@typeship-ax/cli 0.22.0 → 0.24.0

package/dist/core/pagination.d.ts

@@ -1,13 +1,14 @@
 /**
- * Auto-pagination. Generated by typeship — https://typeship.dev
+ * Auto-pagination. Generated by Typeship — https://typeship.dev
  *
  * List operations return a PagePromise: `await` it for one page, or
  * `for await` it to stream every item across every page.
  */
-import { HttpCore, type CoreRequest, type ResponseMeta } from "./http.js";
+import { HttpCore, SdkError, type CoreRequest, type ResponseMeta } from "./http.js";
 export interface PageConfig {
-    style: "cursor" | "cursorFromLastId" | "page" | "offset";
-    /** Response field holding the item array ("data", "items", …). */
+    style: "cursor" | "cursorFromLastId" | "page" | "offset" | "nextUrl" | "link";
+    /** Response field holding the item array ("data", "items", …); "" when
+     * the body is the array itself. */
     itemsField: string;
     cursorParam?: string;
     /** Dot-path into the response body ("next_cursor", "meta.next_cursor"). */
@@ -18,22 +19,57 @@ export interface PageConfig {
     pageParam?: string;
     offsetParam?: string;
     limitParam?: string;
+    /** nextUrl: dot-path of the next page's URL ("next_page_uri", "next"). */
+    nextUrlField?: string;
+    /** page: the first page number when it is not 1. */
+    firstPage?: number;
+    /** Dot-path of the total item count: iteration stops once it is reached. */
+    totalField?: string;
+    /** Dot-path of the total page count: page iteration stops at the last page. */
+    totalPagesField?: string;
+    /** Each item is this field of the listed element (a Relay edge's `node`). */
+    itemPath?: string;
+    /** Page size sent when the caller gives none (GraphQL `first`). */
+    defaultLimit?: number;
+    /** Relay backward paging, used when the caller passes `backward.limitParam` (`last`). */
+    backward?: {
+        limitParam: string;
+        cursorParam: string;
+        cursorField: string;
+        hasMoreField: string;
+    };
 }
-type FetchPage<Item, E> = (query: Record<string, unknown>) => Promise<Page<Item, E>>;
+/** A list response the pagination rules cannot read. */
+export declare class PaginationError extends SdkError {
+    constructor(message: string, response?: ResponseMeta);
+}
+type FetchPage<Item, E> = (query: Record<string, unknown>, url?: string, before?: number) => Promise<Page<Item, E>>;
 export declare class Page<Item, E = unknown> {
     private readonly fetchPage;
     private readonly config;
     private readonly params;
+    /** Items on the pages before this one, for the total-count stop. */
+    private readonly before;
     readonly body: unknown;
     readonly response: ResponseMeta;
-    constructor(fetchPage: FetchPage<Item, E>, config: PageConfig, params: Record<string, unknown>, body: unknown, response: ResponseMeta);
+    constructor(fetchPage: FetchPage<Item, E>, config: PageConfig, params: Record<string, unknown>, body: unknown, response: ResponseMeta, before?: number);
     get items(): Item[];
+    /** True when the caller asked for backward Relay pages (`last`). */
+    private get backward();
     hasNextPage(): boolean;
+    /** The next page's URL, for styles that follow one (a response field or
+     * the Link header); null on the last page and for the other styles. */
+    nextPageUrl(): string | null;
     nextPageParams(): Record<string, unknown> | null;
     /** Fetch the next page, or null when this is the last one. Throws the typed error on failure. */
     getNextPage(): Promise<Page<Item, E> | null>;
     /** Iterate every item on this page and all following pages. */
     [Symbol.asyncIterator](): AsyncIterator<Item, void, undefined>;
+    /** Signals every style shares: has_more false, or the total reached. */
+    private finished;
+    /** Items up to the end of this page: counted along a walk, or implied by
+     * the page's position when it was fetched on its own (an MCP nextPage). */
+    private itemsThrough;
     private looksLikeMore;
 }
 /**

package/dist/core/pagination.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"pagination.d.ts","sourceRoot":"","sources":["../../src/core/pagination.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EACL,QAAQ,EACR,KAAK,WAAW,EAChB,KAAK,YAAY,EAClB,MAAM,WAAW,CAAC;AAEnB,MAAM,WAAW,UAAU;IACzB,KAAK,EAAE,QAAQ,GAAG,kBAAkB,GAAG,MAAM,GAAG,QAAQ,CAAC;IACzD,kEAAkE;IAClE,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,2EAA2E;IAC3E,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,uEAAuE;IACvE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,KAAK,SAAS,CAAC,IAAI,EAAE,CAAC,IAAI,CACxB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAC3B,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AAE5B,qBAAa,IAAI,CAAC,IAAI,EAAE,CAAC,GAAG,OAAO;IACjC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAqB;IAC/C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAa;IACpC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA0B;IACjD,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAC;gBAG9B,SAAS,EAAE,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,EAC7B,MAAM,EAAE,UAAU,EAClB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,IAAI,EAAE,OAAO,EACb,QAAQ,EAAE,YAAY;IASxB,IAAI,KAAK,IAAI,IAAI,EAAE,CAGlB;IAED,WAAW,IAAI,OAAO;IAItB,cAAc,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI;IAoBhD,iGAAiG;IAC3F,WAAW,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC;IAMlD,+DAA+D;IACxD,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,aAAa,CAAC,IAAI,EAAE,IAAI,EAAE,SAAS,CAAC;IAQrE,OAAO,CAAC,aAAa;CAUtB;AAED;;;GAGG;AACH,qBAAa,WAAW,CAAC,IAAI,EAAE,CAAC,CAAE,YAAW,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,CAAC,IAAI,CAAC;IAC1F,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAyB;gBACnC,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAIzC,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,GAAG,KAAK,EACjC,WAAW,CAAC,EAAE,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,EAAE,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,GAAG,IAAI,EACrE,UAAU,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,OAAO,KAAK,EAAE,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,GAAG,IAAI,GAC9D,OAAO,CAAC,EAAE,GAAG,EAAE,CAAC;IAIZ,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,aAAa,CAAC,IAAI,EAAE,IAAI,EAAE,SAAS,CAAC;CAGtE;AAED,wBAAgB,QAAQ,CAAC,IAAI,EAAE,CAAC,EAC9B,IAAI,EAAE,QAAQ,EACd,GAAG,EAAE,WAAW,EAChB,MAAM,EAAE,UAAU,GACjB,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC,CAetB"}
+{"version":3,"file":"pagination.d.ts","sourceRoot":"","sources":["../../src/core/pagination.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EACL,QAAQ,EACR,QAAQ,EACR,KAAK,WAAW,EAChB,KAAK,YAAY,EAClB,MAAM,WAAW,CAAC;AAEnB,MAAM,WAAW,UAAU;IACzB,KAAK,EAAE,QAAQ,GAAG,kBAAkB,GAAG,MAAM,GAAG,QAAQ,GAAG,SAAS,GAAG,MAAM,CAAC;IAC9E;uCACmC;IACnC,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,2EAA2E;IAC3E,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,uEAAuE;IACvE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,0EAA0E;IAC1E,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,oDAAoD;IACpD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,4EAA4E;IAC5E,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,+EAA+E;IAC/E,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,6EAA6E;IAC7E,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,mEAAmE;IACnE,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,yFAAyF;IACzF,QAAQ,CAAC,EAAE;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAE,CAAC;CACnG;AAED,wDAAwD;AACxD,qBAAa,eAAgB,SAAQ,QAAQ;gBAC/B,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,YAAY;CAGrD;AAED,KAAK,SAAS,CAAC,IAAI,EAAE,CAAC,IAAI,CACxB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,GAAG,CAAC,EAAE,MAAM,EACZ,MAAM,CAAC,EAAE,MAAM,KACZ,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AAE5B,qBAAa,IAAI,CAAC,IAAI,EAAE,CAAC,GAAG,OAAO;IACjC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAqB;IAC/C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAa;IACpC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA0B;IACjD,oEAAoE;IACpE,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAC;gBAG9B,SAAS,EAAE,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,EAC7B,MAAM,EAAE,UAAU,EAClB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,IAAI,EAAE,OAAO,EACb,QAAQ,EAAE,YAAY,EACtB,MAAM,SAAI;IAUZ,IAAI,KAAK,IAAI,IAAI,EAAE,CAKlB;IAED,oEAAoE;IACpE,OAAO,KAAK,QAAQ,GAGnB;IAED,WAAW,IAAI,OAAO;IAItB;2EACuE;IACvE,WAAW,IAAI,MAAM,GAAG,IAAI;IAO5B,cAAc,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI;IAwBhD,iGAAiG;IAC3F,WAAW,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC;IASlD,+DAA+D;IACxD,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,aAAa,CAAC,IAAI,EAAE,IAAI,EAAE,SAAS,CAAC;IAQrE,wEAAwE;IACxE,OAAO,CAAC,QAAQ;IAWhB;+EAC2E;IAC3E,OAAO,CAAC,YAAY;IAgBpB,OAAO,CAAC,aAAa;CAUtB;AAED;;;GAGG;AACH,qBAAa,WAAW,CAAC,IAAI,EAAE,CAAC,CAAE,YAAW,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,CAAC,IAAI,CAAC;IAC1F,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAyB;gBACnC,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAIzC,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,GAAG,KAAK,EACjC,WAAW,CAAC,EAAE,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,EAAE,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,GAAG,IAAI,EACrE,UAAU,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,OAAO,KAAK,EAAE,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,GAAG,IAAI,GAC9D,OAAO,CAAC,EAAE,GAAG,EAAE,CAAC;IAIZ,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,aAAa,CAAC,IAAI,EAAE,IAAI,EAAE,SAAS,CAAC;CAGtE;AAED,wBAAgB,QAAQ,CAAC,IAAI,EAAE,CAAC,EAC9B,IAAI,EAAE,QAAQ,EACd,GAAG,EAAE,WAAW,EAChB,MAAM,EAAE,UAAU,GACjB,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC,CA0CtB"}

package/dist/core/pagination.js

@@ -1,55 +1,93 @@
 /**
- * Auto-pagination. Generated by typeship — https://typeship.dev
+ * Auto-pagination. Generated by Typeship — https://typeship.dev
  *
  * List operations return a PagePromise: `await` it for one page, or
  * `for await` it to stream every item across every page.
  */
+import { SdkError, } from "./http.js";
+/** A list response the pagination rules cannot read. */
+export class PaginationError extends SdkError {
+    constructor(message, response) {
+        super(message, "pagination_error", response?.status ?? null, response?.rawBody, response?.requestId);
+    }
+}
 export class Page {
     fetchPage;
     config;
     params;
+    /** Items on the pages before this one, for the total-count stop. */
+    before;
     body;
     response;
-    constructor(fetchPage, config, params, body, response) {
+    constructor(fetchPage, config, params, body, response, before = 0) {
         this.fetchPage = fetchPage;
         this.config = config;
         this.params = params;
         this.body = body;
         this.response = response;
+        this.before = before;
     }
     get items() {
-        const value = getPath(this.body, this.config.itemsField);
-        return Array.isArray(value) ? value : [];
+        const value = this.config.itemsField === "" ? this.body : getPath(this.body, this.config.itemsField);
+        if (!Array.isArray(value))
+            return [];
+        const path = this.config.itemPath;
+        return path === undefined ? value : value.map((entry) => entry?.[path]);
+    }
+    /** True when the caller asked for backward Relay pages (`last`). */
+    get backward() {
+        const backward = this.config.backward;
+        return backward && this.params[backward.limitParam] !== undefined ? backward : undefined;
     }
     hasNextPage() {
         return this.nextPageParams() !== null;
     }
+    /** The next page's URL, for styles that follow one (a response field or
+     * the Link header); null on the last page and for the other styles. */
+    nextPageUrl() {
+        if (this.finished())
+            return null;
+        switch (this.config.style) {
+        }
+        return null;
+    }
     nextPageParams() {
         const { config, params } = this;
         const items = this.items;
-        if (config.hasMoreField !== undefined) {
-            const hasMore = getPath(this.body, config.hasMoreField);
-            if (hasMore === false)
-                return null;
-        }
+        if (this.finished())
+            return null;
+        const backward = this.backward;
         switch (config.style) {
             case "cursor": {
-                const next = getPath(this.body, config.nextCursorField);
+                const cursorParam = backward ? backward.cursorParam : config.cursorParam;
+                const next = getPath(this.body, backward ? backward.cursorField : config.nextCursorField);
                 if (next === undefined || next === null || next === "")
                     return null;
-                if (next === params[config.cursorParam])
+                if (next === params[cursorParam])
                     return null;
-                return { ...params, [config.cursorParam]: next };
+                return { ...params, [cursorParam]: next };
             }
         }
-        return null;
+        // URL styles: the next request is the URL itself. Pass page_url as the
+        // pageUrl request option to fetch that page.
+        const url = this.nextPageUrl();
+        if (url === null)
+            return null;
+        // The URL is the whole request: its query can hold parameters the
+        // operation does not declare (GitHub's after), so it is passed as is.
+        return { page_url: url };
     }
     /** Fetch the next page, or null when this is the last one. Throws the typed error on failure. */
     async getNextPage() {
+        const url = this.nextPageUrl();
+        if (url !== null)
+            return this.fetchPage({}, url, this.before + this.items.length);
+        if (this.config.style === "nextUrl" || this.config.style === "link")
+            return null;
         const next = this.nextPageParams();
         if (next === null)
             return null;
-        return this.fetchPage(next);
+        return this.fetchPage(next, undefined, this.before + this.items.length);
     }
     /** Iterate every item on this page and all following pages. */
     async *[Symbol.asyncIterator]() {
@@ -60,6 +98,38 @@ export class Page {
             page = await page.getNextPage();
         }
     }
+    /** Signals every style shares: has_more false, or the total reached. */
+    finished() {
+        // Backward Relay pages end on hasPreviousPage, forward ones on hasNextPage.
+        const hasMoreField = this.backward?.hasMoreField ?? this.config.hasMoreField;
+        if (hasMoreField !== undefined && getPath(this.body, hasMoreField) === false)
+            return true;
+        if (this.config.totalField !== undefined) {
+            const total = getPath(this.body, this.config.totalField);
+            if (typeof total === "number" && this.itemsThrough() >= total)
+                return true;
+        }
+        return false;
+    }
+    /** Items up to the end of this page: counted along a walk, or implied by
+     * the page's position when it was fetched on its own (an MCP nextPage). */
+    itemsThrough() {
+        let before = this.before;
+        const { config, params } = this;
+        if (before === 0 && config.style === "offset" && config.offsetParam !== undefined) {
+            const offset = Number(params[config.offsetParam]);
+            if (Number.isFinite(offset) && offset > 0)
+                before = offset;
+        }
+        if (before === 0 && config.style === "page" && config.pageParam !== undefined && config.limitParam !== undefined) {
+            const current = Number(params[config.pageParam]);
+            const limit = Number(params[config.limitParam]);
+            const first = config.firstPage ?? 1;
+            if (Number.isFinite(current) && Number.isFinite(limit) && limit > 0 && current > first)
+                before = (current - first) * limit;
+        }
+        return before + this.items.length;
+    }
     looksLikeMore(items) {
         if (items.length === 0)
             return false;
@@ -91,12 +161,29 @@ export class PagePromise {
 }
 export function paginate(core, req, config) {
     const isGraphql = false;
-    const fetchPage = async (params) => {
+    const fetchPage = async (params, url, before = 0) => {
         let nextReq = { ...req, query: params };
+        if (url !== undefined) {
+            // A next-page URL is followed verbatim, but only on the API's own
+            // origin: the request carries the client's credentials.
+            const base = new URL(core.config.baseUrl);
+            const target = new URL(url, base);
+            if (target.origin !== base.origin) {
+                throw new PaginationError("The next page is on another origin (" + target.origin + "); refusing to send credentials there. Fetch it yourself if you trust it.");
+            }
+            nextReq = { ...req, query: undefined, url: target.toString() };
+        }
         const result = await core.request(nextReq);
         if (!result.ok)
             throw result.error instanceof Error ? result.error : new Error(String(result.error));
-        return new Page(fetchPage, config, params, result.data, result.response);
+        // A page without its item array is a contract break, not an empty page:
+        // iterating it would silently end the walk. A null array is empty.
+        const items = config.itemsField === "" ? result.data : getPath(result.data, config.itemsField);
+        if (!Array.isArray(items) && !(items === null && config.itemsField !== "")) {
+            throw new PaginationError((config.itemsField === "" ? "The list response is not an array" : "The list response has no " + JSON.stringify(config.itemsField) + " array")
+                + ". Check the API response against the spec, or configure this operation's pagination.", result.response);
+        }
+        return new Page(fetchPage, config, params, result.data, result.response, before);
     };
     const initial = {};
     let seed = req.query ?? {};
@@ -104,7 +191,14 @@ export function paginate(core, req, config) {
         if (v !== undefined)
             initial[k] = v;
     }
-    return new PagePromise(fetchPage(initial));
+    // Relay servers reject a connection query with neither `first` nor `last`.
+    const backwardLimit = config.backward?.limitParam;
+    if (config.defaultLimit !== undefined && config.limitParam !== undefined && initial[config.limitParam] === undefined
+        && (backwardLimit === undefined || initial[backwardLimit] === undefined)) {
+        initial[config.limitParam] = config.defaultLimit;
+    }
+    const pageUrl = req.options?.pageUrl;
+    return new PagePromise(pageUrl !== undefined ? fetchPage({}, pageUrl) : fetchPage(initial));
 }
 function getPath(body, path) {
     let node = body;

package/dist/credential-storage.d.ts

@@ -13,12 +13,19 @@ export interface CredentialKeyStore {
     /** Used only when explicitly removing this wrapping key, not ordinary logout. */
     remove(): void;
 }
+/** The OS item's service name: the command that owns it, then a digest of
+ * the session file, so each profile has its own key. Limited to a fixed
+ * alphabet because the macOS write passes it through security's command
+ * stream. */
+export declare function credentialKeyService(owner: string, path: string): string;
 /** A small wrapping key avoids OS item-size limits; session files are encrypted
- * separately so refresh rotation can retain the atomic file/lock transaction. */
-export declare function nativeCredentialKeyStore(path: string, platform?: NodeJS.Platform, run?: NativeCommand, environmentName?: string): CredentialKeyStore;
+ * separately so refresh rotation can retain the atomic file/lock transaction.
+ * `owner` is the command name; the CLI and its local MCP server pass the same
+ * one so they share the key. */
+export declare function nativeCredentialKeyStore(path: string, owner: string, platform?: NodeJS.Platform, run?: NativeCommand, environmentName?: string): CredentialKeyStore;
 export declare function encryptedCredentialCodec(path: string, keyStore: CredentialKeyStore): CredentialCodec;
 /** OS protection is the default. Plaintext storage is an explicit, separate
  * store for environments where the owner accepts that tradeoff. Never migrate
  * or fall back silently when an OS service is unavailable. */
-export declare function createCredentialStore(directory: string, mode?: string, environmentName?: string): FileCredentialStore;
+export declare function createCredentialStore(directory: string, owner: string, mode?: string, environmentName?: string): FileCredentialStore;
 //# sourceMappingURL=credential-storage.d.ts.map

package/dist/credential-storage.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"credential-storage.d.ts","sourceRoot":"","sources":["../src/credential-storage.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,mBAAmB,EAA0B,KAAK,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAEvG,MAAM,WAAW,mBAAmB;IAAG,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,OAAO,CAAA;CAAE;AAC/G,MAAM,MAAM,aAAa,GAAG,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,KAAK,CAAC,EAAE,MAAM,KAAK,mBAAmB,CAAC;AACxG,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,IAAI,IAAI,MAAM,GAAG,IAAI,CAAC;IACtB,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,iFAAiF;IACjF,MAAM,IAAI,IAAI,CAAC;CAChB;AAkBD;iFACiF;AACjF,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,GAAE,MAAM,CAAC,QAA2B,EAAE,GAAG,GAAE,aAA6B,EAAE,eAAe,SAAqB,GAAG,kBAAkB,CAsGjM;AAED,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,kBAAkB,GAAG,eAAe,CAkCpG;AAED;;8DAE8D;AAC9D,wBAAgB,qBAAqB,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,GAAE,MAAa,EAAE,eAAe,SAAqB,GAAG,mBAAmB,CAKvI"}
+{"version":3,"file":"credential-storage.d.ts","sourceRoot":"","sources":["../src/credential-storage.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,mBAAmB,EAA0B,KAAK,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAEvG,MAAM,WAAW,mBAAmB;IAAG,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,OAAO,CAAA;CAAE;AAC/G,MAAM,MAAM,aAAa,GAAG,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,KAAK,CAAC,EAAE,MAAM,KAAK,mBAAmB,CAAC;AACxG,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,IAAI,IAAI,MAAM,GAAG,IAAI,CAAC;IACtB,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,iFAAiF;IACjF,MAAM,IAAI,IAAI,CAAC;CAChB;AAkBD;;;aAGa;AACb,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAGxE;AAED;;;gCAGgC;AAChC,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,GAAE,MAAM,CAAC,QAA2B,EAAE,GAAG,GAAE,aAA6B,EAAE,eAAe,SAAqB,GAAG,kBAAkB,CAqGhN;AAED,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,kBAAkB,GAAG,eAAe,CAkCpG;AAED;;8DAE8D;AAC9D,wBAAgB,qBAAqB,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,GAAE,MAAa,EAAE,eAAe,SAAqB,GAAG,mBAAmB,CAKtJ"}

package/dist/credential-storage.js

@@ -19,12 +19,21 @@ function parseKey(value) {
         throw new CredentialStorageError("The OS credential key is invalid.");
     return key;
 }
+/** The OS item's service name: the command that owns it, then a digest of
+ * the session file, so each profile has its own key. Limited to a fixed
+ * alphabet because the macOS write passes it through security's command
+ * stream. */
+export function credentialKeyService(owner, path) {
+    const name = owner.replace(/[^A-Za-z0-9._-]/g, "-") || "cli";
+    return name + ".credentials." + createHash("sha256").update(resolve(path)).digest("hex");
+}
 /** A small wrapping key avoids OS item-size limits; session files are encrypted
- * separately so refresh rotation can retain the atomic file/lock transaction. */
-export function nativeCredentialKeyStore(path, platform = process.platform, run = nativeCommand, environmentName = "CREDENTIAL_STORE") {
+ * separately so refresh rotation can retain the atomic file/lock transaction.
+ * `owner` is the command name; the CLI and its local MCP server pass the same
+ * one so they share the key. */
+export function nativeCredentialKeyStore(path, owner, platform = process.platform, run = nativeCommand, environmentName = "CREDENTIAL_STORE") {
     const failed = (name) => unavailable(name, environmentName);
-    const identity = createHash("sha256").update(resolve(path)).digest("hex");
-    const service = "typeship.credentials." + identity;
+    const service = credentialKeyService(owner, path);
     const account = "session-key";
     if (platform === "darwin") {
         const name = "macOS Keychain";
@@ -197,11 +206,11 @@ export function encryptedCredentialCodec(path, keyStore) {
 /** OS protection is the default. Plaintext storage is an explicit, separate
  * store for environments where the owner accepts that tradeoff. Never migrate
  * or fall back silently when an OS service is unavailable. */
-export function createCredentialStore(directory, mode = "os", environmentName = "CREDENTIAL_STORE") {
+export function createCredentialStore(directory, owner, mode = "os", environmentName = "CREDENTIAL_STORE") {
     if (mode === "file")
         return new FileCredentialStore(join(directory, "credentials.json"));
     if (mode !== "os")
         throw new CredentialStorageError(environmentName + " must be os or file.");
     const path = join(directory, "credentials.enc");
-    return new FileCredentialStore(path, 40_000, encryptedCredentialCodec(path, nativeCredentialKeyStore(path, process.platform, nativeCommand, environmentName)));
+    return new FileCredentialStore(path, 40_000, encryptedCredentialCodec(path, nativeCredentialKeyStore(path, owner, process.platform, nativeCommand, environmentName)));
 }

package/dist/dates.d.ts

@@ -1,5 +1,5 @@
 /**
- * Relative dates for date / date-time arguments. Generated by typeship — https://typeship.dev
+ * Relative dates for date / date-time arguments. Generated by Typeship — https://typeship.dev
  *
  * Agents rarely know "now" and often do know "a week ago", so date-shaped
  * arguments of the CLI and the MCP server accept, besides an absolute

package/dist/dates.js

@@ -1,5 +1,5 @@
 /**
- * Relative dates for date / date-time arguments. Generated by typeship — https://typeship.dev
+ * Relative dates for date / date-time arguments. Generated by Typeship — https://typeship.dev
  *
  * Agents rarely know "now" and often do know "a week ago", so date-shaped
  * arguments of the CLI and the MCP server accept, besides an absolute

package/dist/errors.d.ts

@@ -1,96 +1,32 @@
-import { ApiError, type ResponseMeta } from "./core/http.js";
+import { ApiError, RateLimitError, ServerError, type ResponseMeta } from "./core/http.js";
 import type { ErrorModelRead } from "./types.js";
-export { ApiError, SdkError, ResponseParseError, TransportError, UnexpectedApiError, ValidationError, type Violation } from "./core/http.js";
-/**
- * The request body, Spec source, target selection, or package name is invalid.
- * Raised for HTTP 400 responses.
- */
-export declare class BadRequestError extends ApiError<400, ErrorModelRead> {
-    constructor(body: ErrorModelRead, response: ResponseMeta);
-}
-/**
- * Missing, invalid, expired, or revoked credentials.
- * Raised for HTTP 401 responses.
- */
-export declare class UnauthorizedError extends ApiError<401, ErrorModelRead> {
-    constructor(body: ErrorModelRead, response: ResponseMeta);
-}
-/**
- * The credentials are valid but cannot act on the requested organization.
- * Raised for HTTP 403 responses.
- */
-export declare class ForbiddenError extends ApiError<403, ErrorModelRead> {
+export { ApiError, SdkError, PayloadError, ResponseParseError, TransportError, UnexpectedApiError, ValidationError, BadRequestError, ConflictError, ForbiddenError, NotFoundError, NotModifiedError, RateLimitError, ServerError, UnauthorizedError, UnprocessableEntityError, type RateLimitInfo, type Violation, } from "./core/http.js";
+/** Raised for HTTP 402 responses. */
+export declare class PaymentRequiredError extends ApiError<402, ErrorModelRead> {
     constructor(body: ErrorModelRead, response: ResponseMeta);
 }
-/**
- * The key identifies changed intent.
- * Raised for HTTP 409 responses.
- */
-export declare class ConflictError extends ApiError<409, ErrorModelRead> {
+/** @deprecated Use RateLimitError, raised for every 429 response. */
+export declare const RateLimitedError: typeof RateLimitError;
+/** @deprecated Use RateLimitError, raised for every 429 response. */
+export type RateLimitedError = RateLimitError<ErrorModelRead>;
+/** @deprecated Use ServerError, raised for every 5xx response. */
+export declare const InternalServerError: typeof ServerError;
+/** @deprecated Use ServerError, raised for every 5xx response. */
+export type InternalServerError = ServerError<ErrorModelRead>;
+/** Raised for HTTP 412 responses. */
+export declare class PreconditionFailedError extends ApiError<412, ErrorModelRead> {
     constructor(body: ErrorModelRead, response: ResponseMeta);
 }
-/**
- * Spec exceeds the 10MB limit.
- * Raised for HTTP 413 responses.
- */
+/** @deprecated Use ServerError, raised for every 5xx response. */
+export declare const BadGatewayError: typeof ServerError;
+/** @deprecated Use ServerError, raised for every 5xx response. */
+export type BadGatewayError = ServerError<ErrorModelRead>;
+/** Raised for HTTP 413 responses. */
 export declare class PayloadTooLargeError extends ApiError<413, ErrorModelRead> {
     constructor(body: ErrorModelRead, response: ResponseMeta);
 }
-/**
- * The Spec could not be resolved or understood.
- * Raised for HTTP 422 responses.
- */
-export declare class UnprocessableEntityError extends ApiError<422, ErrorModelRead> {
-    constructor(body: ErrorModelRead, response: ResponseMeta);
-}
-/**
- * Too many requests, or an identical write is still in progress. Wait for Retry-After before
- * retrying.
- * Raised for HTTP 429 responses.
- */
-export declare class RateLimitedError extends ApiError<429, ErrorModelRead> {
-    constructor(body: ErrorModelRead, response: ResponseMeta);
-}
-/**
- * An unexpected error prevented the request from completing.
- * Raised for HTTP 500 responses.
- */
-export declare class InternalServerError extends ApiError<500, ErrorModelRead> {
-    constructor(body: ErrorModelRead, response: ResponseMeta);
-}
-/**
- * Unexpected error.
- * Raised for "default" responses.
- */
+/** Raised for "default" responses. */
 export declare class ApiResponseError extends ApiError<number, ErrorModelRead> {
     constructor(body: ErrorModelRead, response: ResponseMeta);
 }
-/**
- * No such resource in this organization.
- * Raised for HTTP 404 responses.
- */
-export declare class NotFoundError extends ApiError<404, ErrorModelRead> {
-    constructor(body: ErrorModelRead, response: ResponseMeta);
-}
-/**
- * The plan does not include another project or the requested target configuration.
- * Raised for HTTP 402 responses.
- */
-export declare class PaymentRequiredError extends ApiError<402, ErrorModelRead> {
-    constructor(body: ErrorModelRead, response: ResponseMeta);
-}
-/**
- * The resource changed since the ETag supplied in If-Match. No write was applied.
- * Raised for HTTP 412 responses.
- */
-export declare class PreconditionFailedError extends ApiError<412, ErrorModelRead> {
-    constructor(body: ErrorModelRead, response: ResponseMeta);
-}
-/**
- * Dependent work failed while completing the request.
- * Raised for HTTP 502 responses.
- */
-export declare class BadGatewayError extends ApiError<502, ErrorModelRead> {
-    constructor(body: ErrorModelRead, response: ResponseMeta);
-}
 //# sourceMappingURL=errors.d.ts.map

package/dist/errors.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,QAAQ,EAAE,KAAK,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC7D,OAAO,KAAK,EAAc,cAAc,EAAE,MAAM,YAAY,CAAC;AAE7D,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,kBAAkB,EAAE,cAAc,EAAE,kBAAkB,EAAE,eAAe,EAAE,KAAK,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAE7I;;;GAGG;AACH,qBAAa,eAAgB,SAAQ,QAAQ,CAAC,GAAG,EAAE,cAAc,CAAC;gBACpD,IAAI,EAAE,cAAc,EAAE,QAAQ,EAAE,YAAY;CAGzD;AAED;;;GAGG;AACH,qBAAa,iBAAkB,SAAQ,QAAQ,CAAC,GAAG,EAAE,cAAc,CAAC;gBACtD,IAAI,EAAE,cAAc,EAAE,QAAQ,EAAE,YAAY;CAGzD;AAED;;;GAGG;AACH,qBAAa,cAAe,SAAQ,QAAQ,CAAC,GAAG,EAAE,cAAc,CAAC;gBACnD,IAAI,EAAE,cAAc,EAAE,QAAQ,EAAE,YAAY;CAGzD;AAED;;;GAGG;AACH,qBAAa,aAAc,SAAQ,QAAQ,CAAC,GAAG,EAAE,cAAc,CAAC;gBAClD,IAAI,EAAE,cAAc,EAAE,QAAQ,EAAE,YAAY;CAGzD;AAED;;;GAGG;AACH,qBAAa,oBAAqB,SAAQ,QAAQ,CAAC,GAAG,EAAE,cAAc,CAAC;gBACzD,IAAI,EAAE,cAAc,EAAE,QAAQ,EAAE,YAAY;CAGzD;AAED;;;GAGG;AACH,qBAAa,wBAAyB,SAAQ,QAAQ,CAAC,GAAG,EAAE,cAAc,CAAC;gBAC7D,IAAI,EAAE,cAAc,EAAE,QAAQ,EAAE,YAAY;CAGzD;AAED;;;;GAIG;AACH,qBAAa,gBAAiB,SAAQ,QAAQ,CAAC,GAAG,EAAE,cAAc,CAAC;gBACrD,IAAI,EAAE,cAAc,EAAE,QAAQ,EAAE,YAAY;CAGzD;AAED;;;GAGG;AACH,qBAAa,mBAAoB,SAAQ,QAAQ,CAAC,GAAG,EAAE,cAAc,CAAC;gBACxD,IAAI,EAAE,cAAc,EAAE,QAAQ,EAAE,YAAY;CAGzD;AAED;;;GAGG;AACH,qBAAa,gBAAiB,SAAQ,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;gBACxD,IAAI,EAAE,cAAc,EAAE,QAAQ,EAAE,YAAY;CAGzD;AAED;;;GAGG;AACH,qBAAa,aAAc,SAAQ,QAAQ,CAAC,GAAG,EAAE,cAAc,CAAC;gBAClD,IAAI,EAAE,cAAc,EAAE,QAAQ,EAAE,YAAY;CAGzD;AAED;;;GAGG;AACH,qBAAa,oBAAqB,SAAQ,QAAQ,CAAC,GAAG,EAAE,cAAc,CAAC;gBACzD,IAAI,EAAE,cAAc,EAAE,QAAQ,EAAE,YAAY;CAGzD;AAED;;;GAGG;AACH,qBAAa,uBAAwB,SAAQ,QAAQ,CAAC,GAAG,EAAE,cAAc,CAAC;gBAC5D,IAAI,EAAE,cAAc,EAAE,QAAQ,EAAE,YAAY;CAGzD;AAED;;;GAGG;AACH,qBAAa,eAAgB,SAAQ,QAAQ,CAAC,GAAG,EAAE,cAAc,CAAC;gBACpD,IAAI,EAAE,cAAc,EAAE,QAAQ,EAAE,YAAY;CAGzD"}
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,WAAW,EAAE,KAAK,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC1F,OAAO,KAAK,EAAc,cAAc,EAAE,MAAM,YAAY,CAAC;AAE7D,OAAO,EACL,QAAQ,EACR,QAAQ,EACR,YAAY,EACZ,kBAAkB,EAClB,cAAc,EACd,kBAAkB,EAClB,eAAe,EACf,eAAe,EACf,aAAa,EACb,cAAc,EACd,aAAa,EACb,gBAAgB,EAChB,cAAc,EACd,WAAW,EACX,iBAAiB,EACjB,wBAAwB,EACxB,KAAK,aAAa,EAClB,KAAK,SAAS,GACf,MAAM,gBAAgB,CAAC;AAExB,qCAAqC;AACrC,qBAAa,oBAAqB,SAAQ,QAAQ,CAAC,GAAG,EAAE,cAAc,CAAC;gBACzD,IAAI,EAAE,cAAc,EAAE,QAAQ,EAAE,YAAY;CAGzD;AAED,qEAAqE;AACrE,eAAO,MAAM,gBAAgB,uBAAiB,CAAC;AAC/C,qEAAqE;AACrE,MAAM,MAAM,gBAAgB,GAAG,cAAc,CAAC,cAAc,CAAC,CAAC;AAE9D,kEAAkE;AAClE,eAAO,MAAM,mBAAmB,oBAAc,CAAC;AAC/C,kEAAkE;AAClE,MAAM,MAAM,mBAAmB,GAAG,WAAW,CAAC,cAAc,CAAC,CAAC;AAE9D,qCAAqC;AACrC,qBAAa,uBAAwB,SAAQ,QAAQ,CAAC,GAAG,EAAE,cAAc,CAAC;gBAC5D,IAAI,EAAE,cAAc,EAAE,QAAQ,EAAE,YAAY;CAGzD;AAED,kEAAkE;AAClE,eAAO,MAAM,eAAe,oBAAc,CAAC;AAC3C,kEAAkE;AAClE,MAAM,MAAM,eAAe,GAAG,WAAW,CAAC,cAAc,CAAC,CAAC;AAE1D,qCAAqC;AACrC,qBAAa,oBAAqB,SAAQ,QAAQ,CAAC,GAAG,EAAE,cAAc,CAAC;gBACzD,IAAI,EAAE,cAAc,EAAE,QAAQ,EAAE,YAAY;CAGzD;AAED,sCAAsC;AACtC,qBAAa,gBAAiB,SAAQ,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;gBACxD,IAAI,EAAE,cAAc,EAAE,QAAQ,EAAE,YAAY;CAGzD"}