@wayai/cli 0.3.40 → 0.3.42

package/dist/lib/auth.js

@@ -1,230 +0,0 @@
-/**
- * Authentication — OAuth 2.1 + PKCE browser login + way_ token fallback
- *
- * Two login paths:
- * 1. Browser login (default): OAuth 2.1 with PKCE → JWT + refresh token
- * 2. Token login (--token): User pastes a way_ scoped token directly
- *
- * The CLI exchanges codes directly with AuthKit's token endpoint.
- */
-import * as crypto from 'node:crypto';
-import * as http from 'node:http';
-import { readConfig, writeConfig } from './config.js';
-import { getToken, setOAuthTokens, clearTokens, migrateLegacyTokens } from './token-store.js';
-import { setSentryUser } from './sentry.js';
-// =============================================================================
-// PKCE Utilities
-// =============================================================================
-export function generateCodeVerifier() {
-    return crypto.randomBytes(32).toString('base64url');
-}
-export async function generateCodeChallenge(verifier) {
-    const hash = crypto.createHash('sha256').update(verifier).digest();
-    return hash.toString('base64url');
-}
-export function generateState() {
-    return crypto.randomBytes(16).toString('base64url');
-}
-// =============================================================================
-// AuthKit Token Exchange
-// =============================================================================
-/**
- * Convert a token lifetime in seconds (as returned by AuthKit) into an absolute
- * ISO 8601 timestamp suitable for `token_expires_at` in the CLI config.
- */
-export function expiresInToIso(expiresInSeconds) {
-    return new Date(Date.now() + expiresInSeconds * 1000).toISOString();
-}
-export async function exchangeCodeForTokens(authkitDomain, clientId, code, codeVerifier, redirectUri) {
-    const response = await fetch(`${authkitDomain}/oauth2/token`, {
-        method: 'POST',
-        headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
-        body: new URLSearchParams({
-            grant_type: 'authorization_code',
-            code,
-            code_verifier: codeVerifier,
-            redirect_uri: redirectUri,
-            client_id: clientId,
-        }).toString(),
-    });
-    if (!response.ok) {
-        const body = await response.text();
-        throw new Error(`Token exchange failed (${response.status}): ${body}`);
-    }
-    return response.json();
-}
-export async function refreshAccessToken(authkitDomain, clientId, refreshToken) {
-    const response = await fetch(`${authkitDomain}/oauth2/token`, {
-        method: 'POST',
-        headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
-        body: new URLSearchParams({
-            grant_type: 'refresh_token',
-            refresh_token: refreshToken,
-            client_id: clientId,
-        }).toString(),
-    });
-    if (!response.ok) {
-        const status = response.status;
-        const body = await response.text();
-        if (status === 400 || status === 401) {
-            let isInvalidGrant = false;
-            try {
-                const parsed = JSON.parse(body);
-                if (parsed.error === 'invalid_grant')
-                    isInvalidGrant = true;
-            }
-            catch { /* non-JSON body */ }
-            if (isInvalidGrant)
-                throw new Error('SESSION_EXPIRED');
-        }
-        throw new Error(`Token refresh failed (${status}): ${body}`);
-    }
-    return response.json();
-}
-export async function validateToken(apiUrl, token) {
-    const response = await fetch(`${apiUrl}/api/auth/me`, {
-        headers: { Authorization: `Bearer ${token}` },
-    });
-    if (!response.ok) {
-        throw new Error(`Token validation failed (${response.status})`);
-    }
-}
-// =============================================================================
-// Callback Server
-// =============================================================================
-/** Fixed port for OAuth callback — must match the redirect URI registered in WorkOS */
-export const OAUTH_CALLBACK_PORT = 3829;
-export function startCallbackServer(port, expectedState, timeoutMs = 120_000) {
-    return new Promise((resolve, reject) => {
-        const server = http.createServer((req, res) => {
-            const url = new URL(req.url || '/', `http://127.0.0.1:${port}`);
-            if (url.pathname === '/callback') {
-                const code = url.searchParams.get('code');
-                const state = url.searchParams.get('state');
-                const error = url.searchParams.get('error');
-                const errorDescription = url.searchParams.get('error_description');
-                if (error) {
-                    res.writeHead(400, { 'Content-Type': 'text/html' });
-                    res.end(`<html><body><h2>Login failed</h2><p>${errorDescription || error}</p></body></html>`);
-                    server.close();
-                    reject(new Error(`OAuth callback error: ${errorDescription || error}`));
-                    return;
-                }
-                if (state !== expectedState) {
-                    res.writeHead(400, { 'Content-Type': 'text/html' });
-                    res.end('<html><body><h2>Login failed</h2><p>Invalid state parameter</p></body></html>');
-                    server.close();
-                    reject(new Error('OAuth state mismatch — possible CSRF attack'));
-                    return;
-                }
-                if (code) {
-                    res.writeHead(200, { 'Content-Type': 'text/html' });
-                    res.end('<html><body><h2>Login successful!</h2><p>You can close this tab and return to your terminal.</p></body></html>');
-                    server.close();
-                    resolve({ code, port });
-                }
-                else {
-                    res.writeHead(400, { 'Content-Type': 'text/html' });
-                    res.end('<html><body><h2>Login failed</h2><p>No authorization code received</p></body></html>');
-                    server.close();
-                    reject(new Error('No authorization code received'));
-                }
-            }
-            else {
-                res.writeHead(404);
-                res.end();
-            }
-        });
-        const timeout = setTimeout(() => {
-            server.close();
-            reject(new Error('Timed out waiting for login. Run `wayai login` again.'));
-        }, timeoutMs);
-        server.on('close', () => clearTimeout(timeout));
-        server.listen(port, '127.0.0.1');
-        server.on('error', (err) => {
-            if (err.code === 'EADDRINUSE') {
-                reject(new Error(`Port ${port} is in use. Try again.`));
-            }
-            else {
-                reject(err);
-            }
-        });
-    });
-}
-// =============================================================================
-// Token Resolution (for API calls)
-// =============================================================================
-const AUTHKIT_DOMAIN = 'https://sprightly-comic-51.authkit.app';
-const AUTHKIT_CLIENT_ID = 'client_01KMZHB50KENM5SV90ZA80VXK4'; // WayAI CLI Connect app (public, PKCE)
-export function getAuthKitDomain() {
-    return process.env.WAYAI_AUTHKIT_DOMAIN || AUTHKIT_DOMAIN;
-}
-export function getAuthKitClientId() {
-    return process.env.WAYAI_AUTHKIT_CLIENT_ID || AUTHKIT_CLIENT_ID;
-}
-/**
- * Get a valid access token. Reads from the keyring (or env/file fallback) and
- * handles OAuth refresh transparently when nearing expiry.
- *
- * `config` is passed in for `api_url` access and to support the SESSION_EXPIRED
- * recovery path. Token data does NOT live in config anymore — it's resolved
- * from token-store.
- */
-export async function getAccessToken(config) {
-    // One-time migration from legacy plaintext config (versions < 0.4.0). Idempotent.
-    await migrateLegacyTokens();
-    const resolved = await getToken();
-    if (!resolved) {
-        throw new Error('No token found. Run `wayai login` to authenticate.');
-    }
-    // way_ token path — no refresh needed
-    if (resolved.kind === 'way') {
-        return resolved.token;
-    }
-    // OAuth JWT path — check expiry and refresh if needed
-    const expiresAt = resolved.expires_at;
-    if (!expiresAt) {
-        return resolved.access_token;
-    }
-    if (new Date(expiresAt).getTime() > Date.now() + 60_000) {
-        return resolved.access_token;
-    }
-    if (!resolved.refresh_token) {
-        throw new Error('Access token expired and no refresh token available. Run `wayai login` again.');
-    }
-    // Token expired — refresh
-    try {
-        const result = await refreshAccessToken(getAuthKitDomain(), getAuthKitClientId(), resolved.refresh_token);
-        const newExpiresAt = expiresInToIso(result.expires_in);
-        // setOAuthTokens persists token_expires_at to the metadata file — no need to
-        // writeConfig again here (would double-write the same file).
-        await setOAuthTokens(result.access_token, result.refresh_token ?? resolved.refresh_token, newExpiresAt);
-        return result.access_token;
-    }
-    catch (err) {
-        if (err instanceof Error && err.message === 'SESSION_EXPIRED') {
-            await clearTokens();
-            writeConfig({ api_url: config.api_url });
-            throw new Error('Session expired. Please run `wayai login` again.');
-        }
-        throw err;
-    }
-}
-export async function requireAuth() {
-    const config = readConfig();
-    if (!config) {
-        console.error('Not logged in. Run `wayai login` first.');
-        process.exit(1);
-    }
-    try {
-        const accessToken = await getAccessToken(config);
-        setSentryUser(accessToken);
-        return { config, accessToken };
-    }
-    catch (err) {
-        console.error(`Authentication failed: ${err instanceof Error ? err.message : String(err)}`);
-        console.error('Run `wayai login` to re-authenticate.');
-        process.exit(1);
-    }
-}
-//# sourceMappingURL=auth.js.map

package/dist/lib/auth.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../src/lib/auth.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AACtC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAEtD,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,WAAW,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAC9F,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAE5C,gFAAgF;AAChF,iBAAiB;AACjB,gFAAgF;AAEhF,MAAM,UAAU,oBAAoB;IAClC,OAAO,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AACtD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,QAAgB;IAC1D,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,EAAE,CAAC;IACnE,OAAO,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AACpC,CAAC;AAED,MAAM,UAAU,aAAa;IAC3B,OAAO,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AACtD,CAAC;AAED,gFAAgF;AAChF,yBAAyB;AACzB,gFAAgF;AAEhF;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,gBAAwB;IACrD,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,gBAAgB,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;AACtE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,aAAqB,EACrB,QAAgB,EAChB,IAAY,EACZ,YAAoB,EACpB,WAAmB;IAEnB,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,aAAa,eAAe,EAAE;QAC5D,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;QAChE,IAAI,EAAE,IAAI,eAAe,CAAC;YACxB,UAAU,EAAE,oBAAoB;YAChC,IAAI;YACJ,aAAa,EAAE,YAAY;YAC3B,YAAY,EAAE,WAAW;YACzB,SAAS,EAAE,QAAQ;SACpB,CAAC,CAAC,QAAQ,EAAE;KACd,CAAC,CAAC;IAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CAAC,0BAA0B,QAAQ,CAAC,MAAM,MAAM,IAAI,EAAE,CAAC,CAAC;IACzE,CAAC;IAED,OAAO,QAAQ,CAAC,IAAI,EAIlB,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,aAAqB,EACrB,QAAgB,EAChB,YAAoB;IAEpB,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,aAAa,eAAe,EAAE;QAC5D,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;QAChE,IAAI,EAAE,IAAI,eAAe,CAAC;YACxB,UAAU,EAAE,eAAe;YAC3B,aAAa,EAAE,YAAY;YAC3B,SAAS,EAAE,QAAQ;SACpB,CAAC,CAAC,QAAQ,EAAE;KACd,CAAC,CAAC;IAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;QAC/B,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QAEnC,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;YACrC,IAAI,cAAc,GAAG,KAAK,CAAC;YAC3B,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAChC,IAAI,MAAM,CAAC,KAAK,KAAK,eAAe;oBAAE,cAAc,GAAG,IAAI,CAAC;YAC9D,CAAC;YAAC,MAAM,CAAC,CAAC,mBAAmB,CAAC,CAAC;YAC/B,IAAI,cAAc;gBAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC;QACzD,CAAC;QAED,MAAM,IAAI,KAAK,CAAC,yBAAyB,MAAM,MAAM,IAAI,EAAE,CAAC,CAAC;IAC/D,CAAC;IAED,OAAO,QAAQ,CAAC,IAAI,EAIlB,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,MAAc,EAAE,KAAa;IAC/D,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,MAAM,cAAc,EAAE;QACpD,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE;KAC9C,CAAC,CAAC;IAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,4BAA4B,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;IAClE,CAAC;AACH,CAAC;AAED,gFAAgF;AAChF,kBAAkB;AAClB,gFAAgF;AAEhF,uFAAuF;AACvF,MAAM,CAAC,MAAM,mBAAmB,GAAG,IAAI,CAAC;AAExC,MAAM,UAAU,mBAAmB,CACjC,IAAY,EACZ,aAAqB,EACrB,YAAoB,OAAO;IAE3B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;YAC5C,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,oBAAoB,IAAI,EAAE,CAAC,CAAC;YAEhE,IAAI,GAAG,CAAC,QAAQ,KAAK,WAAW,EAAE,CAAC;gBACjC,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;gBAC1C,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;gBAC5C,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;gBAC5C,MAAM,gBAAgB,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;gBAEnE,IAAI,KAAK,EAAE,CAAC;oBACV,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC,CAAC;oBACpD,GAAG,CAAC,GAAG,CAAC,uCAAuC,gBAAgB,IAAI,KAAK,oBAAoB,CAAC,CAAC;oBAC9F,MAAM,CAAC,KAAK,EAAE,CAAC;oBACf,MAAM,CAAC,IAAI,KAAK,CAAC,yBAAyB,gBAAgB,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC;oBACxE,OAAO;gBACT,CAAC;gBAED,IAAI,KAAK,KAAK,aAAa,EAAE,CAAC;oBAC5B,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC,CAAC;oBACpD,GAAG,CAAC,GAAG,CAAC,+EAA+E,CAAC,CAAC;oBACzF,MAAM,CAAC,KAAK,EAAE,CAAC;oBACf,MAAM,CAAC,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC,CAAC;oBACjE,OAAO;gBACT,CAAC;gBAED,IAAI,IAAI,EAAE,CAAC;oBACT,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC,CAAC;oBACpD,GAAG,CAAC,GAAG,CAAC,gHAAgH,CAAC,CAAC;oBAC1H,MAAM,CAAC,KAAK,EAAE,CAAC;oBACf,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC1B,CAAC;qBAAM,CAAC;oBACN,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC,CAAC;oBACpD,GAAG,CAAC,GAAG,CAAC,sFAAsF,CAAC,CAAC;oBAChG,MAAM,CAAC,KAAK,EAAE,CAAC;oBACf,MAAM,CAAC,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC,CAAC;gBACtD,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;gBACnB,GAAG,CAAC,GAAG,EAAE,CAAC;YACZ,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE;YAC9B,MAAM,CAAC,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC,CAAC;QAC7E,CAAC,EAAE,SAAS,CAAC,CAAC;QAEd,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;QAChD,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QAEjC,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAA0B,EAAE,EAAE;YAChD,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;gBAC9B,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,IAAI,wBAAwB,CAAC,CAAC,CAAC;YAC1D,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,GAAG,CAAC,CAAC;YACd,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,gFAAgF;AAChF,mCAAmC;AACnC,gFAAgF;AAEhF,MAAM,cAAc,GAAG,wCAAwC,CAAC;AAChE,MAAM,iBAAiB,GAAG,mCAAmC,CAAC,CAAC,uCAAuC;AAEtG,MAAM,UAAU,gBAAgB;IAC9B,OAAO,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,cAAc,CAAC;AAC5D,CAAC;AAED,MAAM,UAAU,kBAAkB;IAChC,OAAO,OAAO,CAAC,GAAG,CAAC,uBAAuB,IAAI,iBAAiB,CAAC;AAClE,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,MAAiB;IACpD,kFAAkF;IAClF,MAAM,mBAAmB,EAAE,CAAC;IAE5B,MAAM,QAAQ,GAAG,MAAM,QAAQ,EAAE,CAAC;IAClC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxE,CAAC;IAED,sCAAsC;IACtC,IAAI,QAAQ,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;QAC5B,OAAO,QAAQ,CAAC,KAAK,CAAC;IACxB,CAAC;IAED,sDAAsD;IACtD,MAAM,SAAS,GAAG,QAAQ,CAAC,UAAU,CAAC;IACtC,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,QAAQ,CAAC,YAAY,CAAC;IAC/B,CAAC;IAED,IAAI,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,EAAE,CAAC;QACxD,OAAO,QAAQ,CAAC,YAAY,CAAC;IAC/B,CAAC;IAED,IAAI,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,+EAA+E,CAAC,CAAC;IACnG,CAAC;IAED,0BAA0B;IAC1B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,kBAAkB,CACrC,gBAAgB,EAAE,EAClB,kBAAkB,EAAE,EACpB,QAAQ,CAAC,aAAa,CACvB,CAAC;QAEF,MAAM,YAAY,GAAG,cAAc,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QACvD,6EAA6E;QAC7E,6DAA6D;QAC7D,MAAM,cAAc,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,aAAa,IAAI,QAAQ,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC;QACxG,OAAO,MAAM,CAAC,YAAY,CAAC;IAC7B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,KAAK,IAAI,GAAG,CAAC,OAAO,KAAK,iBAAiB,EAAE,CAAC;YAC9D,MAAM,WAAW,EAAE,CAAC;YACpB,WAAW,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;YACzC,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;QACtE,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW;IAC/B,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,CAAC,KAAK,CAAC,yCAAyC,CAAC,CAAC;QACzD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,MAAM,cAAc,CAAC,MAAM,CAAC,CAAC;QACjD,aAAa,CAAC,WAAW,CAAC,CAAC;QAC3B,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IACjC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,0BAA0B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC5F,OAAO,CAAC,KAAK,CAAC,uCAAuC,CAAC,CAAC;QACvD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC"}

package/dist/lib/config.d.ts

@@ -1,34 +0,0 @@
-/**
- * CLI configuration — non-secret metadata at ~/.wayai/config.json.
- *
- * Tokens themselves live in the OS keyring (see token-store.ts). This file
- * holds only metadata that survives a logout/login cycle gracefully if needed.
- */
-/**
- * Non-secret CLI configuration. Token fields removed in v0.4.0 — they now live
- * in the OS keyring. token_expires_at is metadata (timestamp, not a secret) and
- * stays here so the refresh path can decide when to refresh without unlocking
- * the keyring just to read the expiry.
- */
-export interface CliConfig {
-    api_url: string;
-    /** ISO 8601 expiry of the OAuth access token (metadata, not secret). */
-    token_expires_at?: string;
-    /**
-     * Report-action nudge dedup keys the user has already been nudged about, so the login/status
-     * reminder fires once per notifiable event. Shipped keys are `<report_id>:shipped:<contest_count>`
-     * (one per shipment — a re-shipped fix re-nudges, matching the re-firing shipped email); dismissed
-     * keys are `<report_id>:dismissed` (once-ever, matching the once-ever dismissed email). Capped to
-     * the most-recent entries by the writer.
-     */
-    nudged_report_ids?: string[];
-}
-export declare function getConfigPath(): string;
-/**
- * Read the metadata config. Tokens are NOT included — fetch them via
- * `getToken()` from token-store. Returns null only when the user has never
- * logged in (no config file at all).
- */
-export declare function readConfig(): CliConfig | null;
-export declare function writeConfig(config: CliConfig): void;
-export declare function deleteConfig(): void;

package/dist/lib/config.js

@@ -1,69 +0,0 @@
-/**
- * CLI configuration — non-secret metadata at ~/.wayai/config.json.
- *
- * Tokens themselves live in the OS keyring (see token-store.ts). This file
- * holds only metadata that survives a logout/login cycle gracefully if needed.
- */
-import * as fs from 'node:fs';
-import * as path from 'node:path';
-import * as os from 'node:os';
-// Resolved per-call so tests can redirect via $HOME and any runtime HOME change
-// (e.g., su -) is picked up. Frozen module-level constants previously made tests
-// write to the user's real ~/.wayai/.
-function configDir() { return path.join(os.homedir(), '.wayai'); }
-function configPath() { return path.join(configDir(), 'config.json'); }
-export function getConfigPath() {
-    return configPath();
-}
-/**
- * Read the metadata config. Tokens are NOT included — fetch them via
- * `getToken()` from token-store. Returns null only when the user has never
- * logged in (no config file at all).
- */
-export function readConfig() {
-    if (!fs.existsSync(configPath()))
-        return null;
-    try {
-        const content = fs.readFileSync(configPath(), 'utf-8');
-        const parsed = JSON.parse(content);
-        if (!parsed.api_url)
-            return null;
-        return {
-            api_url: parsed.api_url,
-            token_expires_at: parsed.token_expires_at,
-            nudged_report_ids: Array.isArray(parsed.nudged_report_ids)
-                ? parsed.nudged_report_ids.filter((x) => typeof x === 'string')
-                : undefined,
-        };
-    }
-    catch {
-        return null;
-    }
-}
-export function writeConfig(config) {
-    if (!fs.existsSync(configDir())) {
-        fs.mkdirSync(configDir(), { recursive: true });
-    }
-    // Preserve any existing metadata fields (e.g., user_id) that may be added later.
-    let existing = {};
-    if (fs.existsSync(configPath())) {
-        try {
-            existing = JSON.parse(fs.readFileSync(configPath(), 'utf-8'));
-        }
-        catch { /* corrupt — overwrite */ }
-    }
-    // Drop any legacy plaintext token fields that may still be present.
-    delete existing.token;
-    delete existing.access_token;
-    delete existing.refresh_token;
-    Object.assign(existing, config);
-    fs.writeFileSync(configPath(), JSON.stringify(existing, null, 2) + '\n', {
-        mode: 0o600, // owner-only read/write
-    });
-}
-export function deleteConfig() {
-    if (fs.existsSync(configPath())) {
-        fs.unlinkSync(configPath());
-    }
-}
-//# sourceMappingURL=config.js.map

package/dist/lib/config.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/lib/config.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAsB9B,gFAAgF;AAChF,iFAAiF;AACjF,sCAAsC;AACtC,SAAS,SAAS,KAAa,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC;AAC1E,SAAS,UAAU,KAAa,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC;AAE/E,MAAM,UAAU,aAAa;IAC3B,OAAO,UAAU,EAAE,CAAC;AACtB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,UAAU;IACxB,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,EAAE,CAAC;QAAE,OAAO,IAAI,CAAC;IAE9C,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,EAAE,OAAO,CAAC,CAAC;QACvD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACnC,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC;QACjC,OAAO;YACL,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,iBAAiB,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,iBAAiB,CAAC;gBACxD,CAAC,CAAC,MAAM,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAU,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC;gBACrF,CAAC,CAAC,SAAS;SACd,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,MAAiB;IAC3C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,EAAE,CAAC,EAAE,CAAC;QAChC,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACjD,CAAC;IAED,iFAAiF;IACjF,IAAI,QAAQ,GAA4B,EAAE,CAAC;IAC3C,IAAI,EAAE,CAAC,UAAU,CAAC,UAAU,EAAE,CAAC,EAAE,CAAC;QAChC,IAAI,CAAC;YACH,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC;QAChE,CAAC;QAAC,MAAM,CAAC,CAAC,yBAAyB,CAAC,CAAC;IACvC,CAAC;IACD,oEAAoE;IACpE,OAAO,QAAQ,CAAC,KAAK,CAAC;IACtB,OAAO,QAAQ,CAAC,YAAY,CAAC;IAC7B,OAAO,QAAQ,CAAC,aAAa,CAAC;IAE9B,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAEhC,EAAE,CAAC,aAAa,CAAC,UAAU,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE;QACvE,IAAI,EAAE,KAAK,EAAE,wBAAwB;KACtC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,YAAY;IAC1B,IAAI,EAAE,CAAC,UAAU,CAAC,UAAU,EAAE,CAAC,EAAE,CAAC;QAChC,EAAE,CAAC,UAAU,CAAC,UAAU,EAAE,CAAC,CAAC;IAC9B,CAAC;AACH,CAAC"}

package/dist/lib/credential-utils.d.ts

@@ -1,36 +0,0 @@
-/**
- * Shared helpers for the org-credential CLI commands (create-credential,
- * update-credential).
- */
-export declare const VALID_AUTH_TYPES: readonly ["api_key", "bearer", "basic_auth"];
-export type AuthType = typeof VALID_AUTH_TYPES[number];
-/** Maps legacy display names to canonical lowercase codes for backward compat. */
-export declare const LEGACY_AUTH_TYPE_MAP: Record<string, AuthType>;
-/** Normalize a user-supplied auth type, accepting legacy display names. */
-export declare function normalizeCliAuthType(type: string): AuthType | null;
-export declare const VALID_ENVIRONMENTS: readonly ["preview", "production", "all"];
-export type Environment = typeof VALID_ENVIRONMENTS[number];
-/** Validate a user-supplied credential environment; returns null when invalid. */
-export declare function normalizeCliEnvironment(env: string): Environment | null;
-/**
- * Map a single secret string (read from stdin) to the credential body fields
- * the backend expects for the given auth type. Basic Auth expects
- * `username:password`. Throws on malformed Basic Auth input.
- */
-export declare function mapSecretToCredentialFields(authType: AuthType, secret: string): Record<string, string>;
-export interface OrgTagLike {
-    tag_id: string;
-    name: string;
-}
-/**
- * Resolve a list of tag references (names, or raw tag UUIDs) to tag UUIDs using
- * the org's tag registry. Accepts names primarily (the human-facing identifier);
- * a value that is already a known tag_id passes through. Unknown references throw
- * with the list of available tag names. Empty/whitespace entries are skipped.
- */
-export declare function resolveTagIds(tagRefs: string[], orgTags: OrgTagLike[]): string[];
-/**
- * Split repeatable + comma-separated `--tag` values into a flat list of refs.
- * `['a,b', 'c']` → `['a', 'b', 'c']`.
- */
-export declare function splitTagRefs(rawValues: string[]): string[];

package/dist/lib/credential-utils.js

@@ -1,88 +0,0 @@
-/**
- * Shared helpers for the org-credential CLI commands (create-credential,
- * update-credential).
- */
-export const VALID_AUTH_TYPES = ['api_key', 'bearer', 'basic_auth'];
-/** Maps legacy display names to canonical lowercase codes for backward compat. */
-export const LEGACY_AUTH_TYPE_MAP = {
-    'API Key': 'api_key',
-    'Bearer Token': 'bearer',
-    'Basic Auth': 'basic_auth',
-};
-/** Normalize a user-supplied auth type, accepting legacy display names. */
-export function normalizeCliAuthType(type) {
-    const normalized = LEGACY_AUTH_TYPE_MAP[type] ?? type;
-    return VALID_AUTH_TYPES.includes(normalized) ? normalized : null;
-}
-export const VALID_ENVIRONMENTS = ['preview', 'production', 'all'];
-/** Validate a user-supplied credential environment; returns null when invalid. */
-export function normalizeCliEnvironment(env) {
-    return VALID_ENVIRONMENTS.includes(env) ? env : null;
-}
-/**
- * Map a single secret string (read from stdin) to the credential body fields
- * the backend expects for the given auth type. Basic Auth expects
- * `username:password`. Throws on malformed Basic Auth input.
- */
-export function mapSecretToCredentialFields(authType, secret) {
-    switch (authType) {
-        case 'bearer':
-            return { access_token: secret };
-        case 'api_key':
-            return { api_key: secret };
-        case 'basic_auth': {
-            const colonIdx = secret.indexOf(':');
-            if (colonIdx === -1) {
-                throw new Error('Basic Auth stdin format: username:password');
-            }
-            return {
-                username: secret.slice(0, colonIdx),
-                password: secret.slice(colonIdx + 1),
-            };
-        }
-    }
-}
-/**
- * Resolve a list of tag references (names, or raw tag UUIDs) to tag UUIDs using
- * the org's tag registry. Accepts names primarily (the human-facing identifier);
- * a value that is already a known tag_id passes through. Unknown references throw
- * with the list of available tag names. Empty/whitespace entries are skipped.
- */
-export function resolveTagIds(tagRefs, orgTags) {
-    const byName = new Map(orgTags.map((t) => [t.name, t.tag_id]));
-    const byId = new Set(orgTags.map((t) => t.tag_id));
-    const ids = [];
-    const missing = [];
-    for (const raw of tagRefs) {
-        const ref = raw.trim();
-        if (!ref)
-            continue;
-        const resolved = byName.get(ref);
-        if (resolved) {
-            ids.push(resolved);
-        }
-        else if (byId.has(ref)) {
-            ids.push(ref);
-        }
-        else {
-            missing.push(ref);
-        }
-    }
-    if (missing.length > 0) {
-        const available = orgTags.map((t) => t.name).join(', ') || '(none)';
-        throw new Error(`Unknown tag(s): ${missing.join(', ')}. Available org tags: ${available}`);
-    }
-    // De-dup while preserving order.
-    return [...new Set(ids)];
-}
-/**
- * Split repeatable + comma-separated `--tag` values into a flat list of refs.
- * `['a,b', 'c']` → `['a', 'b', 'c']`.
- */
-export function splitTagRefs(rawValues) {
-    return rawValues
-        .flatMap((v) => v.split(','))
-        .map((v) => v.trim())
-        .filter((v) => v.length > 0);
-}
-//# sourceMappingURL=credential-utils.js.map

package/dist/lib/credential-utils.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"credential-utils.js","sourceRoot":"","sources":["../../src/lib/credential-utils.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,SAAS,EAAE,QAAQ,EAAE,YAAY,CAAU,CAAC;AAG7E,kFAAkF;AAClF,MAAM,CAAC,MAAM,oBAAoB,GAA6B;IAC5D,SAAS,EAAE,SAAS;IACpB,cAAc,EAAE,QAAQ;IACxB,YAAY,EAAE,YAAY;CAC3B,CAAC;AAEF,2EAA2E;AAC3E,MAAM,UAAU,oBAAoB,CAAC,IAAY;IAC/C,MAAM,UAAU,GAAG,oBAAoB,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC;IACtD,OAAO,gBAAgB,CAAC,QAAQ,CAAC,UAAsB,CAAC,CAAC,CAAC,CAAE,UAAuB,CAAC,CAAC,CAAC,IAAI,CAAC;AAC7F,CAAC;AAED,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,SAAS,EAAE,YAAY,EAAE,KAAK,CAAU,CAAC;AAG5E,kFAAkF;AAClF,MAAM,UAAU,uBAAuB,CAAC,GAAW;IACjD,OAAO,kBAAkB,CAAC,QAAQ,CAAC,GAAkB,CAAC,CAAC,CAAC,CAAE,GAAmB,CAAC,CAAC,CAAC,IAAI,CAAC;AACvF,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,2BAA2B,CACzC,QAAkB,EAClB,MAAc;IAEd,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,QAAQ;YACX,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC;QAClC,KAAK,SAAS;YACZ,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;QAC7B,KAAK,YAAY,CAAC,CAAC,CAAC;YAClB,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YACrC,IAAI,QAAQ,KAAK,CAAC,CAAC,EAAE,CAAC;gBACpB,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;YAChE,CAAC;YACD,OAAO;gBACL,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC;gBACnC,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC;aACrC,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAOD;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,OAAiB,EAAE,OAAqB;IACpE,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAC/D,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IACnD,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,MAAM,OAAO,GAAa,EAAE,CAAC;IAE7B,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;QAC1B,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;QACvB,IAAI,CAAC,GAAG;YAAE,SAAS;QACnB,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,QAAQ,EAAE,CAAC;YACb,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACrB,CAAC;aAAM,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACzB,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChB,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACpB,CAAC;IACH,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC;QACpE,MAAM,IAAI,KAAK,CACb,mBAAmB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,yBAAyB,SAAS,EAAE,CAC1E,CAAC;IACJ,CAAC;IAED,iCAAiC;IACjC,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;AAC3B,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,SAAmB;IAC9C,OAAO,SAAS;SACb,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;SAC5B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AACjC,CAAC"}

package/dist/lib/diff-display.d.ts

@@ -1,8 +0,0 @@
-/**
- * Colored terminal output from diff summary markdown
- */
-/**
- * Print a diff summary to the terminal with ANSI colors.
- * Parses the markdown summary from the backend diff endpoint.
- */
-export declare function printDiff(summary: string): void;

package/dist/lib/diff-display.js

@@ -1,37 +0,0 @@
-/**
- * Colored terminal output from diff summary markdown
- */
-/**
- * Print a diff summary to the terminal with ANSI colors.
- * Parses the markdown summary from the backend diff endpoint.
- */
-export function printDiff(summary) {
-    const lines = summary.split('\n');
-    for (const line of lines) {
-        if (line.startsWith('**') && line.endsWith('**')) {
-            // Section header
-            console.log(`\n\x1b[1m${line.replace(/\*\*/g, '')}\x1b[0m`);
-        }
-        else if (line.trimStart().startsWith('+ ')) {
-            // Addition — green
-            console.log(`\x1b[32m${line}\x1b[0m`);
-        }
-        else if (line.trimStart().startsWith('- ')) {
-            // Deletion — red
-            console.log(`\x1b[31m${line}\x1b[0m`);
-        }
-        else if (line.trimStart().startsWith('~ ')) {
-            // Modification — yellow
-            console.log(`\x1b[33m${line}\x1b[0m`);
-        }
-        else if (line.includes('(no changes)')) {
-            // No changes — dim
-            console.log(`\x1b[2m${line}\x1b[0m`);
-        }
-        else {
-            console.log(line);
-        }
-    }
-    console.log(); // trailing newline
-}
-//# sourceMappingURL=diff-display.js.map

package/dist/lib/diff-display.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"diff-display.js","sourceRoot":"","sources":["../../src/lib/diff-display.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH;;;GAGG;AACH,MAAM,UAAU,SAAS,CAAC,OAAe;IACvC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAElC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACjD,iBAAiB;YACjB,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC;QAC9D,CAAC;aAAM,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7C,mBAAmB;YACnB,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,SAAS,CAAC,CAAC;QACxC,CAAC;aAAM,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7C,iBAAiB;YACjB,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,SAAS,CAAC,CAAC;QACxC,CAAC;aAAM,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7C,wBAAwB;YACxB,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,SAAS,CAAC,CAAC;QACxC,CAAC;aAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;YACzC,mBAAmB;YACnB,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,SAAS,CAAC,CAAC;QACvC,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACpB,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,mBAAmB;AACpC,CAAC"}

package/dist/lib/eval-format.d.ts

@@ -1,29 +0,0 @@
-/**
- * Shared formatting helpers for eval results display.
- */
-interface ResultRow {
-    eval_id: string;
-    total_runs: number;
-    successful_runs: number;
-    failed_runs: number;
-    pending_runs?: number;
-    running_runs?: number;
-    avg_execution_time_ms?: number;
-    aggregated_scores?: Record<string, {
-        avg: number;
-        min: number;
-        max: number;
-    }>;
-    eval?: {
-        eval_id: string;
-        eval_name: string;
-    } | null;
-}
-/**
- * Print a results table and overall summary.
- *
- * @param mode - 'compact': scores show avg only (used by run-eval summary)
- *               'detailed': scores show avg/min/max (used by eval-results)
- */
-export declare function printResultsTable(results: ResultRow[], mode: 'compact' | 'detailed'): void;
-export {};

package/dist/lib/eval-format.js

@@ -1,44 +0,0 @@
-/**
- * Shared formatting helpers for eval results display.
- */
-/**
- * Print a results table and overall summary.
- *
- * @param mode - 'compact': scores show avg only (used by run-eval summary)
- *               'detailed': scores show avg/min/max (used by eval-results)
- */
-export function printResultsTable(results, mode) {
-    let totalPassed = 0;
-    let totalTerminal = 0;
-    let totalInProgress = 0;
-    for (const r of results) {
-        const evalName = r.eval?.eval_name || r.eval_id.slice(0, 8);
-        // Denominator = completed runs (`successful + failed`, = the backend's
-        // `completed` count). Counting still-running runs against it understates the
-        // pass rate mid-run (gh #2604); in-progress runs are surfaced separately.
-        // (`completed` includes unevaluated/errored rows, per `failed_runs`;
-        // `success_rate` uses the narrower evaluated-only denominator.)
-        const terminalRuns = r.successful_runs + r.failed_runs;
-        const inProgress = (r.running_runs ?? 0) + (r.pending_runs ?? 0);
-        const passed = inProgress > 0
-            ? `${r.successful_runs}/${terminalRuns} passed (+${inProgress} in progress)`
-            : `${r.successful_runs}/${terminalRuns} passed`;
-        const avgTime = r.avg_execution_time_ms != null ? `avg ${(r.avg_execution_time_ms / 1000).toFixed(1)}s` : '';
-        let scoresStr = '';
-        if (r.aggregated_scores) {
-            const parts = Object.entries(r.aggregated_scores).map(([key, val]) => mode === 'compact'
-                ? `${key}: ${Math.round(val.avg * 100)}%`
-                : `${key}: avg ${Math.round(val.avg * 100)}%, min ${Math.round(val.min * 100)}%, max ${Math.round(val.max * 100)}%`);
-            if (parts.length > 0)
-                scoresStr = '  ' + parts.join('  ');
-        }
-        console.log(`  ${evalName.padEnd(20)}  ${passed.padEnd(14)}  ${avgTime}${scoresStr}`);
-        totalPassed += r.successful_runs;
-        totalTerminal += terminalRuns;
-        totalInProgress += inProgress;
-    }
-    const pct = totalTerminal > 0 ? ((totalPassed / totalTerminal) * 100).toFixed(1) : '0.0';
-    const inProgressNote = totalInProgress > 0 ? ` — ${totalInProgress} in progress` : '';
-    console.log(`\nOverall: ${totalPassed}/${totalTerminal} passed (${pct}%)${inProgressNote}`);
-}
-//# sourceMappingURL=eval-format.js.map

package/dist/lib/eval-format.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"eval-format.js","sourceRoot":"","sources":["../../src/lib/eval-format.ts"],"names":[],"mappings":"AAAA;;GAEG;AAgBH;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAC/B,OAAoB,EACpB,IAA4B;IAE5B,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,IAAI,aAAa,GAAG,CAAC,CAAC;IACtB,IAAI,eAAe,GAAG,CAAC,CAAC;IAExB,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,MAAM,QAAQ,GAAG,CAAC,CAAC,IAAI,EAAE,SAAS,IAAI,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC5D,uEAAuE;QACvE,6EAA6E;QAC7E,0EAA0E;QAC1E,qEAAqE;QACrE,gEAAgE;QAChE,MAAM,YAAY,GAAG,CAAC,CAAC,eAAe,GAAG,CAAC,CAAC,WAAW,CAAC;QACvD,MAAM,UAAU,GAAG,CAAC,CAAC,CAAC,YAAY,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,YAAY,IAAI,CAAC,CAAC,CAAC;QACjE,MAAM,MAAM,GAAG,UAAU,GAAG,CAAC;YAC3B,CAAC,CAAC,GAAG,CAAC,CAAC,eAAe,IAAI,YAAY,aAAa,UAAU,eAAe;YAC5E,CAAC,CAAC,GAAG,CAAC,CAAC,eAAe,IAAI,YAAY,SAAS,CAAC;QAClD,MAAM,OAAO,GAAG,CAAC,CAAC,qBAAqB,IAAI,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,qBAAqB,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QAE7G,IAAI,SAAS,GAAG,EAAE,CAAC;QACnB,IAAI,CAAC,CAAC,iBAAiB,EAAE,CAAC;YACxB,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,EAAE,CACnE,IAAI,KAAK,SAAS;gBAChB,CAAC,CAAC,GAAG,GAAG,KAAK,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,GAAG,GAAG,CAAC,GAAG;gBACzC,CAAC,CAAC,GAAG,GAAG,SAAS,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,GAAG,GAAG,CAAC,UAAU,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,GAAG,GAAG,CAAC,UAAU,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,GAAG,GAAG,CAAC,GAAG,CACtH,CAAC;YACF,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;gBAAE,SAAS,GAAG,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5D,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,KAAK,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,OAAO,GAAG,SAAS,EAAE,CAAC,CAAC;QAEtF,WAAW,IAAI,CAAC,CAAC,eAAe,CAAC;QACjC,aAAa,IAAI,YAAY,CAAC;QAC9B,eAAe,IAAI,UAAU,CAAC;IAChC,CAAC;IAED,MAAM,GAAG,GAAG,aAAa,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,GAAG,aAAa,CAAC,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IACzF,MAAM,cAAc,GAAG,eAAe,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,eAAe,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC;IACtF,OAAO,CAAC,GAAG,CAAC,cAAc,WAAW,IAAI,aAAa,YAAY,GAAG,KAAK,cAAc,EAAE,CAAC,CAAC;AAC9F,CAAC"}

package/dist/lib/hub-lock.d.ts

@@ -1,7 +0,0 @@
-export declare function getLockPath(): string | null;
-export declare function readLock(): string | null;
-export declare function writeLock(hubId: string): void;
-export declare function clearLock(): boolean;
-export declare function assertHubMatchesLock(resolvedHubId: string, hubLabel?: string): void;
-export declare function autoLockIfUnlocked(hubId: string): boolean;
-export declare function assertNoLockBlocksHubCreation(newHubName: string): void;