@withandeo/cli 0.9.0

package/README.md

@@ -0,0 +1,383 @@
+# `@withandeo/cli`
+
+Developer CLI for merchant-owned customer-account applications on Andeo.
+
+The package exposes `andeo`. It runs the validation and packaging commands committed by your repository, verifies the resulting portable artifact, and creates exact previews for review. Your application keeps its own framework, architecture, commerce integrations, and source repository.
+
+The legacy `@tenderprompt/accounts` package retains the `tender-accounts`
+command. Existing links and login profiles keep their API origin; new Andeo
+logins default to `https://agents.withandeo.com`. No credential is transferred
+between origins automatically. `ANDEO_*` environment names are supported
+alongside `TENDER_ACCOUNTS_*`; conflicting values fail closed.
+
+`andeo.json` is also accepted as the project config filename. Keep the existing
+schema and artifact paths during migration. If both config filenames exist,
+their parsed contents must agree. Maintainers can find the full rollout in
+`docs/runbooks/ANDEO_MIGRATION.md` in the platform repository.
+
+## Requirements
+
+- Node.js 22 or newer
+- an Andeo project
+- an Andeo identity with developer access to the project you are changing
+
+## Install
+
+Install the public package as a development dependency:
+
+```sh
+npm install --save-dev @withandeo/cli
+```
+
+Verify the installation:
+
+```sh
+npx @withandeo/cli --version
+npx @withandeo/cli --help
+```
+
+## Start from the template
+
+The optional starter creates a merchant-owned two-service repository: a stable Shopify authentication gateway and an independently deployable React portal connected through `PORTAL_UI`.
+
+Inspect the plan first, then create the project in an empty directory:
+
+```sh
+npx @withandeo/cli init --name "Acme customer account" --directory ./acme-account --dry-run --json
+npx @withandeo/cli init --name "Acme customer account" --directory ./acme-account --json
+```
+
+The starter includes:
+
+- Shopify Customer Account authentication with S256 PKCE;
+- secure, exact-host shopper sessions;
+- a React portal that receives shopper data through the gateway without holding confidential credentials;
+- local development configuration and an explicit signed-out development state;
+- independent `tender-accounts.json` contracts for the gateway and portal;
+- immutable artifact packers, checks, `AGENTS.md`, and the bundled Andeo agent skill.
+
+The starter does not install dependencies, initialize Git, link an Andeo project, contact Andeo, or write credentials. Existing applications do not need to use it.
+
+## Connect an existing application
+
+Commit `tender-accounts.json` at the root of each independently deployable application:
+
+```json
+{
+  "schema": "tender.accounts-cli/v1",
+  "commands": {
+    "dev": "npm run dev",
+    "check": "npm run check",
+    "package": "npm run pack:tender"
+  },
+  "artifactDirectory": ".tender/artifacts/current",
+  "returnPath": "/account"
+}
+```
+
+The commands remain yours:
+
+- `dev` starts the repository's normal local development environment;
+- `check` runs the checks that must pass before delivery;
+- `package` writes the portable Andeo artifact to `artifactDirectory`.
+
+Run `npx @withandeo/cli config example --json` to print the current contract.
+
+## Authenticate and link the checkout
+
+For a normal terminal, sign in through Andeo. Give each merchant or work context a short profile name. The CLI opens a browser, uses Authorization Code with S256 PKCE, and asks you to select one organization and the exact apps this profile may preview:
+
+```sh
+npx @withandeo/cli auth create acme
+```
+
+For a coding agent or headless terminal, start a device authorization instead:
+
+```sh
+npx @withandeo/cli auth create acme --device --no-open --json
+```
+
+Open the returned URL, approve the organization and apps, then exchange the same pending request:
+
+```sh
+npx @withandeo/cli auth status --profile acme --json
+```
+
+The returned pending result includes the exact profile-aware `auth status` command to run after approval. Refreshable profiles are stored in one private mode-0600 user file outside the repository. Set `TENDER_ACCOUNTS_AUTH_FILE` to choose another private location. Access tokens last 15 minutes and rotate from a 30-day login; changing the human's project access takes effect on the next refresh or request authorization check.
+
+When an agent already knows the exact project, use that project ID as a stable profile name and authorization hint:
+
+```sh
+npx @withandeo/cli auth create prj_... --device --project prj_... --no-open --json
+```
+
+List local profiles without exposing their credentials:
+
+```sh
+npx @withandeo/cli auth list --json
+```
+
+Activate the profile for this directory tree, validate it, then link the checkout:
+
+```sh
+npx @withandeo/cli auth activate acme
+npx @withandeo/cli auth status --profile acme --json
+npx @withandeo/cli link --json
+npx @withandeo/cli doctor --json
+```
+
+The activation applies to this directory and all descendants; a closer child activation wins. It is stored outside the repository, so another terminal can work in a different merchant tree at the same time without changing this one. Set `TENDER_ACCOUNTS_PROFILE_BINDINGS_FILE` only when a controlled environment needs another private machine-local binding file. The link stores only the API origin and exact project ID, which remains a fail-closed target guard; a link containing `authProfile` is rejected because repository content cannot select a local identity. For one command, set `TENDER_ACCOUNTS_PROFILE=acme` or pass `--profile acme`. If named profiles exist but neither a directory activation nor the default profile selects one, the CLI fails closed instead of guessing.
+
+If the credential can access more than one project, select the intended project explicitly:
+
+```sh
+npx @withandeo/cli link --project prj_... --json
+```
+
+CI may still supply an explicitly issued `TENDER_ACCOUNTS_TOKEN` from its protected secret store or over standard input:
+
+```sh
+printf '%s' "$TENDER_ACCOUNTS_TOKEN" | npx @withandeo/cli auth status --token-stdin --json
+```
+
+Revoke the stored login when the machine should no longer have access:
+
+```sh
+npx @withandeo/cli auth delete acme --json
+```
+
+`auth create` replaces only the named profile; `auth login --force` replaces only the default. `auth delete` removes one named profile and its directory activations. Removing every profile requires the explicit `auth logout --all` command. Refresh, replacement, and deletion use a per-profile compare-and-swap so a late refresh cannot recreate a profile after logout. Concurrent commands may reuse a winning refresh rotation only when the stored tenant, user, and exact project grants are unchanged; a real login/logout/profile race still fails closed as `auth_profile_changed` and revokes any losing newly issued session.
+
+## Use Andeo-managed Git
+
+Managed Git is available to every linked deployable project, including a
+protected account gateway and an independently editable service. Connect it
+from the app directory after authentication and linking:
+
+```sh
+npx @withandeo/cli source connect --publication preview-only --json
+npx @withandeo/cli source status --json
+```
+
+If the repository is already connected but the developer starts in an empty
+workspace, authenticate to the exact project and let the CLI discover, clone,
+and link it:
+
+```sh
+npx @withandeo/cli source status --project prj_... --json
+npx @withandeo/cli source pull --project prj_... --dry-run --json
+npx @withandeo/cli source pull --project prj_... --json
+```
+
+The same `source pull` command fast-forwards an existing clean checkout when
+one of its remotes exactly matches the connected managed repository. It refuses
+dirty, detached, mismatched, paused, and non-empty non-Git workspaces. The
+repository credential is scoped to that one project, lives for 15 minutes, and
+is passed only to the Git child process; the remote URL and local link contain
+no credential. Merchant-hosted Git repositories remain merchant-owned and must
+be opened through their own Git provider before `andeo link`.
+
+The CLI derives the working directory, validation command, package command,
+and portable artifact path from this checkout and `tender-accounts.json`. It
+adds a token-free `tender` Git remote by default. In a monorepo, run the command
+with the same `--cwd` used for `doctor` and `preview`.
+
+Push the current committed revision without storing a repository credential:
+
+```sh
+npx @withandeo/cli source push --json
+```
+
+For repositories with reviewed changes enabled, `source push` uploads a bounded
+Git bundle through Andeo. The trusted runner verifies the exact commit and
+expected feature-branch ref before applying it; the CLI never receives a write
+credential and the default branch is protected. Repositories that have not yet
+enabled reviewed changes retain the legacy short-lived push credential during
+migration. Uncommitted files are never included. `source token` is read-only:
+
+```sh
+npx @withandeo/cli source token --ttl-seconds 3600 --json
+```
+
+Use the review flow once an administrator enables reviewed changes:
+
+```sh
+npx @withandeo/cli source push --branch feature/account-copy --json
+npx @withandeo/cli source change create \
+  --head feature/account-copy \
+  --title "Update account copy" --json
+npx @withandeo/cli source change list --state open --json
+npx @withandeo/cli source change show --change scr_... --json
+```
+
+Andeo attaches validation, the immutable release, and exact preview to the
+current feature-branch snapshot. A merchant administrator opens that exact
+preview, approves it, and selects **Land in main** in the admin. Approval is
+invalidated if the base or head moves. Landing uses a compare-and-swap
+fast-forward. Landing never publishes directly; the repository's already
+configured default-branch policy may publish the same exact preview only after
+the resulting `main` validation succeeds. Protected gateways remain
+preview-only.
+
+After landing, Andeo safely cleans up the reviewed feature branch in a
+separate durable workflow. Inspect `branchCleanup` in `source change show`:
+
+- `requested` or `running`: landing succeeded and cleanup is still progressing;
+- `succeeded`: the exact landed ref was deleted, or was already absent;
+- `retained`: Andeo kept the ref because it moved or no longer passed a safety
+  invariant;
+- `failed`: the landing remains complete and a merchant administrator can retry
+  cleanup from the Andeo admin until the bounded retry budget is exhausted.
+
+Cleanup never deletes immutable builds, releases, compositions, approvals, or
+audit history, and it never publishes to production. While cleanup owns the
+feature ref, Andeo rejects attempts to reuse it for a new reviewed change or
+make it the default branch.
+
+Inspect the managed repository without cloning it:
+
+```sh
+npx @withandeo/cli source branches --json
+npx @withandeo/cli source log --branch main --limit 20 --json
+npx @withandeo/cli source compare --base main --head feature/account-copy --json
+```
+
+These commands use an ephemeral read-only credential in a temporary Git
+process. They report Andeo's authoritative default branch separately from the
+provider's create-time default and never persist or print the credential.
+
+Before reviewed changes are enabled, a merchant source administrator can use
+the lower-level migration command to promote an already-previewed branch into
+the current default with an exact expected-SHA lease:
+
+```sh
+npx @withandeo/cli source promote \
+  --head feature/account-copy \
+  --expected-current <current-main-sha> \
+  --dry-run --json
+npx @withandeo/cli source promote \
+  --head feature/account-copy \
+  --expected-current <current-main-sha> \
+  --idempotency-key account-copy-v1 --json
+```
+
+`source default set` changes only Andeo's default-branch metadata. The
+exceptional `source history replace` command is for repository migrations: it
+requires the exact repository ID, a successful preview of the proposed head,
+an expected current SHA, and a dry run. Andeo archives the previous target ref
+before an exact compare-and-swap replacement and always suppresses automatic
+production publication for that migration. There is no generic force-push
+command.
+
+```sh
+npx @withandeo/cli source history replace \
+  --head app-only-main \
+  --expected-current <current-main-sha> \
+  --confirm src_... \
+  --dry-run --json
+```
+
+Every source mutation returns a durable `sop_` operation. Inspect it with
+`source operation status`. If a transient provider or runner failure leaves
+that exact operation failed or pending, resume the stored intent by ID; Andeo
+does not ask the caller to reconstruct branches, SHAs, or confirmation values:
+
+```sh
+npx @withandeo/cli source operation status --operation sop_... --json
+npx @withandeo/cli source operation retry --operation sop_... --json
+```
+
+Source administration can create validation, builds, releases, and exact
+previews. It does not directly publish a shopper-facing composition. Protected
+gateways remain preview-only, and multi-repository portal/gateway work is
+reviewed as one exact composition after each repository produces its immutable
+release.
+
+Protected gateways are always preview-only and require a merchant
+administrator to publish a reviewed exact composition. A service repository
+may be connected with `--publication default-branch`; that policy promotes the
+same successful default-branch preview without rebuilding it.
+
+## Develop and preview
+
+Use the same loop locally or from a coding agent:
+
+```sh
+npx @withandeo/cli dev
+npx @withandeo/cli check --json
+npx @withandeo/cli preview --dry-run --json
+npx @withandeo/cli preview --json
+```
+
+`preview --dry-run` runs the repository checks, packages the app, and verifies the complete artifact without uploading it. A normal preview creates an immutable release and returns an exact preview URL. It does not change production.
+
+In a monorepo, target one independently deployable application with `--cwd`:
+
+```sh
+npx @withandeo/cli doctor --cwd apps/portal --json
+npx @withandeo/cli preview --cwd apps/portal --json
+```
+
+One activated profile can serve independently linked descendant apps invoked with `--cwd`, and multiple merchant profiles can coexist safely. Each app has its own explicit `.tender/link.json` containing only its project guard; the machine-local directory binding selects the profile. CI may place one fallback `TENDER_ACCOUNTS_TOKEN` in an ignored Git-root `.dev.vars`, and credential discovery never searches beyond that repository boundary.
+
+## Inspect or retry a delivery
+
+When a preview is still running, inspect it by its `dly_` developer-delivery ID:
+
+```sh
+npx @withandeo/cli delivery status --delivery dly_... --json
+```
+
+Retry a requested or failed delivery idempotently:
+
+```sh
+npx @withandeo/cli delivery retry --delivery dly_... --json
+```
+
+Mint a fresh 15-minute preview session for a completed delivery:
+
+```sh
+npx @withandeo/cli delivery preview --delivery dly_... --return-path /account --json
+```
+
+Do not pass a `dwf_` production workflow ID to these commands. Production workflows are shown separately in Andeo Activity; a merchant administrator can resume a waiting exact publish there without rebuilding or substituting a release.
+
+## Stream runtime logs
+
+Stream the exact preview produced by one completed developer delivery:
+
+```sh
+npx @withandeo/cli tail --delivery dly_... --json
+```
+
+Merchant administrators can stream the current production runtime for the linked project:
+
+```sh
+npx @withandeo/cli tail --production --status error --json
+```
+
+Optional filters include `--status ok,error,canceled`, `--method GET,POST`, `--search TEXT`, and `--sampling-rate 0.25`. A tail session lasts at most 15 minutes and closes on Ctrl+C. JSON mode writes one sanitized event per stdout line; lifecycle messages go to stderr.
+
+Sanitized fetch events include `correlation.rayId`. When the runtime supplies native trace context, JSON output also includes `correlation.traceId` and `correlation.spanId`; human output renders the available values as `ray=`, `trace=`, and `span=`. The current Tail Worker contract guarantees the request Ray ID but does not guarantee trace/span IDs for every event.
+
+Andeo resolves the sealed preview composition or current production composition server-side. The CLI never receives infrastructure account IDs, Worker names, provider credentials, or a provider WebSocket URL. Request headers are omitted, secret-shaped object fields and sensitive query parameters are redacted, events are not persisted by the relay, and session capabilities are stored only as digests. Merchant application logs can still contain sensitive values when application code logs them as unlabelled strings, so do not log credentials or customer data.
+
+## Install the coding-agent skill
+
+The package includes a skill that teaches a fresh Codex or Claude agent how to use the repository contract and preview workflow:
+
+```sh
+npx @withandeo/cli skill install --agent codex --json
+npx @withandeo/cli skill install --agent claude --json
+```
+
+Installation is global for the current user by default: `~/.agents/skills` for Codex and `~/.claude/skills` for Claude. This lets one reviewed skill serve every merchant checkout without committing a machine-specific copy to a repository.
+
+Use `--force` only when you intentionally want to replace an installed copy.
+Use `--directory PATH` only when you explicitly need a custom or repository-local destination.
+
+## Production delivery
+
+The developer CLI intentionally has no production publish command. Developer credentials can prepare and preview changes, while production publication remains controlled by the merchant's connected default-branch workflow or an authorized administrator in Andeo.
+
+Run `npx @withandeo/cli <command> --help` for the layered command reference and `--json` for machine-readable output.

package/dist/andeo-environment.d.ts

@@ -0,0 +1,2 @@
+export declare function normalizeAndeoEnvironment(environment: NodeJS.ProcessEnv): NodeJS.ProcessEnv;
+//# sourceMappingURL=andeo-environment.d.ts.map

package/dist/andeo-environment.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"andeo-environment.d.ts","sourceRoot":"","sources":["../src/andeo-environment.ts"],"names":[],"mappings":"AAIA,wBAAgB,yBAAyB,CAAC,WAAW,EAAE,MAAM,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAW3F"}

package/dist/andeo-environment.js

@@ -0,0 +1,17 @@
+import { CliError } from "./errors.js";
+// Normalize at the CLI boundary so every command, including profile management,
+// sees the same credential precedence. Never silently choose between credentials.
+export function normalizeAndeoEnvironment(environment) {
+    const normalized = { ...environment };
+    for (const suffix of ["TOKEN", "API_URL", "PROFILE", "AUTH_FILE", "PROFILE_BINDINGS_FILE"]) {
+        const current = environment[`ANDEO_${suffix}`];
+        const legacy = environment[`TENDER_ACCOUNTS_${suffix}`];
+        if (current !== undefined && legacy !== undefined && current !== legacy) {
+            throw new CliError("environment_conflict", `ANDEO_${suffix} and TENDER_ACCOUNTS_${suffix} disagree. Set only one.`);
+        }
+        if (current !== undefined)
+            normalized[`TENDER_ACCOUNTS_${suffix}`] = current;
+    }
+    return normalized;
+}
+//# sourceMappingURL=andeo-environment.js.map

package/dist/andeo-environment.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"andeo-environment.js","sourceRoot":"","sources":["../src/andeo-environment.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAEvC,gFAAgF;AAChF,kFAAkF;AAClF,MAAM,UAAU,yBAAyB,CAAC,WAA8B;IACtE,MAAM,UAAU,GAAG,EAAE,GAAG,WAAW,EAAE,CAAC;IACtC,KAAK,MAAM,MAAM,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,uBAAuB,CAAC,EAAE,CAAC;QAC3F,MAAM,OAAO,GAAG,WAAW,CAAC,SAAS,MAAM,EAAE,CAAC,CAAC;QAC/C,MAAM,MAAM,GAAG,WAAW,CAAC,mBAAmB,MAAM,EAAE,CAAC,CAAC;QACxD,IAAI,OAAO,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;YACxE,MAAM,IAAI,QAAQ,CAAC,sBAAsB,EAAE,SAAS,MAAM,wBAAwB,MAAM,0BAA0B,CAAC,CAAC;QACtH,CAAC;QACD,IAAI,OAAO,KAAK,SAAS;YAAE,UAAU,CAAC,mBAAmB,MAAM,EAAE,CAAC,GAAG,OAAO,CAAC;IAC/E,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC"}

package/dist/api.d.ts

@@ -0,0 +1,109 @@
+import type { AgentPrincipal, ArtifactSubmissionResponse, DeveloperDeliveryResponse, ManagedSourceRepositoryResponse, ManagedSourceChangeRequestResponse, ManagedSourceOperationResponse, ManagedSourcePushResponse, ManagedSourceTokenResponse, RuntimeLogSessionResponse } from "./contracts.js";
+export declare class AgentApiClient {
+    private readonly baseUrl;
+    private readonly token;
+    private readonly fetcher;
+    constructor(baseUrl: string, token: string, fetcher?: typeof fetch);
+    whoami(): Promise<AgentPrincipal>;
+    sourceRepository(projectId: string): Promise<{
+        repository: ManagedSourceRepositoryResponse | null;
+    }>;
+    connectSourceRepository(projectId: string, input: {
+        repoName: string;
+        defaultBranch: string;
+        installCommand: string;
+        validateCommand: string;
+        buildCommand: string;
+        workingDirectory: string;
+        artifactLatestPath: string;
+        autoPublishDefaultBranch: boolean;
+    }): Promise<{
+        repository: ManagedSourceRepositoryResponse;
+    }>;
+    sourceToken(repositoryId: string, ttlSeconds: number, scope?: "read" | "write"): Promise<ManagedSourceTokenResponse>;
+    createSourcePush(repositoryId: string, input: {
+        idempotencyKey: string;
+        branch: string;
+        expectedCurrentSha: string | null;
+        sourceRevision: string;
+        bundleSha256: string;
+        bundleBytes: number;
+    }): Promise<{
+        created: boolean;
+        push: ManagedSourcePushResponse;
+    }>;
+    uploadSourceBundle(submissionId: string, bytes: Uint8Array): Promise<{
+        push: ManagedSourcePushResponse;
+    }>;
+    sourcePush(submissionId: string): Promise<{
+        push: ManagedSourcePushResponse;
+    }>;
+    createSourceChangeRequest(repositoryId: string, input: {
+        title: string;
+        description: string;
+        baseBranch: string;
+        headBranch: string;
+        baseSha: string;
+        headSha: string;
+    }): Promise<{
+        created: boolean;
+        changeRequest: ManagedSourceChangeRequestResponse;
+    }>;
+    sourceChangeRequests(repositoryId: string, state?: "open" | "closed" | "all"): Promise<{
+        changeRequests: ManagedSourceChangeRequestResponse[];
+    }>;
+    sourceChangeRequest(changeRequestId: string): Promise<{
+        changeRequest: ManagedSourceChangeRequestResponse;
+    }>;
+    closeSourceChangeRequest(changeRequestId: string): Promise<{
+        changeRequest: ManagedSourceChangeRequestResponse;
+    }>;
+    createSourceOperation(repositoryId: string, input: {
+        kind: "set_default" | "promote" | "history_replace";
+        idempotencyKey: string;
+        targetBranch: string;
+        headBranch?: string;
+        expectedCurrentSha?: string;
+        expectedDefaultBranch?: string;
+        dryRun: boolean;
+    }): Promise<{
+        created: boolean;
+        operation: ManagedSourceOperationResponse;
+    }>;
+    sourceOperation(operationId: string): Promise<{
+        operation: ManagedSourceOperationResponse;
+    }>;
+    retrySourceOperation(operationId: string): Promise<{
+        operation: ManagedSourceOperationResponse;
+    }>;
+    createSubmission(projectId: string, input: {
+        idempotencyKey: string;
+        envelope: unknown;
+    }): Promise<ArtifactSubmissionResponse>;
+    uploadFile(submissionId: string, fileIndex: number, bytes: Uint8Array): Promise<unknown>;
+    finalizeSubmission(submissionId: string): Promise<ArtifactSubmissionResponse>;
+    createDelivery(projectId: string, input: {
+        submissionId: string;
+        idempotencyKey: string;
+    }): Promise<DeveloperDeliveryResponse>;
+    delivery(deliveryId: string): Promise<DeveloperDeliveryResponse>;
+    retryDelivery(deliveryId: string): Promise<unknown>;
+    previewSession(deliveryId: string, returnPath: string): Promise<{
+        url: string;
+        grantId: string;
+        expiresAt: number;
+    }>;
+    createRuntimeLogSession(projectId: string, input: {
+        environment: "preview" | "production";
+        deliveryId?: string;
+        filters: {
+            statuses: string[];
+            methods: string[];
+            search: string | null;
+            samplingRate: number;
+        };
+    }): Promise<RuntimeLogSessionResponse>;
+    closeRuntimeLogSession(sessionId: string): Promise<unknown>;
+    private json;
+}
+//# sourceMappingURL=api.d.ts.map

package/dist/api.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"api.d.ts","sourceRoot":"","sources":["../src/api.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,cAAc,EACd,0BAA0B,EAC1B,yBAAyB,EACzB,+BAA+B,EAC/B,kCAAkC,EAClC,8BAA8B,EAC9B,yBAAyB,EACzB,0BAA0B,EAC1B,yBAAyB,EAC1B,MAAM,gBAAgB,CAAC;AAGxB,qBAAa,cAAc;IAEvB,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,OAAO;IAH1B,YACmB,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,MAAM,EACb,OAAO,GAAE,OAAO,KAAa,EAC5C;IAEJ,MAAM,IAAI,OAAO,CAAC,cAAc,CAAC,CAEhC;IAED,gBAAgB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,UAAU,EAAE,+BAA+B,GAAG,IAAI,CAAA;KAAE,CAAC,CAEnG;IAED,uBAAuB,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE;QAChD,QAAQ,EAAE,MAAM,CAAC;QACjB,aAAa,EAAE,MAAM,CAAC;QACtB,cAAc,EAAE,MAAM,CAAC;QACvB,eAAe,EAAE,MAAM,CAAC;QACxB,YAAY,EAAE,MAAM,CAAC;QACrB,gBAAgB,EAAE,MAAM,CAAC;QACzB,kBAAkB,EAAE,MAAM,CAAC;QAC3B,wBAAwB,EAAE,OAAO,CAAC;KACnC,GAAG,OAAO,CAAC;QAAE,UAAU,EAAE,+BAA+B,CAAA;KAAE,CAAC,CAK3D;IAED,WAAW,CACT,YAAY,EAAE,MAAM,EACpB,UAAU,EAAE,MAAM,EAClB,KAAK,GAAE,MAAM,GAAG,OAAiB,GAChC,OAAO,CAAC,0BAA0B,CAAC,CAKrC;IAED,gBAAgB,CAAC,YAAY,EAAE,MAAM,EAAE,KAAK,EAAE;QAC5C,cAAc,EAAE,MAAM,CAAC;QACvB,MAAM,EAAE,MAAM,CAAC;QACf,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;QAClC,cAAc,EAAE,MAAM,CAAC;QACvB,YAAY,EAAE,MAAM,CAAC;QACrB,WAAW,EAAE,MAAM,CAAC;KACrB,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,IAAI,EAAE,yBAAyB,CAAA;KAAE,CAAC,CAKjE;IAED,kBAAkB,CAAC,YAAY,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC;QAAE,IAAI,EAAE,yBAAyB,CAAA;KAAE,CAAC,CAOxG;IAED,UAAU,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,IAAI,EAAE,yBAAyB,CAAA;KAAE,CAAC,CAE7E;IAED,yBAAyB,CAAC,YAAY,EAAE,MAAM,EAAE,KAAK,EAAE;QACrD,KAAK,EAAE,MAAM,CAAC;QACd,WAAW,EAAE,MAAM,CAAC;QACpB,UAAU,EAAE,MAAM,CAAC;QACnB,UAAU,EAAE,MAAM,CAAC;QACnB,OAAO,EAAE,MAAM,CAAC;QAChB,OAAO,EAAE,MAAM,CAAC;KACjB,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,aAAa,EAAE,kCAAkC,CAAA;KAAE,CAAC,CAKnF;IAED,oBAAoB,CAAC,YAAY,EAAE,MAAM,EAAE,KAAK,GAAE,MAAM,GAAG,QAAQ,GAAG,KAAc,GAAG,OAAO,CAAC;QAAE,cAAc,EAAE,kCAAkC,EAAE,CAAA;KAAE,CAAC,CAEvJ;IAED,mBAAmB,CAAC,eAAe,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,aAAa,EAAE,kCAAkC,CAAA;KAAE,CAAC,CAE3G;IAED,wBAAwB,CAAC,eAAe,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,aAAa,EAAE,kCAAkC,CAAA;KAAE,CAAC,CAEhH;IAED,qBAAqB,CAAC,YAAY,EAAE,MAAM,EAAE,KAAK,EAAE;QACjD,IAAI,EAAE,aAAa,GAAG,SAAS,GAAG,iBAAiB,CAAC;QACpD,cAAc,EAAE,MAAM,CAAC;QACvB,YAAY,EAAE,MAAM,CAAC;QACrB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,kBAAkB,CAAC,EAAE,MAAM,CAAC;QAC5B,qBAAqB,CAAC,EAAE,MAAM,CAAC;QAC/B,MAAM,EAAE,OAAO,CAAC;KACjB,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,SAAS,EAAE,8BAA8B,CAAA;KAAE,CAAC,CAK3E;IAED,eAAe,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,SAAS,EAAE,8BAA8B,CAAA;KAAE,CAAC,CAE3F;IAED,oBAAoB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,SAAS,EAAE,8BAA8B,CAAA;KAAE,CAAC,CAEhG;IAED,gBAAgB,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE;QAAE,cAAc,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,0BAA0B,CAAC,CAK7H;IAED,UAAU,CAAC,YAAY,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,CAOvF;IAED,kBAAkB,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,0BAA0B,CAAC,CAE5E;IAED,cAAc,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE;QAAE,YAAY,EAAE,MAAM,CAAC;QAAC,cAAc,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,yBAAyB,CAAC,CAK7H;IAED,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,yBAAyB,CAAC,CAE/D;IAED,aAAa,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAElD;IAED,cAAc,CAAC,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC,CAKnH;IAED,uBAAuB,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE;QAChD,WAAW,EAAE,SAAS,GAAG,YAAY,CAAC;QACtC,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,OAAO,EAAE;YAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;YAAC,OAAO,EAAE,MAAM,EAAE,CAAC;YAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;YAAC,YAAY,EAAE,MAAM,CAAA;SAAE,CAAC;KACjG,GAAG,OAAO,CAAC,yBAAyB,CAAC,CAKrC;IAED,sBAAsB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAE1D;YAEa,IAAI;CAsBnB"}

package/dist/api.js

@@ -0,0 +1,141 @@
+import { CliApiError } from "./errors.js";
+export class AgentApiClient {
+    baseUrl;
+    token;
+    fetcher;
+    constructor(baseUrl, token, fetcher = fetch) {
+        this.baseUrl = baseUrl;
+        this.token = token;
+        this.fetcher = fetcher;
+    }
+    whoami() {
+        return this.json("/v1/whoami");
+    }
+    sourceRepository(projectId) {
+        return this.json(`/v1/projects/${encodeURIComponent(projectId)}/source-repository`);
+    }
+    connectSourceRepository(projectId, input) {
+        return this.json(`/v1/projects/${encodeURIComponent(projectId)}/source-repository`, {
+            method: "POST",
+            body: JSON.stringify(input),
+        });
+    }
+    sourceToken(repositoryId, ttlSeconds, scope = "write") {
+        return this.json(`/v1/source-repositories/${encodeURIComponent(repositoryId)}/tokens`, {
+            method: "POST",
+            body: JSON.stringify({ ttlSeconds, scope }),
+        });
+    }
+    createSourcePush(repositoryId, input) {
+        return this.json(`/v1/source-repositories/${encodeURIComponent(repositoryId)}/pushes`, {
+            method: "POST",
+            body: JSON.stringify(input),
+        });
+    }
+    uploadSourceBundle(submissionId, bytes) {
+        const body = bytes.buffer.slice(bytes.byteOffset, bytes.byteOffset + bytes.byteLength);
+        return this.json(`/v1/source-pushes/${encodeURIComponent(submissionId)}/bundle`, {
+            method: "PUT",
+            headers: { "content-type": "application/x-git-bundle" },
+            body,
+        });
+    }
+    sourcePush(submissionId) {
+        return this.json(`/v1/source-pushes/${encodeURIComponent(submissionId)}`);
+    }
+    createSourceChangeRequest(repositoryId, input) {
+        return this.json(`/v1/source-repositories/${encodeURIComponent(repositoryId)}/change-requests`, {
+            method: "POST",
+            body: JSON.stringify(input),
+        });
+    }
+    sourceChangeRequests(repositoryId, state = "open") {
+        return this.json(`/v1/source-repositories/${encodeURIComponent(repositoryId)}/change-requests?state=${state}`);
+    }
+    sourceChangeRequest(changeRequestId) {
+        return this.json(`/v1/source-change-requests/${encodeURIComponent(changeRequestId)}`);
+    }
+    closeSourceChangeRequest(changeRequestId) {
+        return this.json(`/v1/source-change-requests/${encodeURIComponent(changeRequestId)}/close`, { method: "POST" });
+    }
+    createSourceOperation(repositoryId, input) {
+        return this.json(`/v1/source-repositories/${encodeURIComponent(repositoryId)}/operations`, {
+            method: "POST",
+            body: JSON.stringify(input),
+        });
+    }
+    sourceOperation(operationId) {
+        return this.json(`/v1/source-operations/${encodeURIComponent(operationId)}`);
+    }
+    retrySourceOperation(operationId) {
+        return this.json(`/v1/source-operations/${encodeURIComponent(operationId)}/retry`, { method: "POST" });
+    }
+    createSubmission(projectId, input) {
+        return this.json(`/v1/projects/${encodeURIComponent(projectId)}/artifact-submissions`, {
+            method: "POST",
+            body: JSON.stringify(input),
+        });
+    }
+    uploadFile(submissionId, fileIndex, bytes) {
+        const body = bytes.buffer.slice(bytes.byteOffset, bytes.byteOffset + bytes.byteLength);
+        return this.json(`/v1/artifact-submissions/${encodeURIComponent(submissionId)}/files/${fileIndex}`, {
+            method: "PUT",
+            headers: { "content-type": "application/octet-stream" },
+            body,
+        });
+    }
+    finalizeSubmission(submissionId) {
+        return this.json(`/v1/artifact-submissions/${encodeURIComponent(submissionId)}/finalize`, { method: "POST" });
+    }
+    createDelivery(projectId, input) {
+        return this.json(`/v1/projects/${encodeURIComponent(projectId)}/deliveries`, {
+            method: "POST",
+            body: JSON.stringify(input),
+        });
+    }
+    delivery(deliveryId) {
+        return this.json(`/v1/deliveries/${encodeURIComponent(deliveryId)}`);
+    }
+    retryDelivery(deliveryId) {
+        return this.json(`/v1/deliveries/${encodeURIComponent(deliveryId)}/retry`, { method: "POST" });
+    }
+    previewSession(deliveryId, returnPath) {
+        return this.json(`/v1/deliveries/${encodeURIComponent(deliveryId)}/preview-session`, {
+            method: "POST",
+            body: JSON.stringify({ returnPath }),
+        });
+    }
+    createRuntimeLogSession(projectId, input) {
+        return this.json(`/v1/projects/${encodeURIComponent(projectId)}/runtime-log-sessions`, {
+            method: "POST",
+            body: JSON.stringify(input),
+        });
+    }
+    closeRuntimeLogSession(sessionId) {
+        return this.json(`/v1/runtime-log-sessions/${encodeURIComponent(sessionId)}`, { method: "DELETE" });
+    }
+    async json(path, init = {}) {
+        const headers = new Headers(init.headers);
+        headers.set("accept", "application/json");
+        headers.set("authorization", `Bearer ${this.token}`);
+        if (typeof init.body === "string")
+            headers.set("content-type", "application/json");
+        const response = await this.fetcher(new URL(path, this.baseUrl), { ...init, headers, redirect: "error" });
+        let value;
+        try {
+            value = await response.json();
+        }
+        catch {
+            throw new CliApiError("invalid_api_response", `Andeo returned HTTP ${response.status} without JSON.`);
+        }
+        if (!response.ok) {
+            const error = isRecord(value) && isRecord(value.error) ? value.error : null;
+            throw new CliApiError(typeof error?.code === "string" ? error.code : "api_request_failed", typeof error?.message === "string" ? error.message : `Andeo returned HTTP ${response.status}.`, typeof error?.requestId === "string" ? error.requestId : response.headers.get("x-request-id") ?? undefined);
+        }
+        return value;
+    }
+}
+function isRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+//# sourceMappingURL=api.js.map