@wirecat/cli-base 0.0.0-stage → 0.21.0

package/dist/executable.js

@@ -0,0 +1,41 @@
+import { existsSync } from "node:fs";
+import { win32 } from "node:path";
+const variable = (env, name) => Object.entries(env).find(([key]) => key.toUpperCase() === name)?.[1];
+export const executableOnPath = (command, env, platform = process.platform, exists = existsSync) => {
+    if (platform !== "win32" || win32.isAbsolute(command))
+        return command;
+    if (/[\\/]/.test(command))
+        return command;
+    const extensions = win32.extname(command)
+        ? [""]
+        : (variable(env, "PATHEXT") ?? ".EXE;.COM;.CMD;.BAT").split(";").filter((ext) => /^\.[a-z0-9]+$/i.test(ext));
+    for (const entry of (variable(env, "PATH") ?? "").split(";")) {
+        const directory = entry.replace(/^"(.*)"$/, "$1");
+        for (const extension of extensions) {
+            const candidate = win32.join(directory, command + extension);
+            if (exists(candidate))
+                return candidate;
+        }
+    }
+    return command;
+};
+export const executableEnvironment = (env, platform = process.platform) => {
+    if (platform !== "win32")
+        return env;
+    const configured = variable(env, "COMSPEC");
+    const system = variable(env, "SYSTEMROOT");
+    const shell = configured
+        ? configured
+        : system && win32.isAbsolute(system)
+            ? win32.join(system, "System32", "cmd.exe")
+            : undefined;
+    if (!shell)
+        return env;
+    const result = { ...env };
+    for (const key of Object.keys(result))
+        if (key.toUpperCase() === "COMSPEC")
+            delete result[key];
+    result.comspec = shell;
+    return result;
+};
+//# sourceMappingURL=executable.js.map

package/dist/executable.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"executable.js","sourceRoot":"","sources":["../src/executable.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAA;AACpC,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW,CAAA;AAEjC,MAAM,QAAQ,GAAG,CAAC,GAAsB,EAAE,IAAY,EAAE,EAAE,CACxD,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;AAEtE,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAC9B,OAAe,EACf,GAAsB,EACtB,QAAQ,GAAoB,OAAO,CAAC,QAAQ,EAC5C,MAAM,GAA8B,UAAU,EACtC,EAAE;IACV,IAAI,QAAQ,KAAK,OAAO,IAAI,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,OAAO,CAAA;IACrE,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,OAAO,CAAA;IACzC,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;QACvC,CAAC,CAAC,CAAC,EAAE,CAAC;QACN,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,EAAE,SAAS,CAAC,IAAI,qBAAqB,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAA;IAC9G,KAAK,MAAM,KAAK,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QAC7D,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC,CAAA;QACjD,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACnC,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,GAAG,SAAS,CAAC,CAAA;YAC5D,IAAI,MAAM,CAAC,SAAS,CAAC;gBAAE,OAAO,SAAS,CAAA;QACzC,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAA;AAChB,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,qBAAqB,GAAG,CACnC,GAAsB,EACtB,QAAQ,GAAoB,OAAO,CAAC,QAAQ,EACzB,EAAE;IACrB,IAAI,QAAQ,KAAK,OAAO;QAAE,OAAO,GAAG,CAAA;IACpC,MAAM,UAAU,GAAG,QAAQ,CAAC,GAAG,EAAE,SAAS,CAAC,CAAA;IAC3C,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,CAAA;IAC1C,MAAM,KAAK,GAAG,UAAU;QACtB,CAAC,CAAC,UAAU;QACZ,CAAC,CAAC,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC;YAClC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,UAAU,EAAE,SAAS,CAAC;YAC3C,CAAC,CAAC,SAAS,CAAA;IACf,IAAI,CAAC,KAAK;QAAE,OAAO,GAAG,CAAA;IACtB,MAAM,MAAM,GAAG,EAAE,GAAG,GAAG,EAAE,CAAA;IACzB,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,IAAI,GAAG,CAAC,WAAW,EAAE,KAAK,SAAS;YAAE,OAAO,MAAM,CAAC,GAAG,CAAC,CAAA;IAC9F,MAAM,CAAC,OAAO,GAAG,KAAK,CAAA;IACtB,OAAO,MAAM,CAAA;AACf,CAAC,CAAA"}

package/dist/exit-codes.d.ts

@@ -0,0 +1,11 @@
+import type { ErrorCode } from "./errors.js";
+/**
+ * One mapping, so a script can branch on `$?` without parsing text. Defined here rather than at
+ * each command site: numbers invented per command are how two of them end up disagreeing.
+ *
+ * 130 for a cancellation is the shell's convention for SIGINT.
+ */
+export declare const EXIT_CODES: Record<ErrorCode, number>;
+export declare const exitCodeFor: (code: ErrorCode) => number;
+export declare const GENERIC_FAILURE = 1;
+//# sourceMappingURL=exit-codes.d.ts.map

package/dist/exit-codes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"exit-codes.d.ts","sourceRoot":"","sources":["../src/exit-codes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AAE5C;;;;;GAKG;AACH,eAAO,MAAM,UAAU,EAAE,MAAM,CAAC,SAAS,EAAE,MAAM,CAehD,CAAA;AAED,eAAO,MAAM,WAAW,SAAU,SAAS,KAAG,MAA0B,CAAA;AAExE,eAAO,MAAM,eAAe,IAAI,CAAA"}

package/dist/exit-codes.js

@@ -0,0 +1,25 @@
+/**
+ * One mapping, so a script can branch on `$?` without parsing text. Defined here rather than at
+ * each command site: numbers invented per command are how two of them end up disagreeing.
+ *
+ * 130 for a cancellation is the shell's convention for SIGINT.
+ */
+export const EXIT_CODES = {
+    validation_error: 2,
+    configuration_error: 3,
+    authentication_error: 4,
+    permission_error: 5,
+    not_found: 6,
+    confirmation_required: 7,
+    rate_limited: 8,
+    timeout: 9,
+    network_error: 10,
+    provider_error: 11,
+    provider_unavailable: 12,
+    invalid_response: 13,
+    outcome_unknown: 14,
+    cancelled: 130,
+};
+export const exitCodeFor = (code) => EXIT_CODES[code];
+export const GENERIC_FAILURE = 1;
+//# sourceMappingURL=exit-codes.js.map

package/dist/exit-codes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"exit-codes.js","sourceRoot":"","sources":["../src/exit-codes.ts"],"names":[],"mappings":"AAEA;;;;;GAKG;AACH,MAAM,CAAC,MAAM,UAAU,GAA8B;IACnD,gBAAgB,EAAE,CAAC;IACnB,mBAAmB,EAAE,CAAC;IACtB,oBAAoB,EAAE,CAAC;IACvB,gBAAgB,EAAE,CAAC;IACnB,SAAS,EAAE,CAAC;IACZ,qBAAqB,EAAE,CAAC;IACxB,YAAY,EAAE,CAAC;IACf,OAAO,EAAE,CAAC;IACV,aAAa,EAAE,EAAE;IACjB,cAAc,EAAE,EAAE;IAClB,oBAAoB,EAAE,EAAE;IACxB,gBAAgB,EAAE,EAAE;IACpB,eAAe,EAAE,EAAE;IACnB,SAAS,EAAE,GAAG;CACf,CAAA;AAED,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,IAAe,EAAU,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAA;AAExE,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAA"}

package/dist/http/index.d.ts

@@ -0,0 +1,20 @@
+/**
+ * The HTTP layer, deliberately behind its own entry point.
+ *
+ * A CLI that speaks a socket, a message bus or a local database has no business depending on
+ * status-code semantics and `Retry-After` parsing. Import `@wirecat/cli-base/http` only when
+ * the thing on the other end is actually HTTP.
+ */
+import type { ErrorCode } from "../errors.js";
+import type { WallClock } from "../time.js";
+/** The one function an HTTP client needs from its environment. A Worker, a browser, a test and Node all satisfy it. */
+export type FetchLike = (input: string | URL | Request, init?: RequestInit) => Promise<Response>;
+/** `Retry-After` is either a number of seconds or an HTTP date. Both forms occur in the wild. */
+export declare const parseRetryAfter: (header: string | null | undefined, now: WallClock) => number | undefined;
+/** A Unix timestamp in seconds, the shape several providers use for `X-RateLimit-Reset`. */
+export declare const parseRateLimitReset: (header: string | null | undefined, now: WallClock) => number | undefined;
+/** What the provider asked us to wait, if it asked at all. Its timing beats our own backoff. */
+export declare const providerWaitMs: (headers: Headers, now: WallClock) => number | undefined;
+export declare const retryableStatus: (status: number) => boolean;
+export declare const statusToCode: (status: number) => ErrorCode;
+//# sourceMappingURL=index.d.ts.map

package/dist/http/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/http/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,cAAc,CAAA;AAC7C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAA;AAE3C,uHAAuH;AACvH,MAAM,MAAM,SAAS,GAAG,CAAC,KAAK,EAAE,MAAM,GAAG,GAAG,GAAG,OAAO,EAAE,IAAI,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAA;AAEhG,iGAAiG;AACjG,eAAO,MAAM,eAAe,WAAY,MAAM,GAAG,IAAI,GAAG,SAAS,OAAO,SAAS,KAAG,MAAM,GAAG,SAa5F,CAAA;AAED,4FAA4F;AAC5F,eAAO,MAAM,mBAAmB,WAAY,MAAM,GAAG,IAAI,GAAG,SAAS,OAAO,SAAS,KAAG,MAAM,GAAG,SAQhG,CAAA;AAED,gGAAgG;AAChG,eAAO,MAAM,cAAc,YAAa,OAAO,OAAO,SAAS,KAAG,MAAM,GAAG,SACqC,CAAA;AAEhH,eAAO,MAAM,eAAe,WAAY,MAAM,KAAG,OAA4D,CAAA;AAE7G,eAAO,MAAM,YAAY,WAAY,MAAM,KAAG,SAS7C,CAAA"}

package/dist/http/index.js

@@ -0,0 +1,46 @@
+/** `Retry-After` is either a number of seconds or an HTTP date. Both forms occur in the wild. */
+export const parseRetryAfter = (header, now) => {
+    if (!header)
+        return undefined;
+    const trimmed = header.trim();
+    if (/^\d+$/.test(trimmed))
+        return Number(trimmed) * 1000;
+    const at = Date.parse(trimmed);
+    if (Number.isNaN(at))
+        return undefined;
+    const delta = at - now().getTime();
+    // A date already in the past would otherwise become a zero wait, and a zero wait against a rate
+    // limit is a hot loop.
+    return delta > 0 ? delta : undefined;
+};
+/** A Unix timestamp in seconds, the shape several providers use for `X-RateLimit-Reset`. */
+export const parseRateLimitReset = (header, now) => {
+    if (!header)
+        return undefined;
+    const seconds = Number(header.trim());
+    if (!Number.isFinite(seconds))
+        return undefined;
+    const delta = seconds * 1000 - now().getTime();
+    return delta > 0 ? delta : undefined;
+};
+/** What the provider asked us to wait, if it asked at all. Its timing beats our own backoff. */
+export const providerWaitMs = (headers, now) => parseRetryAfter(headers.get("retry-after"), now) ?? parseRateLimitReset(headers.get("x-ratelimit-reset"), now);
+export const retryableStatus = (status) => status === 408 || status === 429 || status >= 500;
+export const statusToCode = (status) => {
+    if (status === 400 || status === 422)
+        return "validation_error";
+    if (status === 401)
+        return "authentication_error";
+    if (status === 403)
+        return "permission_error";
+    if (status === 404)
+        return "not_found";
+    if (status === 408)
+        return "timeout";
+    if (status === 429)
+        return "rate_limited";
+    if (status === 502 || status === 503 || status === 504)
+        return "provider_unavailable";
+    return "provider_error";
+};
+//# sourceMappingURL=index.js.map

package/dist/http/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/http/index.ts"],"names":[],"mappings":"AAaA,iGAAiG;AACjG,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,MAAiC,EAAE,GAAc,EAAsB,EAAE;IACvG,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAA;IAE7B,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,EAAE,CAAA;IAC7B,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,MAAM,CAAC,OAAO,CAAC,GAAG,IAAI,CAAA;IAExD,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;IAC9B,IAAI,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QAAE,OAAO,SAAS,CAAA;IAEtC,MAAM,KAAK,GAAG,EAAE,GAAG,GAAG,EAAE,CAAC,OAAO,EAAE,CAAA;IAClC,gGAAgG;IAChG,uBAAuB;IACvB,OAAO,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAA;AACtC,CAAC,CAAA;AAED,4FAA4F;AAC5F,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,MAAiC,EAAE,GAAc,EAAsB,EAAE;IAC3G,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAA;IAE7B,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAA;IACrC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,OAAO,SAAS,CAAA;IAE/C,MAAM,KAAK,GAAG,OAAO,GAAG,IAAI,GAAG,GAAG,EAAE,CAAC,OAAO,EAAE,CAAA;IAC9C,OAAO,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAA;AACtC,CAAC,CAAA;AAED,gGAAgG;AAChG,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,OAAgB,EAAE,GAAc,EAAsB,EAAE,CACrF,eAAe,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,GAAG,CAAC,IAAI,mBAAmB,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,EAAE,GAAG,CAAC,CAAA;AAEhH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,MAAc,EAAW,EAAE,CAAC,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,IAAI,GAAG,CAAA;AAE7G,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,MAAc,EAAa,EAAE;IACxD,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,kBAAkB,CAAA;IAC/D,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,sBAAsB,CAAA;IACjD,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,kBAAkB,CAAA;IAC7C,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,WAAW,CAAA;IACtC,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,SAAS,CAAA;IACpC,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,cAAc,CAAA;IACzC,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,sBAAsB,CAAA;IACrF,OAAO,gBAAgB,CAAA;AACzB,CAAC,CAAA"}

package/dist/index.d.ts

@@ -0,0 +1,20 @@
+export { loadConfigFile, saveConfigFile, writeSecurely } from "./config.js";
+export type { CredentialSource, CredentialStorage, CredentialsOptions, StoredCredential } from "./credentials.js";
+export { CREDENTIAL_STORAGE, Credentials, keyringService } from "./credentials.js";
+export { createDeadline, type Deadline, type DeadlineOptions } from "./deadline.js";
+export { CliError, type CliErrorDetails, type ErrorCode, errorCodes, isCliError } from "./errors.js";
+export { EXIT_CODES, exitCodeFor, GENERIC_FAILURE } from "./exit-codes.js";
+export { brokenKeyring, type KeyringStore, memoryKeyring, systemKeyring } from "./keyring.js";
+export { type LegacyMove, legacyMacPaths, type MigrateLegacyPathsOptions, migrateLegacyMacPaths, } from "./legacy-paths.js";
+export { type Logger, noopLogger } from "./logger.js";
+export { createFileLogger, type FileLogger, type FileLoggerOptions, REDACTED_FIELDS } from "./logging.js";
+export { createOutputBuffer, type OutputBuffer, type OutputBufferOptions } from "./output-buffer.js";
+export { configFilePath, type Paths, type PathsOptions, pathsAreOverridden, resolvePaths } from "./paths.js";
+export { indent, type PrettyOptions, renderPretty } from "./pretty.js";
+export { createRenderer, RENDER_FORMATS, type Renderer, type RendererOptions, type RenderFormat, } from "./renderer.js";
+export { fieldsOf, projectFields } from "./result-fields.js";
+export { backoffMs, DEFAULT_RETRY, isTransportFailure, type RetryConfig } from "./retry.js";
+export { singleLine, visibleControls } from "./sanitize.js";
+export { captureStreams, processStreams, type Streams } from "./streams.js";
+export { abortError, type MonotonicClock, monotonic, realSleep, type SleepLike, type SleepReason, type WallClock, wallClock, } from "./time.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAC3E,YAAY,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAA;AACjH,OAAO,EAAE,kBAAkB,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAA;AAClF,OAAO,EAAE,cAAc,EAAE,KAAK,QAAQ,EAAE,KAAK,eAAe,EAAE,MAAM,eAAe,CAAA;AACnF,OAAO,EAAE,QAAQ,EAAE,KAAK,eAAe,EAAE,KAAK,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACpG,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAA;AAC1E,OAAO,EAAE,aAAa,EAAE,KAAK,YAAY,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA;AAC7F,OAAO,EACL,KAAK,UAAU,EACf,cAAc,EACd,KAAK,yBAAyB,EAC9B,qBAAqB,GACtB,MAAM,mBAAmB,CAAA;AAC1B,OAAO,EAAE,KAAK,MAAM,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACrD,OAAO,EAAE,gBAAgB,EAAE,KAAK,UAAU,EAAE,KAAK,iBAAiB,EAAE,eAAe,EAAE,MAAM,cAAc,CAAA;AACzG,OAAO,EAAE,kBAAkB,EAAE,KAAK,YAAY,EAAE,KAAK,mBAAmB,EAAE,MAAM,oBAAoB,CAAA;AACpG,OAAO,EAAE,cAAc,EAAE,KAAK,KAAK,EAAE,KAAK,YAAY,EAAE,kBAAkB,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA;AAC5G,OAAO,EAAE,MAAM,EAAE,KAAK,aAAa,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AACtE,OAAO,EACL,cAAc,EACd,cAAc,EACd,KAAK,QAAQ,EACb,KAAK,eAAe,EACpB,KAAK,YAAY,GAClB,MAAM,eAAe,CAAA;AACtB,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAC5D,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,kBAAkB,EAAE,KAAK,WAAW,EAAE,MAAM,YAAY,CAAA;AAC3F,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AAC3D,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,KAAK,OAAO,EAAE,MAAM,cAAc,CAAA;AAC3E,OAAO,EACL,UAAU,EACV,KAAK,cAAc,EACnB,SAAS,EACT,SAAS,EACT,KAAK,SAAS,EACd,KAAK,WAAW,EAChB,KAAK,SAAS,EACd,SAAS,GACV,MAAM,WAAW,CAAA"}

package/dist/index.js

@@ -0,0 +1,19 @@
+export { loadConfigFile, saveConfigFile, writeSecurely } from "./config.js";
+export { CREDENTIAL_STORAGE, Credentials, keyringService } from "./credentials.js";
+export { createDeadline } from "./deadline.js";
+export { CliError, errorCodes, isCliError } from "./errors.js";
+export { EXIT_CODES, exitCodeFor, GENERIC_FAILURE } from "./exit-codes.js";
+export { brokenKeyring, memoryKeyring, systemKeyring } from "./keyring.js";
+export { legacyMacPaths, migrateLegacyMacPaths, } from "./legacy-paths.js";
+export { noopLogger } from "./logger.js";
+export { createFileLogger, REDACTED_FIELDS } from "./logging.js";
+export { createOutputBuffer } from "./output-buffer.js";
+export { configFilePath, pathsAreOverridden, resolvePaths } from "./paths.js";
+export { indent, renderPretty } from "./pretty.js";
+export { createRenderer, RENDER_FORMATS, } from "./renderer.js";
+export { fieldsOf, projectFields } from "./result-fields.js";
+export { backoffMs, DEFAULT_RETRY, isTransportFailure } from "./retry.js";
+export { singleLine, visibleControls } from "./sanitize.js";
+export { captureStreams, processStreams } from "./streams.js";
+export { abortError, monotonic, realSleep, wallClock, } from "./time.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAE3E,OAAO,EAAE,kBAAkB,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAA;AAClF,OAAO,EAAE,cAAc,EAAuC,MAAM,eAAe,CAAA;AACnF,OAAO,EAAE,QAAQ,EAAwC,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACpG,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAA;AAC1E,OAAO,EAAE,aAAa,EAAqB,aAAa,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA;AAC7F,OAAO,EAEL,cAAc,EAEd,qBAAqB,GACtB,MAAM,mBAAmB,CAAA;AAC1B,OAAO,EAAe,UAAU,EAAE,MAAM,aAAa,CAAA;AACrD,OAAO,EAAE,gBAAgB,EAA2C,eAAe,EAAE,MAAM,cAAc,CAAA;AACzG,OAAO,EAAE,kBAAkB,EAA+C,MAAM,oBAAoB,CAAA;AACpG,OAAO,EAAE,cAAc,EAAiC,kBAAkB,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA;AAC5G,OAAO,EAAE,MAAM,EAAsB,YAAY,EAAE,MAAM,aAAa,CAAA;AACtE,OAAO,EACL,cAAc,EACd,cAAc,GAIf,MAAM,eAAe,CAAA;AACtB,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAC5D,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,kBAAkB,EAAoB,MAAM,YAAY,CAAA;AAC3F,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AAC3D,OAAO,EAAE,cAAc,EAAE,cAAc,EAAgB,MAAM,cAAc,CAAA;AAC3E,OAAO,EACL,UAAU,EAEV,SAAS,EACT,SAAS,EAIT,SAAS,GACV,MAAM,WAAW,CAAA"}

package/dist/keyring.d.ts

@@ -0,0 +1,27 @@
+/**
+ * The one seam through which the OS keychain is reached.
+ *
+ * **What backs it, per platform** — `@napi-rs/keyring` 2.1.0, checked 2026-09-19:
+ * macOS uses the Keychain and Windows the Credential Manager, both part of the OS; Linux and the
+ * BSDs use the Secret Service over D-Bus, which a headless machine, a container, WSL or a CI
+ * runner usually does not have. There is nothing to install either way — the package ships
+ * prebuilt binaries for twelve platform triples including musl, so no Rust toolchain and no
+ * node-gyp — but on Linux **the daemon may simply not be there**, which is why every caller must
+ * handle this throwing. `Credentials` does, by warning once and writing a 0600 file instead.
+ * Injected like `fetch` in core, so
+ * "no test touched the developer's real keychain" is a property of the code rather than a hope
+ * about every test remembering to opt out.
+ */
+export interface KeyringStore {
+    get(service: string, account: string): string | null;
+    set(service: string, account: string, secret: string): void;
+    delete(service: string, account: string): boolean;
+}
+export declare const systemKeyring: KeyringStore;
+/** An in-memory stand-in. Every test uses this; none can reach the real keychain. */
+export declare const memoryKeyring: (initial?: Record<string, string>) => KeyringStore & {
+    entries: Map<string, string>;
+};
+/** Refuses every operation, so the fallback path can be tested. */
+export declare const brokenKeyring: (message?: string) => KeyringStore;
+//# sourceMappingURL=keyring.d.ts.map

package/dist/keyring.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"keyring.d.ts","sourceRoot":"","sources":["../src/keyring.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,YAAY;IAC3B,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAA;IACpD,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3D,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAA;CAClD;AAoBD,eAAO,MAAM,aAAa,EAAE,YAQ3B,CAAA;AAED,qFAAqF;AACrF,eAAO,MAAM,aAAa,aACf,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KAC9B,YAAY,GAAG;IAAE,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAY/C,CAAA;AAED,mEAAmE;AACnE,eAAO,MAAM,aAAa,wBAA8C,YAUtE,CAAA"}

package/dist/keyring.js

@@ -0,0 +1,45 @@
+import { createRequire } from "node:module";
+const require = createRequire(import.meta.url);
+let cached;
+// Loaded on first use, not at import: `@napi-rs/keyring` is a native module, and a machine
+// where its binary is missing must still be able to run in file mode.
+const entryClass = () => {
+    cached ??= require("@napi-rs/keyring").Entry;
+    return cached;
+};
+export const systemKeyring = {
+    // Returns null for an absent entry rather than throwing — measured against @napi-rs/keyring
+    // on 2026-09-13, and the difference matters: a throw here means the keychain is unusable.
+    get: (service, account) => new (entryClass())(service, account).getPassword(),
+    set: (service, account, secret) => {
+        ;
+        new (entryClass())(service, account).setPassword(secret);
+    },
+    delete: (service, account) => new (entryClass())(service, account).deletePassword(),
+};
+/** An in-memory stand-in. Every test uses this; none can reach the real keychain. */
+export const memoryKeyring = (initial = {}) => {
+    const entries = new Map(Object.entries(initial));
+    const key = (service, account) => `${service}:${account}`;
+    return {
+        entries,
+        get: (service, account) => entries.get(key(service, account)) ?? null,
+        set: (service, account, secret) => {
+            entries.set(key(service, account), secret);
+        },
+        delete: (service, account) => entries.delete(key(service, account)),
+    };
+};
+/** Refuses every operation, so the fallback path can be tested. */
+export const brokenKeyring = (message = "no secret service available") => ({
+    get: () => {
+        throw new Error(message);
+    },
+    set: () => {
+        throw new Error(message);
+    },
+    delete: () => {
+        throw new Error(message);
+    },
+});
+//# sourceMappingURL=keyring.js.map

package/dist/keyring.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"keyring.js","sourceRoot":"","sources":["../src/keyring.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AA8B3C,MAAM,OAAO,GAAG,aAAa,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAA;AAC9C,IAAI,MAAoC,CAAA;AAExC,2FAA2F;AAC3F,sEAAsE;AACtE,MAAM,UAAU,GAAG,GAAqB,EAAE;IACxC,MAAM,KAAM,OAAO,CAAC,kBAAkB,CAAiC,CAAC,KAAK,CAAA;IAC7E,OAAO,MAAM,CAAA;AACf,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,aAAa,GAAiB;IACzC,4FAA4F;IAC5F,0FAA0F;IAC1F,GAAG,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,WAAW,EAAE;IAC7E,GAAG,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE;QAChC,CAAC;QAAA,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,CAAA;IAC3D,CAAC;IACD,MAAM,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,cAAc,EAAE;CACpF,CAAA;AAED,qFAAqF;AACrF,MAAM,CAAC,MAAM,aAAa,GAAG,CAC3B,OAAO,GAA2B,EAAE,EACa,EAAE;IACnD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAA;IAChD,MAAM,GAAG,GAAG,CAAC,OAAe,EAAE,OAAe,EAAE,EAAE,CAAC,GAAG,OAAO,IAAI,OAAO,EAAE,CAAA;IAEzE,OAAO;QACL,OAAO;QACP,GAAG,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,IAAI,IAAI;QACrE,GAAG,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE;YAChC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,CAAA;QAC5C,CAAC;QACD,MAAM,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;KACpE,CAAA;AACH,CAAC,CAAA;AAED,mEAAmE;AACnE,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,OAAO,GAAG,6BAA6B,EAAgB,EAAE,CAAC,CAAC;IACvF,GAAG,EAAE,GAAG,EAAE;QACR,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAA;IAC1B,CAAC;IACD,GAAG,EAAE,GAAG,EAAE;QACR,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAA;IAC1B,CAAC;IACD,MAAM,EAAE,GAAG,EAAE;QACX,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAA;IAC1B,CAAC;CACF,CAAC,CAAA"}

package/dist/legacy-paths.d.ts

@@ -0,0 +1,33 @@
+import { type Paths, type PathsOptions } from "./paths.js";
+export interface LegacyMove {
+    kind: keyof Paths;
+    from: string;
+    to: string;
+    /** Copied across file systems rather than renamed: the old folder is still there. */
+    copied: boolean;
+}
+export interface MigrateLegacyPathsOptions extends PathsOptions {
+    rename?: (from: string, to: string) => void;
+    /** The processes, as text, that hold files under `dirs` open; empty when none does. Defaults to lsof. */
+    holders?: (dirs: string[]) => string[];
+}
+/** Where `env-paths` put each directory on macOS, before this package switched to XDG there. */
+export declare const legacyMacPaths: (appName: string, env?: NodeJS.ProcessEnv) => Paths;
+declare const runLsof: (args: string[]) => string;
+/**
+ * Only files open right now: a file written by path and closed again, like a lock or a journal,
+ * is invisible here, so a caller that knows its own lock files should add them through `holders`.
+ */
+export declare const lsofHolders: (dirs: string[], run?: typeof runLsof) => string[];
+/**
+ * Moves the folders an earlier release kept under `~/Library` to the XDG ones `resolvePaths` now
+ * gives on macOS. Call it once at program start, before anything resolves a path — a write that
+ * creates the new folder first would leave the old data behind for good.
+ *
+ * It moves all pending folders or none, and throws when `holders` (lsof by default) shows a file
+ * open in any of them: a running `serve` keeps writing into the folder it opened, and data it
+ * writes after the move is lost. Cheap when there is nothing to do: one `lstat` per folder.
+ */
+export declare const migrateLegacyMacPaths: (options: MigrateLegacyPathsOptions) => LegacyMove[];
+export {};
+//# sourceMappingURL=legacy-paths.d.ts.map

package/dist/legacy-paths.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"legacy-paths.d.ts","sourceRoot":"","sources":["../src/legacy-paths.ts"],"names":[],"mappings":"AAKA,OAAO,EAAc,KAAK,KAAK,EAAE,KAAK,YAAY,EAAoC,MAAM,YAAY,CAAA;AAExG,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,KAAK,CAAA;IACjB,IAAI,EAAE,MAAM,CAAA;IACZ,EAAE,EAAE,MAAM,CAAA;IACV,qFAAqF;IACrF,MAAM,EAAE,OAAO,CAAA;CAChB;AAED,MAAM,WAAW,yBAA0B,SAAQ,YAAY;IAC7D,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,KAAK,IAAI,CAAA;IAC3C,yGAAyG;IACzG,OAAO,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,MAAM,EAAE,CAAA;CACvC;AAED,gGAAgG;AAChG,eAAO,MAAM,cAAc,YAAa,MAAM,QAAO,MAAM,CAAC,UAAU,KAAiB,KAOtF,CAAA;AAkBD,QAAA,MAAM,OAAO,SAAU,MAAM,EAAE,WAAmF,CAAA;AAElH;;;GAGG;AACH,eAAO,MAAM,WAAW,SAAU,MAAM,EAAE,2BAAkB,MAAM,EAoB9D,CAAA;AAiCJ;;;;;;;;GAQG;AACH,eAAO,MAAM,qBAAqB,YAAa,yBAAyB,KAAG,UAAU,EAmDpF,CAAA"}

package/dist/legacy-paths.js

@@ -0,0 +1,128 @@
+import { execFileSync } from "node:child_process";
+import { cpSync, lstatSync, mkdirSync, readdirSync, renameSync, rmSync } from "node:fs";
+import { homedir } from "node:os";
+import { dirname, join, relative } from "node:path";
+import { CliError } from "./errors.js";
+import { PATH_KINDS, pathsAreOverridden, resolvePaths } from "./paths.js";
+/** Where `env-paths` put each directory on macOS, before this package switched to XDG there. */
+export const legacyMacPaths = (appName, env = process.env) => {
+    const library = join(env.HOME || homedir(), "Library");
+    return {
+        config: join(library, "Preferences", appName),
+        state: join(library, "Application Support", appName),
+        cache: join(library, "Caches", appName),
+    };
+};
+const kindOf = (path) => {
+    try {
+        return lstatSync(path).isDirectory() ? "dir" : "other";
+    }
+    catch {
+        return "none";
+    }
+};
+const isFreeTarget = (path) => {
+    const kind = kindOf(path);
+    return kind === "none" || (kind === "dir" && readdirSync(path).length === 0);
+};
+// An absolute path: an MCP host may start the CLI with a PATH that has no /usr/sbin.
+const LSOF = "/usr/sbin/lsof";
+const runLsof = (args) => execFileSync(LSOF, args, { encoding: "utf8", timeout: 30_000, stdio: "pipe" });
+/**
+ * Only files open right now: a file written by path and closed again, like a lock or a journal,
+ * is invisible here, so a caller that knows its own lock files should add them through `holders`.
+ */
+export const lsofHolders = (dirs, run = runLsof) => dirs.flatMap((dir) => {
+    let listed;
+    try {
+        listed = run(["-t", "+D", dir]);
+    }
+    catch (error) {
+        // lsof exits 1 both when nothing is open and when it hit a warning; the PIDs are on stdout either way.
+        const failure = error;
+        if (failure.status !== 1)
+            throw new CliError("configuration_error", `could not check whether a process has files open in ${dir}, so nothing was moved: ${failure.message}. ` +
+                `Run \`lsof +D "${dir}"\`, stop what it lists, and run the command again.`);
+        listed = failure.stdout ?? "";
+    }
+    return listed
+        .split("\n")
+        .filter((pid) => pid && pid !== String(process.pid))
+        .map((pid) => `pid ${pid} (${dir})`);
+});
+const listTree = (root) => readdirSync(root, { recursive: true, withFileTypes: true })
+    .map((entry) => {
+    const path = join(entry.parentPath, entry.name);
+    const stat = lstatSync(path);
+    return `${relative(root, path)}:${stat.isDirectory() ? "dir" : stat.size}`;
+})
+    .sort();
+/**
+ * A copy goes to a sibling first and is renamed in only once checked: a half-written folder at
+ * the new path would read as "already migrated" on the next start and hide the old data for good.
+ */
+const copyInto = (from, to) => {
+    const draft = `${to}.migrating-${process.pid}`;
+    try {
+        cpSync(from, draft, { recursive: true, preserveTimestamps: true, verbatimSymlinks: true, errorOnExist: true });
+        if (listTree(from).join("\n") !== listTree(draft).join("\n"))
+            throw new Error("the copy differs from the original");
+        renameSync(draft, to);
+    }
+    catch (error) {
+        rmSync(draft, { recursive: true, force: true });
+        throw new CliError("configuration_error", `could not copy ${from} to ${to}, nothing moved: ${error.message}`);
+    }
+};
+// Two CLIs starting together can race for the same folder, e.g. the shared store under cli-messaging.
+const movedByAnother = (from, to) => kindOf(from) === "none" || !isFreeTarget(to);
+/**
+ * Moves the folders an earlier release kept under `~/Library` to the XDG ones `resolvePaths` now
+ * gives on macOS. Call it once at program start, before anything resolves a path — a write that
+ * creates the new folder first would leave the old data behind for good.
+ *
+ * It moves all pending folders or none, and throws when `holders` (lsof by default) shows a file
+ * open in any of them: a running `serve` keeps writing into the folder it opened, and data it
+ * writes after the move is lost. Cheap when there is nothing to do: one `lstat` per folder.
+ */
+export const migrateLegacyMacPaths = (options) => {
+    const { appName, env = process.env, platform = process.platform, rename = renameSync, holders = lsofHolders, } = options;
+    if (platform !== "darwin" || pathsAreOverridden(options))
+        return [];
+    const legacy = legacyMacPaths(appName, env);
+    const current = resolvePaths({ ...options, env, platform });
+    const pending = PATH_KINDS.filter((kind) => legacy[kind] !== current[kind] &&
+        kindOf(legacy[kind]) === "dir" &&
+        readdirSync(legacy[kind]).length > 0 &&
+        isFreeTarget(current[kind]));
+    if (pending.length === 0)
+        return [];
+    const busy = holders(pending.map((kind) => legacy[kind]));
+    if (busy.length > 0)
+        throw new CliError("configuration_error", `${appName} now keeps its files outside ~/Library and must move ${pending.map((kind) => legacy[kind]).join(", ")} ` +
+            `to ${pending.map((kind) => current[kind]).join(", ")}, but another process has files there open ` +
+            `(${busy.join(", ")}). Stop it — a running \`serve\` or MCP server — and run the command again.`, { busy });
+    const moves = [];
+    for (const kind of pending) {
+        const from = legacy[kind];
+        const to = current[kind];
+        mkdirSync(dirname(to), { recursive: true });
+        try {
+            rename(from, to);
+            moves.push({ kind, from, to, copied: false });
+        }
+        catch (error) {
+            if (error.code === "EXDEV") {
+                copyInto(from, to);
+                moves.push({ kind, from, to, copied: true });
+            }
+            else if (!movedByAnother(from, to)) {
+                throw new CliError("configuration_error", `could not move ${from} to ${to}: ${error.message}`, {
+                    moved: moves,
+                });
+            }
+        }
+    }
+    return moves;
+};
+//# sourceMappingURL=legacy-paths.js.map

package/dist/legacy-paths.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"legacy-paths.js","sourceRoot":"","sources":["../src/legacy-paths.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AACjD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,SAAS,CAAA;AACvF,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACjC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAA;AACnD,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAA;AACtC,OAAO,EAAE,UAAU,EAAiC,kBAAkB,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA;AAgBxG,gGAAgG;AAChG,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,OAAe,EAAE,GAAG,GAAsB,OAAO,CAAC,GAAG,EAAS,EAAE;IAC7F,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,OAAO,EAAE,EAAE,SAAS,CAAC,CAAA;IACtD,OAAO;QACL,MAAM,EAAE,IAAI,CAAC,OAAO,EAAE,aAAa,EAAE,OAAO,CAAC;QAC7C,KAAK,EAAE,IAAI,CAAC,OAAO,EAAE,qBAAqB,EAAE,OAAO,CAAC;QACpD,KAAK,EAAE,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC;KACxC,CAAA;AACH,CAAC,CAAA;AAED,MAAM,MAAM,GAAG,CAAC,IAAY,EAAE,EAAE;IAC9B,IAAI,CAAC;QACH,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAA;IACxD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,MAAM,CAAA;IACf,CAAC;AACH,CAAC,CAAA;AAED,MAAM,YAAY,GAAG,CAAC,IAAY,EAAE,EAAE;IACpC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAA;IACzB,OAAO,IAAI,KAAK,MAAM,IAAI,CAAC,IAAI,KAAK,KAAK,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAA;AAC9E,CAAC,CAAA;AAED,qFAAqF;AACrF,MAAM,IAAI,GAAG,gBAAgB,CAAA;AAE7B,MAAM,OAAO,GAAG,CAAC,IAAc,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAA;AAElH;;;GAGG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,IAAc,EAAE,GAAG,GAAG,OAAO,EAAY,EAAE,CACrE,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE;IACnB,IAAI,MAAc,CAAA;IAClB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,CAAA;IACjC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,uGAAuG;QACvG,MAAM,OAAO,GAAG,KAA8D,CAAA;QAC9E,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YACtB,MAAM,IAAI,QAAQ,CAChB,qBAAqB,EACrB,uDAAuD,GAAG,2BAA2B,OAAO,CAAC,OAAO,IAAI;gBACtG,kBAAkB,GAAG,qDAAqD,CAC7E,CAAA;QACH,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,EAAE,CAAA;IAC/B,CAAC;IACD,OAAO,MAAM;SACV,KAAK,CAAC,IAAI,CAAC;SACX,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,IAAI,GAAG,KAAK,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;SACnD,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,GAAG,KAAK,GAAG,GAAG,CAAC,CAAA;AACxC,CAAC,CAAC,CAAA;AAEJ,MAAM,QAAQ,GAAG,CAAC,IAAY,EAAY,EAAE,CAC1C,WAAW,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;KACxD,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;IACb,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,CAAA;IAC/C,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAA;IAC5B,OAAO,GAAG,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAA;AAC5E,CAAC,CAAC;KACD,IAAI,EAAE,CAAA;AAEX;;;GAGG;AACH,MAAM,QAAQ,GAAG,CAAC,IAAY,EAAE,EAAU,EAAE,EAAE;IAC5C,MAAM,KAAK,GAAG,GAAG,EAAE,cAAc,OAAO,CAAC,GAAG,EAAE,CAAA;IAC9C,IAAI,CAAC;QACH,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,kBAAkB,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAA;QAC9G,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,QAAQ,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAA;QACnH,UAAU,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;IACvB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;QAC/C,MAAM,IAAI,QAAQ,CAChB,qBAAqB,EACrB,kBAAkB,IAAI,OAAO,EAAE,oBAAqB,KAAe,CAAC,OAAO,EAAE,CAC9E,CAAA;IACH,CAAC;AACH,CAAC,CAAA;AAED,sGAAsG;AACtG,MAAM,cAAc,GAAG,CAAC,IAAY,EAAE,EAAU,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,MAAM,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC,CAAA;AAEjG;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,OAAkC,EAAgB,EAAE;IACxF,MAAM,EACJ,OAAO,EACP,GAAG,GAAG,OAAO,CAAC,GAAG,EACjB,QAAQ,GAAG,OAAO,CAAC,QAAQ,EAC3B,MAAM,GAAG,UAAU,EACnB,OAAO,GAAG,WAAW,GACtB,GAAG,OAAO,CAAA;IACX,IAAI,QAAQ,KAAK,QAAQ,IAAI,kBAAkB,CAAC,OAAO,CAAC;QAAE,OAAO,EAAE,CAAA;IAEnE,MAAM,MAAM,GAAG,cAAc,CAAC,OAAO,EAAE,GAAG,CAAC,CAAA;IAC3C,MAAM,OAAO,GAAG,YAAY,CAAC,EAAE,GAAG,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAA;IAC3D,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,CAC/B,CAAC,IAAI,EAAE,EAAE,CACP,MAAM,CAAC,IAAI,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC;QAC9B,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,KAAK;QAC9B,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC;QACpC,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAC9B,CAAA;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAA;IAEnC,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACzD,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;QACjB,MAAM,IAAI,QAAQ,CAChB,qBAAqB,EACrB,GAAG,OAAO,wDAAwD,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;YACjH,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,6CAA6C;YAClG,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,6EAA6E,EAClG,EAAE,IAAI,EAAE,CACT,CAAA;IAEH,MAAM,KAAK,GAAiB,EAAE,CAAA;IAC9B,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAA;QACzB,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;QACxB,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QAC3C,IAAI,CAAC;YACH,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAA;YAChB,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAA;QAC/C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;gBACtD,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,CAAA;gBAClB,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;YAC9C,CAAC;iBAAM,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC;gBACrC,MAAM,IAAI,QAAQ,CAAC,qBAAqB,EAAE,kBAAkB,IAAI,OAAO,EAAE,KAAM,KAAe,CAAC,OAAO,EAAE,EAAE;oBACxG,KAAK,EAAE,KAAK;iBACb,CAAC,CAAA;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC,CAAA"}

package/dist/logger.d.ts

@@ -0,0 +1,12 @@
+/**
+ * The only logging contract core knows about. The CLI adapts Pino to it; a Worker can pass
+ * its own. Core never imports a logging library — see docs/dev/ARCHITECTURE.md.
+ */
+export interface Logger {
+    debug(event: object, message?: string): void;
+    info(event: object, message?: string): void;
+    warn(event: object, message?: string): void;
+    error(event: object, message?: string): void;
+}
+export declare const noopLogger: Logger;
+//# sourceMappingURL=logger.d.ts.map

package/dist/logger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.d.ts","sourceRoot":"","sources":["../src/logger.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,MAAM,WAAW,MAAM;IACrB,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC5C,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3C,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3C,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAC7C;AAED,eAAO,MAAM,UAAU,EAAE,MAKxB,CAAA"}

package/dist/logger.js

@@ -0,0 +1,7 @@
+export const noopLogger = {
+    debug: () => { },
+    info: () => { },
+    warn: () => { },
+    error: () => { },
+};
+//# sourceMappingURL=logger.js.map

package/dist/logger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.js","sourceRoot":"","sources":["../src/logger.ts"],"names":[],"mappings":"AAWA,MAAM,CAAC,MAAM,UAAU,GAAW;IAChC,KAAK,EAAE,GAAG,EAAE,GAAE,CAAC;IACf,IAAI,EAAE,GAAG,EAAE,GAAE,CAAC;IACd,IAAI,EAAE,GAAG,EAAE,GAAE,CAAC;IACd,KAAK,EAAE,GAAG,EAAE,GAAE,CAAC;CAChB,CAAA"}

package/dist/logging.d.ts

@@ -0,0 +1,31 @@
+import type { Logger } from "./logger.js";
+/**
+ * Field names whose value must never reach a log file. This is the **second** line of defence, not
+ * the first: a secret should not be handed to a logger at all. Redaction catches the one that
+ * slipped into a nested object nobody thought about.
+ */
+export declare const REDACTED_FIELDS: string[];
+export interface FileLogger extends Logger {
+    /** Must be awaited before the process exits, or the tail of the file is lost. */
+    close(): Promise<void>;
+}
+export interface FileLoggerOptions {
+    /** Where the JSON lines go. Omit for a logger that writes nowhere. */
+    path?: string;
+    level?: string;
+    base?: Record<string, unknown>;
+    /** Added to `REDACTED_FIELDS` — the names only this program knows about. */
+    redact?: string[];
+    /**
+     * Told once when the file cannot be opened or written; every record after that is dropped.
+     * Without it the failure is silent, so a host that promised a log should say it is gone.
+     */
+    onError?: (error: Error) => void;
+}
+/**
+ * Structured records for machines: JSON lines, no ANSI ever, secrets redacted. The terminal is a
+ * different concern and goes through the renderer — a spinner frame must never reach a log file,
+ * and a log record must never reach stdout.
+ */
+export declare const createFileLogger: ({ path, level, base, redact, onError, }?: FileLoggerOptions) => FileLogger;
+//# sourceMappingURL=logging.d.ts.map

package/dist/logging.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"logging.d.ts","sourceRoot":"","sources":["../src/logging.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AAEzC;;;;GAIG;AACH,eAAO,MAAM,eAAe,UAa3B,CAAA;AAED,MAAM,WAAW,UAAW,SAAQ,MAAM;IACxC,iFAAiF;IACjF,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;CACvB;AAED,MAAM,WAAW,iBAAiB;IAChC,sEAAsE;IACtE,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC9B,4EAA4E;IAC5E,MAAM,CAAC,EAAE,MAAM,EAAE,CAAA;IACjB;;;OAGG;IACH,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,CAAA;CACjC;AAED;;;;GAIG;AACH,eAAO,MAAM,gBAAgB,6CAM1B,iBAAiB,KAAQ,UA8B3B,CAAA"}

package/dist/logging.js

@@ -0,0 +1,58 @@
+import { createWriteStream } from "node:fs";
+import { pino } from "pino";
+/**
+ * Field names whose value must never reach a log file. This is the **second** line of defence, not
+ * the first: a secret should not be handed to a logger at all. Redaction catches the one that
+ * slipped into a nested object nobody thought about.
+ */
+export const REDACTED_FIELDS = [
+    "authorization",
+    "Authorization",
+    "apiKey",
+    "api_key",
+    "token",
+    "accessToken",
+    "access_token",
+    "refreshToken",
+    "password",
+    "secret",
+    "verifyCode",
+    "phone",
+];
+/**
+ * Structured records for machines: JSON lines, no ANSI ever, secrets redacted. The terminal is a
+ * different concern and goes through the renderer — a spinner frame must never reach a log file,
+ * and a log record must never reach stdout.
+ */
+export const createFileLogger = ({ path, level = "info", base = {}, redact = [], onError = () => { }, } = {}) => {
+    if (!path)
+        return { ...silent, close: async () => { } };
+    // A plain append stream, not a worker transport: logging must not need a second process, and
+    // `sync: false` drops the tail of the file when a command exits — which is exactly the failure
+    // the log exists to explain.
+    const file = createWriteStream(path, { flags: "a" });
+    // The open is asynchronous, so a directory removed a moment ago surfaces here as an `error`
+    // event — and one with no listener kills the process the log was only meant to describe.
+    file.on("error", onError);
+    const fields = [...new Set([...REDACTED_FIELDS, ...redact])];
+    const paths = fields.flatMap((field) => [field, `*.${field}`, `*.*.${field}`]);
+    const logger = pino({ level, base, redact: { paths, censor: "[redacted]" }, timestamp: pino.stdTimeFunctions.isoTime }, file);
+    return {
+        debug: (event, message) => logger.debug(event, message),
+        info: (event, message) => logger.info(event, message),
+        warn: (event, message) => logger.warn(event, message),
+        error: (event, message) => logger.error(event, message),
+        close: () => new Promise((resolve) => {
+            file.end(() => {
+                resolve();
+            });
+        }),
+    };
+};
+const silent = {
+    debug: () => { },
+    info: () => { },
+    warn: () => { },
+    error: () => { },
+};
+//# sourceMappingURL=logging.js.map

package/dist/logging.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logging.js","sourceRoot":"","sources":["../src/logging.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAA;AAC3C,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAG3B;;;;GAIG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,eAAe;IACf,eAAe;IACf,QAAQ;IACR,SAAS;IACT,OAAO;IACP,aAAa;IACb,cAAc;IACd,cAAc;IACd,UAAU;IACV,QAAQ;IACR,YAAY;IACZ,OAAO;CACR,CAAA;AAqBD;;;;GAIG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,EAC/B,IAAI,EACJ,KAAK,GAAG,MAAM,EACd,IAAI,GAAG,EAAE,EACT,MAAM,GAAG,EAAE,EACX,OAAO,GAAG,GAAG,EAAE,GAAE,CAAC,GACnB,GAAsB,EAAE,EAAc,EAAE;IACvC,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC,EAAE,CAAA;IAEtD,6FAA6F;IAC7F,+FAA+F;IAC/F,6BAA6B;IAC7B,MAAM,IAAI,GAAG,iBAAiB,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAA;IACpD,4FAA4F;IAC5F,yFAAyF;IACzF,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;IACzB,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,eAAe,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,CAAA;IAC5D,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,KAAK,KAAK,EAAE,EAAE,OAAO,KAAK,EAAE,CAAC,CAAC,CAAA;IAE9E,MAAM,MAAM,GAAG,IAAI,CACjB,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,EAClG,IAAI,CACL,CAAA;IAED,OAAO;QACL,KAAK,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,OAAO,CAAC;QACvD,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC;QACrD,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC;QACrD,KAAK,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,OAAO,CAAC;QACvD,KAAK,EAAE,GAAG,EAAE,CACV,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;YAC5B,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE;gBACZ,OAAO,EAAE,CAAA;YACX,CAAC,CAAC,CAAA;QACJ,CAAC,CAAC;KACL,CAAA;AACH,CAAC,CAAA;AAED,MAAM,MAAM,GAAW;IACrB,KAAK,EAAE,GAAG,EAAE,GAAE,CAAC;IACf,IAAI,EAAE,GAAG,EAAE,GAAE,CAAC;IACd,IAAI,EAAE,GAAG,EAAE,GAAE,CAAC;IACd,KAAK,EAAE,GAAG,EAAE,GAAE,CAAC;CAChB,CAAA"}