Text, {
+            dimColor: true
+        }, "(New key generated at ", generatedKeyPath, ")")));
+    }
+    // Error state
+    if (state === 'error') {
+        return /*#__PURE__*/ React.createElement(Box, {
+            flexDirection: "column",
+            paddingTop: 1,
+            paddingBottom: 1
+        }, /*#__PURE__*/ React.createElement(Text, {
+            color: "red"
+        }, "Auth setup failed: ", error), /*#__PURE__*/ React.createElement(Box, {
+            marginTop: 1
+        }, /*#__PURE__*/ React.createElement(Text, {
+            dimColor: true
+        }, "You can manually configure auth later with: px auth login")));
+    }
+    return null;
+};

package/dist/src/components/project-create.js

@@ -174,6 +174,7 @@ function _ts_generator(thisArg, body) {
 import React, { useState, useEffect } from 'react';
 import { Box, Text } from 'ink';
 import { generateProject } from '../commands/helpers.js';
+import { ProjectAuthSetup } from './project-auth-setup.js';
 import path from 'path';
 export var ProjectCreate = function(param) {
     var projectPathArg = param.projectPathArg;
@@ -204,7 +205,12 @@ export var ProjectCreate = function(param) {
                             ];
                         case 1:
                             _state.sent();
-                            setStatus('success');
+                            // After scaffolding, move to auth setup (skip in test environment)
+                            if (process.env.NODE_ENV === 'test') {
+                                setStatus('success');
+                            } else {
+                                setStatus('auth_setup');
+                            }
                             return [
                                 3,
                                 3
@@ -241,6 +247,32 @@ export var ProjectCreate = function(param) {
             color: "red"
         }, "Error creating project: ", error));
     }
+    if (status === 'auth_setup') {
+        return /*#__PURE__*/ React.createElement(Box, {
+            flexDirection: "column",
+            paddingTop: 1
+        }, /*#__PURE__*/ React.createElement(Text, {
+            bold: true,
+            color: "green"
+        }, "Project scaffolded!"), /*#__PURE__*/ React.createElement(Box, {
+            marginTop: 1,
+            paddingLeft: 2,
+            flexDirection: "column"
+        }, /*#__PURE__*/ React.createElement(Text, null, /*#__PURE__*/ React.createElement(Text, {
+            bold: true
+        }, "Name:"), " ", projectName), /*#__PURE__*/ React.createElement(Text, null, /*#__PURE__*/ React.createElement(Text, {
+            bold: true
+        }, "Location:"), " ", projectDir)), /*#__PURE__*/ React.createElement(Box, {
+            marginTop: 1
+        }, /*#__PURE__*/ React.createElement(Text, {
+            bold: true
+        }, "Setting up authentication...")), /*#__PURE__*/ React.createElement(ProjectAuthSetup, {
+            projectDir: projectDir,
+            onComplete: function() {
+                return setStatus('success');
+            }
+        }));
+    }
     return /*#__PURE__*/ React.createElement(Box, {
         flexDirection: "column",
         paddingTop: 1,

package/dist/src/components/top-navigator.js

@@ -6,48 +6,6 @@ function _array_like_to_array(arr, len) {
 function _array_with_holes(arr) {
     if (Array.isArray(arr)) return arr;
 }
-function asyncGeneratorStep(gen, resolve, reject, _next, _throw, key, arg) {
-    try {
-        var info = gen[key](arg);
-        var value = info.value;
-    } catch (error) {
-        reject(error);
-        return;
-    }
-    if (info.done) {
-        resolve(value);
-    } else {
-        Promise.resolve(value).then(_next, _throw);
-    }
-}
-function _async_to_generator(fn) {
-    return function() {
-        var self = this, args = arguments;
-        return new Promise(function(resolve, reject) {
-            var gen = fn.apply(self, args);
-            function _next(value) {
-                asyncGeneratorStep(gen, resolve, reject, _next, _throw, "next", value);
-            }
-            function _throw(err) {
-                asyncGeneratorStep(gen, resolve, reject, _next, _throw, "throw", err);
-            }
-            _next(undefined);
-        });
-    };
-}
-function _define_property(obj, key, value) {
-    if (key in obj) {
-        Object.defineProperty(obj, key, {
-            value: value,
-            enumerable: true,
-            configurable: true,
-            writable: true
-        });
-    } else {
-        obj[key] = value;
-    }
-    return obj;
-}
 function _iterable_to_array_limit(arr, i) {
     var _i = arr == null ? null : typeof Symbol !== "undefined" && arr[Symbol.iterator] || arr["@@iterator"];
     if (_i == null) return;
@@ -75,45 +33,6 @@ function _iterable_to_array_limit(arr, i) {
 function _non_iterable_rest() {
     throw new TypeError("Invalid attempt to destructure non-iterable instance.\\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.");
 }
-function _object_spread(target) {
-    for(var i = 1; i < arguments.length; i++){
-        var source = arguments[i] != null ? arguments[i] : {};
-        var ownKeys = Object.keys(source);
-        if (typeof Object.getOwnPropertySymbols === "function") {
-            ownKeys = ownKeys.concat(Object.getOwnPropertySymbols(source).filter(function(sym) {
-                return Object.getOwnPropertyDescriptor(source, sym).enumerable;
-            }));
-        }
-        ownKeys.forEach(function(key) {
-            _define_property(target, key, source[key]);
-        });
-    }
-    return target;
-}
-function ownKeys(object, enumerableOnly) {
-    var keys = Object.keys(object);
-    if (Object.getOwnPropertySymbols) {
-        var symbols = Object.getOwnPropertySymbols(object);
-        if (enumerableOnly) {
-            symbols = symbols.filter(function(sym) {
-                return Object.getOwnPropertyDescriptor(object, sym).enumerable;
-            });
-        }
-        keys.push.apply(keys, symbols);
-    }
-    return keys;
-}
-function _object_spread_props(target, source) {
-    source = source != null ? source : {};
-    if (Object.getOwnPropertyDescriptors) {
-        Object.defineProperties(target, Object.getOwnPropertyDescriptors(source));
-    } else {
-        ownKeys(Object(source)).forEach(function(key) {
-            Object.defineProperty(target, key, Object.getOwnPropertyDescriptor(source, key));
-        });
-    }
-    return target;
-}
 function _sliced_to_array(arr, i) {
     return _array_with_holes(arr) || _iterable_to_array_limit(arr, i) || _unsupported_iterable_to_array(arr, i) || _non_iterable_rest();
 }
@@ -125,102 +44,11 @@ function _unsupported_iterable_to_array(o, minLen) {
     if (n === "Map" || n === "Set") return Array.from(n);
     if (n === "Arguments" || /^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(n)) return _array_like_to_array(o, minLen);
 }
-function _ts_generator(thisArg, body) {
-    var f, y, t, _ = {
-        label: 0,
-        sent: function() {
-            if (t[0] & 1) throw t[1];
-            return t[1];
-        },
-        trys: [],
-        ops: []
-    }, g = Object.create((typeof Iterator === "function" ? Iterator : Object).prototype);
-    return g.next = verb(0), g["throw"] = verb(1), g["return"] = verb(2), typeof Symbol === "function" && (g[Symbol.iterator] = function() {
-        return this;
-    }), g;
-    function verb(n) {
-        return function(v) {
-            return step([
-                n,
-                v
-            ]);
-        };
-    }
-    function step(op) {
-        if (f) throw new TypeError("Generator is already executing.");
-        while(g && (g = 0, op[0] && (_ = 0)), _)try {
-            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
-            if (y = 0, t) op = [
-                op[0] & 2,
-                t.value
-            ];
-            switch(op[0]){
-                case 0:
-                case 1:
-                    t = op;
-                    break;
-                case 4:
-                    _.label++;
-                    return {
-                        value: op[1],
-                        done: false
-                    };
-                case 5:
-                    _.label++;
-                    y = op[1];
-                    op = [
-                        0
-                    ];
-                    continue;
-                case 7:
-                    op = _.ops.pop();
-                    _.trys.pop();
-                    continue;
-                default:
-                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) {
-                        _ = 0;
-                        continue;
-                    }
-                    if (op[0] === 3 && (!t || op[1] > t[0] && op[1] < t[3])) {
-                        _.label = op[1];
-                        break;
-                    }
-                    if (op[0] === 6 && _.label < t[1]) {
-                        _.label = t[1];
-                        t = op;
-                        break;
-                    }
-                    if (t && _.label < t[2]) {
-                        _.label = t[2];
-                        _.ops.push(op);
-                        break;
-                    }
-                    if (t[2]) _.ops.pop();
-                    _.trys.pop();
-                    continue;
-            }
-            op = body.call(thisArg, _);
-        } catch (e) {
-            op = [
-                6,
-                e
-            ];
-            y = 0;
-        } finally{
-            f = t = 0;
-        }
-        if (op[0] & 5) throw op[1];
-        return {
-            value: op[0] ? op[1] : void 0,
-            done: true
-        };
-    }
-}
 import React, { useState, useEffect, useRef } from 'react';
 import { Text, Box, useStdout, useInput, useApp } from 'ink';
 import { EventSource } from 'eventsource';
 import { getApiBaseUrl, isApiLocalDevMode, apiClient } from '../commands/helpers.js';
-import { getAuthHeader } from '../lib/jwt-auth.js';
+import { authenticatedFetch } from '../lib/jwt-auth.js';
 import { STATUS } from '@positronic/core';
 import { useApiDelete } from '../hooks/useApi.js';
 import { ErrorComponent } from './error.js';
@@ -296,33 +124,9 @@ export var TopNavigator = function(param) {
         }
         var baseUrl = getApiBaseUrl();
         var url = "".concat(baseUrl, "/brains/watch");
-        // Create authenticated fetch wrapper for production mode
-        // Each fetch call gets a fresh JWT token (tokens have 30-second lifetime)
-        var authenticatedFetch = function(fetchUrl, init) {
-            return _async_to_generator(function() {
-                var authHeader;
-                return _ts_generator(this, function(_state) {
-                    switch(_state.label){
-                        case 0:
-                            return [
-                                4,
-                                getAuthHeader()
-                            ];
-                        case 1:
-                            authHeader = _state.sent();
-                            return [
-                                2,
-                                fetch(fetchUrl, _object_spread_props(_object_spread({}, init), {
-                                    headers: _object_spread({}, init === null || init === void 0 ? void 0 : init.headers, authHeader)
-                                }))
-                            ];
-                    }
-                });
-            })();
-        };
-        var es = new EventSource(url, !isApiLocalDevMode() ? {
+        var es = new EventSource(url, {
             fetch: authenticatedFetch
-        } : undefined);
+        });
         eventSourceRef.current = es;
         setIsConnected(false);
         setError(null);

package/dist/src/components/watch.js

@@ -9,35 +9,6 @@ function _array_with_holes(arr) {
 function _array_without_holes(arr) {
     if (Array.isArray(arr)) return _array_like_to_array(arr);
 }
-function asyncGeneratorStep(gen, resolve, reject, _next, _throw, key, arg) {
-    try {
-        var info = gen[key](arg);
-        var value = info.value;
-    } catch (error) {
-        reject(error);
-        return;
-    }
-    if (info.done) {
-        resolve(value);
-    } else {
-        Promise.resolve(value).then(_next, _throw);
-    }
-}
-function _async_to_generator(fn) {
-    return function() {
-        var self = this, args = arguments;
-        return new Promise(function(resolve, reject) {
-            var gen = fn.apply(self, args);
-            function _next(value) {
-                asyncGeneratorStep(gen, resolve, reject, _next, _throw, "next", value);
-            }
-            function _throw(err) {
-                asyncGeneratorStep(gen, resolve, reject, _next, _throw, "throw", err);
-            }
-            _next(undefined);
-        });
-    };
-}
 function _define_property(obj, key, value) {
     if (key in obj) {
         Object.defineProperty(obj, key, {
@@ -99,30 +70,6 @@ function _object_spread(target) {
     }
     return target;
 }
-function ownKeys(object, enumerableOnly) {
-    var keys = Object.keys(object);
-    if (Object.getOwnPropertySymbols) {
-        var symbols = Object.getOwnPropertySymbols(object);
-        if (enumerableOnly) {
-            symbols = symbols.filter(function(sym) {
-                return Object.getOwnPropertyDescriptor(object, sym).enumerable;
-            });
-        }
-        keys.push.apply(keys, symbols);
-    }
-    return keys;
-}
-function _object_spread_props(target, source) {
-    source = source != null ? source : {};
-    if (Object.getOwnPropertyDescriptors) {
-        Object.defineProperties(target, Object.getOwnPropertyDescriptors(source));
-    } else {
-        ownKeys(Object(source)).forEach(function(key) {
-            Object.defineProperty(target, key, Object.getOwnPropertyDescriptor(source, key));
-        });
-    }
-    return target;
-}
 function _sliced_to_array(arr, i) {
     return _array_with_holes(arr) || _iterable_to_array_limit(arr, i) || _unsupported_iterable_to_array(arr, i) || _non_iterable_rest();
 }
@@ -137,97 +84,6 @@ function _unsupported_iterable_to_array(o, minLen) {
     if (n === "Map" || n === "Set") return Array.from(n);
     if (n === "Arguments" || /^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(n)) return _array_like_to_array(o, minLen);
 }
-function _ts_generator(thisArg, body) {
-    var f, y, t, _ = {
-        label: 0,
-        sent: function() {
-            if (t[0] & 1) throw t[1];
-            return t[1];
-        },
-        trys: [],
-        ops: []
-    }, g = Object.create((typeof Iterator === "function" ? Iterator : Object).prototype);
-    return g.next = verb(0), g["throw"] = verb(1), g["return"] = verb(2), typeof Symbol === "function" && (g[Symbol.iterator] = function() {
-        return this;
-    }), g;
-    function verb(n) {
-        return function(v) {
-            return step([
-                n,
-                v
-            ]);
-        };
-    }
-    function step(op) {
-        if (f) throw new TypeError("Generator is already executing.");
-        while(g && (g = 0, op[0] && (_ = 0)), _)try {
-            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
-            if (y = 0, t) op = [
-                op[0] & 2,
-                t.value
-            ];
-            switch(op[0]){
-                case 0:
-                case 1:
-                    t = op;
-                    break;
-                case 4:
-                    _.label++;
-                    return {
-                        value: op[1],
-                        done: false
-                    };
-                case 5:
-                    _.label++;
-                    y = op[1];
-                    op = [
-                        0
-                    ];
-                    continue;
-                case 7:
-                    op = _.ops.pop();
-                    _.trys.pop();
-                    continue;
-                default:
-                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) {
-                        _ = 0;
-                        continue;
-                    }
-                    if (op[0] === 3 && (!t || op[1] > t[0] && op[1] < t[3])) {
-                        _.label = op[1];
-                        break;
-                    }
-                    if (op[0] === 6 && _.label < t[1]) {
-                        _.label = t[1];
-                        t = op;
-                        break;
-                    }
-                    if (t && _.label < t[2]) {
-                        _.label = t[2];
-                        _.ops.push(op);
-                        break;
-                    }
-                    if (t[2]) _.ops.pop();
-                    _.trys.pop();
-                    continue;
-            }
-            op = body.call(thisArg, _);
-        } catch (e) {
-            op = [
-                6,
-                e
-            ];
-            y = 0;
-        } finally{
-            f = t = 0;
-        }
-        if (op[0] & 5) throw op[1];
-        return {
-            value: op[0] ? op[1] : void 0,
-            done: true
-        };
-    }
-}
 import React, { useState, useEffect, useRef } from 'react';
 import { Text, Box, useStdout, useInput, useApp } from 'ink';
 import TextInput from 'ink-text-input';
@@ -235,7 +91,7 @@ import { EventSource } from 'eventsource';
 import { BRAIN_EVENTS, STATUS, reconstructBrainTree, createBrainExecutionMachine, sendEvent } from '@positronic/core';
 import { useBrainMachine } from '../hooks/useBrainMachine.js';
 import { getApiBaseUrl, isApiLocalDevMode } from '../commands/helpers.js';
-import { getAuthHeader } from '../lib/jwt-auth.js';
+import { authenticatedFetch } from '../lib/jwt-auth.js';
 import { ErrorComponent } from './error.js';
 import { EventsView } from './events-view.js';
 import { StateView } from './state-view.js';
@@ -250,9 +106,9 @@ var getCurrentStepIndex = function(steps) {
         return s.status === STATUS.RUNNING;
     });
     if (runningIndex >= 0) return runningIndex;
-    // Find the last completed step
+    // Find the last completed/halted step
     for(var i = steps.length - 1; i >= 0; i--){
-        if (steps[i].status === STATUS.COMPLETE || steps[i].status === STATUS.ERROR) {
+        if (steps[i].status === STATUS.COMPLETE || steps[i].status === STATUS.HALTED || steps[i].status === STATUS.ERROR) {
             return i;
         }
     }
@@ -261,7 +117,7 @@ var getCurrentStepIndex = function(steps) {
 // Count completed steps
 var getCompletedCount = function(steps) {
     return steps.filter(function(s) {
-        return s.status === STATUS.COMPLETE;
+        return s.status === STATUS.COMPLETE || s.status === STATUS.HALTED;
     }).length;
 };
 // Get status indicator character
@@ -269,6 +125,8 @@ var getStatusChar = function(status) {
     switch(status){
         case STATUS.COMPLETE:
             return '✓';
+        case STATUS.HALTED:
+            return '-';
         case STATUS.ERROR:
             return '✗';
         case STATUS.RUNNING:
@@ -284,6 +142,8 @@ var getStatusColor = function(status) {
     switch(status){
         case STATUS.COMPLETE:
             return 'green';
+        case STATUS.HALTED:
+            return 'gray';
         case STATUS.ERROR:
             return 'red';
         case STATUS.RUNNING:
@@ -424,33 +284,9 @@ export var Watch = function(param) {
     useEffect(function() {
         var baseUrl = getApiBaseUrl();
         var url = "".concat(baseUrl, "/brains/runs/").concat(runId, "/watch");
-        // Create authenticated fetch wrapper for production mode
-        // Each fetch call gets a fresh JWT token (tokens have 30-second lifetime)
-        var authenticatedFetch = function(fetchUrl, init) {
-            return _async_to_generator(function() {
-                var authHeader;
-                return _ts_generator(this, function(_state) {
-                    switch(_state.label){
-                        case 0:
-                            return [
-                                4,
-                                getAuthHeader()
-                            ];
-                        case 1:
-                            authHeader = _state.sent();
-                            return [
-                                2,
-                                fetch(fetchUrl, _object_spread_props(_object_spread({}, init), {
-                                    headers: _object_spread({}, init === null || init === void 0 ? void 0 : init.headers, authHeader)
-                                }))
-                            ];
-                    }
-                });
-            })();
-        };
-        var es = new EventSource(url, !isApiLocalDevMode() ? {
+        var es = new EventSource(url, {
             fetch: authenticatedFetch
-        } : undefined);
+        });
         // Reset connection state for new connection
         // Note: rootBrain and isComplete are handled by the new machine (via useMemo)
         setIsConnected(false);

package/dist/src/lib/jwt-auth.js

@@ -66,6 +66,45 @@ function _instanceof(left, right) {
         return left instanceof right;
     }
 }
+function _object_spread(target) {
+    for(var i = 1; i < arguments.length; i++){
+        var source = arguments[i] != null ? arguments[i] : {};
+        var ownKeys = Object.keys(source);
+        if (typeof Object.getOwnPropertySymbols === "function") {
+            ownKeys = ownKeys.concat(Object.getOwnPropertySymbols(source).filter(function(sym) {
+                return Object.getOwnPropertyDescriptor(source, sym).enumerable;
+            }));
+        }
+        ownKeys.forEach(function(key) {
+            _define_property(target, key, source[key]);
+        });
+    }
+    return target;
+}
+function ownKeys(object, enumerableOnly) {
+    var keys = Object.keys(object);
+    if (Object.getOwnPropertySymbols) {
+        var symbols = Object.getOwnPropertySymbols(object);
+        if (enumerableOnly) {
+            symbols = symbols.filter(function(sym) {
+                return Object.getOwnPropertyDescriptor(object, sym).enumerable;
+            });
+        }
+        keys.push.apply(keys, symbols);
+    }
+    return keys;
+}
+function _object_spread_props(target, source) {
+    source = source != null ? source : {};
+    if (Object.getOwnPropertyDescriptors) {
+        Object.defineProperties(target, Object.getOwnPropertyDescriptors(source));
+    } else {
+        ownKeys(Object(source)).forEach(function(key) {
+            Object.defineProperty(target, key, Object.getOwnPropertyDescriptor(source, key));
+        });
+    }
+    return target;
+}
 function _ts_generator(thisArg, body) {
     var f, y, t, _ = {
         label: 0,
@@ -541,31 +580,36 @@ var providerInstance = null;
 }
 /**
  * Get the Authorization header if auth is available
- * Throws if there's an auth configuration error
- * Returns empty object with warning if no key is configured
+ * Returns empty object if no key is configured (server will reject if auth is required)
+ * Only throws for unexpected errors during token creation
  */ export function getAuthHeader() {
     return _async_to_generator(function() {
-        var provider, error, token;
+        var provider, token, error;
         return _ts_generator(this, function(_state) {
             switch(_state.label){
                 case 0:
                     provider = getJwtAuthProvider();
                     if (!provider.isReady()) {
-                        error = provider.getError();
-                        if (error) {
-                            throw error;
-                        }
-                        console.warn('Warning: No SSH key configured for authentication. Run "px auth login" to configure.');
+                        // No key configured - return empty headers
+                        // The server will reject the request if authentication is required
                         return [
                             2,
                             {}
                         ];
                     }
+                    _state.label = 1;
+                case 1:
+                    _state.trys.push([
+                        1,
+                        3,
+                        ,
+                        4
+                    ]);
                     return [
                         4,
                         provider.createToken()
                     ];
-                case 1:
+                case 2:
                     token = _state.sent();
                     return [
                         2,
@@ -573,7 +617,45 @@ var providerInstance = null;
                             Authorization: "Bearer ".concat(token)
                         }
                     ];
+                case 3:
+                    error = _state.sent();
+                    // Token creation failed (e.g., ssh-agent not running for encrypted key)
+                    // Return empty headers and let the server reject if auth is required
+                    return [
+                        2,
+                        {}
+                    ];
+                case 4:
+                    return [
+                        2
+                    ];
             }
         });
     })();
 }
+/**
+ * Authenticated fetch wrapper for use with EventSource or other
+ * consumers that need a fetch function with automatic JWT authentication.
+ * Each fetch call gets a fresh JWT token (tokens have 30-second lifetime).
+ */ export var authenticatedFetch = function(input, init) {
+    return _async_to_generator(function() {
+        var authHeader;
+        return _ts_generator(this, function(_state) {
+            switch(_state.label){
+                case 0:
+                    return [
+                        4,
+                        getAuthHeader()
+                    ];
+                case 1:
+                    authHeader = _state.sent();
+                    return [
+                        2,
+                        fetch(input, _object_spread_props(_object_spread({}, init), {
+                            headers: _object_spread({}, init === null || init === void 0 ? void 0 : init.headers, authHeader)
+                        }))
+                    ];
+            }
+        });
+    })();
+};

package/dist/src/lib/ssh-key-utils.js

@@ -1,8 +1,16 @@
+function _instanceof(left, right) {
+    if (right != null && typeof Symbol !== "undefined" && right[Symbol.hasInstance]) {
+        return !!right[Symbol.hasInstance](left);
+    } else {
+        return left instanceof right;
+    }
+}
 import sshpk from 'sshpk';
-import { readFileSync, readdirSync, existsSync } from 'fs';
+import { readFileSync, readdirSync, existsSync, mkdirSync } from 'fs';
 import { homedir } from 'os';
 import { join } from 'path';
 import { createPublicKey } from 'crypto';
+import { execSync } from 'child_process';
 /**
  * Discover available SSH keys in the ~/.ssh directory
  * Scans for common key files and returns metadata about each key
@@ -210,3 +218,45 @@ import { createPublicKey } from 'crypto';
     }
     return keyPath;
 }
+/**
+ * Generate a new SSH key using ssh-keygen
+ * Creates an Ed25519 key with no passphrase
+ */ export function generateSSHKey() {
+    var keyPath = arguments.length > 0 && arguments[0] !== void 0 ? arguments[0] : join(homedir(), '.ssh', 'id_ed25519');
+    var expandedPath = expandPath(keyPath);
+    // Ensure the .ssh directory exists
+    var sshDir = join(homedir(), '.ssh');
+    if (!existsSync(sshDir)) {
+        mkdirSync(sshDir, {
+            mode: 448
+        });
+    }
+    // Check if key already exists
+    if (existsSync(expandedPath)) {
+        return {
+            success: false,
+            error: "Key already exists at ".concat(expandedPath),
+            path: expandedPath
+        };
+    }
+    try {
+        // Generate Ed25519 key with no passphrase
+        // -t ed25519: key type
+        // -N "": empty passphrase
+        // -f: output file path
+        // -C: comment (email/identifier)
+        execSync('ssh-keygen -t ed25519 -N "" -f "'.concat(expandedPath, '" -C "positronic-key"'), {
+            stdio: 'ignore'
+        });
+        return {
+            success: true,
+            path: expandedPath
+        };
+    } catch (error) {
+        return {
+            success: false,
+            error: _instanceof(error, Error) ? error.message : 'Failed to generate SSH key',
+            path: expandedPath
+        };
+    }
+}

package/dist/types/commands/helpers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"helpers.d.ts","sourceRoot":"","sources":["../../../src/commands/helpers.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,KAAK,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAUtD,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,MAAM,gBAAgB,GAAG,CAAC,QAAQ,EAAE,YAAY,KAAK,IAAI,CAAC;AAGhE,MAAM,MAAM,SAAS,GAAG,OAAO,SAAS,CAAC;AAMzC;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,EAAE,YAAY,GAAE,OAAc,GAAG,IAAI,CAGtF;AAED;;GAEG;AACH,wBAAgB,iBAAiB,IAAI,OAAO,CAE3C;AAED;;;GAGG;AACH,wBAAgB,aAAa,IAAI,MAAM,CAOtC;AAGD,eAAO,MAAM,SAAS;qBACG,MAAM,YAAY,WAAW,KAAG,OAAO,CAAC,QAAQ,CAAC;IAgDxE;;OAEG;oCACmC,MAAM,YAAY,WAAW,KAAG,OAAO,CAAC,QAAQ,CAAC;CAkBxF,CAAC;AAEF,wBAAsB,eAAe,CAAC,WAAW,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,iBAsF5E;AAED,wBAAgB,kBAAkB,CAAC,YAAY,EAAE,MAAM,GAAG,aAAa,EAAE,CAsCxE;AAeD,UAAU,UAAU;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAClD;AAED,MAAM,MAAM,oBAAoB,GAAG,CAAC,QAAQ,EAAE;IAC5C,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,UAAU,GAAG,WAAW,GAAG,UAAU,CAAC;IAC9C,KAAK,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;CAC5B,KAAK,IAAI,CAAC;AAEX;;GAEG;AACH,wBAAsB,aAAa,CACjC,eAAe,EAAE,MAAM,EACvB,MAAM,GAAE,SAAqB,EAC7B,UAAU,CAAC,EAAE,oBAAoB,GAChC,OAAO,CAAC,UAAU,CAAC,CA+KrB;AAqKD;;GAEG;AACH,wBAAsB,aAAa,CACjC,eAAe,EAAE,MAAM,EACvB,MAAM,GAAE,SAAqB,mBAoB9B;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,eAAe,EAAE,MAAM,GAAG,MAAM,CAwCnE;AAED;;GAEG;AACH,wBAAgB,2BAA2B,CAAC,eAAe,EAAE,MAAM,GAAG,MAAM,CAO3E;AAsCD;;GAEG;AACH,wBAAsB,cAAc,CAClC,IAAI,CAAC,EAAE,MAAM,EACb,SAAS,SAAO,GACf,OAAO,CAAC,OAAO,CAAC,CAsBlB;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,0BAA0B,CAC9C,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,MAAM,EACjB,MAAM,GAAE,SAAqB,EAC7B,UAAU,CAAC,EAAE,gBAAgB,EAC7B,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,IAAI,CAAC,CA2If"}
+{"version":3,"file":"helpers.d.ts","sourceRoot":"","sources":["../../../src/commands/helpers.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,KAAK,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAUtD,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,MAAM,gBAAgB,GAAG,CAAC,QAAQ,EAAE,YAAY,KAAK,IAAI,CAAC;AAGhE,MAAM,MAAM,SAAS,GAAG,OAAO,SAAS,CAAC;AAMzC;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,EAAE,YAAY,GAAE,OAAc,GAAG,IAAI,CAGtF;AAED;;GAEG;AACH,wBAAgB,iBAAiB,IAAI,OAAO,CAE3C;AAED;;;GAGG;AACH,wBAAgB,aAAa,IAAI,MAAM,CAOtC;AAGD,eAAO,MAAM,SAAS;qBACG,MAAM,YAAY,WAAW,KAAG,OAAO,CAAC,QAAQ,CAAC;IA6CxE;;OAEG;oCACmC,MAAM,YAAY,WAAW,KAAG,OAAO,CAAC,QAAQ,CAAC;CAkBxF,CAAC;AAEF,wBAAsB,eAAe,CAAC,WAAW,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,iBAsF5E;AAED,wBAAgB,kBAAkB,CAAC,YAAY,EAAE,MAAM,GAAG,aAAa,EAAE,CAsCxE;AAeD,UAAU,UAAU;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAClD;AAED,MAAM,MAAM,oBAAoB,GAAG,CAAC,QAAQ,EAAE;IAC5C,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,UAAU,GAAG,WAAW,GAAG,UAAU,CAAC;IAC9C,KAAK,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;CAC5B,KAAK,IAAI,CAAC;AAEX;;GAEG;AACH,wBAAsB,aAAa,CACjC,eAAe,EAAE,MAAM,EACvB,MAAM,GAAE,SAAqB,EAC7B,UAAU,CAAC,EAAE,oBAAoB,GAChC,OAAO,CAAC,UAAU,CAAC,CA+KrB;AAqKD;;GAEG;AACH,wBAAsB,aAAa,CACjC,eAAe,EAAE,MAAM,EACvB,MAAM,GAAE,SAAqB,mBAoB9B;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,eAAe,EAAE,MAAM,GAAG,MAAM,CAwCnE;AAED;;GAEG;AACH,wBAAgB,2BAA2B,CAAC,eAAe,EAAE,MAAM,GAAG,MAAM,CAO3E;AAsCD;;GAEG;AACH,wBAAsB,cAAc,CAClC,IAAI,CAAC,EAAE,MAAM,EACb,SAAS,SAAO,GACf,OAAO,CAAC,OAAO,CAAC,CAsBlB;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,0BAA0B,CAC9C,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,MAAM,EACjB,MAAM,GAAE,SAAqB,EAC7B,UAAU,CAAC,EAAE,gBAAgB,EAC7B,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,IAAI,CAAC,CA2If"}

package/dist/types/components/event-detail.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"event-detail.d.ts","sourceRoot":"","sources":["../../../src/components/event-detail.tsx"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAEpD,UAAU,gBAAgB;IACxB,MAAM,EAAE,WAAW,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,IAAI,CAAC;IACzC,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AA+ND,eAAO,MAAM,WAAW,GAAI,oDAA2D,gBAAgB,4CAqDtG,CAAC"}
+{"version":3,"file":"event-detail.d.ts","sourceRoot":"","sources":["../../../src/components/event-detail.tsx"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAEpD,UAAU,gBAAgB;IACxB,MAAM,EAAE,WAAW,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,IAAI,CAAC;IACzC,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAiOD,eAAO,MAAM,WAAW,GAAI,oDAA2D,gBAAgB,4CAqDtG,CAAC"}

package/dist/types/components/project-auth-setup.d.ts

@@ -0,0 +1,7 @@
+interface ProjectAuthSetupProps {
+    projectDir: string;
+    onComplete: () => void;
+}
+export declare const ProjectAuthSetup: ({ projectDir, onComplete }: ProjectAuthSetupProps) => import("react/jsx-runtime").JSX.Element | null;
+export {};
+//# sourceMappingURL=project-auth-setup.d.ts.map

package/dist/types/components/project-auth-setup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"project-auth-setup.d.ts","sourceRoot":"","sources":["../../../src/components/project-auth-setup.tsx"],"names":[],"mappings":"AAcA,UAAU,qBAAqB;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,IAAI,CAAC;CACxB;AAUD,eAAO,MAAM,gBAAgB,GAAI,4BAA4B,qBAAqB,mDAiMjF,CAAC"}

package/dist/types/components/project-create.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"project-create.d.ts","sourceRoot":"","sources":["../../../src/components/project-create.tsx"],"names":[],"mappings":"AAKA,UAAU,kBAAkB;IAC1B,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,eAAO,MAAM,aAAa,GAAI,oBAAoB,kBAAkB,4CAyEnE,CAAC"}
+{"version":3,"file":"project-create.d.ts","sourceRoot":"","sources":["../../../src/components/project-create.tsx"],"names":[],"mappings":"AAMA,UAAU,kBAAkB;IAC1B,cAAc,EAAE,MAAM,CAAC;CACxB;AAID,eAAO,MAAM,aAAa,GAAI,oBAAoB,kBAAkB,4CAqGnE,CAAC"}

package/dist/types/components/top-navigator.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"top-navigator.d.ts","sourceRoot":"","sources":["../../../src/components/top-navigator.tsx"],"names":[],"mappings":"AAeA,UAAU,iBAAiB;IACzB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAID,eAAO,MAAM,YAAY,GAAI,iBAAiB,iBAAiB,4CAgU9D,CAAC"}
+{"version":3,"file":"top-navigator.d.ts","sourceRoot":"","sources":["../../../src/components/top-navigator.tsx"],"names":[],"mappings":"AAeA,UAAU,iBAAiB;IACzB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAID,eAAO,MAAM,YAAY,GAAI,iBAAiB,iBAAiB,4CAmT9D,CAAC"}

package/dist/types/components/watch.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"watch.d.ts","sourceRoot":"","sources":["../../../src/components/watch.tsx"],"names":[],"mappings":"AAiMA,UAAU,UAAU;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED,eAAO,MAAM,KAAK,GAAI,wDAAuE,UAAU,4CAgftG,CAAC"}
+{"version":3,"file":"watch.d.ts","sourceRoot":"","sources":["../../../src/components/watch.tsx"],"names":[],"mappings":"AAqMA,UAAU,UAAU;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED,eAAO,MAAM,KAAK,GAAI,wDAAuE,UAAU,4CAmetG,CAAC"}

package/dist/types/lib/jwt-auth.d.ts

@@ -79,8 +79,14 @@ export declare function resetJwtAuthProvider(): void;
 export declare function isAuthAvailable(): boolean;
 /**
  * Get the Authorization header if auth is available
- * Throws if there's an auth configuration error
- * Returns empty object with warning if no key is configured
+ * Returns empty object if no key is configured (server will reject if auth is required)
+ * Only throws for unexpected errors during token creation
  */
 export declare function getAuthHeader(): Promise<Record<string, string>>;
+/**
+ * Authenticated fetch wrapper for use with EventSource or other
+ * consumers that need a fetch function with automatic JWT authentication.
+ * Each fetch call gets a fresh JWT token (tokens have 30-second lifetime).
+ */
+export declare const authenticatedFetch: typeof fetch;
 //# sourceMappingURL=jwt-auth.d.ts.map

package/dist/types/lib/jwt-auth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"jwt-auth.d.ts","sourceRoot":"","sources":["../../../src/lib/jwt-auth.ts"],"names":[],"mappings":"AAuBA;;;;GAIG;AACH,qBAAa,eAAe;IAC1B,OAAO,CAAC,UAAU,CAAiC;IACnD,OAAO,CAAC,WAAW,CAAuB;IAC1C,OAAO,CAAC,WAAW,CAAS;IAC5B,OAAO,CAAC,SAAS,CAAsB;IAGvC,OAAO,CAAC,gBAAgB,CAAuB;IAC/C,OAAO,CAAC,WAAW,CAA4B;IAC/C,OAAO,CAAC,QAAQ,CAA0B;IAC1C,OAAO,CAAC,QAAQ,CAAS;;IAMzB,OAAO,CAAC,UAAU;IAqClB;;;;OAIG;IACH,OAAO,IAAI,OAAO;IAYlB;;OAEG;IACH,eAAe,IAAI,OAAO;IAI1B;;OAEG;IACH,QAAQ,IAAI,KAAK,GAAG,IAAI;IAIxB;;OAEG;IACH,cAAc,IAAI,MAAM,GAAG,IAAI;IAI/B;;OAEG;IACH,OAAO,CAAC,YAAY;IAQpB;;OAEG;IACH,OAAO,CAAC,sBAAsB;IAqB9B;;;;OAIG;IACH,OAAO,CAAC,WAAW;IAiCnB;;OAEG;IACG,WAAW,IAAI,OAAO,CAAC,MAAM,CAAC;IAoBpC;;OAEG;YACW,iBAAiB;IAwB/B;;OAEG;YACW,gBAAgB;IAwC9B;;;OAGG;YACW,oBAAoB;CAuCnC;AAKD;;GAEG;AACH,wBAAgB,kBAAkB,IAAI,eAAe,CAKpD;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,IAAI,IAAI,CAE3C;AAED;;GAEG;AACH,wBAAgB,eAAe,IAAI,OAAO,CAEzC;AAED;;;;GAIG;AACH,wBAAsB,aAAa,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAgBrE"}
+{"version":3,"file":"jwt-auth.d.ts","sourceRoot":"","sources":["../../../src/lib/jwt-auth.ts"],"names":[],"mappings":"AAuBA;;;;GAIG;AACH,qBAAa,eAAe;IAC1B,OAAO,CAAC,UAAU,CAAiC;IACnD,OAAO,CAAC,WAAW,CAAuB;IAC1C,OAAO,CAAC,WAAW,CAAS;IAC5B,OAAO,CAAC,SAAS,CAAsB;IAGvC,OAAO,CAAC,gBAAgB,CAAuB;IAC/C,OAAO,CAAC,WAAW,CAA4B;IAC/C,OAAO,CAAC,QAAQ,CAA0B;IAC1C,OAAO,CAAC,QAAQ,CAAS;;IAMzB,OAAO,CAAC,UAAU;IAqClB;;;;OAIG;IACH,OAAO,IAAI,OAAO;IAYlB;;OAEG;IACH,eAAe,IAAI,OAAO;IAI1B;;OAEG;IACH,QAAQ,IAAI,KAAK,GAAG,IAAI;IAIxB;;OAEG;IACH,cAAc,IAAI,MAAM,GAAG,IAAI;IAI/B;;OAEG;IACH,OAAO,CAAC,YAAY;IAQpB;;OAEG;IACH,OAAO,CAAC,sBAAsB;IAqB9B;;;;OAIG;IACH,OAAO,CAAC,WAAW;IAiCnB;;OAEG;IACG,WAAW,IAAI,OAAO,CAAC,MAAM,CAAC;IAoBpC;;OAEG;YACW,iBAAiB;IAwB/B;;OAEG;YACW,gBAAgB;IAwC9B;;;OAGG;YACW,oBAAoB;CAuCnC;AAKD;;GAEG;AACH,wBAAgB,kBAAkB,IAAI,eAAe,CAKpD;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,IAAI,IAAI,CAE3C;AAED;;GAEG;AACH,wBAAgB,eAAe,IAAI,OAAO,CAEzC;AAED;;;;GAIG;AACH,wBAAsB,aAAa,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAiBrE;AAED;;;;GAIG;AACH,eAAO,MAAM,kBAAkB,EAAE,OAAO,KAYvC,CAAC"}

package/dist/types/lib/ssh-key-utils.d.ts

@@ -44,4 +44,14 @@ export declare function resolvePrivateKeyPath(configuredPath?: string | null): s
  * Expand a path that may contain ~ to the full path
  */
 export declare function expandPath(keyPath: string): string;
+export interface GenerateSSHKeyResult {
+    success: boolean;
+    error?: string;
+    path: string;
+}
+/**
+ * Generate a new SSH key using ssh-keygen
+ * Creates an Ed25519 key with no passphrase
+ */
+export declare function generateSSHKey(keyPath?: string): GenerateSSHKeyResult;
 //# sourceMappingURL=ssh-key-utils.d.ts.map

package/dist/types/lib/ssh-key-utils.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ssh-key-utils.d.ts","sourceRoot":"","sources":["../../../src/lib/ssh-key-utils.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAI1B,OAAO,EAAmB,UAAU,EAAE,MAAM,QAAQ,CAAC;AAErD,MAAM,WAAW,UAAU;IACzB,GAAG,EAAE,UAAU,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;;GAGG;AACH,wBAAgB,eAAe,IAAI,aAAa,EAAE,CAkDjD;AA0CD;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,UAAU,EAAE,MAAM,GAAG,UAAU,CAiBpE;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,KAAK,CAAC,UAAU,CAyBnE;AAED;;GAEG;AACH,wBAAgB,wBAAwB,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,GAAG,MAAM,CAG7E;AAED;;;;GAIG;AACH,wBAAgB,uBAAuB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAIlE;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,CAoB5E;AAED;;GAEG;AACH,wBAAgB,UAAU,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAKlD"}
+{"version":3,"file":"ssh-key-utils.d.ts","sourceRoot":"","sources":["../../../src/lib/ssh-key-utils.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAI1B,OAAO,EAAmB,UAAU,EAAE,MAAM,QAAQ,CAAC;AAGrD,MAAM,WAAW,UAAU;IACzB,GAAG,EAAE,UAAU,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;;GAGG;AACH,wBAAgB,eAAe,IAAI,aAAa,EAAE,CAkDjD;AA0CD;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,UAAU,EAAE,MAAM,GAAG,UAAU,CAiBpE;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,KAAK,CAAC,UAAU,CAyBnE;AAED;;GAEG;AACH,wBAAgB,wBAAwB,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,GAAG,MAAM,CAG7E;AAED;;;;GAIG;AACH,wBAAgB,uBAAuB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAIlE;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,CAoB5E;AAED;;GAEG;AACH,wBAAgB,UAAU,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAKlD;AAED,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAC5B,OAAO,GAAE,MAA8C,GACtD,oBAAoB,CAuCtB"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@positronic/cli",
-  "version": "0.0.61",
+  "version": "0.0.62",
   "publishConfig": {
     "access": "public"
   },
@@ -23,9 +23,9 @@
     "clean": "rm -rf tsconfig.tsbuildinfo dist node_modules"
   },
   "dependencies": {
-    "@positronic/core": "^0.0.61",
-    "@positronic/spec": "^0.0.61",
-    "@positronic/template-new-project": "^0.0.61",
+    "@positronic/core": "^0.0.62",
+    "@positronic/spec": "^0.0.62",
+    "@positronic/template-new-project": "^0.0.62",
     "caz": "^2.0.0",
     "chokidar": "^3.6.0",
     "dotenv": "^16.4.7",