@stigmer/cli 3.0.8

package/config/config.js

@@ -0,0 +1,85 @@
+// CLI configuration model and persistence (~/.stigmer/config.yaml).
+//
+// Parity + coexistence: the file format matches the Go CLI exactly (snake_case
+// keys, 0600 perms, doc-link header) so a single config works whether invoked
+// through the Go or TS CLI during the migration. Crucially, the local-backend
+// section (daemon/LLM/Temporal settings owned by later waves and the Go CLI) is
+// carried through opaquely on save, so the TS CLI never drops fields it does
+// not yet model.
+import { mkdirSync, readFileSync, writeFileSync } from "node:fs";
+import { dirname } from "node:path";
+import { parse as parseYaml, stringify as stringifyYaml } from "yaml";
+import { isStandalone } from "../runtime.js";
+import { configPath } from "./paths.js";
+const SAVE_HEADER = `# Stigmer CLI Configuration
+# For configuration options and examples, see:
+# https://github.com/stigmer/stigmer/blob/main/docs/cli/configuration.md
+
+`;
+/** The default config: local backend, no daemon settings fabricated. */
+export function getDefault() {
+    return { backend: { type: "local" } };
+}
+/**
+ * Load the config from disk. In standalone mode the file is ignored and the
+ * default is returned, isolating sidecar/automation invocations from ambient
+ * user config (matches the Go CLI). A missing file also yields the default.
+ */
+export function load(path = configPath()) {
+    if (isStandalone()) {
+        return getDefault();
+    }
+    let raw;
+    try {
+        raw = readFileSync(path, "utf8");
+    }
+    catch (err) {
+        if (isNotFound(err))
+            return getDefault();
+        throw err;
+    }
+    const parsed = parseYaml(raw);
+    return normalize(parsed);
+}
+/** Persist the config to disk (0600 file in a 0755 directory), with the
+ * documentation header the Go CLI writes. */
+export function save(config, path = configPath()) {
+    mkdirSync(dirname(path), { recursive: true, mode: 0o755 });
+    const body = stringifyYaml(stripUndefined(config));
+    writeFileSync(path, SAVE_HEADER + body, { mode: 0o600 });
+}
+/** True when the cloud backend is selected. */
+export function isCloudMode(config) {
+    return config.backend.type === "cloud";
+}
+function normalize(parsed) {
+    if (parsed === null || parsed.backend === undefined) {
+        return getDefault();
+    }
+    const type = parsed.backend.type === "cloud" ? "cloud" : "local";
+    return {
+        backend: { type, local: parsed.backend.local, cloud: parsed.backend.cloud },
+        context: parsed.context,
+    };
+}
+// Recursively drop undefined-valued keys so the serialized YAML omits empty
+// optionals (matching Go's yaml omitempty), while preserving the opaque local
+// section untouched.
+function stripUndefined(value) {
+    if (Array.isArray(value)) {
+        return value.map((item) => stripUndefined(item));
+    }
+    if (value !== null && typeof value === "object") {
+        const out = {};
+        for (const [key, val] of Object.entries(value)) {
+            if (val !== undefined)
+                out[key] = stripUndefined(val);
+        }
+        return out;
+    }
+    return value;
+}
+function isNotFound(err) {
+    return err?.code === "ENOENT";
+}
+//# sourceMappingURL=config.js.map

package/config/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/config/config.ts"],"names":[],"mappings":"AAAA,oEAAoE;AACpE,EAAE;AACF,+EAA+E;AAC/E,8EAA8E;AAC9E,8EAA8E;AAC9E,gFAAgF;AAChF,6EAA6E;AAC7E,iBAAiB;AAEjB,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACjE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,SAAS,IAAI,aAAa,EAAE,MAAM,MAAM,CAAC;AACtE,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAqCxC,MAAM,WAAW,GAAG;;;;CAInB,CAAC;AAEF,wEAAwE;AACxE,MAAM,UAAU,UAAU;IACxB,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC;AACxC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,IAAI,CAAC,OAAe,UAAU,EAAE;IAC9C,IAAI,YAAY,EAAE,EAAE,CAAC;QACnB,OAAO,UAAU,EAAE,CAAC;IACtB,CAAC;IAED,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACnC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO,UAAU,EAAE,CAAC;QACzC,MAAM,GAAG,CAAC;IACZ,CAAC;IAED,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAA2B,CAAC;IACxD,OAAO,SAAS,CAAC,MAAM,CAAC,CAAC;AAC3B,CAAC;AAED;6CAC6C;AAC7C,MAAM,UAAU,IAAI,CAAC,MAAc,EAAE,OAAe,UAAU,EAAE;IAC9D,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3D,MAAM,IAAI,GAAG,aAAa,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC;IACnD,aAAa,CAAC,IAAI,EAAE,WAAW,GAAG,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AAC3D,CAAC;AAED,+CAA+C;AAC/C,MAAM,UAAU,WAAW,CAAC,MAAc;IACxC,OAAO,MAAM,CAAC,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC;AACzC,CAAC;AAED,SAAS,SAAS,CAAC,MAA8B;IAC/C,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QACpD,OAAO,UAAU,EAAE,CAAC;IACtB,CAAC;IACD,MAAM,IAAI,GAAgB,MAAM,CAAC,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC;IAC9E,OAAO;QACL,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE;QAC3E,OAAO,EAAE,MAAM,CAAC,OAAO;KACxB,CAAC;AACJ,CAAC;AAED,4EAA4E;AAC5E,8EAA8E;AAC9E,qBAAqB;AACrB,SAAS,cAAc,CAAI,KAAQ;IACjC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,CAAiB,CAAC;IACnE,CAAC;IACD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAChD,MAAM,GAAG,GAA4B,EAAE,CAAC;QACxC,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,EAAE,CAAC;YAC1E,IAAI,GAAG,KAAK,SAAS;gBAAE,GAAG,CAAC,GAAG,CAAC,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;QACxD,CAAC;QACD,OAAO,GAAQ,CAAC;IAClB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,UAAU,CAAC,GAAY;IAC9B,OAAQ,GAAoC,EAAE,IAAI,KAAK,QAAQ,CAAC;AAClE,CAAC"}

package/config/index.d.ts

@@ -0,0 +1,5 @@
+export { type BackendConfig, type BackendType, type CloudBackendConfig, type Config, type ContextConfig, getDefault, isCloudMode, load, save, } from "./config.js";
+export { ensureAuthenticated, resolveContextOrganization, resolveEndpoint, resolveOrganization, resolveToken, } from "./resolve.js";
+export { configDir, configPath, dataDir } from "./paths.js";
+export { configKeyNames, getConfigValue, setConfigValue } from "./keys.js";
+//# sourceMappingURL=index.d.ts.map

package/config/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/config/index.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,KAAK,aAAa,EAClB,KAAK,WAAW,EAChB,KAAK,kBAAkB,EACvB,KAAK,MAAM,EACX,KAAK,aAAa,EAClB,UAAU,EACV,WAAW,EACX,IAAI,EACJ,IAAI,GACL,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,mBAAmB,EACnB,0BAA0B,EAC1B,eAAe,EACf,mBAAmB,EACnB,YAAY,GACb,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAC5D,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC"}

package/config/index.js

@@ -0,0 +1,6 @@
+// Public surface of the CLI config module.
+export { getDefault, isCloudMode, load, save, } from "./config.js";
+export { ensureAuthenticated, resolveContextOrganization, resolveEndpoint, resolveOrganization, resolveToken, } from "./resolve.js";
+export { configDir, configPath, dataDir } from "./paths.js";
+export { configKeyNames, getConfigValue, setConfigValue } from "./keys.js";
+//# sourceMappingURL=index.js.map

package/config/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/config/index.ts"],"names":[],"mappings":"AAAA,2CAA2C;AAE3C,OAAO,EAML,UAAU,EACV,WAAW,EACX,IAAI,EACJ,IAAI,GACL,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,mBAAmB,EACnB,0BAA0B,EAC1B,eAAe,EACf,mBAAmB,EACnB,YAAY,GACb,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAC5D,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC"}

package/config/keys.d.ts

@@ -0,0 +1,6 @@
+import type { Config } from "./config.js";
+/** All known config keys, sorted, for `config list` and error messages. */
+export declare function configKeyNames(): string[];
+export declare function getConfigValue(config: Config, key: string): string;
+export declare function setConfigValue(config: Config, key: string, value: string): void;
+//# sourceMappingURL=keys.d.ts.map

package/config/keys.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"keys.d.ts","sourceRoot":"","sources":["../../src/config/keys.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAe,MAAM,EAAE,MAAM,aAAa,CAAC;AAuCvD,2EAA2E;AAC3E,wBAAgB,cAAc,IAAI,MAAM,EAAE,CAEzC;AAED,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAIlE;AAED,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAI/E"}

package/config/keys.js

@@ -0,0 +1,53 @@
+// Dotted-key access for the generic `config get|set|list` commands. Only the
+// fields the TS CLI owns in Wave 1 are exposed; daemon/local settings are
+// managed by their own (later) commands and preserved opaquely on save.
+import { UsageError } from "../errors/usage-error.js";
+const KEYS = {
+    "backend.type": {
+        get: (config) => config.backend.type,
+        set: (config, value) => {
+            if (value !== "local" && value !== "cloud") {
+                throw new UsageError(`invalid backend.type "${value}" (expected: local, cloud)`);
+            }
+            config.backend.type = value;
+        },
+    },
+    "backend.cloud.endpoint": {
+        get: (config) => config.backend.cloud?.endpoint ?? "",
+        set: (config, value) => {
+            (config.backend.cloud ??= {}).endpoint = value;
+        },
+    },
+    "backend.cloud.org_id": {
+        get: (config) => config.backend.cloud?.org_id ?? "",
+        set: (config, value) => {
+            (config.backend.cloud ??= {}).org_id = value;
+        },
+    },
+    "context.organization": {
+        get: (config) => config.context?.organization ?? "",
+        set: (config, value) => {
+            (config.context ??= {}).organization = value;
+        },
+    },
+};
+/** All known config keys, sorted, for `config list` and error messages. */
+export function configKeyNames() {
+    return Object.keys(KEYS).sort();
+}
+export function getConfigValue(config, key) {
+    const entry = KEYS[key];
+    if (entry === undefined)
+        throw new UsageError(unknownKeyMessage(key));
+    return entry.get(config);
+}
+export function setConfigValue(config, key, value) {
+    const entry = KEYS[key];
+    if (entry === undefined)
+        throw new UsageError(unknownKeyMessage(key));
+    entry.set(config, value);
+}
+function unknownKeyMessage(key) {
+    return `unknown config key "${key}" (known keys: ${configKeyNames().join(", ")})`;
+}
+//# sourceMappingURL=keys.js.map

package/config/keys.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"keys.js","sourceRoot":"","sources":["../../src/config/keys.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,0EAA0E;AAC1E,wEAAwE;AAExE,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AAUtD,MAAM,IAAI,GAA8B;IACtC,cAAc,EAAE;QACd,GAAG,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI;QACpC,GAAG,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE;YACrB,IAAI,KAAK,KAAK,OAAO,IAAI,KAAK,KAAK,OAAO,EAAE,CAAC;gBAC3C,MAAM,IAAI,UAAU,CAAC,yBAAyB,KAAK,4BAA4B,CAAC,CAAC;YACnF,CAAC;YACD,MAAM,CAAC,OAAO,CAAC,IAAI,GAAG,KAAoB,CAAC;QAC7C,CAAC;KACF;IACD,wBAAwB,EAAE;QACxB,GAAG,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,QAAQ,IAAI,EAAE;QACrD,GAAG,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE;YACrB,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,KAAK,EAAE,CAAC,CAAC,QAAQ,GAAG,KAAK,CAAC;QACjD,CAAC;KACF;IACD,sBAAsB,EAAE;QACtB,GAAG,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,IAAI,EAAE;QACnD,GAAG,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE;YACrB,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,KAAK,EAAE,CAAC,CAAC,MAAM,GAAG,KAAK,CAAC;QAC/C,CAAC;KACF;IACD,sBAAsB,EAAE;QACtB,GAAG,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,YAAY,IAAI,EAAE;QACnD,GAAG,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE;YACrB,CAAC,MAAM,CAAC,OAAO,KAAK,EAAE,CAAC,CAAC,YAAY,GAAG,KAAK,CAAC;QAC/C,CAAC;KACF;CACF,CAAC;AAEF,2EAA2E;AAC3E,MAAM,UAAU,cAAc;IAC5B,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;AAClC,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,MAAc,EAAE,GAAW;IACxD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;IACxB,IAAI,KAAK,KAAK,SAAS;QAAE,MAAM,IAAI,UAAU,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC;IACtE,OAAO,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;AAC3B,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,MAAc,EAAE,GAAW,EAAE,KAAa;IACvE,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;IACxB,IAAI,KAAK,KAAK,SAAS;QAAE,MAAM,IAAI,UAAU,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC;IACtE,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;AAC3B,CAAC;AAED,SAAS,iBAAiB,CAAC,GAAW;IACpC,OAAO,uBAAuB,GAAG,kBAAkB,cAAc,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;AACpF,CAAC"}

package/config/paths.d.ts

@@ -0,0 +1,10 @@
+export declare const CONFIG_DIR_NAME = ".stigmer";
+export declare const CONFIG_FILE_NAME = "config.yaml";
+export declare const DEFAULT_DATA_DIR = "data";
+/** Absolute path to the config directory (~/.stigmer). */
+export declare function configDir(home?: string): string;
+/** Absolute path to the config file (~/.stigmer/config.yaml). */
+export declare function configPath(home?: string): string;
+/** Absolute path to the local backend data directory (~/.stigmer/data). */
+export declare function dataDir(home?: string): string;
+//# sourceMappingURL=paths.d.ts.map

package/config/paths.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.d.ts","sourceRoot":"","sources":["../../src/config/paths.ts"],"names":[],"mappings":"AAOA,eAAO,MAAM,eAAe,aAAa,CAAC;AAC1C,eAAO,MAAM,gBAAgB,gBAAgB,CAAC;AAC9C,eAAO,MAAM,gBAAgB,SAAS,CAAC;AAEvC,0DAA0D;AAC1D,wBAAgB,SAAS,CAAC,IAAI,GAAE,MAAkB,GAAG,MAAM,CAE1D;AAED,iEAAiE;AACjE,wBAAgB,UAAU,CAAC,IAAI,GAAE,MAAkB,GAAG,MAAM,CAE3D;AAED,2EAA2E;AAC3E,wBAAgB,OAAO,CAAC,IAAI,GAAE,MAAkB,GAAG,MAAM,CAExD"}

package/config/paths.js

@@ -0,0 +1,21 @@
+// Filesystem locations for CLI configuration and local data. Mirrors the Go
+// CLI's config path helpers (~/.stigmer/...). Functions take the home dir as a
+// parameter (defaulting to os.homedir()) so tests can redirect them cleanly.
+import { homedir } from "node:os";
+import { join } from "node:path";
+export const CONFIG_DIR_NAME = ".stigmer";
+export const CONFIG_FILE_NAME = "config.yaml";
+export const DEFAULT_DATA_DIR = "data";
+/** Absolute path to the config directory (~/.stigmer). */
+export function configDir(home = homedir()) {
+    return join(home, CONFIG_DIR_NAME);
+}
+/** Absolute path to the config file (~/.stigmer/config.yaml). */
+export function configPath(home = homedir()) {
+    return join(configDir(home), CONFIG_FILE_NAME);
+}
+/** Absolute path to the local backend data directory (~/.stigmer/data). */
+export function dataDir(home = homedir()) {
+    return join(configDir(home), DEFAULT_DATA_DIR);
+}
+//# sourceMappingURL=paths.js.map

package/config/paths.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.js","sourceRoot":"","sources":["../../src/config/paths.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,+EAA+E;AAC/E,6EAA6E;AAE7E,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,MAAM,CAAC,MAAM,eAAe,GAAG,UAAU,CAAC;AAC1C,MAAM,CAAC,MAAM,gBAAgB,GAAG,aAAa,CAAC;AAC9C,MAAM,CAAC,MAAM,gBAAgB,GAAG,MAAM,CAAC;AAEvC,0DAA0D;AAC1D,MAAM,UAAU,SAAS,CAAC,OAAe,OAAO,EAAE;IAChD,OAAO,IAAI,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;AACrC,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,UAAU,CAAC,OAAe,OAAO,EAAE;IACjD,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,gBAAgB,CAAC,CAAC;AACjD,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,OAAO,CAAC,OAAe,OAAO,EAAE;IAC9C,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,gBAAgB,CAAC,CAAC;AACjD,CAAC"}

package/config/resolve.d.ts

@@ -0,0 +1,33 @@
+import { type Config } from "./config.js";
+/**
+ * Resolve the server endpoint.
+ *   STIGMER_SERVER_ADDRESS  (explicit override, either backend)
+ *   > cloud.endpoint        (cloud mode)
+ *   > api.stigmer.ai:443    (cloud default) / localhost:7234 (local default)
+ */
+export declare function resolveEndpoint(config: Config): string;
+/**
+ * Resolve the auth token.
+ *   STIGMER_API_KEY  (env, also where the --api-key global is bridged)
+ *   > cloud.token    (persisted login token)
+ *   > ""             (unauthenticated)
+ */
+export declare function resolveToken(config: Config): string;
+/**
+ * Resolve the active organization.
+ *   --org flag override > STIGMER_ORG_ID env > context.organization
+ *   > cloud.org_id (legacy fallback)
+ */
+export declare function resolveOrganization(config: Config, flagOrg?: string): string;
+/** The configured organization, with the legacy cloud.org_id fallback. */
+export declare function resolveContextOrganization(config: Config): string;
+/**
+ * Fail fast with a clear "please log in" error when a cloud command has no
+ * usable credential. Local mode never requires auth. A credential is any of:
+ * the STIGMER_API_KEY env (or bridged --api-key), a persisted access token, or
+ * a refresh token (which the token provider can exchange for a fresh access
+ * token). This lives in the config layer — not the client façade — because it
+ * is purely a question of which credentials are configured.
+ */
+export declare function ensureAuthenticated(config: Config): void;
+//# sourceMappingURL=resolve.d.ts.map

package/config/resolve.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve.d.ts","sourceRoot":"","sources":["../../src/config/resolve.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,KAAK,MAAM,EAAe,MAAM,aAAa,CAAC;AAKvD;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAStD;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAMnD;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,CAS5E;AAED,0EAA0E;AAC1E,wBAAgB,0BAA0B,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAKjE;AAED;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAMxD"}

package/config/resolve.js

@@ -0,0 +1,77 @@
+// Effective-value resolution with env > config > default precedence. These are
+// the settings the backend client and read verbs depend on; centralizing the
+// precedence keeps every call site consistent (mirrors the Go CLI's Resolve*).
+import { CliExitError, ExitCode } from "../errors/index.js";
+import { isCloudMode } from "./config.js";
+const DEFAULT_CLOUD_ENDPOINT = "api.stigmer.ai:443";
+const DEFAULT_LOCAL_ENDPOINT = "localhost:7234";
+/**
+ * Resolve the server endpoint.
+ *   STIGMER_SERVER_ADDRESS  (explicit override, either backend)
+ *   > cloud.endpoint        (cloud mode)
+ *   > api.stigmer.ai:443    (cloud default) / localhost:7234 (local default)
+ */
+export function resolveEndpoint(config) {
+    const override = process.env.STIGMER_SERVER_ADDRESS;
+    if (override !== undefined && override !== "") {
+        return override;
+    }
+    if (isCloudMode(config)) {
+        return config.backend.cloud?.endpoint || DEFAULT_CLOUD_ENDPOINT;
+    }
+    return DEFAULT_LOCAL_ENDPOINT;
+}
+/**
+ * Resolve the auth token.
+ *   STIGMER_API_KEY  (env, also where the --api-key global is bridged)
+ *   > cloud.token    (persisted login token)
+ *   > ""             (unauthenticated)
+ */
+export function resolveToken(config) {
+    const env = process.env.STIGMER_API_KEY;
+    if (env !== undefined && env !== "") {
+        return env;
+    }
+    return config.backend.cloud?.token ?? "";
+}
+/**
+ * Resolve the active organization.
+ *   --org flag override > STIGMER_ORG_ID env > context.organization
+ *   > cloud.org_id (legacy fallback)
+ */
+export function resolveOrganization(config, flagOrg) {
+    if (flagOrg !== undefined && flagOrg !== "") {
+        return flagOrg;
+    }
+    const env = process.env.STIGMER_ORG_ID;
+    if (env !== undefined && env !== "") {
+        return env;
+    }
+    return resolveContextOrganization(config);
+}
+/** The configured organization, with the legacy cloud.org_id fallback. */
+export function resolveContextOrganization(config) {
+    if (config.context?.organization !== undefined && config.context.organization !== "") {
+        return config.context.organization;
+    }
+    return config.backend.cloud?.org_id ?? "";
+}
+/**
+ * Fail fast with a clear "please log in" error when a cloud command has no
+ * usable credential. Local mode never requires auth. A credential is any of:
+ * the STIGMER_API_KEY env (or bridged --api-key), a persisted access token, or
+ * a refresh token (which the token provider can exchange for a fresh access
+ * token). This lives in the config layer — not the client façade — because it
+ * is purely a question of which credentials are configured.
+ */
+export function ensureAuthenticated(config) {
+    if (!isCloudMode(config))
+        return;
+    if (process.env.STIGMER_API_KEY)
+        return;
+    const cloud = config.backend.cloud;
+    if (cloud?.token || cloud?.refresh_token)
+        return;
+    throw new CliExitError("Not authenticated", ExitCode.Auth, ["Please sign in:", "  stigmer auth login"]);
+}
+//# sourceMappingURL=resolve.js.map

package/config/resolve.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve.js","sourceRoot":"","sources":["../../src/config/resolve.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,6EAA6E;AAC7E,+EAA+E;AAE/E,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC5D,OAAO,EAAe,WAAW,EAAE,MAAM,aAAa,CAAC;AAEvD,MAAM,sBAAsB,GAAG,oBAAoB,CAAC;AACpD,MAAM,sBAAsB,GAAG,gBAAgB,CAAC;AAEhD;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,MAAc;IAC5C,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC;IACpD,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,EAAE,EAAE,CAAC;QAC9C,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,IAAI,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC;QACxB,OAAO,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,QAAQ,IAAI,sBAAsB,CAAC;IAClE,CAAC;IACD,OAAO,sBAAsB,CAAC;AAChC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,YAAY,CAAC,MAAc;IACzC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC;IACxC,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,EAAE,EAAE,CAAC;QACpC,OAAO,GAAG,CAAC;IACb,CAAC;IACD,OAAO,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,IAAI,EAAE,CAAC;AAC3C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAAc,EAAE,OAAgB;IAClE,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,EAAE,EAAE,CAAC;QAC5C,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;IACvC,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,EAAE,EAAE,CAAC;QACpC,OAAO,GAAG,CAAC;IACb,CAAC;IACD,OAAO,0BAA0B,CAAC,MAAM,CAAC,CAAC;AAC5C,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,0BAA0B,CAAC,MAAc;IACvD,IAAI,MAAM,CAAC,OAAO,EAAE,YAAY,KAAK,SAAS,IAAI,MAAM,CAAC,OAAO,CAAC,YAAY,KAAK,EAAE,EAAE,CAAC;QACrF,OAAO,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC;IACrC,CAAC;IACD,OAAO,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,IAAI,EAAE,CAAC;AAC5C,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAAc;IAChD,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC;QAAE,OAAO;IACjC,IAAI,OAAO,CAAC,GAAG,CAAC,eAAe;QAAE,OAAO;IACxC,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;IACnC,IAAI,KAAK,EAAE,KAAK,IAAI,KAAK,EAAE,aAAa;QAAE,OAAO;IACjD,MAAM,IAAI,YAAY,CAAC,mBAAmB,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,iBAAiB,EAAE,sBAAsB,CAAC,CAAC,CAAC;AAC1G,CAAC"}

package/errors/classify.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Structured result of classifying a raw error. `classify` produces these and
+ * `handle` consumes them. `message === ""` signals a clean, silent outcome
+ * (local cancellation) for which nothing should be printed.
+ */
+export interface CliError {
+    readonly exitCode: number;
+    readonly message: string;
+    readonly hints?: readonly string[];
+    readonly cause?: Error;
+    /** Numeric Connect/gRPC code, present when the error originated from an RPC. */
+    readonly code?: number;
+}
+export declare function classify(err: unknown): CliError | null;
+/** Human-readable Connect/gRPC code name, e.g. 12 -> "Unimplemented". */
+export declare function codeName(code: number): string;
+//# sourceMappingURL=classify.d.ts.map

package/errors/classify.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"classify.d.ts","sourceRoot":"","sources":["../../src/errors/classify.ts"],"names":[],"mappings":"AAUA;;;;GAIG;AACH,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC;IACvB,gFAAgF;IAChF,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;CACxB;AAKD,wBAAgB,QAAQ,CAAC,GAAG,EAAE,OAAO,GAAG,QAAQ,GAAG,IAAI,CAyBtD;AA+ID,yEAAyE;AACzE,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAE7C"}

package/errors/classify.js

@@ -0,0 +1,158 @@
+// Classifies any thrown value into a CliError: an exit code, a user-facing
+// message, and optional remediation hints. Mirrors the Go CLI's
+// clierr.Classify, including walking the error chain so wrapped RPC errors
+// still map to the right exit code.
+import { Code, ConnectError } from "@connectrpc/connect";
+import { StigmerError } from "@stigmer/sdk";
+import { CliExitError } from "./cli-exit-error.js";
+import { ExitCode } from "./exit-codes.js";
+// Guards against pathological/circular `cause` chains.
+const MAX_CHAIN_DEPTH = 20;
+export function classify(err) {
+    if (err === null || err === undefined) {
+        return null;
+    }
+    // Local cancellation (Ctrl-C / AbortController) is a clean outcome, not a
+    // failure — exit 0 silently. A *remote* Canceled status is a genuine failure
+    // and falls through to classifyConnectCode (exit 1). This is the one place
+    // the TS CLI deliberately improves on the Go CLI, which exits 1 for both.
+    if (isLocalAbort(err)) {
+        return { exitCode: ExitCode.Success, message: "", cause: toError(err) };
+    }
+    // Local errors that carry their own exit code (UsageError, auth-required,
+    // etc.) are passed through verbatim, including any remediation hints.
+    if (err instanceof CliExitError) {
+        return { exitCode: err.exitCode, message: err.message, hints: err.hints, cause: err };
+    }
+    const coded = extractCoded(err);
+    if (coded !== undefined) {
+        return classifyConnectCode(coded.code, coded.message, toError(err));
+    }
+    return { exitCode: ExitCode.General, message: messageOf(err), cause: toError(err) };
+}
+// Walks the cause chain for the first SDK StigmerError or raw ConnectError.
+// status.FromError in Go only checks the outermost error; this mirrors the Go
+// CLI's extractGRPCStatus which walks Unwrap to handle wrapped RPC errors.
+function extractCoded(err) {
+    let depth = 0;
+    for (let current = err; current != null && depth < MAX_CHAIN_DEPTH; current = causeOf(current), depth++) {
+        if (current instanceof StigmerError) {
+            return { code: current.connectCode, message: current.message };
+        }
+        if (current instanceof ConnectError) {
+            return { code: current.code, message: current.rawMessage };
+        }
+    }
+    return undefined;
+}
+function isLocalAbort(err) {
+    let depth = 0;
+    for (let current = err; current != null && depth < MAX_CHAIN_DEPTH; current = causeOf(current), depth++) {
+        if (current instanceof Error && current.name === "AbortError") {
+            return true;
+        }
+    }
+    return false;
+}
+function classifyConnectCode(code, message, cause) {
+    switch (code) {
+        case Code.Unavailable:
+            return {
+                exitCode: ExitCode.Connection,
+                code,
+                cause,
+                message: "Cannot connect to the Stigmer server",
+                hints: ["Make sure the Stigmer server is running and reachable."],
+            };
+        case Code.DeadlineExceeded:
+            return {
+                exitCode: ExitCode.Connection,
+                code,
+                cause,
+                message: "Operation timed out",
+                hints: ["The server took too long to respond. Try again in a moment."],
+            };
+        case Code.ResourceExhausted:
+            return {
+                exitCode: ExitCode.Connection,
+                code,
+                cause,
+                message: "Rate limit exceeded",
+                hints: ["Too many requests. Wait a moment and try again."],
+            };
+        case Code.NotFound:
+            return { exitCode: ExitCode.NotFound, code, cause, message };
+        case Code.InvalidArgument:
+            return { exitCode: ExitCode.Usage, code, cause, message };
+        case Code.FailedPrecondition:
+            return { exitCode: ExitCode.Usage, code, cause, message: `Precondition failed: ${message}` };
+        case Code.AlreadyExists:
+            return { exitCode: ExitCode.Usage, code, cause, message: `Already exists: ${message}` };
+        case Code.Unauthenticated:
+            return {
+                exitCode: ExitCode.Auth,
+                code,
+                cause,
+                message: "Not authenticated",
+                hints: ["Please sign in:", "  stigmer auth login"],
+            };
+        case Code.PermissionDenied:
+            return {
+                exitCode: ExitCode.Auth,
+                code,
+                cause,
+                message: `Permission denied: ${message}`,
+                hints: ["Check your permissions, or re-authenticate:", "  stigmer auth login"],
+            };
+        case Code.Internal:
+            return {
+                exitCode: ExitCode.General,
+                code,
+                cause,
+                message: "Internal server error",
+                hints: [
+                    "This is unexpected. If the problem persists, check the server logs.",
+                    "Run with --debug for more details.",
+                ],
+            };
+        case Code.Aborted:
+            return {
+                exitCode: ExitCode.General,
+                code,
+                cause,
+                message: `Operation aborted: ${message}`,
+                hints: ["The operation was interrupted. You can safely retry."],
+            };
+        case Code.Canceled:
+            return { exitCode: ExitCode.General, code, cause, message: "Operation cancelled" };
+        default:
+            return {
+                exitCode: ExitCode.General,
+                code,
+                cause,
+                message: `${codeName(code)}: ${message}`,
+            };
+    }
+}
+function causeOf(value) {
+    return value !== null && typeof value === "object"
+        ? value.cause
+        : undefined;
+}
+function toError(value) {
+    if (value instanceof Error)
+        return value;
+    return new Error(messageOf(value));
+}
+function messageOf(value) {
+    if (value instanceof Error)
+        return value.message;
+    if (typeof value === "string")
+        return value;
+    return String(value);
+}
+/** Human-readable Connect/gRPC code name, e.g. 12 -> "Unimplemented". */
+export function codeName(code) {
+    return Code[code] ?? "Unknown";
+}
+//# sourceMappingURL=classify.js.map

package/errors/classify.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"classify.js","sourceRoot":"","sources":["../../src/errors/classify.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAC3E,gEAAgE;AAChE,2EAA2E;AAC3E,oCAAoC;AAEpC,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAgB3C,uDAAuD;AACvD,MAAM,eAAe,GAAG,EAAE,CAAC;AAE3B,MAAM,UAAU,QAAQ,CAAC,GAAY;IACnC,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACtC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,0EAA0E;IAC1E,6EAA6E;IAC7E,2EAA2E;IAC3E,0EAA0E;IAC1E,IAAI,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC;QACtB,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;IAC1E,CAAC;IAED,0EAA0E;IAC1E,sEAAsE;IACtE,IAAI,GAAG,YAAY,YAAY,EAAE,CAAC;QAChC,OAAO,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;IACxF,CAAC;IAED,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IAChC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,mBAAmB,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;IACtE,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;AACtF,CAAC;AAOD,4EAA4E;AAC5E,8EAA8E;AAC9E,2EAA2E;AAC3E,SAAS,YAAY,CAAC,GAAY;IAChC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,IAAI,OAAO,GAAY,GAAG,EAAE,OAAO,IAAI,IAAI,IAAI,KAAK,GAAG,eAAe,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC;QACjH,IAAI,OAAO,YAAY,YAAY,EAAE,CAAC;YACpC,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,WAAW,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC;QACjE,CAAC;QACD,IAAI,OAAO,YAAY,YAAY,EAAE,CAAC;YACpC,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC;QAC7D,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,YAAY,CAAC,GAAY;IAChC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,IAAI,OAAO,GAAY,GAAG,EAAE,OAAO,IAAI,IAAI,IAAI,KAAK,GAAG,eAAe,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC;QACjH,IAAI,OAAO,YAAY,KAAK,IAAI,OAAO,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;YAC9D,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,mBAAmB,CAAC,IAAY,EAAE,OAAe,EAAE,KAAY;IACtE,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,IAAI,CAAC,WAAW;YACnB,OAAO;gBACL,QAAQ,EAAE,QAAQ,CAAC,UAAU;gBAC7B,IAAI;gBACJ,KAAK;gBACL,OAAO,EAAE,sCAAsC;gBAC/C,KAAK,EAAE,CAAC,wDAAwD,CAAC;aAClE,CAAC;QAEJ,KAAK,IAAI,CAAC,gBAAgB;YACxB,OAAO;gBACL,QAAQ,EAAE,QAAQ,CAAC,UAAU;gBAC7B,IAAI;gBACJ,KAAK;gBACL,OAAO,EAAE,qBAAqB;gBAC9B,KAAK,EAAE,CAAC,6DAA6D,CAAC;aACvE,CAAC;QAEJ,KAAK,IAAI,CAAC,iBAAiB;YACzB,OAAO;gBACL,QAAQ,EAAE,QAAQ,CAAC,UAAU;gBAC7B,IAAI;gBACJ,KAAK;gBACL,OAAO,EAAE,qBAAqB;gBAC9B,KAAK,EAAE,CAAC,iDAAiD,CAAC;aAC3D,CAAC;QAEJ,KAAK,IAAI,CAAC,QAAQ;YAChB,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;QAE/D,KAAK,IAAI,CAAC,eAAe;YACvB,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;QAE5D,KAAK,IAAI,CAAC,kBAAkB;YAC1B,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,wBAAwB,OAAO,EAAE,EAAE,CAAC;QAE/F,KAAK,IAAI,CAAC,aAAa;YACrB,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,mBAAmB,OAAO,EAAE,EAAE,CAAC;QAE1F,KAAK,IAAI,CAAC,eAAe;YACvB,OAAO;gBACL,QAAQ,EAAE,QAAQ,CAAC,IAAI;gBACvB,IAAI;gBACJ,KAAK;gBACL,OAAO,EAAE,mBAAmB;gBAC5B,KAAK,EAAE,CAAC,iBAAiB,EAAE,sBAAsB,CAAC;aACnD,CAAC;QAEJ,KAAK,IAAI,CAAC,gBAAgB;YACxB,OAAO;gBACL,QAAQ,EAAE,QAAQ,CAAC,IAAI;gBACvB,IAAI;gBACJ,KAAK;gBACL,OAAO,EAAE,sBAAsB,OAAO,EAAE;gBACxC,KAAK,EAAE,CAAC,6CAA6C,EAAE,sBAAsB,CAAC;aAC/E,CAAC;QAEJ,KAAK,IAAI,CAAC,QAAQ;YAChB,OAAO;gBACL,QAAQ,EAAE,QAAQ,CAAC,OAAO;gBAC1B,IAAI;gBACJ,KAAK;gBACL,OAAO,EAAE,uBAAuB;gBAChC,KAAK,EAAE;oBACL,qEAAqE;oBACrE,oCAAoC;iBACrC;aACF,CAAC;QAEJ,KAAK,IAAI,CAAC,OAAO;YACf,OAAO;gBACL,QAAQ,EAAE,QAAQ,CAAC,OAAO;gBAC1B,IAAI;gBACJ,KAAK;gBACL,OAAO,EAAE,sBAAsB,OAAO,EAAE;gBACxC,KAAK,EAAE,CAAC,sDAAsD,CAAC;aAChE,CAAC;QAEJ,KAAK,IAAI,CAAC,QAAQ;YAChB,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,qBAAqB,EAAE,CAAC;QAErF;YACE,OAAO;gBACL,QAAQ,EAAE,QAAQ,CAAC,OAAO;gBAC1B,IAAI;gBACJ,KAAK;gBACL,OAAO,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,KAAK,OAAO,EAAE;aACzC,CAAC;IACN,CAAC;AACH,CAAC;AAED,SAAS,OAAO,CAAC,KAAc;IAC7B,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAChD,CAAC,CAAE,KAA6B,CAAC,KAAK;QACtC,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED,SAAS,OAAO,CAAC,KAAc;IAC7B,IAAI,KAAK,YAAY,KAAK;QAAE,OAAO,KAAK,CAAC;IACzC,OAAO,IAAI,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,SAAS,CAAC,KAAc;IAC/B,IAAI,KAAK,YAAY,KAAK;QAAE,OAAO,KAAK,CAAC,OAAO,CAAC;IACjD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5C,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;AACvB,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,QAAQ,CAAC,IAAY;IACnC,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,SAAS,CAAC;AACjC,CAAC"}

package/errors/cli-exit-error.d.ts

@@ -0,0 +1,6 @@
+export declare class CliExitError extends Error {
+    readonly exitCode: number;
+    readonly hints?: readonly string[];
+    constructor(message: string, exitCode: number, hints?: readonly string[]);
+}
+//# sourceMappingURL=cli-exit-error.d.ts.map

package/errors/cli-exit-error.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli-exit-error.d.ts","sourceRoot":"","sources":["../../src/errors/cli-exit-error.ts"],"names":[],"mappings":"AAKA,qBAAa,YAAa,SAAQ,KAAK;IACrC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;gBAEvB,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,SAAS,MAAM,EAAE;CAMzE"}

package/errors/cli-exit-error.js

@@ -0,0 +1,15 @@
+// A local error that carries its own exit code and optional remediation hints.
+// classify() passes these through verbatim, so command code can fail fast with
+// a precise exit code (e.g. "auth required" -> 4) without round-tripping to the
+// server. UsageError is the common specialization (exit 2).
+export class CliExitError extends Error {
+    exitCode;
+    hints;
+    constructor(message, exitCode, hints) {
+        super(message);
+        this.name = "CliExitError";
+        this.exitCode = exitCode;
+        this.hints = hints;
+    }
+}
+//# sourceMappingURL=cli-exit-error.js.map

package/errors/cli-exit-error.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli-exit-error.js","sourceRoot":"","sources":["../../src/errors/cli-exit-error.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,+EAA+E;AAC/E,gFAAgF;AAChF,4DAA4D;AAE5D,MAAM,OAAO,YAAa,SAAQ,KAAK;IAC5B,QAAQ,CAAS;IACjB,KAAK,CAAqB;IAEnC,YAAY,OAAe,EAAE,QAAgB,EAAE,KAAyB;QACtE,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC;QAC3B,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACrB,CAAC;CACF"}

package/errors/exit-codes.d.ts

@@ -0,0 +1,10 @@
+export declare const ExitCode: {
+    readonly Success: 0;
+    readonly General: 1;
+    readonly Usage: 2;
+    readonly Connection: 3;
+    readonly Auth: 4;
+    readonly NotFound: 5;
+};
+export type ExitCode = (typeof ExitCode)[keyof typeof ExitCode];
+//# sourceMappingURL=exit-codes.d.ts.map

package/errors/exit-codes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"exit-codes.d.ts","sourceRoot":"","sources":["../../src/errors/exit-codes.ts"],"names":[],"mappings":"AAIA,eAAO,MAAM,QAAQ;;;;;;;CAOX,CAAC;AAEX,MAAM,MAAM,QAAQ,GAAG,CAAC,OAAO,QAAQ,CAAC,CAAC,MAAM,OAAO,QAAQ,CAAC,CAAC"}

package/errors/exit-codes.js

@@ -0,0 +1,12 @@
+// Exit codes returned by the CLI. The convention mirrors the Go CLI
+// (internal/cli/clierr/exit_codes.go) so scripts and CI can branch on `$?`
+// without parsing stderr. classify() maps gRPC/Connect status codes onto these.
+export const ExitCode = {
+    Success: 0,
+    General: 1, // Internal, Aborted, remote Canceled, Unknown, non-gRPC errors
+    Usage: 2, // InvalidArgument, FailedPrecondition, AlreadyExists
+    Connection: 3, // Unavailable, DeadlineExceeded, ResourceExhausted
+    Auth: 4, // Unauthenticated, PermissionDenied
+    NotFound: 5, // NotFound
+};
+//# sourceMappingURL=exit-codes.js.map

package/errors/exit-codes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"exit-codes.js","sourceRoot":"","sources":["../../src/errors/exit-codes.ts"],"names":[],"mappings":"AAAA,oEAAoE;AACpE,2EAA2E;AAC3E,gFAAgF;AAEhF,MAAM,CAAC,MAAM,QAAQ,GAAG;IACtB,OAAO,EAAE,CAAC;IACV,OAAO,EAAE,CAAC,EAAE,+DAA+D;IAC3E,KAAK,EAAE,CAAC,EAAE,qDAAqD;IAC/D,UAAU,EAAE,CAAC,EAAE,mDAAmD;IAClE,IAAI,EAAE,CAAC,EAAE,oCAAoC;IAC7C,QAAQ,EAAE,CAAC,EAAE,WAAW;CAChB,CAAC"}

package/errors/handle.d.ts

@@ -0,0 +1,14 @@
+import { type CliError } from "./classify.js";
+/**
+ * Render a CliError for stderr. In debug mode it appends the raw error chain
+ * and numeric gRPC code. Returns "" when there is nothing to print (a clean
+ * local cancellation), so the caller writes nothing.
+ */
+export declare function formatError(error: CliError, debugMode: boolean): string;
+/**
+ * Classify the error, print a user-facing message to stderr, and exit with the
+ * appropriate code. The debug flag is read from process-global runtime state
+ * (set from `--debug`), so callers never thread it through.
+ */
+export declare function handle(error: unknown): never;
+//# sourceMappingURL=handle.d.ts.map

package/errors/handle.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"handle.d.ts","sourceRoot":"","sources":["../../src/errors/handle.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,KAAK,QAAQ,EAAsB,MAAM,eAAe,CAAC;AAGlE;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,GAAG,MAAM,CAsBvE;AAED;;;;GAIG;AACH,wBAAgB,MAAM,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,CAW5C"}