@tenderprompt/accounts 0.8.4 → 0.9.0

package/README.md

@@ -1,357 +1,8 @@
-# `@tenderprompt/accounts`
+# Andeo compatibility CLI
 
-Developer CLI for merchant-owned customer-account applications on Tender.
+Tender Accounts is now Andeo. New installations use `npx @withandeo/cli`
+or the `andeo` executable. This package retains `tender-accounts` and its
+legacy API default while both domains are supported.
 
-The package exposes `tender-accounts`. It runs the validation and packaging commands committed by your repository, verifies the resulting portable artifact, and creates exact previews for review. Your application keeps its own framework, architecture, commerce integrations, and source repository.
-
-## Requirements
-
-- Node.js 22 or newer
-- a Tender Accounts project
-- a Tender identity with developer access to the project you are changing
-
-## Install
-
-Install the public package as a development dependency:
-
-```sh
-npm install --save-dev @tenderprompt/accounts
-```
-
-Verify the installation:
-
-```sh
-npx @tenderprompt/accounts --version
-npx @tenderprompt/accounts --help
-```
-
-## Start from the template
-
-The optional starter creates a merchant-owned two-service repository: a stable Shopify authentication gateway and an independently deployable React portal connected through `PORTAL_UI`.
-
-Inspect the plan first, then create the project in an empty directory:
-
-```sh
-npx @tenderprompt/accounts init --name "Acme customer account" --directory ./acme-account --dry-run --json
-npx @tenderprompt/accounts init --name "Acme customer account" --directory ./acme-account --json
-```
-
-The starter includes:
-
-- Shopify Customer Account authentication with S256 PKCE;
-- secure, exact-host shopper sessions;
-- a React portal that receives shopper data through the gateway without holding confidential credentials;
-- local development configuration and an explicit signed-out development state;
-- independent `tender-accounts.json` contracts for the gateway and portal;
-- immutable artifact packers, checks, `AGENTS.md`, and the bundled Tender Accounts agent skill.
-
-The starter does not install dependencies, initialize Git, link a Tender project, contact Tender, or write credentials. Existing applications do not need to use it.
-
-## Connect an existing application
-
-Commit `tender-accounts.json` at the root of each independently deployable application:
-
-```json
-{
-  "schema": "tender.accounts-cli/v1",
-  "commands": {
-    "dev": "npm run dev",
-    "check": "npm run check",
-    "package": "npm run pack:tender"
-  },
-  "artifactDirectory": ".tender/artifacts/current",
-  "returnPath": "/account"
-}
-```
-
-The commands remain yours:
-
-- `dev` starts the repository's normal local development environment;
-- `check` runs the checks that must pass before delivery;
-- `package` writes the portable Tender artifact to `artifactDirectory`.
-
-Run `npx @tenderprompt/accounts config example --json` to print the current contract.
-
-## Authenticate and link the checkout
-
-For a normal terminal, sign in through Tender. Give each merchant or work context a short profile name. The CLI opens a browser, uses Authorization Code with S256 PKCE, and asks you to select one organization and the exact apps this profile may preview:
-
-```sh
-npx @tenderprompt/accounts auth create acme
-```
-
-For a coding agent or headless terminal, start a device authorization instead:
-
-```sh
-npx @tenderprompt/accounts auth create acme --device --no-open --json
-```
-
-Open the returned URL, approve the organization and apps, then exchange the same pending request:
-
-```sh
-npx @tenderprompt/accounts auth status --profile acme --json
-```
-
-The returned pending result includes the exact profile-aware `auth status` command to run after approval. Refreshable profiles are stored in one private mode-0600 user file outside the repository. Set `TENDER_ACCOUNTS_AUTH_FILE` to choose another private location. Access tokens last 15 minutes and rotate from a 30-day login; changing the human's project access takes effect on the next refresh or request authorization check.
-
-When an agent already knows the exact project, use that project ID as a stable profile name and authorization hint:
-
-```sh
-npx @tenderprompt/accounts auth create prj_... --device --project prj_... --no-open --json
-```
-
-List local profiles without exposing their credentials:
-
-```sh
-npx @tenderprompt/accounts auth list --json
-```
-
-Activate the profile for this directory tree, validate it, then link the checkout:
-
-```sh
-npx @tenderprompt/accounts auth activate acme
-npx @tenderprompt/accounts auth status --profile acme --json
-npx @tenderprompt/accounts link --json
-npx @tenderprompt/accounts doctor --json
-```
-
-The activation applies to this directory and all descendants; a closer child activation wins. It is stored outside the repository, so another terminal can work in a different merchant tree at the same time without changing this one. Set `TENDER_ACCOUNTS_PROFILE_BINDINGS_FILE` only when a controlled environment needs another private machine-local binding file. The link stores only the API origin and exact project ID, which remains a fail-closed target guard; a link containing `authProfile` is rejected because repository content cannot select a local identity. For one command, set `TENDER_ACCOUNTS_PROFILE=acme` or pass `--profile acme`. If named profiles exist but neither a directory activation nor the default profile selects one, the CLI fails closed instead of guessing.
-
-If the credential can access more than one project, select the intended project explicitly:
-
-```sh
-npx @tenderprompt/accounts link --project prj_... --json
-```
-
-CI may still supply an explicitly issued `TENDER_ACCOUNTS_TOKEN` from its protected secret store or over standard input:
-
-```sh
-printf '%s' "$TENDER_ACCOUNTS_TOKEN" | npx @tenderprompt/accounts auth status --token-stdin --json
-```
-
-Revoke the stored login when the machine should no longer have access:
-
-```sh
-npx @tenderprompt/accounts auth delete acme --json
-```
-
-`auth create` replaces only the named profile; `auth login --force` replaces only the default. `auth delete` removes one named profile and its directory activations. Removing every profile requires the explicit `auth logout --all` command. Refresh, replacement, and deletion use a per-profile compare-and-swap so a late refresh cannot recreate a profile after logout. Concurrent commands may reuse a winning refresh rotation only when the stored tenant, user, and exact project grants are unchanged; a real login/logout/profile race still fails closed as `auth_profile_changed` and revokes any losing newly issued session.
-
-## Use Tender-managed Git
-
-Managed Git is available to every linked deployable project, including a
-protected account gateway and an independently editable service. Connect it
-from the app directory after authentication and linking:
-
-```sh
-npx @tenderprompt/accounts source connect --publication preview-only --json
-npx @tenderprompt/accounts source status --json
-```
-
-If the repository is already connected but the developer starts in an empty
-workspace, authenticate to the exact project and let the CLI discover, clone,
-and link it:
-
-```sh
-npx @tenderprompt/accounts source status --project prj_... --json
-npx @tenderprompt/accounts source pull --project prj_... --dry-run --json
-npx @tenderprompt/accounts source pull --project prj_... --json
-```
-
-The same `source pull` command fast-forwards an existing clean checkout when
-one of its remotes exactly matches the connected managed repository. It refuses
-dirty, detached, mismatched, paused, and non-empty non-Git workspaces. The
-repository credential is scoped to that one project, lives for 15 minutes, and
-is passed only to the Git child process; the remote URL and local link contain
-no credential. Merchant-hosted Git repositories remain merchant-owned and must
-be opened through their own Git provider before `tender-accounts link`.
-
-The CLI derives the working directory, validation command, package command,
-and portable artifact path from this checkout and `tender-accounts.json`. It
-adds a token-free `tender` Git remote by default. In a monorepo, run the command
-with the same `--cwd` used for `doctor` and `preview`.
-
-Push the current committed revision without storing a repository credential:
-
-```sh
-npx @tenderprompt/accounts source push --json
-```
-
-For repositories with reviewed changes enabled, `source push` uploads a bounded
-Git bundle through Tender. The trusted runner verifies the exact commit and
-expected feature-branch ref before applying it; the CLI never receives a write
-credential and the default branch is protected. Repositories that have not yet
-enabled reviewed changes retain the legacy short-lived push credential during
-migration. Uncommitted files are never included. `source token` is read-only:
-
-```sh
-npx @tenderprompt/accounts source token --ttl-seconds 3600 --json
-```
-
-Use the review flow once an administrator enables reviewed changes:
-
-```sh
-npx @tenderprompt/accounts source push --branch feature/account-copy --json
-npx @tenderprompt/accounts source change create \
-  --head feature/account-copy \
-  --title "Update account copy" --json
-npx @tenderprompt/accounts source change list --state open --json
-npx @tenderprompt/accounts source change show --change scr_... --json
-```
-
-Tender attaches validation, the immutable release, and exact preview to the
-current feature-branch snapshot. A merchant administrator opens that exact
-preview, approves it, and selects **Land in main** in the admin. Approval is
-invalidated if the base or head moves. Landing uses a compare-and-swap
-fast-forward. Landing never publishes directly; the repository's already
-configured default-branch policy may publish the same exact preview only after
-the resulting `main` validation succeeds. Protected gateways remain
-preview-only.
-
-Inspect the managed repository without cloning it:
-
-```sh
-npx @tenderprompt/accounts source branches --json
-npx @tenderprompt/accounts source log --branch main --limit 20 --json
-npx @tenderprompt/accounts source compare --base main --head feature/account-copy --json
-```
-
-These commands use an ephemeral read-only credential in a temporary Git
-process. They report Tender's authoritative default branch separately from the
-provider's create-time default and never persist or print the credential.
-
-Before reviewed changes are enabled, a merchant source administrator can use
-the lower-level migration command to promote an already-previewed branch into
-the current default with an exact expected-SHA lease:
-
-```sh
-npx @tenderprompt/accounts source promote \
-  --head feature/account-copy \
-  --expected-current <current-main-sha> \
-  --dry-run --json
-npx @tenderprompt/accounts source promote \
-  --head feature/account-copy \
-  --expected-current <current-main-sha> \
-  --idempotency-key account-copy-v1 --json
-```
-
-`source default set` changes only Tender's default-branch metadata. The
-exceptional `source history replace` command is for repository migrations: it
-requires the exact repository ID, a successful preview of the proposed head,
-an expected current SHA, and a dry run. Tender archives the previous target ref
-before an exact compare-and-swap replacement and always suppresses automatic
-production publication for that migration. There is no generic force-push
-command.
-
-```sh
-npx @tenderprompt/accounts source history replace \
-  --head app-only-main \
-  --expected-current <current-main-sha> \
-  --confirm src_... \
-  --dry-run --json
-```
-
-Every source mutation returns a durable `sop_` operation. Inspect it with
-`source operation status`. If a transient provider or runner failure leaves
-that exact operation failed or pending, resume the stored intent by ID; Tender
-does not ask the caller to reconstruct branches, SHAs, or confirmation values:
-
-```sh
-npx @tenderprompt/accounts source operation status --operation sop_... --json
-npx @tenderprompt/accounts source operation retry --operation sop_... --json
-```
-
-Source administration can create validation, builds, releases, and exact
-previews. It does not directly publish a shopper-facing composition. Protected
-gateways remain preview-only, and multi-repository portal/gateway work is
-reviewed as one exact composition after each repository produces its immutable
-release.
-
-Protected gateways are always preview-only and require a merchant
-administrator to publish a reviewed exact composition. A service repository
-may be connected with `--publication default-branch`; that policy promotes the
-same successful default-branch preview without rebuilding it.
-
-## Develop and preview
-
-Use the same loop locally or from a coding agent:
-
-```sh
-npx @tenderprompt/accounts dev
-npx @tenderprompt/accounts check --json
-npx @tenderprompt/accounts preview --dry-run --json
-npx @tenderprompt/accounts preview --json
-```
-
-`preview --dry-run` runs the repository checks, packages the app, and verifies the complete artifact without uploading it. A normal preview creates an immutable release and returns an exact preview URL. It does not change production.
-
-In a monorepo, target one independently deployable application with `--cwd`:
-
-```sh
-npx @tenderprompt/accounts doctor --cwd apps/portal --json
-npx @tenderprompt/accounts preview --cwd apps/portal --json
-```
-
-One activated profile can serve independently linked descendant apps invoked with `--cwd`, and multiple merchant profiles can coexist safely. Each app has its own explicit `.tender/link.json` containing only its project guard; the machine-local directory binding selects the profile. CI may place one fallback `TENDER_ACCOUNTS_TOKEN` in an ignored Git-root `.dev.vars`, and credential discovery never searches beyond that repository boundary.
-
-## Inspect or retry a delivery
-
-When a preview is still running, inspect it by its `dly_` developer-delivery ID:
-
-```sh
-npx @tenderprompt/accounts delivery status --delivery dly_... --json
-```
-
-Retry a requested or failed delivery idempotently:
-
-```sh
-npx @tenderprompt/accounts delivery retry --delivery dly_... --json
-```
-
-Mint a fresh 15-minute preview session for a completed delivery:
-
-```sh
-npx @tenderprompt/accounts delivery preview --delivery dly_... --return-path /account --json
-```
-
-Do not pass a `dwf_` production workflow ID to these commands. Production workflows are shown separately in Tender Activity; a merchant administrator can resume a waiting exact publish there without rebuilding or substituting a release.
-
-## Stream runtime logs
-
-Stream the exact preview produced by one completed developer delivery:
-
-```sh
-npx @tenderprompt/accounts tail --delivery dly_... --json
-```
-
-Merchant administrators can stream the current production runtime for the linked project:
-
-```sh
-npx @tenderprompt/accounts tail --production --status error --json
-```
-
-Optional filters include `--status ok,error,canceled`, `--method GET,POST`, `--search TEXT`, and `--sampling-rate 0.25`. A tail session lasts at most 15 minutes and closes on Ctrl+C. JSON mode writes one sanitized event per stdout line; lifecycle messages go to stderr.
-
-Sanitized fetch events include `correlation.rayId`. When the runtime supplies native trace context, JSON output also includes `correlation.traceId` and `correlation.spanId`; human output renders the available values as `ray=`, `trace=`, and `span=`. The current Tail Worker contract guarantees the request Ray ID but does not guarantee trace/span IDs for every event.
-
-Tender resolves the sealed preview composition or current production composition server-side. The CLI never receives infrastructure account IDs, Worker names, provider credentials, or a provider WebSocket URL. Request headers are omitted, secret-shaped object fields and sensitive query parameters are redacted, events are not persisted by the relay, and session capabilities are stored only as digests. Merchant application logs can still contain sensitive values when application code logs them as unlabelled strings, so do not log credentials or customer data.
-
-## Install the coding-agent skill
-
-The package includes a skill that teaches a fresh Codex or Claude agent how to use the repository contract and preview workflow:
-
-```sh
-npx @tenderprompt/accounts skill install --agent codex --json
-npx @tenderprompt/accounts skill install --agent claude --json
-```
-
-Installation is global for the current user by default: `~/.agents/skills` for Codex and `~/.claude/skills` for Claude. This lets one reviewed skill serve every merchant checkout without committing a machine-specific copy to a repository.
-
-Use `--force` only when you intentionally want to replace an installed copy.
-Use `--directory PATH` only when you explicitly need a custom or repository-local destination.
-
-## Production delivery
-
-The developer CLI intentionally has no production publish command. Developer credentials can prepare and preview changes, while production publication remains controlled by the merchant's connected default-branch workflow or an authorized administrator in Tender Accounts.
-
-Run `npx @tenderprompt/accounts <command> --help` for the layered command reference and `--json` for machine-readable output.
+Existing project links, login profiles, artifact schemas and `.tender` paths
+remain supported. No credentials are moved between API origins automatically.

package/cli.js

@@ -0,0 +1,8 @@
+#!/usr/bin/env node
+import { runCli } from "@withandeo/cli/cli";
+
+// Preserve the old command's default during the parallel-domain rollout.
+// Explicit flags, linked project URLs and stored profiles retain their precedence.
+process.exitCode = await runCli(process.argv.slice(2), {
+  defaultApiUrl: "https://agents.tenderprompt.dev",
+});

package/package.json

@@ -1,34 +1,12 @@
 {
   "name": "@tenderprompt/accounts",
-  "version": "0.8.4",
-  "description": "Project-scoped developer CLI for Tender Accounts applications",
+  "version": "0.9.0",
+  "description": "Compatibility command for the Andeo CLI (formerly Tender Accounts)",
   "type": "module",
   "license": "UNLICENSED",
-  "bin": {
-    "tender-accounts": "dist/cli.js"
-  },
-  "files": [
-    "dist",
-    "skill",
-    "templates",
-    "!templates/**/node_modules/**",
-    "README.md"
-  ],
-  "engines": {
-    "node": ">=22.0.0"
-  },
-  "scripts": {
-    "build": "tsc -p tsconfig.build.json && node ./scripts/ensure-cli-executable.mjs",
-    "check": "npm run typecheck && npm run test && npm run build",
-    "sync:starter": "node ./scripts/sync-starter-template.mjs",
-    "test": "vitest run",
-    "test:coverage": "vitest run --coverage",
-    "typecheck": "tsc --noEmit -p tsconfig.json",
-    "prepack": "npm run sync:starter && npm run check"
-  },
-  "devDependencies": {
-    "@types/node": "^26.2.0",
-    "typescript": "^7.0.2",
-    "vitest": "^4.1.11"
-  }
+  "bin": { "tender-accounts": "cli.js" },
+  "files": ["cli.js", "README.md"],
+  "engines": { "node": ">=22.0.0" },
+  "dependencies": { "@withandeo/cli": "0.9.0" },
+  "publishConfig": { "access": "public" }
 }

package/dist/api.d.ts

@@ -1,109 +0,0 @@
-import type { AgentPrincipal, ArtifactSubmissionResponse, DeveloperDeliveryResponse, ManagedSourceRepositoryResponse, ManagedSourceChangeRequestResponse, ManagedSourceOperationResponse, ManagedSourcePushResponse, ManagedSourceTokenResponse, RuntimeLogSessionResponse } from "./contracts.js";
-export declare class AgentApiClient {
-    private readonly baseUrl;
-    private readonly token;
-    private readonly fetcher;
-    constructor(baseUrl: string, token: string, fetcher?: typeof fetch);
-    whoami(): Promise<AgentPrincipal>;
-    sourceRepository(projectId: string): Promise<{
-        repository: ManagedSourceRepositoryResponse | null;
-    }>;
-    connectSourceRepository(projectId: string, input: {
-        repoName: string;
-        defaultBranch: string;
-        installCommand: string;
-        validateCommand: string;
-        buildCommand: string;
-        workingDirectory: string;
-        artifactLatestPath: string;
-        autoPublishDefaultBranch: boolean;
-    }): Promise<{
-        repository: ManagedSourceRepositoryResponse;
-    }>;
-    sourceToken(repositoryId: string, ttlSeconds: number, scope?: "read" | "write"): Promise<ManagedSourceTokenResponse>;
-    createSourcePush(repositoryId: string, input: {
-        idempotencyKey: string;
-        branch: string;
-        expectedCurrentSha: string | null;
-        sourceRevision: string;
-        bundleSha256: string;
-        bundleBytes: number;
-    }): Promise<{
-        created: boolean;
-        push: ManagedSourcePushResponse;
-    }>;
-    uploadSourceBundle(submissionId: string, bytes: Uint8Array): Promise<{
-        push: ManagedSourcePushResponse;
-    }>;
-    sourcePush(submissionId: string): Promise<{
-        push: ManagedSourcePushResponse;
-    }>;
-    createSourceChangeRequest(repositoryId: string, input: {
-        title: string;
-        description: string;
-        baseBranch: string;
-        headBranch: string;
-        baseSha: string;
-        headSha: string;
-    }): Promise<{
-        created: boolean;
-        changeRequest: ManagedSourceChangeRequestResponse;
-    }>;
-    sourceChangeRequests(repositoryId: string, state?: "open" | "closed" | "all"): Promise<{
-        changeRequests: ManagedSourceChangeRequestResponse[];
-    }>;
-    sourceChangeRequest(changeRequestId: string): Promise<{
-        changeRequest: ManagedSourceChangeRequestResponse;
-    }>;
-    closeSourceChangeRequest(changeRequestId: string): Promise<{
-        changeRequest: ManagedSourceChangeRequestResponse;
-    }>;
-    createSourceOperation(repositoryId: string, input: {
-        kind: "set_default" | "promote" | "history_replace";
-        idempotencyKey: string;
-        targetBranch: string;
-        headBranch?: string;
-        expectedCurrentSha?: string;
-        expectedDefaultBranch?: string;
-        dryRun: boolean;
-    }): Promise<{
-        created: boolean;
-        operation: ManagedSourceOperationResponse;
-    }>;
-    sourceOperation(operationId: string): Promise<{
-        operation: ManagedSourceOperationResponse;
-    }>;
-    retrySourceOperation(operationId: string): Promise<{
-        operation: ManagedSourceOperationResponse;
-    }>;
-    createSubmission(projectId: string, input: {
-        idempotencyKey: string;
-        envelope: unknown;
-    }): Promise<ArtifactSubmissionResponse>;
-    uploadFile(submissionId: string, fileIndex: number, bytes: Uint8Array): Promise<unknown>;
-    finalizeSubmission(submissionId: string): Promise<ArtifactSubmissionResponse>;
-    createDelivery(projectId: string, input: {
-        submissionId: string;
-        idempotencyKey: string;
-    }): Promise<DeveloperDeliveryResponse>;
-    delivery(deliveryId: string): Promise<DeveloperDeliveryResponse>;
-    retryDelivery(deliveryId: string): Promise<unknown>;
-    previewSession(deliveryId: string, returnPath: string): Promise<{
-        url: string;
-        grantId: string;
-        expiresAt: number;
-    }>;
-    createRuntimeLogSession(projectId: string, input: {
-        environment: "preview" | "production";
-        deliveryId?: string;
-        filters: {
-            statuses: string[];
-            methods: string[];
-            search: string | null;
-            samplingRate: number;
-        };
-    }): Promise<RuntimeLogSessionResponse>;
-    closeRuntimeLogSession(sessionId: string): Promise<unknown>;
-    private json;
-}
-//# sourceMappingURL=api.d.ts.map

package/dist/api.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"api.d.ts","sourceRoot":"","sources":["../src/api.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,cAAc,EACd,0BAA0B,EAC1B,yBAAyB,EACzB,+BAA+B,EAC/B,kCAAkC,EAClC,8BAA8B,EAC9B,yBAAyB,EACzB,0BAA0B,EAC1B,yBAAyB,EAC1B,MAAM,gBAAgB,CAAC;AAGxB,qBAAa,cAAc;IAEvB,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,OAAO;IAH1B,YACmB,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,MAAM,EACb,OAAO,GAAE,OAAO,KAAa,EAC5C;IAEJ,MAAM,IAAI,OAAO,CAAC,cAAc,CAAC,CAEhC;IAED,gBAAgB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,UAAU,EAAE,+BAA+B,GAAG,IAAI,CAAA;KAAE,CAAC,CAEnG;IAED,uBAAuB,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE;QAChD,QAAQ,EAAE,MAAM,CAAC;QACjB,aAAa,EAAE,MAAM,CAAC;QACtB,cAAc,EAAE,MAAM,CAAC;QACvB,eAAe,EAAE,MAAM,CAAC;QACxB,YAAY,EAAE,MAAM,CAAC;QACrB,gBAAgB,EAAE,MAAM,CAAC;QACzB,kBAAkB,EAAE,MAAM,CAAC;QAC3B,wBAAwB,EAAE,OAAO,CAAC;KACnC,GAAG,OAAO,CAAC;QAAE,UAAU,EAAE,+BAA+B,CAAA;KAAE,CAAC,CAK3D;IAED,WAAW,CACT,YAAY,EAAE,MAAM,EACpB,UAAU,EAAE,MAAM,EAClB,KAAK,GAAE,MAAM,GAAG,OAAiB,GAChC,OAAO,CAAC,0BAA0B,CAAC,CAKrC;IAED,gBAAgB,CAAC,YAAY,EAAE,MAAM,EAAE,KAAK,EAAE;QAC5C,cAAc,EAAE,MAAM,CAAC;QACvB,MAAM,EAAE,MAAM,CAAC;QACf,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;QAClC,cAAc,EAAE,MAAM,CAAC;QACvB,YAAY,EAAE,MAAM,CAAC;QACrB,WAAW,EAAE,MAAM,CAAC;KACrB,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,IAAI,EAAE,yBAAyB,CAAA;KAAE,CAAC,CAKjE;IAED,kBAAkB,CAAC,YAAY,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC;QAAE,IAAI,EAAE,yBAAyB,CAAA;KAAE,CAAC,CAOxG;IAED,UAAU,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,IAAI,EAAE,yBAAyB,CAAA;KAAE,CAAC,CAE7E;IAED,yBAAyB,CAAC,YAAY,EAAE,MAAM,EAAE,KAAK,EAAE;QACrD,KAAK,EAAE,MAAM,CAAC;QACd,WAAW,EAAE,MAAM,CAAC;QACpB,UAAU,EAAE,MAAM,CAAC;QACnB,UAAU,EAAE,MAAM,CAAC;QACnB,OAAO,EAAE,MAAM,CAAC;QAChB,OAAO,EAAE,MAAM,CAAC;KACjB,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,aAAa,EAAE,kCAAkC,CAAA;KAAE,CAAC,CAKnF;IAED,oBAAoB,CAAC,YAAY,EAAE,MAAM,EAAE,KAAK,GAAE,MAAM,GAAG,QAAQ,GAAG,KAAc,GAAG,OAAO,CAAC;QAAE,cAAc,EAAE,kCAAkC,EAAE,CAAA;KAAE,CAAC,CAEvJ;IAED,mBAAmB,CAAC,eAAe,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,aAAa,EAAE,kCAAkC,CAAA;KAAE,CAAC,CAE3G;IAED,wBAAwB,CAAC,eAAe,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,aAAa,EAAE,kCAAkC,CAAA;KAAE,CAAC,CAEhH;IAED,qBAAqB,CAAC,YAAY,EAAE,MAAM,EAAE,KAAK,EAAE;QACjD,IAAI,EAAE,aAAa,GAAG,SAAS,GAAG,iBAAiB,CAAC;QACpD,cAAc,EAAE,MAAM,CAAC;QACvB,YAAY,EAAE,MAAM,CAAC;QACrB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,kBAAkB,CAAC,EAAE,MAAM,CAAC;QAC5B,qBAAqB,CAAC,EAAE,MAAM,CAAC;QAC/B,MAAM,EAAE,OAAO,CAAC;KACjB,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,SAAS,EAAE,8BAA8B,CAAA;KAAE,CAAC,CAK3E;IAED,eAAe,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,SAAS,EAAE,8BAA8B,CAAA;KAAE,CAAC,CAE3F;IAED,oBAAoB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,SAAS,EAAE,8BAA8B,CAAA;KAAE,CAAC,CAEhG;IAED,gBAAgB,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE;QAAE,cAAc,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,0BAA0B,CAAC,CAK7H;IAED,UAAU,CAAC,YAAY,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,CAOvF;IAED,kBAAkB,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,0BAA0B,CAAC,CAE5E;IAED,cAAc,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE;QAAE,YAAY,EAAE,MAAM,CAAC;QAAC,cAAc,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,yBAAyB,CAAC,CAK7H;IAED,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,yBAAyB,CAAC,CAE/D;IAED,aAAa,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAElD;IAED,cAAc,CAAC,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC,CAKnH;IAED,uBAAuB,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE;QAChD,WAAW,EAAE,SAAS,GAAG,YAAY,CAAC;QACtC,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,OAAO,EAAE;YAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;YAAC,OAAO,EAAE,MAAM,EAAE,CAAC;YAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;YAAC,YAAY,EAAE,MAAM,CAAA;SAAE,CAAC;KACjG,GAAG,OAAO,CAAC,yBAAyB,CAAC,CAKrC;IAED,sBAAsB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAE1D;YAEa,IAAI;CAsBnB"}

package/dist/api.js

@@ -1,141 +0,0 @@
-import { CliApiError } from "./errors.js";
-export class AgentApiClient {
-    baseUrl;
-    token;
-    fetcher;
-    constructor(baseUrl, token, fetcher = fetch) {
-        this.baseUrl = baseUrl;
-        this.token = token;
-        this.fetcher = fetcher;
-    }
-    whoami() {
-        return this.json("/v1/whoami");
-    }
-    sourceRepository(projectId) {
-        return this.json(`/v1/projects/${encodeURIComponent(projectId)}/source-repository`);
-    }
-    connectSourceRepository(projectId, input) {
-        return this.json(`/v1/projects/${encodeURIComponent(projectId)}/source-repository`, {
-            method: "POST",
-            body: JSON.stringify(input),
-        });
-    }
-    sourceToken(repositoryId, ttlSeconds, scope = "write") {
-        return this.json(`/v1/source-repositories/${encodeURIComponent(repositoryId)}/tokens`, {
-            method: "POST",
-            body: JSON.stringify({ ttlSeconds, scope }),
-        });
-    }
-    createSourcePush(repositoryId, input) {
-        return this.json(`/v1/source-repositories/${encodeURIComponent(repositoryId)}/pushes`, {
-            method: "POST",
-            body: JSON.stringify(input),
-        });
-    }
-    uploadSourceBundle(submissionId, bytes) {
-        const body = bytes.buffer.slice(bytes.byteOffset, bytes.byteOffset + bytes.byteLength);
-        return this.json(`/v1/source-pushes/${encodeURIComponent(submissionId)}/bundle`, {
-            method: "PUT",
-            headers: { "content-type": "application/x-git-bundle" },
-            body,
-        });
-    }
-    sourcePush(submissionId) {
-        return this.json(`/v1/source-pushes/${encodeURIComponent(submissionId)}`);
-    }
-    createSourceChangeRequest(repositoryId, input) {
-        return this.json(`/v1/source-repositories/${encodeURIComponent(repositoryId)}/change-requests`, {
-            method: "POST",
-            body: JSON.stringify(input),
-        });
-    }
-    sourceChangeRequests(repositoryId, state = "open") {
-        return this.json(`/v1/source-repositories/${encodeURIComponent(repositoryId)}/change-requests?state=${state}`);
-    }
-    sourceChangeRequest(changeRequestId) {
-        return this.json(`/v1/source-change-requests/${encodeURIComponent(changeRequestId)}`);
-    }
-    closeSourceChangeRequest(changeRequestId) {
-        return this.json(`/v1/source-change-requests/${encodeURIComponent(changeRequestId)}/close`, { method: "POST" });
-    }
-    createSourceOperation(repositoryId, input) {
-        return this.json(`/v1/source-repositories/${encodeURIComponent(repositoryId)}/operations`, {
-            method: "POST",
-            body: JSON.stringify(input),
-        });
-    }
-    sourceOperation(operationId) {
-        return this.json(`/v1/source-operations/${encodeURIComponent(operationId)}`);
-    }
-    retrySourceOperation(operationId) {
-        return this.json(`/v1/source-operations/${encodeURIComponent(operationId)}/retry`, { method: "POST" });
-    }
-    createSubmission(projectId, input) {
-        return this.json(`/v1/projects/${encodeURIComponent(projectId)}/artifact-submissions`, {
-            method: "POST",
-            body: JSON.stringify(input),
-        });
-    }
-    uploadFile(submissionId, fileIndex, bytes) {
-        const body = bytes.buffer.slice(bytes.byteOffset, bytes.byteOffset + bytes.byteLength);
-        return this.json(`/v1/artifact-submissions/${encodeURIComponent(submissionId)}/files/${fileIndex}`, {
-            method: "PUT",
-            headers: { "content-type": "application/octet-stream" },
-            body,
-        });
-    }
-    finalizeSubmission(submissionId) {
-        return this.json(`/v1/artifact-submissions/${encodeURIComponent(submissionId)}/finalize`, { method: "POST" });
-    }
-    createDelivery(projectId, input) {
-        return this.json(`/v1/projects/${encodeURIComponent(projectId)}/deliveries`, {
-            method: "POST",
-            body: JSON.stringify(input),
-        });
-    }
-    delivery(deliveryId) {
-        return this.json(`/v1/deliveries/${encodeURIComponent(deliveryId)}`);
-    }
-    retryDelivery(deliveryId) {
-        return this.json(`/v1/deliveries/${encodeURIComponent(deliveryId)}/retry`, { method: "POST" });
-    }
-    previewSession(deliveryId, returnPath) {
-        return this.json(`/v1/deliveries/${encodeURIComponent(deliveryId)}/preview-session`, {
-            method: "POST",
-            body: JSON.stringify({ returnPath }),
-        });
-    }
-    createRuntimeLogSession(projectId, input) {
-        return this.json(`/v1/projects/${encodeURIComponent(projectId)}/runtime-log-sessions`, {
-            method: "POST",
-            body: JSON.stringify(input),
-        });
-    }
-    closeRuntimeLogSession(sessionId) {
-        return this.json(`/v1/runtime-log-sessions/${encodeURIComponent(sessionId)}`, { method: "DELETE" });
-    }
-    async json(path, init = {}) {
-        const headers = new Headers(init.headers);
-        headers.set("accept", "application/json");
-        headers.set("authorization", `Bearer ${this.token}`);
-        if (typeof init.body === "string")
-            headers.set("content-type", "application/json");
-        const response = await this.fetcher(new URL(path, this.baseUrl), { ...init, headers, redirect: "error" });
-        let value;
-        try {
-            value = await response.json();
-        }
-        catch {
-            throw new CliApiError("invalid_api_response", `Tender Accounts returned HTTP ${response.status} without JSON.`);
-        }
-        if (!response.ok) {
-            const error = isRecord(value) && isRecord(value.error) ? value.error : null;
-            throw new CliApiError(typeof error?.code === "string" ? error.code : "api_request_failed", typeof error?.message === "string" ? error.message : `Tender Accounts returned HTTP ${response.status}.`, typeof error?.requestId === "string" ? error.requestId : response.headers.get("x-request-id") ?? undefined);
-        }
-        return value;
-    }
-}
-function isRecord(value) {
-    return typeof value === "object" && value !== null && !Array.isArray(value);
-}
-//# sourceMappingURL=api.js.map