arkna 1.0.0

package/bin/arkna.js

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+require('../dist/index.js');

package/dist/commands/connect.d.ts

@@ -0,0 +1,3 @@
+import { Command } from 'commander';
+export declare const connectCommand: Command;
+//# sourceMappingURL=connect.d.ts.map

package/dist/commands/connect.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"connect.d.ts","sourceRoot":"","sources":["../../src/commands/connect.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AA6EpC,eAAO,MAAM,cAAc,SAmOvB,CAAC"}

package/dist/commands/connect.js

@@ -0,0 +1,307 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.connectCommand = void 0;
+const commander_1 = require("commander");
+const inquirer_1 = __importDefault(require("inquirer"));
+const os = __importStar(require("os"));
+const path = __importStar(require("path"));
+const ui_1 = require("../lib/ui");
+const arkna_dir_1 = require("../lib/arkna-dir");
+const verify_1 = require("../lib/verify");
+const platforms_1 = require("../lib/platforms");
+const VALID_PLATFORMS = ['openclaw', 'crewai', 'langchain', 'custom'];
+/**
+ * Resolve token from (in priority order):
+ * 1. ARKNA_TOKEN env var
+ * 2. .arkna/.env file
+ * 3. Interactive secure prompt
+ * 4. -t flag (last resort — leaks to shell history)
+ */
+async function resolveToken(flagToken, baseDir) {
+    // 1. Env var
+    if (process.env.ARKNA_TOKEN) {
+        console.log(`  ${(0, ui_1.dim)('Token:')} from ARKNA_TOKEN env var`);
+        return process.env.ARKNA_TOKEN;
+    }
+    // 2. .arkna/.env
+    const envCreds = (0, arkna_dir_1.readArknaEnv)(baseDir);
+    if (envCreds?.token) {
+        console.log(`  ${(0, ui_1.dim)('Token:')} from .arkna/.env`);
+        return envCreds.token;
+    }
+    // 3. -t flag (warn about shell history)
+    if (flagToken) {
+        console.log(`  ${(0, ui_1.warn)('\u26A0')} ${(0, ui_1.dim)('Token passed via -t flag (visible in shell history)')}`);
+        return flagToken;
+    }
+    // 4. Interactive secure prompt
+    console.log(`  ${(0, ui_1.dim)('No token found. Run')} ${(0, ui_1.brand)('arkna login')} ${(0, ui_1.dim)('first, or paste token below:')}`);
+    const { token } = await inquirer_1.default.prompt([{
+            type: 'password',
+            name: 'token',
+            message: (0, ui_1.brand)('  Token:'),
+            mask: '\u25CF',
+            prefix: '',
+            validate: (input) => {
+                if (!input || !input.startsWith('intk_')) {
+                    return 'Token must start with intk_';
+                }
+                return true;
+            },
+        }]);
+    return token;
+}
+/**
+ * Resolve URL from (in priority order):
+ * 1. -u flag
+ * 2. ARKNA_URL env var
+ * 3. .arkna/.env file
+ * 4. Default
+ */
+function resolveUrl(flagUrl, baseDir) {
+    if (flagUrl)
+        return flagUrl;
+    if (process.env.ARKNA_URL)
+        return process.env.ARKNA_URL;
+    const envCreds = (0, arkna_dir_1.readArknaEnv)(baseDir);
+    if (envCreds?.url)
+        return envCreds.url;
+    return 'https://api.arkna.com.au';
+}
+exports.connectCommand = new commander_1.Command('connect')
+    .description('Wire an agent to route through the ARKNA governance gateway')
+    .argument('<platform>', `Agent platform (${VALID_PLATFORMS.join(', ')})`)
+    .option('-t, --token <token>', 'Integration token (prefer ARKNA_TOKEN env var instead)')
+    .option('-u, --url <url>', 'ARKNA gateway URL (or set ARKNA_URL env var)')
+    .option('-n, --name <name>', 'Agent name')
+    .option('-c, --config <path>', 'Path to agent config file (OpenClaw: YAML to modify)')
+    .option('-d, --dir <dir>', 'Output dir for wrapper files (CrewAI/LangChain)')
+    .action(async (platform, options) => {
+    (0, ui_1.banner)();
+    // ── Validate platform ────────────────────────────────────────────────
+    if (!VALID_PLATFORMS.includes(platform)) {
+        (0, ui_1.errorBox)('Invalid platform', [
+            `Got: ${platform}`,
+            (0, ui_1.dim)(`Valid platforms: ${VALID_PLATFORMS.join(', ')}`),
+        ]);
+        process.exit(1);
+    }
+    const outputDir = options.dir || process.cwd();
+    const baseDir = options.config ? path.dirname(options.config) : outputDir;
+    // ── Resolve URL ──────────────────────────────────────────────────────
+    const url = resolveUrl(options.url, baseDir);
+    if (!url.startsWith('http://') && !url.startsWith('https://')) {
+        (0, ui_1.errorBox)('Invalid gateway URL', [
+            `Got: ${url}`,
+            (0, ui_1.dim)('URL must start with http:// or https://'),
+        ]);
+        process.exit(1);
+    }
+    // ── Resolve token (env > .arkna/.env > prompt > flag) ────────────────
+    const token = await resolveToken(options.token, baseDir);
+    if (!token.startsWith('intk_')) {
+        (0, ui_1.errorBox)('Invalid token', [
+            (0, ui_1.dim)('Token must start with intk_'),
+            (0, ui_1.dim)('Create one in Settings > External Agents.'),
+        ]);
+        process.exit(1);
+    }
+    const agentName = options.name || os.hostname();
+    // ── Step 1: Platform-specific wiring ─────────────────────────────────
+    (0, ui_1.step)(1, 3, 'Wire Agent');
+    let patchText;
+    switch (platform) {
+        case 'openclaw': {
+            if (options.config) {
+                const spinner = (0, ui_1.startSpinner)('Modifying OpenClaw config...');
+                const result = (0, platforms_1.wireOpenClaw)(options.config, url, agentName);
+                spinner.stop();
+                if (!result.success) {
+                    (0, ui_1.errorBox)('Failed to modify config', [
+                        result.error || 'Unknown error',
+                    ]);
+                    process.exit(1);
+                }
+                if (result.alreadyConfigured) {
+                    console.log(`  ${(0, ui_1.dim)('connectors.arkna already exists \u2014 skipping.')}`);
+                }
+                else {
+                    console.log(`  ${(0, ui_1.brand)('\u2714')} Modified ${options.config}`);
+                    console.log(`  ${(0, ui_1.dim)('Backup saved to ' + options.config + '.bak')}`);
+                }
+            }
+            else {
+                // No config file provided — print the YAML block
+                console.log(`  ${(0, ui_1.dim)('No --config provided. Add this to your OpenClaw YAML:')}\n`);
+                console.log((0, ui_1.dim)((0, platforms_1.getOpenClawYamlBlock)(agentName)));
+                patchText = 'Add the YAML block above to your OpenClaw config file.';
+            }
+            break;
+        }
+        case 'crewai': {
+            const spinner = (0, ui_1.startSpinner)('Generating CrewAI wrapper...');
+            const result = (0, platforms_1.wireCrewAI)(outputDir, agentName);
+            spinner.stop();
+            if (!result.success) {
+                (0, ui_1.errorBox)('Failed to generate wrapper', [result.error || 'Unknown error']);
+                process.exit(1);
+            }
+            patchText = result.patch;
+            console.log(`  ${(0, ui_1.brand)('\u2714')} Created ${result.wrapperPath}`);
+            break;
+        }
+        case 'langchain': {
+            const spinner = (0, ui_1.startSpinner)('Generating LangChain wrapper...');
+            const result = (0, platforms_1.wireLangChain)(outputDir, agentName);
+            spinner.stop();
+            if (!result.success) {
+                (0, ui_1.errorBox)('Failed to generate wrapper', [result.error || 'Unknown error']);
+                process.exit(1);
+            }
+            patchText = result.patch;
+            console.log(`  ${(0, ui_1.brand)('\u2714')} Created ${result.wrapperPath}`);
+            break;
+        }
+        case 'custom': {
+            patchText = (0, platforms_1.getCustomPatch)(agentName);
+            console.log(`  ${(0, ui_1.dim)('Add these API calls to your agent:')}\n`);
+            console.log((0, ui_1.dim)(patchText));
+            break;
+        }
+    }
+    // ── Step 2: Verify gateway ───────────────────────────────────────────
+    (0, ui_1.step)(2, 3, 'Verify Gateway');
+    let activeToken = token;
+    let { gatewayOk, tokenOk } = await (0, verify_1.verifyGateway)(url, activeToken);
+    // If env var token failed, try .arkna/.env token (may be newer from arkna login)
+    if (gatewayOk && !tokenOk && process.env.ARKNA_TOKEN) {
+        const fileEnv = (0, arkna_dir_1.readArknaEnv)(baseDir);
+        if (fileEnv?.token && fileEnv.token !== activeToken) {
+            console.log(`\n  ${(0, ui_1.warn)('\u26A0')} ${(0, ui_1.dim)('Env var token rejected. Trying token from .arkna/.env...')}`);
+            const retry = await (0, verify_1.verifyGateway)(url, fileEnv.token);
+            if (retry.tokenOk) {
+                activeToken = fileEnv.token;
+                gatewayOk = retry.gatewayOk;
+                tokenOk = retry.tokenOk;
+                console.log(`  ${(0, ui_1.dim)('Using newer token from .arkna/.env (run')} ${(0, ui_1.brand)('source .arkna/.env')} ${(0, ui_1.dim)('to fix your shell)')}`);
+            }
+        }
+    }
+    // ── Step 3: Write .arkna/.env ────────────────────────────────────────
+    (0, ui_1.step)(3, 3, 'Save Credentials');
+    const files = (0, arkna_dir_1.writeTokenEnv)(url, activeToken, baseDir);
+    (0, ui_1.fileTree)('.arkna', files);
+    // ── Summary ──────────────────────────────────────────────────────────
+    (0, ui_1.divider)();
+    if (gatewayOk && tokenOk) {
+        (0, ui_1.successBox)('CONFIGURED', [
+            `${(0, ui_1.dim)('Agent:')}      ${agentName}`,
+            `${(0, ui_1.dim)('Platform:')}   ${platform}`,
+            `${(0, ui_1.dim)('Gateway:')}    ${url}`,
+            `${(0, ui_1.dim)('Token:')}      valid`,
+        ]);
+        if (patchText && platform !== 'custom' && platform !== 'openclaw') {
+            (0, ui_1.hint)([
+                `${(0, ui_1.brandBold)('NEXT:')} Add these lines to your agent:`,
+                '',
+                ...patchText.split('\n').map(l => `  ${(0, ui_1.dim)(l)}`),
+            ]);
+        }
+    }
+    else if (gatewayOk && !tokenOk) {
+        // Token failed — check if .arkna/.env has a different (newer) token
+        const fileEnv = (0, arkna_dir_1.readArknaEnv)(baseDir);
+        const usingEnvVar = !!process.env.ARKNA_TOKEN;
+        const fileHasDifferentToken = fileEnv?.token && fileEnv.token !== token;
+        if (usingEnvVar && fileHasDifferentToken) {
+            (0, ui_1.errorBox)('Stale ARKNA_TOKEN env var', [
+                `${(0, ui_1.dim)('The ARKNA_TOKEN env var contains an old token that the gateway rejected.')}`,
+                `${(0, ui_1.dim)('.arkna/.env has a newer token (from arkna login).')}`,
+                '',
+                `${(0, ui_1.dim)('Fix:')} ${(0, ui_1.brand)('unset ARKNA_TOKEN')} ${(0, ui_1.dim)('then re-run this command.')}`,
+                `${(0, ui_1.dim)('  or:')} ${(0, ui_1.brand)('source .arkna/.env')} ${(0, ui_1.dim)('then re-run this command.')}`,
+            ]);
+        }
+        else {
+            (0, ui_1.errorBox)('Token rejected by gateway', [
+                (0, ui_1.dim)('The gateway returned 401 for this token.'),
+                (0, ui_1.dim)('Run `arkna login` to get a fresh token, then retry.'),
+            ]);
+        }
+    }
+    else {
+        (0, ui_1.errorBox)('Gateway verification failed', [
+            (0, ui_1.dim)('The agent was wired but gateway checks did not pass.'),
+            (0, ui_1.dim)('Check the errors above and run `arkna test` to retry.'),
+        ]);
+    }
+    const platformHint = {
+        openclaw: [
+            `${(0, ui_1.dim)('1.')} Add the YAML block above to your OpenClaw agent config`,
+            `${(0, ui_1.dim)('2.')} Set env vars: ${(0, ui_1.brand)('source .arkna/.env')}`,
+            `${(0, ui_1.dim)('3.')} Start your OpenClaw agent (it will auto-register with ARKNA on startup)`,
+        ],
+        crewai: [
+            `${(0, ui_1.dim)('1.')} Add the import lines above to your CrewAI entrypoint`,
+            `${(0, ui_1.dim)('2.')} Set env vars: ${(0, ui_1.brand)('source .arkna/.env')}`,
+            `${(0, ui_1.dim)('3.')} Run your CrewAI agent (it will auto-register with ARKNA on startup)`,
+        ],
+        langchain: [
+            `${(0, ui_1.dim)('1.')} Import ${(0, ui_1.brand)('get_arkna_tools()')} in your LangChain agent`,
+            `${(0, ui_1.dim)('2.')} Set env vars: ${(0, ui_1.brand)('source .arkna/.env')}`,
+            `${(0, ui_1.dim)('3.')} Run your LangChain agent (it will auto-register with ARKNA on startup)`,
+        ],
+        custom: [
+            `${(0, ui_1.dim)('1.')} Add the API calls above to your agent code`,
+            `${(0, ui_1.dim)('2.')} Set env vars: ${(0, ui_1.brand)('source .arkna/.env')}`,
+            `${(0, ui_1.dim)('3.')} Start your agent \u2014 it must call ${(0, ui_1.brand)('POST /api/gateway/register')} on startup`,
+        ],
+    }[platform] || [];
+    (0, ui_1.hint)([
+        `${(0, ui_1.brandBold)('WHAT HAPPENS NEXT:')}`,
+        `  Your agent is not in ARKNA yet. It registers itself when it starts.`,
+        `  Run these commands from your ${(0, ui_1.brandBold)('agent project directory')}:`,
+        '',
+        ...platformHint.map(l => `  ${l}`),
+        '',
+        `  ${(0, ui_1.dim)('Then verify:')}`,
+        `  ${(0, ui_1.dim)('$')} arkna verify --watch   ${(0, ui_1.dim)('# waits for your agent to register')}`,
+    ]);
+});
+//# sourceMappingURL=connect.js.map

package/dist/commands/connect.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connect.js","sourceRoot":"","sources":["../../src/commands/connect.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,yCAAoC;AACpC,wDAAgC;AAChC,uCAAyB;AACzB,2CAA6B;AAC7B,kCAGmB;AACnB,gDAA+D;AAC/D,0CAA8C;AAC9C,gDAG0B;AAE1B,MAAM,eAAe,GAAG,CAAC,UAAU,EAAE,QAAQ,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;AAEtE;;;;;;GAMG;AACH,KAAK,UAAU,YAAY,CAAC,SAAkB,EAAE,OAAgB;IAC9D,aAAa;IACb,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;QAC5B,OAAO,CAAC,GAAG,CAAC,KAAK,IAAA,QAAG,EAAC,QAAQ,CAAC,2BAA2B,CAAC,CAAC;QAC3D,OAAO,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC;IACjC,CAAC;IAED,iBAAiB;IACjB,MAAM,QAAQ,GAAG,IAAA,wBAAY,EAAC,OAAO,CAAC,CAAC;IACvC,IAAI,QAAQ,EAAE,KAAK,EAAE,CAAC;QACpB,OAAO,CAAC,GAAG,CAAC,KAAK,IAAA,QAAG,EAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAC;QACnD,OAAO,QAAQ,CAAC,KAAK,CAAC;IACxB,CAAC;IAED,wCAAwC;IACxC,IAAI,SAAS,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CAAC,KAAK,IAAA,SAAI,EAAC,QAAQ,CAAC,IAAI,IAAA,QAAG,EAAC,qDAAqD,CAAC,EAAE,CAAC,CAAC;QACjG,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,+BAA+B;IAC/B,OAAO,CAAC,GAAG,CAAC,KAAK,IAAA,QAAG,EAAC,qBAAqB,CAAC,IAAI,IAAA,UAAK,EAAC,aAAa,CAAC,IAAI,IAAA,QAAG,EAAC,8BAA8B,CAAC,EAAE,CAAC,CAAC;IAC9G,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,kBAAQ,CAAC,MAAM,CAAC,CAAC;YACvC,IAAI,EAAE,UAAU;YAChB,IAAI,EAAE,OAAO;YACb,OAAO,EAAE,IAAA,UAAK,EAAC,UAAU,CAAC;YAC1B,IAAI,EAAE,QAAQ;YACd,MAAM,EAAE,EAAE;YACV,QAAQ,EAAE,CAAC,KAAa,EAAE,EAAE;gBAC1B,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;oBACzC,OAAO,6BAA6B,CAAC;gBACvC,CAAC;gBACD,OAAO,IAAI,CAAC;YACd,CAAC;SACF,CAAC,CAAC,CAAC;IACJ,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;GAMG;AACH,SAAS,UAAU,CAAC,OAA2B,EAAE,OAAgB;IAC/D,IAAI,OAAO;QAAE,OAAO,OAAO,CAAC;IAC5B,IAAI,OAAO,CAAC,GAAG,CAAC,SAAS;QAAE,OAAO,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC;IACxD,MAAM,QAAQ,GAAG,IAAA,wBAAY,EAAC,OAAO,CAAC,CAAC;IACvC,IAAI,QAAQ,EAAE,GAAG;QAAE,OAAO,QAAQ,CAAC,GAAG,CAAC;IACvC,OAAO,0BAA0B,CAAC;AACpC,CAAC;AAEY,QAAA,cAAc,GAAG,IAAI,mBAAO,CAAC,SAAS,CAAC;KACjD,WAAW,CAAC,6DAA6D,CAAC;KAC1E,QAAQ,CAAC,YAAY,EAAE,mBAAmB,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;KACxE,MAAM,CAAC,qBAAqB,EAAE,wDAAwD,CAAC;KACvF,MAAM,CAAC,iBAAiB,EAAE,8CAA8C,CAAC;KACzE,MAAM,CAAC,mBAAmB,EAAE,YAAY,CAAC;KACzC,MAAM,CAAC,qBAAqB,EAAE,sDAAsD,CAAC;KACrF,MAAM,CAAC,iBAAiB,EAAE,iDAAiD,CAAC;KAC5E,MAAM,CAAC,KAAK,EACX,QAAgB,EAChB,OAAuF,EACvF,EAAE;IACF,IAAA,WAAM,GAAE,CAAC;IAET,wEAAwE;IACxE,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QACxC,IAAA,aAAQ,EAAC,kBAAkB,EAAE;YAC3B,QAAQ,QAAQ,EAAE;YAClB,IAAA,QAAG,EAAC,oBAAoB,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;SACtD,CAAC,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IAC/C,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAE1E,wEAAwE;IACxE,MAAM,GAAG,GAAG,UAAU,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAE7C,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC9D,IAAA,aAAQ,EAAC,qBAAqB,EAAE;YAC9B,QAAQ,GAAG,EAAE;YACb,IAAA,QAAG,EAAC,yCAAyC,CAAC;SAC/C,CAAC,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,wEAAwE;IACxE,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAEzD,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QAC/B,IAAA,aAAQ,EAAC,eAAe,EAAE;YACxB,IAAA,QAAG,EAAC,6BAA6B,CAAC;YAClC,IAAA,QAAG,EAAC,2CAA2C,CAAC;SACjD,CAAC,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,QAAQ,EAAE,CAAC;IAEhD,wEAAwE;IACxE,IAAA,SAAI,EAAC,CAAC,EAAE,CAAC,EAAE,YAAY,CAAC,CAAC;IAEzB,IAAI,SAA6B,CAAC;IAElC,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,UAAU,CAAC,CAAC,CAAC;YAChB,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;gBACnB,MAAM,OAAO,GAAG,IAAA,iBAAY,EAAC,8BAA8B,CAAC,CAAC;gBAC7D,MAAM,MAAM,GAAG,IAAA,wBAAY,EAAC,OAAO,CAAC,MAAM,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC;gBAC5D,OAAO,CAAC,IAAI,EAAE,CAAC;gBAEf,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;oBACpB,IAAA,aAAQ,EAAC,yBAAyB,EAAE;wBAClC,MAAM,CAAC,KAAK,IAAI,eAAe;qBAChC,CAAC,CAAC;oBACH,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAClB,CAAC;gBAED,IAAI,MAAM,CAAC,iBAAiB,EAAE,CAAC;oBAC7B,OAAO,CAAC,GAAG,CAAC,KAAK,IAAA,QAAG,EAAC,kDAAkD,CAAC,EAAE,CAAC,CAAC;gBAC9E,CAAC;qBAAM,CAAC;oBACN,OAAO,CAAC,GAAG,CAAC,KAAK,IAAA,UAAK,EAAC,QAAQ,CAAC,aAAa,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;oBAC/D,OAAO,CAAC,GAAG,CAAC,KAAK,IAAA,QAAG,EAAC,kBAAkB,GAAG,OAAO,CAAC,MAAM,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC;gBACxE,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,iDAAiD;gBACjD,OAAO,CAAC,GAAG,CAAC,KAAK,IAAA,QAAG,EAAC,uDAAuD,CAAC,IAAI,CAAC,CAAC;gBACnF,OAAO,CAAC,GAAG,CAAC,IAAA,QAAG,EAAC,IAAA,gCAAoB,EAAC,SAAS,CAAC,CAAC,CAAC,CAAC;gBAClD,SAAS,GAAG,wDAAwD,CAAC;YACvE,CAAC;YACD,MAAM;QACR,CAAC;QAED,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,MAAM,OAAO,GAAG,IAAA,iBAAY,EAAC,8BAA8B,CAAC,CAAC;YAC7D,MAAM,MAAM,GAAG,IAAA,sBAAU,EAAC,SAAS,EAAE,SAAS,CAAC,CAAC;YAChD,OAAO,CAAC,IAAI,EAAE,CAAC;YAEf,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpB,IAAA,aAAQ,EAAC,4BAA4B,EAAE,CAAC,MAAM,CAAC,KAAK,IAAI,eAAe,CAAC,CAAC,CAAC;gBAC1E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;YAED,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC;YACzB,OAAO,CAAC,GAAG,CAAC,KAAK,IAAA,UAAK,EAAC,QAAQ,CAAC,YAAY,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;YAClE,MAAM;QACR,CAAC;QAED,KAAK,WAAW,CAAC,CAAC,CAAC;YACjB,MAAM,OAAO,GAAG,IAAA,iBAAY,EAAC,iCAAiC,CAAC,CAAC;YAChE,MAAM,MAAM,GAAG,IAAA,yBAAa,EAAC,SAAS,EAAE,SAAS,CAAC,CAAC;YACnD,OAAO,CAAC,IAAI,EAAE,CAAC;YAEf,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpB,IAAA,aAAQ,EAAC,4BAA4B,EAAE,CAAC,MAAM,CAAC,KAAK,IAAI,eAAe,CAAC,CAAC,CAAC;gBAC1E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;YAED,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC;YACzB,OAAO,CAAC,GAAG,CAAC,KAAK,IAAA,UAAK,EAAC,QAAQ,CAAC,YAAY,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;YAClE,MAAM;QACR,CAAC;QAED,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,SAAS,GAAG,IAAA,0BAAc,EAAC,SAAS,CAAC,CAAC;YACtC,OAAO,CAAC,GAAG,CAAC,KAAK,IAAA,QAAG,EAAC,oCAAoC,CAAC,IAAI,CAAC,CAAC;YAChE,OAAO,CAAC,GAAG,CAAC,IAAA,QAAG,EAAC,SAAS,CAAC,CAAC,CAAC;YAC5B,MAAM;QACR,CAAC;IACH,CAAC;IAED,wEAAwE;IACxE,IAAA,SAAI,EAAC,CAAC,EAAE,CAAC,EAAE,gBAAgB,CAAC,CAAC;IAE7B,IAAI,WAAW,GAAG,KAAK,CAAC;IACxB,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,MAAM,IAAA,sBAAa,EAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IAEnE,iFAAiF;IACjF,IAAI,SAAS,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;QACrD,MAAM,OAAO,GAAG,IAAA,wBAAY,EAAC,OAAO,CAAC,CAAC;QACtC,IAAI,OAAO,EAAE,KAAK,IAAI,OAAO,CAAC,KAAK,KAAK,WAAW,EAAE,CAAC;YACpD,OAAO,CAAC,GAAG,CAAC,OAAO,IAAA,SAAI,EAAC,QAAQ,CAAC,IAAI,IAAA,QAAG,EAAC,0DAA0D,CAAC,EAAE,CAAC,CAAC;YACxG,MAAM,KAAK,GAAG,MAAM,IAAA,sBAAa,EAAC,GAAG,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;YACtD,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;gBAClB,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC;gBAC5B,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC;gBAC5B,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;gBACxB,OAAO,CAAC,GAAG,CAAC,KAAK,IAAA,QAAG,EAAC,yCAAyC,CAAC,IAAI,IAAA,UAAK,EAAC,oBAAoB,CAAC,IAAI,IAAA,QAAG,EAAC,oBAAoB,CAAC,EAAE,CAAC,CAAC;YACjI,CAAC;QACH,CAAC;IACH,CAAC;IAED,wEAAwE;IACxE,IAAA,SAAI,EAAC,CAAC,EAAE,CAAC,EAAE,kBAAkB,CAAC,CAAC;IAE/B,MAAM,KAAK,GAAG,IAAA,yBAAa,EAAC,GAAG,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;IACvD,IAAA,aAAQ,EAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAE1B,wEAAwE;IACxE,IAAA,YAAO,GAAE,CAAC;IAEV,IAAI,SAAS,IAAI,OAAO,EAAE,CAAC;QACzB,IAAA,eAAU,EAAC,YAAY,EAAE;YACvB,GAAG,IAAA,QAAG,EAAC,QAAQ,CAAC,SAAS,SAAS,EAAE;YACpC,GAAG,IAAA,QAAG,EAAC,WAAW,CAAC,MAAM,QAAQ,EAAE;YACnC,GAAG,IAAA,QAAG,EAAC,UAAU,CAAC,OAAO,GAAG,EAAE;YAC9B,GAAG,IAAA,QAAG,EAAC,QAAQ,CAAC,aAAa;SAC9B,CAAC,CAAC;QAEH,IAAI,SAAS,IAAI,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,UAAU,EAAE,CAAC;YAClE,IAAA,SAAI,EAAC;gBACH,GAAG,IAAA,cAAS,EAAC,OAAO,CAAC,iCAAiC;gBACtD,EAAE;gBACF,GAAG,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,IAAA,QAAG,EAAC,CAAC,CAAC,EAAE,CAAC;aACjD,CAAC,CAAC;QACL,CAAC;IACH,CAAC;SAAM,IAAI,SAAS,IAAI,CAAC,OAAO,EAAE,CAAC;QACjC,oEAAoE;QACpE,MAAM,OAAO,GAAG,IAAA,wBAAY,EAAC,OAAO,CAAC,CAAC;QACtC,MAAM,WAAW,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC;QAC9C,MAAM,qBAAqB,GAAG,OAAO,EAAE,KAAK,IAAI,OAAO,CAAC,KAAK,KAAK,KAAK,CAAC;QAExE,IAAI,WAAW,IAAI,qBAAqB,EAAE,CAAC;YACzC,IAAA,aAAQ,EAAC,2BAA2B,EAAE;gBACpC,GAAG,IAAA,QAAG,EAAC,0EAA0E,CAAC,EAAE;gBACpF,GAAG,IAAA,QAAG,EAAC,mDAAmD,CAAC,EAAE;gBAC7D,EAAE;gBACF,GAAG,IAAA,QAAG,EAAC,MAAM,CAAC,IAAI,IAAA,UAAK,EAAC,mBAAmB,CAAC,IAAI,IAAA,QAAG,EAAC,2BAA2B,CAAC,EAAE;gBAClF,GAAG,IAAA,QAAG,EAAC,OAAO,CAAC,IAAI,IAAA,UAAK,EAAC,oBAAoB,CAAC,IAAI,IAAA,QAAG,EAAC,2BAA2B,CAAC,EAAE;aACrF,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,IAAA,aAAQ,EAAC,2BAA2B,EAAE;gBACpC,IAAA,QAAG,EAAC,0CAA0C,CAAC;gBAC/C,IAAA,QAAG,EAAC,qDAAqD,CAAC;aAC3D,CAAC,CAAC;QACL,CAAC;IACH,CAAC;SAAM,CAAC;QACN,IAAA,aAAQ,EAAC,6BAA6B,EAAE;YACtC,IAAA,QAAG,EAAC,sDAAsD,CAAC;YAC3D,IAAA,QAAG,EAAC,uDAAuD,CAAC;SAC7D,CAAC,CAAC;IACL,CAAC;IAED,MAAM,YAAY,GAAG;QACnB,QAAQ,EAAE;YACR,GAAG,IAAA,QAAG,EAAC,IAAI,CAAC,yDAAyD;YACrE,GAAG,IAAA,QAAG,EAAC,IAAI,CAAC,kBAAkB,IAAA,UAAK,EAAC,oBAAoB,CAAC,EAAE;YAC3D,GAAG,IAAA,QAAG,EAAC,IAAI,CAAC,0EAA0E;SACvF;QACD,MAAM,EAAE;YACN,GAAG,IAAA,QAAG,EAAC,IAAI,CAAC,uDAAuD;YACnE,GAAG,IAAA,QAAG,EAAC,IAAI,CAAC,kBAAkB,IAAA,UAAK,EAAC,oBAAoB,CAAC,EAAE;YAC3D,GAAG,IAAA,QAAG,EAAC,IAAI,CAAC,sEAAsE;SACnF;QACD,SAAS,EAAE;YACT,GAAG,IAAA,QAAG,EAAC,IAAI,CAAC,WAAW,IAAA,UAAK,EAAC,mBAAmB,CAAC,0BAA0B;YAC3E,GAAG,IAAA,QAAG,EAAC,IAAI,CAAC,kBAAkB,IAAA,UAAK,EAAC,oBAAoB,CAAC,EAAE;YAC3D,GAAG,IAAA,QAAG,EAAC,IAAI,CAAC,yEAAyE;SACtF;QACD,MAAM,EAAE;YACN,GAAG,IAAA,QAAG,EAAC,IAAI,CAAC,6CAA6C;YACzD,GAAG,IAAA,QAAG,EAAC,IAAI,CAAC,kBAAkB,IAAA,UAAK,EAAC,oBAAoB,CAAC,EAAE;YAC3D,GAAG,IAAA,QAAG,EAAC,IAAI,CAAC,yCAAyC,IAAA,UAAK,EAAC,4BAA4B,CAAC,aAAa;SACtG;KACF,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;IAElB,IAAA,SAAI,EAAC;QACH,GAAG,IAAA,cAAS,EAAC,oBAAoB,CAAC,EAAE;QACpC,uEAAuE;QACvE,kCAAkC,IAAA,cAAS,EAAC,yBAAyB,CAAC,GAAG;QACzE,EAAE;QACF,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC;QAClC,EAAE;QACF,KAAK,IAAA,QAAG,EAAC,cAAc,CAAC,EAAE;QAC1B,KAAK,IAAA,QAAG,EAAC,GAAG,CAAC,2BAA2B,IAAA,QAAG,EAAC,oCAAoC,CAAC,EAAE;KACpF,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/commands/login.d.ts

@@ -0,0 +1,3 @@
+import { Command } from 'commander';
+export declare const loginCommand: Command;
+//# sourceMappingURL=login.d.ts.map

package/dist/commands/login.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"login.d.ts","sourceRoot":"","sources":["../../src/commands/login.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAyFpC,eAAO,MAAM,YAAY,SAiMrB,CAAC"}

package/dist/commands/login.js

@@ -0,0 +1,292 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.loginCommand = void 0;
+const commander_1 = require("commander");
+const child_process_1 = require("child_process");
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const ui_1 = require("../lib/ui");
+const connectivity_1 = require("../lib/connectivity");
+const arkna_dir_1 = require("../lib/arkna-dir");
+/**
+ * Resolve URL from (in priority order):
+ * 1. --url flag
+ * 2. ARKNA_URL env var
+ * 3. .arkna/.env file
+ * 4. Default
+ */
+function resolveUrl(flagUrl) {
+    if (flagUrl)
+        return flagUrl;
+    if (process.env.ARKNA_URL)
+        return process.env.ARKNA_URL;
+    const envCreds = (0, arkna_dir_1.readArknaEnv)();
+    if (envCreds?.url)
+        return envCreds.url;
+    return 'https://api.arkna.com.au';
+}
+/**
+ * Write token to .arkna/.env (creates directory if needed)
+ */
+function writeTokenToEnv(url, token, baseDir) {
+    const dir = path.join(baseDir || process.cwd(), '.arkna');
+    fs.mkdirSync(dir, { recursive: true });
+    const envPath = path.join(dir, '.env');
+    const envContent = `# ARKNA Agent Enrollment — Environment Variables
+# This file is gitignored. Do NOT commit this file.
+# Token created via: arkna login
+ARKNA_URL=${url}
+ARKNA_TOKEN=${token}
+`;
+    fs.writeFileSync(envPath, envContent);
+    // Ensure .gitignore exists
+    const gitignorePath = path.join(dir, '.gitignore');
+    if (!fs.existsSync(gitignorePath)) {
+        fs.writeFileSync(gitignorePath, `# .arkna/ contains secrets — never commit any of it\n*\n!.gitignore\n`);
+    }
+}
+/**
+ * Detect if we're in a headless environment (SSH, Docker, CI, no display)
+ */
+function isHeadless() {
+    // SSH session
+    if (process.env.SSH_CONNECTION || process.env.SSH_TTY)
+        return true;
+    // CI environments
+    if (process.env.CI || process.env.GITHUB_ACTIONS || process.env.GITLAB_CI)
+        return true;
+    // Docker / container
+    if (process.env.container || process.env.DOCKER_CONTAINER)
+        return true;
+    // Linux without display
+    if (process.platform === 'linux' && !process.env.DISPLAY && !process.env.WAYLAND_DISPLAY)
+        return true;
+    return false;
+}
+/**
+ * Try to open a URL in the default browser. Returns true if attempted.
+ */
+function tryOpenBrowser(url) {
+    if (isHeadless())
+        return false;
+    const cmd = process.platform === 'darwin'
+        ? `open "${url}"`
+        : process.platform === 'win32'
+            ? `start "" "${url}"`
+            : `xdg-open "${url}"`;
+    (0, child_process_1.exec)(cmd, () => {
+        // Silently fail — user can open manually
+    });
+    return true;
+}
+/**
+ * Sleep for ms milliseconds
+ */
+function sleep(ms) {
+    return new Promise(resolve => setTimeout(resolve, ms));
+}
+exports.loginCommand = new commander_1.Command('login')
+    .description('Authenticate the CLI via browser approval (no token pasting)')
+    .option('-u, --url <url>', 'ARKNA gateway URL (or set ARKNA_URL env var)')
+    .option('-n, --name <name>', 'Agent name (shown in token list)')
+    .action(async (options) => {
+    (0, ui_1.banner)();
+    // ── Resolve URL ──────────────────────────────────────────────────────
+    const url = resolveUrl(options.url);
+    if (!url.startsWith('http://') && !url.startsWith('https://')) {
+        (0, ui_1.errorBox)('Invalid gateway URL', [
+            `Got: ${url}`,
+            (0, ui_1.dim)('URL must start with http:// or https://'),
+        ]);
+        process.exit(1);
+    }
+    // ── Health check ─────────────────────────────────────────────────────
+    const healthSpinner = (0, ui_1.startSpinner)('Checking gateway...');
+    const health = await (0, connectivity_1.checkHealth)(url);
+    healthSpinner.stop();
+    if (!health.passed) {
+        (0, ui_1.errorBox)('Gateway unreachable', [
+            health.detail,
+            (0, ui_1.dim)(`URL: ${url}`),
+        ]);
+        process.exit(1);
+    }
+    console.log(`  ${(0, ui_1.brand)('✔')} Gateway reachable  ${(0, ui_1.dim)(health.detail)}`);
+    // ── Request device code ──────────────────────────────────────────────
+    const codeSpinner = (0, ui_1.startSpinner)('Requesting device code...');
+    let deviceCode;
+    let verificationUri;
+    let verificationUriComplete;
+    try {
+        const resp = await fetch(`${url}/api/auth/device/code`, {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/json' },
+            body: JSON.stringify({
+                cli_platform: `${process.platform}-${process.arch}`,
+                agent_name: options.name || undefined,
+            }),
+        });
+        if (!resp.ok) {
+            codeSpinner.stop();
+            const err = await resp.json().catch(() => ({ error: 'Request failed' }));
+            (0, ui_1.errorBox)('Failed to get device code', [
+                String(err.error || `HTTP ${resp.status}`),
+            ]);
+            process.exit(1);
+        }
+        const data = await resp.json();
+        deviceCode = data.device_code;
+        verificationUri = data.verification_uri;
+        verificationUriComplete = data.verification_uri_complete;
+        codeSpinner.stop();
+    }
+    catch (err) {
+        codeSpinner.stop();
+        (0, ui_1.errorBox)('Failed to get device code', [
+            err.message || 'Connection failed',
+        ]);
+        process.exit(1);
+    }
+    // ── Display code ────────────────────────────────────────────────────
+    const headless = isHeadless();
+    (0, ui_1.divider)();
+    console.log('');
+    console.log(`  ${(0, ui_1.brand)('▲')} Go to:`);
+    console.log(`    ${(0, ui_1.brand)(verificationUri)}`);
+    console.log('');
+    console.log(`  Enter code:`);
+    console.log('');
+    console.log(`    ${(0, ui_1.brand)('┌──────────────┐')}`);
+    console.log(`    ${(0, ui_1.brand)('│')}  ${(0, ui_1.brand)(deviceCode)}    ${(0, ui_1.brand)('│')}`);
+    console.log(`    ${(0, ui_1.brand)('└──────────────┘')}`);
+    console.log('');
+    console.log(`  ${(0, ui_1.dim)('Or open directly:')}`);
+    console.log(`    ${(0, ui_1.dim)(verificationUriComplete)}`);
+    console.log('');
+    (0, ui_1.divider)();
+    // Try to open browser (skip on headless)
+    const opened = tryOpenBrowser(verificationUriComplete);
+    if (opened) {
+        console.log(`  ${(0, ui_1.dim)('Opening browser...')}`);
+    }
+    else {
+        console.log(`  ${(0, ui_1.dim)('Open the link above on any device, then approve.')}`);
+    }
+    // ── Poll for approval ────────────────────────────────────────────────
+    const pollSpinner = (0, ui_1.startSpinner)('Waiting for approval... (Ctrl+C to cancel)');
+    const maxAttempts = 180; // 15 minutes at 5s intervals
+    let token = null;
+    for (let attempt = 0; attempt < maxAttempts; attempt++) {
+        await sleep(5000);
+        try {
+            const resp = await fetch(`${url}/api/auth/device/token`, {
+                method: 'POST',
+                headers: { 'Content-Type': 'application/json' },
+                body: JSON.stringify({ device_code: deviceCode }),
+            });
+            if (resp.ok) {
+                const data = await resp.json();
+                token = data.token;
+                break;
+            }
+            const body = await resp.json().catch(() => ({ error: 'unknown' }));
+            const error = body.error;
+            if (error === 'authorization_pending') {
+                // Keep polling
+                continue;
+            }
+            if (error === 'slow_down') {
+                // Wait an extra 5s before next attempt
+                await sleep(5000);
+                continue;
+            }
+            // Terminal errors
+            pollSpinner.stop();
+            if (error === 'expired_token') {
+                (0, ui_1.errorBox)('Code expired', [
+                    (0, ui_1.dim)('The 15-minute window has passed.'),
+                    (0, ui_1.dim)('Run `arkna login` again to get a new code.'),
+                ]);
+            }
+            else if (error === 'access_denied') {
+                (0, ui_1.errorBox)('Login denied', [
+                    (0, ui_1.dim)('The code was rejected in the browser.'),
+                ]);
+            }
+            else {
+                (0, ui_1.errorBox)('Login failed', [error || `HTTP ${resp.status}`]);
+            }
+            process.exit(1);
+        }
+        catch {
+            // Network error — keep trying
+            continue;
+        }
+    }
+    pollSpinner.stop();
+    if (!token) {
+        (0, ui_1.errorBox)('Timed out', [
+            (0, ui_1.dim)('No approval received within 15 minutes.'),
+            (0, ui_1.dim)('Run `arkna login` again to retry.'),
+        ]);
+        process.exit(1);
+    }
+    // ── Write token ──────────────────────────────────────────────────────
+    writeTokenToEnv(url, token);
+    console.log('');
+    (0, ui_1.successBox)('AUTHENTICATED', [
+        `${(0, ui_1.dim)('Token:')}     ${(0, ui_1.maskToken)(token)}`,
+        `${(0, ui_1.dim)('Gateway:')}   ${url}`,
+        `${(0, ui_1.dim)('Saved to:')}  .arkna/.env`,
+        `${(0, ui_1.dim)('Expires:')}   30 days`,
+    ]);
+    // Warn if stale ARKNA_TOKEN env var will shadow the fresh token
+    if (process.env.ARKNA_TOKEN && process.env.ARKNA_TOKEN !== token) {
+        console.log('');
+        console.log(`  ${(0, ui_1.warn)('\u26A0')} ${(0, ui_1.warn)('ARKNA_TOKEN env var contains a different token.')}`);
+        console.log(`  ${(0, ui_1.dim)('  The CLI will use the env var instead of the fresh token.')}`);
+        console.log(`  ${(0, ui_1.dim)('  Fix:')} ${(0, ui_1.brand)('unset ARKNA_TOKEN')} ${(0, ui_1.dim)('or:')} ${(0, ui_1.brand)('source .arkna/.env')}`);
+    }
+    (0, ui_1.hint)([
+        `${(0, ui_1.brand)('NEXT:')} Connect your agent:`,
+        '',
+        `  ${(0, ui_1.dim)('$')} arkna connect openclaw -n "My Agent"`,
+        `  ${(0, ui_1.dim)('$')} arkna connect crewai -n "My Agent"`,
+        `  ${(0, ui_1.dim)('$')} arkna connect langchain -n "My Agent"`,
+        `  ${(0, ui_1.dim)('$')} arkna connect custom -n "My Agent"`,
+    ]);
+});
+//# sourceMappingURL=login.js.map

package/dist/commands/login.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"login.js","sourceRoot":"","sources":["../../src/commands/login.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,yCAAoC;AACpC,iDAAqC;AACrC,uCAAyB;AACzB,2CAA6B;AAC7B,kCAGmB;AACnB,sDAAkD;AAClD,gDAAgD;AAEhD;;;;;;GAMG;AACH,SAAS,UAAU,CAAC,OAA2B;IAC7C,IAAI,OAAO;QAAE,OAAO,OAAO,CAAC;IAC5B,IAAI,OAAO,CAAC,GAAG,CAAC,SAAS;QAAE,OAAO,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC;IACxD,MAAM,QAAQ,GAAG,IAAA,wBAAY,GAAE,CAAC;IAChC,IAAI,QAAQ,EAAE,GAAG;QAAE,OAAO,QAAQ,CAAC,GAAG,CAAC;IACvC,OAAO,0BAA0B,CAAC;AACpC,CAAC;AAED;;GAEG;AACH,SAAS,eAAe,CAAC,GAAW,EAAE,KAAa,EAAE,OAAgB;IACnE,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,GAAG,EAAE,EAAE,QAAQ,CAAC,CAAC;IAC1D,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAEvC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACvC,MAAM,UAAU,GAAG;;;YAGT,GAAG;cACD,KAAK;CAClB,CAAC;IACA,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IAEtC,2BAA2B;IAC3B,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;IACnD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;QAClC,EAAE,CAAC,aAAa,CAAC,aAAa,EAAE,uEAAuE,CAAC,CAAC;IAC3G,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,UAAU;IACjB,cAAc;IACd,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,OAAO,CAAC,GAAG,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IACnE,kBAAkB;IAClB,IAAI,OAAO,CAAC,GAAG,CAAC,EAAE,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,OAAO,CAAC,GAAG,CAAC,SAAS;QAAE,OAAO,IAAI,CAAC;IACvF,qBAAqB;IACrB,IAAI,OAAO,CAAC,GAAG,CAAC,SAAS,IAAI,OAAO,CAAC,GAAG,CAAC,gBAAgB;QAAE,OAAO,IAAI,CAAC;IACvE,wBAAwB;IACxB,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe;QAAE,OAAO,IAAI,CAAC;IACtG,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;GAEG;AACH,SAAS,cAAc,CAAC,GAAW;IACjC,IAAI,UAAU,EAAE;QAAE,OAAO,KAAK,CAAC;IAE/B,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,KAAK,QAAQ;QACvC,CAAC,CAAC,SAAS,GAAG,GAAG;QACjB,CAAC,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO;YAC5B,CAAC,CAAC,aAAa,GAAG,GAAG;YACrB,CAAC,CAAC,aAAa,GAAG,GAAG,CAAC;IAE1B,IAAA,oBAAI,EAAC,GAAG,EAAE,GAAG,EAAE;QACb,yCAAyC;IAC3C,CAAC,CAAC,CAAC;IACH,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,SAAS,KAAK,CAAC,EAAU;IACvB,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AACzD,CAAC;AAEY,QAAA,YAAY,GAAG,IAAI,mBAAO,CAAC,OAAO,CAAC;KAC7C,WAAW,CAAC,8DAA8D,CAAC;KAC3E,MAAM,CAAC,iBAAiB,EAAE,8CAA8C,CAAC;KACzE,MAAM,CAAC,mBAAmB,EAAE,kCAAkC,CAAC;KAC/D,MAAM,CAAC,KAAK,EAAE,OAAwC,EAAE,EAAE;IACzD,IAAA,WAAM,GAAE,CAAC;IAET,wEAAwE;IACxE,MAAM,GAAG,GAAG,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAEpC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC9D,IAAA,aAAQ,EAAC,qBAAqB,EAAE;YAC9B,QAAQ,GAAG,EAAE;YACb,IAAA,QAAG,EAAC,yCAAyC,CAAC;SAC/C,CAAC,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,wEAAwE;IACxE,MAAM,aAAa,GAAG,IAAA,iBAAY,EAAC,qBAAqB,CAAC,CAAC;IAC1D,MAAM,MAAM,GAAG,MAAM,IAAA,0BAAW,EAAC,GAAG,CAAC,CAAC;IACtC,aAAa,CAAC,IAAI,EAAE,CAAC;IAErB,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QACnB,IAAA,aAAQ,EAAC,qBAAqB,EAAE;YAC9B,MAAM,CAAC,MAAM;YACb,IAAA,QAAG,EAAC,QAAQ,GAAG,EAAE,CAAC;SACnB,CAAC,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,KAAK,IAAA,UAAK,EAAC,GAAG,CAAC,uBAAuB,IAAA,QAAG,EAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAExE,wEAAwE;IACxE,MAAM,WAAW,GAAG,IAAA,iBAAY,EAAC,2BAA2B,CAAC,CAAC;IAE9D,IAAI,UAAkB,CAAC;IACvB,IAAI,eAAuB,CAAC;IAC5B,IAAI,uBAA+B,CAAC;IAEpC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,GAAG,uBAAuB,EAAE;YACtD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,YAAY,EAAE,GAAG,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,IAAI,EAAE;gBACnD,UAAU,EAAE,OAAO,CAAC,IAAI,IAAI,SAAS;aACtC,CAAC;SACH,CAAC,CAAC;QAEH,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;YACb,WAAW,CAAC,IAAI,EAAE,CAAC;YACnB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAA4B,CAAC;YACpG,IAAA,aAAQ,EAAC,2BAA2B,EAAE;gBACpC,MAAM,CAAC,GAAG,CAAC,KAAK,IAAI,QAAQ,IAAI,CAAC,MAAM,EAAE,CAAC;aAC3C,CAAC,CAAC;YACH,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAA6B,CAAC;QAC1D,UAAU,GAAG,IAAI,CAAC,WAAqB,CAAC;QACxC,eAAe,GAAG,IAAI,CAAC,gBAA0B,CAAC;QAClD,uBAAuB,GAAG,IAAI,CAAC,yBAAmC,CAAC;QAEnE,WAAW,CAAC,IAAI,EAAE,CAAC;IACrB,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,WAAW,CAAC,IAAI,EAAE,CAAC;QACnB,IAAA,aAAQ,EAAC,2BAA2B,EAAE;YACpC,GAAG,CAAC,OAAO,IAAI,mBAAmB;SACnC,CAAC,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,uEAAuE;IACvE,MAAM,QAAQ,GAAG,UAAU,EAAE,CAAC;IAC9B,IAAA,YAAO,GAAE,CAAC;IACV,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,KAAK,IAAA,UAAK,EAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACtC,OAAO,CAAC,GAAG,CAAC,OAAO,IAAA,UAAK,EAAC,eAAe,CAAC,EAAE,CAAC,CAAC;IAC7C,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IAC7B,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,OAAO,IAAA,UAAK,EAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC;IAChD,OAAO,CAAC,GAAG,CAAC,OAAO,IAAA,UAAK,EAAC,GAAG,CAAC,KAAK,IAAA,UAAK,EAAC,UAAU,CAAC,OAAO,IAAA,UAAK,EAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACxE,OAAO,CAAC,GAAG,CAAC,OAAO,IAAA,UAAK,EAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC;IAChD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,KAAK,IAAA,QAAG,EAAC,mBAAmB,CAAC,EAAE,CAAC,CAAC;IAC7C,OAAO,CAAC,GAAG,CAAC,OAAO,IAAA,QAAG,EAAC,uBAAuB,CAAC,EAAE,CAAC,CAAC;IACnD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,IAAA,YAAO,GAAE,CAAC;IAEV,yCAAyC;IACzC,MAAM,MAAM,GAAG,cAAc,CAAC,uBAAuB,CAAC,CAAC;IACvD,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,CAAC,GAAG,CAAC,KAAK,IAAA,QAAG,EAAC,oBAAoB,CAAC,EAAE,CAAC,CAAC;IAChD,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,KAAK,IAAA,QAAG,EAAC,kDAAkD,CAAC,EAAE,CAAC,CAAC;IAC9E,CAAC;IAED,wEAAwE;IACxE,MAAM,WAAW,GAAG,IAAA,iBAAY,EAAC,4CAA4C,CAAC,CAAC;IAC/E,MAAM,WAAW,GAAG,GAAG,CAAC,CAAC,6BAA6B;IACtD,IAAI,KAAK,GAAkB,IAAI,CAAC;IAEhC,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,WAAW,EAAE,OAAO,EAAE,EAAE,CAAC;QACvD,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;QAElB,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,GAAG,wBAAwB,EAAE;gBACvD,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC;aAClD,CAAC,CAAC;YAEH,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC;gBACZ,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAA6B,CAAC;gBAC1D,KAAK,GAAG,IAAI,CAAC,KAAe,CAAC;gBAC7B,MAAM;YACR,CAAC;YAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAA4B,CAAC;YAC9F,MAAM,KAAK,GAAG,IAAI,CAAC,KAAe,CAAC;YAEnC,IAAI,KAAK,KAAK,uBAAuB,EAAE,CAAC;gBACtC,eAAe;gBACf,SAAS;YACX,CAAC;YAED,IAAI,KAAK,KAAK,WAAW,EAAE,CAAC;gBAC1B,uCAAuC;gBACvC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;gBAClB,SAAS;YACX,CAAC;YAED,kBAAkB;YAClB,WAAW,CAAC,IAAI,EAAE,CAAC;YAEnB,IAAI,KAAK,KAAK,eAAe,EAAE,CAAC;gBAC9B,IAAA,aAAQ,EAAC,cAAc,EAAE;oBACvB,IAAA,QAAG,EAAC,kCAAkC,CAAC;oBACvC,IAAA,QAAG,EAAC,4CAA4C,CAAC;iBAClD,CAAC,CAAC;YACL,CAAC;iBAAM,IAAI,KAAK,KAAK,eAAe,EAAE,CAAC;gBACrC,IAAA,aAAQ,EAAC,cAAc,EAAE;oBACvB,IAAA,QAAG,EAAC,uCAAuC,CAAC;iBAC7C,CAAC,CAAC;YACL,CAAC;iBAAM,CAAC;gBACN,IAAA,aAAQ,EAAC,cAAc,EAAE,CAAC,KAAK,IAAI,QAAQ,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;YAC7D,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAAC,MAAM,CAAC;YACP,8BAA8B;YAC9B,SAAS;QACX,CAAC;IACH,CAAC;IAED,WAAW,CAAC,IAAI,EAAE,CAAC;IAEnB,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,IAAA,aAAQ,EAAC,WAAW,EAAE;YACpB,IAAA,QAAG,EAAC,yCAAyC,CAAC;YAC9C,IAAA,QAAG,EAAC,mCAAmC,CAAC;SACzC,CAAC,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,wEAAwE;IACxE,eAAe,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAE5B,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,IAAA,eAAU,EAAC,eAAe,EAAE;QAC1B,GAAG,IAAA,QAAG,EAAC,QAAQ,CAAC,QAAQ,IAAA,cAAS,EAAC,KAAK,CAAC,EAAE;QAC1C,GAAG,IAAA,QAAG,EAAC,UAAU,CAAC,MAAM,GAAG,EAAE;QAC7B,GAAG,IAAA,QAAG,EAAC,WAAW,CAAC,eAAe;QAClC,GAAG,IAAA,QAAG,EAAC,UAAU,CAAC,YAAY;KAC/B,CAAC,CAAC;IAEH,gEAAgE;IAChE,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,KAAK,KAAK,EAAE,CAAC;QACjE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,KAAK,IAAA,SAAI,EAAC,QAAQ,CAAC,IAAI,IAAA,SAAI,EAAC,iDAAiD,CAAC,EAAE,CAAC,CAAC;QAC9F,OAAO,CAAC,GAAG,CAAC,KAAK,IAAA,QAAG,EAAC,4DAA4D,CAAC,EAAE,CAAC,CAAC;QACtF,OAAO,CAAC,GAAG,CAAC,KAAK,IAAA,QAAG,EAAC,QAAQ,CAAC,IAAI,IAAA,UAAK,EAAC,mBAAmB,CAAC,IAAI,IAAA,QAAG,EAAC,KAAK,CAAC,IAAI,IAAA,UAAK,EAAC,oBAAoB,CAAC,EAAE,CAAC,CAAC;IAC/G,CAAC;IAED,IAAA,SAAI,EAAC;QACH,GAAG,IAAA,UAAK,EAAC,OAAO,CAAC,sBAAsB;QACvC,EAAE;QACF,KAAK,IAAA,QAAG,EAAC,GAAG,CAAC,uCAAuC;QACpD,KAAK,IAAA,QAAG,EAAC,GAAG,CAAC,qCAAqC;QAClD,KAAK,IAAA,QAAG,EAAC,GAAG,CAAC,wCAAwC;QACrD,KAAK,IAAA,QAAG,EAAC,GAAG,CAAC,qCAAqC;KACnD,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/commands/status.d.ts

@@ -0,0 +1,3 @@
+import { Command } from 'commander';
+export declare const statusCommand: Command;
+//# sourceMappingURL=status.d.ts.map