@runcofactor/cli 0.10.0

package/dist/credential-template-EEPYFG7R.js

@@ -0,0 +1,291 @@
+import { createRequire as __cr } from "module"; const require = __cr(import.meta.url);
+import {
+  apiRequest,
+  fetchProperties,
+  getApplicationArg
+} from "./chunk-WOHL4FTB.js";
+import "./chunk-SJJW77WN.js";
+import "./chunk-3CZU7XCS.js";
+import {
+  getArgValue,
+  hasFlag,
+  resolveConfig
+} from "./chunk-A4OFTUVV.js";
+import "./chunk-JWHYXEA2.js";
+import "./chunk-VKVL7WBN.js";
+
+// src/credential-template.ts
+import process from "process";
+function printHelp() {
+  console.log(
+    [
+      "Usage: canary credential-template <sub-command> [options]",
+      "",
+      "Sub-commands: (--application accepted as --app; --property is a backwards-compat alias)",
+      "  list --application <name|id>           List templates on an application",
+      "  create --application <name|id> --name <name> [--description <text>]",
+      "  show --application <name|id> <templateId>  Show template + its bindings",
+      "  rename --application <name|id> <templateId> --name <new-name>",
+      "  delete --application <name|id> <templateId>",
+      "  link --application <name|id> <templateId> --credential <credId>",
+      "  unlink --application <name|id> <templateId> --credential <credId>",
+      "",
+      "Common options:",
+      "  --json               Output raw JSON",
+      "  --env <env>          Target environment (prod, dev, local)",
+      "  --api-url <url>      API URL override",
+      "  --token <key>        API token override"
+    ].join("\n")
+  );
+}
+function getPositionalArg(argv, flagsWithValues) {
+  const skip = /* @__PURE__ */ new Set();
+  for (let i = 0; i < argv.length; i++) {
+    if (flagsWithValues.includes(argv[i]) && i + 1 < argv.length) {
+      skip.add(i);
+      skip.add(i + 1);
+    }
+  }
+  for (let i = 0; i < argv.length; i++) {
+    if (skip.has(i)) continue;
+    const a = argv[i];
+    if (!a.startsWith("-")) return a;
+  }
+  return void 0;
+}
+var TEMPLATE_FLAGS = [
+  "--application",
+  "--property",
+  "--credential",
+  "--name",
+  "--description",
+  "--env",
+  "--api-url",
+  "--token"
+];
+async function resolveProperty(apiUrl, token, arg) {
+  const properties = await fetchProperties(apiUrl, token);
+  const property = properties.find(
+    (p) => p.id === arg || p.name.toLowerCase() === arg.toLowerCase()
+  );
+  if (!property) {
+    console.error(`Error: Application "${arg}" not found.`);
+    process.exit(1);
+  }
+  return property;
+}
+async function handleList(argv, apiUrl, token) {
+  const propertyArg = getApplicationArg(argv);
+  const jsonFlag = hasFlag(argv, "--json");
+  if (!propertyArg) {
+    console.error("Error: --application is required (alias: --property).");
+    process.exit(1);
+  }
+  const property = await resolveProperty(apiUrl, token, propertyArg);
+  const result = await apiRequest(
+    apiUrl,
+    token,
+    "GET",
+    `/org/properties/${property.id}/credential-templates`
+  );
+  if (!result.ok) {
+    console.error(`Error: ${result.error ?? "Failed to list templates"}`);
+    process.exit(1);
+  }
+  const items = result.items ?? [];
+  if (jsonFlag) {
+    console.log(JSON.stringify(items, null, 2));
+    return;
+  }
+  if (items.length === 0) {
+    console.log(`No credential templates on application "${property.name}".`);
+    return;
+  }
+  for (const t of items) {
+    console.log(`${t.id}  ${t.name}${t.description ? ` \u2014 ${t.description}` : ""}`);
+  }
+}
+async function handleCreate(argv, apiUrl, token) {
+  const propertyArg = getApplicationArg(argv);
+  const name = getArgValue(argv, "--name");
+  const description = getArgValue(argv, "--description");
+  const jsonFlag = hasFlag(argv, "--json");
+  if (!propertyArg || !name) {
+    console.error("Error: --application and --name are required.");
+    process.exit(1);
+  }
+  const property = await resolveProperty(apiUrl, token, propertyArg);
+  const result = await apiRequest(
+    apiUrl,
+    token,
+    "POST",
+    `/org/properties/${property.id}/credential-templates`,
+    { name, description: description ?? null }
+  );
+  if (!result.ok || !result.template) {
+    console.error(`Error: ${result.error ?? "Failed to create template"}`);
+    process.exit(1);
+  }
+  if (jsonFlag) {
+    console.log(JSON.stringify(result.template, null, 2));
+    return;
+  }
+  console.log(`Created template "${result.template.name}" (${result.template.id})`);
+}
+async function handleShow(argv, apiUrl, token) {
+  const propertyArg = getApplicationArg(argv);
+  const templateId = getPositionalArg(argv, TEMPLATE_FLAGS);
+  const jsonFlag = hasFlag(argv, "--json");
+  if (!propertyArg || !templateId) {
+    console.error("Error: --application and <templateId> are required.");
+    process.exit(1);
+  }
+  const property = await resolveProperty(apiUrl, token, propertyArg);
+  const result = await apiRequest(
+    apiUrl,
+    token,
+    "GET",
+    `/org/properties/${property.id}/credential-templates/${templateId}`
+  );
+  if (!result.ok || !result.template) {
+    console.error(`Error: ${result.error ?? "Failed to fetch template"}`);
+    process.exit(1);
+  }
+  if (jsonFlag) {
+    console.log(JSON.stringify(result, null, 2));
+    return;
+  }
+  const t = result.template;
+  console.log(`${t.name} (${t.id})`);
+  if (t.description) console.log(`  ${t.description}`);
+  console.log(`Bindings (${result.bindings?.length ?? 0}):`);
+  for (const b of result.bindings ?? []) {
+    const env = b.environmentId ?? "(no env)";
+    const eph = b.isEphemeral ? " [ephemeral]" : "";
+    console.log(`  ${b.id}  env=${env}  ${b.name}${eph}`);
+  }
+}
+async function handleRename(argv, apiUrl, token) {
+  const propertyArg = getApplicationArg(argv);
+  const newName = getArgValue(argv, "--name");
+  const templateId = getPositionalArg(argv, TEMPLATE_FLAGS);
+  if (!propertyArg || !templateId || !newName) {
+    console.error("Error: --application, <templateId>, and --name are required.");
+    process.exit(1);
+  }
+  const property = await resolveProperty(apiUrl, token, propertyArg);
+  const result = await apiRequest(
+    apiUrl,
+    token,
+    "PATCH",
+    `/org/properties/${property.id}/credential-templates/${templateId}`,
+    { name: newName }
+  );
+  if (!result.ok) {
+    console.error(`Error: ${result.error ?? "Failed to rename template"}`);
+    process.exit(1);
+  }
+  console.log(`Renamed template ${templateId} \u2192 "${newName}"`);
+}
+async function handleDelete(argv, apiUrl, token) {
+  const propertyArg = getApplicationArg(argv);
+  const templateId = getPositionalArg(argv, TEMPLATE_FLAGS);
+  if (!propertyArg || !templateId) {
+    console.error("Error: --application and <templateId> are required.");
+    process.exit(1);
+  }
+  const property = await resolveProperty(apiUrl, token, propertyArg);
+  const result = await apiRequest(
+    apiUrl,
+    token,
+    "DELETE",
+    `/org/properties/${property.id}/credential-templates/${templateId}`
+  );
+  if (!result.ok) {
+    console.error(`Error: ${result.error ?? "Failed to delete template"}`);
+    process.exit(1);
+  }
+  console.log(`Deleted template ${templateId}`);
+}
+async function handleLink(argv, apiUrl, token) {
+  const propertyArg = getApplicationArg(argv);
+  const credentialId = getArgValue(argv, "--credential");
+  const templateId = getPositionalArg(argv, TEMPLATE_FLAGS);
+  if (!propertyArg || !templateId || !credentialId) {
+    console.error("Error: --application, <templateId>, and --credential are required.");
+    process.exit(1);
+  }
+  const property = await resolveProperty(apiUrl, token, propertyArg);
+  const result = await apiRequest(
+    apiUrl,
+    token,
+    "POST",
+    `/org/properties/${property.id}/credential-templates/${templateId}/bindings`,
+    { credentialId }
+  );
+  if (!result.ok) {
+    console.error(`Error: ${result.error ?? "Failed to link credential"}`);
+    process.exit(1);
+  }
+  console.log(`Linked credential ${credentialId} to template ${templateId}`);
+}
+async function handleUnlink(argv, apiUrl, token) {
+  const propertyArg = getApplicationArg(argv);
+  const credentialId = getArgValue(argv, "--credential");
+  const templateId = getPositionalArg(argv, TEMPLATE_FLAGS);
+  if (!propertyArg || !templateId || !credentialId) {
+    console.error("Error: --application, <templateId>, and --credential are required.");
+    process.exit(1);
+  }
+  const property = await resolveProperty(apiUrl, token, propertyArg);
+  const result = await apiRequest(
+    apiUrl,
+    token,
+    "DELETE",
+    `/org/properties/${property.id}/credential-templates/${templateId}/bindings/${credentialId}`
+  );
+  if (!result.ok) {
+    console.error(`Error: ${result.error ?? "Failed to unlink credential"}`);
+    process.exit(1);
+  }
+  console.log(`Unlinked credential ${credentialId} from template ${templateId}`);
+}
+async function runCredentialTemplate(argv) {
+  const [subCommand, ...rest] = argv;
+  if (!subCommand || subCommand === "help" || hasFlag(argv, "--help", "-h")) {
+    printHelp();
+    return;
+  }
+  const { apiUrl, token } = await resolveConfig(rest);
+  switch (subCommand) {
+    case "list":
+      await handleList(rest, apiUrl, token);
+      return;
+    case "create":
+      await handleCreate(rest, apiUrl, token);
+      return;
+    case "show":
+      await handleShow(rest, apiUrl, token);
+      return;
+    case "rename":
+      await handleRename(rest, apiUrl, token);
+      return;
+    case "delete":
+      await handleDelete(rest, apiUrl, token);
+      return;
+    case "link":
+      await handleLink(rest, apiUrl, token);
+      return;
+    case "unlink":
+      await handleUnlink(rest, apiUrl, token);
+      return;
+    default:
+      console.error(`Unknown credential-template sub-command: ${subCommand}`);
+      printHelp();
+      process.exit(1);
+  }
+}
+export {
+  runCredentialTemplate
+};
+//# sourceMappingURL=credential-template-EEPYFG7R.js.map

package/dist/credential-template-EEPYFG7R.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/credential-template.ts"],"sourcesContent":["/**\n * CLI Credential Template Commands\n *\n * Manage property-scoped credential templates (logical credential identities\n * that group per-environment concrete credential bindings).\n *\n * @module credential-template\n */\n\nimport process from 'node:process';\nimport { resolveConfig, getArgValue, hasFlag } from './auth.js';\nimport { apiRequest, fetchProperties, getApplicationArg } from './cli-helpers.js';\n\ntype Template = {\n  id: string;\n  propertyId: string;\n  name: string;\n  description: string | null;\n  createdAt: string;\n  updatedAt: string;\n};\n\ntype Binding = {\n  id: string;\n  name: string;\n  environmentId: string | null;\n  isEphemeral: boolean;\n  templateId: string | null;\n};\n\nfunction printHelp(): void {\n  console.log(\n    [\n      'Usage: canary credential-template <sub-command> [options]',\n      '',\n      'Sub-commands: (--application accepted as --app; --property is a backwards-compat alias)',\n      '  list --application <name|id>           List templates on an application',\n      '  create --application <name|id> --name <name> [--description <text>]',\n      '  show --application <name|id> <templateId>  Show template + its bindings',\n      '  rename --application <name|id> <templateId> --name <new-name>',\n      '  delete --application <name|id> <templateId>',\n      '  link --application <name|id> <templateId> --credential <credId>',\n      '  unlink --application <name|id> <templateId> --credential <credId>',\n      '',\n      'Common options:',\n      '  --json               Output raw JSON',\n      '  --env <env>          Target environment (prod, dev, local)',\n      '  --api-url <url>      API URL override',\n      '  --token <key>        API token override',\n    ].join('\\n')\n  );\n}\n\n/**\n * Return the first positional argument, excluding values consumed by the given\n * `--flag value` pairs. Prior implementation used `argv.find(a => !a.startsWith('-'))`\n * which incorrectly returned the value of `--property` (the first flag value) as\n * the templateId.\n */\nfunction getPositionalArg(argv: string[], flagsWithValues: string[]): string | undefined {\n  const skip = new Set<number>();\n  for (let i = 0; i < argv.length; i++) {\n    if (flagsWithValues.includes(argv[i]!) && i + 1 < argv.length) {\n      skip.add(i);\n      skip.add(i + 1);\n    }\n  }\n  for (let i = 0; i < argv.length; i++) {\n    if (skip.has(i)) continue;\n    const a = argv[i]!;\n    if (!a.startsWith('-')) return a;\n  }\n  return undefined;\n}\n\nconst TEMPLATE_FLAGS = [\n  '--application',\n  '--property',\n  '--credential',\n  '--name',\n  '--description',\n  '--env',\n  '--api-url',\n  '--token',\n];\n\nasync function resolveProperty(\n  apiUrl: string,\n  token: string,\n  arg: string\n): Promise<{ id: string; name: string }> {\n  const properties = await fetchProperties(apiUrl, token);\n  const property = properties.find(\n    (p) => p.id === arg || p.name.toLowerCase() === arg.toLowerCase()\n  );\n  if (!property) {\n    console.error(`Error: Application \"${arg}\" not found.`);\n    process.exit(1);\n  }\n  return property;\n}\n\nasync function handleList(argv: string[], apiUrl: string, token: string): Promise<void> {\n  const propertyArg = getApplicationArg(argv);\n  const jsonFlag = hasFlag(argv, '--json');\n  if (!propertyArg) {\n    console.error('Error: --application is required (alias: --property).');\n    process.exit(1);\n  }\n  const property = await resolveProperty(apiUrl, token, propertyArg);\n  const result = await apiRequest<{ ok: boolean; items?: Template[]; error?: string }>(\n    apiUrl,\n    token,\n    'GET',\n    `/org/properties/${property.id}/credential-templates`\n  );\n  if (!result.ok) {\n    console.error(`Error: ${result.error ?? 'Failed to list templates'}`);\n    process.exit(1);\n  }\n  const items = result.items ?? [];\n  if (jsonFlag) {\n    console.log(JSON.stringify(items, null, 2));\n    return;\n  }\n  if (items.length === 0) {\n    console.log(`No credential templates on application \"${property.name}\".`);\n    return;\n  }\n  for (const t of items) {\n    console.log(`${t.id}  ${t.name}${t.description ? ` — ${t.description}` : ''}`);\n  }\n}\n\nasync function handleCreate(argv: string[], apiUrl: string, token: string): Promise<void> {\n  const propertyArg = getApplicationArg(argv);\n  const name = getArgValue(argv, '--name');\n  const description = getArgValue(argv, '--description');\n  const jsonFlag = hasFlag(argv, '--json');\n\n  if (!propertyArg || !name) {\n    console.error('Error: --application and --name are required.');\n    process.exit(1);\n  }\n  const property = await resolveProperty(apiUrl, token, propertyArg);\n  const result = await apiRequest<{ ok: boolean; template?: Template; error?: string }>(\n    apiUrl,\n    token,\n    'POST',\n    `/org/properties/${property.id}/credential-templates`,\n    { name, description: description ?? null }\n  );\n  if (!result.ok || !result.template) {\n    console.error(`Error: ${result.error ?? 'Failed to create template'}`);\n    process.exit(1);\n  }\n  if (jsonFlag) {\n    console.log(JSON.stringify(result.template, null, 2));\n    return;\n  }\n  console.log(`Created template \"${result.template.name}\" (${result.template.id})`);\n}\n\nasync function handleShow(argv: string[], apiUrl: string, token: string): Promise<void> {\n  const propertyArg = getApplicationArg(argv);\n  const templateId = getPositionalArg(argv, TEMPLATE_FLAGS);\n  const jsonFlag = hasFlag(argv, '--json');\n\n  if (!propertyArg || !templateId) {\n    console.error('Error: --application and <templateId> are required.');\n    process.exit(1);\n  }\n  const property = await resolveProperty(apiUrl, token, propertyArg);\n  const result = await apiRequest<{\n    ok: boolean;\n    template?: Template;\n    bindings?: Binding[];\n    error?: string;\n  }>(\n    apiUrl,\n    token,\n    'GET',\n    `/org/properties/${property.id}/credential-templates/${templateId}`\n  );\n  if (!result.ok || !result.template) {\n    console.error(`Error: ${result.error ?? 'Failed to fetch template'}`);\n    process.exit(1);\n  }\n  if (jsonFlag) {\n    console.log(JSON.stringify(result, null, 2));\n    return;\n  }\n  const t = result.template;\n  console.log(`${t.name} (${t.id})`);\n  if (t.description) console.log(`  ${t.description}`);\n  console.log(`Bindings (${result.bindings?.length ?? 0}):`);\n  for (const b of result.bindings ?? []) {\n    const env = b.environmentId ?? '(no env)';\n    const eph = b.isEphemeral ? ' [ephemeral]' : '';\n    console.log(`  ${b.id}  env=${env}  ${b.name}${eph}`);\n  }\n}\n\nasync function handleRename(argv: string[], apiUrl: string, token: string): Promise<void> {\n  const propertyArg = getApplicationArg(argv);\n  const newName = getArgValue(argv, '--name');\n  const templateId = getPositionalArg(argv, TEMPLATE_FLAGS);\n  if (!propertyArg || !templateId || !newName) {\n    console.error('Error: --application, <templateId>, and --name are required.');\n    process.exit(1);\n  }\n  const property = await resolveProperty(apiUrl, token, propertyArg);\n  const result = await apiRequest<{ ok: boolean; template?: Template; error?: string }>(\n    apiUrl,\n    token,\n    'PATCH',\n    `/org/properties/${property.id}/credential-templates/${templateId}`,\n    { name: newName }\n  );\n  if (!result.ok) {\n    console.error(`Error: ${result.error ?? 'Failed to rename template'}`);\n    process.exit(1);\n  }\n  console.log(`Renamed template ${templateId} → \"${newName}\"`);\n}\n\nasync function handleDelete(argv: string[], apiUrl: string, token: string): Promise<void> {\n  const propertyArg = getApplicationArg(argv);\n  const templateId = getPositionalArg(argv, TEMPLATE_FLAGS);\n  if (!propertyArg || !templateId) {\n    console.error('Error: --application and <templateId> are required.');\n    process.exit(1);\n  }\n  const property = await resolveProperty(apiUrl, token, propertyArg);\n  const result = await apiRequest<{ ok: boolean; error?: string }>(\n    apiUrl,\n    token,\n    'DELETE',\n    `/org/properties/${property.id}/credential-templates/${templateId}`\n  );\n  if (!result.ok) {\n    console.error(`Error: ${result.error ?? 'Failed to delete template'}`);\n    process.exit(1);\n  }\n  console.log(`Deleted template ${templateId}`);\n}\n\nasync function handleLink(argv: string[], apiUrl: string, token: string): Promise<void> {\n  const propertyArg = getApplicationArg(argv);\n  const credentialId = getArgValue(argv, '--credential');\n  const templateId = getPositionalArg(argv, TEMPLATE_FLAGS);\n  if (!propertyArg || !templateId || !credentialId) {\n    console.error('Error: --application, <templateId>, and --credential are required.');\n    process.exit(1);\n  }\n  const property = await resolveProperty(apiUrl, token, propertyArg);\n  const result = await apiRequest<{ ok: boolean; error?: string }>(\n    apiUrl,\n    token,\n    'POST',\n    `/org/properties/${property.id}/credential-templates/${templateId}/bindings`,\n    { credentialId }\n  );\n  if (!result.ok) {\n    console.error(`Error: ${result.error ?? 'Failed to link credential'}`);\n    process.exit(1);\n  }\n  console.log(`Linked credential ${credentialId} to template ${templateId}`);\n}\n\nasync function handleUnlink(argv: string[], apiUrl: string, token: string): Promise<void> {\n  const propertyArg = getApplicationArg(argv);\n  const credentialId = getArgValue(argv, '--credential');\n  const templateId = getPositionalArg(argv, TEMPLATE_FLAGS);\n  if (!propertyArg || !templateId || !credentialId) {\n    console.error('Error: --application, <templateId>, and --credential are required.');\n    process.exit(1);\n  }\n  const property = await resolveProperty(apiUrl, token, propertyArg);\n  const result = await apiRequest<{ ok: boolean; error?: string }>(\n    apiUrl,\n    token,\n    'DELETE',\n    `/org/properties/${property.id}/credential-templates/${templateId}/bindings/${credentialId}`\n  );\n  if (!result.ok) {\n    console.error(`Error: ${result.error ?? 'Failed to unlink credential'}`);\n    process.exit(1);\n  }\n  console.log(`Unlinked credential ${credentialId} from template ${templateId}`);\n}\n\nexport async function runCredentialTemplate(argv: string[]): Promise<void> {\n  const [subCommand, ...rest] = argv;\n\n  if (!subCommand || subCommand === 'help' || hasFlag(argv, '--help', '-h')) {\n    printHelp();\n    return;\n  }\n\n  const { apiUrl, token } = await resolveConfig(rest);\n\n  switch (subCommand) {\n    case 'list':\n      await handleList(rest, apiUrl, token);\n      return;\n    case 'create':\n      await handleCreate(rest, apiUrl, token);\n      return;\n    case 'show':\n      await handleShow(rest, apiUrl, token);\n      return;\n    case 'rename':\n      await handleRename(rest, apiUrl, token);\n      return;\n    case 'delete':\n      await handleDelete(rest, apiUrl, token);\n      return;\n    case 'link':\n      await handleLink(rest, apiUrl, token);\n      return;\n    case 'unlink':\n      await handleUnlink(rest, apiUrl, token);\n      return;\n    default:\n      console.error(`Unknown credential-template sub-command: ${subCommand}`);\n      printHelp();\n      process.exit(1);\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;AASA,OAAO,aAAa;AAqBpB,SAAS,YAAkB;AACzB,UAAQ;AAAA,IACN;AAAA,MACE;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF,EAAE,KAAK,IAAI;AAAA,EACb;AACF;AAQA,SAAS,iBAAiB,MAAgB,iBAA+C;AACvF,QAAM,OAAO,oBAAI,IAAY;AAC7B,WAAS,IAAI,GAAG,IAAI,KAAK,QAAQ,KAAK;AACpC,QAAI,gBAAgB,SAAS,KAAK,CAAC,CAAE,KAAK,IAAI,IAAI,KAAK,QAAQ;AAC7D,WAAK,IAAI,CAAC;AACV,WAAK,IAAI,IAAI,CAAC;AAAA,IAChB;AAAA,EACF;AACA,WAAS,IAAI,GAAG,IAAI,KAAK,QAAQ,KAAK;AACpC,QAAI,KAAK,IAAI,CAAC,EAAG;AACjB,UAAM,IAAI,KAAK,CAAC;AAChB,QAAI,CAAC,EAAE,WAAW,GAAG,EAAG,QAAO;AAAA,EACjC;AACA,SAAO;AACT;AAEA,IAAM,iBAAiB;AAAA,EACrB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAEA,eAAe,gBACb,QACA,OACA,KACuC;AACvC,QAAM,aAAa,MAAM,gBAAgB,QAAQ,KAAK;AACtD,QAAM,WAAW,WAAW;AAAA,IAC1B,CAAC,MAAM,EAAE,OAAO,OAAO,EAAE,KAAK,YAAY,MAAM,IAAI,YAAY;AAAA,EAClE;AACA,MAAI,CAAC,UAAU;AACb,YAAQ,MAAM,uBAAuB,GAAG,cAAc;AACtD,YAAQ,KAAK,CAAC;AAAA,EAChB;AACA,SAAO;AACT;AAEA,eAAe,WAAW,MAAgB,QAAgB,OAA8B;AACtF,QAAM,cAAc,kBAAkB,IAAI;AAC1C,QAAM,WAAW,QAAQ,MAAM,QAAQ;AACvC,MAAI,CAAC,aAAa;AAChB,YAAQ,MAAM,uDAAuD;AACrE,YAAQ,KAAK,CAAC;AAAA,EAChB;AACA,QAAM,WAAW,MAAM,gBAAgB,QAAQ,OAAO,WAAW;AACjE,QAAM,SAAS,MAAM;AAAA,IACnB;AAAA,IACA;AAAA,IACA;AAAA,IACA,mBAAmB,SAAS,EAAE;AAAA,EAChC;AACA,MAAI,CAAC,OAAO,IAAI;AACd,YAAQ,MAAM,UAAU,OAAO,SAAS,0BAA0B,EAAE;AACpE,YAAQ,KAAK,CAAC;AAAA,EAChB;AACA,QAAM,QAAQ,OAAO,SAAS,CAAC;AAC/B,MAAI,UAAU;AACZ,YAAQ,IAAI,KAAK,UAAU,OAAO,MAAM,CAAC,CAAC;AAC1C;AAAA,EACF;AACA,MAAI,MAAM,WAAW,GAAG;AACtB,YAAQ,IAAI,2CAA2C,SAAS,IAAI,IAAI;AACxE;AAAA,EACF;AACA,aAAW,KAAK,OAAO;AACrB,YAAQ,IAAI,GAAG,EAAE,EAAE,KAAK,EAAE,IAAI,GAAG,EAAE,cAAc,WAAM,EAAE,WAAW,KAAK,EAAE,EAAE;AAAA,EAC/E;AACF;AAEA,eAAe,aAAa,MAAgB,QAAgB,OAA8B;AACxF,QAAM,cAAc,kBAAkB,IAAI;AAC1C,QAAM,OAAO,YAAY,MAAM,QAAQ;AACvC,QAAM,cAAc,YAAY,MAAM,eAAe;AACrD,QAAM,WAAW,QAAQ,MAAM,QAAQ;AAEvC,MAAI,CAAC,eAAe,CAAC,MAAM;AACzB,YAAQ,MAAM,+CAA+C;AAC7D,YAAQ,KAAK,CAAC;AAAA,EAChB;AACA,QAAM,WAAW,MAAM,gBAAgB,QAAQ,OAAO,WAAW;AACjE,QAAM,SAAS,MAAM;AAAA,IACnB;AAAA,IACA;AAAA,IACA;AAAA,IACA,mBAAmB,SAAS,EAAE;AAAA,IAC9B,EAAE,MAAM,aAAa,eAAe,KAAK;AAAA,EAC3C;AACA,MAAI,CAAC,OAAO,MAAM,CAAC,OAAO,UAAU;AAClC,YAAQ,MAAM,UAAU,OAAO,SAAS,2BAA2B,EAAE;AACrE,YAAQ,KAAK,CAAC;AAAA,EAChB;AACA,MAAI,UAAU;AACZ,YAAQ,IAAI,KAAK,UAAU,OAAO,UAAU,MAAM,CAAC,CAAC;AACpD;AAAA,EACF;AACA,UAAQ,IAAI,qBAAqB,OAAO,SAAS,IAAI,MAAM,OAAO,SAAS,EAAE,GAAG;AAClF;AAEA,eAAe,WAAW,MAAgB,QAAgB,OAA8B;AACtF,QAAM,cAAc,kBAAkB,IAAI;AAC1C,QAAM,aAAa,iBAAiB,MAAM,cAAc;AACxD,QAAM,WAAW,QAAQ,MAAM,QAAQ;AAEvC,MAAI,CAAC,eAAe,CAAC,YAAY;AAC/B,YAAQ,MAAM,qDAAqD;AACnE,YAAQ,KAAK,CAAC;AAAA,EAChB;AACA,QAAM,WAAW,MAAM,gBAAgB,QAAQ,OAAO,WAAW;AACjE,QAAM,SAAS,MAAM;AAAA,IAMnB;AAAA,IACA;AAAA,IACA;AAAA,IACA,mBAAmB,SAAS,EAAE,yBAAyB,UAAU;AAAA,EACnE;AACA,MAAI,CAAC,OAAO,MAAM,CAAC,OAAO,UAAU;AAClC,YAAQ,MAAM,UAAU,OAAO,SAAS,0BAA0B,EAAE;AACpE,YAAQ,KAAK,CAAC;AAAA,EAChB;AACA,MAAI,UAAU;AACZ,YAAQ,IAAI,KAAK,UAAU,QAAQ,MAAM,CAAC,CAAC;AAC3C;AAAA,EACF;AACA,QAAM,IAAI,OAAO;AACjB,UAAQ,IAAI,GAAG,EAAE,IAAI,KAAK,EAAE,EAAE,GAAG;AACjC,MAAI,EAAE,YAAa,SAAQ,IAAI,KAAK,EAAE,WAAW,EAAE;AACnD,UAAQ,IAAI,aAAa,OAAO,UAAU,UAAU,CAAC,IAAI;AACzD,aAAW,KAAK,OAAO,YAAY,CAAC,GAAG;AACrC,UAAM,MAAM,EAAE,iBAAiB;AAC/B,UAAM,MAAM,EAAE,cAAc,iBAAiB;AAC7C,YAAQ,IAAI,KAAK,EAAE,EAAE,SAAS,GAAG,KAAK,EAAE,IAAI,GAAG,GAAG,EAAE;AAAA,EACtD;AACF;AAEA,eAAe,aAAa,MAAgB,QAAgB,OAA8B;AACxF,QAAM,cAAc,kBAAkB,IAAI;AAC1C,QAAM,UAAU,YAAY,MAAM,QAAQ;AAC1C,QAAM,aAAa,iBAAiB,MAAM,cAAc;AACxD,MAAI,CAAC,eAAe,CAAC,cAAc,CAAC,SAAS;AAC3C,YAAQ,MAAM,8DAA8D;AAC5E,YAAQ,KAAK,CAAC;AAAA,EAChB;AACA,QAAM,WAAW,MAAM,gBAAgB,QAAQ,OAAO,WAAW;AACjE,QAAM,SAAS,MAAM;AAAA,IACnB;AAAA,IACA;AAAA,IACA;AAAA,IACA,mBAAmB,SAAS,EAAE,yBAAyB,UAAU;AAAA,IACjE,EAAE,MAAM,QAAQ;AAAA,EAClB;AACA,MAAI,CAAC,OAAO,IAAI;AACd,YAAQ,MAAM,UAAU,OAAO,SAAS,2BAA2B,EAAE;AACrE,YAAQ,KAAK,CAAC;AAAA,EAChB;AACA,UAAQ,IAAI,oBAAoB,UAAU,YAAO,OAAO,GAAG;AAC7D;AAEA,eAAe,aAAa,MAAgB,QAAgB,OAA8B;AACxF,QAAM,cAAc,kBAAkB,IAAI;AAC1C,QAAM,aAAa,iBAAiB,MAAM,cAAc;AACxD,MAAI,CAAC,eAAe,CAAC,YAAY;AAC/B,YAAQ,MAAM,qDAAqD;AACnE,YAAQ,KAAK,CAAC;AAAA,EAChB;AACA,QAAM,WAAW,MAAM,gBAAgB,QAAQ,OAAO,WAAW;AACjE,QAAM,SAAS,MAAM;AAAA,IACnB;AAAA,IACA;AAAA,IACA;AAAA,IACA,mBAAmB,SAAS,EAAE,yBAAyB,UAAU;AAAA,EACnE;AACA,MAAI,CAAC,OAAO,IAAI;AACd,YAAQ,MAAM,UAAU,OAAO,SAAS,2BAA2B,EAAE;AACrE,YAAQ,KAAK,CAAC;AAAA,EAChB;AACA,UAAQ,IAAI,oBAAoB,UAAU,EAAE;AAC9C;AAEA,eAAe,WAAW,MAAgB,QAAgB,OAA8B;AACtF,QAAM,cAAc,kBAAkB,IAAI;AAC1C,QAAM,eAAe,YAAY,MAAM,cAAc;AACrD,QAAM,aAAa,iBAAiB,MAAM,cAAc;AACxD,MAAI,CAAC,eAAe,CAAC,cAAc,CAAC,cAAc;AAChD,YAAQ,MAAM,oEAAoE;AAClF,YAAQ,KAAK,CAAC;AAAA,EAChB;AACA,QAAM,WAAW,MAAM,gBAAgB,QAAQ,OAAO,WAAW;AACjE,QAAM,SAAS,MAAM;AAAA,IACnB;AAAA,IACA;AAAA,IACA;AAAA,IACA,mBAAmB,SAAS,EAAE,yBAAyB,UAAU;AAAA,IACjE,EAAE,aAAa;AAAA,EACjB;AACA,MAAI,CAAC,OAAO,IAAI;AACd,YAAQ,MAAM,UAAU,OAAO,SAAS,2BAA2B,EAAE;AACrE,YAAQ,KAAK,CAAC;AAAA,EAChB;AACA,UAAQ,IAAI,qBAAqB,YAAY,gBAAgB,UAAU,EAAE;AAC3E;AAEA,eAAe,aAAa,MAAgB,QAAgB,OAA8B;AACxF,QAAM,cAAc,kBAAkB,IAAI;AAC1C,QAAM,eAAe,YAAY,MAAM,cAAc;AACrD,QAAM,aAAa,iBAAiB,MAAM,cAAc;AACxD,MAAI,CAAC,eAAe,CAAC,cAAc,CAAC,cAAc;AAChD,YAAQ,MAAM,oEAAoE;AAClF,YAAQ,KAAK,CAAC;AAAA,EAChB;AACA,QAAM,WAAW,MAAM,gBAAgB,QAAQ,OAAO,WAAW;AACjE,QAAM,SAAS,MAAM;AAAA,IACnB;AAAA,IACA;AAAA,IACA;AAAA,IACA,mBAAmB,SAAS,EAAE,yBAAyB,UAAU,aAAa,YAAY;AAAA,EAC5F;AACA,MAAI,CAAC,OAAO,IAAI;AACd,YAAQ,MAAM,UAAU,OAAO,SAAS,6BAA6B,EAAE;AACvE,YAAQ,KAAK,CAAC;AAAA,EAChB;AACA,UAAQ,IAAI,uBAAuB,YAAY,kBAAkB,UAAU,EAAE;AAC/E;AAEA,eAAsB,sBAAsB,MAA+B;AACzE,QAAM,CAAC,YAAY,GAAG,IAAI,IAAI;AAE9B,MAAI,CAAC,cAAc,eAAe,UAAU,QAAQ,MAAM,UAAU,IAAI,GAAG;AACzE,cAAU;AACV;AAAA,EACF;AAEA,QAAM,EAAE,QAAQ,MAAM,IAAI,MAAM,cAAc,IAAI;AAElD,UAAQ,YAAY;AAAA,IAClB,KAAK;AACH,YAAM,WAAW,MAAM,QAAQ,KAAK;AACpC;AAAA,IACF,KAAK;AACH,YAAM,aAAa,MAAM,QAAQ,KAAK;AACtC;AAAA,IACF,KAAK;AACH,YAAM,WAAW,MAAM,QAAQ,KAAK;AACpC;AAAA,IACF,KAAK;AACH,YAAM,aAAa,MAAM,QAAQ,KAAK;AACtC;AAAA,IACF,KAAK;AACH,YAAM,aAAa,MAAM,QAAQ,KAAK;AACtC;AAAA,IACF,KAAK;AACH,YAAM,WAAW,MAAM,QAAQ,KAAK;AACpC;AAAA,IACF,KAAK;AACH,YAAM,aAAa,MAAM,QAAQ,KAAK;AACtC;AAAA,IACF;AACE,cAAQ,MAAM,4CAA4C,UAAU,EAAE;AACtE,gBAAU;AACV,cAAQ,KAAK,CAAC;AAAA,EAClB;AACF;","names":[]}

package/dist/debug-workflow-KOVH5GOP.js

@@ -0,0 +1,259 @@
+import { createRequire as __cr } from "module"; const require = __cr(import.meta.url);
+import {
+  acquireCloudLock,
+  createSessionWithRelay,
+  deleteSession,
+  releaseCloudLock
+} from "./chunk-J6SH7GQT.js";
+import {
+  downloadStorageState
+} from "./chunk-WOHL4FTB.js";
+import "./chunk-SJJW77WN.js";
+import "./chunk-3CZU7XCS.js";
+import {
+  getArgValue,
+  hasFlag,
+  resolveConfig
+} from "./chunk-A4OFTUVV.js";
+import "./chunk-JWHYXEA2.js";
+import "./chunk-VKVL7WBN.js";
+
+// src/debug-workflow.ts
+import fs from "fs/promises";
+import process from "process";
+import { createParser } from "eventsource-parser";
+async function runDebugWorkflow(argv) {
+  const workflowId = argv.find((arg) => !arg.startsWith("-"));
+  if (!workflowId) {
+    console.error("Usage: canary debug <workflowId> [--to-step N] [--env local|dev|prod]");
+    process.exit(1);
+  }
+  const toStepStr = getArgValue(argv, "--to-step");
+  const toStep = toStepStr ? parseInt(toStepStr, 10) : void 0;
+  const verbose = hasFlag(argv, "--verbose", "-v");
+  if (toStep !== void 0 && (isNaN(toStep) || toStep < 1)) {
+    console.error("Error: --to-step must be a positive integer");
+    process.exit(1);
+  }
+  const { apiUrl, token } = await resolveConfig(argv);
+  console.log("Loading workflow...");
+  let debugSession;
+  try {
+    const res = await fetch(`${apiUrl}/cli/debug/sessions`, {
+      method: "POST",
+      headers: {
+        "Content-Type": "application/json",
+        Authorization: `Bearer ${token}`
+      },
+      body: JSON.stringify({ workflowId })
+    });
+    if (!res.ok) {
+      const text = await res.text();
+      console.error(`Failed to create debug session: ${res.status} ${text}`);
+      process.exit(1);
+    }
+    debugSession = await res.json();
+    if (!debugSession.ok || !debugSession.sessionId) {
+      console.error(`Failed to create debug session: ${debugSession.error}`);
+      process.exit(1);
+    }
+  } catch (err) {
+    console.error(`Failed to create debug session: ${err}`);
+    process.exit(1);
+  }
+  const debugSessionId = debugSession.sessionId;
+  let storageStatePath;
+  if (debugSession.isAuthenticated && debugSession.credential) {
+    console.log("Downloading storage state...");
+    storageStatePath = await downloadStorageState({
+      apiUrl,
+      token,
+      propertyId: debugSession.credential.propertyId,
+      credentialId: debugSession.credential.credentialId,
+      prefix: "canary-debug-ss"
+    });
+    if (storageStatePath) {
+      console.log("Storage state loaded.");
+    } else {
+      console.warn("Could not download storage state, continuing without it.");
+    }
+  }
+  console.log("Launching headed browser...");
+  let daemonSessionId;
+  let localBrowserSessionId;
+  try {
+    const result = await createSessionWithRelay({
+      headless: false,
+      storageStatePath,
+      name: `debug-${workflowId.slice(0, 8)}`,
+      cloudRelay: { apiUrl, token }
+    });
+    if (!result.ok || !result.data) {
+      console.error(`Failed to create browser session: ${result.error}`);
+      process.exit(1);
+    }
+    daemonSessionId = result.data.id;
+    localBrowserSessionId = result.data.cloudRelay?.localBrowserSessionId;
+    if (!localBrowserSessionId) {
+      console.error("Cloud relay not established. Cannot run debug workflow.");
+      await deleteSession(daemonSessionId);
+      process.exit(1);
+    }
+  } catch (err) {
+    console.error(`Failed to start browser: ${err}`);
+    process.exit(1);
+  }
+  try {
+    const res = await fetch(`${apiUrl}/cli/debug/sessions/${debugSessionId}/link`, {
+      method: "POST",
+      headers: {
+        "Content-Type": "application/json",
+        Authorization: `Bearer ${token}`
+      },
+      body: JSON.stringify({ localBrowserSessionId })
+    });
+    if (!res.ok) {
+      const text = await res.text();
+      console.error(`Failed to link debug session to browser: ${res.status} ${text}`);
+      await deleteSession(daemonSessionId);
+      process.exit(1);
+    }
+  } catch (err) {
+    console.error(`Failed to link debug session: ${err}`);
+    await deleteSession(daemonSessionId);
+    process.exit(1);
+  }
+  console.log("Browser connected.");
+  console.log();
+  const cleanup = async () => {
+    console.log("\nShutting down...");
+    try {
+      await fetch(`${apiUrl}/cli/debug/sessions/${debugSessionId}`, {
+        method: "DELETE",
+        headers: { Authorization: `Bearer ${token}` }
+      });
+    } catch {
+    }
+    if (storageStatePath) {
+      await fs.unlink(storageStatePath).catch(() => {
+      });
+    }
+    await deleteSession(daemonSessionId);
+    process.exit(0);
+  };
+  process.on("SIGINT", () => void cleanup());
+  process.on("SIGTERM", () => void cleanup());
+  const nodes = debugSession.nodes ?? [];
+  const totalSteps = nodes.length;
+  const effectiveToStep = toStep ? Math.min(toStep, totalSteps) : totalSteps;
+  console.log(`Debugging: "${debugSession.workflowName}" (${totalSteps} steps)`);
+  if (toStep) {
+    console.log(`Running steps 1-${effectiveToStep} of ${totalSteps}`);
+  }
+  console.log();
+  await acquireCloudLock(daemonSessionId);
+  let runRes;
+  try {
+    runRes = await fetch(`${apiUrl}/cli/debug/sessions/${debugSessionId}/run`, {
+      method: "POST",
+      headers: {
+        "Content-Type": "application/json",
+        Authorization: `Bearer ${token}`,
+        Accept: "text/event-stream"
+      },
+      body: JSON.stringify({ toStep: effectiveToStep })
+    });
+  } catch (err) {
+    console.error(`Failed to start execution: ${err}`);
+    await cleanup();
+    return;
+  }
+  if (!runRes.ok || !runRes.body) {
+    console.error(`Failed to start execution: ${runRes.status}`);
+    await cleanup();
+    return;
+  }
+  let currentStep = 0;
+  let _hasError = false;
+  const stepResults = /* @__PURE__ */ new Map();
+  const parser = createParser({
+    onEvent: (event) => {
+      if (!event.data) return;
+      try {
+        const data = JSON.parse(event.data);
+        if (verbose) {
+          console.log(`[SSE] ${JSON.stringify(data)}`);
+        }
+        if (data.type === "step-started") {
+          const e = data;
+          currentStep = e.stepIndex;
+          process.stdout.write(`[${e.stepIndex}/${e.totalSteps}] ${e.stepName} `);
+        }
+        if (data.type === "completed") {
+          const e = data;
+          const stepIndex = e.stepIndex ?? currentStep;
+          const success = e.result.success;
+          const source = e.result.source;
+          if (success) {
+            const sourceLabel = source === "cache" ? "(cache)" : source === "agent" ? "(agent)" : "";
+            console.log(`\u2713 ${sourceLabel}`);
+          } else {
+            console.log("\u2717");
+            if (e.result.errorMessage) {
+              console.log(`    Error: ${e.result.errorMessage.slice(0, 200)}`);
+            }
+            _hasError = true;
+          }
+          stepResults.set(stepIndex, {
+            name: `Step ${stepIndex}`,
+            success,
+            source
+          });
+        }
+        if (data.type === "run-complete") {
+          const e = data;
+          console.log();
+          if (e.stoppedEarly) {
+            console.log(
+              `Stopped at step ${e.stepsExecuted} of ${e.totalSteps}. ${e.reason === "step-failed" ? "Step failed." : "Error occurred."}`
+            );
+          } else {
+            console.log(`All ${e.stepsExecuted} step(s) completed.`);
+          }
+        }
+        if (data.type === "run-error") {
+          const errorData = data;
+          console.log(`\u2717`);
+          if (errorData.error) {
+            console.log(`    Error: ${String(errorData.error).slice(0, 200)}`);
+          }
+          _hasError = true;
+        }
+      } catch {
+      }
+    }
+  });
+  const reader = runRes.body.getReader();
+  const decoder = new TextDecoder();
+  try {
+    while (true) {
+      const { done, value } = await reader.read();
+      if (done) break;
+      parser.feed(decoder.decode(value, { stream: true }));
+    }
+  } finally {
+    reader.releaseLock();
+  }
+  await releaseCloudLock(daemonSessionId);
+  console.log();
+  console.log("Browser is open for inspection.");
+  console.log("  Take control: canary session take-control");
+  console.log("  Resume cloud: canary session resume-cloud");
+  console.log("Press Ctrl+C to close.");
+  await new Promise(() => {
+  });
+}
+export {
+  runDebugWorkflow
+};
+//# sourceMappingURL=debug-workflow-KOVH5GOP.js.map

package/dist/debug-workflow-KOVH5GOP.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/debug-workflow.ts"],"sourcesContent":["/**\n * Debug Workflow Command\n *\n * Runs a workflow in a local headed browser for debugging. Replays cached\n * actions where possible and falls back to the agent for uncached steps.\n * The browser stays open after execution so the user can inspect page state.\n *\n * Uses the session daemon for browser lifecycle and cloud relay for\n * server-driven step execution.\n *\n * Usage:\n *   canary debug <workflowId> [--to-step N] [--api-url URL] [--env local|dev|prod]\n *\n * @module debug-workflow\n */\n\nimport fs from 'node:fs/promises';\nimport process from 'node:process';\nimport { createParser, type EventSourceMessage } from 'eventsource-parser';\nimport { resolveConfig, getArgValue, hasFlag } from './auth';\nimport { downloadStorageState } from './cli-helpers.js';\nimport {\n  createSessionWithRelay,\n  deleteSession,\n  acquireCloudLock,\n  releaseCloudLock,\n} from './session/daemon-client.js';\n\ninterface DebugSessionResponse {\n  ok: boolean;\n  sessionId?: string;\n  workflowName?: string;\n  nodes?: Array<{\n    index: number;\n    id: string;\n    name: string;\n    type: string;\n  }>;\n  isAuthenticated?: boolean;\n  credential?: { credentialId: string; propertyId: string } | null;\n  error?: string;\n}\n\ninterface StepStartedEvent {\n  type: 'step-started';\n  stepIndex: number;\n  totalSteps: number;\n  stepName: string;\n  nodeType: string;\n  nodeId: string;\n}\n\ninterface NodeCompletedEvent {\n  type: 'completed';\n  stepIndex?: number;\n  result: { success: boolean; errorMessage?: string; source?: string };\n}\n\ninterface RunCompleteEvent {\n  type: 'run-complete';\n  stepsExecuted: number;\n  totalSteps: number;\n  stoppedEarly: boolean;\n  reason?: string;\n}\n\ntype DebugEvent =\n  | StepStartedEvent\n  | NodeCompletedEvent\n  | RunCompleteEvent\n  | { type: string; [key: string]: unknown };\n\nexport async function runDebugWorkflow(argv: string[]): Promise<void> {\n  const workflowId = argv.find((arg) => !arg.startsWith('-'));\n\n  if (!workflowId) {\n    console.error('Usage: canary debug <workflowId> [--to-step N] [--env local|dev|prod]');\n    process.exit(1);\n  }\n\n  const toStepStr = getArgValue(argv, '--to-step');\n  const toStep = toStepStr ? parseInt(toStepStr, 10) : undefined;\n  const verbose = hasFlag(argv, '--verbose', '-v');\n\n  if (toStep !== undefined && (isNaN(toStep) || toStep < 1)) {\n    console.error('Error: --to-step must be a positive integer');\n    process.exit(1);\n  }\n\n  const { apiUrl, token } = await resolveConfig(argv);\n\n  // 1. Create debug session (before browser launch so we can download storage state)\n  console.log('Loading workflow...');\n\n  let debugSession: DebugSessionResponse;\n  try {\n    const res = await fetch(`${apiUrl}/cli/debug/sessions`, {\n      method: 'POST',\n      headers: {\n        'Content-Type': 'application/json',\n        Authorization: `Bearer ${token}`,\n      },\n      body: JSON.stringify({ workflowId }),\n    });\n\n    if (!res.ok) {\n      const text = await res.text();\n      console.error(`Failed to create debug session: ${res.status} ${text}`);\n      process.exit(1);\n    }\n\n    debugSession = (await res.json()) as DebugSessionResponse;\n    if (!debugSession.ok || !debugSession.sessionId) {\n      console.error(`Failed to create debug session: ${debugSession.error}`);\n      process.exit(1);\n    }\n  } catch (err) {\n    console.error(`Failed to create debug session: ${err}`);\n    process.exit(1);\n  }\n\n  const debugSessionId: string = debugSession.sessionId!;\n\n  // 2. Download storage state if the workflow has valid credentials\n  let storageStatePath: string | undefined;\n  if (debugSession.isAuthenticated && debugSession.credential) {\n    console.log('Downloading storage state...');\n    storageStatePath = await downloadStorageState({\n      apiUrl,\n      token,\n      propertyId: debugSession.credential.propertyId,\n      credentialId: debugSession.credential.credentialId,\n      prefix: 'canary-debug-ss',\n    });\n    if (storageStatePath) {\n      console.log('Storage state loaded.');\n    } else {\n      console.warn('Could not download storage state, continuing without it.');\n    }\n  }\n\n  // 3. Create a daemon session with cloud relay\n  console.log('Launching headed browser...');\n\n  let daemonSessionId: string;\n  let localBrowserSessionId: string | undefined;\n  try {\n    const result = await createSessionWithRelay({\n      headless: false,\n      storageStatePath,\n      name: `debug-${workflowId.slice(0, 8)}`,\n      cloudRelay: { apiUrl, token },\n    });\n\n    if (!result.ok || !result.data) {\n      console.error(`Failed to create browser session: ${result.error}`);\n      process.exit(1);\n    }\n\n    daemonSessionId = result.data.id;\n    localBrowserSessionId = result.data.cloudRelay?.localBrowserSessionId;\n\n    if (!localBrowserSessionId) {\n      console.error('Cloud relay not established. Cannot run debug workflow.');\n      await deleteSession(daemonSessionId);\n      process.exit(1);\n    }\n  } catch (err) {\n    console.error(`Failed to start browser: ${err}`);\n    process.exit(1);\n  }\n\n  // 4. Link the debug session to the cloud browser session\n  try {\n    const res = await fetch(`${apiUrl}/cli/debug/sessions/${debugSessionId}/link`, {\n      method: 'POST',\n      headers: {\n        'Content-Type': 'application/json',\n        Authorization: `Bearer ${token}`,\n      },\n      body: JSON.stringify({ localBrowserSessionId }),\n    });\n\n    if (!res.ok) {\n      const text = await res.text();\n      console.error(`Failed to link debug session to browser: ${res.status} ${text}`);\n      await deleteSession(daemonSessionId);\n      process.exit(1);\n    }\n  } catch (err) {\n    console.error(`Failed to link debug session: ${err}`);\n    await deleteSession(daemonSessionId);\n    process.exit(1);\n  }\n\n  console.log('Browser connected.');\n  console.log();\n\n  // Set up cleanup\n  const cleanup = async () => {\n    console.log('\\nShutting down...');\n\n    try {\n      await fetch(`${apiUrl}/cli/debug/sessions/${debugSessionId}`, {\n        method: 'DELETE',\n        headers: { Authorization: `Bearer ${token}` },\n      });\n    } catch {\n      // Ignore cleanup errors\n    }\n\n    if (storageStatePath) {\n      await fs.unlink(storageStatePath).catch(() => {});\n    }\n\n    await deleteSession(daemonSessionId);\n    process.exit(0);\n  };\n\n  process.on('SIGINT', () => void cleanup());\n  process.on('SIGTERM', () => void cleanup());\n\n  const nodes = debugSession.nodes ?? [];\n  const totalSteps = nodes.length;\n  const effectiveToStep = toStep ? Math.min(toStep, totalSteps) : totalSteps;\n\n  console.log(`Debugging: \"${debugSession.workflowName}\" (${totalSteps} steps)`);\n  if (toStep) {\n    console.log(`Running steps 1-${effectiveToStep} of ${totalSteps}`);\n  }\n  console.log();\n\n  // 5. Acquire cloud lock so the server can control the browser\n  await acquireCloudLock(daemonSessionId);\n\n  // 6. Run steps via SSE\n  let runRes: Response;\n  try {\n    runRes = await fetch(`${apiUrl}/cli/debug/sessions/${debugSessionId}/run`, {\n      method: 'POST',\n      headers: {\n        'Content-Type': 'application/json',\n        Authorization: `Bearer ${token}`,\n        Accept: 'text/event-stream',\n      },\n      body: JSON.stringify({ toStep: effectiveToStep }),\n    });\n  } catch (err) {\n    console.error(`Failed to start execution: ${err}`);\n    await cleanup();\n    return;\n  }\n\n  if (!runRes.ok || !runRes.body) {\n    console.error(`Failed to start execution: ${runRes.status}`);\n    await cleanup();\n    return;\n  }\n\n  // Track execution state\n  let currentStep = 0;\n  let _hasError = false;\n  const stepResults = new Map<number, { name: string; success: boolean; source?: string }>();\n\n  const parser = createParser({\n    onEvent: (event: EventSourceMessage) => {\n      if (!event.data) return;\n\n      try {\n        const data = JSON.parse(event.data) as DebugEvent;\n\n        if (verbose) {\n          console.log(`[SSE] ${JSON.stringify(data)}`);\n        }\n\n        if (data.type === 'step-started') {\n          const e = data as StepStartedEvent;\n          currentStep = e.stepIndex;\n          process.stdout.write(`[${e.stepIndex}/${e.totalSteps}] ${e.stepName} `);\n        }\n\n        if (data.type === 'completed') {\n          const e = data as NodeCompletedEvent;\n          const stepIndex = e.stepIndex ?? currentStep;\n          const success = e.result.success;\n          const source = e.result.source;\n\n          if (success) {\n            const sourceLabel =\n              source === 'cache' ? '(cache)' : source === 'agent' ? '(agent)' : '';\n            console.log(`\\u2713 ${sourceLabel}`);\n          } else {\n            console.log('\\u2717');\n            if (e.result.errorMessage) {\n              console.log(`    Error: ${e.result.errorMessage.slice(0, 200)}`);\n            }\n            _hasError = true;\n          }\n\n          stepResults.set(stepIndex, {\n            name: `Step ${stepIndex}`,\n            success,\n            source,\n          });\n        }\n\n        if (data.type === 'run-complete') {\n          const e = data as RunCompleteEvent;\n          console.log();\n          if (e.stoppedEarly) {\n            console.log(\n              `Stopped at step ${e.stepsExecuted} of ${e.totalSteps}. ${e.reason === 'step-failed' ? 'Step failed.' : 'Error occurred.'}`\n            );\n          } else {\n            console.log(`All ${e.stepsExecuted} step(s) completed.`);\n          }\n        }\n\n        if (data.type === 'run-error') {\n          const errorData = data as { error?: string };\n          console.log(`\\u2717`);\n          if (errorData.error) {\n            console.log(`    Error: ${String(errorData.error).slice(0, 200)}`);\n          }\n          _hasError = true;\n        }\n      } catch {\n        // Ignore parse errors\n      }\n    },\n  });\n\n  const reader = runRes.body.getReader();\n  const decoder = new TextDecoder();\n\n  try {\n    while (true) {\n      const { done, value } = await reader.read();\n      if (done) break;\n      parser.feed(decoder.decode(value, { stream: true }));\n    }\n  } finally {\n    reader.releaseLock();\n  }\n\n  // 7. Release cloud lock — hand control back to CLI for inspection\n  await releaseCloudLock(daemonSessionId);\n\n  // 8. Keep browser open for inspection\n  console.log();\n  console.log('Browser is open for inspection.');\n  console.log('  Take control: canary session take-control');\n  console.log('  Resume cloud: canary session resume-cloud');\n  console.log('Press Ctrl+C to close.');\n\n  // Keep the process running until Ctrl+C\n  await new Promise(() => {});\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAgBA,OAAO,QAAQ;AACf,OAAO,aAAa;AACpB,SAAS,oBAA6C;AAsDtD,eAAsB,iBAAiB,MAA+B;AACpE,QAAM,aAAa,KAAK,KAAK,CAAC,QAAQ,CAAC,IAAI,WAAW,GAAG,CAAC;AAE1D,MAAI,CAAC,YAAY;AACf,YAAQ,MAAM,uEAAuE;AACrF,YAAQ,KAAK,CAAC;AAAA,EAChB;AAEA,QAAM,YAAY,YAAY,MAAM,WAAW;AAC/C,QAAM,SAAS,YAAY,SAAS,WAAW,EAAE,IAAI;AACrD,QAAM,UAAU,QAAQ,MAAM,aAAa,IAAI;AAE/C,MAAI,WAAW,WAAc,MAAM,MAAM,KAAK,SAAS,IAAI;AACzD,YAAQ,MAAM,6CAA6C;AAC3D,YAAQ,KAAK,CAAC;AAAA,EAChB;AAEA,QAAM,EAAE,QAAQ,MAAM,IAAI,MAAM,cAAc,IAAI;AAGlD,UAAQ,IAAI,qBAAqB;AAEjC,MAAI;AACJ,MAAI;AACF,UAAM,MAAM,MAAM,MAAM,GAAG,MAAM,uBAAuB;AAAA,MACtD,QAAQ;AAAA,MACR,SAAS;AAAA,QACP,gBAAgB;AAAA,QAChB,eAAe,UAAU,KAAK;AAAA,MAChC;AAAA,MACA,MAAM,KAAK,UAAU,EAAE,WAAW,CAAC;AAAA,IACrC,CAAC;AAED,QAAI,CAAC,IAAI,IAAI;AACX,YAAM,OAAO,MAAM,IAAI,KAAK;AAC5B,cAAQ,MAAM,mCAAmC,IAAI,MAAM,IAAI,IAAI,EAAE;AACrE,cAAQ,KAAK,CAAC;AAAA,IAChB;AAEA,mBAAgB,MAAM,IAAI,KAAK;AAC/B,QAAI,CAAC,aAAa,MAAM,CAAC,aAAa,WAAW;AAC/C,cAAQ,MAAM,mCAAmC,aAAa,KAAK,EAAE;AACrE,cAAQ,KAAK,CAAC;AAAA,IAChB;AAAA,EACF,SAAS,KAAK;AACZ,YAAQ,MAAM,mCAAmC,GAAG,EAAE;AACtD,YAAQ,KAAK,CAAC;AAAA,EAChB;AAEA,QAAM,iBAAyB,aAAa;AAG5C,MAAI;AACJ,MAAI,aAAa,mBAAmB,aAAa,YAAY;AAC3D,YAAQ,IAAI,8BAA8B;AAC1C,uBAAmB,MAAM,qBAAqB;AAAA,MAC5C;AAAA,MACA;AAAA,MACA,YAAY,aAAa,WAAW;AAAA,MACpC,cAAc,aAAa,WAAW;AAAA,MACtC,QAAQ;AAAA,IACV,CAAC;AACD,QAAI,kBAAkB;AACpB,cAAQ,IAAI,uBAAuB;AAAA,IACrC,OAAO;AACL,cAAQ,KAAK,0DAA0D;AAAA,IACzE;AAAA,EACF;AAGA,UAAQ,IAAI,6BAA6B;AAEzC,MAAI;AACJ,MAAI;AACJ,MAAI;AACF,UAAM,SAAS,MAAM,uBAAuB;AAAA,MAC1C,UAAU;AAAA,MACV;AAAA,MACA,MAAM,SAAS,WAAW,MAAM,GAAG,CAAC,CAAC;AAAA,MACrC,YAAY,EAAE,QAAQ,MAAM;AAAA,IAC9B,CAAC;AAED,QAAI,CAAC,OAAO,MAAM,CAAC,OAAO,MAAM;AAC9B,cAAQ,MAAM,qCAAqC,OAAO,KAAK,EAAE;AACjE,cAAQ,KAAK,CAAC;AAAA,IAChB;AAEA,sBAAkB,OAAO,KAAK;AAC9B,4BAAwB,OAAO,KAAK,YAAY;AAEhD,QAAI,CAAC,uBAAuB;AAC1B,cAAQ,MAAM,yDAAyD;AACvE,YAAM,cAAc,eAAe;AACnC,cAAQ,KAAK,CAAC;AAAA,IAChB;AAAA,EACF,SAAS,KAAK;AACZ,YAAQ,MAAM,4BAA4B,GAAG,EAAE;AAC/C,YAAQ,KAAK,CAAC;AAAA,EAChB;AAGA,MAAI;AACF,UAAM,MAAM,MAAM,MAAM,GAAG,MAAM,uBAAuB,cAAc,SAAS;AAAA,MAC7E,QAAQ;AAAA,MACR,SAAS;AAAA,QACP,gBAAgB;AAAA,QAChB,eAAe,UAAU,KAAK;AAAA,MAChC;AAAA,MACA,MAAM,KAAK,UAAU,EAAE,sBAAsB,CAAC;AAAA,IAChD,CAAC;AAED,QAAI,CAAC,IAAI,IAAI;AACX,YAAM,OAAO,MAAM,IAAI,KAAK;AAC5B,cAAQ,MAAM,4CAA4C,IAAI,MAAM,IAAI,IAAI,EAAE;AAC9E,YAAM,cAAc,eAAe;AACnC,cAAQ,KAAK,CAAC;AAAA,IAChB;AAAA,EACF,SAAS,KAAK;AACZ,YAAQ,MAAM,iCAAiC,GAAG,EAAE;AACpD,UAAM,cAAc,eAAe;AACnC,YAAQ,KAAK,CAAC;AAAA,EAChB;AAEA,UAAQ,IAAI,oBAAoB;AAChC,UAAQ,IAAI;AAGZ,QAAM,UAAU,YAAY;AAC1B,YAAQ,IAAI,oBAAoB;AAEhC,QAAI;AACF,YAAM,MAAM,GAAG,MAAM,uBAAuB,cAAc,IAAI;AAAA,QAC5D,QAAQ;AAAA,QACR,SAAS,EAAE,eAAe,UAAU,KAAK,GAAG;AAAA,MAC9C,CAAC;AAAA,IACH,QAAQ;AAAA,IAER;AAEA,QAAI,kBAAkB;AACpB,YAAM,GAAG,OAAO,gBAAgB,EAAE,MAAM,MAAM;AAAA,MAAC,CAAC;AAAA,IAClD;AAEA,UAAM,cAAc,eAAe;AACnC,YAAQ,KAAK,CAAC;AAAA,EAChB;AAEA,UAAQ,GAAG,UAAU,MAAM,KAAK,QAAQ,CAAC;AACzC,UAAQ,GAAG,WAAW,MAAM,KAAK,QAAQ,CAAC;AAE1C,QAAM,QAAQ,aAAa,SAAS,CAAC;AACrC,QAAM,aAAa,MAAM;AACzB,QAAM,kBAAkB,SAAS,KAAK,IAAI,QAAQ,UAAU,IAAI;AAEhE,UAAQ,IAAI,eAAe,aAAa,YAAY,MAAM,UAAU,SAAS;AAC7E,MAAI,QAAQ;AACV,YAAQ,IAAI,mBAAmB,eAAe,OAAO,UAAU,EAAE;AAAA,EACnE;AACA,UAAQ,IAAI;AAGZ,QAAM,iBAAiB,eAAe;AAGtC,MAAI;AACJ,MAAI;AACF,aAAS,MAAM,MAAM,GAAG,MAAM,uBAAuB,cAAc,QAAQ;AAAA,MACzE,QAAQ;AAAA,MACR,SAAS;AAAA,QACP,gBAAgB;AAAA,QAChB,eAAe,UAAU,KAAK;AAAA,QAC9B,QAAQ;AAAA,MACV;AAAA,MACA,MAAM,KAAK,UAAU,EAAE,QAAQ,gBAAgB,CAAC;AAAA,IAClD,CAAC;AAAA,EACH,SAAS,KAAK;AACZ,YAAQ,MAAM,8BAA8B,GAAG,EAAE;AACjD,UAAM,QAAQ;AACd;AAAA,EACF;AAEA,MAAI,CAAC,OAAO,MAAM,CAAC,OAAO,MAAM;AAC9B,YAAQ,MAAM,8BAA8B,OAAO,MAAM,EAAE;AAC3D,UAAM,QAAQ;AACd;AAAA,EACF;AAGA,MAAI,cAAc;AAClB,MAAI,YAAY;AAChB,QAAM,cAAc,oBAAI,IAAiE;AAEzF,QAAM,SAAS,aAAa;AAAA,IAC1B,SAAS,CAAC,UAA8B;AACtC,UAAI,CAAC,MAAM,KAAM;AAEjB,UAAI;AACF,cAAM,OAAO,KAAK,MAAM,MAAM,IAAI;AAElC,YAAI,SAAS;AACX,kBAAQ,IAAI,SAAS,KAAK,UAAU,IAAI,CAAC,EAAE;AAAA,QAC7C;AAEA,YAAI,KAAK,SAAS,gBAAgB;AAChC,gBAAM,IAAI;AACV,wBAAc,EAAE;AAChB,kBAAQ,OAAO,MAAM,IAAI,EAAE,SAAS,IAAI,EAAE,UAAU,KAAK,EAAE,QAAQ,GAAG;AAAA,QACxE;AAEA,YAAI,KAAK,SAAS,aAAa;AAC7B,gBAAM,IAAI;AACV,gBAAM,YAAY,EAAE,aAAa;AACjC,gBAAM,UAAU,EAAE,OAAO;AACzB,gBAAM,SAAS,EAAE,OAAO;AAExB,cAAI,SAAS;AACX,kBAAM,cACJ,WAAW,UAAU,YAAY,WAAW,UAAU,YAAY;AACpE,oBAAQ,IAAI,UAAU,WAAW,EAAE;AAAA,UACrC,OAAO;AACL,oBAAQ,IAAI,QAAQ;AACpB,gBAAI,EAAE,OAAO,cAAc;AACzB,sBAAQ,IAAI,cAAc,EAAE,OAAO,aAAa,MAAM,GAAG,GAAG,CAAC,EAAE;AAAA,YACjE;AACA,wBAAY;AAAA,UACd;AAEA,sBAAY,IAAI,WAAW;AAAA,YACzB,MAAM,QAAQ,SAAS;AAAA,YACvB;AAAA,YACA;AAAA,UACF,CAAC;AAAA,QACH;AAEA,YAAI,KAAK,SAAS,gBAAgB;AAChC,gBAAM,IAAI;AACV,kBAAQ,IAAI;AACZ,cAAI,EAAE,cAAc;AAClB,oBAAQ;AAAA,cACN,mBAAmB,EAAE,aAAa,OAAO,EAAE,UAAU,KAAK,EAAE,WAAW,gBAAgB,iBAAiB,iBAAiB;AAAA,YAC3H;AAAA,UACF,OAAO;AACL,oBAAQ,IAAI,OAAO,EAAE,aAAa,qBAAqB;AAAA,UACzD;AAAA,QACF;AAEA,YAAI,KAAK,SAAS,aAAa;AAC7B,gBAAM,YAAY;AAClB,kBAAQ,IAAI,QAAQ;AACpB,cAAI,UAAU,OAAO;AACnB,oBAAQ,IAAI,cAAc,OAAO,UAAU,KAAK,EAAE,MAAM,GAAG,GAAG,CAAC,EAAE;AAAA,UACnE;AACA,sBAAY;AAAA,QACd;AAAA,MACF,QAAQ;AAAA,MAER;AAAA,IACF;AAAA,EACF,CAAC;AAED,QAAM,SAAS,OAAO,KAAK,UAAU;AACrC,QAAM,UAAU,IAAI,YAAY;AAEhC,MAAI;AACF,WAAO,MAAM;AACX,YAAM,EAAE,MAAM,MAAM,IAAI,MAAM,OAAO,KAAK;AAC1C,UAAI,KAAM;AACV,aAAO,KAAK,QAAQ,OAAO,OAAO,EAAE,QAAQ,KAAK,CAAC,CAAC;AAAA,IACrD;AAAA,EACF,UAAE;AACA,WAAO,YAAY;AAAA,EACrB;AAGA,QAAM,iBAAiB,eAAe;AAGtC,UAAQ,IAAI;AACZ,UAAQ,IAAI,iCAAiC;AAC7C,UAAQ,IAAI,6CAA6C;AACzD,UAAQ,IAAI,6CAA6C;AACzD,UAAQ,IAAI,wBAAwB;AAGpC,QAAM,IAAI,QAAQ,MAAM;AAAA,EAAC,CAAC;AAC5B;","names":[]}