@squadrules/mcp 4.8.6

package/dist/bootstrap.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Bootstrap entry: installs process error handlers before any app code loads,
+ * so uncaught exceptions during import (e.g. [Object: null prototype]) are
+ * logged with a readable message instead of Node's default dump.
+ * Then dynamically imports index.js and awaits runKairosServer() (argv[1] is bootstrap.js, so index's isDirectRun() is false).
+ * Uses process.stderr (not console) so verify-clean-source allows this file.
+ * Handlers are registered immediately (first statements) so they run before any import().
+ */
+export {};
+//# sourceMappingURL=bootstrap.d.ts.map

package/dist/bootstrap.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bootstrap.d.ts","sourceRoot":"","sources":["../src/bootstrap.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG"}

package/dist/bootstrap.js

@@ -0,0 +1,61 @@
+/**
+ * Bootstrap entry: installs process error handlers before any app code loads,
+ * so uncaught exceptions during import (e.g. [Object: null prototype]) are
+ * logged with a readable message instead of Node's default dump.
+ * Then dynamically imports index.js and awaits runKairosServer() (argv[1] is bootstrap.js, so index's isDirectRun() is false).
+ * Uses process.stderr (not console) so verify-clean-source allows this file.
+ * Handlers are registered immediately (first statements) so they run before any import().
+ */
+function stderr(msg) {
+    process.stderr.write(`${msg}\n`);
+}
+function safeStringify(v) {
+    if (v instanceof Error)
+        return `${v.name}: ${v.message}\n${v.stack ?? ''}`;
+    if (typeof v === 'object' && v !== null) {
+        try {
+            const o = v;
+            const msg = typeof o['message'] === 'string' ? o['message'] : undefined;
+            const stack = typeof o['stack'] === 'string' ? o['stack'] : undefined;
+            const code = o['code'] !== undefined ? String(o['code']) : undefined;
+            if (msg || stack || code) {
+                const parts = [code ? `code=${code}` : '', msg ?? '', stack ?? ''].filter(Boolean);
+                return parts.join('\n');
+            }
+        }
+        catch {
+            // fall through
+        }
+        try {
+            const j = JSON.stringify(v);
+            if (j !== '{}')
+                return j;
+        }
+        catch {
+            // fall through
+        }
+        return Object.prototype.toString.call(v);
+    }
+    return String(v);
+}
+process.on('uncaughtException', (err) => {
+    try {
+        stderr(`[bootstrap] Uncaught exception: ${safeStringify(err)}`);
+    }
+    catch {
+        stderr('[bootstrap] Uncaught exception (unserializable)');
+    }
+    process.exitCode = 1;
+});
+process.on('unhandledRejection', (reason) => {
+    try {
+        stderr(`[bootstrap] Unhandled rejection: ${safeStringify(reason)}`);
+    }
+    catch {
+        stderr('[bootstrap] Unhandled rejection (unserializable)');
+    }
+});
+const { runKairosServer } = await import('./index.js');
+await runKairosServer();
+export {};
+//# sourceMappingURL=bootstrap.js.map

package/dist/bootstrap.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bootstrap.js","sourceRoot":"","sources":["../src/bootstrap.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,SAAS,MAAM,CAAC,GAAW;IACzB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC;AACnC,CAAC;AACD,SAAS,aAAa,CAAC,CAAU;IAC/B,IAAI,CAAC,YAAY,KAAK;QAAE,OAAO,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC;IAC3E,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;QACxC,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,CAA4B,CAAC;YACvC,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,SAAS,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACrE,IAAI,GAAG,IAAI,KAAK,IAAI,IAAI,EAAE,CAAC;gBACzB,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,GAAG,IAAI,EAAE,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;gBACnF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC1B,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,eAAe;QACjB,CAAC;QACD,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;YAC5B,IAAI,CAAC,KAAK,IAAI;gBAAE,OAAO,CAAC,CAAC;QAC3B,CAAC;QAAC,MAAM,CAAC;YACP,eAAe;QACjB,CAAC;QACD,OAAO,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC;AACnB,CAAC;AACD,OAAO,CAAC,EAAE,CAAC,mBAAmB,EAAE,CAAC,GAAY,EAAE,EAAE;IAC/C,IAAI,CAAC;QACH,MAAM,CAAC,mCAAmC,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClE,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,CAAC,iDAAiD,CAAC,CAAC;IAC5D,CAAC;IACD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;AACvB,CAAC,CAAC,CAAC;AACH,OAAO,CAAC,EAAE,CAAC,oBAAoB,EAAE,CAAC,MAAe,EAAE,EAAE;IACnD,IAAI,CAAC;QACH,MAAM,CAAC,oCAAoC,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACtE,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,CAAC,kDAAkD,CAAC,CAAC;IAC7D,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,MAAM,EAAE,eAAe,EAAE,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,CAAC;AACvD,MAAM,eAAe,EAAE,CAAC"}

package/dist/cli/api-client.d.ts

@@ -0,0 +1,112 @@
+/**
+ * API Client for KAIROS REST API.
+ * Returns canonical response shapes (no metadata wrapper).
+ */
+import { type SafeMarkdownUpload } from './upload-guards.js';
+import type { ActivateOutput } from '../tools/activate_schema.js';
+import type { ForwardOutput } from '../tools/forward_schema.js';
+import type { RewardOutput } from '../tools/reward_schema.js';
+import type { TrainOutput } from '../tools/train_schema.js';
+import type { TuneOutput } from '../tools/tune_schema.js';
+import type { ExportInput, ExportOutput } from '../tools/export_schema.js';
+import type { DeleteOutput } from '../tools/delete_schema.js';
+export interface ApiClientOptions {
+    baseUrl?: string | undefined;
+    openInBrowser?: boolean | undefined;
+    /** Request timeout in milliseconds (default: 15 000). */
+    timeoutMs?: number | undefined;
+    /** Max retries on transient network errors (default: 2). Set 0 to disable. */
+    maxRetries?: number | undefined;
+}
+type SpacesOutput = {
+    spaces: Array<{
+        name: string;
+        space_id: string;
+        type: 'personal' | 'group' | 'app' | 'other';
+        adapter_count: number;
+        adapters?: Array<{
+            adapter_id: string;
+            title: string;
+            layer_count: number;
+            artifacts?: Array<{
+                name: string;
+                slug: string;
+                uri: string;
+                uuid_uri: string;
+                content_type: string;
+                sha256: string;
+                relative_path: string | null;
+            }>;
+        }>;
+    }>;
+};
+export declare class ApiClient {
+    private baseUrl;
+    private openInBrowser;
+    private timeoutMs;
+    private maxRetries;
+    /** Coalesces concurrent refresh_token exchanges for this client instance. */
+    private refreshInFlight;
+    constructor(baseUrlOrOpts?: string | ApiClientOptions, openInBrowser?: boolean);
+    private sleep;
+    private runRefreshWithSingleflight;
+    private request;
+    activate(query: string): Promise<ActivateOutput>;
+    forward(uri: string, solution?: unknown): Promise<ForwardOutput>;
+    train(markdown: SafeMarkdownUpload, options?: {
+        llmModelId?: string;
+        force?: boolean;
+        space?: string;
+        reviewEvidence?: {
+            verdict_file: string;
+            exit_code: number;
+            stdout: string;
+        };
+    }, isRetryAfterLogin?: boolean): Promise<TrainOutput>;
+    tune(uris: string[], opts?: {
+        markdownDoc?: SafeMarkdownUpload[];
+        updates?: Record<string, unknown>;
+        space?: string;
+        reviewEvidence?: {
+            verdict_file: string;
+            exit_code: number;
+            stdout: string;
+        };
+    }): Promise<TuneOutput>;
+    trainJson(body: {
+        llm_model_id: string;
+        force_update?: boolean;
+        space?: string;
+        source_adapter_uri?: string;
+        content?: string;
+        protocol_version?: string;
+        mime?: string;
+        artifact_name?: string;
+        adapter_uri?: string;
+        relative_path?: string;
+        review_evidence?: {
+            verdict_file: string;
+            exit_code: number;
+            stdout: string;
+        };
+    }): Promise<TrainOutput>;
+    delete(uris: string[]): Promise<DeleteOutput>;
+    spaces(options?: {
+        include_adapter_titles?: boolean;
+        include_artifacts?: boolean;
+    }): Promise<SpacesOutput>;
+    reward(uri: string, outcome: 'success' | 'failure', feedback: string, options?: {
+        score?: number;
+        rater?: string;
+        rubricVersion?: string;
+        llmModelId?: string;
+    }): Promise<RewardOutput>;
+    export(input: ExportInput): Promise<ExportOutput>;
+    downloadExportRef(urlOrPath: string): Promise<{
+        data: Buffer;
+        filename?: string;
+        contentType?: string;
+    }>;
+}
+export {};
+//# sourceMappingURL=api-client.d.ts.map

package/dist/cli/api-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-client.d.ts","sourceRoot":"","sources":["../../src/cli/api-client.ts"],"names":[],"mappings":"AAAA;;;GAGG;AASH,OAAO,EAAkC,KAAK,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAC7F,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAC3E,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAO9D,MAAM,WAAW,gBAAgB;IAC7B,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,aAAa,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IACpC,yDAAyD;IACzD,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B,8EAA8E;IAC9E,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACnC;AAED,KAAK,YAAY,GAAG;IAChB,MAAM,EAAE,KAAK,CAAC;QACV,IAAI,EAAE,MAAM,CAAC;QACb,QAAQ,EAAE,MAAM,CAAC;QACjB,IAAI,EAAE,UAAU,GAAG,OAAO,GAAG,KAAK,GAAG,OAAO,CAAC;QAC7C,aAAa,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,EAAE,KAAK,CAAC;YAAE,UAAU,EAAE,MAAM,CAAC;YAAC,KAAK,EAAE,MAAM,CAAC;YAAC,WAAW,EAAE,MAAM,CAAC;YAAC,SAAS,CAAC,EAAE,KAAK,CAAC;gBAAE,IAAI,EAAE,MAAM,CAAC;gBAAC,IAAI,EAAE,MAAM,CAAC;gBAAC,GAAG,EAAE,MAAM,CAAC;gBAAC,QAAQ,EAAE,MAAM,CAAC;gBAAC,YAAY,EAAE,MAAM,CAAC;gBAAC,MAAM,EAAE,MAAM,CAAC;gBAAC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAA;aAAE,CAAC,CAAA;SAAE,CAAC,CAAC;KACtO,CAAC,CAAC;CACN,CAAC;AAcF,qBAAa,SAAS;IAClB,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,aAAa,CAAU;IAC/B,OAAO,CAAC,SAAS,CAAS;IAC1B,OAAO,CAAC,UAAU,CAAS;IAC3B,6EAA6E;IAC7E,OAAO,CAAC,eAAe,CAAiC;gBAE5C,aAAa,CAAC,EAAE,MAAM,GAAG,gBAAgB,EAAE,aAAa,CAAC,EAAE,OAAO;YAoBhE,KAAK;IAInB,OAAO,CAAC,0BAA0B;YAuBpB,OAAO;IAsJf,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC;IAIhD,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,aAAa,CAAC;IAIhE,KAAK,CACP,QAAQ,EAAE,kBAAkB,EAC5B,OAAO,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,cAAc,CAAC,EAAE;YAAE,YAAY,EAAE,MAAM,CAAC;YAAC,SAAS,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE,EAChJ,iBAAiB,UAAQ,GAC1B,OAAO,CAAC,WAAW,CAAC;IAajB,IAAI,CACN,IAAI,EAAE,MAAM,EAAE,EACd,IAAI,CAAC,EAAE;QAAE,WAAW,CAAC,EAAE,kBAAkB,EAAE,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,cAAc,CAAC,EAAE;YAAE,YAAY,EAAE,MAAM,CAAC;YAAC,SAAS,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE,GAC/K,OAAO,CAAC,UAAU,CAAC;IAUhB,SAAS,CAAC,IAAI,EAAE;QAClB,YAAY,EAAE,MAAM,CAAC;QACrB,YAAY,CAAC,EAAE,OAAO,CAAC;QACvB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,kBAAkB,CAAC,EAAE,MAAM,CAAC;QAC5B,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,gBAAgB,CAAC,EAAE,MAAM,CAAC;QAC1B,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,eAAe,CAAC,EAAE;YAAE,YAAY,EAAE,MAAM,CAAC;YAAC,SAAS,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,MAAM,CAAA;SAAE,CAAC;KACjF,GAAG,OAAO,CAAC,WAAW,CAAC;IAIlB,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,YAAY,CAAC;IAI7C,MAAM,CAAC,OAAO,CAAC,EAAE;QAAE,sBAAsB,CAAC,EAAE,OAAO,CAAC;QAAC,iBAAiB,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,YAAY,CAAC;IAO1G,MAAM,CACR,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,GAAG,SAAS,EAAE,QAAQ,EAAE,MAAM,EAC7D,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,aAAa,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,GAC1F,OAAO,CAAC,YAAY,CAAC;IAWlB,MAAM,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC;IAIjD,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CAGjH"}

package/dist/cli/api-client.js

@@ -0,0 +1,259 @@
+/**
+ * API Client for KAIROS REST API.
+ * Returns canonical response shapes (no metadata wrapper).
+ */
+import { AuthRequiredError, isBrowserDisabled } from './auth-error.js';
+import { getApiUrl } from './config.js';
+import { getDefaultApiUrlFromFile, readConfig, writeConfig } from './config-file.js';
+import { describeFetchError, networkErrorWithHint } from './fetch-error.js';
+import { loginWithBrowser } from './commands/login.js';
+import { jwtExpiresInSeconds, refreshAccessToken } from './oauth-refresh.js';
+import { rewriteLoginUrlRedirectToApiBase } from './rewrite-login-url.js';
+import { normalizeAndValidateApiBaseUrl } from './upload-guards.js';
+import { downloadExportRef } from './download-export-ref.js';
+const PROACTIVE_REFRESH_SKEW_SEC = 60;
+const DEFAULT_TIMEOUT_MS = 15_000;
+const DEFAULT_MAX_RETRIES = 2;
+function isRetryableNetworkError(err) {
+    if (err instanceof Error) {
+        if (err.name === 'AbortError')
+            return true;
+        const code = err.code;
+        if (code && ['ECONNREFUSED', 'ECONNRESET', 'EPIPE', 'ENOTFOUND', 'UND_ERR_CONNECT_TIMEOUT'].includes(code)) {
+            return true;
+        }
+        if (err.name === 'TypeError' && /fetch|network/i.test(err.message))
+            return true;
+    }
+    return false;
+}
+export class ApiClient {
+    baseUrl;
+    openInBrowser;
+    timeoutMs;
+    maxRetries;
+    /** Coalesces concurrent refresh_token exchanges for this client instance. */
+    refreshInFlight = null;
+    constructor(baseUrlOrOpts, openInBrowser) {
+        let opts;
+        if (typeof baseUrlOrOpts === 'string' || baseUrlOrOpts === undefined) {
+            opts = { baseUrl: baseUrlOrOpts, openInBrowser };
+        }
+        else {
+            opts = baseUrlOrOpts;
+        }
+        const explicit = opts.baseUrl?.trim();
+        const configUrl = getDefaultApiUrlFromFile();
+        const resolvedBaseUrl = explicit ||
+            (process.env['KAIROS_API_URL'] || '').trim() ||
+            configUrl ||
+            getApiUrl();
+        this.baseUrl = normalizeAndValidateApiBaseUrl(resolvedBaseUrl);
+        this.openInBrowser = !isBrowserDisabled() && (opts.openInBrowser !== false);
+        this.timeoutMs = opts.timeoutMs ?? DEFAULT_TIMEOUT_MS;
+        this.maxRetries = opts.maxRetries ?? DEFAULT_MAX_RETRIES;
+    }
+    async sleep(ms) {
+        await new Promise((resolve) => setTimeout(resolve, ms));
+    }
+    runRefreshWithSingleflight(refreshToken) {
+        if (this.refreshInFlight)
+            return this.refreshInFlight;
+        const p = (async () => {
+            try {
+                const result = await refreshAccessToken(this.baseUrl, refreshToken);
+                if (!result)
+                    return false;
+                const nextRefresh = result.refresh_token ?? refreshToken;
+                await writeConfig({
+                    apiUrl: this.baseUrl,
+                    bearerToken: result.access_token,
+                    refreshToken: nextRefresh,
+                });
+                return true;
+            }
+            catch {
+                return false;
+            }
+            finally {
+                this.refreshInFlight = null;
+            }
+        })();
+        this.refreshInFlight = p;
+        return p;
+    }
+    async request(endpoint, options = {}, isRetryAfterLogin = false, isRetryAfterRefresh = false, preLoginIfTokenMissing = true, rateLimitRetryCount = 0) {
+        const url = `${this.baseUrl}${endpoint}`;
+        const defaultHeaders = {
+            'Content-Type': 'application/json',
+        };
+        let cfg = await readConfig(this.baseUrl);
+        let bearer = cfg.bearerToken;
+        if (cfg.refreshToken && bearer && !isRetryAfterRefresh) {
+            const left = jwtExpiresInSeconds(bearer);
+            if (left !== null && left <= PROACTIVE_REFRESH_SKEW_SEC) {
+                await this.runRefreshWithSingleflight(cfg.refreshToken);
+                cfg = await readConfig(this.baseUrl);
+                bearer = cfg.bearerToken;
+            }
+        }
+        if (!bearer && preLoginIfTokenMissing && this.openInBrowser && !isRetryAfterLogin) {
+            const ok = await loginWithBrowser(this.baseUrl);
+            if (ok)
+                return this.request(endpoint, options, true, false, preLoginIfTokenMissing, rateLimitRetryCount);
+        }
+        if (bearer) {
+            defaultHeaders['Authorization'] = `Bearer ${bearer}`;
+        }
+        const requestTimeoutMs = this.timeoutMs;
+        let lastErr;
+        const maxAttempts = 1 + this.maxRetries;
+        for (let attempt = 1; attempt <= maxAttempts; attempt++) {
+            const ac = new AbortController();
+            const timeoutId = setTimeout(() => ac.abort(), requestTimeoutMs);
+            let response;
+            try {
+                response = await fetch(url, {
+                    ...options,
+                    signal: ac.signal,
+                    headers: {
+                        ...defaultHeaders,
+                        ...(options.headers || {}),
+                    },
+                });
+            }
+            catch (err) {
+                clearTimeout(timeoutId);
+                if (isRetryableNetworkError(err) && attempt < maxAttempts) {
+                    const delayMs = Math.min(1000 * 2 ** (attempt - 1), 10_000) + Math.random() * 200;
+                    const label = err instanceof Error && err.name === 'AbortError'
+                        ? `timed out after ${requestTimeoutMs / 1000}s`
+                        : describeFetchError(err);
+                    process.stderr.write(`[kairos] retry ${attempt}/${this.maxRetries}: ${label} — waiting ${(delayMs / 1000).toFixed(1)}s\n`);
+                    await this.sleep(delayMs);
+                    lastErr = err;
+                    continue;
+                }
+                if (err instanceof Error && err.name === 'AbortError') {
+                    throw new Error(`Request to ${url} timed out after ${requestTimeoutMs / 1000}s`);
+                }
+                if (isRetryableNetworkError(err)) {
+                    throw networkErrorWithHint(`Request to ${url} failed`, err);
+                }
+                throw err;
+            }
+            clearTimeout(timeoutId);
+            if (response.status === 429 && rateLimitRetryCount < 2) {
+                const retryAfterSeconds = Number(response.headers.get('Retry-After') ?? '1');
+                const retryDelayMs = Number.isFinite(retryAfterSeconds) && retryAfterSeconds > 0
+                    ? retryAfterSeconds * 1000
+                    : 1000;
+                await this.sleep(retryDelayMs);
+                return this.request(endpoint, options, isRetryAfterLogin, isRetryAfterRefresh, preLoginIfTokenMissing, rateLimitRetryCount + 1);
+            }
+            const data = await response.json().catch(() => {
+                throw new Error(`Failed to parse response from ${url}`);
+            });
+            if (!response.ok) {
+                const errorData = data;
+                let msg = errorData.message || errorData.error || `HTTP ${response.status}: ${response.statusText}`;
+                if ((errorData.error === 'SPACE_NOT_FOUND' || errorData.error === 'SPACE_READ_ONLY') &&
+                    Array.isArray(errorData.available_spaces)) {
+                    const availableSpaces = errorData.available_spaces.filter((entry) => typeof entry === 'string');
+                    if (availableSpaces.length > 0) {
+                        msg += `\nAvailable writable spaces: ${availableSpaces.join(', ')}`;
+                    }
+                }
+                if (response.status === 401) {
+                    const cfg401 = await readConfig(this.baseUrl);
+                    if (!isRetryAfterRefresh && cfg401.refreshToken) {
+                        const refreshed = await this.runRefreshWithSingleflight(cfg401.refreshToken);
+                        if (refreshed) {
+                            return this.request(endpoint, options, isRetryAfterLogin, true, preLoginIfTokenMissing, rateLimitRetryCount);
+                        }
+                    }
+                    if (this.openInBrowser && !isRetryAfterLogin) {
+                        const ok = await loginWithBrowser(this.baseUrl);
+                        if (ok) {
+                            return this.request(endpoint, options, true, false, preLoginIfTokenMissing, rateLimitRetryCount);
+                        }
+                    }
+                    if (errorData.login_url) {
+                        const loginUrl = rewriteLoginUrlRedirectToApiBase(errorData.login_url, this.baseUrl);
+                        throw new AuthRequiredError(`${msg}\n\nLog in at:\n${loginUrl}`, loginUrl);
+                    }
+                    throw new Error(msg);
+                }
+                throw new Error(msg);
+            }
+            return data;
+        }
+        throw lastErr instanceof Error
+            ? networkErrorWithHint(`Request to ${url} failed after ${maxAttempts} attempts`, lastErr)
+            : new Error(`Request to ${url} failed after ${maxAttempts} attempts`);
+    }
+    async activate(query) {
+        return this.request('/api/activate', { method: 'POST', body: JSON.stringify({ query }) });
+    }
+    async forward(uri, solution) {
+        return this.request('/api/forward', { method: 'POST', body: JSON.stringify({ uri, solution }) });
+    }
+    async train(markdown, options, isRetryAfterLogin = false) {
+        const headers = { 'Content-Type': 'text/markdown' };
+        if (options?.llmModelId)
+            headers['x-llm-model-id'] = options.llmModelId;
+        if (options?.force)
+            headers['x-force-update'] = 'true';
+        if (typeof options?.space === 'string' && options.space.trim().length > 0) {
+            headers['x-space'] = options.space.trim();
+        }
+        if (options?.reviewEvidence) {
+            headers['x-review-evidence'] = JSON.stringify(options.reviewEvidence);
+        }
+        return this.request('/api/train/raw', { method: 'POST', headers, body: markdown }, isRetryAfterLogin, false, false);
+    }
+    async tune(uris, opts) {
+        const body = { uris };
+        if (opts?.markdownDoc)
+            body['content'] = opts.markdownDoc;
+        if (opts?.updates)
+            body['updates'] = opts.updates;
+        const sp = typeof opts?.space === 'string' ? opts.space.trim() : '';
+        if (sp.length > 0)
+            body['space'] = sp;
+        if (opts?.reviewEvidence)
+            body['review_evidence'] = opts.reviewEvidence;
+        return this.request('/api/tune', { method: 'POST', body: JSON.stringify(body) });
+    }
+    async trainJson(body) {
+        return this.request('/api/train', { method: 'POST', headers: { 'Content-Type': 'application/json' }, body: JSON.stringify(body) });
+    }
+    async delete(uris) {
+        return this.request('/api/delete', { method: 'POST', body: JSON.stringify({ uris }) });
+    }
+    async spaces(options) {
+        const body = {};
+        if (options?.include_adapter_titles === true)
+            body['include_adapter_titles'] = true;
+        if (options?.include_artifacts === true)
+            body['include_artifacts'] = true;
+        return this.request('/api/spaces', { method: 'POST', body: JSON.stringify(body) });
+    }
+    async reward(uri, outcome, feedback, options) {
+        return this.request('/api/reward', {
+            method: 'POST',
+            body: JSON.stringify({
+                uri, outcome, feedback,
+                score: options?.score, rater: options?.rater,
+                rubric_version: options?.rubricVersion, llm_model_id: options?.llmModelId,
+            }),
+        });
+    }
+    async export(input) {
+        return this.request('/api/export', { method: 'POST', body: JSON.stringify(input) });
+    }
+    async downloadExportRef(urlOrPath) {
+        return downloadExportRef(this.baseUrl, urlOrPath);
+    }
+}
+//# sourceMappingURL=api-client.js.map

package/dist/cli/api-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-client.js","sourceRoot":"","sources":["../../src/cli/api-client.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACvE,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EAAE,wBAAwB,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AACrF,OAAO,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAC5E,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAC7E,OAAO,EAAE,gCAAgC,EAAE,MAAM,wBAAwB,CAAC;AAC1E,OAAO,EAAE,8BAA8B,EAA2B,MAAM,oBAAoB,CAAC;AAQ7F,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAE7D,MAAM,0BAA0B,GAAG,EAAE,CAAC;AACtC,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAClC,MAAM,mBAAmB,GAAG,CAAC,CAAC;AAqB9B,SAAS,uBAAuB,CAAC,GAAY;IACzC,IAAI,GAAG,YAAY,KAAK,EAAE,CAAC;QACvB,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY;YAAE,OAAO,IAAI,CAAC;QAC3C,MAAM,IAAI,GAAI,GAA6B,CAAC,IAAI,CAAC;QACjD,IAAI,IAAI,IAAI,CAAC,cAAc,EAAE,YAAY,EAAE,OAAO,EAAE,WAAW,EAAE,yBAAyB,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACzG,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,IAAI,GAAG,CAAC,IAAI,KAAK,WAAW,IAAI,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;YAAE,OAAO,IAAI,CAAC;IACpF,CAAC;IACD,OAAO,KAAK,CAAC;AACjB,CAAC;AAED,MAAM,OAAO,SAAS;IACV,OAAO,CAAS;IAChB,aAAa,CAAU;IACvB,SAAS,CAAS;IAClB,UAAU,CAAS;IAC3B,6EAA6E;IACrE,eAAe,GAA4B,IAAI,CAAC;IAExD,YAAY,aAAyC,EAAE,aAAuB;QAC1E,IAAI,IAAsB,CAAC;QAC3B,IAAI,OAAO,aAAa,KAAK,QAAQ,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;YACnE,IAAI,GAAG,EAAE,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,CAAC;QACrD,CAAC;aAAM,CAAC;YACJ,IAAI,GAAG,aAAa,CAAC;QACzB,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC;QACtC,MAAM,SAAS,GAAG,wBAAwB,EAAE,CAAC;QAC7C,MAAM,eAAe,GACjB,QAAQ;YACR,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;YAC5C,SAAS;YACT,SAAS,EAAE,CAAC;QAChB,IAAI,CAAC,OAAO,GAAG,8BAA8B,CAAC,eAAe,CAAC,CAAC;QAC/D,IAAI,CAAC,aAAa,GAAG,CAAC,iBAAiB,EAAE,IAAI,CAAC,IAAI,CAAC,aAAa,KAAK,KAAK,CAAC,CAAC;QAC5E,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,kBAAkB,CAAC;QACtD,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,mBAAmB,CAAC;IAC7D,CAAC;IAEO,KAAK,CAAC,KAAK,CAAC,EAAU;QAC1B,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;IAC5D,CAAC;IAEO,0BAA0B,CAAC,YAAoB;QACnD,IAAI,IAAI,CAAC,eAAe;YAAE,OAAO,IAAI,CAAC,eAAe,CAAC;QACtD,MAAM,CAAC,GAAG,CAAC,KAAK,IAAsB,EAAE;YACpC,IAAI,CAAC;gBACD,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;gBACpE,IAAI,CAAC,MAAM;oBAAE,OAAO,KAAK,CAAC;gBAC1B,MAAM,WAAW,GAAG,MAAM,CAAC,aAAa,IAAI,YAAY,CAAC;gBACzD,MAAM,WAAW,CAAC;oBACd,MAAM,EAAE,IAAI,CAAC,OAAO;oBACpB,WAAW,EAAE,MAAM,CAAC,YAAY;oBAChC,YAAY,EAAE,WAAW;iBAC5B,CAAC,CAAC;gBACH,OAAO,IAAI,CAAC;YAChB,CAAC;YAAC,MAAM,CAAC;gBACL,OAAO,KAAK,CAAC;YACjB,CAAC;oBAAS,CAAC;gBACP,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC;YAChC,CAAC;QACL,CAAC,CAAC,EAAE,CAAC;QACL,IAAI,CAAC,eAAe,GAAG,CAAC,CAAC;QACzB,OAAO,CAAC,CAAC;IACb,CAAC;IAEO,KAAK,CAAC,OAAO,CACjB,QAAgB,EAChB,UAAuB,EAAE,EACzB,iBAAiB,GAAG,KAAK,EACzB,mBAAmB,GAAG,KAAK,EAC3B,sBAAsB,GAAG,IAAI,EAC7B,mBAAmB,GAAG,CAAC;QAEvB,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,OAAO,GAAG,QAAQ,EAAE,CAAC;QACzC,MAAM,cAAc,GAA2B;YAC3C,cAAc,EAAE,kBAAkB;SACrC,CAAC;QACF,IAAI,GAAG,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACzC,IAAI,MAAM,GAAG,GAAG,CAAC,WAAW,CAAC;QAC7B,IAAI,GAAG,CAAC,YAAY,IAAI,MAAM,IAAI,CAAC,mBAAmB,EAAE,CAAC;YACrD,MAAM,IAAI,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;YACzC,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,IAAI,0BAA0B,EAAE,CAAC;gBACtD,MAAM,IAAI,CAAC,0BAA0B,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;gBACxD,GAAG,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBACrC,MAAM,GAAG,GAAG,CAAC,WAAW,CAAC;YAC7B,CAAC;QACL,CAAC;QACD,IAAI,CAAC,MAAM,IAAI,sBAAsB,IAAI,IAAI,CAAC,aAAa,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAChF,MAAM,EAAE,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAChD,IAAI,EAAE;gBAAE,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,sBAAsB,EAAE,mBAAmB,CAAC,CAAC;QAC7G,CAAC;QACD,IAAI,MAAM,EAAE,CAAC;YACT,cAAc,CAAC,eAAe,CAAC,GAAG,UAAU,MAAM,EAAE,CAAC;QACzD,CAAC;QAED,MAAM,gBAAgB,GAAG,IAAI,CAAC,SAAS,CAAC;QACxC,IAAI,OAAgB,CAAC;QACrB,MAAM,WAAW,GAAG,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC;QACxC,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,WAAW,EAAE,OAAO,EAAE,EAAE,CAAC;YACtD,MAAM,EAAE,GAAG,IAAI,eAAe,EAAE,CAAC;YACjC,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,EAAE,gBAAgB,CAAC,CAAC;YACjE,IAAI,QAAkB,CAAC;YACvB,IAAI,CAAC;gBACD,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;oBACxB,GAAG,OAAO;oBACV,MAAM,EAAE,EAAE,CAAC,MAAM;oBACjB,OAAO,EAAE;wBACL,GAAG,cAAc;wBACjB,GAAG,CAAC,OAAO,CAAC,OAAiC,IAAI,EAAE,CAAC;qBACvD;iBACJ,CAAC,CAAC;YACP,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACX,YAAY,CAAC,SAAS,CAAC,CAAC;gBACxB,IAAI,uBAAuB,CAAC,GAAG,CAAC,IAAI,OAAO,GAAG,WAAW,EAAE,CAAC;oBACxD,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,GAAG,CAAC;oBAClF,MAAM,KAAK,GAAG,GAAG,YAAY,KAAK,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY;wBAC3D,CAAC,CAAC,mBAAmB,gBAAgB,GAAG,IAAI,GAAG;wBAC/C,CAAC,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC;oBAC9B,OAAO,CAAC,MAAM,CAAC,KAAK,CAChB,kBAAkB,OAAO,IAAI,IAAI,CAAC,UAAU,KAAK,KAAK,cAAc,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CACvG,CAAC;oBACF,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;oBAC1B,OAAO,GAAG,GAAG,CAAC;oBACd,SAAS;gBACb,CAAC;gBACD,IAAI,GAAG,YAAY,KAAK,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;oBACpD,MAAM,IAAI,KAAK,CAAC,cAAc,GAAG,oBAAoB,gBAAgB,GAAG,IAAI,GAAG,CAAC,CAAC;gBACrF,CAAC;gBACD,IAAI,uBAAuB,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC/B,MAAM,oBAAoB,CAAC,cAAc,GAAG,SAAS,EAAE,GAAG,CAAC,CAAC;gBAChE,CAAC;gBACD,MAAM,GAAG,CAAC;YACd,CAAC;YACD,YAAY,CAAC,SAAS,CAAC,CAAC;YAExB,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,mBAAmB,GAAG,CAAC,EAAE,CAAC;gBACrD,MAAM,iBAAiB,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,GAAG,CAAC,CAAC;gBAC7E,MAAM,YAAY,GAAG,MAAM,CAAC,QAAQ,CAAC,iBAAiB,CAAC,IAAI,iBAAiB,GAAG,CAAC;oBAC5E,CAAC,CAAC,iBAAiB,GAAG,IAAI;oBAC1B,CAAC,CAAC,IAAI,CAAC;gBACX,MAAM,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;gBAC/B,OAAO,IAAI,CAAC,OAAO,CACf,QAAQ,EACR,OAAO,EACP,iBAAiB,EACjB,mBAAmB,EACnB,sBAAsB,EACtB,mBAAmB,GAAG,CAAC,CAC1B,CAAC;YACN,CAAC;YAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE;gBAC1C,MAAM,IAAI,KAAK,CAAC,iCAAiC,GAAG,EAAE,CAAC,CAAC;YAC5D,CAAC,CAAC,CAAC;YAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACf,MAAM,SAAS,GAAG,IAKjB,CAAC;gBACF,IAAI,GAAG,GAAG,SAAS,CAAC,OAAO,IAAI,SAAS,CAAC,KAAK,IAAI,QAAQ,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,UAAU,EAAE,CAAC;gBACpG,IACI,CAAC,SAAS,CAAC,KAAK,KAAK,iBAAiB,IAAI,SAAS,CAAC,KAAK,KAAK,iBAAiB,CAAC;oBAChF,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,gBAAgB,CAAC,EAC3C,CAAC;oBACC,MAAM,eAAe,GAAG,SAAS,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC;oBACjH,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;wBAC7B,GAAG,IAAI,gCAAgC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;oBACxE,CAAC;gBACL,CAAC;gBACD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;oBAC1B,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;oBAC9C,IAAI,CAAC,mBAAmB,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;wBAC9C,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,0BAA0B,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;wBAC7E,IAAI,SAAS,EAAE,CAAC;4BACZ,OAAO,IAAI,CAAC,OAAO,CACf,QAAQ,EACR,OAAO,EACP,iBAAiB,EACjB,IAAI,EACJ,sBAAsB,EACtB,mBAAmB,CACtB,CAAC;wBACN,CAAC;oBACL,CAAC;oBACD,IAAI,IAAI,CAAC,aAAa,IAAI,CAAC,iBAAiB,EAAE,CAAC;wBAC3C,MAAM,EAAE,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;wBAChD,IAAI,EAAE,EAAE,CAAC;4BACL,OAAO,IAAI,CAAC,OAAO,CACf,QAAQ,EACR,OAAO,EACP,IAAI,EACJ,KAAK,EACL,sBAAsB,EACtB,mBAAmB,CACtB,CAAC;wBACN,CAAC;oBACL,CAAC;oBACD,IAAI,SAAS,CAAC,SAAS,EAAE,CAAC;wBACtB,MAAM,QAAQ,GAAG,gCAAgC,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;wBACrF,MAAM,IAAI,iBAAiB,CAAC,GAAG,GAAG,mBAAmB,QAAQ,EAAE,EAAE,QAAQ,CAAC,CAAC;oBAC/E,CAAC;oBACD,MAAM,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC;gBACzB,CAAC;gBACD,MAAM,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC;YACzB,CAAC;YAED,OAAO,IAAS,CAAC;QACrB,CAAC;QACD,MAAM,OAAO,YAAY,KAAK;YAC1B,CAAC,CAAC,oBAAoB,CAAC,cAAc,GAAG,iBAAiB,WAAW,WAAW,EAAE,OAAO,CAAC;YACzF,CAAC,CAAC,IAAI,KAAK,CAAC,cAAc,GAAG,iBAAiB,WAAW,WAAW,CAAC,CAAC;IAC9E,CAAC;IACD,KAAK,CAAC,QAAQ,CAAC,KAAa;QACxB,OAAO,IAAI,CAAC,OAAO,CAAiB,eAAe,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;IAC9G,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,GAAW,EAAE,QAAkB;QACzC,OAAO,IAAI,CAAC,OAAO,CAAgB,cAAc,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC;IACpH,CAAC;IAED,KAAK,CAAC,KAAK,CACP,QAA4B,EAC5B,OAAgJ,EAChJ,iBAAiB,GAAG,KAAK;QAEzB,MAAM,OAAO,GAA2B,EAAE,cAAc,EAAE,eAAe,EAAE,CAAC;QAC5E,IAAI,OAAO,EAAE,UAAU;YAAE,OAAO,CAAC,gBAAgB,CAAC,GAAG,OAAO,CAAC,UAAU,CAAC;QACxE,IAAI,OAAO,EAAE,KAAK;YAAE,OAAO,CAAC,gBAAgB,CAAC,GAAG,MAAM,CAAC;QACvD,IAAI,OAAO,OAAO,EAAE,KAAK,KAAK,QAAQ,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxE,OAAO,CAAC,SAAS,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QAC9C,CAAC;QACD,IAAI,OAAO,EAAE,cAAc,EAAE,CAAC;YAC1B,OAAO,CAAC,mBAAmB,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;QAC1E,CAAC;QACD,OAAO,IAAI,CAAC,OAAO,CAAc,gBAAgB,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,iBAAiB,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;IACrI,CAAC;IAED,KAAK,CAAC,IAAI,CACN,IAAc,EACd,IAA8K;QAE9K,MAAM,IAAI,GAA4B,EAAE,IAAI,EAAE,CAAC;QAC/C,IAAI,IAAI,EAAE,WAAW;YAAE,IAAI,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC;QAC1D,IAAI,IAAI,EAAE,OAAO;YAAE,IAAI,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC;QAClD,MAAM,EAAE,GAAG,OAAO,IAAI,EAAE,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpE,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;YAAE,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;QACtC,IAAI,IAAI,EAAE,cAAc;YAAE,IAAI,CAAC,iBAAiB,CAAC,GAAG,IAAI,CAAC,cAAc,CAAC;QACxE,OAAO,IAAI,CAAC,OAAO,CAAa,WAAW,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjG,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,IAYf;QACG,OAAO,IAAI,CAAC,OAAO,CAAc,YAAY,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACpJ,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,IAAc;QACvB,OAAO,IAAI,CAAC,OAAO,CAAe,aAAa,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;IACzG,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,OAA2E;QACpF,MAAM,IAAI,GAA4B,EAAE,CAAC;QACzC,IAAI,OAAO,EAAE,sBAAsB,KAAK,IAAI;YAAE,IAAI,CAAC,wBAAwB,CAAC,GAAG,IAAI,CAAC;QACpF,IAAI,OAAO,EAAE,iBAAiB,KAAK,IAAI;YAAE,IAAI,CAAC,mBAAmB,CAAC,GAAG,IAAI,CAAC;QAC1E,OAAO,IAAI,CAAC,OAAO,CAAe,aAAa,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACrG,CAAC;IAED,KAAK,CAAC,MAAM,CACR,GAAW,EAAE,OAA8B,EAAE,QAAgB,EAC7D,OAAyF;QAEzF,OAAO,IAAI,CAAC,OAAO,CAAe,aAAa,EAAE;YAC7C,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACjB,GAAG,EAAE,OAAO,EAAE,QAAQ;gBACtB,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK;gBAC5C,cAAc,EAAE,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,OAAO,EAAE,UAAU;aAC5E,CAAC;SACL,CAAC,CAAC;IACP,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAAkB;QAC3B,OAAO,IAAI,CAAC,OAAO,CAAe,aAAa,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACtG,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,SAAiB;QACrC,OAAO,iBAAiB,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IACtD,CAAC;CACJ"}

package/dist/cli/auth-error.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Auth-related errors and handling (401 with login_url).
+ * Auth message is written without "Error: " prefix; --open can open the URL.
+ */
+export declare class AuthRequiredError extends Error {
+    readonly loginUrl: string;
+    constructor(message: string, loginUrl: string);
+}
+/** True when BROWSER=true (tests/automation) or none/no/false/0; use in scripts/tests to disable opening. */
+export declare function isBrowserDisabled(): boolean;
+/** When set, used instead of system default (open/xdg-open/start). BROWSER=true or none skips opening. */
+export declare function openBrowser(url: string): void;
+/**
+ * Handle API errors: AuthRequiredError is printed without "Error: " prefix;
+ * if openInBrowser is true, opens the login URL. Other errors use writeError.
+ * Never returns (calls process.exit(1)).
+ */
+export declare function handleApiError(error: unknown, openInBrowser?: boolean): never;
+//# sourceMappingURL=auth-error.d.ts.map

package/dist/cli/auth-error.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-error.d.ts","sourceRoot":"","sources":["../../src/cli/auth-error.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAQH,qBAAa,iBAAkB,SAAQ,KAAK;IACxC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;gBAEd,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM;CAKhD;AAED,6GAA6G;AAC7G,wBAAgB,iBAAiB,IAAI,OAAO,CAI3C;AAoED,0GAA0G;AAC1G,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAqB7C;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,EAAE,aAAa,CAAC,EAAE,OAAO,GAAG,KAAK,CAQ7E"}

package/dist/cli/auth-error.js

@@ -0,0 +1,123 @@
+/**
+ * Auth-related errors and handling (401 with login_url).
+ * Auth message is written without "Error: " prefix; --open can open the URL.
+ */
+import { execFile } from 'child_process';
+import { existsSync } from 'fs';
+import { platform } from 'os';
+import { isAbsolute } from 'path';
+import { writeError, writeStderr } from './output.js';
+export class AuthRequiredError extends Error {
+    loginUrl;
+    constructor(message, loginUrl) {
+        super(message);
+        this.name = 'AuthRequiredError';
+        this.loginUrl = loginUrl;
+    }
+}
+/** True when BROWSER=true (tests/automation) or none/no/false/0; use in scripts/tests to disable opening. */
+export function isBrowserDisabled() {
+    if (process.env['KAIROS_NO_BROWSER'] === '1')
+        return true;
+    const b = process.env['BROWSER'];
+    return b != null && b !== '' && /^(true|none|no|false|0)$/i.test(b);
+}
+const ALLOWED_BROWSER_BINARIES = new Set([
+    'brave',
+    'brave-browser',
+    'chrome',
+    'chromium',
+    'chromium-browser',
+    'firefox',
+    'google-chrome',
+    'google-chrome-stable',
+    'microsoft-edge',
+    'msedge',
+    'open',
+    'rundll32.exe',
+    'safari',
+    'xdg-open',
+]);
+function normalizeBrowserUrl(url) {
+    const trimmed = url.trim();
+    if (!trimmed || /[\r\n\t\x00]/.test(trimmed)) {
+        throw new Error('Browser URL contains invalid control characters');
+    }
+    const parsed = new URL(trimmed);
+    if (parsed.protocol !== 'http:' && parsed.protocol !== 'https:') {
+        throw new Error(`Unsupported browser URL protocol: ${parsed.protocol}`);
+    }
+    return parsed.toString();
+}
+function resolveCustomBrowser(browserEnv, url) {
+    const trimmed = browserEnv.trim();
+    if (!trimmed)
+        return null;
+    if (/["'`$&|;<>]/.test(trimmed))
+        return null;
+    if (/\s/.test(trimmed)) {
+        if (isAbsolute(trimmed) && existsSync(trimmed)) {
+            return { file: trimmed, args: [url] };
+        }
+        return null;
+    }
+    if (!ALLOWED_BROWSER_BINARIES.has(trimmed) && !(isAbsolute(trimmed) && existsSync(trimmed))) {
+        return null;
+    }
+    return { file: trimmed, args: [url] };
+}
+function resolveSystemBrowser(url) {
+    if (platform() === 'win32') {
+        return { file: 'rundll32.exe', args: ['url.dll,FileProtocolHandler', url] };
+    }
+    if (platform() === 'darwin') {
+        return { file: 'open', args: [url] };
+    }
+    return { file: 'xdg-open', args: [url] };
+}
+function runBrowser(launch, url, errorPrefix) {
+    execFile(launch.file, launch.args, (err) => {
+        if (err)
+            writeStderr(`${errorPrefix}: ${err.message}. Open this URL manually:\n${url}`);
+    });
+}
+/** When set, used instead of system default (open/xdg-open/start). BROWSER=true or none skips opening. */
+export function openBrowser(url) {
+    if (isBrowserDisabled())
+        return;
+    let safeUrl;
+    try {
+        safeUrl = normalizeBrowserUrl(url);
+    }
+    catch (error) {
+        const message = error instanceof Error ? error.message : 'Invalid browser URL';
+        writeStderr(`${message}. Open this URL manually:\n${url}`);
+        return;
+    }
+    const browserEnv = process.env['BROWSER'];
+    if (browserEnv != null && browserEnv !== '') {
+        const customLaunch = resolveCustomBrowser(browserEnv, safeUrl);
+        if (customLaunch) {
+            runBrowser(customLaunch, safeUrl, 'Could not run BROWSER');
+            return;
+        }
+        writeStderr(`Ignoring unsafe BROWSER override. Falling back to system browser for:\n${safeUrl}`);
+    }
+    runBrowser(resolveSystemBrowser(safeUrl), safeUrl, 'Could not open browser');
+}
+/**
+ * Handle API errors: AuthRequiredError is printed without "Error: " prefix;
+ * if openInBrowser is true, opens the login URL. Other errors use writeError.
+ * Never returns (calls process.exit(1)).
+ */
+export function handleApiError(error, openInBrowser) {
+    if (error instanceof AuthRequiredError) {
+        writeStderr(error.message);
+        if (openInBrowser)
+            openBrowser(error.loginUrl);
+        process.exit(1);
+    }
+    writeError(error instanceof Error ? error.message : String(error));
+    process.exit(1);
+}
+//# sourceMappingURL=auth-error.js.map

package/dist/cli/auth-error.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-error.js","sourceRoot":"","sources":["../../src/cli/auth-error.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AAChC,OAAO,EAAE,QAAQ,EAAE,MAAM,IAAI,CAAC;AAC9B,OAAO,EAAE,UAAU,EAAE,MAAM,MAAM,CAAC;AAClC,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAEtD,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IAC/B,QAAQ,CAAS;IAE1B,YAAY,OAAe,EAAE,QAAgB;QACzC,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;QAChC,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC7B,CAAC;CACJ;AAED,6GAA6G;AAC7G,MAAM,UAAU,iBAAiB;IAC7B,IAAI,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IAC1D,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACjC,OAAO,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,IAAI,2BAA2B,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACxE,CAAC;AAOD,MAAM,wBAAwB,GAAG,IAAI,GAAG,CAAC;IACrC,OAAO;IACP,eAAe;IACf,QAAQ;IACR,UAAU;IACV,kBAAkB;IAClB,SAAS;IACT,eAAe;IACf,sBAAsB;IACtB,gBAAgB;IAChB,QAAQ;IACR,MAAM;IACN,cAAc;IACd,QAAQ;IACR,UAAU;CACb,CAAC,CAAC;AAEH,SAAS,mBAAmB,CAAC,GAAW;IACpC,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IAC3B,IAAI,CAAC,OAAO,IAAI,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3C,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACvE,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;IAChC,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC9D,MAAM,IAAI,KAAK,CAAC,qCAAqC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC5E,CAAC;IACD,OAAO,MAAM,CAAC,QAAQ,EAAE,CAAC;AAC7B,CAAC;AAED,SAAS,oBAAoB,CAAC,UAAkB,EAAE,GAAW;IACzD,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,EAAE,CAAC;IAClC,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC1B,IAAI,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7C,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACrB,IAAI,UAAU,CAAC,OAAO,CAAC,IAAI,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YAC7C,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1C,CAAC;QACD,OAAO,IAAI,CAAC;IAChB,CAAC;IACD,IAAI,CAAC,wBAAwB,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,UAAU,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;QAC1F,OAAO,IAAI,CAAC;IAChB,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;AAC1C,CAAC;AAED,SAAS,oBAAoB,CAAC,GAAW;IACrC,IAAI,QAAQ,EAAE,KAAK,OAAO,EAAE,CAAC;QACzB,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,6BAA6B,EAAE,GAAG,CAAC,EAAE,CAAC;IAChF,CAAC;IACD,IAAI,QAAQ,EAAE,KAAK,QAAQ,EAAE,CAAC;QAC1B,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;IACzC,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;AAC7C,CAAC;AAED,SAAS,UAAU,CAAC,MAA4B,EAAE,GAAW,EAAE,WAAmB;IAC9E,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,GAAG,EAAE,EAAE;QACvC,IAAI,GAAG;YAAE,WAAW,CAAC,GAAG,WAAW,KAAK,GAAG,CAAC,OAAO,8BAA8B,GAAG,EAAE,CAAC,CAAC;IAC5F,CAAC,CAAC,CAAC;AACP,CAAC;AAED,0GAA0G;AAC1G,MAAM,UAAU,WAAW,CAAC,GAAW;IACnC,IAAI,iBAAiB,EAAE;QAAE,OAAO;IAChC,IAAI,OAAe,CAAC;IACpB,IAAI,CAAC;QACD,OAAO,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC;IACvC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,qBAAqB,CAAC;QAC/E,WAAW,CAAC,GAAG,OAAO,8BAA8B,GAAG,EAAE,CAAC,CAAC;QAC3D,OAAO;IACX,CAAC;IAED,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAC1C,IAAI,UAAU,IAAI,IAAI,IAAI,UAAU,KAAK,EAAE,EAAE,CAAC;QAC1C,MAAM,YAAY,GAAG,oBAAoB,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QAC/D,IAAI,YAAY,EAAE,CAAC;YACf,UAAU,CAAC,YAAY,EAAE,OAAO,EAAE,uBAAuB,CAAC,CAAC;YAC3D,OAAO;QACX,CAAC;QACD,WAAW,CAAC,0EAA0E,OAAO,EAAE,CAAC,CAAC;IACrG,CAAC;IACD,UAAU,CAAC,oBAAoB,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,wBAAwB,CAAC,CAAC;AACjF,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,KAAc,EAAE,aAAuB;IAClE,IAAI,KAAK,YAAY,iBAAiB,EAAE,CAAC;QACrC,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC3B,IAAI,aAAa;YAAE,WAAW,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC/C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC;IACD,UAAU,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IACnE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACpB,CAAC"}

package/dist/cli/client-factory.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Factory for creating ApiClient instances with resolved global CLI options.
+ * Separated from program.ts to avoid circular imports with command modules.
+ */
+import type { Command } from 'commander';
+import { ApiClient, type ApiClientOptions } from './api-client.js';
+/**
+ * Resolve timeout and retry settings from program global options + environment variables.
+ * Precedence: CLI flag > env var > default.
+ */
+export declare function resolveClientOptions(program: Command): ApiClientOptions;
+/** Create an ApiClient with resolved global options (--url, --timeout, --retries). */
+export declare function createClientFromProgram(program: Command): ApiClient;
+//# sourceMappingURL=client-factory.d.ts.map