@ricsam/r5dctl 0.0.128 → 0.0.130

package/README.md

@@ -4,6 +4,8 @@ CLI for managing r5d.dev account instructions, environment variables, secret fil
 
 ## Installation
 
+Account management commands require version **0.0.129 or later**.
+
 ```bash
 npm install -g @ricsam/r5dctl
 ```

package/dist/cjs/account.cjs

@@ -0,0 +1,233 @@
+"use strict";
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var account_exports = {};
+__export(account_exports, {
+  ACCOUNT_HELP_ENTRIES: () => ACCOUNT_HELP_ENTRIES,
+  executeAccountCommand: () => executeAccountCommand,
+  getAccountHelp: () => getAccountHelp,
+  parseAccountCommand: () => parseAccountCommand
+});
+module.exports = __toCommonJS(account_exports);
+var import_node_fs = __toESM(require("node:fs"), 1);
+var import_node_os = __toESM(require("node:os"), 1);
+var import_node_path = __toESM(require("node:path"), 1);
+var import_r5d_api = require("@ricsam/r5d-api");
+const ACCOUNT_HELP_ENTRIES = [
+  { usage: "account instructions get", description: "Write account AGENTS.md exactly to stdout; --json prints its metadata and content." },
+  {
+    usage: "account instructions set (--file <path>|--stdin)",
+    description: "Replace account AGENTS.md, including clearing it with empty input."
+  },
+  { usage: "account env list", description: "List account environment variable metadata without revealing values." },
+  {
+    usage: "account env set <name> [--description <text>] [--value <value>|--file <path>|--stdin]",
+    description: "Set an account environment variable, or edit an existing entry's description."
+  },
+  { usage: "account env revoke <name>", description: "Remove the stored value while retaining its name and description." },
+  { usage: "account env delete <name>", description: "Delete an account environment entry." },
+  { usage: "account secrets list", description: "List account secret-file metadata without revealing contents." },
+  {
+    usage: "account secrets set <name> [--description <text>] [--file <path>|--stdin]",
+    description: "Store a secret file whose path is delivered through the named environment variable."
+  },
+  { usage: "account secrets revoke <name>", description: "Remove a stored secret file's contents while retaining its metadata." },
+  { usage: "account secrets delete <name>", description: "Delete an account secret-file entry." }
+];
+const VALUE_FLAGS = /* @__PURE__ */ new Set(["--value", "--file", "--description"]);
+function validateName(name) {
+  if (!name || !/^[A-Za-z_][A-Za-z0-9_]*$/.test(name) || name.length > 128)
+    throw new Error("Account entry names must be valid environment variable names of at most 128 characters");
+  if (/^R5D(?:CTL)?_/i.test(name)) throw new Error("R5D_ and R5DCTL_ account entry names are reserved for the platform");
+}
+function parseAccountCommand(args) {
+  const [group, action, ...operands] = args;
+  if (group !== "instructions" && group !== "env" && group !== "secrets") throw new Error("Unknown account command");
+  if (group === "instructions" && action === "get") {
+    if (operands.length) throw new Error("account instructions get does not accept arguments");
+    return { group, action };
+  }
+  if (group !== "instructions" && action === "list") {
+    if (operands.length) throw new Error("Account list commands do not accept arguments");
+    return { group, action };
+  }
+  if (action !== "set" && (group === "instructions" || action !== "revoke" && action !== "delete"))
+    throw new Error("Unknown account command");
+  const name = group === "instructions" ? void 0 : operands.shift();
+  if (group !== "instructions") validateName(name);
+  if (action === "revoke" || action === "delete") {
+    if (operands.length) throw new Error("Account revoke and delete commands accept only an entry name");
+    return { group, action, name };
+  }
+  const seen = /* @__PURE__ */ new Set();
+  let source;
+  let description;
+  for (let index = 0; index < operands.length; index += 1) {
+    const arg = operands[index];
+    const equals = arg.indexOf("=");
+    const flag = equals < 0 ? arg : arg.slice(0, equals);
+    if (flag !== "--stdin" && !VALUE_FLAGS.has(flag)) throw new Error("Unknown account set flag or extra argument");
+    if (seen.has(flag)) throw new Error(`${flag} may only be provided once`);
+    seen.add(flag);
+    if (flag === "--description" && group === "instructions") throw new Error("Account instructions do not accept --description");
+    if (flag === "--value" && group !== "env") throw new Error("--value is only supported by account env set; use --file or --stdin");
+    let value;
+    if (flag === "--stdin") {
+      if (equals >= 0) throw new Error("--stdin does not accept a value");
+    } else {
+      value = equals >= 0 ? arg.slice(equals + 1) : operands[++index];
+      if (value === void 0 || equals < 0 && (VALUE_FLAGS.has(value) || value === "--stdin"))
+        throw new Error(`Missing value for ${flag}`);
+    }
+    if (flag === "--description") {
+      if (!value?.trim() || value.trim().length > 2e3) throw new Error("--description must contain 1 to 2000 characters");
+      description = value.trim();
+      continue;
+    }
+    if (source) throw new Error("Provide exactly one value source: --value, --file, or --stdin");
+    if (flag === "--file") {
+      if (!value) throw new Error("Missing path for --file");
+      source = { kind: "file", path: value };
+    } else source = flag === "--stdin" ? { kind: "stdin" } : { kind: "value", value };
+  }
+  if (group === "instructions") {
+    if (!source) throw new Error("account instructions set requires exactly one of --file or --stdin");
+    return { group, action: "set", source };
+  }
+  return { group, action: "set", name, ...description !== void 0 ? { description } : {}, ...source ? { source } : {} };
+}
+function getAccountHelp(args) {
+  const prefix = ["account", ...args].join(" ");
+  const entries = ACCOUNT_HELP_ENTRIES.filter((entry) => entry.usage === prefix || entry.usage.startsWith(`${prefix} `));
+  if (!entries.length) throw new Error("Unknown account command");
+  return [
+    "Usage:",
+    ...entries.map((entry) => `  r5dctl ${entry.usage}
+    ${entry.description}`),
+    "",
+    "Account settings apply across all of your projects and workers; project, branch, and session flags do not narrow them.",
+    "New entries require a description and value source. Omit the value source to preserve an existing value.",
+    "Files and stdin are read only when explicitly selected. Input is preserved exactly; empty input clears instructions or sets an empty value.",
+    "Lists and mutation responses never print stored values. Revoke affects future command delivery; restart existing shells to refresh their environment.",
+    ""
+  ].join("\n");
+}
+function readSource(source) {
+  if (source.kind === "value") return source.value;
+  try {
+    const location = source.kind === "stdin" ? 0 : source.path.startsWith("~/") ? import_node_path.default.join(import_node_os.default.homedir(), source.path.slice(2)) : source.path;
+    return new TextDecoder("utf-8", { fatal: true, ignoreBOM: true }).decode(import_node_fs.default.readFileSync(location));
+  } catch {
+    throw new Error(source.kind === "stdin" ? "Could not read UTF-8 input from stdin" : "Could not read the input file as UTF-8");
+  }
+}
+function metadata(entry) {
+  return {
+    id: entry.id,
+    name: entry.name,
+    description: entry.description,
+    kind: entry.kind,
+    configured: entry.configured,
+    updatedAt: entry.updatedAt
+  };
+}
+async function accountRequest(request) {
+  try {
+    return await request();
+  } catch (error) {
+    throw new Error(
+      error instanceof import_r5d_api.R5dctlApiError ? `Account settings request failed (HTTP ${error.status})` : "Account settings request failed"
+    );
+  }
+}
+async function executeAccountCommand(client, command, json) {
+  const write = (data, human) => process.stdout.write(json ? `${JSON.stringify(data, null, 2)}
+` : human);
+  if (command.group === "instructions") {
+    if (command.action === "get") {
+      const result = await accountRequest(() => client.account.instructions.get());
+      write({ content: result.content, updatedAt: result.updatedAt }, result.content);
+    } else {
+      const content = readSource(command.source);
+      if (content.length > 1e5) throw new Error("Account instructions exceed the 100000 character limit");
+      const result = await accountRequest(() => client.account.instructions.set(content));
+      write({ success: true, updatedAt: result.updatedAt }, "Account instructions saved.\n");
+    }
+    return;
+  }
+  const kind = command.group === "env" ? "env" : "file";
+  const settings = await accountRequest(() => client.account.getSettings());
+  if (command.action === "list") {
+    const entries = settings.entries.filter((entry2) => entry2.kind === kind).map(metadata);
+    write(
+      { entries },
+      entries.length ? `${entries.map((entry2) => `${entry2.name}	${entry2.configured ? "set" : "unset"}	${JSON.stringify(entry2.description)}`).join("\n")}
+` : "No account entries.\n"
+    );
+    return;
+  }
+  const entry = settings.entries.find((candidate) => candidate.name === command.name);
+  if (entry && entry.kind !== kind) throw new Error("This name belongs to the other account entry kind; use its env or secrets commands");
+  if (command.action === "set") {
+    if (!entry && command.description === void 0) throw new Error("New account entries require --description");
+    if (!entry && !command.source) throw new Error("New account entries require a value source");
+    if (entry && !command.source && command.description === void 0)
+      throw new Error("Provide a value source or --description to update the entry");
+    const value = command.source ? readSource(command.source) : void 0;
+    if (value !== void 0 && (value.length > 1048576 || value.includes("\0")))
+      throw new Error("Account values must contain at most 1048576 characters and cannot contain NUL characters");
+    await accountRequest(
+      () => client.account.environment.save({
+        ...entry ? { id: entry.id } : {},
+        name: command.name,
+        kind,
+        description: command.description ?? entry.description,
+        ...value !== void 0 ? { value } : {}
+      })
+    );
+    write({ success: true, name: command.name, kind }, `Account entry ${command.name} saved.
+`);
+  } else {
+    if (!entry) throw new Error("Account entry not found");
+    await accountRequest(
+      () => command.action === "revoke" ? client.account.environment.revoke(entry.id) : client.account.environment.delete(entry.id)
+    );
+    write(
+      { success: true, name: command.name, kind },
+      `Account entry ${command.name} ${command.action === "revoke" ? "revoked" : "deleted"}.
+`
+    );
+  }
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  ACCOUNT_HELP_ENTRIES,
+  executeAccountCommand,
+  getAccountHelp,
+  parseAccountCommand
+});

package/dist/cjs/package.json

@@ -1,5 +1,5 @@
 {
   "name": "@ricsam/r5dctl",
-  "version": "0.0.128",
+  "version": "0.0.130",
   "type": "commonjs"
 }

package/dist/mjs/account.mjs

@@ -0,0 +1,196 @@
+import fs from "node:fs";
+import os from "node:os";
+import path from "node:path";
+import { R5dctlApiError } from "@ricsam/r5d-api";
+const ACCOUNT_HELP_ENTRIES = [
+  { usage: "account instructions get", description: "Write account AGENTS.md exactly to stdout; --json prints its metadata and content." },
+  {
+    usage: "account instructions set (--file <path>|--stdin)",
+    description: "Replace account AGENTS.md, including clearing it with empty input."
+  },
+  { usage: "account env list", description: "List account environment variable metadata without revealing values." },
+  {
+    usage: "account env set <name> [--description <text>] [--value <value>|--file <path>|--stdin]",
+    description: "Set an account environment variable, or edit an existing entry's description."
+  },
+  { usage: "account env revoke <name>", description: "Remove the stored value while retaining its name and description." },
+  { usage: "account env delete <name>", description: "Delete an account environment entry." },
+  { usage: "account secrets list", description: "List account secret-file metadata without revealing contents." },
+  {
+    usage: "account secrets set <name> [--description <text>] [--file <path>|--stdin]",
+    description: "Store a secret file whose path is delivered through the named environment variable."
+  },
+  { usage: "account secrets revoke <name>", description: "Remove a stored secret file's contents while retaining its metadata." },
+  { usage: "account secrets delete <name>", description: "Delete an account secret-file entry." }
+];
+const VALUE_FLAGS = /* @__PURE__ */ new Set(["--value", "--file", "--description"]);
+function validateName(name) {
+  if (!name || !/^[A-Za-z_][A-Za-z0-9_]*$/.test(name) || name.length > 128)
+    throw new Error("Account entry names must be valid environment variable names of at most 128 characters");
+  if (/^R5D(?:CTL)?_/i.test(name)) throw new Error("R5D_ and R5DCTL_ account entry names are reserved for the platform");
+}
+function parseAccountCommand(args) {
+  const [group, action, ...operands] = args;
+  if (group !== "instructions" && group !== "env" && group !== "secrets") throw new Error("Unknown account command");
+  if (group === "instructions" && action === "get") {
+    if (operands.length) throw new Error("account instructions get does not accept arguments");
+    return { group, action };
+  }
+  if (group !== "instructions" && action === "list") {
+    if (operands.length) throw new Error("Account list commands do not accept arguments");
+    return { group, action };
+  }
+  if (action !== "set" && (group === "instructions" || action !== "revoke" && action !== "delete"))
+    throw new Error("Unknown account command");
+  const name = group === "instructions" ? void 0 : operands.shift();
+  if (group !== "instructions") validateName(name);
+  if (action === "revoke" || action === "delete") {
+    if (operands.length) throw new Error("Account revoke and delete commands accept only an entry name");
+    return { group, action, name };
+  }
+  const seen = /* @__PURE__ */ new Set();
+  let source;
+  let description;
+  for (let index = 0; index < operands.length; index += 1) {
+    const arg = operands[index];
+    const equals = arg.indexOf("=");
+    const flag = equals < 0 ? arg : arg.slice(0, equals);
+    if (flag !== "--stdin" && !VALUE_FLAGS.has(flag)) throw new Error("Unknown account set flag or extra argument");
+    if (seen.has(flag)) throw new Error(`${flag} may only be provided once`);
+    seen.add(flag);
+    if (flag === "--description" && group === "instructions") throw new Error("Account instructions do not accept --description");
+    if (flag === "--value" && group !== "env") throw new Error("--value is only supported by account env set; use --file or --stdin");
+    let value;
+    if (flag === "--stdin") {
+      if (equals >= 0) throw new Error("--stdin does not accept a value");
+    } else {
+      value = equals >= 0 ? arg.slice(equals + 1) : operands[++index];
+      if (value === void 0 || equals < 0 && (VALUE_FLAGS.has(value) || value === "--stdin"))
+        throw new Error(`Missing value for ${flag}`);
+    }
+    if (flag === "--description") {
+      if (!value?.trim() || value.trim().length > 2e3) throw new Error("--description must contain 1 to 2000 characters");
+      description = value.trim();
+      continue;
+    }
+    if (source) throw new Error("Provide exactly one value source: --value, --file, or --stdin");
+    if (flag === "--file") {
+      if (!value) throw new Error("Missing path for --file");
+      source = { kind: "file", path: value };
+    } else source = flag === "--stdin" ? { kind: "stdin" } : { kind: "value", value };
+  }
+  if (group === "instructions") {
+    if (!source) throw new Error("account instructions set requires exactly one of --file or --stdin");
+    return { group, action: "set", source };
+  }
+  return { group, action: "set", name, ...description !== void 0 ? { description } : {}, ...source ? { source } : {} };
+}
+function getAccountHelp(args) {
+  const prefix = ["account", ...args].join(" ");
+  const entries = ACCOUNT_HELP_ENTRIES.filter((entry) => entry.usage === prefix || entry.usage.startsWith(`${prefix} `));
+  if (!entries.length) throw new Error("Unknown account command");
+  return [
+    "Usage:",
+    ...entries.map((entry) => `  r5dctl ${entry.usage}
+    ${entry.description}`),
+    "",
+    "Account settings apply across all of your projects and workers; project, branch, and session flags do not narrow them.",
+    "New entries require a description and value source. Omit the value source to preserve an existing value.",
+    "Files and stdin are read only when explicitly selected. Input is preserved exactly; empty input clears instructions or sets an empty value.",
+    "Lists and mutation responses never print stored values. Revoke affects future command delivery; restart existing shells to refresh their environment.",
+    ""
+  ].join("\n");
+}
+function readSource(source) {
+  if (source.kind === "value") return source.value;
+  try {
+    const location = source.kind === "stdin" ? 0 : source.path.startsWith("~/") ? path.join(os.homedir(), source.path.slice(2)) : source.path;
+    return new TextDecoder("utf-8", { fatal: true, ignoreBOM: true }).decode(fs.readFileSync(location));
+  } catch {
+    throw new Error(source.kind === "stdin" ? "Could not read UTF-8 input from stdin" : "Could not read the input file as UTF-8");
+  }
+}
+function metadata(entry) {
+  return {
+    id: entry.id,
+    name: entry.name,
+    description: entry.description,
+    kind: entry.kind,
+    configured: entry.configured,
+    updatedAt: entry.updatedAt
+  };
+}
+async function accountRequest(request) {
+  try {
+    return await request();
+  } catch (error) {
+    throw new Error(
+      error instanceof R5dctlApiError ? `Account settings request failed (HTTP ${error.status})` : "Account settings request failed"
+    );
+  }
+}
+async function executeAccountCommand(client, command, json) {
+  const write = (data, human) => process.stdout.write(json ? `${JSON.stringify(data, null, 2)}
+` : human);
+  if (command.group === "instructions") {
+    if (command.action === "get") {
+      const result = await accountRequest(() => client.account.instructions.get());
+      write({ content: result.content, updatedAt: result.updatedAt }, result.content);
+    } else {
+      const content = readSource(command.source);
+      if (content.length > 1e5) throw new Error("Account instructions exceed the 100000 character limit");
+      const result = await accountRequest(() => client.account.instructions.set(content));
+      write({ success: true, updatedAt: result.updatedAt }, "Account instructions saved.\n");
+    }
+    return;
+  }
+  const kind = command.group === "env" ? "env" : "file";
+  const settings = await accountRequest(() => client.account.getSettings());
+  if (command.action === "list") {
+    const entries = settings.entries.filter((entry2) => entry2.kind === kind).map(metadata);
+    write(
+      { entries },
+      entries.length ? `${entries.map((entry2) => `${entry2.name}	${entry2.configured ? "set" : "unset"}	${JSON.stringify(entry2.description)}`).join("\n")}
+` : "No account entries.\n"
+    );
+    return;
+  }
+  const entry = settings.entries.find((candidate) => candidate.name === command.name);
+  if (entry && entry.kind !== kind) throw new Error("This name belongs to the other account entry kind; use its env or secrets commands");
+  if (command.action === "set") {
+    if (!entry && command.description === void 0) throw new Error("New account entries require --description");
+    if (!entry && !command.source) throw new Error("New account entries require a value source");
+    if (entry && !command.source && command.description === void 0)
+      throw new Error("Provide a value source or --description to update the entry");
+    const value = command.source ? readSource(command.source) : void 0;
+    if (value !== void 0 && (value.length > 1048576 || value.includes("\0")))
+      throw new Error("Account values must contain at most 1048576 characters and cannot contain NUL characters");
+    await accountRequest(
+      () => client.account.environment.save({
+        ...entry ? { id: entry.id } : {},
+        name: command.name,
+        kind,
+        description: command.description ?? entry.description,
+        ...value !== void 0 ? { value } : {}
+      })
+    );
+    write({ success: true, name: command.name, kind }, `Account entry ${command.name} saved.
+`);
+  } else {
+    if (!entry) throw new Error("Account entry not found");
+    await accountRequest(
+      () => command.action === "revoke" ? client.account.environment.revoke(entry.id) : client.account.environment.delete(entry.id)
+    );
+    write(
+      { success: true, name: command.name, kind },
+      `Account entry ${command.name} ${command.action === "revoke" ? "revoked" : "deleted"}.
+`
+    );
+  }
+}
+export {
+  ACCOUNT_HELP_ENTRIES,
+  executeAccountCommand,
+  getAccountHelp,
+  parseAccountCommand
+};

package/dist/mjs/package.json

@@ -1,5 +1,5 @@
 {
   "name": "@ricsam/r5dctl",
-  "version": "0.0.128",
+  "version": "0.0.130",
   "type": "module"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ricsam/r5dctl",
-  "version": "0.0.128",
+  "version": "0.0.130",
   "type": "module",
   "main": "./dist/cjs/cli.cjs",
   "module": "./dist/mjs/cli.mjs",
@@ -26,7 +26,7 @@
     "r5dctl": "dist/cjs/main.cjs"
   },
   "dependencies": {
-    "@ricsam/r5d-api": "^0.0.128",
+    "@ricsam/r5d-api": "^0.0.130",
     "dotenv": "^17",
     "qrcode": "^1.5.4",
     "ws": "^8.18.3"