@superzerodev/cli 0.1.0

package/dist/args.d.ts

@@ -0,0 +1,26 @@
+/**
+ * CLI の引数解析（P0設計 §6.1 / AG-05）
+ *
+ * 規律: すべてのコマンドが --json と --yes に対応し、TTY を前提とする処理を持たない。
+ *       対話プロンプトを一切書かない。エージェントが叩けなくなるため。
+ *
+ * 依存を足さない。Node 24 の util.parseArgs で足りる。
+ */
+export declare const COMMANDS: readonly ["projects", "keys", "billing", "usage", "plan", "apply", "verify", "status", "secrets", "logs"];
+export type Command = (typeof COMMANDS)[number];
+export interface ParsedArgs {
+    command: Command;
+    positionals: string[];
+    json: boolean;
+    yes: boolean;
+    allowDestructive: boolean;
+    config: string;
+    env: string | undefined;
+}
+export declare class UsageError extends Error {
+    readonly usage: string;
+    constructor(message: string, usage: string);
+}
+export declare const USAGE = "superzero <command> [options]\n\nCommands:\n  projects create <name>  Create a project and its production environment.\n                          Prints the environment id. Safe to run twice.\n  projects keep <name>... After moving back to Free, choose which projects stay\n                          active. The others are paused, not deleted.\n  keys list|create|revoke Manage this organization's API keys.\n  usage                 Show this month's recorded usage for the organization.\n  billing               Show the plan (Free or Pro) and what it unlocks.\n  billing setup         Print the card-registration URL that upgrades to Pro.\n                          Hand it to a person; card entry is never automated.\n  plan                  Show what would change. Has no side effects.\n  apply                 Provision resources, then run self-verification.\n  verify                Run health checks against the current environment.\n  status                List the resources in the environment.\n  secrets set|list|rm   Manage secrets.\n  logs                  Tail logs.\n\nOptions:\n  --json                Emit machine-readable JSON. Every command supports it.\n  --yes                 Assume yes. Never prompts either way; kept for scripts.\n  --allow-destructive   Permit changes that delete data.\n  --config <path>       Path to the config file (default: superzero.config.ts).\n  --env <id>            Environment id.\n";
+export declare function parseCliArgs(argv: string[]): ParsedArgs;
+//# sourceMappingURL=args.d.ts.map

package/dist/args.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"args.d.ts","sourceRoot":"","sources":["../src/args.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,eAAO,MAAM,QAAQ,2GAWX,CAAA;AAEV,MAAM,MAAM,OAAO,GAAG,CAAC,OAAO,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAA;AAE/C,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,OAAO,CAAA;IAChB,WAAW,EAAE,MAAM,EAAE,CAAA;IACrB,IAAI,EAAE,OAAO,CAAA;IACb,GAAG,EAAE,OAAO,CAAA;IACZ,gBAAgB,EAAE,OAAO,CAAA;IACzB,MAAM,EAAE,MAAM,CAAA;IACd,GAAG,EAAE,MAAM,GAAG,SAAS,CAAA;CACxB;AAED,qBAAa,UAAW,SAAQ,KAAK;IACnC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;gBACV,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM;CAK3C;AAED,eAAO,MAAM,KAAK,g6CAyBjB,CAAA;AAED,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,UAAU,CA+BvD"}

package/dist/args.js

@@ -0,0 +1,86 @@
+/**
+ * CLI の引数解析（P0設計 §6.1 / AG-05）
+ *
+ * 規律: すべてのコマンドが --json と --yes に対応し、TTY を前提とする処理を持たない。
+ *       対話プロンプトを一切書かない。エージェントが叩けなくなるため。
+ *
+ * 依存を足さない。Node 24 の util.parseArgs で足りる。
+ */
+import { parseArgs } from 'node:util';
+export const COMMANDS = [
+    'projects',
+    'keys',
+    'billing',
+    'usage',
+    'plan',
+    'apply',
+    'verify',
+    'status',
+    'secrets',
+    'logs',
+];
+export class UsageError extends Error {
+    usage;
+    constructor(message, usage) {
+        super(message);
+        this.name = 'UsageError';
+        this.usage = usage;
+    }
+}
+export const USAGE = `superzero <command> [options]
+
+Commands:
+  projects create <name>  Create a project and its production environment.
+                          Prints the environment id. Safe to run twice.
+  projects keep <name>... After moving back to Free, choose which projects stay
+                          active. The others are paused, not deleted.
+  keys list|create|revoke Manage this organization's API keys.
+  usage                 Show this month's recorded usage for the organization.
+  billing               Show the plan (Free or Pro) and what it unlocks.
+  billing setup         Print the card-registration URL that upgrades to Pro.
+                          Hand it to a person; card entry is never automated.
+  plan                  Show what would change. Has no side effects.
+  apply                 Provision resources, then run self-verification.
+  verify                Run health checks against the current environment.
+  status                List the resources in the environment.
+  secrets set|list|rm   Manage secrets.
+  logs                  Tail logs.
+
+Options:
+  --json                Emit machine-readable JSON. Every command supports it.
+  --yes                 Assume yes. Never prompts either way; kept for scripts.
+  --allow-destructive   Permit changes that delete data.
+  --config <path>       Path to the config file (default: superzero.config.ts).
+  --env <id>            Environment id.
+`;
+export function parseCliArgs(argv) {
+    const { values, positionals } = parseArgs({
+        args: argv,
+        allowPositionals: true,
+        strict: true,
+        options: {
+            json: { type: 'boolean', default: false },
+            yes: { type: 'boolean', short: 'y', default: false },
+            'allow-destructive': { type: 'boolean', default: false },
+            config: { type: 'string', default: 'superzero.config.ts' },
+            env: { type: 'string' },
+        },
+    });
+    const [command, ...rest] = positionals;
+    if (command === undefined) {
+        throw new UsageError('No command given.', USAGE);
+    }
+    if (!COMMANDS.includes(command)) {
+        throw new UsageError(`Unknown command "${command}".`, USAGE);
+    }
+    return {
+        command: command,
+        positionals: rest,
+        json: values.json === true,
+        yes: values.yes === true,
+        allowDestructive: values['allow-destructive'] === true,
+        config: values.config ?? 'superzero.config.ts',
+        env: values.env,
+    };
+}
+//# sourceMappingURL=args.js.map

package/dist/args.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"args.js","sourceRoot":"","sources":["../src/args.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAA;AAErC,MAAM,CAAC,MAAM,QAAQ,GAAG;IACtB,UAAU;IACV,MAAM;IACN,SAAS;IACT,OAAO;IACP,MAAM;IACN,OAAO;IACP,QAAQ;IACR,QAAQ;IACR,SAAS;IACT,MAAM;CACE,CAAA;AAcV,MAAM,OAAO,UAAW,SAAQ,KAAK;IAC1B,KAAK,CAAQ;IACtB,YAAY,OAAe,EAAE,KAAa;QACxC,KAAK,CAAC,OAAO,CAAC,CAAA;QACd,IAAI,CAAC,IAAI,GAAG,YAAY,CAAA;QACxB,IAAI,CAAC,KAAK,GAAG,KAAK,CAAA;IACpB,CAAC;CACF;AAED,MAAM,CAAC,MAAM,KAAK,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;CAyBpB,CAAA;AAED,MAAM,UAAU,YAAY,CAAC,IAAc;IACzC,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,SAAS,CAAC;QACxC,IAAI,EAAE,IAAI;QACV,gBAAgB,EAAE,IAAI;QACtB,MAAM,EAAE,IAAI;QACZ,OAAO,EAAE;YACP,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE;YACzC,GAAG,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE;YACpD,mBAAmB,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE;YACxD,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,qBAAqB,EAAE;YAC1D,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;SACxB;KACF,CAAC,CAAA;IAEF,MAAM,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,WAAW,CAAA;IACtC,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,MAAM,IAAI,UAAU,CAAC,mBAAmB,EAAE,KAAK,CAAC,CAAA;IAClD,CAAC;IACD,IAAI,CAAE,QAA8B,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QACvD,MAAM,IAAI,UAAU,CAAC,oBAAoB,OAAO,IAAI,EAAE,KAAK,CAAC,CAAA;IAC9D,CAAC;IAED,OAAO;QACL,OAAO,EAAE,OAAkB;QAC3B,WAAW,EAAE,IAAI;QACjB,IAAI,EAAE,MAAM,CAAC,IAAI,KAAK,IAAI;QAC1B,GAAG,EAAE,MAAM,CAAC,GAAG,KAAK,IAAI;QACxB,gBAAgB,EAAE,MAAM,CAAC,mBAAmB,CAAC,KAAK,IAAI;QACtD,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,qBAAqB;QAC9C,GAAG,EAAE,MAAM,CAAC,GAAG;KAChB,CAAA;AACH,CAAC"}

package/dist/bin.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=bin.d.ts.map

package/dist/bin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bin.d.ts","sourceRoot":"","sources":["../src/bin.ts"],"names":[],"mappings":""}

package/dist/bin.js

@@ -0,0 +1,4 @@
+#!/usr/bin/env node
+import { run } from './main.js';
+process.exitCode = await run({ argv: process.argv.slice(2) });
+//# sourceMappingURL=bin.js.map

package/dist/bin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bin.js","sourceRoot":"","sources":["../src/bin.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAA;AAE/B,OAAO,CAAC,QAAQ,GAAG,MAAM,GAAG,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA"}

package/dist/client.d.ts

@@ -0,0 +1,138 @@
+/**
+ * Control Plane の REST クライアント（P0設計 §6.3）
+ *
+ * CLI と MCP はどちらもこの薄いクライアント越しに同じ API を呼ぶ。
+ * 3つの実装を持たない。
+ *
+ * ★ サーバーが返す正規化エラーをそのまま SuperzeroError に戻す。
+ *   ここで握り潰すと suggestedFix が消え、エージェントが自力で直せなくなる。
+ */
+import { type Plan, type VerifyResult } from '@superzerodev/core';
+export interface ControlPlaneClientOptions {
+    baseUrl: string;
+    token?: string | undefined;
+    timeoutMs?: number;
+    /** テスト用の差し替え口 */
+    fetchImpl?: typeof fetch;
+}
+export interface ApplyResponse {
+    deploymentId: string;
+    ok: boolean;
+    applied: string[];
+    skipped: string[];
+    failure?: {
+        key: string;
+        error: unknown;
+    };
+    verify?: VerifyResult;
+}
+export interface StatusResponse {
+    resources: {
+        kind: string;
+        logicalName: string;
+        provider: string;
+        status: string;
+    }[];
+}
+/** アップロードしたソースの控え。sourceId を plan / apply に添える */
+export interface SourceUpload {
+    sourceId: string;
+    fileCount: number;
+    bytes: number;
+}
+export declare class ControlPlaneClient {
+    #private;
+    constructor(options: ControlPlaneClientOptions);
+    /**
+     * デプロイするソースを送る。
+     *
+     * ★ ここが無いと、CLI とサーバーが同じホストに居るときしか動かない。
+     *   以前はローカルの絶対パスを文字列で送っていて、遠隔からの apply は
+     *   サーバー側で ENOENT になっていた。
+     *
+     * ★ 本文は gzip 済みの tar そのもの。JSON に包まない。
+     *   base64 にすると 4/3 に膨らみ、メモリにも二重に載る。
+     */
+    uploadSource(environmentId: string, archive: Uint8Array): Promise<SourceUpload>;
+    plan(environmentId: string, config: unknown, options?: {
+        allowDestructive?: boolean;
+        sourceId?: string;
+    }): Promise<Plan>;
+    apply(environmentId: string, config: unknown, options?: {
+        allowDestructive?: boolean;
+        sourceId?: string;
+    }): Promise<ApplyResponse>;
+    verify(environmentId: string): Promise<VerifyResult>;
+    /**
+     * ★ 人の介在なしにここへ到達できることが検証仮説 H3 の前提。
+     *   以前は運用者がスクリプトを叩く必要があり、顧客を受け入れられなかった。
+     */
+    createProject(name: string, region: string | undefined): Promise<{
+        projectId: string;
+        environmentId: string;
+        created: boolean;
+    }>;
+    listKeys(): Promise<{
+        keys: KeySummary[];
+    }>;
+    /** 今月の使用量。呼び出し元の組織の分だけ返る */
+    usage(): Promise<UsageSummary>;
+    /** プランと上限。Free で閉じているものは locked に入る */
+    billing(): Promise<BillingStatus>;
+    /**
+     * カード登録（Free → Pro）のページを作る。
+     * ★ 返るのは URL だけ。カード入力は人がブラウザでやる。
+     */
+    billingCheckout(): Promise<{
+        checkoutUrl: string;
+    }>;
+    /** Free に戻ったあと、残すプロジェクトを選ぶ。他は休止 */
+    keepProjects(names: string[]): Promise<{
+        kept: string[];
+        paused: string[];
+    }>;
+    createKey(name: string | undefined): Promise<{
+        key: {
+            id: string;
+            token: string;
+        };
+    }>;
+    revokeKey(keyId: string): Promise<{
+        id: string;
+        revoked: boolean;
+    }>;
+    status(environmentId: string): Promise<StatusResponse>;
+}
+export interface UsageSummary {
+    /** 集計の開始時刻（今月の初日）。計測の口が無い環境では null */
+    periodStart: string | null;
+    metrics: {
+        metric: string;
+        quantity: string;
+    }[];
+    /**
+     * まだ記録していないメトリクス。
+     * ★ 「0 だった」と「測っていない」を区別するために要る。区別しないと表示が嘘になる。
+     */
+    notRecorded: string[];
+    available: boolean;
+}
+export interface BillingStatus {
+    plan: 'free' | 'pro';
+    /** 決済事業者が無い Control Plane では false。Free のまま動く */
+    billingAvailable: boolean;
+    projectLimit?: number;
+    projectsUsed?: number;
+    spendLimitUsd?: number;
+    selectionRequired?: boolean;
+    locked?: string[];
+}
+export interface KeySummary {
+    id: string;
+    prefix: string;
+    name: string | null;
+    createdAt: string;
+    lastUsedAt: string | null;
+    revokedAt: string | null;
+}
+//# sourceMappingURL=client.d.ts.map

package/dist/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAkB,KAAK,IAAI,EAAE,KAAK,YAAY,EAAE,MAAM,oBAAoB,CAAA;AAEjF,MAAM,WAAW,yBAAyB;IACxC,OAAO,EAAE,MAAM,CAAA;IACf,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC1B,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,iBAAiB;IACjB,SAAS,CAAC,EAAE,OAAO,KAAK,CAAA;CACzB;AAED,MAAM,WAAW,aAAa;IAC5B,YAAY,EAAE,MAAM,CAAA;IACpB,EAAE,EAAE,OAAO,CAAA;IACX,OAAO,EAAE,MAAM,EAAE,CAAA;IACjB,OAAO,EAAE,MAAM,EAAE,CAAA;IACjB,OAAO,CAAC,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,OAAO,CAAA;KAAE,CAAA;IACzC,MAAM,CAAC,EAAE,YAAY,CAAA;CACtB;AAED,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,EAAE,CAAA;CACrF;AAED,kDAAkD;AAClD,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,MAAM,CAAA;IAChB,SAAS,EAAE,MAAM,CAAA;IACjB,KAAK,EAAE,MAAM,CAAA;CACd;AAED,qBAAa,kBAAkB;;gBAMjB,OAAO,EAAE,yBAAyB;IA4B9C;;;;;;;;;OASG;IACG,YAAY,CAAC,aAAa,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,YAAY,CAAC;IAyB/E,IAAI,CACR,aAAa,EAAE,MAAM,EACrB,MAAM,EAAE,OAAO,EACf,OAAO,GAAE;QAAE,gBAAgB,CAAC,EAAE,OAAO,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAO,GAC9D,OAAO,CAAC,IAAI,CAAC;IAeV,KAAK,CACT,aAAa,EAAE,MAAM,EACrB,MAAM,EAAE,OAAO,EACf,OAAO,GAAE;QAAE,gBAAgB,CAAC,EAAE,OAAO,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAO,GAC9D,OAAO,CAAC,aAAa,CAAC;IAYnB,MAAM,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC;IAO1D;;;OAGG;IACG,aAAa,CACjB,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,GAAG,SAAS,GACzB,OAAO,CAAC;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC;IAOpE,QAAQ,IAAI,OAAO,CAAC;QAAE,IAAI,EAAE,UAAU,EAAE,CAAA;KAAE,CAAC;IAIjD,4BAA4B;IACtB,KAAK,IAAI,OAAO,CAAC,YAAY,CAAC;IAIpC,uCAAuC;IACjC,OAAO,IAAI,OAAO,CAAC,aAAa,CAAC;IAIvC;;;OAGG;IACG,eAAe,IAAI,OAAO,CAAC;QAAE,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC;IAIzD,mCAAmC;IAC7B,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,EAAE,CAAC;QAAC,MAAM,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IAI5E,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC;QAAE,GAAG,EAAE;YAAE,EAAE,EAAE,MAAM,CAAC;YAAC,KAAK,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE,CAAC;IAIpF,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC;IAInE,MAAM,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC;CAM7D;AAED,MAAM,WAAW,YAAY;IAC3B,sCAAsC;IACtC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,OAAO,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,EAAE,CAAA;IAC/C;;;OAGG;IACH,WAAW,EAAE,MAAM,EAAE,CAAA;IACrB,SAAS,EAAE,OAAO,CAAA;CACnB;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,GAAG,KAAK,CAAA;IACpB,iDAAiD;IACjD,gBAAgB,EAAE,OAAO,CAAA;IACzB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,iBAAiB,CAAC,EAAE,OAAO,CAAA;IAC3B,MAAM,CAAC,EAAE,MAAM,EAAE,CAAA;CAClB;AAED,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAA;IACV,MAAM,EAAE,MAAM,CAAA;IACd,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;IACnB,SAAS,EAAE,MAAM,CAAA;IACjB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;CACzB"}

package/dist/client.js

@@ -0,0 +1,166 @@
+/**
+ * Control Plane の REST クライアント（P0設計 §6.3）
+ *
+ * CLI と MCP はどちらもこの薄いクライアント越しに同じ API を呼ぶ。
+ * 3つの実装を持たない。
+ *
+ * ★ サーバーが返す正規化エラーをそのまま SuperzeroError に戻す。
+ *   ここで握り潰すと suggestedFix が消え、エージェントが自力で直せなくなる。
+ */
+import { SuperzeroError } from '@superzerodev/core';
+export class ControlPlaneClient {
+    #baseUrl;
+    #token;
+    #timeoutMs;
+    #fetch;
+    constructor(options) {
+        this.#baseUrl = options.baseUrl.replace(/\/$/, '');
+        this.#token = options.token;
+        this.#timeoutMs = options.timeoutMs ?? 15 * 60 * 1000;
+        this.#fetch = options.fetchImpl ?? fetch;
+    }
+    async #call(method, path, body) {
+        let res;
+        try {
+            res = await this.#fetch(`${this.#baseUrl}${path}`, {
+                method,
+                headers: {
+                    accept: 'application/json',
+                    ...(this.#token ? { authorization: `Bearer ${this.#token}` } : {}),
+                    ...(body === undefined ? {} : { 'content-type': 'application/json' }),
+                },
+                ...(body === undefined ? {} : { body: JSON.stringify(body) }),
+                signal: AbortSignal.timeout(this.#timeoutMs),
+            });
+        }
+        catch (err) {
+            throw unreachable(this.#baseUrl, err);
+        }
+        if (!res.ok)
+            throw await fromResponse(res);
+        return (await res.json());
+    }
+    /**
+     * デプロイするソースを送る。
+     *
+     * ★ ここが無いと、CLI とサーバーが同じホストに居るときしか動かない。
+     *   以前はローカルの絶対パスを文字列で送っていて、遠隔からの apply は
+     *   サーバー側で ENOENT になっていた。
+     *
+     * ★ 本文は gzip 済みの tar そのもの。JSON に包まない。
+     *   base64 にすると 4/3 に膨らみ、メモリにも二重に載る。
+     */
+    async uploadSource(environmentId, archive) {
+        let res;
+        try {
+            res = await this.#fetch(`${this.#baseUrl}/v1/environments/${encodeURIComponent(environmentId)}/sources`, {
+                method: 'POST',
+                headers: {
+                    accept: 'application/json',
+                    ...(this.#token ? { authorization: `Bearer ${this.#token}` } : {}),
+                    'content-type': 'application/gzip',
+                    'content-length': String(archive.byteLength),
+                },
+                body: archive,
+                signal: AbortSignal.timeout(this.#timeoutMs),
+            });
+        }
+        catch (err) {
+            throw unreachable(this.#baseUrl, err);
+        }
+        if (!res.ok)
+            throw await fromResponse(res);
+        return (await res.json());
+    }
+    async plan(environmentId, config, options = {}) {
+        const body = await this.#call('POST', `/v1/environments/${encodeURIComponent(environmentId)}/plan`, {
+            config,
+            allowDestructive: options.allowDestructive === true,
+            // ★ plan にも添える。無いとサーバーがソースを読めず、
+            //   コードだけ変えた場合に「変更なし」と答えてしまう。
+            ...(options.sourceId ? { sourceId: options.sourceId } : {}),
+        });
+        return { changes: body.changes, destructiveKeys: body.destructiveKeys, ordered: true };
+    }
+    async apply(environmentId, config, options = {}) {
+        return this.#call('POST', `/v1/environments/${encodeURIComponent(environmentId)}/apply`, {
+            config,
+            allowDestructive: options.allowDestructive === true,
+            ...(options.sourceId ? { sourceId: options.sourceId } : {}),
+        });
+    }
+    async verify(environmentId) {
+        return this.#call('POST', `/v1/environments/${encodeURIComponent(environmentId)}/verify`);
+    }
+    /**
+     * ★ 人の介在なしにここへ到達できることが検証仮説 H3 の前提。
+     *   以前は運用者がスクリプトを叩く必要があり、顧客を受け入れられなかった。
+     */
+    async createProject(name, region) {
+        return this.#call('POST', '/v1/projects', {
+            name,
+            ...(region ? { region } : {}),
+        });
+    }
+    async listKeys() {
+        return this.#call('GET', '/v1/keys');
+    }
+    /** 今月の使用量。呼び出し元の組織の分だけ返る */
+    async usage() {
+        return this.#call('GET', '/v1/usage');
+    }
+    /** プランと上限。Free で閉じているものは locked に入る */
+    async billing() {
+        return this.#call('GET', '/v1/billing');
+    }
+    /**
+     * カード登録（Free → Pro）のページを作る。
+     * ★ 返るのは URL だけ。カード入力は人がブラウザでやる。
+     */
+    async billingCheckout() {
+        return this.#call('POST', '/v1/billing/checkout', {});
+    }
+    /** Free に戻ったあと、残すプロジェクトを選ぶ。他は休止 */
+    async keepProjects(names) {
+        return this.#call('POST', '/v1/projects/keep', { names });
+    }
+    async createKey(name) {
+        return this.#call('POST', '/v1/keys', name ? { name } : {});
+    }
+    async revokeKey(keyId) {
+        return this.#call('DELETE', `/v1/keys/${encodeURIComponent(keyId)}`);
+    }
+    async status(environmentId) {
+        return this.#call('GET', `/v1/environments/${encodeURIComponent(environmentId)}/status`);
+    }
+}
+/** サーバーの正規化エラーを復元する。suggestedFix を落とさない */
+async function fromResponse(res) {
+    let body = {};
+    try {
+        body = (await res.json());
+    }
+    catch {
+        // JSON でない応答（プロキシのエラーページなど）
+    }
+    return new SuperzeroError({
+        code: body.code ?? 'PROVIDER_UNEXPECTED_ERROR',
+        message: body.message ?? `Control plane returned ${res.status} ${res.statusText}.`,
+        ...(body.cause ? { cause: body.cause } : {}),
+        ...(body.suggestedFix ? { suggestedFix: body.suggestedFix } : {}),
+        ...(body.docsUrl ? { docsUrl: body.docsUrl } : {}),
+    });
+}
+/** 接続できない。設定ミスか、サーバーが起動していないかのどちらか */
+function unreachable(baseUrl, err) {
+    return new SuperzeroError({
+        code: 'CONTROL_PLANE_UNREACHABLE',
+        message: `Could not reach the Superzero API at ${baseUrl}: ${err instanceof Error ? err.message : String(err)}`,
+        suggestedFix: {
+            description: 'Check that SUPERZERO_URL points at a running control plane. ' +
+                'For local development, start it first.',
+            command: 'pnpm --filter @superzerodev/control-plane dev',
+        },
+    });
+}
+//# sourceMappingURL=client.js.map

package/dist/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,cAAc,EAAgC,MAAM,oBAAoB,CAAA;AA8BjF,MAAM,OAAO,kBAAkB;IACpB,QAAQ,CAAQ;IAChB,MAAM,CAAoB;IAC1B,UAAU,CAAQ;IAClB,MAAM,CAAc;IAE7B,YAAY,OAAkC;QAC5C,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;QAClD,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,KAAK,CAAA;QAC3B,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,SAAS,IAAI,EAAE,GAAG,EAAE,GAAG,IAAI,CAAA;QACrD,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,SAAS,IAAI,KAAK,CAAA;IAC1C,CAAC;IAED,KAAK,CAAC,KAAK,CAAI,MAAc,EAAE,IAAY,EAAE,IAAc;QACzD,IAAI,GAAa,CAAA;QACjB,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,QAAQ,GAAG,IAAI,EAAE,EAAE;gBACjD,MAAM;gBACN,OAAO,EAAE;oBACP,MAAM,EAAE,kBAAkB;oBAC1B,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,UAAU,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAClE,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC;iBACtE;gBACD,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC7D,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC;aAC7C,CAAC,CAAA;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,WAAW,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAA;QACvC,CAAC;QAED,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,MAAM,MAAM,YAAY,CAAC,GAAG,CAAC,CAAA;QAC1C,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAM,CAAA;IAChC,CAAC;IAED;;;;;;;;;OASG;IACH,KAAK,CAAC,YAAY,CAAC,aAAqB,EAAE,OAAmB;QAC3D,IAAI,GAAa,CAAA;QACjB,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CACrB,GAAG,IAAI,CAAC,QAAQ,oBAAoB,kBAAkB,CAAC,aAAa,CAAC,UAAU,EAC/E;gBACE,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,MAAM,EAAE,kBAAkB;oBAC1B,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,UAAU,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAClE,cAAc,EAAE,kBAAkB;oBAClC,gBAAgB,EAAE,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC;iBAC7C;gBACD,IAAI,EAAE,OAAO;gBACb,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC;aAC7C,CACF,CAAA;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,WAAW,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAA;QACvC,CAAC;QAED,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,MAAM,MAAM,YAAY,CAAC,GAAG,CAAC,CAAA;QAC1C,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAiB,CAAA;IAC3C,CAAC;IAED,KAAK,CAAC,IAAI,CACR,aAAqB,EACrB,MAAe,EACf,UAA6D,EAAE;QAE/D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAC3B,MAAM,EACN,oBAAoB,kBAAkB,CAAC,aAAa,CAAC,OAAO,EAC5D;YACE,MAAM;YACN,gBAAgB,EAAE,OAAO,CAAC,gBAAgB,KAAK,IAAI;YACnD,gCAAgC;YAChC,8BAA8B;YAC9B,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5D,CACF,CAAA;QACD,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,eAAe,EAAE,IAAI,CAAC,eAAe,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;IACxF,CAAC;IAED,KAAK,CAAC,KAAK,CACT,aAAqB,EACrB,MAAe,EACf,UAA6D,EAAE;QAE/D,OAAO,IAAI,CAAC,KAAK,CACf,MAAM,EACN,oBAAoB,kBAAkB,CAAC,aAAa,CAAC,QAAQ,EAC7D;YACE,MAAM;YACN,gBAAgB,EAAE,OAAO,CAAC,gBAAgB,KAAK,IAAI;YACnD,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5D,CACF,CAAA;IACH,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,aAAqB;QAChC,OAAO,IAAI,CAAC,KAAK,CACf,MAAM,EACN,oBAAoB,kBAAkB,CAAC,aAAa,CAAC,SAAS,CAC/D,CAAA;IACH,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,aAAa,CACjB,IAAY,EACZ,MAA0B;QAE1B,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,cAAc,EAAE;YACxC,IAAI;YACJ,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9B,CAAC,CAAA;IACJ,CAAC;IAED,KAAK,CAAC,QAAQ;QACZ,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,UAAU,CAAC,CAAA;IACtC,CAAC;IAED,4BAA4B;IAC5B,KAAK,CAAC,KAAK;QACT,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,WAAW,CAAC,CAAA;IACvC,CAAC;IAED,uCAAuC;IACvC,KAAK,CAAC,OAAO;QACX,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,aAAa,CAAC,CAAA;IACzC,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,eAAe;QACnB,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,sBAAsB,EAAE,EAAE,CAAC,CAAA;IACvD,CAAC;IAED,mCAAmC;IACnC,KAAK,CAAC,YAAY,CAAC,KAAe;QAChC,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,mBAAmB,EAAE,EAAE,KAAK,EAAE,CAAC,CAAA;IAC3D,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,IAAwB;QACtC,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;IAC7D,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,KAAa;QAC3B,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,YAAY,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;IACtE,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,aAAqB;QAChC,OAAO,IAAI,CAAC,KAAK,CACf,KAAK,EACL,oBAAoB,kBAAkB,CAAC,aAAa,CAAC,SAAS,CAC/D,CAAA;IACH,CAAC;CACF;AAkCD,2CAA2C;AAC3C,KAAK,UAAU,YAAY,CAAC,GAAa;IACvC,IAAI,IAAI,GAMJ,EAAE,CAAA;IACN,IAAI,CAAC;QACH,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAgB,CAAA;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,4BAA4B;IAC9B,CAAC;IAED,OAAO,IAAI,cAAc,CAAC;QACxB,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,2BAA2B;QAC9C,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,0BAA0B,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,UAAU,GAAG;QAClF,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5C,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjE,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACnD,CAAC,CAAA;AACJ,CAAC;AAED,sCAAsC;AACtC,SAAS,WAAW,CAAC,OAAe,EAAE,GAAY;IAChD,OAAO,IAAI,cAAc,CAAC;QACxB,IAAI,EAAE,2BAA2B;QACjC,OAAO,EAAE,wCAAwC,OAAO,KACtD,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CACjD,EAAE;QACF,YAAY,EAAE;YACZ,WAAW,EACT,8DAA8D;gBAC9D,wCAAwC;YAC1C,OAAO,EAAE,+CAA+C;SACzD;KACF,CAAC,CAAA;AACJ,CAAC"}

package/dist/commands.d.ts

@@ -0,0 +1,50 @@
+/**
+ * 各コマンドの実装（P0設計 §6.1）
+ *
+ * 規律:
+ *   - 対話プロンプトを書かない（AG-05）。--yes は互換のために受けるだけ。
+ *   - --json のとき stdout は JSON のみ。人間向けは stderr。
+ *   - 戻り値は終了コード。0 = 成功、1 = 失敗。
+ */
+import type { ParsedArgs } from './args.js';
+import type { ControlPlaneClient } from './client.js';
+import { type Writer } from './output.js';
+export interface CommandDeps {
+    client: ControlPlaneClient;
+    writer: Writer;
+    cwd: string;
+    /** --env 未指定時のフォールバック（SUPERZERO_ENV） */
+    defaultEnvironmentId?: string | undefined;
+}
+/**
+ * projects create <name>
+ *
+ * ★ 環境IDを標準出力へ、それ以外を標準エラーへ出す。
+ *   エージェントが `superzero projects create app` の出力を
+ *   そのまま SUPERZERO_ENV に渡せる形にしておく。
+ */
+export declare function runProjects(args: ParsedArgs, deps: CommandDeps): Promise<number>;
+/** keys list | create [name] | revoke <id> */
+export declare function runKeys(args: ParsedArgs, deps: CommandDeps): Promise<number>;
+/**
+ * usage
+ *
+ * ★ 測っていないものを 0 と書かない。
+ *   「SMS 0 通」と出せば、実際に送っている顧客に嘘をつくことになる。
+ *   記録していないメトリクスは、そう明示する。
+ */
+export declare function runUsage(args: ParsedArgs, deps: CommandDeps): Promise<number>;
+/**
+ * billing / billing setup
+ *
+ * ★ カード入力は人がやる。CLI は URL を出すところまで。
+ *   エージェントはこの URL を人に渡す。それ以上は自動化しない（AG-05 とは別の理由:
+ *   決済は本人の意思表示であり、代理で通してはいけない）。
+ */
+export declare function runBilling(args: ParsedArgs, deps: CommandDeps): Promise<number>;
+export declare function runPlan(args: ParsedArgs, deps: CommandDeps): Promise<number>;
+export declare function runApply(args: ParsedArgs, deps: CommandDeps): Promise<number>;
+export declare function runVerify(args: ParsedArgs, deps: CommandDeps): Promise<number>;
+export declare function runStatus(args: ParsedArgs, deps: CommandDeps): Promise<number>;
+export declare function runNotImplemented(command: string, deps: CommandDeps): number;
+//# sourceMappingURL=commands.d.ts.map

package/dist/commands.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"commands.d.ts","sourceRoot":"","sources":["../src/commands.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,WAAW,CAAA;AAC3C,OAAO,KAAK,EAAE,kBAAkB,EAAkB,MAAM,aAAa,CAAA;AAErE,OAAO,EAAc,KAAK,MAAM,EAAE,MAAM,aAAa,CAAA;AAGrD,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,kBAAkB,CAAA;IAC1B,MAAM,EAAE,MAAM,CAAA;IACd,GAAG,EAAE,MAAM,CAAA;IACX,wCAAwC;IACxC,oBAAoB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CAC1C;AAiBD;;;;;;GAMG;AACH,wBAAsB,WAAW,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,CA6CtF;AAED,8CAA8C;AAC9C,wBAAsB,OAAO,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,CA0ClF;AAED;;;;;;GAMG;AACH,wBAAsB,QAAQ,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,CA2BnF;AAED;;;;;;GAMG;AACH,wBAAsB,UAAU,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,CA2CrF;AAeD,wBAAsB,OAAO,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,CAalF;AAED,wBAAsB,QAAQ,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,CA6BnF;AAED,wBAAsB,SAAS,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,CAUpF;AAED,wBAAsB,SAAS,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,CAUpF;AAED,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,GAAG,MAAM,CAY5E"}