@zibby/cli 0.4.6 → 0.4.10

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -1,9 +1,9 @@
1
- import{mkdir as S,writeFile as m,readFile as p}from"fs/promises";import{existsSync as f,readdirSync as z}from"fs";import{join as o}from"path";import e from"chalk";async function $(l,s,t={}){let n=t.enableMemory!==!1,{TemplateFactory:i}=await import("@zibby/core/templates"),{graphPath:c,nodesPath:y,readmePath:j,resultHandlerPath:b,template:u}=i.getTemplateFiles(s),a=o(l,".zibby");f(a)||await S(a,{recursive:!0});let r=[];await m(o(a,"graph.mjs"),await p(c,"utf-8")),r.push("graph.mjs"),b&&(await m(o(a,"result-handler.mjs"),await p(b,"utf-8")),r.push("result-handler.mjs")),await m(o(a,"README.md"),await p(j,"utf-8")),r.push("README.md");let h=o(a,"nodes");await S(h,{recursive:!0});for(let g of z(y)){let d=await p(o(y,g),"utf-8");!n&&g==="execute-live.mjs"&&(d=d.replace("skills: [SKILLS.BROWSER, SKILLS.MEMORY],","skills: [SKILLS.BROWSER],")),await m(o(h,g),d),r.push(`nodes/${g}`)}let w=o(u.path,"chat.mjs");return f(w)&&(await m(o(a,"chat.mjs"),await p(w,"utf-8")),r.push("chat.mjs")),{template:u,copied:r}}async function E(){let{TemplateFactory:l}=await import("@zibby/core/templates"),s=l.listTemplates();console.log(""),console.log(e.bold.cyan(" Available templates")),console.log("");for(let t of s){if(console.log(` ${e.cyan(t.name)}`),console.log(` ${e.white(t.displayName)}`),t.description&&console.log(` ${e.gray(t.description)}`),t.features&&t.features.length)for(let n of t.features)console.log(e.gray(` \u2022 ${n}`));console.log("")}console.log(e.gray(" Use: zibby template add <name> (or pass -t <name> to zibby init)")),console.log("")}async function L(l,s={}){l||(console.log(e.red(`
1
+ import{mkdir as y,writeFile as u,readFile as b}from"fs/promises";import{existsSync as m,readdirSync as d,statSync as w}from"fs";import{join as p}from"path";import o from"chalk";var $=[/^__tests__$/,/^__mocks__$/,/^node_modules$/,/\.test\.[mc]?js$/,/\.spec\.[mc]?js$/,/^\.DS_Store$/];function h(e){return $.some(s=>s.test(e))}async function f(e,s,t=null){let n=[];m(s)||await y(s,{recursive:!0});for(let l of d(e)){if(h(l))continue;let r=p(e,l),c=p(s,l),i=w(r);if(i.isDirectory()){let a=await f(r,c,t);for(let g of a)n.push(`${l}/${g}`)}else if(i.isFile()){let a=await b(r,"utf-8");t&&(a=t(l,a)),await u(c,a),n.push(l)}}return n}async function S(e){if(!e||typeof e!="string")throw new Error("Template name is required");if(/^(git\+|https?:)/.test(e))throw new Error(`Git/URL templates are not yet supported (got "${e}"). For now use a built-in template \u2014 see \`zibby template list\`.`);if(e.startsWith("@")||e.includes("/")||e.startsWith("zibby-template-"))throw new Error(`npm-package templates are not yet supported (got "${e}"). For now use a built-in template \u2014 see \`zibby template list\`.`);let{TemplateFactory:s}=await import("@zibby/core/templates");return s.getTemplateFiles(e)}async function z(e,s,t={}){let n=t.enableMemory!==!1,{template:l}=await S(s);m(e)||await y(e,{recursive:!0});let r=await f(l.path,e,(c,i)=>!n&&c==="execute-live.mjs"?i.replace("skills: [SKILLS.BROWSER, SKILLS.MEMORY],","skills: [SKILLS.BROWSER],"):i);return{template:l,copied:r}}async function x(e,s,t={}){return z(p(e,".zibby"),s,t)}async function k(){let{TemplateFactory:e}=await import("@zibby/core/templates"),s=e.listTemplates();console.log(""),console.log(o.bold.cyan(" Available templates")),console.log("");for(let t of s){if(console.log(` ${o.cyan(t.name)}`),console.log(` ${o.white(t.displayName)}`),t.description&&console.log(` ${o.gray(t.description)}`),t.features&&t.features.length)for(let n of t.features)console.log(o.gray(` \u2022 ${n}`));console.log(""),console.log(` ${o.gray("Scaffold:")} ${o.cyan(`zibby workflow new your-workflow-name -t ${t.name}`)}`),console.log("")}}async function v(e,s={}){e||(console.log(o.red(`
2
2
  Missing template name.
3
- `)),console.log(e.gray(" Usage: zibby template add <name>")),console.log(e.gray(` See available templates: zibby template list
4
- `)),process.exit(1));let t=s.cwd||process.cwd(),n=o(t,".zibby");f(n)||(console.log(e.yellow(`
3
+ `)),console.log(o.gray(" Usage: zibby template add <name>")),console.log(o.gray(` See available templates: zibby template list
4
+ `)),process.exit(1));let t=s.cwd||process.cwd(),n=p(t,".zibby");m(n)||(console.log(o.yellow(`
5
5
  No .zibby/ directory in ${t}.
6
- `)),console.log(e.gray(" Run `zibby init` first to bootstrap the project.\n")),process.exit(1));let i;try{i=await $(t,l,{enableMemory:s.enableMemory!==!1})}catch(c){console.log(e.red(`
7
- ${c.message}
8
- `)),console.log(e.gray(` See available templates: zibby template list
9
- `)),process.exit(1)}console.log(""),console.log(e.green(` \u2713 Added template ${e.bold(i.template.name)}`)),console.log(e.gray(` ${i.copied.length} files written to ${n}/`));for(let c of i.copied)console.log(e.gray(` \u2022 ${c}`));console.log(""),console.log(e.gray(" Re-running `zibby template add <name>` overwrites existing files \u2014")),console.log(e.gray(" use this to refresh after `npm update @zibby/core`.")),console.log("")}export{L as templateAddCommand,E as templateListCommand,$ as writeTemplateFiles};
6
+ `)),console.log(o.gray(" Run `zibby init` first to bootstrap the project.\n")),process.exit(1));let l;try{l=await x(t,e,{enableMemory:s.enableMemory!==!1})}catch(r){console.log(o.red(`
7
+ ${r.message}
8
+ `)),console.log(o.gray(` See available templates: zibby template list
9
+ `)),process.exit(1)}console.log(""),console.log(o.green(` \u2713 Added template ${o.bold(l.template.name)}`)),console.log(o.gray(` ${l.copied.length} files written to ${n}/`));for(let r of l.copied)console.log(o.gray(` \u2022 ${r}`));console.log(""),console.log(o.gray(" Re-running `zibby template add <name>` overwrites existing files \u2014")),console.log(o.gray(" use this to refresh after `npm update @zibby/core`.")),console.log("")}export{S as resolveTemplate,v as templateAddCommand,k as templateListCommand,x as writeTemplateFiles,z as writeTemplateFilesToDir};
@@ -1,3 +1,3 @@
1
- import i from"chalk";import B from"inquirer";import{execSync as M}from"node:child_process";import{existsSync as T,readFileSync as C,writeFileSync as W,chmodSync as q,unlinkSync as Q}from"node:fs";import{homedir as Z,tmpdir as X}from"node:os";import{join as h}from"node:path";import{randomBytes as ee}from"node:crypto";import{existsSync as R,readFileSync as j,writeFileSync as pe,mkdirSync as ye}from"fs";import{join as D}from"path";import{homedir as G}from"os";var m={cursor:{envVar:"CURSOR_API_KEY",label:"Cursor API Key",url:"https://cursor.com/settings"},claude:{envVar:"ANTHROPIC_API_KEY",label:"Anthropic API Key",url:"https://console.anthropic.com/settings/keys"},codex:{envVar:"OPENAI_API_KEY",label:"OpenAI API Key",url:"https://platform.openai.com/api-keys"},gemini:{envVar:"GEMINI_API_KEY",label:"Gemini API Key",url:"https://aistudio.google.com/app/apikey"}};function H(){return D(G(),".zibby","config.json")}function O(){try{let e=H();return R(e)?JSON.parse(j(e,"utf-8")):{}}catch{return{}}}import{readFileSync as V,existsSync as z}from"fs";import F from"dotenv";var K=/^[A-Z_][A-Z0-9_]*$/;function J(e){return typeof e=="string"&&K.test(e)}function w(e){if(!Array.isArray(e)||e.length===0)return{};let t={};for(let n of e){if(!z(n))throw new Error(`--env file not found: ${n}`);let r=F.parse(V(n,"utf-8"));for(let[o,s]of Object.entries(r)){if(!J(o))throw new Error(`Invalid env var name "${o}" in ${n} \u2014 must match ${K} (uppercase letters, digits, underscores; can't start with a digit)`);t[o]=s}}return t}function b(e,t,n){let r=String(e).replace(/\/+$/,"");return n?`${r}/workflows/${t}/env/${encodeURIComponent(n)}`:`${r}/workflows/${t}/env`}var te={claude:["ANTHROPIC_API_KEY","CLAUDE_CODE_OAUTH_TOKEN"],cursor:["CURSOR_API_KEY"],codex:["OPENAI_API_KEY"],gemini:["GOOGLE_API_KEY"]};function re(){if(process.platform==="darwin")try{let e=M('security find-generic-password -s "Claude Code-credentials" -w',{encoding:"utf-8",stdio:["ignore","pipe","ignore"]}).trim();if(e){let t=JSON.parse(e);if(t?.claudeAiOauth?.accessToken)return t.claudeAiOauth}}catch{}try{let e=h(Z(),".claude",".credentials.json");return T(e)&&JSON.parse(C(e,"utf-8"))?.claudeAiOauth||null}catch{return null}}var ne={claude:[{localVar:"ANTHROPIC_API_KEY",uploadAs:"ANTHROPIC_API_KEY",kind:"api"},{localVar:"CLAUDE_CODE_OAUTH_TOKEN",uploadAs:"CLAUDE_CODE_OAUTH_TOKEN",kind:"oauth"}],cursor:[{localVar:"CURSOR_API_KEY",uploadAs:"CURSOR_API_KEY",kind:"api"}],codex:[{localVar:"OPENAI_API_KEY",uploadAs:"OPENAI_API_KEY",kind:"api"}],gemini:[{localVar:"GEMINI_API_KEY",uploadAs:"GOOGLE_API_KEY",kind:"api"},{localVar:"GOOGLE_API_KEY",uploadAs:"GOOGLE_API_KEY",kind:"api"}]};function oe(e){let t=N(e);if(!t)return null;let n=e?.agent;if(!n||typeof n!="object")return null;let r=n[t];if(r&&typeof r=="object"&&typeof r.auth=="string"){let o=r.auth.toLowerCase();if(o==="oauth"||o==="api")return o}return null}function N(e){if(!e||typeof e!="object")return null;let t=e.agent;if(!t)return null;if(typeof t=="string")return m[t]?t:null;if(typeof t=="object"){if(typeof t.provider=="string"&&m[t.provider])return t.provider;for(let n of Object.keys(t))if(m[n])return n}return null}function se(e){if(!e)return null;let t=h(e,".zibby-deploy.json");if(!T(t))return null;try{let n=JSON.parse(C(t,"utf-8"));if(typeof n?.uuid=="string"&&n.uuid)return n.uuid}catch{}return null}function ie(e,t,n){let o=(ne[e]||[]).slice().sort((s,a)=>n&&s.kind===n&&a.kind!==n?-1:n&&a.kind===n&&s.kind!==n?1:0);for(let s of o){let a=t?.[s.localVar];if(typeof a=="string"&&a.trim())return{...s,value:a.trim()}}return null}function ae(e,t,{readConfig:n=O}={}){let r=n()||{},o=r.agentKeys&&typeof r.agentKeys=="object"?r.agentKeys:{};return ie(e,o,t)}async function ce({apiUrl:e,sessionToken:t,uuid:n,fetchImpl:r}){let o=await r(b(e,n),{method:"GET",headers:{"Content-Type":"application/json",Authorization:`Bearer ${t}`}});if(!o.ok)throw new Error(`GET /workflows/${n}/env \u2192 HTTP ${o.status}`);let s=await o.json();return Array.isArray(s?.keys)?s.keys:[]}function ue(e,t){if(!e?.length)return!1;try{let n=w(e);return t.some(r=>Object.prototype.hasOwnProperty.call(n,r)&&typeof n[r]=="string"&&n[r].trim().length>0)}catch{return!1}}async function le({workflowAgent:e,workflowUuid:t,authChoice:n,envFiles:r=[],sessionToken:o,apiUrl:s,fetchImpl:a=globalThis.fetch,readConfig:y=O}){if(!e)return{status:"error",detail:"workflowAgent unresolved (no agent in .zibby.config.mjs)"};let c=te[e];if(!c)return{status:"error",detail:`unknown agent: ${e}`};if(!o||!s)return{status:"error",detail:"missing sessionToken or apiUrl"};if(t)try{let d=await ce({apiUrl:s,sessionToken:o,uuid:t,fetchImpl:a}),A=c.find(f=>d.includes(f));if(A)return{status:"ok-already-set",acceptedVars:c,matchedVar:A}}catch(d){if(!/HTTP 404/.test(d.message))return{status:"error",detail:d.message}}if(ue(r,c))return{status:"ok-via-env-flag",acceptedVars:c};let u=ae(e,n,{readConfig:y});return u?{status:"mismatch-can-upload",acceptedVars:c,candidate:u}:{status:"mismatch-no-local",acceptedVars:c}}function Ce({uploadAs:e,value:t}){return $({[e]:t})}function $(e){let t=h(X(),`zibby-creds-${ee(8).toString("hex")}.env`),n=Object.entries(e).map(([o,s])=>{let a=String(s);return/[\s"'={}[\]:,]/.test(a)?`${o}='${a.replace(/'/g,"'\\''")}'`:`${o}=${a}`});W(t,`${n.join(`
1
+ import i from"chalk";import W from"inquirer";import{execSync as q}from"node:child_process";import{existsSync as N,readFileSync as $,writeFileSync as Q,chmodSync as Z,unlinkSync as X}from"node:fs";import{homedir as ee,tmpdir as te}from"node:os";import{join as K}from"node:path";import{randomBytes as ne}from"node:crypto";import{existsSync as D,readFileSync as G,writeFileSync as Ee,mkdirSync as _e}from"fs";import{join as H}from"path";import{homedir as V}from"os";var g={cursor:{envVar:"CURSOR_API_KEY",label:"Cursor API Key",url:"https://cursor.com/settings"},claude:{envVar:"ANTHROPIC_API_KEY",label:"Anthropic API Key",url:"https://console.anthropic.com/settings/keys"},codex:{envVar:"OPENAI_API_KEY",label:"OpenAI API Key",url:"https://platform.openai.com/api-keys"},gemini:{envVar:"GEMINI_API_KEY",label:"Gemini API Key",url:"https://aistudio.google.com/app/apikey"}};function z(){return H(V(),".zibby","config.json")}function P(){try{let e=z();return D(e)?JSON.parse(G(e,"utf-8")):{}}catch{return{}}}import{readFileSync as F,existsSync as J}from"fs";import B from"dotenv";var b=/^[A-Z_][A-Z0-9_]*$/;function M(e){return typeof e=="string"&&b.test(e)}function T(e){if(!Array.isArray(e)||e.length===0)return{};let t={};for(let r of e){if(!J(r))throw new Error(`--env file not found: ${r}`);let n=B.parse(F(r,"utf-8"));for(let[o,s]of Object.entries(n)){if(!M(o))throw new Error(`Invalid env var name "${o}" in ${r} \u2014 must match ${b} (uppercase letters, digits, underscores; can't start with a digit)`);t[o]=s}}return t}function C(e,t,r){let n=String(e).replace(/\/+$/,"");return r?`${n}/workflows/${t}/env/${encodeURIComponent(r)}`:`${n}/workflows/${t}/env`}var re={claude:["ANTHROPIC_API_KEY","CLAUDE_CODE_OAUTH_TOKEN"],cursor:["CURSOR_API_KEY"],codex:["OPENAI_API_KEY"],gemini:["GOOGLE_API_KEY"]};function oe(){if(process.platform==="darwin")try{let e=q('security find-generic-password -s "Claude Code-credentials" -w',{encoding:"utf-8",stdio:["ignore","pipe","ignore"]}).trim();if(e){let t=JSON.parse(e);if(t?.claudeAiOauth?.accessToken)return t.claudeAiOauth}}catch{}try{let e=K(ee(),".claude",".credentials.json");return N(e)&&JSON.parse($(e,"utf-8"))?.claudeAiOauth||null}catch{return null}}var se={claude:[{localVar:"ANTHROPIC_API_KEY",uploadAs:"ANTHROPIC_API_KEY",kind:"api"},{localVar:"CLAUDE_CODE_OAUTH_TOKEN",uploadAs:"CLAUDE_CODE_OAUTH_TOKEN",kind:"oauth"}],cursor:[{localVar:"CURSOR_API_KEY",uploadAs:"CURSOR_API_KEY",kind:"api"}],codex:[{localVar:"OPENAI_API_KEY",uploadAs:"OPENAI_API_KEY",kind:"api"}],gemini:[{localVar:"GEMINI_API_KEY",uploadAs:"GOOGLE_API_KEY",kind:"api"},{localVar:"GOOGLE_API_KEY",uploadAs:"GOOGLE_API_KEY",kind:"api"}]};function ie(e){let t=x(e);if(!t)return null;let r=e?.agent;if(!r||typeof r!="object")return null;let n=r[t];if(n&&typeof n=="object"&&typeof n.auth=="string"){let o=n.auth.toLowerCase();if(o==="oauth"||o==="api")return o}return null}function x(e){if(!e||typeof e!="object")return null;let t=e.agent;if(!t)return null;if(typeof t=="string")return g[t]?t:null;if(typeof t=="object"){if(typeof t.provider=="string"&&g[t.provider])return t.provider;for(let r of Object.keys(t))if(g[r])return r}return null}function ae(e){if(!e)return null;let t=K(e,".zibby-deploy.json");if(!N(t))return null;try{let r=JSON.parse($(t,"utf-8"));if(typeof r?.uuid=="string"&&r.uuid)return r.uuid}catch{}return null}function ce(e,t,r){let o=(se[e]||[]).slice().sort((s,a)=>r&&s.kind===r&&a.kind!==r?-1:r&&a.kind===r&&s.kind!==r?1:0);for(let s of o){let a=t?.[s.localVar];if(typeof a=="string"&&a.trim())return{...s,value:a.trim()}}return null}function ue(e,t,{readConfig:r=P}={}){let n=r()||{},o=n.agentKeys&&typeof n.agentKeys=="object"?n.agentKeys:{};return ce(e,o,t)}async function le({apiUrl:e,sessionToken:t,uuid:r,fetchImpl:n}){let o=await n(C(e,r),{method:"GET",headers:{"Content-Type":"application/json",Authorization:`Bearer ${t}`}});if(!o.ok)throw new Error(`GET /workflows/${r}/env \u2192 HTTP ${o.status}`);let s=await o.json();return Array.isArray(s?.keys)?s.keys:[]}function fe(e,t){if(!e?.length)return!1;try{let r=T(e);return t.some(n=>Object.prototype.hasOwnProperty.call(r,n)&&typeof r[n]=="string"&&r[n].trim().length>0)}catch{return!1}}async function de({workflowAgent:e,workflowUuid:t,authChoice:r,envFiles:n=[],sessionToken:o,apiUrl:s,fetchImpl:a=globalThis.fetch,readConfig:A=P}){if(!e)return{status:"error",detail:"workflowAgent unresolved (no agent in .zibby.config.mjs)"};let u=re[e];if(!u)return{status:"error",detail:`unknown agent: ${e}`};if(!o||!s)return{status:"error",detail:"missing sessionToken or apiUrl"};if(t)try{let d=await le({apiUrl:s,sessionToken:o,uuid:t,fetchImpl:a}),E=u.find(f=>d.includes(f));if(E)return{status:"ok-already-set",acceptedVars:u,matchedVar:E}}catch(d){if(!/HTTP 404/.test(d.message))return{status:"error",detail:d.message}}if(fe(n,u))return{status:"ok-via-env-flag",acceptedVars:u};let l=ue(e,r,{readConfig:A});return l?{status:"mismatch-can-upload",acceptedVars:u,candidate:l}:{status:"mismatch-no-local",acceptedVars:u}}function xe({uploadAs:e,value:t}){return S({[e]:t})}function S(e){let t=K(te(),`zibby-creds-${ne(8).toString("hex")}.env`),r=Object.entries(e).map(([o,s])=>{let a=String(s);return/[\s"'={}[\]:,]/.test(a)?`${o}='${a.replace(/'/g,"'\\''")}'`:`${o}=${a}`});Q(t,`${r.join(`
2
2
  `)}
3
- `,"utf-8");try{q(t,384)}catch{}let r=()=>{try{Q(t)}catch{}};return process.on("exit",r),process.on("SIGINT",()=>{r(),process.exit(130)}),t}function fe({workflowAgent:e,acceptedVars:t,projectId:n,log:r}){r(i.red(` \u2716 No local ${e} credentials found to upload.`)),r(i.red(` Cloud Fargate needs ${t.join(" or ")} in this workflow's env.`)),r(""),r(i.yellow(" Pick one:")),e==="claude"?(r(i.yellow(" A. Set up Claude OAuth (no API costs):")),r(i.gray(" 1. claude (the CLI from @anthropic-ai/claude-code) \u2192 log in, quit")),r(i.gray(" 2. zibby init -f # picks up the token")),r(i.gray(" 3. zibby workflow deploy <name> # we'll upload it")),r(i.yellow(" B. Buy a Claude API key (pay-per-token):")),r(i.gray(" https://console.anthropic.com/settings/keys")),r(i.gray(" zibby workflow env set <uuid> ANTHROPIC_API_KEY=sk-ant-..."))):(r(i.yellow(` A. Get an API key for ${e}:`)),r(i.gray(` zibby workflow env set <uuid> ${t[0]}=<your-key>`))),r(i.yellow(" C. Skip this gate (deploy WILL fail at trigger time):")),r(i.gray(" zibby workflow deploy <name> --no-creds-check")),r(i.gray(" (or set the project-level key at")),r(i.gray(` https://studio.zibby.dev/projects/${n}/settings)`)),r("")}async function Ne({userConfig:e,workflowDir:t,projectId:n,sessionToken:r,apiUrl:o,deployOptions:s,fetchImpl:a,readConfig:y,prompt:c,log:u=console.log,writeTempBag:d=$,readFullBlob:A=re}){let f=N(e);if(!f)return{proceed:!0};let x=oe(e),S=se(t),Y=Array.isArray(s?.env)?s.env:[],E=await le({workflowAgent:f,workflowUuid:S,authChoice:x,envFiles:Y,sessionToken:r,apiUrl:o,fetchImpl:a,readConfig:y});switch(E.status){case"ok-already-set":return{proceed:!0};case"ok-via-env-flag":return{proceed:!0};case"mismatch-can-upload":{let{candidate:l}=E,U=c||(async({message:p})=>{let{proceed:P}=await B.prompt([{type:"confirm",name:"proceed",message:p,default:!0}]);return P}),k=l.kind==="oauth"?"OAuth token":"API key",L=`Cloud workflow has no ${f} credentials. Upload your local ${k} (${l.uploadAs})?`,g;try{g=await U({message:L})}catch{g=!1}if(!g)return u(i.yellow(` \u26A0 Deploying without ${l.uploadAs} on the workflow.`)),u(i.yellow(" Trigger will fail until you set it manually:")),u(i.gray(` zibby workflow env set <uuid> ${l.uploadAs}=<your-token>`)),{proceed:!0};let _,v="";if(f==="claude"&&l.kind==="oauth"){let p=A();p&&p.accessToken?(_={CLAUDE_CODE_CREDENTIALS_JSON:JSON.stringify({claudeAiOauth:p}),CLAUDE_CODE_OAUTH_TOKEN:p.accessToken},v=" (full Keychain blob \u2014 accessToken + refreshToken + expiresAt + scopes)"):_={CLAUDE_CODE_OAUTH_TOKEN:l.value}}else _={[l.uploadAs]:l.value};let I=d(_);return s&&(Array.isArray(s.env)||(s.env=[]),s.env.push(I)),u(i.green(` \u2713 Will upload ${k}${v} to workflow env after deploy.`)),{proceed:!0,addedEnvFile:I}}case"mismatch-no-local":return fe({workflowAgent:f,acceptedVars:E.acceptedVars,projectId:n,log:u}),{proceed:!1};default:return u(i.gray(` (skipped cloud-creds sanity check: ${E.detail||"unknown error"})`)),{proceed:!0}}}export{ie as pickLocalUpload,se as readDeployedUuid,re as readFullClaudeOauthBlob,ae as readLocalUpload,oe as resolveAgentAuthChoice,le as resolveCheckResult,N as resolveWorkflowAgent,Ne as runCloudCredsCheck,$ as writeTempEnvBag,Ce as writeTempEnvFile};
3
+ `,"utf-8");try{Z(t,384)}catch{}let n=()=>{try{X(t)}catch{}};return process.on("exit",n),process.on("SIGINT",()=>{n(),process.exit(130)}),t}function pe({workflowAgent:e,acceptedVars:t,projectId:r,log:n}){n(i.red(` \u2716 No local ${e} credentials found to upload.`)),n(i.red(` Cloud Fargate needs ${t.join(" or ")} in this workflow's env.`)),n(""),n(i.yellow(" Pick one:")),e==="claude"?(n(i.yellow(" A. Set up Claude OAuth (no API costs):")),n(i.gray(" 1. claude (the CLI from @anthropic-ai/claude-code) \u2192 log in, quit")),n(i.gray(" 2. zibby init -f # picks up the token")),n(i.gray(" 3. zibby workflow deploy <name> # we'll upload it")),n(i.yellow(" B. Buy a Claude API key (pay-per-token):")),n(i.gray(" https://console.anthropic.com/settings/keys")),n(i.gray(" zibby workflow env set <uuid> ANTHROPIC_API_KEY=sk-ant-..."))):(n(i.yellow(` A. Get an API key for ${e}:`)),n(i.gray(` zibby workflow env set <uuid> ${t[0]}=<your-key>`))),n(i.yellow(" C. Skip this gate (deploy WILL fail at trigger time):")),n(i.gray(" zibby workflow deploy <name> --no-creds-check")),n(i.gray(" (or set the project-level key at")),n(i.gray(` https://studio.zibby.dev/projects/${r}/settings)`)),n("")}async function Se({userConfig:e,workflowDir:t,projectId:r,sessionToken:n,apiUrl:o,deployOptions:s,fetchImpl:a,readConfig:A,prompt:u,log:l=console.log,writeTempBag:d=S,readFullBlob:E=oe}){let f=x(e);if(!f)return{proceed:!0};let L=ie(e),U=ae(t),Y=Array.isArray(s?.env)?s.env:[],_=await de({workflowAgent:f,workflowUuid:U,authChoice:L,envFiles:Y,sessionToken:n,apiUrl:o,fetchImpl:a,readConfig:A});switch(_.status){case"ok-already-set":return{proceed:!0};case"ok-via-env-flag":return{proceed:!0};case"mismatch-can-upload":{let{candidate:c}=_,R=u||(async({message:I})=>{let{proceed:p}=await W.prompt([{type:"confirm",name:"proceed",message:I,default:!0}]);return p}),h=typeof c.value=="string"?c.value:"",O=h.length>=4?`***${h.slice(-4)}`:"***",m;c.kind==="oauth"?m=h.startsWith("sk-ant-oat01-")?`OAuth token ${O} \xB7 long-lived setup-token`:`OAuth token ${O} \xB7 Keychain (short-lived, ~30d)`:m=`API key ${O}`;let j=`Cloud workflow has no ${f} credentials. Upload saved ${m}?`,k;try{k=await R({message:j})}catch{k=!1}if(!k)return l(i.yellow(` \u26A0 Deploying without ${c.uploadAs} on the workflow.`)),l(i.yellow(" Trigger will fail until you set it manually:")),l(i.gray(` zibby workflow env set <uuid> ${c.uploadAs}=<your-token>`)),{proceed:!0};let y,v="";if(f==="claude"&&c.kind==="oauth")if(typeof c.value=="string"&&c.value.startsWith("sk-ant-oat01-"))y={CLAUDE_CODE_OAUTH_TOKEN:c.value},v=` (long-lived setup-token \u2026${c.value.slice(-4)} \u2014 no expiry)`;else{let p=E();p&&p.accessToken?(y={CLAUDE_CODE_CREDENTIALS_JSON:JSON.stringify({claudeAiOauth:p}),CLAUDE_CODE_OAUTH_TOKEN:p.accessToken},v=" (Keychain blob \u2014 short-lived, expires ~30 days; run `claude setup-token` for a long-lived token to avoid this)"):y={CLAUDE_CODE_OAUTH_TOKEN:c.value}}else y={[c.uploadAs]:c.value};let w=d(y);return s&&(Array.isArray(s.env)||(s.env=[]),s.env.push(w)),l(i.green(` \u2713 Will upload ${m}${v} to workflow env after deploy.`)),{proceed:!0,addedEnvFile:w}}case"mismatch-no-local":return pe({workflowAgent:f,acceptedVars:_.acceptedVars,projectId:r,log:l}),{proceed:!1};default:return l(i.gray(` (skipped cloud-creds sanity check: ${_.detail||"unknown error"})`)),{proceed:!0}}}export{ce as pickLocalUpload,ae as readDeployedUuid,oe as readFullClaudeOauthBlob,ue as readLocalUpload,ie as resolveAgentAuthChoice,de as resolveCheckResult,x as resolveWorkflowAgent,Se as runCloudCredsCheck,S as writeTempEnvBag,xe as writeTempEnvFile};
@@ -1,61 +1,61 @@
1
- var $o=Object.defineProperty;var L=(e,o)=>()=>(e&&(o=e(e=0)),o);var _e=(e,o)=>{for(var t in o)$o(e,t,{get:o[t],enumerable:!0})};function T(){let e;if(process.env.ZIBBY_API_URL)e=process.env.ZIBBY_API_URL;else{let o=process.env.ZIBBY_ENV||"prod";F[o]?e=F[o].apiUrl:e=F.prod.apiUrl}try{let o=new URL(e);return o.protocol!=="http:"&&o.protocol!=="https:"?(console.error(`\u26A0\uFE0F Invalid API URL protocol: ${o.protocol} (only http/https allowed)`),F.prod.apiUrl):e}catch{return console.error(`\u26A0\uFE0F Invalid API URL: ${e}`),F.prod.apiUrl}}var F,Z=L(()=>{F={local:{name:"Local Development",apiUrl:"http://localhost:3001",accountApiUrl:"http://localhost:3001",frontendUrl:"http://localhost:3000",description:"Local backend running on port 3001"},prod:{name:"Production",apiUrl:process.env.ZIBBY_PROD_API_URL||"https://api-prod.zibby.app",accountApiUrl:process.env.ZIBBY_PROD_ACCOUNT_API_URL||"https://account-api-prod.zibby.app",frontendUrl:process.env.ZIBBY_PROD_FRONTEND_URL||"https://studio.zibby.dev",description:"Production environment"}}});import{existsSync as Ne,mkdirSync as Lo,readFileSync as No,writeFileSync as Bo}from"fs";import{homedir as Be}from"os";import{join as W}from"path";function ze(){return process.env.ZIBBY_CONFIG_DIR||W(Be(),".zibby")}function Ke(){return W(ze(),"config.json")}function Ko(){let e=ze();Ne(e)||Lo(e,{recursive:!0})}function B(){try{let e=Ke();if(Ne(e)){let o=No(e,"utf-8");return JSON.parse(o)}}catch{}return{}}function G(e){Ko(),Bo(Ke(),JSON.stringify(e,null,2))}function Re(){return B().sessionToken||null}function De(e){let o=B();o.sessionToken=e,G(o)}function Ye(){return B().user||null}function Fe(e){let o=B();o.user=e,G(o)}function Ge(e){let o=B();o.proxyUrl=e,G(o)}function He(e){let o=B();o.mem0ProxyUrl=e,G(o)}function Me(e){let o=B();o.projects=e,G(o)}var zo,Dt,Ve=L(()=>{zo=W(Be(),".zibby"),Dt=W(zo,"config.json")});import{existsSync as Gt,mkdirSync as Ht,readFileSync as Mt,writeFileSync as Vt,unlinkSync as Jt}from"fs";import{resolve as Wt}from"path";import{homedir as Xt}from"os";var Je=L(()=>{});import g from"chalk";import pe from"ora";import{spawn as Ro}from"child_process";function Do(e){let o=process.platform;try{let t,n;return o==="darwin"?(t="open",n=[e]):o==="win32"?(t="cmd",n=["/c","start","",e]):(t="xdg-open",n=[e]),Ro(t,n,{detached:!0,stdio:"ignore"}).unref(),!0}catch{return!1}}function Yo(){let e=Re(),o=Ye();return e&&o?{loggedIn:!0,user:o,token:e}:{loggedIn:!1}}async function We(){try{console.log(g.cyan(`
1
+ var Ao=Object.defineProperty;var L=(e,o)=>()=>(e&&(o=e(e=0)),o);var Ie=(e,o)=>{for(var t in o)Ao(e,t,{get:o[t],enumerable:!0})};function O(){let e;if(process.env.ZIBBY_API_URL)e=process.env.ZIBBY_API_URL;else{let o=process.env.ZIBBY_ENV||"prod";M[o]?e=M[o].apiUrl:e=M.prod.apiUrl}try{let o=new URL(e);return o.protocol!=="http:"&&o.protocol!=="https:"?(console.error(`\u26A0\uFE0F Invalid API URL protocol: ${o.protocol} (only http/https allowed)`),M.prod.apiUrl):e}catch{return console.error(`\u26A0\uFE0F Invalid API URL: ${e}`),M.prod.apiUrl}}var M,q=L(()=>{M={local:{name:"Local Development",apiUrl:"http://localhost:3001",accountApiUrl:"http://localhost:3001",frontendUrl:"http://localhost:3000",description:"Local backend running on port 3001"},prod:{name:"Production",apiUrl:process.env.ZIBBY_PROD_API_URL||"https://api-prod.zibby.app",accountApiUrl:process.env.ZIBBY_PROD_ACCOUNT_API_URL||"https://account-api-prod.zibby.app",frontendUrl:process.env.ZIBBY_PROD_FRONTEND_URL||"https://studio.zibby.dev",description:"Production environment"}}});import{existsSync as Ne,mkdirSync as Lo,readFileSync as No,writeFileSync as Bo}from"fs";import{homedir as Be}from"os";import{join as X}from"path";function ze(){return process.env.ZIBBY_CONFIG_DIR||X(Be(),".zibby")}function Ke(){return X(ze(),"config.json")}function Ko(){let e=ze();Ne(e)||Lo(e,{recursive:!0})}function K(){try{let e=Ke();if(Ne(e)){let o=No(e,"utf-8");return JSON.parse(o)}}catch{}return{}}function V(e){Ko(),Bo(Ke(),JSON.stringify(e,null,2))}function De(){return K().sessionToken||null}function Re(e){let o=K();o.sessionToken=e,V(o)}function Ye(){return K().user||null}function Fe(e){let o=K();o.user=e,V(o)}function Ge(e){let o=K();o.proxyUrl=e,V(o)}function He(e){let o=K();o.mem0ProxyUrl=e,V(o)}function Me(e){let o=K();o.projects=e,V(o)}var zo,Rt,Ve=L(()=>{zo=X(Be(),".zibby"),Rt=X(zo,"config.json")});import{existsSync as Gt,mkdirSync as Ht,readFileSync as Mt,writeFileSync as Vt,unlinkSync as Jt}from"fs";import{resolve as Zt}from"path";import{homedir as Xt}from"os";var Je=L(()=>{});import y from"chalk";import ge from"ora";import{spawn as Do}from"child_process";function Ro(e){let o=process.platform;try{let t,n;return o==="darwin"?(t="open",n=[e]):o==="win32"?(t="cmd",n=["/c","start","",e]):(t="xdg-open",n=[e]),Do(t,n,{detached:!0,stdio:"ignore"}).unref(),!0}catch{return!1}}function Yo(){let e=De(),o=Ye();return e&&o?{loggedIn:!0,user:o,token:e}:{loggedIn:!1}}async function Ze(){try{console.log(y.cyan(`
2
2
  \u{1F510} Initiating login...
3
- `));let e=Yo();if(e.loggedIn){console.log(g.green("\u2705 Already logged in!")),console.log(g.gray(`User: ${e.user.email}`)),console.log(g.gray(`Name: ${e.user.name}
4
- `));let{createInterface:o}=await import("readline"),t=o({input:process.stdin,output:process.stdout});return new Promise((n,r)=>{let i=()=>{t.close(),process.stdin.isTTY&&process.stdin.setRawMode(!1)},s=()=>{console.log(g.yellow(`
3
+ `));let e=Yo();if(e.loggedIn){console.log(y.green("\u2705 Already logged in!")),console.log(y.gray(`User: ${e.user.email}`)),console.log(y.gray(`Name: ${e.user.name}
4
+ `));let{createInterface:o}=await import("readline"),t=o({input:process.stdin,output:process.stdout});return new Promise((n,r)=>{let i=()=>{t.close(),process.stdin.isTTY&&process.stdin.setRawMode(!1)},s=()=>{console.log(y.yellow(`
5
5
 
6
6
  \u26A0\uFE0F Login cancelled
7
- `)),i(),process.exit(0)};process.on("SIGINT",s),t.question(g.yellow("Continue with this session? (Y/n): "),async c=>{process.removeListener("SIGINT",s),i();try{if(c.toLowerCase()==="n"||c.toLowerCase()==="no"){console.log(g.gray(`Starting new login...
8
- `));let u=await Ze();n(u)}else console.log(g.green(`Using existing session.
9
- `)),n({success:!0,...e})}catch(u){r(u)}})})}return await Ze()}catch(e){return console.error(g.red(`
10
- \u274C Login failed:`,e.message)),{success:!1,error:e.message}}}async function Fo(e){let o=T();try{let t=await fetch(`${o}/projects`,{headers:{Authorization:`Bearer ${e}`}});if(t.ok){let r=((await t.json()).projects||[]).map(i=>({name:i.name,projectId:i.projectId,apiToken:i.apiToken}));return Me(r),r}}catch(t){console.log(g.gray(`\u26A0\uFE0F Could not fetch projects: ${t.message}`))}return[]}async function Ze(){let e=T(),o=pe("Requesting login code...").start(),t=await fetch(`${e}/cli/login/initiate`,{method:"POST",headers:{"Content-Type":"application/json"}});if(!t.ok){o.fail("Failed to request login code");let m=await t.json();throw new Error(m.error||"Failed to initiate login")}let{deviceCode:n,userCode:r,verificationUrl:i,expiresIn:s,interval:c}=await t.json();o.succeed("Login code generated"),console.log(""),console.log(g.cyan("\u2554\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2557")),console.log(g.cyan("\u2551")+g.white.bold(" Complete login in your browser ")+g.cyan("\u2551")),console.log(g.cyan("\u255A\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u255D")),console.log(""),console.log(g.white("Opening browser to login page...")),console.log(g.gray(`Code expires in ${Math.floor(s/60)} minutes`)),console.log(""),await Do(i)||(console.log(g.yellow("\u26A0\uFE0F Could not open browser automatically.")),console.log(g.white("Please open this URL manually: ")+g.blue(i)),console.log(""));let l=pe("Waiting for authorization...").start(),d=(c||3)*1e3,$=Math.floor(s/(c||3)),b=0,y=!1,v=()=>{y=!0,l.stop(),console.log(g.yellow(`
7
+ `)),i(),process.exit(0)};process.on("SIGINT",s),t.question(y.yellow("Continue with this session? (Y/n): "),async c=>{process.removeListener("SIGINT",s),i();try{if(c.toLowerCase()==="n"||c.toLowerCase()==="no"){console.log(y.gray(`Starting new login...
8
+ `));let u=await We();n(u)}else console.log(y.green(`Using existing session.
9
+ `)),n({success:!0,...e})}catch(u){r(u)}})})}return await We()}catch(e){return console.error(y.red(`
10
+ \u274C Login failed:`,e.message)),{success:!1,error:e.message}}}async function Fo(e){let o=O();try{let t=await fetch(`${o}/projects`,{headers:{Authorization:`Bearer ${e}`}});if(t.ok){let r=((await t.json()).projects||[]).map(i=>({name:i.name,projectId:i.projectId,apiToken:i.apiToken}));return Me(r),r}}catch(t){console.log(y.gray(`\u26A0\uFE0F Could not fetch projects: ${t.message}`))}return[]}async function We(){let e=O(),o=ge("Requesting login code...").start(),t=await fetch(`${e}/cli/login/initiate`,{method:"POST",headers:{"Content-Type":"application/json"}});if(!t.ok){o.fail("Failed to request login code");let k=await t.json();throw new Error(k.error||"Failed to initiate login")}let{deviceCode:n,userCode:r,verificationUrl:i,expiresIn:s,interval:c}=await t.json();o.succeed("Login code generated"),console.log(""),console.log(y.cyan("\u2554\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2557")),console.log(y.cyan("\u2551")+y.white.bold(" Complete login in your browser ")+y.cyan("\u2551")),console.log(y.cyan("\u255A\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u255D")),console.log(""),console.log(y.white("Opening browser to login page...")),console.log(y.gray(`Code expires in ${Math.floor(s/60)} minutes`)),console.log(""),await Ro(i)||(console.log(y.yellow("\u26A0\uFE0F Could not open browser automatically.")),console.log(y.white("Please open this URL manually: ")+y.blue(i)),console.log(""));let l=ge("Waiting for authorization...").start(),d=(c||3)*1e3,E=Math.floor(s/(c||3)),b=0,h=!1,$=()=>{h=!0,l.stop(),console.log(y.yellow(`
11
11
 
12
12
  \u26A0\uFE0F Login cancelled
13
- `)),process.exit(0)};process.on("SIGINT",v);try{for(;b<$&&!y;){await Go(d),b++;let m=await fetch(`${e}/cli/login/poll`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({deviceCode:n})});if(m.status===202)continue;if(!m.ok){l.fail("Authorization failed");let p=await m.json();throw new Error(p.error||"Authorization failed")}let a=await m.json();if(a.status==="authorized"){l.succeed(g.white("Authorization successful!")),De(a.token),Fe(a.user),a.proxyUrl&&Ge(a.proxyUrl),a.mem0ProxyUrl&&He(a.mem0ProxyUrl),console.log(""),console.log(g.gray(`User: ${a.user.email}`));let p=pe("Fetching projects...").start(),E=await Fo(a.token);return p.succeed(`Fetched ${E.length} project${E.length!==1?"s":""}`),console.log(g.gray(`Session saved to: ~/.zibby/config.json
14
- `)),{success:!0,loggedIn:!0,user:a.user,token:a.token}}if(a.status==="denied")throw l.fail("Authorization denied"),new Error("User denied authorization")}throw l.fail("Login timeout"),new Error("Login timed out - please try again")}finally{process.removeListener("SIGINT",v)}}function Go(e){return new Promise(o=>setTimeout(o,e))}var qe=L(()=>{Z();Ve();Je()});import{existsSync as Ho,readFileSync as Mo}from"fs";import{join as Vo}from"path";import ge from"chalk";import{confirm as Jo}from"@inquirer/prompts";function Xe(){try{let e=process.env.HOME||process.env.USERPROFILE;if(!e)return null;let o=Vo(e,".zibby","config.json");return Ho(o)&&JSON.parse(Mo(o,"utf-8")).sessionToken||null}catch{return null}}function de(){console.log(`
15
- Not authenticated.`),console.log(` Run ${ge.cyan("zibby login")} or set ${ge.cyan("ZIBBY_API_KEY")} in your environment.
16
- `)}async function q(e={}){let o=e.apiKey||process.env.ZIBBY_API_KEY||null,t=Xe();if(t||o)return{sessionToken:t,apiKey:o};if(!process.stdin.isTTY){if(e.optional)return{sessionToken:null,apiKey:null};de(),process.exit(1)}console.log(ge.yellow(`
17
- Not logged in.`));let n;try{n=await Jo({message:"Open browser to log in now?",default:!0})}catch{n=!1}if(!n){if(e.optional)return{sessionToken:null,apiKey:null};de(),process.exit(1)}if(await We(),t=Xe(),!t){if(e.optional)return{sessionToken:null,apiKey:null};de(),process.exit(1)}return{sessionToken:t,apiKey:null}}var ye=L(()=>{qe()});import{existsSync as Zo,readFileSync as Wo,writeFileSync as mn,mkdirSync as wn}from"fs";import{join as qo}from"path";import{homedir as Xo}from"os";function Qo(){return qo(Xo(),".zibby","config.json")}function he(){try{let e=Qo();return Zo(e)?JSON.parse(Wo(e,"utf-8")):{}}catch{return{}}}var X,Qe=L(()=>{X={cursor:{envVar:"CURSOR_API_KEY",label:"Cursor API Key",url:"https://cursor.com/settings"},claude:{envVar:"ANTHROPIC_API_KEY",label:"Anthropic API Key",url:"https://console.anthropic.com/settings/keys"},codex:{envVar:"OPENAI_API_KEY",label:"OpenAI API Key",url:"https://platform.openai.com/api-keys"},gemini:{envVar:"GEMINI_API_KEY",label:"Gemini API Key",url:"https://aistudio.google.com/app/apikey"}}});import{readFileSync as et,existsSync as ot}from"fs";import tt from"dotenv";function Q(e){return typeof e=="string"&&me.test(e)}function eo(e){if(typeof e!="string"||e.length===0)throw new Error("Expected KEY=value, got empty argument");let o=e.indexOf("=");if(o<=0)throw new Error(`Expected KEY=value, got "${e}" \u2014 missing '=' or empty key`);let t=e.slice(0,o),n=e.slice(o+1);if(!Q(t))throw new Error(`Invalid env var name "${t}" \u2014 must match ${me} (uppercase letters, digits, underscores; can't start with a digit)`);return{key:t,value:n}}function H(e){if(!Array.isArray(e)||e.length===0)return{};let o={};for(let t of e){if(!ot(t))throw new Error(`--env file not found: ${t}`);let n=tt.parse(et(t,"utf-8"));for(let[r,i]of Object.entries(n)){if(!Q(r))throw new Error(`Invalid env var name "${r}" in ${t} \u2014 must match ${me} (uppercase letters, digits, underscores; can't start with a digit)`);o[r]=i}}return o}function N(e,o,t){let n=String(e).replace(/\/+$/,"");return t?`${n}/workflows/${o}/env/${encodeURIComponent(t)}`:`${n}/workflows/${o}/env`}function we(e){return!Array.isArray(e)||e.length===0?"No env vars set on this workflow.":[...e].sort().map(t=>` ${t}`).join(`
18
- `)}var me,ke=L(()=>{me=/^[A-Z_][A-Z0-9_]*$/});var lo={};_e(lo,{pickLocalUpload:()=>io,readDeployedUuid:()=>so,readFullClaudeOauthBlob:()=>no,readLocalUpload:()=>co,resolveAgentAuthChoice:()=>ro,resolveCheckResult:()=>ao,resolveWorkflowAgent:()=>ve,runCloudCredsCheck:()=>mt,writeTempEnvBag:()=>Ae,writeTempEnvFile:()=>yt});import h from"chalk";import nt from"inquirer";import{execSync as rt}from"node:child_process";import{existsSync as oo,readFileSync as to,writeFileSync as st,chmodSync as it,unlinkSync as ct}from"node:fs";import{homedir as at,tmpdir as lt}from"node:os";import{join as be}from"node:path";import{randomBytes as ut}from"node:crypto";function no(){if(process.platform==="darwin")try{let e=rt('security find-generic-password -s "Claude Code-credentials" -w',{encoding:"utf-8",stdio:["ignore","pipe","ignore"]}).trim();if(e){let o=JSON.parse(e);if(o?.claudeAiOauth?.accessToken)return o.claudeAiOauth}}catch{}try{let e=be(at(),".claude",".credentials.json");return oo(e)&&JSON.parse(to(e,"utf-8"))?.claudeAiOauth||null}catch{return null}}function ro(e){let o=ve(e);if(!o)return null;let t=e?.agent;if(!t||typeof t!="object")return null;let n=t[o];if(n&&typeof n=="object"&&typeof n.auth=="string"){let r=n.auth.toLowerCase();if(r==="oauth"||r==="api")return r}return null}function ve(e){if(!e||typeof e!="object")return null;let o=e.agent;if(!o)return null;if(typeof o=="string")return X[o]?o:null;if(typeof o=="object"){if(typeof o.provider=="string"&&X[o.provider])return o.provider;for(let t of Object.keys(o))if(X[t])return t}return null}function so(e){if(!e)return null;let o=be(e,".zibby-deploy.json");if(!oo(o))return null;try{let t=JSON.parse(to(o,"utf-8"));if(typeof t?.uuid=="string"&&t.uuid)return t.uuid}catch{}return null}function io(e,o,t){let r=(pt[e]||[]).slice().sort((i,s)=>t&&i.kind===t&&s.kind!==t?-1:t&&s.kind===t&&i.kind!==t?1:0);for(let i of r){let s=o?.[i.localVar];if(typeof s=="string"&&s.trim())return{...i,value:s.trim()}}return null}function co(e,o,{readConfig:t=he}={}){let n=t()||{},r=n.agentKeys&&typeof n.agentKeys=="object"?n.agentKeys:{};return io(e,r,o)}async function dt({apiUrl:e,sessionToken:o,uuid:t,fetchImpl:n}){let r=await n(N(e,t),{method:"GET",headers:{"Content-Type":"application/json",Authorization:`Bearer ${o}`}});if(!r.ok)throw new Error(`GET /workflows/${t}/env \u2192 HTTP ${r.status}`);let i=await r.json();return Array.isArray(i?.keys)?i.keys:[]}function gt(e,o){if(!e?.length)return!1;try{let t=H(e);return o.some(n=>Object.prototype.hasOwnProperty.call(t,n)&&typeof t[n]=="string"&&t[n].trim().length>0)}catch{return!1}}async function ao({workflowAgent:e,workflowUuid:o,authChoice:t,envFiles:n=[],sessionToken:r,apiUrl:i,fetchImpl:s=globalThis.fetch,readConfig:c=he}){if(!e)return{status:"error",detail:"workflowAgent unresolved (no agent in .zibby.config.mjs)"};let u=ft[e];if(!u)return{status:"error",detail:`unknown agent: ${e}`};if(!r||!i)return{status:"error",detail:"missing sessionToken or apiUrl"};if(o)try{let d=await dt({apiUrl:i,sessionToken:r,uuid:o,fetchImpl:s}),$=u.find(b=>d.includes(b));if($)return{status:"ok-already-set",acceptedVars:u,matchedVar:$}}catch(d){if(!/HTTP 404/.test(d.message))return{status:"error",detail:d.message}}if(gt(n,u))return{status:"ok-via-env-flag",acceptedVars:u};let l=co(e,t,{readConfig:c});return l?{status:"mismatch-can-upload",acceptedVars:u,candidate:l}:{status:"mismatch-no-local",acceptedVars:u}}function yt({uploadAs:e,value:o}){return Ae({[e]:o})}function Ae(e){let o=be(lt(),`zibby-creds-${ut(8).toString("hex")}.env`),t=Object.entries(e).map(([r,i])=>{let s=String(i);return/[\s"'={}[\]:,]/.test(s)?`${r}='${s.replace(/'/g,"'\\''")}'`:`${r}=${s}`});st(o,`${t.join(`
13
+ `)),process.exit(0)};process.on("SIGINT",$);try{for(;b<E&&!h;){await Go(d),b++;let k=await fetch(`${e}/cli/login/poll`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({deviceCode:n})});if(k.status===202)continue;if(!k.ok){l.fail("Authorization failed");let f=await k.json();throw new Error(f.error||"Authorization failed")}let a=await k.json();if(a.status==="authorized"){l.succeed(y.white("Authorization successful!")),Re(a.token),Fe(a.user),a.proxyUrl&&Ge(a.proxyUrl),a.mem0ProxyUrl&&He(a.mem0ProxyUrl),console.log(""),console.log(y.gray(`User: ${a.user.email}`));let f=ge("Fetching projects...").start(),x=await Fo(a.token);return f.succeed(`Fetched ${x.length} project${x.length!==1?"s":""}`),console.log(y.gray(`Session saved to: ~/.zibby/config.json
14
+ `)),{success:!0,loggedIn:!0,user:a.user,token:a.token}}if(a.status==="denied")throw l.fail("Authorization denied"),new Error("User denied authorization")}throw l.fail("Login timeout"),new Error("Login timed out - please try again")}finally{process.removeListener("SIGINT",$)}}function Go(e){return new Promise(o=>setTimeout(o,e))}var qe=L(()=>{q();Ve();Je()});import{existsSync as Ho,readFileSync as Mo}from"fs";import{join as Vo}from"path";import he from"chalk";import{confirm as Jo}from"@inquirer/prompts";function Xe(){try{let e=process.env.HOME||process.env.USERPROFILE;if(!e)return null;let o=Vo(e,".zibby","config.json");return Ho(o)&&JSON.parse(Mo(o,"utf-8")).sessionToken||null}catch{return null}}function ye(){console.log(`
15
+ Not authenticated.`),console.log(` Run ${he.cyan("zibby login")} or set ${he.cyan("ZIBBY_API_KEY")} in your environment.
16
+ `)}async function Q(e={}){let o=e.apiKey||process.env.ZIBBY_API_KEY||null,t=Xe();if(t||o)return{sessionToken:t,apiKey:o};if(!process.stdin.isTTY){if(e.optional)return{sessionToken:null,apiKey:null};ye(),process.exit(1)}console.log(he.yellow(`
17
+ Not logged in.`));let n;try{n=await Jo({message:"Open browser to log in now?",default:!0})}catch{n=!1}if(!n){if(e.optional)return{sessionToken:null,apiKey:null};ye(),process.exit(1)}if(await Ze(),t=Xe(),!t){if(e.optional)return{sessionToken:null,apiKey:null};ye(),process.exit(1)}return{sessionToken:t,apiKey:null}}var me=L(()=>{qe()});import{existsSync as Wo,readFileSync as Zo,writeFileSync as mn,mkdirSync as wn}from"fs";import{join as qo}from"path";import{homedir as Xo}from"os";function Qo(){return qo(Xo(),".zibby","config.json")}function we(){try{let e=Qo();return Wo(e)?JSON.parse(Zo(e,"utf-8")):{}}catch{return{}}}var ee,Qe=L(()=>{ee={cursor:{envVar:"CURSOR_API_KEY",label:"Cursor API Key",url:"https://cursor.com/settings"},claude:{envVar:"ANTHROPIC_API_KEY",label:"Anthropic API Key",url:"https://console.anthropic.com/settings/keys"},codex:{envVar:"OPENAI_API_KEY",label:"OpenAI API Key",url:"https://platform.openai.com/api-keys"},gemini:{envVar:"GEMINI_API_KEY",label:"Gemini API Key",url:"https://aistudio.google.com/app/apikey"}}});import{readFileSync as et,existsSync as ot}from"fs";import tt from"dotenv";function oe(e){return typeof e=="string"&&ke.test(e)}function eo(e){if(typeof e!="string"||e.length===0)throw new Error("Expected KEY=value, got empty argument");let o=e.indexOf("=");if(o<=0)throw new Error(`Expected KEY=value, got "${e}" \u2014 missing '=' or empty key`);let t=e.slice(0,o),n=e.slice(o+1);if(!oe(t))throw new Error(`Invalid env var name "${t}" \u2014 must match ${ke} (uppercase letters, digits, underscores; can't start with a digit)`);return{key:t,value:n}}function J(e){if(!Array.isArray(e)||e.length===0)return{};let o={};for(let t of e){if(!ot(t))throw new Error(`--env file not found: ${t}`);let n=tt.parse(et(t,"utf-8"));for(let[r,i]of Object.entries(n)){if(!oe(r))throw new Error(`Invalid env var name "${r}" in ${t} \u2014 must match ${ke} (uppercase letters, digits, underscores; can't start with a digit)`);o[r]=i}}return o}function B(e,o,t){let n=String(e).replace(/\/+$/,"");return t?`${n}/workflows/${o}/env/${encodeURIComponent(t)}`:`${n}/workflows/${o}/env`}function ve(e){return!Array.isArray(e)||e.length===0?"No env vars set on this workflow.":[...e].sort().map(t=>` ${t}`).join(`
18
+ `)}var ke,be=L(()=>{ke=/^[A-Z_][A-Z0-9_]*$/});var lo={};Ie(lo,{pickLocalUpload:()=>io,readDeployedUuid:()=>so,readFullClaudeOauthBlob:()=>no,readLocalUpload:()=>co,resolveAgentAuthChoice:()=>ro,resolveCheckResult:()=>ao,resolveWorkflowAgent:()=>Ae,runCloudCredsCheck:()=>mt,writeTempEnvBag:()=>Ee,writeTempEnvFile:()=>yt});import m from"chalk";import nt from"inquirer";import{execSync as rt}from"node:child_process";import{existsSync as oo,readFileSync as to,writeFileSync as st,chmodSync as it,unlinkSync as ct}from"node:fs";import{homedir as at,tmpdir as lt}from"node:os";import{join as $e}from"node:path";import{randomBytes as ut}from"node:crypto";function no(){if(process.platform==="darwin")try{let e=rt('security find-generic-password -s "Claude Code-credentials" -w',{encoding:"utf-8",stdio:["ignore","pipe","ignore"]}).trim();if(e){let o=JSON.parse(e);if(o?.claudeAiOauth?.accessToken)return o.claudeAiOauth}}catch{}try{let e=$e(at(),".claude",".credentials.json");return oo(e)&&JSON.parse(to(e,"utf-8"))?.claudeAiOauth||null}catch{return null}}function ro(e){let o=Ae(e);if(!o)return null;let t=e?.agent;if(!t||typeof t!="object")return null;let n=t[o];if(n&&typeof n=="object"&&typeof n.auth=="string"){let r=n.auth.toLowerCase();if(r==="oauth"||r==="api")return r}return null}function Ae(e){if(!e||typeof e!="object")return null;let o=e.agent;if(!o)return null;if(typeof o=="string")return ee[o]?o:null;if(typeof o=="object"){if(typeof o.provider=="string"&&ee[o.provider])return o.provider;for(let t of Object.keys(o))if(ee[t])return t}return null}function so(e){if(!e)return null;let o=$e(e,".zibby-deploy.json");if(!oo(o))return null;try{let t=JSON.parse(to(o,"utf-8"));if(typeof t?.uuid=="string"&&t.uuid)return t.uuid}catch{}return null}function io(e,o,t){let r=(pt[e]||[]).slice().sort((i,s)=>t&&i.kind===t&&s.kind!==t?-1:t&&s.kind===t&&i.kind!==t?1:0);for(let i of r){let s=o?.[i.localVar];if(typeof s=="string"&&s.trim())return{...i,value:s.trim()}}return null}function co(e,o,{readConfig:t=we}={}){let n=t()||{},r=n.agentKeys&&typeof n.agentKeys=="object"?n.agentKeys:{};return io(e,r,o)}async function dt({apiUrl:e,sessionToken:o,uuid:t,fetchImpl:n}){let r=await n(B(e,t),{method:"GET",headers:{"Content-Type":"application/json",Authorization:`Bearer ${o}`}});if(!r.ok)throw new Error(`GET /workflows/${t}/env \u2192 HTTP ${r.status}`);let i=await r.json();return Array.isArray(i?.keys)?i.keys:[]}function gt(e,o){if(!e?.length)return!1;try{let t=J(e);return o.some(n=>Object.prototype.hasOwnProperty.call(t,n)&&typeof t[n]=="string"&&t[n].trim().length>0)}catch{return!1}}async function ao({workflowAgent:e,workflowUuid:o,authChoice:t,envFiles:n=[],sessionToken:r,apiUrl:i,fetchImpl:s=globalThis.fetch,readConfig:c=we}){if(!e)return{status:"error",detail:"workflowAgent unresolved (no agent in .zibby.config.mjs)"};let u=ft[e];if(!u)return{status:"error",detail:`unknown agent: ${e}`};if(!r||!i)return{status:"error",detail:"missing sessionToken or apiUrl"};if(o)try{let d=await dt({apiUrl:i,sessionToken:r,uuid:o,fetchImpl:s}),E=u.find(b=>d.includes(b));if(E)return{status:"ok-already-set",acceptedVars:u,matchedVar:E}}catch(d){if(!/HTTP 404/.test(d.message))return{status:"error",detail:d.message}}if(gt(n,u))return{status:"ok-via-env-flag",acceptedVars:u};let l=co(e,t,{readConfig:c});return l?{status:"mismatch-can-upload",acceptedVars:u,candidate:l}:{status:"mismatch-no-local",acceptedVars:u}}function yt({uploadAs:e,value:o}){return Ee({[e]:o})}function Ee(e){let o=$e(lt(),`zibby-creds-${ut(8).toString("hex")}.env`),t=Object.entries(e).map(([r,i])=>{let s=String(i);return/[\s"'={}[\]:,]/.test(s)?`${r}='${s.replace(/'/g,"'\\''")}'`:`${r}=${s}`});st(o,`${t.join(`
19
19
  `)}
20
- `,"utf-8");try{it(o,384)}catch{}let n=()=>{try{ct(o)}catch{}};return process.on("exit",n),process.on("SIGINT",()=>{n(),process.exit(130)}),o}function ht({workflowAgent:e,acceptedVars:o,projectId:t,log:n}){n(h.red(` \u2716 No local ${e} credentials found to upload.`)),n(h.red(` Cloud Fargate needs ${o.join(" or ")} in this workflow's env.`)),n(""),n(h.yellow(" Pick one:")),e==="claude"?(n(h.yellow(" A. Set up Claude OAuth (no API costs):")),n(h.gray(" 1. claude (the CLI from @anthropic-ai/claude-code) \u2192 log in, quit")),n(h.gray(" 2. zibby init -f # picks up the token")),n(h.gray(" 3. zibby workflow deploy <name> # we'll upload it")),n(h.yellow(" B. Buy a Claude API key (pay-per-token):")),n(h.gray(" https://console.anthropic.com/settings/keys")),n(h.gray(" zibby workflow env set <uuid> ANTHROPIC_API_KEY=sk-ant-..."))):(n(h.yellow(` A. Get an API key for ${e}:`)),n(h.gray(` zibby workflow env set <uuid> ${o[0]}=<your-key>`))),n(h.yellow(" C. Skip this gate (deploy WILL fail at trigger time):")),n(h.gray(" zibby workflow deploy <name> --no-creds-check")),n(h.gray(" (or set the project-level key at")),n(h.gray(` https://studio.zibby.dev/projects/${t}/settings)`)),n("")}async function mt({userConfig:e,workflowDir:o,projectId:t,sessionToken:n,apiUrl:r,deployOptions:i,fetchImpl:s,readConfig:c,prompt:u,log:l=console.log,writeTempBag:d=Ae,readFullBlob:$=no}){let b=ve(e);if(!b)return{proceed:!0};let y=ro(e),v=so(o),m=Array.isArray(i?.env)?i.env:[],a=await ao({workflowAgent:b,workflowUuid:v,authChoice:y,envFiles:m,sessionToken:n,apiUrl:r,fetchImpl:s,readConfig:c});switch(a.status){case"ok-already-set":return{proceed:!0};case"ok-via-env-flag":return{proceed:!0};case"mismatch-can-upload":{let{candidate:p}=a,E=u||(async({message:P})=>{let{proceed:D}=await nt.prompt([{type:"confirm",name:"proceed",message:P,default:!0}]);return D}),K=p.kind==="oauth"?"OAuth token":"API key",O=`Cloud workflow has no ${b} credentials. Upload your local ${K} (${p.uploadAs})?`,S;try{S=await E({message:O})}catch{S=!1}if(!S)return l(h.yellow(` \u26A0 Deploying without ${p.uploadAs} on the workflow.`)),l(h.yellow(" Trigger will fail until you set it manually:")),l(h.gray(` zibby workflow env set <uuid> ${p.uploadAs}=<your-token>`)),{proceed:!0};let x,I="";if(b==="claude"&&p.kind==="oauth"){let P=$();P&&P.accessToken?(x={CLAUDE_CODE_CREDENTIALS_JSON:JSON.stringify({claudeAiOauth:P}),CLAUDE_CODE_OAUTH_TOKEN:P.accessToken},I=" (full Keychain blob \u2014 accessToken + refreshToken + expiresAt + scopes)"):x={CLAUDE_CODE_OAUTH_TOKEN:p.value}}else x={[p.uploadAs]:p.value};let R=d(x);return i&&(Array.isArray(i.env)||(i.env=[]),i.env.push(R)),l(h.green(` \u2713 Will upload ${K}${I} to workflow env after deploy.`)),{proceed:!0,addedEnvFile:R}}case"mismatch-no-local":return ht({workflowAgent:b,acceptedVars:a.acceptedVars,projectId:t,log:l}),{proceed:!1};default:return l(h.gray(` (skipped cloud-creds sanity check: ${a.detail||"unknown error"})`)),{proceed:!0}}}var ft,pt,uo=L(()=>{Qe();ke();ft={claude:["ANTHROPIC_API_KEY","CLAUDE_CODE_OAUTH_TOKEN"],cursor:["CURSOR_API_KEY"],codex:["OPENAI_API_KEY"],gemini:["GOOGLE_API_KEY"]};pt={claude:[{localVar:"ANTHROPIC_API_KEY",uploadAs:"ANTHROPIC_API_KEY",kind:"api"},{localVar:"CLAUDE_CODE_OAUTH_TOKEN",uploadAs:"CLAUDE_CODE_OAUTH_TOKEN",kind:"oauth"}],cursor:[{localVar:"CURSOR_API_KEY",uploadAs:"CURSOR_API_KEY",kind:"api"}],codex:[{localVar:"OPENAI_API_KEY",uploadAs:"OPENAI_API_KEY",kind:"api"}],gemini:[{localVar:"GEMINI_API_KEY",uploadAs:"GOOGLE_API_KEY",kind:"api"},{localVar:"GOOGLE_API_KEY",uploadAs:"GOOGLE_API_KEY",kind:"api"}]}});var fo={};_e(fo,{listEnvCommand:()=>wt,pushEnvCommand:()=>vt,setEnvCommand:()=>kt,syncEnvFromFiles:()=>At,unsetEnvCommand:()=>bt});import k from"chalk";import ee from"ora";async function oe(e){let{sessionToken:o,apiKey:t}=await q({apiKey:e.apiKey}),n=o||t;return n||(console.log(k.red("\n Not authenticated \u2014 run `zibby login` or pass --api-key.\n")),process.exit(1)),{authToken:n,apiUrl:T()}}async function te(e,o,t,n,r){let i={method:e,headers:{Authorization:`Bearer ${t}`,...n?{"Content-Type":"application/json"}:{}},...n?{body:JSON.stringify(n)}:{}},s;try{s=await fetch(o,i)}catch(u){r&&r.fail(`Network error: ${u.message}`),process.exit(1)}let c;try{c=await s.json()}catch{c={}}return s.ok||(r?r.fail(c.error||c.message||`HTTP ${s.status}`):console.log(k.red(`
20
+ `,"utf-8");try{it(o,384)}catch{}let n=()=>{try{ct(o)}catch{}};return process.on("exit",n),process.on("SIGINT",()=>{n(),process.exit(130)}),o}function ht({workflowAgent:e,acceptedVars:o,projectId:t,log:n}){n(m.red(` \u2716 No local ${e} credentials found to upload.`)),n(m.red(` Cloud Fargate needs ${o.join(" or ")} in this workflow's env.`)),n(""),n(m.yellow(" Pick one:")),e==="claude"?(n(m.yellow(" A. Set up Claude OAuth (no API costs):")),n(m.gray(" 1. claude (the CLI from @anthropic-ai/claude-code) \u2192 log in, quit")),n(m.gray(" 2. zibby init -f # picks up the token")),n(m.gray(" 3. zibby workflow deploy <name> # we'll upload it")),n(m.yellow(" B. Buy a Claude API key (pay-per-token):")),n(m.gray(" https://console.anthropic.com/settings/keys")),n(m.gray(" zibby workflow env set <uuid> ANTHROPIC_API_KEY=sk-ant-..."))):(n(m.yellow(` A. Get an API key for ${e}:`)),n(m.gray(` zibby workflow env set <uuid> ${o[0]}=<your-key>`))),n(m.yellow(" C. Skip this gate (deploy WILL fail at trigger time):")),n(m.gray(" zibby workflow deploy <name> --no-creds-check")),n(m.gray(" (or set the project-level key at")),n(m.gray(` https://studio.zibby.dev/projects/${t}/settings)`)),n("")}async function mt({userConfig:e,workflowDir:o,projectId:t,sessionToken:n,apiUrl:r,deployOptions:i,fetchImpl:s,readConfig:c,prompt:u,log:l=console.log,writeTempBag:d=Ee,readFullBlob:E=no}){let b=Ae(e);if(!b)return{proceed:!0};let h=ro(e),$=so(o),k=Array.isArray(i?.env)?i.env:[],a=await ao({workflowAgent:b,workflowUuid:$,authChoice:h,envFiles:k,sessionToken:n,apiUrl:r,fetchImpl:s,readConfig:c});switch(a.status){case"ok-already-set":return{proceed:!0};case"ok-via-env-flag":return{proceed:!0};case"mismatch-can-upload":{let{candidate:f}=a,x=u||(async({message:R})=>{let{proceed:S}=await nt.prompt([{type:"confirm",name:"proceed",message:R,default:!0}]);return S}),D=typeof f.value=="string"?f.value:"",U=D.length>=4?`***${D.slice(-4)}`:"***",I;f.kind==="oauth"?I=D.startsWith("sk-ant-oat01-")?`OAuth token ${U} \xB7 long-lived setup-token`:`OAuth token ${U} \xB7 Keychain (short-lived, ~30d)`:I=`API key ${U}`;let T=`Cloud workflow has no ${b} credentials. Upload saved ${I}?`,j;try{j=await x({message:T})}catch{j=!1}if(!j)return l(m.yellow(` \u26A0 Deploying without ${f.uploadAs} on the workflow.`)),l(m.yellow(" Trigger will fail until you set it manually:")),l(m.gray(` zibby workflow env set <uuid> ${f.uploadAs}=<your-token>`)),{proceed:!0};let N,z="";if(b==="claude"&&f.kind==="oauth")if(typeof f.value=="string"&&f.value.startsWith("sk-ant-oat01-"))N={CLAUDE_CODE_OAUTH_TOKEN:f.value},z=` (long-lived setup-token \u2026${f.value.slice(-4)} \u2014 no expiry)`;else{let S=E();S&&S.accessToken?(N={CLAUDE_CODE_CREDENTIALS_JSON:JSON.stringify({claudeAiOauth:S}),CLAUDE_CODE_OAUTH_TOKEN:S.accessToken},z=" (Keychain blob \u2014 short-lived, expires ~30 days; run `claude setup-token` for a long-lived token to avoid this)"):N={CLAUDE_CODE_OAUTH_TOKEN:f.value}}else N={[f.uploadAs]:f.value};let G=d(N);return i&&(Array.isArray(i.env)||(i.env=[]),i.env.push(G)),l(m.green(` \u2713 Will upload ${I}${z} to workflow env after deploy.`)),{proceed:!0,addedEnvFile:G}}case"mismatch-no-local":return ht({workflowAgent:b,acceptedVars:a.acceptedVars,projectId:t,log:l}),{proceed:!1};default:return l(m.gray(` (skipped cloud-creds sanity check: ${a.detail||"unknown error"})`)),{proceed:!0}}}var ft,pt,uo=L(()=>{Qe();be();ft={claude:["ANTHROPIC_API_KEY","CLAUDE_CODE_OAUTH_TOKEN"],cursor:["CURSOR_API_KEY"],codex:["OPENAI_API_KEY"],gemini:["GOOGLE_API_KEY"]};pt={claude:[{localVar:"ANTHROPIC_API_KEY",uploadAs:"ANTHROPIC_API_KEY",kind:"api"},{localVar:"CLAUDE_CODE_OAUTH_TOKEN",uploadAs:"CLAUDE_CODE_OAUTH_TOKEN",kind:"oauth"}],cursor:[{localVar:"CURSOR_API_KEY",uploadAs:"CURSOR_API_KEY",kind:"api"}],codex:[{localVar:"OPENAI_API_KEY",uploadAs:"OPENAI_API_KEY",kind:"api"}],gemini:[{localVar:"GEMINI_API_KEY",uploadAs:"GOOGLE_API_KEY",kind:"api"},{localVar:"GOOGLE_API_KEY",uploadAs:"GOOGLE_API_KEY",kind:"api"}]}});var fo={};Ie(fo,{listEnvCommand:()=>wt,pushEnvCommand:()=>bt,setEnvCommand:()=>kt,syncEnvFromFiles:()=>$t,unsetEnvCommand:()=>vt});import v from"chalk";import te from"ora";async function ne(e){let{sessionToken:o,apiKey:t}=await Q({apiKey:e.apiKey}),n=o||t;return n||(console.log(v.red("\n Not authenticated \u2014 run `zibby login` or pass --api-key.\n")),process.exit(1)),{authToken:n,apiUrl:O()}}async function re(e,o,t,n,r){let i={method:e,headers:{Authorization:`Bearer ${t}`,...n?{"Content-Type":"application/json"}:{}},...n?{body:JSON.stringify(n)}:{}},s;try{s=await fetch(o,i)}catch(u){r&&r.fail(`Network error: ${u.message}`),process.exit(1)}let c;try{c=await s.json()}catch{c={}}return s.ok||(r?r.fail(c.error||c.message||`HTTP ${s.status}`):console.log(v.red(`
21
21
  ${c.error||c.message||`HTTP ${s.status}`}
22
- `)),process.exit(1)),c}async function wt(e,o={}){e||(console.log(k.red(`
23
- Workflow UUID is required`)),console.log(k.gray(` Usage: zibby workflow env list <uuid>
24
- `)),process.exit(1));let{authToken:t,apiUrl:n}=await oe(o),r=ee(`Fetching env keys for ${e}...`).start(),i=await te("GET",N(n,e),t,null,r),s=i.keys||[];r.succeed(`${s.length} env var${s.length===1?"":"s"} on workflow ${e}`),console.log(""),console.log(we(s)),i.envUpdatedAt&&console.log(k.gray(`
25
- Last updated: ${i.envUpdatedAt}`)),console.log("")}async function kt(e,o,t={}){(!e||!o)&&(console.log(k.red(`
26
- Both UUID and KEY=value are required`)),console.log(k.gray(` Usage: zibby workflow env set <uuid> KEY=value
27
- `)),process.exit(1));let n,r;try{({key:n,value:r}=eo(o))}catch(d){console.log(k.red(`
22
+ `)),process.exit(1)),c}async function wt(e,o={}){e||(console.log(v.red(`
23
+ Workflow UUID is required`)),console.log(v.gray(` Usage: zibby workflow env list <uuid>
24
+ `)),process.exit(1));let{authToken:t,apiUrl:n}=await ne(o),r=te(`Fetching env keys for ${e}...`).start(),i=await re("GET",B(n,e),t,null,r),s=i.keys||[];r.succeed(`${s.length} env var${s.length===1?"":"s"} on workflow ${e}`),console.log(""),console.log(ve(s)),i.envUpdatedAt&&console.log(v.gray(`
25
+ Last updated: ${i.envUpdatedAt}`)),console.log("")}async function kt(e,o,t={}){(!e||!o)&&(console.log(v.red(`
26
+ Both UUID and KEY=value are required`)),console.log(v.gray(` Usage: zibby workflow env set <uuid> KEY=value
27
+ `)),process.exit(1));let n,r;try{({key:n,value:r}=eo(o))}catch(d){console.log(v.red(`
28
28
  ${d.message}
29
- `)),process.exit(1)}let{authToken:i,apiUrl:s}=await oe(t),c=ee(`Setting ${n} on workflow ${e}...`).start(),l=((await te("PATCH",N(s,e,n),i,{value:r},c)).keys||[]).length;c.succeed(`Set ${k.cyan(n)} (workflow now has ${l} env var${l===1?"":"s"})`)}async function bt(e,o,t={}){(!e||!o)&&(console.log(k.red(`
30
- Both UUID and KEY are required`)),console.log(k.gray(` Usage: zibby workflow env unset <uuid> KEY
31
- `)),process.exit(1)),Q(o)||(console.log(k.red(`
29
+ `)),process.exit(1)}let{authToken:i,apiUrl:s}=await ne(t),c=te(`Setting ${n} on workflow ${e}...`).start(),l=((await re("PATCH",B(s,e,n),i,{value:r},c)).keys||[]).length;c.succeed(`Set ${v.cyan(n)} (workflow now has ${l} env var${l===1?"":"s"})`)}async function vt(e,o,t={}){(!e||!o)&&(console.log(v.red(`
30
+ Both UUID and KEY are required`)),console.log(v.gray(` Usage: zibby workflow env unset <uuid> KEY
31
+ `)),process.exit(1)),oe(o)||(console.log(v.red(`
32
32
  Invalid env var name "${o}"
33
- `)),process.exit(1));let{authToken:n,apiUrl:r}=await oe(t),i=ee(`Unsetting ${o} on workflow ${e}...`).start(),s=await te("DELETE",N(r,e,o),n,null,i),c=(s.keys||[]).length;s.removed?i.succeed(`Unset ${k.cyan(o)} (workflow now has ${c} env var${c===1?"":"s"})`):i.warn(`Key ${k.cyan(o)} was not set on workflow ${e} \u2014 nothing to do`)}async function vt(e,o={}){e||(console.log(k.red(`
34
- Workflow UUID is required`)),console.log(k.gray(` Usage: zibby workflow env push <uuid> --file .env [--file .env.prod]
35
- `)),process.exit(1));let t=Array.isArray(o.file)?o.file:o.file?[o.file]:[];t.length===0&&(console.log(k.red(`
36
- At least one --file is required`)),console.log(k.gray(` Usage: zibby workflow env push <uuid> --file .env
37
- `)),process.exit(1));let n;try{n=H(t)}catch(u){console.log(k.red(`
33
+ `)),process.exit(1));let{authToken:n,apiUrl:r}=await ne(t),i=te(`Unsetting ${o} on workflow ${e}...`).start(),s=await re("DELETE",B(r,e,o),n,null,i),c=(s.keys||[]).length;s.removed?i.succeed(`Unset ${v.cyan(o)} (workflow now has ${c} env var${c===1?"":"s"})`):i.warn(`Key ${v.cyan(o)} was not set on workflow ${e} \u2014 nothing to do`)}async function bt(e,o={}){e||(console.log(v.red(`
34
+ Workflow UUID is required`)),console.log(v.gray(` Usage: zibby workflow env push <uuid> --file .env [--file .env.prod]
35
+ `)),process.exit(1));let t=Array.isArray(o.file)?o.file:o.file?[o.file]:[];t.length===0&&(console.log(v.red(`
36
+ At least one --file is required`)),console.log(v.gray(` Usage: zibby workflow env push <uuid> --file .env
37
+ `)),process.exit(1));let n;try{n=J(t)}catch(u){console.log(v.red(`
38
38
  ${u.message}
39
- `)),process.exit(1)}let r=Object.keys(n);r.length===0&&(console.log(k.yellow(`
39
+ `)),process.exit(1)}let r=Object.keys(n);r.length===0&&(console.log(v.yellow(`
40
40
  No env vars found in ${t.join(", ")} \u2014 nothing to push.
41
- `)),process.exit(0));let{authToken:i,apiUrl:s}=await oe(o),c=ee(`Pushing ${r.length} env var${r.length===1?"":"s"} to ${e}...`).start();await te("PUT",N(s,e),i,{env:n},c),c.succeed(`Pushed ${r.length} env var${r.length===1?"":"s"} from ${t.join(", ")}`),console.log(""),console.log(we(r)),console.log("")}async function At({uuid:e,files:o,authToken:t,apiUrl:n,spinner:r}){let i=H(o),s=Object.keys(i);if(s.length===0)return{count:0,files:o};let c=N(n,e),u={method:"PUT",headers:{Authorization:`Bearer ${t}`,"Content-Type":"application/json"},body:JSON.stringify({env:i})},l=await fetch(c,u);if(!l.ok){let d=await l.json().catch(()=>({}));throw new Error(`Env push failed: ${d.error||d.message||`HTTP ${l.status}`}`)}return r&&(r.text=`Synced ${s.length} env var${s.length===1?"":"s"} to workflow`),{count:s.length,files:o}}var po=L(()=>{ye();Z();ke()});import{existsSync as U,readFileSync as $e,writeFileSync as $t}from"fs";import{join as j}from"path";import A from"chalk";import ne from"ora";import Et from"dotenv";import{select as go}from"@inquirer/prompts";import{existsSync as Eo}from"fs";import{join as xo}from"path";import{pathToFileURL as jo}from"url";async function Se(e){let o=xo(e,".zibby.config.mjs");if(!Eo(o))throw new Error(".zibby.config.mjs not found");try{let t=await import(jo(o).href);return t.default||t}catch(t){throw new Error(`Failed to load .zibby.config.mjs: ${t.message}`,{cause:t})}}Z();import{createHash as Ue}from"crypto";import{readFileSync as Io,readdirSync as _o,statSync as ae,existsSync as So}from"fs";import{join as le,sep as Uo}from"path";function Pe(e){let o=Po(e);o.sort((n,r)=>n.rel<r.rel?-1:n.rel>r.rel?1:0);let t=Ue("sha256");for(let{rel:n,abs:r}of o){let i=Ue("sha256").update(Io(r)).digest("hex");t.update(`${n}
41
+ `)),process.exit(0));let{authToken:i,apiUrl:s}=await ne(o),c=te(`Pushing ${r.length} env var${r.length===1?"":"s"} to ${e}...`).start();await re("PUT",B(s,e),i,{env:n},c),c.succeed(`Pushed ${r.length} env var${r.length===1?"":"s"} from ${t.join(", ")}`),console.log(""),console.log(ve(r)),console.log("")}async function $t({uuid:e,files:o,authToken:t,apiUrl:n,spinner:r}){let i=J(o),s=Object.keys(i);if(s.length===0)return{count:0,files:o};let c=B(n,e),u={method:"PUT",headers:{Authorization:`Bearer ${t}`,"Content-Type":"application/json"},body:JSON.stringify({env:i})},l=await fetch(c,u);if(!l.ok){let d=await l.json().catch(()=>({}));throw new Error(`Env push failed: ${d.error||d.message||`HTTP ${l.status}`}`)}return r&&(r.text=`Synced ${s.length} env var${s.length===1?"":"s"} to workflow`),{count:s.length,files:o}}var po=L(()=>{me();q();be()});import{existsSync as P,readFileSync as xe,writeFileSync as At}from"fs";import{join as _}from"path";import w from"chalk";import se from"ora";import Et from"dotenv";import{select as go}from"@inquirer/prompts";import{existsSync as Eo}from"fs";import{join as xo}from"path";import{pathToFileURL as _o}from"url";async function Se(e){let o=xo(e,".zibby.config.mjs");if(!Eo(o))throw new Error(".zibby.config.mjs not found");try{let t=await import(_o(o).href);return t.default||t}catch(t){throw new Error(`Failed to load .zibby.config.mjs: ${t.message}`,{cause:t})}}q();import{createHash as Ue}from"crypto";import{readFileSync as jo,readdirSync as Io,statSync as ue,existsSync as So}from"fs";import{join as fe,sep as Uo}from"path";function Te(e){let o=To(e);o.sort((n,r)=>n.rel<r.rel?-1:n.rel>r.rel?1:0);let t=Ue("sha256");for(let{rel:n,abs:r}of o){let i=Ue("sha256").update(jo(r)).digest("hex");t.update(`${n}
42
42
  ${i}
43
- `)}return t.digest("hex")}function Po(e){let o=new Set(["node_modules",".git","dist",".zibby"]),t=new Set(["graph.mjs","package.json","package-lock.json","workflow.json","zibby.config.json","zibby.config.mjs"]),n=new Set([".zibby-deploy.json",".DS_Store"]),r=[];if(!So(e))return r;function i(s,c){let u=c.split("/").pop();n.has(u)||(t.has(u)||/\.(mjs|js)$/.test(u))&&r.push({rel:c,abs:s})}for(let s of ue(e)){let c=le(e,s),u;try{u=ae(c)}catch{continue}u.isFile()&&i(c,s)}for(let s of ue(e)){if(o.has(s))continue;let c=le(e,s),u;try{u=ae(c)}catch{continue}if(u.isDirectory())for(let l of ue(c)){let d=le(c,l),$;try{$=ae(d)}catch{continue}if(!$.isFile())continue;let b=`${s}/${l}`.split(Uo).join("/");i(d,b)}}return r}function ue(e){try{return _o(e)}catch{return[]}}function Te(e,o){return e?.uuid||e?.workflowUuid||o?.uuid||null}var To=4;function fe({elapsedMs:e,phase:o,step:t}){let r=` \u2014 ${Math.max(0,Math.floor(e/1e3))}s`;return t?`Building bundle on Zibby Cloud... [${t.n}/${To}] ${t.label}${r}`:o?`Building bundle on Zibby Cloud... (${o.toLowerCase()})${r}`:`Building bundle on Zibby Cloud...${r}`}var Oo=/\[(\d+)\/\d+\]\s+(.+?)\s*\.{0,3}\s*$/;function Oe(e){if(!e)return null;let o=Oo.exec(e);if(!o)return null;let t=parseInt(o[1],10);return!Number.isInteger(t)||t<1?null:{n:t,label:o[2].trim()}}function Ce(){let e=!1;return function(t){if(!t)return!0;let n=t.replace(/\s+$/,"");if(e)return/^\s*"\s*$/.test(n)&&(e=!1),!0;if(!Co(t))return!1;let r=n.replace(/^\[Container\]\s+\d{4}\/\d{2}\/\d{2}\s+\d{2}:\d{2}:\d{2}\.\d+\s*/,"");return r.startsWith("Running command ")&&(r.match(/"/g)||[]).length%2===1&&(e=!0),!0}}function Co(e){if(!e)return!0;let t=e.trim().replace(/^\[Container\]\s+\d{4}\/\d{2}\/\d{2}\s+\d{2}:\d{2}:\d{2}\.\d+\s*/,"");return!!(/^Phase complete:/.test(t)||/^Phase context status code:/.test(t)||/^Entering phase /.test(t)||/^Running command /.test(t)||/^Phase is /.test(t)||/^Waiting for /.test(t)||/^Registering with agent$/.test(t)||/^Running on CodeBuild /.test(t)||/^Phases found in YAML:/.test(t)||/^CODEBUILD_SRC_DIR=/.test(t)||/^YAML location is /.test(t)||/^Processing environment variables$/.test(t)||/^Moving to directory /.test(t)||/^Cache is not defined /.test(t)||/^Skip cache due to:/.test(t)||/^\s*INSTALL: \d+ commands?$/.test(t)||/^\s*BUILD: \d+ commands?$/.test(t)||/^Set report auto-discover timeout/.test(t)||/^Expanding /.test(t)||/^Assembling file list$/.test(t)||/^No matching auto-discover/.test(t)||/^Report auto-discover/.test(t)||t==="")}function Le({uuid:e,name:o,projectId:t,result:n,existingManifest:r=null,now:i=()=>new Date().toISOString()}){let s=n?.version??(r?.version??0)+1;return{uuid:e,name:o,projectId:t,version:s,deployedAt:i()}}ye();Et.config();async function xt({apiUrl:e,projectId:o,workflowName:t,buildId:n,authToken:r,spinner:i,verbose:s}){let c=Date.now(),u,l=null,d=null,$=Ce(),b=setInterval(()=>{i.text=fe({elapsedMs:Date.now()-c,phase:l,step:d})},1e3);try{for(;;){let y=new URL(`${e}/projects/${o}/workflows/${t}/build/${n}`);u&&y.searchParams.set("logsToken",u);let v;try{let m=await fetch(y,{headers:{Authorization:`Bearer ${r}`}});if(!m.ok)throw new Error(`HTTP ${m.status}`);v=await m.json()}catch{await new Promise(a=>setTimeout(a,2e3));continue}v.phase&&v.phase!==l&&(l=v.phase),v.nextLogsToken&&v.nextLogsToken!==u&&(u=v.nextLogsToken);for(let m of v.logEvents||[]){let a=String(m.m||"").trimEnd();if(!a)continue;let p=Oe(a);if(p&&(d=p),s){process.stdout.write(` ${a}
44
- `);continue}$(a)||p||process.stdout.write(` ${a}
45
- `)}if(i.text=fe({elapsedMs:Date.now()-c,phase:l,step:d}),v.done){let m=(Date.now()-c)/1e3;return{status:v.status,elapsedSec:m,lastPhase:l}}await new Promise(m=>setTimeout(m,2e3))}}finally{clearInterval(b)}}async function jt(e,o){let t=T(),n=ne("Fetching projects...").start();try{let r=o||e,i=await fetch(`${t}/projects`,{method:"GET",headers:{"Content-Type":"application/json",Authorization:`Bearer ${r}`}});i.ok||(n.fail("Failed to fetch projects"),process.exit(1));let s=await i.json();Array.isArray(s)||(s.projects&&Array.isArray(s.projects)?s=s.projects:s.data&&Array.isArray(s.data)?s=s.data:(n.fail("Unexpected response format"),process.exit(1))),(!s||s.length===0)&&(n.fail("No projects found"),process.exit(1)),n.succeed(`Found ${s.length} project${s.length===1?"":"s"}`),console.log("");let c=s.map(l=>{let d=l.projectId||l.id||l._id||"unknown";return{name:`${l.name||l.projectName||"Unnamed"} (${d})`,value:d}});return await go({message:"Select a project to deploy to:",choices:c})}catch(r){n.fail(`Error: ${r.message}`),process.exit(1)}}async function Zn(e,o={}){let t=process.cwd(),n=".zibby/workflows",r=null;try{r=await Se(t),n=r?.paths?.workflows||".zibby/workflows"}catch{}if(e){let a=j(t,n,e);U(a)||(console.log(`
43
+ `)}return t.digest("hex")}function To(e){let o=new Set(["node_modules",".git","dist",".zibby"]),t=new Set(["graph.mjs","package.json","package-lock.json","workflow.json","zibby.config.json","zibby.config.mjs"]),n=new Set([".zibby-deploy.json",".DS_Store"]),r=[];if(!So(e))return r;function i(s,c){let u=c.split("/").pop();n.has(u)||(t.has(u)||/\.(mjs|js)$/.test(u))&&r.push({rel:c,abs:s})}for(let s of pe(e)){let c=fe(e,s),u;try{u=ue(c)}catch{continue}u.isFile()&&i(c,s)}for(let s of pe(e)){if(o.has(s))continue;let c=fe(e,s),u;try{u=ue(c)}catch{continue}if(u.isDirectory())for(let l of pe(c)){let d=fe(c,l),E;try{E=ue(d)}catch{continue}if(!E.isFile())continue;let b=`${s}/${l}`.split(Uo).join("/");i(d,b)}}return r}function pe(e){try{return Io(e)}catch{return[]}}function Pe(e,o){return e?.uuid||e?.workflowUuid||o?.uuid||null}var Po=4;function de({elapsedMs:e,phase:o,step:t}){let r=` \u2014 ${Math.max(0,Math.floor(e/1e3))}s`;return t?`Building bundle on Zibby Cloud... [${t.n}/${Po}] ${t.label}${r}`:o?`Building bundle on Zibby Cloud... (${o.toLowerCase()})${r}`:`Building bundle on Zibby Cloud...${r}`}var Oo=/\[(\d+)\/\d+\]\s+(.+?)\s*\.{0,3}\s*$/;function Oe(e){if(!e)return null;let o=Oo.exec(e);if(!o)return null;let t=parseInt(o[1],10);return!Number.isInteger(t)||t<1?null:{n:t,label:o[2].trim()}}function Ce(){let e=!1;return function(t){if(!t)return!0;let n=t.replace(/\s+$/,"");if(e)return/^\s*"\s*$/.test(n)&&(e=!1),!0;if(!Co(t))return!1;let r=n.replace(/^\[Container\]\s+\d{4}\/\d{2}\/\d{2}\s+\d{2}:\d{2}:\d{2}\.\d+\s*/,"");return r.startsWith("Running command ")&&(r.match(/"/g)||[]).length%2===1&&(e=!0),!0}}function Co(e){if(!e)return!0;let t=e.trim().replace(/^\[Container\]\s+\d{4}\/\d{2}\/\d{2}\s+\d{2}:\d{2}:\d{2}\.\d+\s*/,"");return!!(/^Phase complete:/.test(t)||/^Phase context status code:/.test(t)||/^Entering phase /.test(t)||/^Running command /.test(t)||/^Phase is /.test(t)||/^Waiting for /.test(t)||/^Registering with agent$/.test(t)||/^Running on CodeBuild /.test(t)||/^Phases found in YAML:/.test(t)||/^CODEBUILD_SRC_DIR=/.test(t)||/^YAML location is /.test(t)||/^Processing environment variables$/.test(t)||/^Moving to directory /.test(t)||/^Cache is not defined /.test(t)||/^Skip cache due to:/.test(t)||/^\s*INSTALL: \d+ commands?$/.test(t)||/^\s*BUILD: \d+ commands?$/.test(t)||/^Set report auto-discover timeout/.test(t)||/^Expanding /.test(t)||/^Assembling file list$/.test(t)||/^No matching auto-discover/.test(t)||/^Report auto-discover/.test(t)||t==="")}function Le({uuid:e,name:o,projectId:t,result:n,existingManifest:r=null,now:i=()=>new Date().toISOString()}){let s=n?.version??(r?.version??0)+1;return{uuid:e,name:o,projectId:t,version:s,deployedAt:i()}}me();Et.config();async function xt({apiUrl:e,projectId:o,workflowName:t,buildId:n,authToken:r,spinner:i,verbose:s}){let c=Date.now(),u,l=null,d=null,E=Ce(),b=setInterval(()=>{i.text=de({elapsedMs:Date.now()-c,phase:l,step:d})},1e3);try{for(;;){let h=new URL(`${e}/projects/${o}/workflows/${t}/build/${n}`);u&&h.searchParams.set("logsToken",u);let $;try{let k=await fetch(h,{headers:{Authorization:`Bearer ${r}`}});if(!k.ok)throw new Error(`HTTP ${k.status}`);$=await k.json()}catch{await new Promise(a=>setTimeout(a,2e3));continue}$.phase&&$.phase!==l&&(l=$.phase),$.nextLogsToken&&$.nextLogsToken!==u&&(u=$.nextLogsToken);for(let k of $.logEvents||[]){let a=String(k.m||"").trimEnd();if(!a)continue;let f=Oe(a);if(f&&(d=f),s){process.stdout.write(` ${a}
44
+ `);continue}E(a)||f||process.stdout.write(` ${a}
45
+ `)}if(i.text=de({elapsedMs:Date.now()-c,phase:l,step:d}),$.done){let k=(Date.now()-c)/1e3;return{status:$.status,elapsedSec:k,lastPhase:l}}await new Promise(k=>setTimeout(k,2e3))}}finally{clearInterval(b)}}async function _t(e,o){let t=O(),n=se("Fetching projects...").start();try{let r=o||e,i=await fetch(`${t}/projects`,{method:"GET",headers:{"Content-Type":"application/json",Authorization:`Bearer ${r}`}});i.ok||(n.fail("Failed to fetch projects"),process.exit(1));let s=await i.json();Array.isArray(s)||(s.projects&&Array.isArray(s.projects)?s=s.projects:s.data&&Array.isArray(s.data)?s=s.data:(n.fail("Unexpected response format"),process.exit(1))),(!s||s.length===0)&&(n.fail("No projects found"),process.exit(1)),n.succeed(`Found ${s.length} project${s.length===1?"":"s"}`),console.log("");let c=s.map(l=>{let d=l.projectId||l.id||l._id||"unknown";return{name:`${l.name||l.projectName||"Unnamed"} (${d})`,value:d}});return await go({message:"Select a project to deploy to:",choices:c})}catch(r){n.fail(`Error: ${r.message}`),process.exit(1)}}async function Wn(e,o={}){let t=process.cwd(),n=".zibby/workflows",r=null;try{r=await Se(t),n=r?.paths?.workflows||".zibby/workflows"}catch{}if(e){let a=_(t,n,e);P(a)||(console.log(`
46
46
  Error: Workflow not found: ${n}/${e}/`),console.log(" Run `zibby workflow list` to see local workflows,"),console.log(` or scaffold a new one: zibby workflow new ${e}
47
- `),process.exit(1))}else{let a=j(t,n);U(a)||(console.log(`
47
+ `),process.exit(1))}else{let a=_(t,n);P(a)||(console.log(`
48
48
  Error: No workflows found in ${n}/`),console.log(` Create one with: zibby workflow new <name>
49
- `),process.exit(1));let{readdir:p,stat:E}=await import("fs/promises"),K=await p(a),O=[];for(let S of K){let x=j(a,S);if(!(await E(x)).isDirectory())continue;(U(j(x,"graph.mjs"))||U(j(x,"graph.js")))&&O.push(S)}O.length===0&&(console.log(`
49
+ `),process.exit(1));let{readdir:f,stat:x}=await import("fs/promises"),D=await f(a),U=[];for(let I of D){let T=_(a,I);if(!(await x(T)).isDirectory())continue;(P(_(T,"graph.mjs"))||P(_(T,"graph.js")))&&U.push(I)}U.length===0&&(console.log(`
50
50
  Error: No workflows found in ${n}/`),console.log(` Create one with: zibby workflow new <name>
51
- `),process.exit(1)),console.log(""),e=await go({message:"Select a workflow to deploy:",choices:O.map(S=>({name:S,value:S}))})}let{sessionToken:i,apiKey:s}=await q({apiKey:o.apiKey}),c=o.project||process.env.ZIBBY_PROJECT_ID;c||(console.log(""),c=await jt(s,i));let u=i||s,l=j(t,n,e),d=j(l,"graph.mjs"),$=j(l,"workflow.json");U(d)||(console.log(`
52
- Error: graph.mjs not found in ${n}/${e}/`),process.exit(1));let b=(()=>{try{return Pe(l)}catch(a){return console.log(A.gray(` (checksum skipped: ${a.message})`)),null}})();if(!o.force&&b)try{let a=T(),p=await fetch(`${a}/projects/${c}/workflows/${e}`,{headers:{Authorization:`Bearer ${u}`}});if(p.ok){let E=await p.json();if(E&&E.sourceChecksum===b){console.log(""),console.log(` ${A.green("\u2713")} ${e} unchanged \u2014 skipping deploy (use --force to override)`),console.log("");return}}}catch(a){console.log(A.gray(` (checksum lookup failed: ${a.message} \u2014 proceeding with deploy)`))}if(o.credsCheck!==!1)try{let{runCloudCredsCheck:a}=await Promise.resolve().then(()=>(uo(),lo));(await a({userConfig:r,workflowDir:l,projectId:c,sessionToken:u,apiUrl:T(),deployOptions:o})).proceed||(console.log(""),process.exit(1))}catch(a){console.log(A.gray(` (creds-check skipped: ${a.message})`))}console.log(`
51
+ `),process.exit(1)),console.log(""),e=await go({message:"Select a workflow to deploy:",choices:U.map(I=>({name:I,value:I}))})}let{sessionToken:i,apiKey:s}=await Q({apiKey:o.apiKey}),c=o.project||process.env.ZIBBY_PROJECT_ID;c||(console.log(""),c=await _t(s,i));let u=i||s,l=_(t,n,e),d=_(l,"graph.mjs"),E=_(l,"workflow.json");P(d)||(console.log(`
52
+ Error: graph.mjs not found in ${n}/${e}/`),process.exit(1));let b=(()=>{try{return Te(l)}catch(a){return console.log(w.gray(` (checksum skipped: ${a.message})`)),null}})();if(!o.force&&b)try{let a=O(),f=await fetch(`${a}/projects/${c}/workflows/${e}`,{headers:{Authorization:`Bearer ${u}`}});if(f.ok){let x=await f.json();if(x&&x.sourceChecksum===b){console.log(""),console.log(`Already up to date. ${w.gray("(use --force to redeploy)")}`),console.log("");return}}}catch(a){console.log(w.gray(` (checksum lookup failed: ${a.message} \u2014 proceeding with deploy)`))}if(o.credsCheck!==!1)try{let{runCloudCredsCheck:a}=await Promise.resolve().then(()=>(uo(),lo));(await a({userConfig:r,workflowDir:l,projectId:c,sessionToken:u,apiUrl:O(),deployOptions:o})).proceed||(console.log(""),process.exit(1))}catch(a){console.log(w.gray(` (creds-check skipped: ${a.message})`))}console.log(`
53
53
  Deploying Workflow
54
- `),console.log(" ".padEnd(60,"-")),console.log(` Workflow: ${e}`),console.log(` Project: ${c}`),console.log(" ".padEnd(60,"-")),console.log("");let y=ne("Validating workflow...").start(),v=$e(d,"utf-8");if(v.includes("@zibby/core")||v.includes("@zibby/skills")){let a=j(l,"package.json");U(a)||(y.fail("Missing package.json"),console.log(""),console.log(A.red(" \u2717 graph.mjs imports @zibby packages but no package.json found")),console.log(""),console.log(A.yellow(" Create package.json with:")),console.log(""),console.log(A.gray(" {")),console.log(A.gray(' "type": "module",')),console.log(A.gray(' "dependencies": {')),console.log(A.gray(' "@zibby/core": "workspace:*"')),console.log(A.gray(" }")),console.log(A.gray(" }")),console.log(""),process.exit(1));let p=JSON.parse($e(a,"utf-8"));!{...p.dependencies,...p.devDependencies}["@zibby/core"]&&v.includes("@zibby/core")&&(y.fail("Missing @zibby/core dependency"),console.log(""),console.log(A.red(" \u2717 graph.mjs imports @zibby/core but it's not in package.json")),console.log(""),console.log(A.yellow(" Add to package.json dependencies:")),console.log(A.gray(' "@zibby/core": "workspace:*"')),console.log(""),process.exit(1))}y.text="Loading workflow graph...";try{let{pathToFileURL:a}=await import("url"),p=await import(a(d).href),E;if(p.default)if(typeof p.default=="function"){let f=p.default.prototype;f&&f.buildGraph?E=new p.default:E=p.default()}else y.fail("graph.mjs must export a class or factory function"),process.exit(1);else{let f=Object.values(p).find(w=>w.prototype&&w.prototype.buildGraph);f?E=new f:(y.fail("graph.mjs must export a WorkflowAgent class or factory function"),process.exit(1))}let O=E.buildGraph().serialize(),{readdir:S,readFile:x}=await import("fs/promises"),I={};y.text="Packaging workflow sources...";let R=await x(d,"utf-8");if(I["graph.mjs"]=R,U($)){let f=await x($,"utf-8");I["workflow.json"]=f}let P=j(l,"nodes");if(U(P)){let f=await S(P);for(let w of f)if(w.endsWith(".mjs")||w.endsWith(".js")){let _=j(P,w),ce=await x(_,"utf-8");I[`nodes/${w}`]=ce}}let D=j(l,"package.json");if(U(D)){let f=await x(D,"utf-8");I["package.json"]=f,y.text="Including package.json for dependencies..."}let Ee=j(l,"package-lock.json");if(U(Ee)){let f=await x(Ee,"utf-8");I["package-lock.json"]=f}r&&typeof r=="object"&&(I["zibby.config.json"]=JSON.stringify(r,null,2)),y.text=`Uploading to cloud (${O.nodes.size||Object.keys(O.nodes||{}).length} nodes, ${Object.keys(I).length} files)...`;let Y=T(),xe=JSON.stringify({format:1,sources:I}),je=Buffer.byteLength(xe,"utf8"),M=await fetch(`${Y}/projects/${c}/workflows/${e}/sources/presign`,{method:"POST",headers:{"Content-Type":"application/json",Authorization:`Bearer ${u}`},body:JSON.stringify({contentLength:je})});if(!M.ok){let f=await M.json().catch(()=>({}));y.fail("Deploy failed (presign)"),console.log(` Error: ${f.error||f.message||M.statusText}
55
- `),process.exit(1)}let yo=await M.json(),{uploadUrl:ho,key:mo,headers:wo}=yo,re=await fetch(ho,{method:"PUT",headers:{...wo||{},"Content-Length":String(je)},body:xe});if(!re.ok){let f=await re.text().catch(()=>"");y.fail("Deploy failed (S3 upload)"),console.log(` S3 PUT failed: ${re.status} ${f.slice(0,200)}
56
- `),process.exit(1)}y.text="Saving workflow definition...";let V=await fetch(`${Y}/projects/${c}/workflows/${e}`,{method:"PUT",headers:{"Content-Type":"application/json",Authorization:`Bearer ${u}`},body:JSON.stringify({graph:O,sourcesStagingKey:mo,isDefault:!1,...b?{sourceChecksum:b}:{},...typeof o.warm=="number"?{warmEnabled:!0,warmCount:o.warm}:o.warm===!1?{warmEnabled:!1,warmCount:0}:{}})});if(!V.ok){let f=await V.json().catch(()=>({}));y.fail("Deploy failed"),console.log(` Error: ${f.message||f.error||V.statusText}
57
- `),process.exit(1)}let se=await V.json(),J=j(l,".zibby-deploy.json"),ie=U(J)?(()=>{try{return JSON.parse($e(J,"utf-8"))}catch{return null}})():null,C=Te(se,ie);if(C){let f=Le({uuid:C,name:e,projectId:c,result:se,existingManifest:ie});try{$t(J,`${JSON.stringify(f,null,2)}
58
- `,"utf-8")}catch(w){console.log(` Warning: failed to write ${J}: ${w.message}`)}}let ko=ie?"Updated":"Deployed";if(y.succeed(`${ko} ${e} (v${se.version||1})`),typeof o.warm=="number"?console.log(` ${A.cyan("\u25CF")} Warm pool: ${o.warm} task${o.warm===1?"":"s"} (paid feature \u2014 provisioning may take ~60s)`):o.warm===!1&&console.log(` ${A.gray("\u25CB")} Warm pool: disabled (workflow uses default cold-start path)`),!(o.noWait===!0||process.env.ZIBBY_DEPLOY_NO_BUNDLE==="1")){console.log("");let f=ne("Building bundle on Zibby Cloud...").start();try{let w=await fetch(`${Y}/projects/${c}/workflows/${e}/build`,{method:"POST",headers:{"Content-Type":"application/json",Authorization:`Bearer ${u}`}});if(w.ok){let _=await w.json(),{buildId:ce}=_,bo=o.verbose===!0||process.env.ZIBBY_DEPLOY_VERBOSE==="1",{status:Ie,elapsedSec:vo,lastPhase:Ao}=await xt({apiUrl:Y,projectId:c,workflowName:e,buildId:ce,authToken:u,spinner:f,verbose:bo});Ie==="SUCCEEDED"?f.succeed(`Bundle ready (${vo.toFixed(1)}s) \u2014 runtime npm install eliminated`):f.warn(`Bundle build ${Ie} at phase ${Ao||"unknown"} \u2014 workflow will fall back to runtime install`)}else{let _=await w.json().catch(()=>({}));f.warn(`Bundle build skipped: ${_.error||_.message||w.statusText}`),console.log(` Workflow will use slower runtime install path until next deploy.
59
- `)}}catch(w){f.warn(`Bundle build error: ${w.message}`)}}let z=Array.isArray(o.env)?o.env:o.env?[o.env]:[];if(z.length>0)if(!C)console.log(A.yellow(" Skipping --env sync: deploy did not return a workflow UUID."));else{console.log("");let f=ne(`Syncing env from ${z.join(", ")}...`).start();try{let{syncEnvFromFiles:w}=await Promise.resolve().then(()=>(po(),fo)),{count:_}=await w({uuid:C,files:z,authToken:u,apiUrl:Y,spinner:f});_===0?f.warn(`No env vars found in ${z.join(", ")} \u2014 workflow env unchanged.`):f.succeed(`Synced ${_} env var${_===1?"":"s"} from ${z.join(", ")}`)}catch(w){f.fail(`Env sync failed: ${w.message}`),console.log(A.gray(` Re-run after fixing: zibby workflow env push ${C} ${z.map(_=>`--file ${_}`).join(" ")}
60
- `))}}console.log(""),C&&console.log(` UUID: ${C}`),console.log(""),console.log(" Next steps:"),console.log(` zibby workflow run ${e} Run locally`),C&&console.log(` zibby workflow trigger ${C} Run in cloud`),console.log(" zibby workflow list View all workflows"),console.log("")}catch(a){y.fail("Deploy failed"),console.log(` Error: ${a.message}
61
- `),process.exit(1)}}export{Zn as deployWorkflowCommand};
54
+ `),console.log(" ".padEnd(60,"-")),console.log(` Workflow: ${e}`),console.log(` Project: ${c}`),console.log(" ".padEnd(60,"-")),console.log("");let h=se("Validating workflow...").start(),$=xe(d,"utf-8");if($.includes("@zibby/core")||$.includes("@zibby/skills")){let a=_(l,"package.json");P(a)||(h.fail("Missing package.json"),console.log(""),console.log(w.red(" \u2717 graph.mjs imports @zibby packages but no package.json found")),console.log(""),console.log(w.yellow(" Create package.json with:")),console.log(""),console.log(w.gray(" {")),console.log(w.gray(' "type": "module",')),console.log(w.gray(' "dependencies": {')),console.log(w.gray(' "@zibby/core": "workspace:*"')),console.log(w.gray(" }")),console.log(w.gray(" }")),console.log(""),process.exit(1));let f=JSON.parse(xe(a,"utf-8"));!{...f.dependencies,...f.devDependencies}["@zibby/core"]&&$.includes("@zibby/core")&&(h.fail("Missing @zibby/core dependency"),console.log(""),console.log(w.red(" \u2717 graph.mjs imports @zibby/core but it's not in package.json")),console.log(""),console.log(w.yellow(" Add to package.json dependencies:")),console.log(w.gray(' "@zibby/core": "workspace:*"')),console.log(""),process.exit(1))}h.text="Loading workflow graph...";try{let{pathToFileURL:a}=await import("url"),f=await import(a(d).href),x;if(f.default)if(typeof f.default=="function"){let p=f.default.prototype;p&&p.buildGraph?x=new f.default:x=f.default()}else h.fail("graph.mjs must export a class or factory function"),process.exit(1);else{let p=Object.values(f).find(g=>g.prototype&&g.prototype.buildGraph);p?x=new p:(h.fail("graph.mjs must export a WorkflowAgent class or factory function"),process.exit(1))}let U=x.buildGraph().serialize(),{readdir:I,readFile:T}=await import("fs/promises"),j={};h.text="Packaging workflow sources...";let N=await T(d,"utf-8");if(j["graph.mjs"]=N,P(E)){let p=await T(E,"utf-8");j["workflow.json"]=p}let z=_(l,"nodes");if(P(z)){let p=await I(z);for(let g of p)if(g.endsWith(".mjs")||g.endsWith(".js")){let A=_(z,g),H=await T(A,"utf-8");j[`nodes/${g}`]=H}}let G=_(l,"package.json");if(P(G)){let p=await T(G,"utf-8");j["package.json"]=p,h.text="Including package.json for dependencies..."}let R=_(l,"package-lock.json");if(P(R)){let p=await T(R,"utf-8");j["package-lock.json"]=p}r&&typeof r=="object"&&(j["zibby.config.json"]=JSON.stringify(r,null,2)),h.text=`Uploading to cloud (${U.nodes.size||Object.keys(U.nodes||{}).length} nodes, ${Object.keys(j).length} files)...`;let S=O(),ie=JSON.stringify({format:1,sources:j}),_e=Buffer.byteLength(ie,"utf8"),W=await fetch(`${S}/projects/${c}/workflows/${e}/sources/presign`,{method:"POST",headers:{"Content-Type":"application/json",Authorization:`Bearer ${u}`},body:JSON.stringify({contentLength:_e})});if(!W.ok){let p=await W.json().catch(()=>({}));h.fail("Deploy failed (presign)"),console.log(` Error: ${p.error||p.message||W.statusText}
55
+ `),process.exit(1)}let yo=await W.json(),{uploadUrl:ho,key:mo,headers:wo}=yo,ce=await fetch(ho,{method:"PUT",headers:{...wo||{},"Content-Length":String(_e)},body:ie});if(!ce.ok){let p=await ce.text().catch(()=>"");h.fail("Deploy failed (S3 upload)"),console.log(` S3 PUT failed: ${ce.status} ${p.slice(0,200)}
56
+ `),process.exit(1)}h.text="Saving workflow definition...";let Y=await fetch(`${S}/projects/${c}/workflows/${e}`,{method:"PUT",headers:{"Content-Type":"application/json",Authorization:`Bearer ${u}`},body:JSON.stringify({graph:U,sourcesStagingKey:mo,isDefault:!1,...b?{sourceChecksum:b}:{},...typeof o.warm=="number"?{warmEnabled:!0,warmCount:o.warm}:o.warm===!1?{warmEnabled:!1,warmCount:0}:{}})});if(!Y.ok){let p=await Y.json().catch(()=>({})),g=p.message||p.error||Y.statusText;if(h.fail(`Deploy failed (${Y.status})`),console.log(""),Y.status===402){let A=g.match(/(https?:\/\/\S+)/),H=A?g.replace(A[0],"").replace(/Upgrade at\s*$/i,"").trim():g;console.log(` \u{1F4B3} ${w.yellow("Payment required")}`),console.log(""),console.log(` ${H}`),A&&(console.log(""),console.log(` Upgrade: ${w.cyan(A[0])}`)),console.log("")}else console.log(` Error: ${g}
57
+ `);process.exit(1)}let ae=await Y.json(),Z=_(l,".zibby-deploy.json"),le=P(Z)?(()=>{try{return JSON.parse(xe(Z,"utf-8"))}catch{return null}})():null,C=Pe(ae,le);if(C){let p=Le({uuid:C,name:e,projectId:c,result:ae,existingManifest:le});try{At(Z,`${JSON.stringify(p,null,2)}
58
+ `,"utf-8")}catch(g){console.log(` Warning: failed to write ${Z}: ${g.message}`)}}let ko=le?"Updated":"Deployed";if(h.succeed(`${ko} ${e} (v${ae.version||1})`),typeof o.warm=="number"?console.log(` ${w.cyan("\u25CF")} Warm pool: ${o.warm} task${o.warm===1?"":"s"} (paid feature \u2014 provisioning may take ~60s)`):o.warm===!1&&console.log(` ${w.gray("\u25CB")} Warm pool: disabled (workflow uses default cold-start path)`),!(o.noWait===!0||process.env.ZIBBY_DEPLOY_NO_BUNDLE==="1")){console.log("");let p=se("Building bundle on Zibby Cloud...").start();try{let g=await fetch(`${S}/projects/${c}/workflows/${e}/build`,{method:"POST",headers:{"Content-Type":"application/json",Authorization:`Bearer ${u}`}});if(g.ok){let A=await g.json(),{buildId:H}=A,vo=o.verbose===!0||process.env.ZIBBY_DEPLOY_VERBOSE==="1",{status:je,elapsedSec:bo,lastPhase:$o}=await xt({apiUrl:S,projectId:c,workflowName:e,buildId:H,authToken:u,spinner:p,verbose:vo});je==="SUCCEEDED"?p.succeed(`Bundle ready (${bo.toFixed(1)}s) \u2014 runtime npm install eliminated`):p.warn(`Bundle build ${je} at phase ${$o||"unknown"} \u2014 workflow will fall back to runtime install`)}else{let A=await g.json().catch(()=>({}));p.warn(`Bundle build skipped: ${A.error||A.message||g.statusText}`),console.log(` Workflow will use slower runtime install path until next deploy.
59
+ `)}}catch(g){p.warn(`Bundle build error: ${g.message}`)}}let F=Array.isArray(o.env)?o.env:o.env?[o.env]:[];if(F.length>0)if(!C)console.log(w.yellow(" Skipping --env sync: deploy did not return a workflow UUID."));else{console.log("");let p=se(`Syncing env from ${F.join(", ")}...`).start();try{let{syncEnvFromFiles:g}=await Promise.resolve().then(()=>(po(),fo)),{count:A}=await g({uuid:C,files:F,authToken:u,apiUrl:S,spinner:p});A===0?p.warn(`No env vars found in ${F.join(", ")} \u2014 workflow env unchanged.`):p.succeed(`Synced ${A} env var${A===1?"":"s"} from ${F.join(", ")}`)}catch(g){p.fail(`Env sync failed: ${g.message}`),console.log(w.gray(` Re-run after fixing: zibby workflow env push ${C} ${F.map(A=>`--file ${A}`).join(" ")}
60
+ `))}}console.log(""),C&&console.log(` UUID: ${C}`),console.log(""),console.log(" Next steps:"),console.log(` zibby workflow run ${e} Run locally`),C&&console.log(` zibby workflow trigger ${C} Run in cloud`),console.log(" zibby workflow list View all workflows"),console.log("")}catch(a){h.fail("Deploy failed"),console.log(` Error: ${a.message}
61
+ `),process.exit(1)}}export{Wn as deployWorkflowCommand};