@runcofactor/cli 0.10.0

package/dist/docs-3SSORHB5.js

@@ -0,0 +1,366 @@
+import { createRequire as __cr } from "module"; const require = __cr(import.meta.url);
+import {
+  apiRequest
+} from "./chunk-WOHL4FTB.js";
+import "./chunk-SJJW77WN.js";
+import "./chunk-3CZU7XCS.js";
+import {
+  getArgValue,
+  hasFlag,
+  resolveConfig
+} from "./chunk-A4OFTUVV.js";
+import {
+  getSubDir
+} from "./chunk-JWHYXEA2.js";
+import "./chunk-VKVL7WBN.js";
+
+// src/docs.ts
+import { readFile, writeFile, mkdir } from "fs/promises";
+import path from "path";
+import process from "process";
+var DEFAULT_PULL_DIR = getSubDir("docs");
+function parseNavFields(argv) {
+  const out = {};
+  const section = getArgValue(argv, "--section");
+  const group = getArgValue(argv, "--group");
+  const order = getArgValue(argv, "--order");
+  if (section != null) out.navSection = section;
+  if (group != null) out.navGroup = group;
+  if (order != null) {
+    const n = Number.parseInt(order, 10);
+    if (Number.isNaN(n)) {
+      console.error("Error: --order must be an integer.");
+      process.exit(1);
+    }
+    out.navOrder = n;
+  }
+  return out;
+}
+function readPrefix(orgMode) {
+  return orgMode ? "/docs" : "/public/docs";
+}
+function writePrefix(orgMode) {
+  return orgMode ? "/docs" : "/superadmin/docs";
+}
+async function handleList(argv, apiUrl, token, orgMode) {
+  const jsonOutput = hasFlag(argv, "--json");
+  const result = await apiRequest(apiUrl, token, "GET", `${readPrefix(orgMode)}/pages`);
+  const pages = result.data?.pages ?? [];
+  if (jsonOutput) {
+    console.log(JSON.stringify(pages, null, 2));
+    return;
+  }
+  if (pages.length === 0) {
+    console.log("No documentation pages found.");
+    return;
+  }
+  const slugWidth = Math.max(4, ...pages.map((p) => p.slug.length));
+  const titleWidth = Math.max(5, ...pages.map((p) => p.title.length));
+  const header = `| ${"Slug".padEnd(slugWidth)} | ${"Title".padEnd(titleWidth)} | Updated    | Published By |`;
+  const sep = `| ${"-".repeat(slugWidth)} | ${"-".repeat(titleWidth)} | ---------- | ------------ |`;
+  console.log(header);
+  console.log(sep);
+  for (const page of pages) {
+    const date = new Date(page.updatedAt).toISOString().slice(0, 10);
+    const by = page.publishedBy ?? "";
+    console.log(`| ${page.slug.padEnd(slugWidth)} | ${page.title.padEnd(titleWidth)} | ${date} | ${by.padEnd(12)} |`);
+  }
+}
+async function fetchDocContent(slug, apiUrl, token, orgMode) {
+  if (orgMode) {
+    const result = await apiRequest(
+      apiUrl,
+      token,
+      "GET",
+      `/docs/pages/content?slug=${encodeURIComponent(slug)}`
+    );
+    if (!result.ok) {
+      console.error(`Error: ${result.error}`);
+      process.exit(1);
+    }
+    return result.data?.content ?? "";
+  }
+  const res = await fetch(`${apiUrl}/public/docs/pages/raw?slug=${encodeURIComponent(slug)}`, {
+    headers: { Authorization: `Bearer ${token}` }
+  });
+  if (res.status === 404) {
+    console.error(`Error: Page not found: ${slug}`);
+    process.exit(1);
+  }
+  if (!res.ok) {
+    console.error(`Error: ${res.statusText}`);
+    process.exit(1);
+  }
+  return res.text();
+}
+async function handleGet(argv, apiUrl, token, orgMode) {
+  const slug = argv[0];
+  if (!slug || slug.startsWith("--")) {
+    console.error("Error: Missing slug.");
+    console.error("Usage: canary docs get <slug>");
+    process.exit(1);
+  }
+  const content = await fetchDocContent(slug, apiUrl, token, orgMode);
+  console.log(content);
+}
+async function handlePull(argv, apiUrl, token, orgMode) {
+  const slug = argv[0];
+  if (!slug || slug.startsWith("--")) {
+    console.error("Error: Missing slug.");
+    console.error("Usage: canary docs pull <slug> [--output <path>]");
+    process.exit(1);
+  }
+  const outputPath = getArgValue(argv, "--output") ?? path.join(DEFAULT_PULL_DIR, `${slug}.md`);
+  const content = await fetchDocContent(slug, apiUrl, token, orgMode);
+  await mkdir(path.dirname(outputPath), { recursive: true });
+  await writeFile(outputPath, content, "utf8");
+  console.log(`Pulled ${slug} \u2192 ${outputPath}`);
+}
+async function handlePush(argv, apiUrl, token, orgMode) {
+  const slug = argv[0];
+  if (!slug || slug.startsWith("--")) {
+    console.error("Error: Missing slug.");
+    console.error("Usage: canary docs push <slug> --file <path> [--message <text>]");
+    process.exit(1);
+  }
+  const filePath = getArgValue(argv, "--file");
+  if (!filePath) {
+    console.error("Error: Missing --file <path>.");
+    process.exit(1);
+  }
+  const message = getArgValue(argv, "--message") ?? void 0;
+  const createdBy = getArgValue(argv, "--created-by") ?? void 0;
+  let content;
+  try {
+    content = await readFile(filePath, "utf8");
+  } catch {
+    console.error(`Error: Could not read file: ${filePath}`);
+    process.exit(1);
+  }
+  content = content.replace(/^\s*export\s+const\s+meta\s*=\s*\{[^}]*\};\s*/, "");
+  const result = await apiRequest(
+    apiUrl,
+    token,
+    "PUT",
+    `${writePrefix(orgMode)}/pages?slug=${encodeURIComponent(slug)}`,
+    { content, message, createdBy, ...parseNavFields(argv) }
+  );
+  if (!result.ok) {
+    console.error(`Error: ${result.error}`);
+    process.exit(1);
+  }
+  console.log(`Published new version of ${slug}`);
+}
+async function handleHistory(argv, apiUrl, token, orgMode) {
+  const slug = argv[0];
+  if (!slug || slug.startsWith("--")) {
+    console.error("Error: Missing slug.");
+    console.error("Usage: canary docs history <slug>");
+    process.exit(1);
+  }
+  const jsonOutput = hasFlag(argv, "--json");
+  const res = await fetch(`${apiUrl}${readPrefix(orgMode)}/pages/versions?slug=${encodeURIComponent(slug)}`, {
+    headers: { Authorization: `Bearer ${token}` }
+  });
+  if (!res.ok) {
+    const body2 = await res.json().catch(() => ({ error: res.statusText }));
+    console.error(`Error: ${body2.error ?? res.statusText}`);
+    process.exit(1);
+  }
+  const body = await res.json();
+  const versions = body.data?.versions ?? [];
+  if (jsonOutput) {
+    console.log(JSON.stringify(versions, null, 2));
+    return;
+  }
+  if (versions.length === 0) {
+    console.log(`No versions found for ${slug}.`);
+    return;
+  }
+  for (const v of versions) {
+    const date = new Date(v.createdAt).toISOString().slice(0, 19).replace("T", " ");
+    const msg = v.message ? ` \u2014 ${v.message}` : "";
+    console.log(`  v${v.version}  ${date}  ${v.createdBy}${msg}`);
+  }
+}
+async function handleCreate(argv, apiUrl, token, orgMode) {
+  const slug = argv[0];
+  if (!slug || slug.startsWith("--")) {
+    console.error("Error: Missing slug.");
+    console.error("Usage: canary docs create <slug> --file <path> --title <text>");
+    process.exit(1);
+  }
+  const filePath = getArgValue(argv, "--file");
+  const title = getArgValue(argv, "--title");
+  if (!filePath) {
+    console.error("Error: Missing --file <path>.");
+    process.exit(1);
+  }
+  if (!title) {
+    console.error("Error: Missing --title <text>.");
+    process.exit(1);
+  }
+  const description = getArgValue(argv, "--description") ?? void 0;
+  const message = getArgValue(argv, "--message") ?? void 0;
+  let content;
+  try {
+    content = await readFile(filePath, "utf8");
+  } catch {
+    console.error(`Error: Could not read file: ${filePath}`);
+    process.exit(1);
+  }
+  content = content.replace(/^\s*export\s+const\s+meta\s*=\s*\{[^}]*\};\s*/, "");
+  const result = await apiRequest(
+    apiUrl,
+    token,
+    "POST",
+    `${writePrefix(orgMode)}/pages`,
+    {
+      slug,
+      title,
+      description,
+      content,
+      message,
+      ...parseNavFields(argv)
+    }
+  );
+  if (!result.ok) {
+    console.error(`Error: ${result.error}`);
+    process.exit(1);
+  }
+  console.log(`Created page: ${slug}`);
+}
+async function handleSearch(argv, apiUrl, token, orgMode) {
+  const query = argv.filter((a) => !a.startsWith("--")).join(" ").trim();
+  if (!query) {
+    console.error("Error: Missing search query.");
+    console.error("Usage: canary docs search <query> [--limit <n>] [--json]");
+    process.exit(1);
+  }
+  const jsonOutput = hasFlag(argv, "--json");
+  const limitArg = getArgValue(argv, "--limit");
+  const params = new URLSearchParams({ q: query });
+  if (limitArg) params.set("limit", limitArg);
+  const searchPath = orgMode ? "/docs/search" : "/public/docs/search";
+  const res = await fetch(`${apiUrl}${searchPath}?${params.toString()}`, {
+    headers: { Authorization: `Bearer ${token}` }
+  });
+  if (!res.ok) {
+    const body2 = await res.json().catch(() => ({ error: res.statusText }));
+    console.error(`Error: ${body2.error ?? res.statusText}`);
+    process.exit(1);
+  }
+  const body = await res.json();
+  const results = body.data?.results ?? [];
+  if (jsonOutput) {
+    console.log(JSON.stringify(results, null, 2));
+    return;
+  }
+  if (results.length === 0) {
+    console.log("No results found.");
+    return;
+  }
+  for (const r of results) {
+    const desc = r.description ? `  ${r.description}` : "";
+    const excerpt = r.excerpt ? `  ${r.excerpt.replace(/<\/?mark>/g, "").replace(/\n/g, " ").slice(0, 120)}` : "";
+    console.log(`  ${r.path ?? r.title}`);
+    if (r.title) console.log(`    ${r.title}${desc}`);
+    if (excerpt) console.log(`   ${excerpt}`);
+    console.log();
+  }
+}
+async function handleDelete(argv, apiUrl, token, orgMode) {
+  const slug = argv[0];
+  if (!slug || slug.startsWith("--")) {
+    console.error("Error: Missing slug.");
+    console.error("Usage: canary docs delete <slug>");
+    process.exit(1);
+  }
+  const result = await apiRequest(
+    apiUrl,
+    token,
+    "DELETE",
+    `${writePrefix(orgMode)}/pages?slug=${encodeURIComponent(slug)}`
+  );
+  if (!result.ok) {
+    console.error(`Error: ${result.error}`);
+    process.exit(1);
+  }
+  console.log(`Deleted page: ${slug}`);
+}
+function printDocsHelp() {
+  console.log(
+    [
+      "Usage: canary docs <sub-command> [options]",
+      "",
+      "Sub-commands:",
+      "  list                                    List all doc pages",
+      "  get <slug>                              Print content to stdout",
+      "  search <query>                          Full-text search docs",
+      "  pull <slug> [--output <path>]           Download to local file",
+      "  push <slug> --file <path> [--message]   Publish new version",
+      "  history <slug>                          Show version history",
+      "  create <slug> --file <path> --title ... Create new page",
+      "  delete <slug>                           Soft-delete a page",
+      "",
+      "Options:",
+      "  --org                  Use org-scoped endpoints (requires auth)",
+      "  --file <path>          Path to markdown file",
+      "  --title <text>         Page title (create only)",
+      "  --description <text>   Page description (create only)",
+      "  --section <text>       Sidebar section (data-driven nav; create/push)",
+      "  --group <text>         Sidebar sub-group within the section (create/push)",
+      "  --order <n>            Sort order within the section/group (create/push)",
+      "  --message <text>       Version commit message",
+      "  --limit <n>            Max results for search (default: 8, max: 20)",
+      "  --output <path>        Output path for pull (default: <tmpdir>/canary/docs/<slug>.md)",
+      "  --json                 Output as JSON (list, history, search)",
+      "  --env <env>            Target environment (prod, dev)",
+      "  --api-url <url>        API URL override",
+      "  --token <key>          API token override"
+    ].join("\n")
+  );
+}
+async function runDocs(argv) {
+  const [subCommand, ...rest] = argv;
+  if (!subCommand || subCommand === "help" || hasFlag(argv, "--help", "-h")) {
+    printDocsHelp();
+    return;
+  }
+  const { apiUrl, token } = await resolveConfig(argv);
+  const orgMode = hasFlag(rest, "--org");
+  switch (subCommand) {
+    case "list":
+      await handleList(rest, apiUrl, token, orgMode);
+      break;
+    case "get":
+      await handleGet(rest, apiUrl, token, orgMode);
+      break;
+    case "search":
+      await handleSearch(rest, apiUrl, token, orgMode);
+      break;
+    case "pull":
+      await handlePull(rest, apiUrl, token, orgMode);
+      break;
+    case "push":
+      await handlePush(rest, apiUrl, token, orgMode);
+      break;
+    case "history":
+      await handleHistory(rest, apiUrl, token, orgMode);
+      break;
+    case "create":
+      await handleCreate(rest, apiUrl, token, orgMode);
+      break;
+    case "delete":
+      await handleDelete(rest, apiUrl, token, orgMode);
+      break;
+    default:
+      console.error(`Unknown sub-command: ${subCommand}`);
+      printDocsHelp();
+      process.exit(1);
+  }
+}
+export {
+  runDocs
+};
+//# sourceMappingURL=docs-3SSORHB5.js.map

package/dist/docs-3SSORHB5.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/docs.ts"],"sourcesContent":["/**\n * CLI Documentation Management\n *\n * Allows agents and superadmins to list, pull, edit, and push documentation pages.\n * Supports both global (public/superadmin) and org-scoped (--org) modes.\n */\n\nimport { readFile, writeFile, mkdir } from 'node:fs/promises';\nimport path from 'node:path';\nimport { getSubDir } from '@chatsdet/tmp';\nimport process from 'node:process';\nimport { resolveConfig, getArgValue, hasFlag } from './auth.js';\nimport { apiRequest } from './cli-helpers.js';\n\ntype DocsPageListItem = {\n  slug: string;\n  title: string;\n  description: string | null;\n  updatedAt: string;\n  publishedBy: string | null;\n};\n\ntype DocsVersionItem = {\n  version: number;\n  title: string;\n  checksum: string;\n  message: string | null;\n  createdBy: string;\n  createdAt: string;\n};\n\ntype DocsApiResponse = {\n  ok: boolean;\n  error?: string;\n  data?: {\n    slug?: string;\n    title?: string;\n    pages?: DocsPageListItem[];\n    content?: string;\n    versions?: DocsVersionItem[];\n  };\n};\n\nconst DEFAULT_PULL_DIR = getSubDir('docs');\n\n/**\n * Parse the optional data-driven sidebar-placement flags. Only present flags\n * are included, so `push`/`create` without them leaves existing values intact.\n */\nfunction parseNavFields(argv: string[]): {\n  navSection?: string;\n  navGroup?: string;\n  navOrder?: number;\n} {\n  const out: { navSection?: string; navGroup?: string; navOrder?: number } = {};\n  const section = getArgValue(argv, '--section');\n  const group = getArgValue(argv, '--group');\n  const order = getArgValue(argv, '--order');\n  if (section != null) out.navSection = section;\n  if (group != null) out.navGroup = group;\n  if (order != null) {\n    const n = Number.parseInt(order, 10);\n    if (Number.isNaN(n)) {\n      console.error('Error: --order must be an integer.');\n      process.exit(1);\n    }\n    out.navOrder = n;\n  }\n  return out;\n}\n\n/** Return the base path prefix for read endpoints based on --org flag */\nfunction readPrefix(orgMode: boolean): string {\n  return orgMode ? '/docs' : '/public/docs';\n}\n\n/** Return the base path prefix for write endpoints based on --org flag */\nfunction writePrefix(orgMode: boolean): string {\n  return orgMode ? '/docs' : '/superadmin/docs';\n}\n\nasync function handleList(argv: string[], apiUrl: string, token: string, orgMode: boolean): Promise<void> {\n  const jsonOutput = hasFlag(argv, '--json');\n  const result = await apiRequest<DocsApiResponse>(apiUrl, token, 'GET', `${readPrefix(orgMode)}/pages`);\n  const pages: DocsPageListItem[] = result.data?.pages ?? [];\n\n  if (jsonOutput) {\n    console.log(JSON.stringify(pages, null, 2));\n    return;\n  }\n\n  if (pages.length === 0) {\n    console.log('No documentation pages found.');\n    return;\n  }\n\n  // Default: markdown table for easy consumption by agents and humans\n  const slugWidth = Math.max(4, ...pages.map((p) => p.slug.length));\n  const titleWidth = Math.max(5, ...pages.map((p) => p.title.length));\n  const header = `| ${'Slug'.padEnd(slugWidth)} | ${'Title'.padEnd(titleWidth)} | Updated    | Published By |`;\n  const sep = `| ${'-'.repeat(slugWidth)} | ${'-'.repeat(titleWidth)} | ---------- | ------------ |`;\n  console.log(header);\n  console.log(sep);\n  for (const page of pages) {\n    const date = new Date(page.updatedAt).toISOString().slice(0, 10);\n    const by = page.publishedBy ?? '';\n    console.log(`| ${page.slug.padEnd(slugWidth)} | ${page.title.padEnd(titleWidth)} | ${date} | ${by.padEnd(12)} |`);\n  }\n}\n\nasync function fetchDocContent(slug: string, apiUrl: string, token: string, orgMode: boolean): Promise<string> {\n  if (orgMode) {\n    const result = await apiRequest<DocsApiResponse>(\n      apiUrl,\n      token,\n      'GET',\n      `/docs/pages/content?slug=${encodeURIComponent(slug)}`\n    );\n    if (!result.ok) {\n      console.error(`Error: ${result.error}`);\n      process.exit(1);\n    }\n    return result.data?.content ?? '';\n  }\n\n  const res = await fetch(`${apiUrl}/public/docs/pages/raw?slug=${encodeURIComponent(slug)}`, {\n    headers: { Authorization: `Bearer ${token}` },\n  });\n\n  if (res.status === 404) {\n    console.error(`Error: Page not found: ${slug}`);\n    process.exit(1);\n  }\n\n  if (!res.ok) {\n    console.error(`Error: ${res.statusText}`);\n    process.exit(1);\n  }\n\n  return res.text();\n}\n\nasync function handleGet(argv: string[], apiUrl: string, token: string, orgMode: boolean): Promise<void> {\n  const slug = argv[0];\n  if (!slug || slug.startsWith('--')) {\n    console.error('Error: Missing slug.');\n    console.error('Usage: canary docs get <slug>');\n    process.exit(1);\n  }\n\n  const content = await fetchDocContent(slug, apiUrl, token, orgMode);\n  console.log(content);\n}\n\nasync function handlePull(argv: string[], apiUrl: string, token: string, orgMode: boolean): Promise<void> {\n  const slug = argv[0];\n  if (!slug || slug.startsWith('--')) {\n    console.error('Error: Missing slug.');\n    console.error('Usage: canary docs pull <slug> [--output <path>]');\n    process.exit(1);\n  }\n\n  const outputPath = getArgValue(argv, '--output') ?? path.join(DEFAULT_PULL_DIR, `${slug}.md`);\n  const content = await fetchDocContent(slug, apiUrl, token, orgMode);\n\n  await mkdir(path.dirname(outputPath), { recursive: true });\n  await writeFile(outputPath, content, 'utf8');\n  console.log(`Pulled ${slug} → ${outputPath}`);\n}\n\nasync function handlePush(argv: string[], apiUrl: string, token: string, orgMode: boolean): Promise<void> {\n  const slug = argv[0];\n  if (!slug || slug.startsWith('--')) {\n    console.error('Error: Missing slug.');\n    console.error('Usage: canary docs push <slug> --file <path> [--message <text>]');\n    process.exit(1);\n  }\n\n  const filePath = getArgValue(argv, '--file');\n  if (!filePath) {\n    console.error('Error: Missing --file <path>.');\n    process.exit(1);\n  }\n\n  const message = getArgValue(argv, '--message') ?? undefined;\n  const createdBy = getArgValue(argv, '--created-by') ?? undefined;\n\n  let content: string;\n  try {\n    content = await readFile(filePath, 'utf8');\n  } catch {\n    console.error(`Error: Could not read file: ${filePath}`);\n    process.exit(1);\n  }\n\n  // Strip `export const meta = { ... };` block so raw JS isn't stored as doc content\n  content = content.replace(/^\\s*export\\s+const\\s+meta\\s*=\\s*\\{[^}]*\\};\\s*/, '');\n\n  const result = await apiRequest<DocsApiResponse>(\n    apiUrl,\n    token,\n    'PUT',\n    `${writePrefix(orgMode)}/pages?slug=${encodeURIComponent(slug)}`,\n    { content, message, createdBy, ...parseNavFields(argv) }\n  );\n\n  if (!result.ok) {\n    console.error(`Error: ${result.error}`);\n    process.exit(1);\n  }\n\n  console.log(`Published new version of ${slug}`);\n}\n\nasync function handleHistory(argv: string[], apiUrl: string, token: string, orgMode: boolean): Promise<void> {\n  const slug = argv[0];\n  if (!slug || slug.startsWith('--')) {\n    console.error('Error: Missing slug.');\n    console.error('Usage: canary docs history <slug>');\n    process.exit(1);\n  }\n\n  const jsonOutput = hasFlag(argv, '--json');\n\n  const res = await fetch(`${apiUrl}${readPrefix(orgMode)}/pages/versions?slug=${encodeURIComponent(slug)}`, {\n    headers: { Authorization: `Bearer ${token}` },\n  });\n\n  if (!res.ok) {\n    const body = await res.json().catch(() => ({ error: res.statusText }));\n    console.error(`Error: ${(body as { error?: string }).error ?? res.statusText}`);\n    process.exit(1);\n  }\n\n  const body = (await res.json()) as DocsApiResponse;\n  const versions = body.data?.versions ?? [];\n\n  if (jsonOutput) {\n    console.log(JSON.stringify(versions, null, 2));\n    return;\n  }\n\n  if (versions.length === 0) {\n    console.log(`No versions found for ${slug}.`);\n    return;\n  }\n\n  for (const v of versions) {\n    const date = new Date(v.createdAt).toISOString().slice(0, 19).replace('T', ' ');\n    const msg = v.message ? ` — ${v.message}` : '';\n    console.log(`  v${v.version}  ${date}  ${v.createdBy}${msg}`);\n  }\n}\n\nasync function handleCreate(argv: string[], apiUrl: string, token: string, orgMode: boolean): Promise<void> {\n  const slug = argv[0];\n  if (!slug || slug.startsWith('--')) {\n    console.error('Error: Missing slug.');\n    console.error('Usage: canary docs create <slug> --file <path> --title <text>');\n    process.exit(1);\n  }\n\n  const filePath = getArgValue(argv, '--file');\n  const title = getArgValue(argv, '--title');\n\n  if (!filePath) {\n    console.error('Error: Missing --file <path>.');\n    process.exit(1);\n  }\n  if (!title) {\n    console.error('Error: Missing --title <text>.');\n    process.exit(1);\n  }\n\n  const description = getArgValue(argv, '--description') ?? undefined;\n  const message = getArgValue(argv, '--message') ?? undefined;\n\n  let content: string;\n  try {\n    content = await readFile(filePath, 'utf8');\n  } catch {\n    console.error(`Error: Could not read file: ${filePath}`);\n    process.exit(1);\n  }\n\n  // Strip `export const meta = { ... };` block so raw JS isn't stored as doc content\n  content = content.replace(/^\\s*export\\s+const\\s+meta\\s*=\\s*\\{[^}]*\\};\\s*/, '');\n\n  const result = await apiRequest<DocsApiResponse>(\n    apiUrl,\n    token,\n    'POST',\n    `${writePrefix(orgMode)}/pages`,\n    {\n      slug,\n      title,\n      description,\n      content,\n      message,\n      ...parseNavFields(argv),\n    }\n  );\n\n  if (!result.ok) {\n    console.error(`Error: ${result.error}`);\n    process.exit(1);\n  }\n\n  console.log(`Created page: ${slug}`);\n}\n\ntype DocsSearchResult = {\n  path: string;\n  title: string;\n  description: string | null;\n  excerpt: string;\n};\n\ntype DocsSearchResponse = {\n  ok: boolean;\n  error?: string;\n  data?: { results: DocsSearchResult[] };\n};\n\nasync function handleSearch(argv: string[], apiUrl: string, token: string, orgMode: boolean): Promise<void> {\n  const query = argv.filter((a) => !a.startsWith('--')).join(' ').trim();\n  if (!query) {\n    console.error('Error: Missing search query.');\n    console.error('Usage: canary docs search <query> [--limit <n>] [--json]');\n    process.exit(1);\n  }\n\n  const jsonOutput = hasFlag(argv, '--json');\n  const limitArg = getArgValue(argv, '--limit');\n  const params = new URLSearchParams({ q: query });\n  if (limitArg) params.set('limit', limitArg);\n\n  const searchPath = orgMode ? '/docs/search' : '/public/docs/search';\n  const res = await fetch(`${apiUrl}${searchPath}?${params.toString()}`, {\n    headers: { Authorization: `Bearer ${token}` },\n  });\n\n  if (!res.ok) {\n    const body = await res.json().catch(() => ({ error: res.statusText }));\n    console.error(`Error: ${(body as { error?: string }).error ?? res.statusText}`);\n    process.exit(1);\n  }\n\n  const body = (await res.json()) as DocsSearchResponse;\n  const results = body.data?.results ?? [];\n\n  if (jsonOutput) {\n    console.log(JSON.stringify(results, null, 2));\n    return;\n  }\n\n  if (results.length === 0) {\n    console.log('No results found.');\n    return;\n  }\n\n  for (const r of results) {\n    const desc = r.description ? `  ${r.description}` : '';\n    const excerpt = r.excerpt\n      ? `  ${r.excerpt.replace(/<\\/?mark>/g, '').replace(/\\n/g, ' ').slice(0, 120)}`\n      : '';\n    console.log(`  ${r.path ?? r.title}`);\n    if (r.title) console.log(`    ${r.title}${desc}`);\n    if (excerpt) console.log(`   ${excerpt}`);\n    console.log();\n  }\n}\n\nasync function handleDelete(argv: string[], apiUrl: string, token: string, orgMode: boolean): Promise<void> {\n  const slug = argv[0];\n  if (!slug || slug.startsWith('--')) {\n    console.error('Error: Missing slug.');\n    console.error('Usage: canary docs delete <slug>');\n    process.exit(1);\n  }\n\n  const result = await apiRequest<DocsApiResponse>(\n    apiUrl,\n    token,\n    'DELETE',\n    `${writePrefix(orgMode)}/pages?slug=${encodeURIComponent(slug)}`\n  );\n\n  if (!result.ok) {\n    console.error(`Error: ${result.error}`);\n    process.exit(1);\n  }\n\n  console.log(`Deleted page: ${slug}`);\n}\n\nfunction printDocsHelp(): void {\n  console.log(\n    [\n      'Usage: canary docs <sub-command> [options]',\n      '',\n      'Sub-commands:',\n      '  list                                    List all doc pages',\n      '  get <slug>                              Print content to stdout',\n      '  search <query>                          Full-text search docs',\n      '  pull <slug> [--output <path>]           Download to local file',\n      '  push <slug> --file <path> [--message]   Publish new version',\n      '  history <slug>                          Show version history',\n      '  create <slug> --file <path> --title ... Create new page',\n      '  delete <slug>                           Soft-delete a page',\n      '',\n      'Options:',\n      '  --org                  Use org-scoped endpoints (requires auth)',\n      '  --file <path>          Path to markdown file',\n      '  --title <text>         Page title (create only)',\n      '  --description <text>   Page description (create only)',\n      '  --section <text>       Sidebar section (data-driven nav; create/push)',\n      '  --group <text>         Sidebar sub-group within the section (create/push)',\n      '  --order <n>            Sort order within the section/group (create/push)',\n      '  --message <text>       Version commit message',\n      '  --limit <n>            Max results for search (default: 8, max: 20)',\n      '  --output <path>        Output path for pull (default: <tmpdir>/canary/docs/<slug>.md)',\n      '  --json                 Output as JSON (list, history, search)',\n      '  --env <env>            Target environment (prod, dev)',\n      '  --api-url <url>        API URL override',\n      '  --token <key>          API token override',\n    ].join('\\n')\n  );\n}\n\nexport async function runDocs(argv: string[]): Promise<void> {\n  const [subCommand, ...rest] = argv;\n\n  if (!subCommand || subCommand === 'help' || hasFlag(argv, '--help', '-h')) {\n    printDocsHelp();\n    return;\n  }\n\n  const { apiUrl, token } = await resolveConfig(argv);\n  const orgMode = hasFlag(rest, '--org');\n\n  switch (subCommand) {\n    case 'list':\n      await handleList(rest, apiUrl, token, orgMode);\n      break;\n    case 'get':\n      await handleGet(rest, apiUrl, token, orgMode);\n      break;\n    case 'search':\n      await handleSearch(rest, apiUrl, token, orgMode);\n      break;\n    case 'pull':\n      await handlePull(rest, apiUrl, token, orgMode);\n      break;\n    case 'push':\n      await handlePush(rest, apiUrl, token, orgMode);\n      break;\n    case 'history':\n      await handleHistory(rest, apiUrl, token, orgMode);\n      break;\n    case 'create':\n      await handleCreate(rest, apiUrl, token, orgMode);\n      break;\n    case 'delete':\n      await handleDelete(rest, apiUrl, token, orgMode);\n      break;\n    default:\n      console.error(`Unknown sub-command: ${subCommand}`);\n      printDocsHelp();\n      process.exit(1);\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;AAOA,SAAS,UAAU,WAAW,aAAa;AAC3C,OAAO,UAAU;AAEjB,OAAO,aAAa;AAiCpB,IAAM,mBAAmB,UAAU,MAAM;AAMzC,SAAS,eAAe,MAItB;AACA,QAAM,MAAqE,CAAC;AAC5E,QAAM,UAAU,YAAY,MAAM,WAAW;AAC7C,QAAM,QAAQ,YAAY,MAAM,SAAS;AACzC,QAAM,QAAQ,YAAY,MAAM,SAAS;AACzC,MAAI,WAAW,KAAM,KAAI,aAAa;AACtC,MAAI,SAAS,KAAM,KAAI,WAAW;AAClC,MAAI,SAAS,MAAM;AACjB,UAAM,IAAI,OAAO,SAAS,OAAO,EAAE;AACnC,QAAI,OAAO,MAAM,CAAC,GAAG;AACnB,cAAQ,MAAM,oCAAoC;AAClD,cAAQ,KAAK,CAAC;AAAA,IAChB;AACA,QAAI,WAAW;AAAA,EACjB;AACA,SAAO;AACT;AAGA,SAAS,WAAW,SAA0B;AAC5C,SAAO,UAAU,UAAU;AAC7B;AAGA,SAAS,YAAY,SAA0B;AAC7C,SAAO,UAAU,UAAU;AAC7B;AAEA,eAAe,WAAW,MAAgB,QAAgB,OAAe,SAAiC;AACxG,QAAM,aAAa,QAAQ,MAAM,QAAQ;AACzC,QAAM,SAAS,MAAM,WAA4B,QAAQ,OAAO,OAAO,GAAG,WAAW,OAAO,CAAC,QAAQ;AACrG,QAAM,QAA4B,OAAO,MAAM,SAAS,CAAC;AAEzD,MAAI,YAAY;AACd,YAAQ,IAAI,KAAK,UAAU,OAAO,MAAM,CAAC,CAAC;AAC1C;AAAA,EACF;AAEA,MAAI,MAAM,WAAW,GAAG;AACtB,YAAQ,IAAI,+BAA+B;AAC3C;AAAA,EACF;AAGA,QAAM,YAAY,KAAK,IAAI,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,KAAK,MAAM,CAAC;AAChE,QAAM,aAAa,KAAK,IAAI,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,MAAM,MAAM,CAAC;AAClE,QAAM,SAAS,KAAK,OAAO,OAAO,SAAS,CAAC,MAAM,QAAQ,OAAO,UAAU,CAAC;AAC5E,QAAM,MAAM,KAAK,IAAI,OAAO,SAAS,CAAC,MAAM,IAAI,OAAO,UAAU,CAAC;AAClE,UAAQ,IAAI,MAAM;AAClB,UAAQ,IAAI,GAAG;AACf,aAAW,QAAQ,OAAO;AACxB,UAAM,OAAO,IAAI,KAAK,KAAK,SAAS,EAAE,YAAY,EAAE,MAAM,GAAG,EAAE;AAC/D,UAAM,KAAK,KAAK,eAAe;AAC/B,YAAQ,IAAI,KAAK,KAAK,KAAK,OAAO,SAAS,CAAC,MAAM,KAAK,MAAM,OAAO,UAAU,CAAC,MAAM,IAAI,MAAM,GAAG,OAAO,EAAE,CAAC,IAAI;AAAA,EAClH;AACF;AAEA,eAAe,gBAAgB,MAAc,QAAgB,OAAe,SAAmC;AAC7G,MAAI,SAAS;AACX,UAAM,SAAS,MAAM;AAAA,MACnB;AAAA,MACA;AAAA,MACA;AAAA,MACA,4BAA4B,mBAAmB,IAAI,CAAC;AAAA,IACtD;AACA,QAAI,CAAC,OAAO,IAAI;AACd,cAAQ,MAAM,UAAU,OAAO,KAAK,EAAE;AACtC,cAAQ,KAAK,CAAC;AAAA,IAChB;AACA,WAAO,OAAO,MAAM,WAAW;AAAA,EACjC;AAEA,QAAM,MAAM,MAAM,MAAM,GAAG,MAAM,+BAA+B,mBAAmB,IAAI,CAAC,IAAI;AAAA,IAC1F,SAAS,EAAE,eAAe,UAAU,KAAK,GAAG;AAAA,EAC9C,CAAC;AAED,MAAI,IAAI,WAAW,KAAK;AACtB,YAAQ,MAAM,0BAA0B,IAAI,EAAE;AAC9C,YAAQ,KAAK,CAAC;AAAA,EAChB;AAEA,MAAI,CAAC,IAAI,IAAI;AACX,YAAQ,MAAM,UAAU,IAAI,UAAU,EAAE;AACxC,YAAQ,KAAK,CAAC;AAAA,EAChB;AAEA,SAAO,IAAI,KAAK;AAClB;AAEA,eAAe,UAAU,MAAgB,QAAgB,OAAe,SAAiC;AACvG,QAAM,OAAO,KAAK,CAAC;AACnB,MAAI,CAAC,QAAQ,KAAK,WAAW,IAAI,GAAG;AAClC,YAAQ,MAAM,sBAAsB;AACpC,YAAQ,MAAM,+BAA+B;AAC7C,YAAQ,KAAK,CAAC;AAAA,EAChB;AAEA,QAAM,UAAU,MAAM,gBAAgB,MAAM,QAAQ,OAAO,OAAO;AAClE,UAAQ,IAAI,OAAO;AACrB;AAEA,eAAe,WAAW,MAAgB,QAAgB,OAAe,SAAiC;AACxG,QAAM,OAAO,KAAK,CAAC;AACnB,MAAI,CAAC,QAAQ,KAAK,WAAW,IAAI,GAAG;AAClC,YAAQ,MAAM,sBAAsB;AACpC,YAAQ,MAAM,kDAAkD;AAChE,YAAQ,KAAK,CAAC;AAAA,EAChB;AAEA,QAAM,aAAa,YAAY,MAAM,UAAU,KAAK,KAAK,KAAK,kBAAkB,GAAG,IAAI,KAAK;AAC5F,QAAM,UAAU,MAAM,gBAAgB,MAAM,QAAQ,OAAO,OAAO;AAElE,QAAM,MAAM,KAAK,QAAQ,UAAU,GAAG,EAAE,WAAW,KAAK,CAAC;AACzD,QAAM,UAAU,YAAY,SAAS,MAAM;AAC3C,UAAQ,IAAI,UAAU,IAAI,WAAM,UAAU,EAAE;AAC9C;AAEA,eAAe,WAAW,MAAgB,QAAgB,OAAe,SAAiC;AACxG,QAAM,OAAO,KAAK,CAAC;AACnB,MAAI,CAAC,QAAQ,KAAK,WAAW,IAAI,GAAG;AAClC,YAAQ,MAAM,sBAAsB;AACpC,YAAQ,MAAM,iEAAiE;AAC/E,YAAQ,KAAK,CAAC;AAAA,EAChB;AAEA,QAAM,WAAW,YAAY,MAAM,QAAQ;AAC3C,MAAI,CAAC,UAAU;AACb,YAAQ,MAAM,+BAA+B;AAC7C,YAAQ,KAAK,CAAC;AAAA,EAChB;AAEA,QAAM,UAAU,YAAY,MAAM,WAAW,KAAK;AAClD,QAAM,YAAY,YAAY,MAAM,cAAc,KAAK;AAEvD,MAAI;AACJ,MAAI;AACF,cAAU,MAAM,SAAS,UAAU,MAAM;AAAA,EAC3C,QAAQ;AACN,YAAQ,MAAM,+BAA+B,QAAQ,EAAE;AACvD,YAAQ,KAAK,CAAC;AAAA,EAChB;AAGA,YAAU,QAAQ,QAAQ,iDAAiD,EAAE;AAE7E,QAAM,SAAS,MAAM;AAAA,IACnB;AAAA,IACA;AAAA,IACA;AAAA,IACA,GAAG,YAAY,OAAO,CAAC,eAAe,mBAAmB,IAAI,CAAC;AAAA,IAC9D,EAAE,SAAS,SAAS,WAAW,GAAG,eAAe,IAAI,EAAE;AAAA,EACzD;AAEA,MAAI,CAAC,OAAO,IAAI;AACd,YAAQ,MAAM,UAAU,OAAO,KAAK,EAAE;AACtC,YAAQ,KAAK,CAAC;AAAA,EAChB;AAEA,UAAQ,IAAI,4BAA4B,IAAI,EAAE;AAChD;AAEA,eAAe,cAAc,MAAgB,QAAgB,OAAe,SAAiC;AAC3G,QAAM,OAAO,KAAK,CAAC;AACnB,MAAI,CAAC,QAAQ,KAAK,WAAW,IAAI,GAAG;AAClC,YAAQ,MAAM,sBAAsB;AACpC,YAAQ,MAAM,mCAAmC;AACjD,YAAQ,KAAK,CAAC;AAAA,EAChB;AAEA,QAAM,aAAa,QAAQ,MAAM,QAAQ;AAEzC,QAAM,MAAM,MAAM,MAAM,GAAG,MAAM,GAAG,WAAW,OAAO,CAAC,wBAAwB,mBAAmB,IAAI,CAAC,IAAI;AAAA,IACzG,SAAS,EAAE,eAAe,UAAU,KAAK,GAAG;AAAA,EAC9C,CAAC;AAED,MAAI,CAAC,IAAI,IAAI;AACX,UAAMA,QAAO,MAAM,IAAI,KAAK,EAAE,MAAM,OAAO,EAAE,OAAO,IAAI,WAAW,EAAE;AACrE,YAAQ,MAAM,UAAWA,MAA4B,SAAS,IAAI,UAAU,EAAE;AAC9E,YAAQ,KAAK,CAAC;AAAA,EAChB;AAEA,QAAM,OAAQ,MAAM,IAAI,KAAK;AAC7B,QAAM,WAAW,KAAK,MAAM,YAAY,CAAC;AAEzC,MAAI,YAAY;AACd,YAAQ,IAAI,KAAK,UAAU,UAAU,MAAM,CAAC,CAAC;AAC7C;AAAA,EACF;AAEA,MAAI,SAAS,WAAW,GAAG;AACzB,YAAQ,IAAI,yBAAyB,IAAI,GAAG;AAC5C;AAAA,EACF;AAEA,aAAW,KAAK,UAAU;AACxB,UAAM,OAAO,IAAI,KAAK,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,GAAG,EAAE,EAAE,QAAQ,KAAK,GAAG;AAC9E,UAAM,MAAM,EAAE,UAAU,WAAM,EAAE,OAAO,KAAK;AAC5C,YAAQ,IAAI,MAAM,EAAE,OAAO,KAAK,IAAI,KAAK,EAAE,SAAS,GAAG,GAAG,EAAE;AAAA,EAC9D;AACF;AAEA,eAAe,aAAa,MAAgB,QAAgB,OAAe,SAAiC;AAC1G,QAAM,OAAO,KAAK,CAAC;AACnB,MAAI,CAAC,QAAQ,KAAK,WAAW,IAAI,GAAG;AAClC,YAAQ,MAAM,sBAAsB;AACpC,YAAQ,MAAM,+DAA+D;AAC7E,YAAQ,KAAK,CAAC;AAAA,EAChB;AAEA,QAAM,WAAW,YAAY,MAAM,QAAQ;AAC3C,QAAM,QAAQ,YAAY,MAAM,SAAS;AAEzC,MAAI,CAAC,UAAU;AACb,YAAQ,MAAM,+BAA+B;AAC7C,YAAQ,KAAK,CAAC;AAAA,EAChB;AACA,MAAI,CAAC,OAAO;AACV,YAAQ,MAAM,gCAAgC;AAC9C,YAAQ,KAAK,CAAC;AAAA,EAChB;AAEA,QAAM,cAAc,YAAY,MAAM,eAAe,KAAK;AAC1D,QAAM,UAAU,YAAY,MAAM,WAAW,KAAK;AAElD,MAAI;AACJ,MAAI;AACF,cAAU,MAAM,SAAS,UAAU,MAAM;AAAA,EAC3C,QAAQ;AACN,YAAQ,MAAM,+BAA+B,QAAQ,EAAE;AACvD,YAAQ,KAAK,CAAC;AAAA,EAChB;AAGA,YAAU,QAAQ,QAAQ,iDAAiD,EAAE;AAE7E,QAAM,SAAS,MAAM;AAAA,IACnB;AAAA,IACA;AAAA,IACA;AAAA,IACA,GAAG,YAAY,OAAO,CAAC;AAAA,IACvB;AAAA,MACE;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,GAAG,eAAe,IAAI;AAAA,IACxB;AAAA,EACF;AAEA,MAAI,CAAC,OAAO,IAAI;AACd,YAAQ,MAAM,UAAU,OAAO,KAAK,EAAE;AACtC,YAAQ,KAAK,CAAC;AAAA,EAChB;AAEA,UAAQ,IAAI,iBAAiB,IAAI,EAAE;AACrC;AAeA,eAAe,aAAa,MAAgB,QAAgB,OAAe,SAAiC;AAC1G,QAAM,QAAQ,KAAK,OAAO,CAAC,MAAM,CAAC,EAAE,WAAW,IAAI,CAAC,EAAE,KAAK,GAAG,EAAE,KAAK;AACrE,MAAI,CAAC,OAAO;AACV,YAAQ,MAAM,8BAA8B;AAC5C,YAAQ,MAAM,0DAA0D;AACxE,YAAQ,KAAK,CAAC;AAAA,EAChB;AAEA,QAAM,aAAa,QAAQ,MAAM,QAAQ;AACzC,QAAM,WAAW,YAAY,MAAM,SAAS;AAC5C,QAAM,SAAS,IAAI,gBAAgB,EAAE,GAAG,MAAM,CAAC;AAC/C,MAAI,SAAU,QAAO,IAAI,SAAS,QAAQ;AAE1C,QAAM,aAAa,UAAU,iBAAiB;AAC9C,QAAM,MAAM,MAAM,MAAM,GAAG,MAAM,GAAG,UAAU,IAAI,OAAO,SAAS,CAAC,IAAI;AAAA,IACrE,SAAS,EAAE,eAAe,UAAU,KAAK,GAAG;AAAA,EAC9C,CAAC;AAED,MAAI,CAAC,IAAI,IAAI;AACX,UAAMA,QAAO,MAAM,IAAI,KAAK,EAAE,MAAM,OAAO,EAAE,OAAO,IAAI,WAAW,EAAE;AACrE,YAAQ,MAAM,UAAWA,MAA4B,SAAS,IAAI,UAAU,EAAE;AAC9E,YAAQ,KAAK,CAAC;AAAA,EAChB;AAEA,QAAM,OAAQ,MAAM,IAAI,KAAK;AAC7B,QAAM,UAAU,KAAK,MAAM,WAAW,CAAC;AAEvC,MAAI,YAAY;AACd,YAAQ,IAAI,KAAK,UAAU,SAAS,MAAM,CAAC,CAAC;AAC5C;AAAA,EACF;AAEA,MAAI,QAAQ,WAAW,GAAG;AACxB,YAAQ,IAAI,mBAAmB;AAC/B;AAAA,EACF;AAEA,aAAW,KAAK,SAAS;AACvB,UAAM,OAAO,EAAE,cAAc,KAAK,EAAE,WAAW,KAAK;AACpD,UAAM,UAAU,EAAE,UACd,KAAK,EAAE,QAAQ,QAAQ,cAAc,EAAE,EAAE,QAAQ,OAAO,GAAG,EAAE,MAAM,GAAG,GAAG,CAAC,KAC1E;AACJ,YAAQ,IAAI,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE;AACpC,QAAI,EAAE,MAAO,SAAQ,IAAI,OAAO,EAAE,KAAK,GAAG,IAAI,EAAE;AAChD,QAAI,QAAS,SAAQ,IAAI,MAAM,OAAO,EAAE;AACxC,YAAQ,IAAI;AAAA,EACd;AACF;AAEA,eAAe,aAAa,MAAgB,QAAgB,OAAe,SAAiC;AAC1G,QAAM,OAAO,KAAK,CAAC;AACnB,MAAI,CAAC,QAAQ,KAAK,WAAW,IAAI,GAAG;AAClC,YAAQ,MAAM,sBAAsB;AACpC,YAAQ,MAAM,kCAAkC;AAChD,YAAQ,KAAK,CAAC;AAAA,EAChB;AAEA,QAAM,SAAS,MAAM;AAAA,IACnB;AAAA,IACA;AAAA,IACA;AAAA,IACA,GAAG,YAAY,OAAO,CAAC,eAAe,mBAAmB,IAAI,CAAC;AAAA,EAChE;AAEA,MAAI,CAAC,OAAO,IAAI;AACd,YAAQ,MAAM,UAAU,OAAO,KAAK,EAAE;AACtC,YAAQ,KAAK,CAAC;AAAA,EAChB;AAEA,UAAQ,IAAI,iBAAiB,IAAI,EAAE;AACrC;AAEA,SAAS,gBAAsB;AAC7B,UAAQ;AAAA,IACN;AAAA,MACE;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF,EAAE,KAAK,IAAI;AAAA,EACb;AACF;AAEA,eAAsB,QAAQ,MAA+B;AAC3D,QAAM,CAAC,YAAY,GAAG,IAAI,IAAI;AAE9B,MAAI,CAAC,cAAc,eAAe,UAAU,QAAQ,MAAM,UAAU,IAAI,GAAG;AACzE,kBAAc;AACd;AAAA,EACF;AAEA,QAAM,EAAE,QAAQ,MAAM,IAAI,MAAM,cAAc,IAAI;AAClD,QAAM,UAAU,QAAQ,MAAM,OAAO;AAErC,UAAQ,YAAY;AAAA,IAClB,KAAK;AACH,YAAM,WAAW,MAAM,QAAQ,OAAO,OAAO;AAC7C;AAAA,IACF,KAAK;AACH,YAAM,UAAU,MAAM,QAAQ,OAAO,OAAO;AAC5C;AAAA,IACF,KAAK;AACH,YAAM,aAAa,MAAM,QAAQ,OAAO,OAAO;AAC/C;AAAA,IACF,KAAK;AACH,YAAM,WAAW,MAAM,QAAQ,OAAO,OAAO;AAC7C;AAAA,IACF,KAAK;AACH,YAAM,WAAW,MAAM,QAAQ,OAAO,OAAO;AAC7C;AAAA,IACF,KAAK;AACH,YAAM,cAAc,MAAM,QAAQ,OAAO,OAAO;AAChD;AAAA,IACF,KAAK;AACH,YAAM,aAAa,MAAM,QAAQ,OAAO,OAAO;AAC/C;AAAA,IACF,KAAK;AACH,YAAM,aAAa,MAAM,QAAQ,OAAO,OAAO;AAC/C;AAAA,IACF;AACE,cAAQ,MAAM,wBAAwB,UAAU,EAAE;AAClD,oBAAc;AACd,cAAQ,KAAK,CAAC;AAAA,EAClB;AACF;","names":["body"]}

package/dist/doctor-OTSIWV6G.js

@@ -0,0 +1,132 @@
+import { createRequire as __cr } from "module"; const require = __cr(import.meta.url);
+import {
+  apiFetch,
+  decodeJwtPayload
+} from "./chunk-3CZU7XCS.js";
+import {
+  ENV_URLS,
+  envToProfile,
+  getArgValue,
+  readStoredAuth
+} from "./chunk-A4OFTUVV.js";
+import "./chunk-VKVL7WBN.js";
+
+// src/doctor.ts
+import process from "process";
+var DEFAULT_PROBES = [
+  { name: "GET /me", path: "/me" },
+  { name: "GET /org/credentials", path: "/org/credentials" },
+  { name: "GET /org/properties", path: "/org/properties" }
+];
+function fmtExp(expSec) {
+  if (!expSec) return "unknown";
+  const now = Math.floor(Date.now() / 1e3);
+  const deltaSec = expSec - now;
+  const date = new Date(expSec * 1e3).toISOString();
+  if (deltaSec < 0) return `${date} (expired ${Math.abs(deltaSec)}s ago)`;
+  const days = Math.round(deltaSec / 86400);
+  return `${date} (in ~${days} days)`;
+}
+function truncateId(id) {
+  if (!id) return "(n/a)";
+  return id.length > 8 ? `${id.slice(0, 8)}\u2026` : id;
+}
+async function runAuthDoctor(argv) {
+  const env = getArgValue(argv, "--env");
+  const profile = env ? envToProfile(env) : void 0;
+  const apiUrlOverride = getArgValue(argv, "--api-url") ?? process.env.CANARY_API_URL;
+  const stored = await readStoredAuth(profile);
+  const token = process.env.CANARY_API_TOKEN ?? stored?.token;
+  const apiUrl = apiUrlOverride ?? (env && ENV_URLS[env]?.api) ?? stored?.apiUrl ?? "https://api.trycanary.ai";
+  console.log("\u2500\u2500 canary auth doctor \u2500\u2500");
+  console.log(`node:          ${process.version}`);
+  console.log(`platform:      ${process.platform}`);
+  console.log(`api url:       ${apiUrl}`);
+  console.log(`profile:       ${profile ?? "(default)"}`);
+  console.log(`token source:  ${process.env.CANARY_API_TOKEN ? "CANARY_API_TOKEN env" : stored?.token ? "auth.json" : "NONE"}`);
+  console.log(
+    `NODE_EXTRA_CA_CERTS: ${process.env.NODE_EXTRA_CA_CERTS ?? "(not set)"}`
+  );
+  console.log(`NODE_OPTIONS:        ${process.env.NODE_OPTIONS ?? "(not set)"}`);
+  if (!token) {
+    console.log("");
+    console.log("No token found. Run: canary login" + (env ? ` --env ${env}` : ""));
+    process.exit(1);
+  }
+  const payload = decodeJwtPayload(token);
+  const exp = typeof payload?.exp === "number" ? payload.exp : void 0;
+  const sub = typeof payload?.sub === "string" ? payload.sub : void 0;
+  const orgId = typeof payload?.org_id === "string" ? payload.org_id : void 0;
+  console.log("");
+  console.log("\u2500\u2500 token \u2500\u2500");
+  console.log(`decoded:  ${payload ? "ok" : "UNDECODABLE (likely corrupted file)"}`);
+  console.log(`sub:      ${truncateId(sub)}`);
+  console.log(`org_id:   ${truncateId(orgId)}`);
+  console.log(`exp:      ${fmtExp(exp)}`);
+  console.log("");
+  console.log("\u2500\u2500 probes \u2500\u2500");
+  console.log("Each probe exercises a different path \u2014 mixed pass/fail here is the");
+  console.log("signal for Zscaler URL-category or DLP filtering.");
+  console.log("");
+  let hadProxyInjection = false;
+  let hadTls = false;
+  let passed = 0;
+  for (const probe of DEFAULT_PROBES) {
+    const url = `${apiUrl}${probe.path}`;
+    const result = await apiFetch(url, {
+      method: probe.method ?? "GET",
+      headers: { Authorization: `Bearer ${token}` },
+      token,
+      // Short per-probe timeout so one stalled endpoint doesn't block diagnosis.
+      timeoutMs: 1e4
+    });
+    if (result.ok) {
+      const rid = result.requestId ?? "(absent)";
+      console.log(`  \u2713 ${probe.name.padEnd(28)} 200  rid=${rid}`);
+      passed += 1;
+    } else {
+      const f = result.failure;
+      const rid = f.requestId ?? "(absent)";
+      console.log(
+        `  \u2717 ${probe.name.padEnd(28)} ${f.status ?? "ERR"}  [${f.kind}] rid=${rid}`
+      );
+      const firstLine = f.message.split("\n")[0];
+      console.log(`      ${firstLine}`);
+      if (f.kind === "tls") hadTls = true;
+      if (f.kind === "html-body" || f.kind === "proxy-injected-4xx") hadProxyInjection = true;
+    }
+  }
+  console.log("");
+  console.log("\u2500\u2500 diagnosis \u2500\u2500");
+  if (hadTls) {
+    console.log("TLS verification failed on at least one probe.");
+    console.log("  \u2192 A corporate proxy is intercepting HTTPS. Trust the proxy root CA:");
+    console.log("      export NODE_EXTRA_CA_CERTS=/path/to/corporate-root.pem");
+    console.log("    or on Node 20+:");
+    console.log("      export NODE_OPTIONS=--use-system-ca");
+  } else if (hadProxyInjection) {
+    console.log("At least one response was NOT from our API (HTML body or missing");
+    console.log("x-canary-request-id). A proxy block page or captive portal is in the way.");
+    console.log("  \u2192 Share this output with your IT/Zscaler admin and ask them to");
+    console.log(`    allowlist ${apiUrl}.`);
+  } else if (passed === DEFAULT_PROBES.length) {
+    console.log("All probes reached our API successfully. Auth + connectivity look healthy.");
+    console.log("If you are still seeing intermittent issues, re-run with --debug on the");
+    console.log("failing command: CANARY_DEBUG=1 canary <cmd> \u2026");
+  } else if (passed > 0) {
+    console.log("Mixed results: some probes reached our API, others did not.");
+    console.log("  \u2192 This is the classic signature of URL-category filtering at the proxy");
+    console.log("    (certain paths like /run, /execute are blocked while others pass)");
+    console.log("    or partial domain allowlisting.");
+    console.log("  \u2192 Share the probe table with your IT/Zscaler admin; include the exact");
+    console.log('    failing paths and the "[kind]" column.');
+  } else {
+    console.log("Every probe failed. Check your network connection and proxy settings,");
+    console.log("then retry with CANARY_DEBUG=1 canary auth doctor.");
+  }
+  if (passed < DEFAULT_PROBES.length) process.exit(1);
+}
+export {
+  runAuthDoctor
+};
+//# sourceMappingURL=doctor-OTSIWV6G.js.map

package/dist/doctor-OTSIWV6G.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/doctor.ts"],"sourcesContent":["/**\n * `canary auth doctor` — print everything a user or IT admin needs to see\n * when the CLI is misbehaving against a corporate proxy (Zscaler, Netskope,\n * ZPA, Cloudflare Access). Reads the stored auth, decodes the JWT locally,\n * and probes a curated set of endpoints so we can tell apart:\n *   - TLS interception                 (Node doesn't trust the proxy CA)\n *   - URL-category filtering           (some paths fail, others pass)\n *   - Proxy-injected block pages       (HTML body / missing request-id header)\n *   - Real auth failures               (401 with our header present)\n */\n\nimport process from 'node:process';\nimport { getArgValue, readStoredAuth, envToProfile, ENV_URLS } from './auth.js';\nimport { decodeJwtPayload } from './jwt.js';\nimport { apiFetch } from './api-fetch.js';\n\ninterface Probe {\n  name: string;\n  path: string;\n  method?: string;\n}\n\nconst DEFAULT_PROBES: Probe[] = [\n  { name: 'GET /me', path: '/me' },\n  { name: 'GET /org/credentials', path: '/org/credentials' },\n  { name: 'GET /org/properties', path: '/org/properties' },\n];\n\nfunction fmtExp(expSec: number | undefined): string {\n  if (!expSec) return 'unknown';\n  const now = Math.floor(Date.now() / 1000);\n  const deltaSec = expSec - now;\n  const date = new Date(expSec * 1000).toISOString();\n  if (deltaSec < 0) return `${date} (expired ${Math.abs(deltaSec)}s ago)`;\n  const days = Math.round(deltaSec / 86400);\n  return `${date} (in ~${days} days)`;\n}\n\n/** Keep the first 8 chars of an identifier so users pasting doctor output\n * to IT don't leak full user/org IDs, but we still have enough for triage. */\nfunction truncateId(id: string | undefined): string {\n  if (!id) return '(n/a)';\n  return id.length > 8 ? `${id.slice(0, 8)}…` : id;\n}\n\nexport async function runAuthDoctor(argv: string[]): Promise<void> {\n  const env = getArgValue(argv, '--env');\n  const profile = env ? envToProfile(env) : undefined;\n  const apiUrlOverride = getArgValue(argv, '--api-url') ?? process.env.CANARY_API_URL;\n\n  const stored = await readStoredAuth(profile);\n  const token = process.env.CANARY_API_TOKEN ?? stored?.token;\n  const apiUrl =\n    apiUrlOverride ?? (env && ENV_URLS[env]?.api) ?? stored?.apiUrl ?? 'https://api.trycanary.ai';\n\n  console.log('── canary auth doctor ──');\n  console.log(`node:          ${process.version}`);\n  console.log(`platform:      ${process.platform}`);\n  console.log(`api url:       ${apiUrl}`);\n  console.log(`profile:       ${profile ?? '(default)'}`);\n  console.log(`token source:  ${process.env.CANARY_API_TOKEN ? 'CANARY_API_TOKEN env' : stored?.token ? 'auth.json' : 'NONE'}`);\n  console.log(\n    `NODE_EXTRA_CA_CERTS: ${process.env.NODE_EXTRA_CA_CERTS ?? '(not set)'}`\n  );\n  console.log(`NODE_OPTIONS:        ${process.env.NODE_OPTIONS ?? '(not set)'}`);\n\n  if (!token) {\n    console.log('');\n    console.log('No token found. Run: canary login' + (env ? ` --env ${env}` : ''));\n    process.exit(1);\n  }\n\n  const payload = decodeJwtPayload(token);\n  const exp = typeof payload?.exp === 'number' ? (payload.exp as number) : undefined;\n  const sub = typeof payload?.sub === 'string' ? (payload.sub as string) : undefined;\n  const orgId = typeof payload?.org_id === 'string' ? (payload.org_id as string) : undefined;\n  console.log('');\n  console.log('── token ──');\n  console.log(`decoded:  ${payload ? 'ok' : 'UNDECODABLE (likely corrupted file)'}`);\n  console.log(`sub:      ${truncateId(sub)}`);\n  console.log(`org_id:   ${truncateId(orgId)}`);\n  console.log(`exp:      ${fmtExp(exp)}`);\n\n  console.log('');\n  console.log('── probes ──');\n  console.log('Each probe exercises a different path — mixed pass/fail here is the');\n  console.log('signal for Zscaler URL-category or DLP filtering.');\n  console.log('');\n\n  let hadProxyInjection = false;\n  let hadTls = false;\n  let passed = 0;\n\n  for (const probe of DEFAULT_PROBES) {\n    const url = `${apiUrl}${probe.path}`;\n    const result = await apiFetch(url, {\n      method: probe.method ?? 'GET',\n      headers: { Authorization: `Bearer ${token}` },\n      token,\n      // Short per-probe timeout so one stalled endpoint doesn't block diagnosis.\n      timeoutMs: 10_000,\n    });\n    if (result.ok) {\n      const rid = result.requestId ?? '(absent)';\n      console.log(`  ✓ ${probe.name.padEnd(28)} 200  rid=${rid}`);\n      passed += 1;\n    } else {\n      const f = result.failure;\n      const rid = f.requestId ?? '(absent)';\n      console.log(\n        `  ✗ ${probe.name.padEnd(28)} ${f.status ?? 'ERR'}  [${f.kind}] rid=${rid}`\n      );\n      const firstLine = f.message.split('\\n')[0];\n      console.log(`      ${firstLine}`);\n      if (f.kind === 'tls') hadTls = true;\n      if (f.kind === 'html-body' || f.kind === 'proxy-injected-4xx') hadProxyInjection = true;\n    }\n  }\n\n  console.log('');\n  console.log('── diagnosis ──');\n  if (hadTls) {\n    console.log('TLS verification failed on at least one probe.');\n    console.log('  → A corporate proxy is intercepting HTTPS. Trust the proxy root CA:');\n    console.log('      export NODE_EXTRA_CA_CERTS=/path/to/corporate-root.pem');\n    console.log('    or on Node 20+:');\n    console.log('      export NODE_OPTIONS=--use-system-ca');\n  } else if (hadProxyInjection) {\n    console.log('At least one response was NOT from our API (HTML body or missing');\n    console.log('x-canary-request-id). A proxy block page or captive portal is in the way.');\n    console.log('  → Share this output with your IT/Zscaler admin and ask them to');\n    console.log(`    allowlist ${apiUrl}.`);\n  } else if (passed === DEFAULT_PROBES.length) {\n    console.log('All probes reached our API successfully. Auth + connectivity look healthy.');\n    console.log('If you are still seeing intermittent issues, re-run with --debug on the');\n    console.log('failing command: CANARY_DEBUG=1 canary <cmd> …');\n  } else if (passed > 0) {\n    console.log('Mixed results: some probes reached our API, others did not.');\n    console.log('  → This is the classic signature of URL-category filtering at the proxy');\n    console.log('    (certain paths like /run, /execute are blocked while others pass)');\n    console.log('    or partial domain allowlisting.');\n    console.log('  → Share the probe table with your IT/Zscaler admin; include the exact');\n    console.log('    failing paths and the \"[kind]\" column.');\n  } else {\n    console.log('Every probe failed. Check your network connection and proxy settings,');\n    console.log('then retry with CANARY_DEBUG=1 canary auth doctor.');\n  }\n\n  if (passed < DEFAULT_PROBES.length) process.exit(1);\n}\n"],"mappings":";;;;;;;;;;;;;;AAWA,OAAO,aAAa;AAWpB,IAAM,iBAA0B;AAAA,EAC9B,EAAE,MAAM,WAAW,MAAM,MAAM;AAAA,EAC/B,EAAE,MAAM,wBAAwB,MAAM,mBAAmB;AAAA,EACzD,EAAE,MAAM,uBAAuB,MAAM,kBAAkB;AACzD;AAEA,SAAS,OAAO,QAAoC;AAClD,MAAI,CAAC,OAAQ,QAAO;AACpB,QAAM,MAAM,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI;AACxC,QAAM,WAAW,SAAS;AAC1B,QAAM,OAAO,IAAI,KAAK,SAAS,GAAI,EAAE,YAAY;AACjD,MAAI,WAAW,EAAG,QAAO,GAAG,IAAI,aAAa,KAAK,IAAI,QAAQ,CAAC;AAC/D,QAAM,OAAO,KAAK,MAAM,WAAW,KAAK;AACxC,SAAO,GAAG,IAAI,SAAS,IAAI;AAC7B;AAIA,SAAS,WAAW,IAAgC;AAClD,MAAI,CAAC,GAAI,QAAO;AAChB,SAAO,GAAG,SAAS,IAAI,GAAG,GAAG,MAAM,GAAG,CAAC,CAAC,WAAM;AAChD;AAEA,eAAsB,cAAc,MAA+B;AACjE,QAAM,MAAM,YAAY,MAAM,OAAO;AACrC,QAAM,UAAU,MAAM,aAAa,GAAG,IAAI;AAC1C,QAAM,iBAAiB,YAAY,MAAM,WAAW,KAAK,QAAQ,IAAI;AAErE,QAAM,SAAS,MAAM,eAAe,OAAO;AAC3C,QAAM,QAAQ,QAAQ,IAAI,oBAAoB,QAAQ;AACtD,QAAM,SACJ,mBAAmB,OAAO,SAAS,GAAG,GAAG,QAAQ,QAAQ,UAAU;AAErE,UAAQ,IAAI,8CAA0B;AACtC,UAAQ,IAAI,kBAAkB,QAAQ,OAAO,EAAE;AAC/C,UAAQ,IAAI,kBAAkB,QAAQ,QAAQ,EAAE;AAChD,UAAQ,IAAI,kBAAkB,MAAM,EAAE;AACtC,UAAQ,IAAI,kBAAkB,WAAW,WAAW,EAAE;AACtD,UAAQ,IAAI,kBAAkB,QAAQ,IAAI,mBAAmB,yBAAyB,QAAQ,QAAQ,cAAc,MAAM,EAAE;AAC5H,UAAQ;AAAA,IACN,wBAAwB,QAAQ,IAAI,uBAAuB,WAAW;AAAA,EACxE;AACA,UAAQ,IAAI,wBAAwB,QAAQ,IAAI,gBAAgB,WAAW,EAAE;AAE7E,MAAI,CAAC,OAAO;AACV,YAAQ,IAAI,EAAE;AACd,YAAQ,IAAI,uCAAuC,MAAM,UAAU,GAAG,KAAK,GAAG;AAC9E,YAAQ,KAAK,CAAC;AAAA,EAChB;AAEA,QAAM,UAAU,iBAAiB,KAAK;AACtC,QAAM,MAAM,OAAO,SAAS,QAAQ,WAAY,QAAQ,MAAiB;AACzE,QAAM,MAAM,OAAO,SAAS,QAAQ,WAAY,QAAQ,MAAiB;AACzE,QAAM,QAAQ,OAAO,SAAS,WAAW,WAAY,QAAQ,SAAoB;AACjF,UAAQ,IAAI,EAAE;AACd,UAAQ,IAAI,iCAAa;AACzB,UAAQ,IAAI,aAAa,UAAU,OAAO,qCAAqC,EAAE;AACjF,UAAQ,IAAI,aAAa,WAAW,GAAG,CAAC,EAAE;AAC1C,UAAQ,IAAI,aAAa,WAAW,KAAK,CAAC,EAAE;AAC5C,UAAQ,IAAI,aAAa,OAAO,GAAG,CAAC,EAAE;AAEtC,UAAQ,IAAI,EAAE;AACd,UAAQ,IAAI,kCAAc;AAC1B,UAAQ,IAAI,0EAAqE;AACjF,UAAQ,IAAI,mDAAmD;AAC/D,UAAQ,IAAI,EAAE;AAEd,MAAI,oBAAoB;AACxB,MAAI,SAAS;AACb,MAAI,SAAS;AAEb,aAAW,SAAS,gBAAgB;AAClC,UAAM,MAAM,GAAG,MAAM,GAAG,MAAM,IAAI;AAClC,UAAM,SAAS,MAAM,SAAS,KAAK;AAAA,MACjC,QAAQ,MAAM,UAAU;AAAA,MACxB,SAAS,EAAE,eAAe,UAAU,KAAK,GAAG;AAAA,MAC5C;AAAA;AAAA,MAEA,WAAW;AAAA,IACb,CAAC;AACD,QAAI,OAAO,IAAI;AACb,YAAM,MAAM,OAAO,aAAa;AAChC,cAAQ,IAAI,YAAO,MAAM,KAAK,OAAO,EAAE,CAAC,aAAa,GAAG,EAAE;AAC1D,gBAAU;AAAA,IACZ,OAAO;AACL,YAAM,IAAI,OAAO;AACjB,YAAM,MAAM,EAAE,aAAa;AAC3B,cAAQ;AAAA,QACN,YAAO,MAAM,KAAK,OAAO,EAAE,CAAC,IAAI,EAAE,UAAU,KAAK,MAAM,EAAE,IAAI,SAAS,GAAG;AAAA,MAC3E;AACA,YAAM,YAAY,EAAE,QAAQ,MAAM,IAAI,EAAE,CAAC;AACzC,cAAQ,IAAI,SAAS,SAAS,EAAE;AAChC,UAAI,EAAE,SAAS,MAAO,UAAS;AAC/B,UAAI,EAAE,SAAS,eAAe,EAAE,SAAS,qBAAsB,qBAAoB;AAAA,IACrF;AAAA,EACF;AAEA,UAAQ,IAAI,EAAE;AACd,UAAQ,IAAI,qCAAiB;AAC7B,MAAI,QAAQ;AACV,YAAQ,IAAI,gDAAgD;AAC5D,YAAQ,IAAI,4EAAuE;AACnF,YAAQ,IAAI,8DAA8D;AAC1E,YAAQ,IAAI,qBAAqB;AACjC,YAAQ,IAAI,2CAA2C;AAAA,EACzD,WAAW,mBAAmB;AAC5B,YAAQ,IAAI,kEAAkE;AAC9E,YAAQ,IAAI,2EAA2E;AACvF,YAAQ,IAAI,uEAAkE;AAC9E,YAAQ,IAAI,iBAAiB,MAAM,GAAG;AAAA,EACxC,WAAW,WAAW,eAAe,QAAQ;AAC3C,YAAQ,IAAI,4EAA4E;AACxF,YAAQ,IAAI,yEAAyE;AACrF,YAAQ,IAAI,qDAAgD;AAAA,EAC9D,WAAW,SAAS,GAAG;AACrB,YAAQ,IAAI,6DAA6D;AACzE,YAAQ,IAAI,+EAA0E;AACtF,YAAQ,IAAI,uEAAuE;AACnF,YAAQ,IAAI,qCAAqC;AACjD,YAAQ,IAAI,8EAAyE;AACrF,YAAQ,IAAI,4CAA4C;AAAA,EAC1D,OAAO;AACL,YAAQ,IAAI,uEAAuE;AACnF,YAAQ,IAAI,oDAAoD;AAAA,EAClE;AAEA,MAAI,SAAS,eAAe,OAAQ,SAAQ,KAAK,CAAC;AACpD;","names":[]}