artifactpass 0.1.0-rc.3 → 0.1.0-rc.4

package/dist/cli.mjs

@@ -14821,6 +14821,33 @@ import { spawn } from "node:child_process";
 var ARTIFACTPASS_CREDENTIAL_SERVICE = "artifactpass";
 var LEGACY_ARTIFACT_SHARE_CREDENTIAL_SERVICE = "lordebuilds.artifacts.share";
 var agentCredentialAccountForProfile = (profileName) => profileName === "production" ? "agent-token" : `agent-token:${profileName}`;
+var agentTokenPattern = /^as_[A-Za-z0-9_-]{43}$/u;
+var bindAgentCredential = (originValue, token) => {
+  if (!agentTokenPattern.test(token)) throw new Error("ArtifactPass agent credential is malformed");
+  return JSON.stringify({ version: 1, origin: new URL(originValue).origin, token });
+};
+var resolveAgentCredential = (storedValue, expectedOriginValue, requireOriginBinding = false) => {
+  if (agentTokenPattern.test(storedValue)) {
+    if (requireOriginBinding) {
+      throw new Error("ArtifactPass credential predates origin binding; reconnect this profile before publishing");
+    }
+    return storedValue;
+  }
+  let parsed;
+  try {
+    parsed = JSON.parse(storedValue);
+  } catch {
+    throw new Error("ArtifactPass agent credential is malformed");
+  }
+  if (parsed === null || typeof parsed !== "object" || parsed.version !== 1 || typeof parsed.origin !== "string" || typeof parsed.token !== "string" || !agentTokenPattern.test(parsed.token)) {
+    throw new Error("ArtifactPass agent credential is malformed");
+  }
+  const expectedOrigin = new URL(expectedOriginValue).origin;
+  if (new URL(parsed.origin).origin !== expectedOrigin) {
+    throw new Error("ArtifactPass credential belongs to a different deployment; reconnect this profile");
+  }
+  return parsed.token;
+};
 var CredentialStoreCommandError = class extends Error {
   constructor(status) {
     super(`Credential store command failed with status ${status ?? "unknown"}`);
@@ -14987,6 +15014,9 @@ var validateProfile = (value2) => {
   if (candidate.credential_namespace !== void 0 && candidate.credential_namespace !== "artifactpass") {
     throw new Error("ArtifactPass config contains an invalid credential namespace");
   }
+  if (candidate.credential_binding !== void 0 && candidate.credential_binding !== "origin") {
+    throw new Error("ArtifactPass config contains an invalid credential binding");
+  }
   if (candidate.open_development !== void 0 && candidate.open_development !== true) {
     throw new Error("ArtifactPass config open_development must be true when enabled");
   }
@@ -15006,7 +15036,8 @@ var validateProfile = (value2) => {
     ...typeof candidate.pdf_key_id === "string" ? { pdf_key_id: candidate.pdf_key_id } : {},
     ...candidate.publication_state === "legacy" ? { publication_state: "legacy" } : {},
     ...typeof candidate.publication_state_path === "string" ? { publication_state_path: candidate.publication_state_path } : {},
-    ...candidate.credential_namespace === "artifactpass" ? { credential_namespace: "artifactpass" } : {}
+    ...candidate.credential_namespace === "artifactpass" ? { credential_namespace: "artifactpass" } : {},
+    ...candidate.credential_binding === "origin" ? { credential_binding: "origin" } : {}
   };
 };
 var validateSettings = (value2) => {
@@ -15108,10 +15139,10 @@ import { DatabaseSync } from "node:sqlite";
 
 // ../agent-bridge/src/logging/redacting-logger.ts
 var bearerPattern = /\bBearer\s+[A-Za-z0-9._~-]+/giu;
-var agentTokenPattern = /\bas_[A-Za-z0-9_-]{20,}\b/gu;
+var agentTokenPattern2 = /\bas_[A-Za-z0-9_-]{20,}\b/gu;
 var cloudflareTokenPattern = /\bcfut_[A-Za-z0-9_-]{20,}\b/gu;
 var shareUrlPattern = /https:\/\/[^\s/]+\/a\/[A-Za-z0-9_-]{32,256}(?:\/[^\s]*)?/gu;
-var redactSensitiveText = (value2) => value2.replace(bearerPattern, "Bearer [REDACTED]").replace(agentTokenPattern, "[REDACTED]").replace(cloudflareTokenPattern, "[REDACTED]").replace(shareUrlPattern, "[REDACTED SHARE URL]");
+var redactSensitiveText = (value2) => value2.replace(bearerPattern, "Bearer [REDACTED]").replace(agentTokenPattern2, "[REDACTED]").replace(cloudflareTokenPattern, "[REDACTED]").replace(shareUrlPattern, "[REDACTED SHARE URL]");
 
 // ../../node_modules/.pnpm/@modelcontextprotocol+server@2.0.0/node_modules/@modelcontextprotocol/server/dist/chunk-Br0eD_fh.mjs
 var __create = Object.create;
@@ -28268,7 +28299,7 @@ var publishArtifactInputSchema = external_exports.object({
     "Optional UTF-8 source used to generate a PDF. When configured, ArtifactPass verifies it against the PDF and signs the agent-readable representation."
   ),
   expires_in_seconds: external_exports.number().int().positive().default(3600).describe(
-    "Deployment expiry preset in seconds. Defaults to one hour (3600). Default setup presets: 900, 1800, 3600, 43200, 86400; a rejection reports the deployment's allowed values."
+    "Deployment expiry preset in seconds. Defaults to one hour (3600). Public ArtifactPass presets: 900, 1800, or 3600; a rejection reports the deployment's allowed values."
   )
 });
 var publishArtifactOutputSchema = external_exports.object({
@@ -28279,7 +28310,9 @@ var publishArtifactOutputSchema = external_exports.object({
 var readArtifactInputSchema = external_exports.object({
   share_url: external_exports.string().url(),
   cursor: external_exports.string().optional(),
-  max_bytes: external_exports.number().int().positive().optional(),
+  max_bytes: external_exports.number().int().positive().max(PROTOCOL_MAX_SOURCE_CHUNK_BYTES).optional().describe(
+    `Maximum source bytes per call. Defaults to ${PROTOCOL_MAX_SOURCE_CHUNK_BYTES}.`
+  ),
   representation: external_exports.enum(["auto", "source", "derived"]).optional()
 });
 var readArtifactOutputSchema = external_exports.object({
@@ -28454,11 +28487,34 @@ var deploymentPlan = (input) => {
   if (!workersSubdomainPattern.test(input.workersSubdomain)) {
     throw new Error("Choose a valid Workers account subdomain");
   }
-  if (input.identities.length === 0) throw new Error("At least one allowed identity is required");
+  if (input.publicAuth === void 0 && input.identities.length === 0) {
+    throw new Error("At least one allowed identity is required");
+  }
+  if (input.publicAuth !== void 0 && input.identities.length > 0) {
+    throw new Error("Public ArtifactPass authentication cannot include Cloudflare Access identities");
+  }
   for (const identity of input.identities) {
     const valid = identity.kind === "email" ? /^[a-z0-9.!#$%&'*+/=?^_`{|}~-]+@[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?(?:\.[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?)+$/u.test(identity.value) : hostnamePattern.test(`x.${identity.value}`);
     if (!valid) throw new Error(`Allowed ${identity.kind} is invalid`);
   }
+  if (input.publicAuth !== void 0) {
+    for (const [name, credential] of Object.entries(input.publicAuth)) {
+      if (credential.trim().length === 0 || credential.length > 512) {
+        throw new Error(`${name} must be a non-empty OAuth credential`);
+      }
+    }
+  }
+  if (input.publicAuth !== void 0) {
+    return [
+      "verify the short-lived Cloudflare API token, selected zone, and Workers account subdomain",
+      "reuse or create the private D1 database and R2 bucket",
+      "prepare the public Worker configuration with Google and GitHub OAuth secrets",
+      "apply D1 migrations and the R2 cleanup lifecycle",
+      "deploy the Worker and verify ArtifactPass authentication before removing the old Access gate",
+      "verify public sign-in, protected upload redirection, and health",
+      "print the public connection command without persisting provisioning credentials"
+    ];
+  }
   return [
     "verify the short-lived Cloudflare API token, selected zone, and Workers account subdomain",
     "reuse or create the private D1 database and R2 bucket",
@@ -28475,6 +28531,34 @@ var expectedDestinations = (hostname3) => [
 ];
 var identityIncludes = (identities) => identities.map((identity) => identity.kind === "email" ? { email: { email: identity.value } } : { email_domain: { domain: identity.value } });
 var canonicalJson = (value2) => JSON.stringify([...value2].sort((left, right) => JSON.stringify(left).localeCompare(JSON.stringify(right))));
+var restoreLegacyAccess = async (input, serviceName, policies, dependencies) => {
+  const restored = await dependencies.client.request(
+    `/accounts/${input.accountId}/access/apps`,
+    {
+      method: "POST",
+      body: JSON.stringify({
+        name: serviceName,
+        type: "self_hosted",
+        session_duration: "24h",
+        destinations: expectedDestinations(input.hostname)
+      })
+    }
+  );
+  for (const policy of policies) {
+    await dependencies.client.request(
+      `/accounts/${input.accountId}/access/apps/${restored.id}/policies`,
+      {
+        method: "POST",
+        body: JSON.stringify({
+          name: policy.name,
+          decision: policy.decision ?? "allow",
+          include: policy.include ?? []
+        })
+      }
+    );
+  }
+  return restored;
+};
 var deploymentFiles = async (root, directory = root) => {
   const entries = await readdir(directory);
   const files = [];
@@ -28545,7 +28629,14 @@ var approvalBinding = async (input, serviceName, dependencies) => {
       serviceName,
       pdfKeyId: input.pdfKeyId,
       pdfPublicKeySha256: createHash("sha256").update(input.pdfPublicKey).digest("hex"),
-      workersSubdomain: input.workersSubdomain
+      workersSubdomain: input.workersSubdomain,
+      authMode: input.publicAuth === void 0 ? "cloudflare-access" : "artifactpass",
+      ...input.publicAuth === void 0 ? {} : {
+        googleClientId: input.publicAuth.googleClientId,
+        googleClientSecretSha256: createHash("sha256").update(input.publicAuth.googleClientSecret).digest("hex"),
+        githubClientId: input.publicAuth.githubClientId,
+        githubClientSecretSha256: createHash("sha256").update(input.publicAuth.githubClientSecret).digest("hex")
+      }
     },
     bundleSha256: await deploymentSha256(dependencies.deploymentRoot),
     remote: {
@@ -28564,7 +28655,7 @@ var approvalBinding = async (input, serviceName, dependencies) => {
   };
 };
 var readinessRetryDelays = [1e3, 2e3, 4e3, 8e3, 15e3];
-var fetchAfterDeploymentPropagation = async (fetchImplementation, request, init, sleep2, timeoutMilliseconds) => {
+var fetchAfterDeploymentPropagation = async (fetchImplementation, request, init, sleep2, timeoutMilliseconds, isReady = (response) => response.status !== 404 && response.status !== 429 && response.status < 500) => {
   let lastError;
   for (let attempt = 0; attempt <= readinessRetryDelays.length; attempt += 1) {
     try {
@@ -28572,7 +28663,7 @@ var fetchAfterDeploymentPropagation = async (fetchImplementation, request, init,
         ...init,
         signal: AbortSignal.timeout(timeoutMilliseconds)
       });
-      if (response.status !== 404 && response.status !== 429 && response.status < 500) return response;
+      if (await isReady(response.clone())) return response;
       lastError = new Error(`Deployment route is not ready (${response.status})`);
     } catch (error51) {
       lastError = error51;
@@ -28583,6 +28674,17 @@ var fetchAfterDeploymentPropagation = async (fetchImplementation, request, init,
   }
   throw lastError;
 };
+var isArtifactPassUploadRedirect = (response, baseUrl) => {
+  if (response.status !== 302) return false;
+  const location = response.headers.get("location");
+  if (location === null) return false;
+  try {
+    const signInRedirect = new URL(location, baseUrl);
+    return signInRedirect.origin === baseUrl && signInRedirect.pathname === "/auth/sign-in" && signInRedirect.searchParams.get("return_to") === "/upload";
+  } catch {
+    return false;
+  }
+};
 var deployArtifactShare = async (input, dependencies) => {
   const plan = deploymentPlan(input);
   const serviceName = input.serviceName ?? "lordebuilds-artifacts-share";
@@ -28597,7 +28699,7 @@ var deployArtifactShare = async (input, dependencies) => {
     const binding = await approvalBinding(input, serviceName, dependencies);
     if (input.writeApprovalManifest !== void 0) {
       const manifest = {
-        version: 1,
+        version: 2,
         generated_at: (/* @__PURE__ */ new Date()).toISOString(),
         binding
       };
@@ -28612,7 +28714,7 @@ var deployArtifactShare = async (input, dependencies) => {
       };
     }
     const approved = JSON.parse(await readFile2(input.approveManifest ?? "", "utf8"));
-    if (approved.version !== 1 || JSON.stringify(approved.binding) !== JSON.stringify(binding)) {
+    if (approved.version !== 2 || JSON.stringify(approved.binding) !== JSON.stringify(binding)) {
       throw new Error("Hosted approval manifest no longer matches the deployment bundle or Cloudflare state");
     }
   }
@@ -28666,7 +28768,18 @@ var deployArtifactShare = async (input, dependencies) => {
     `/accounts/${input.accountId}/access/apps`
   );
   let application = applications.find((candidate) => candidate.name === serviceName);
-  if (application === void 0) {
+  const legacyAccessPolicies = input.publicAuth !== void 0 && application !== void 0 ? await dependencies.client.request(
+    `/accounts/${input.accountId}/access/apps/${application.id}/policies`
+  ) : [];
+  if (input.publicAuth !== void 0 && application !== void 0) {
+    const actual = canonicalJson((application.destinations ?? []).map((destination) => ({
+      type: destination.type,
+      ...destination.uri === void 0 ? {} : { uri: destination.uri }
+    })));
+    if (actual !== canonicalJson(expectedDestinations(input.hostname))) {
+      throw new Error("Existing Access application has different protected paths and cannot be removed safely");
+    }
+  } else if (input.publicAuth === void 0 && application === void 0) {
     application = await dependencies.client.request(
       `/accounts/${input.accountId}/access/apps`,
       {
@@ -28680,7 +28793,8 @@ var deployArtifactShare = async (input, dependencies) => {
       }
     );
     changed.push("Access application");
-  } else {
+  } else if (input.publicAuth === void 0) {
+    if (application === void 0) throw new Error("Cloudflare Access application is unavailable");
     const actual = canonicalJson((application.destinations ?? []).map((destination) => ({
       type: destination.type,
       ...destination.uri === void 0 ? {} : { uri: destination.uri }
@@ -28689,43 +28803,46 @@ var deployArtifactShare = async (input, dependencies) => {
       throw new Error("Existing Access application has different protected paths");
     }
   }
-  if (typeof application.aud !== "string" || application.aud.length === 0) {
-    throw new Error("Cloudflare Access application did not return an audience tag");
-  }
-  if (!/^[a-z0-9-]+\.cloudflareaccess\.com$/u.test(organization.auth_domain)) {
-    throw new Error("Cloudflare Access organization returned an invalid team domain");
-  }
-  const policies = await dependencies.client.request(
-    `/accounts/${input.accountId}/access/apps/${application.id}/policies`
-  );
-  const expectedIncludes = identityIncludes(input.identities);
-  const policy = policies.find((candidate) => candidate.name === "Artifact Share uploaders");
-  if (policy === void 0) {
-    await dependencies.client.request(
-      `/accounts/${input.accountId}/access/apps/${application.id}/policies`,
-      {
-        method: "POST",
-        body: JSON.stringify({
-          name: "Artifact Share uploaders",
-          decision: "allow",
-          include: expectedIncludes
-        })
-      }
-    );
-    changed.push("Access policy");
-  } else if (policy.decision !== "allow" || canonicalJson(policy.include ?? []) !== canonicalJson(expectedIncludes)) {
-    await dependencies.client.request(
-      `/accounts/${input.accountId}/access/apps/${application.id}/policies/${policy.id}`,
-      {
-        method: "PUT",
-        body: JSON.stringify({
-          name: "Artifact Share uploaders",
-          decision: "allow",
-          include: expectedIncludes
-        })
-      }
+  if (input.publicAuth === void 0) {
+    if (application === void 0) throw new Error("Cloudflare Access application is unavailable");
+    if (typeof application.aud !== "string" || application.aud.length === 0) {
+      throw new Error("Cloudflare Access application did not return an audience tag");
+    }
+    if (!/^[a-z0-9-]+\.cloudflareaccess\.com$/u.test(organization.auth_domain)) {
+      throw new Error("Cloudflare Access organization returned an invalid team domain");
+    }
+    const policies = await dependencies.client.request(
+      `/accounts/${input.accountId}/access/apps/${application.id}/policies`
     );
-    changed.push("Access policy");
+    const expectedIncludes = identityIncludes(input.identities);
+    const policy = policies.find((candidate) => candidate.name === "Artifact Share uploaders");
+    if (policy === void 0) {
+      await dependencies.client.request(
+        `/accounts/${input.accountId}/access/apps/${application.id}/policies`,
+        {
+          method: "POST",
+          body: JSON.stringify({
+            name: "Artifact Share uploaders",
+            decision: "allow",
+            include: expectedIncludes
+          })
+        }
+      );
+      changed.push("Access policy");
+    } else if (policy.decision !== "allow" || canonicalJson(policy.include ?? []) !== canonicalJson(expectedIncludes)) {
+      await dependencies.client.request(
+        `/accounts/${input.accountId}/access/apps/${application.id}/policies/${policy.id}`,
+        {
+          method: "PUT",
+          body: JSON.stringify({
+            name: "Artifact Share uploaders",
+            decision: "allow",
+            include: expectedIncludes
+          })
+        }
+      );
+      changed.push("Access policy");
+    }
   }
   const template = JSON.parse(await readFile2(resolve3(dependencies.deploymentRoot, "wrangler-template.json"), "utf8"));
   template.name = serviceName;
@@ -28741,8 +28858,24 @@ var deployArtifactShare = async (input, dependencies) => {
   template.routes = [{ pattern: input.hostname, custom_domain: true }];
   template.workers_dev = false;
   template.preview_urls = false;
-  template.vars.ACCESS_TEAM_DOMAIN = `https://${organization.auth_domain}`;
-  template.vars.ACCESS_AUD = application.aud;
+  if (input.publicAuth === void 0) {
+    if (application === void 0) throw new Error("Cloudflare Access application is unavailable");
+    delete template.secrets;
+    template.vars.HUMAN_AUTH_MODE = "cloudflare-access";
+    template.vars.ACCESS_TEAM_DOMAIN = `https://${organization.auth_domain}`;
+    template.vars.ACCESS_AUD = application.aud;
+  } else {
+    template.secrets = {
+      required: ["GOOGLE_OAUTH_CLIENT_SECRET", "GITHUB_OAUTH_CLIENT_SECRET"]
+    };
+    delete template.vars.ACCESS_TEAM_DOMAIN;
+    delete template.vars.ACCESS_AUD;
+    template.vars.HUMAN_AUTH_MODE = "artifactpass";
+    template.vars.GOOGLE_OAUTH_CLIENT_ID = input.publicAuth.googleClientId;
+    template.vars.GITHUB_OAUTH_CLIENT_ID = input.publicAuth.githubClientId;
+    template.vars.ALLOWED_EXPIRY_SECONDS = "900,1800,3600";
+    template.vars.MAX_EXPIRY_SECONDS = "3600";
+  }
   template.vars.PDF_PROVENANCE_KEY_ID = input.pdfKeyId;
   template.vars.PDF_PROVENANCE_PUBLIC_KEYS = JSON.stringify({ [input.pdfKeyId]: input.pdfPublicKey });
   template.vars.PDF_PROVENANCE_RENDERERS = "artifact-share-qualified-pdf@1";
@@ -28770,6 +28903,15 @@ var deployArtifactShare = async (input, dependencies) => {
       resolve3(dependencies.deploymentRoot, "storage-lifecycle.json"),
       "--force"
     ], { env: commandEnvironment });
+    if (input.publicAuth !== void 0) {
+      await runner("wrangler", ["secret", "bulk", "--config", configurationPath], {
+        env: commandEnvironment,
+        input: JSON.stringify({
+          GOOGLE_OAUTH_CLIENT_SECRET: input.publicAuth.googleClientSecret,
+          GITHUB_OAUTH_CLIENT_SECRET: input.publicAuth.githubClientSecret
+        })
+      });
+    }
     await runner("wrangler", ["deploy", "--config", configurationPath, "--strict"], { env: commandEnvironment });
     changed.push("Worker deployment");
   } finally {
@@ -28778,16 +28920,113 @@ var deployArtifactShare = async (input, dependencies) => {
   const fetchImplementation = dependencies.fetch ?? globalThis.fetch;
   const sleep2 = dependencies.sleep ?? (async (milliseconds) => await new Promise((resolveSleep) => setTimeout(resolveSleep, milliseconds)));
   const readinessTimeoutMilliseconds = dependencies.readinessTimeoutMilliseconds ?? 1e4;
-  const response = await fetchAfterDeploymentPropagation(
+  await fetchAfterDeploymentPropagation(
     fetchImplementation,
     `${baseUrl}/health`,
     { redirect: "error" },
     sleep2,
-    readinessTimeoutMilliseconds
+    readinessTimeoutMilliseconds,
+    async (candidate) => {
+      if (!candidate.ok) return false;
+      const candidateHealth = await candidate.json().catch(() => null);
+      if (candidateHealth?.service !== "lordebuilds.artifacts.share" || candidateHealth.status !== "ok") {
+        return false;
+      }
+      return input.publicAuth === void 0 || candidateHealth.human_auth_mode === "artifactpass" && candidateHealth.authentication_configured === true;
+    }
   );
-  const health = await response.clone().json().catch(() => null);
-  if (!response.ok || health?.service !== "lordebuilds.artifacts.share" || health.status !== "ok") {
-    throw new Error(`Deployment health check failed (${response.status})`);
+  if (input.publicAuth !== void 0) {
+    const signIn = await fetchAfterDeploymentPropagation(
+      fetchImplementation,
+      `${baseUrl}/auth/sign-in?return_to=%2Fupload`,
+      { redirect: "manual" },
+      sleep2,
+      readinessTimeoutMilliseconds
+    );
+    if (!signIn.ok || !(await signIn.text()).includes("Continue with Google")) {
+      throw new Error(`ArtifactPass sign-in check failed (${signIn.status})`);
+    }
+    for (const provider of ["google", "github"]) {
+      const login = await fetchAfterDeploymentPropagation(
+        fetchImplementation,
+        `${baseUrl}/auth/login/${provider}?return_to=%2Fupload`,
+        { redirect: "manual" },
+        sleep2,
+        readinessTimeoutMilliseconds
+      );
+      const location = login.headers.get("location");
+      const expectedOrigin = provider === "google" ? "https://accounts.google.com" : "https://github.com";
+      if (login.status !== 302 || location === null || new URL(location).origin !== expectedOrigin) {
+        throw new Error(`ArtifactPass ${provider} authentication check failed (${login.status})`);
+      }
+    }
+    let removedLegacyAccess = false;
+    if (application !== void 0) {
+      await dependencies.client.request(
+        `/accounts/${input.accountId}/access/apps/${application.id}`,
+        { method: "DELETE" }
+      );
+      removedLegacyAccess = true;
+      changed.push("Access application removal");
+    }
+    try {
+      await fetchAfterDeploymentPropagation(
+        fetchImplementation,
+        `${baseUrl}/upload`,
+        { redirect: "manual" },
+        sleep2,
+        readinessTimeoutMilliseconds,
+        (candidate) => isArtifactPassUploadRedirect(candidate, baseUrl)
+      );
+    } catch (error51) {
+      if (removedLegacyAccess) {
+        try {
+          const restoredApplication = await restoreLegacyAccess(
+            input,
+            serviceName,
+            legacyAccessPolicies,
+            dependencies
+          );
+          if (typeof restoredApplication.aud !== "string" || restoredApplication.aud.length === 0 || !/^[a-z0-9-]+\.cloudflareaccess\.com$/u.test(organization.auth_domain)) {
+            throw new Error("Restored Cloudflare Access configuration is incomplete");
+          }
+          const rollbackTemplate = structuredClone(template);
+          delete rollbackTemplate.secrets;
+          rollbackTemplate.vars.HUMAN_AUTH_MODE = "cloudflare-access";
+          rollbackTemplate.vars.ACCESS_TEAM_DOMAIN = `https://${organization.auth_domain}`;
+          rollbackTemplate.vars.ACCESS_AUD = restoredApplication.aud;
+          delete rollbackTemplate.vars.GOOGLE_OAUTH_CLIENT_ID;
+          delete rollbackTemplate.vars.GITHUB_OAUTH_CLIENT_ID;
+          const rollbackRoot = await mkdtemp(resolve3(tmpdir(), "artifact-share-rollback-"));
+          try {
+            const rollbackConfigurationPath = resolve3(rollbackRoot, "wrangler.json");
+            await writeFile2(rollbackConfigurationPath, JSON.stringify(rollbackTemplate), { mode: 384 });
+            await runner("wrangler", ["deploy", "--config", rollbackConfigurationPath, "--strict"], {
+              env: { CLOUDFLARE_ACCOUNT_ID: input.accountId }
+            });
+          } finally {
+            await rm(rollbackRoot, { recursive: true });
+          }
+          await fetchAfterDeploymentPropagation(
+            fetchImplementation,
+            `${baseUrl}/upload`,
+            { redirect: "manual" },
+            sleep2,
+            readinessTimeoutMilliseconds,
+            (candidate) => [302, 303, 307, 401, 403].includes(candidate.status)
+          );
+        } catch (restoreError) {
+          throw new AggregateError(
+            [error51, restoreError],
+            "ArtifactPass upload verification failed and the legacy Access gate could not be restored"
+          );
+        }
+      }
+      throw new Error("ArtifactPass did not protect the upload route after deployment propagation", {
+        cause: error51
+      });
+    }
+    return { baseUrl, teamCommand, plan, changed };
   }
   const protectedUpload = await fetchAfterDeploymentPropagation(
     fetchImplementation,
@@ -29573,15 +29812,26 @@ var connectHost = async (input, dependencies) => {
       ...migration === void 0 ? {} : { migration }
     };
   }
-  const previousToken = await store.get();
-  if (previousToken !== null && previousProfile === void 0) {
+  const previousStoredCredential = await store.get();
+  if (previousStoredCredential !== null && previousProfile === void 0) {
     throw new Error(`The existing ArtifactPass ${profileName} credential has no matching profile; disconnect it first`);
   }
-  if (previousToken !== null && previousProfile !== void 0 && previousProfile.open_development !== true) {
+  const previousToken = previousStoredCredential === null || previousProfile === void 0 ? null : resolveAgentCredential(
+    previousStoredCredential,
+    previousProfile.base_url,
+    previousProfile.credential_binding === "origin"
+  );
+  if (previousToken !== null && previousProfile !== void 0 && previousProfile.open_development !== true && new URL(previousProfile.base_url).origin === origin.origin) {
     const inspection = await inspectToken(origin, previousToken, fetchImplementation);
     if (inspection !== null) {
       if (previousSettings === null) throw new Error("ArtifactPass profile state disappeared");
+      const boundCredential = bindAgentCredential(origin, previousToken);
+      let migratedCredential = false;
       try {
+        if (boundCredential !== previousStoredCredential) {
+          await store.set(boundCredential);
+          migratedCredential = true;
+        }
         await (dependencies.writeSettings ?? writeLocalBridgeSettings)(configPath, upsertLocalBridgeProfile(
           previousSettings,
           profileName,
@@ -29591,11 +29841,13 @@ var connectHost = async (input, dependencies) => {
             ...previousProfile.publication_state === "legacy" ? { publication_state: "legacy" } : {},
             ...previousProfile.publication_state_path === void 0 ? {} : { publication_state_path: previousProfile.publication_state_path },
             credential_namespace: "artifactpass",
+            credential_binding: "origin",
             ...healthBody.pdf_provenance_key_id === void 0 ? previousProfile.pdf_key_id === void 0 ? {} : { pdf_key_id: previousProfile.pdf_key_id } : { pdf_key_id: healthBody.pdf_provenance_key_id }
           }
         ));
         await installAndVerify();
       } catch (error51) {
+        if (migratedCredential) await store.set(previousStoredCredential);
         await (dependencies.writeSettings ?? writeLocalBridgeSettings)(configPath, previousSettings).catch((rollbackError) => {
           throw new AggregateError([error51, rollbackError], "ArtifactPass connection verification failed and config rollback was incomplete");
         });
@@ -29628,11 +29880,12 @@ var connectHost = async (input, dependencies) => {
         ...previousProfile?.publication_state === "legacy" ? { publication_state: "legacy" } : {},
         ...previousProfile?.publication_state_path === void 0 ? {} : { publication_state_path: previousProfile.publication_state_path },
         credential_namespace: "artifactpass",
+        credential_binding: "origin",
         ...healthBody.pdf_provenance_key_id === void 0 ? {} : { pdf_key_id: healthBody.pdf_provenance_key_id }
       }
     ));
     wroteConfig = true;
-    await store.set(token.accessToken);
+    await store.set(bindAgentCredential(origin, token.accessToken));
     rollbackHostInstallation = await installAndVerify();
     if (previousToken !== null && previousProfile !== void 0 && previousProfile.open_development !== true) {
       await revokeToken(
@@ -29649,10 +29902,10 @@ var connectHost = async (input, dependencies) => {
     await revokeToken(origin, token.accessToken, fetchImplementation).catch((cleanupError) => {
       cleanupErrors.push(cleanupError);
     });
-    if (previousToken === null) {
+    if (previousStoredCredential === null) {
       await store.delete().catch((cleanupError) => cleanupErrors.push(cleanupError));
     } else {
-      await store.set(previousToken).catch((cleanupError) => cleanupErrors.push(cleanupError));
+      await store.set(previousStoredCredential).catch((cleanupError) => cleanupErrors.push(cleanupError));
     }
     if (wroteConfig) {
       const restoreConfig = previousSettings === null ? rm4(configPath, { force: true }) : (dependencies.writeSettings ?? writeLocalBridgeSettings)(configPath, previousSettings);
@@ -29668,7 +29921,7 @@ var connectHost = async (input, dependencies) => {
     profileName,
     expiresIn: token.expiresIn,
     configPath,
-    credentialAction: previousToken === null ? "created" : "rotated",
+    credentialAction: previousStoredCredential === null ? "created" : "rotated",
     ...portableIntegration === void 0 ? {} : { portableIntegration },
     ...migration === void 0 ? {} : { migration }
   };
@@ -29704,9 +29957,10 @@ var disconnectHost = async (baseUrl, options = {}) => {
     }),
     migrationCommitted: true
   });
-  const token = await store.get();
-  if (token === null) return;
+  const storedCredential = await store.get();
+  if (storedCredential === null) return;
   const origin = assertSafeDeploymentOrigin(new URL(baseUrl));
+  const token = resolveAgentCredential(storedCredential, origin);
   const response = await (options.fetch ?? globalThis.fetch)(new URL("/api/connection", origin), {
     method: "DELETE",
     headers: { Authorization: `Bearer ${token}` },
@@ -29718,6 +29972,45 @@ var disconnectHost = async (baseUrl, options = {}) => {
   await store.delete();
 };
 
+// src/cli-arguments.ts
+var CONNECT_VALUE_OPTIONS = /* @__PURE__ */ new Set([
+  "--profile",
+  "--workspace-root",
+  "--host",
+  "--marketplace"
+]);
+var CONNECT_BOOLEAN_OPTIONS = /* @__PURE__ */ new Set([
+  "--no-host-install",
+  "--open-development"
+]);
+var parseConnectArguments = (args) => {
+  const positionals = [];
+  for (let index = 0; index < args.length; index += 1) {
+    const argument = args[index] ?? "";
+    if (CONNECT_VALUE_OPTIONS.has(argument)) {
+      const optionValue = args[index + 1];
+      if (optionValue === void 0 || optionValue.startsWith("--")) {
+        throw new Error(`${argument} requires a value`);
+      }
+      index += 1;
+      continue;
+    }
+    if (CONNECT_BOOLEAN_OPTIONS.has(argument)) continue;
+    if (argument.startsWith("--")) throw new Error(`Unknown connect option: ${argument}`);
+    positionals.push(argument);
+  }
+  if (positionals.length > 1) throw new Error("connect accepts at most one deployment URL");
+  return positionals[0] === void 0 ? {} : { deploymentUrl: positionals[0] };
+};
+var resolveConnectDeploymentUrl = (parsed, settings, requestedProfile) => {
+  if (parsed.deploymentUrl !== void 0) return parsed.deploymentUrl;
+  if (requestedProfile !== void 0 && settings?.profiles[requestedProfile] === void 0) {
+    throw new Error(`Unknown ArtifactPass profile: ${requestedProfile}; provide its deployment URL to create it`);
+  }
+  const profileName = requestedProfile ?? settings?.active_profile;
+  return (profileName === void 0 ? void 0 : settings?.profiles[profileName]?.base_url) ?? "https://artifactpass.com";
+};
+
 // src/doctor.ts
 import { access, constants } from "node:fs/promises";
 var commandExists = async (runner, command) => {
@@ -29767,7 +30060,7 @@ import { dirname as dirname6, join as join2, parse as parse3, resolve as resolve
 // package.json
 var package_default = {
   name: "artifactpass",
-  version: "0.1.0-rc.3",
+  version: "0.1.0-rc.4",
   description: "Install and connect ArtifactPass for compatible AI agent systems.",
   repository: {
     type: "git",
@@ -29935,9 +30228,11 @@ var renderInstallReceipt = (receipt) => {
     return `ArtifactPass installation failed during ${receipt.failed_stage ?? "setup"}. Previous working state was restored.`;
   }
   const registration = receipt.portable_bundle.host_registration === "manual-required" ? `Manual host registration required. MCP: ${receipt.portable_bundle.mcp_config ?? "unavailable"}; skills: ${receipt.portable_bundle.skills_directory ?? "unavailable"}.` : `Installed for ${receipt.adapters.join(" and ")}.`;
-  return `ArtifactPass is connected to ${receipt.origin} for ${receipt.profile}. ${registration} Start a new agent session before using it.`;
+  const connection = receipt.credential === "none" ? `ArtifactPass is installed for ${receipt.profile} but not connected. Run \`pnpm dlx artifactpass connect ${receipt.origin} --profile ${receipt.profile}\` when you want to publish.` : `ArtifactPass is connected to ${receipt.origin} for ${receipt.profile}.`;
+  return `${connection} ${registration} Start a new agent session before using it.`;
 };
 var runArtifactpassInstall = async (input, dependencies) => {
+  const connectAfterInstall = input.connectAfterInstall === true;
   const now = dependencies.now ?? Date.now;
   const operationId = (dependencies.operationId ?? randomUUID3)();
   const origin = new URL(input.baseUrl ?? "https://artifactpass.com").origin;
@@ -29958,6 +30253,7 @@ var runArtifactpassInstall = async (input, dependencies) => {
   let smoke;
   let skills = [];
   let connectResult;
+  let hostInstallation;
   let configSnapshot;
   const outcomes = [];
   try {
@@ -29977,7 +30273,7 @@ var runArtifactpassInstall = async (input, dependencies) => {
       if (isMissing(error51)) return { existed: false };
       throw error51;
     });
-    if (dependencies.skipCredentialStorePreflight !== true && input.openDevelopment !== true) {
+    if (connectAfterInstall && dependencies.skipCredentialStorePreflight !== true && input.openDevelopment !== true) {
       await verifyCredentialStore(
         dependencies.platform ?? process.platform,
         dependencies.runner ?? runProcess
@@ -29997,25 +30293,74 @@ var runArtifactpassInstall = async (input, dependencies) => {
     stage = "connection";
     journal = { ...journal, stage };
     await writeJson(journalPath, journal);
-    connectResult = await (dependencies.connect ?? connectHost)({
-      baseUrl: origin,
-      profileName,
-      workspaceRoots: [workspaceRoot],
-      marketplaceSource: input.marketplaceSource,
-      hostBridgePath: resolve6(portable.rootDirectory, "plugin/dist/cli.mjs"),
-      openDevelopment: input.openDevelopment === true,
-      installKnownHostAdapters: input.installKnownHostAdapters !== false,
-      ...input.configPath === void 0 ? {} : { configPath }
-    }, {
-      ...dependencies.connectDependencies,
-      verifyConnection: async (context) => {
-        smoke = await (dependencies.smoke ?? smokeArtifactpassMcp)({
-          mcpConfigPath: portable?.mcpConfig ?? "",
-          localConfigPath: context.configPath
-        });
-        skills = await verifySkills(portable);
-      }
-    });
+    if (connectAfterInstall) {
+      connectResult = await (dependencies.connect ?? connectHost)({
+        baseUrl: origin,
+        profileName,
+        workspaceRoots: [workspaceRoot],
+        marketplaceSource: input.marketplaceSource,
+        hostBridgePath: resolve6(portable.rootDirectory, "plugin/dist/cli.mjs"),
+        openDevelopment: input.openDevelopment === true,
+        installKnownHostAdapters: input.installKnownHostAdapters !== false,
+        ...input.configPath === void 0 ? {} : { configPath }
+      }, {
+        ...dependencies.connectDependencies,
+        verifyConnection: async (context) => {
+          [smoke, skills] = await Promise.all([
+            (dependencies.smoke ?? smokeArtifactpassMcp)({
+              mcpConfigPath: portable?.mcpConfig ?? "",
+              localConfigPath: context.configPath
+            }),
+            verifySkills(portable)
+          ]);
+        }
+      });
+    } else {
+      const previousSettings = configSnapshot?.existed === true && configSnapshot.bytes !== void 0 ? await readLocalBridgeSettings(configPath) : null;
+      const previousProfile = previousSettings?.profiles[profileName];
+      if (previousProfile !== void 0 && new URL(previousProfile.base_url).origin !== new URL(origin).origin) {
+        throw new Error(
+          `ArtifactPass ${profileName} already targets ${new URL(previousProfile.base_url).origin}; use a new profile or disconnect it before changing deployments`
+        );
+      }
+      const installedSettings = upsertLocalBridgeProfile(
+        previousSettings,
+        profileName,
+        {
+          base_url: origin,
+          workspace_roots: [workspaceRoot],
+          ...input.openDevelopment === true ? { open_development: true } : {},
+          ...previousProfile?.pdf_key_id === void 0 ? {} : { pdf_key_id: previousProfile.pdf_key_id },
+          ...previousProfile?.publication_state === "legacy" ? { publication_state: "legacy" } : {},
+          ...previousProfile?.publication_state_path === void 0 ? {} : { publication_state_path: previousProfile.publication_state_path },
+          credential_namespace: "artifactpass",
+          ...previousProfile?.credential_binding === "origin" ? { credential_binding: "origin" } : {}
+        }
+      );
+      await writeLocalBridgeSettings(
+        configPath,
+        previousSettings !== null && input.profileName === void 0 && input.openDevelopment !== true ? setActiveLocalBridgeProfile(installedSettings, previousSettings.active_profile) : installedSettings
+      );
+      const runner = dependencies.runner ?? runProcess;
+      const hosts = input.installKnownHostAdapters === false ? [] : await detectHosts(runner);
+      hostInstallation = hosts.length === 0 ? void 0 : await installPluginForHosts(hosts, input.marketplaceSource, {
+        configPath,
+        profileName,
+        bridgePath: resolve6(portable.rootDirectory, "plugin/dist/cli.mjs")
+      }, runner);
+      [smoke, skills] = await Promise.all([
+        (dependencies.smoke ?? smokeArtifactpassMcp)({
+          mcpConfigPath: portable.mcpConfig,
+          localConfigPath: configPath
+        }),
+        verifySkills(portable)
+      ]);
+      connectResult = {
+        hosts,
+        profileName,
+        configPath
+      };
+    }
     outcomes.push(`credential:${connectResult.credentialAction ?? "none"}`);
     outcomes.push("host-registration:installed-or-reported");
     await dependencies.afterStage?.("connection");
@@ -30073,6 +30418,11 @@ var runArtifactpassInstall = async (input, dependencies) => {
     return receipt;
   } catch (error51) {
     const rollbackFailures = [];
+    if (hostInstallation !== void 0) {
+      await hostInstallation.rollback().catch(() => rollbackFailures.push("host-registration"));
+    } else if ((connectResult?.hosts.length ?? 0) > 0) {
+      rollbackFailures.push("host-registration-unverified");
+    }
     if (portable !== void 0 && (dependencies.portableWasCreated ?? portableIntegrationWasCreated)(portable)) {
       await rm5(portable.rootDirectory, { recursive: true, force: true }).catch(() => rollbackFailures.push("portable-bundle"));
     }
@@ -30080,7 +30430,6 @@ var runArtifactpassInstall = async (input, dependencies) => {
       const restore = configSnapshot.existed && configSnapshot.bytes !== void 0 ? writeFile5(configPath, configSnapshot.bytes, { mode: 384 }) : rm5(configPath, { force: true });
       await restore.catch(() => rollbackFailures.push("configuration"));
     }
-    if ((connectResult?.hosts.length ?? 0) > 0) rollbackFailures.push("host-registration-unverified");
     if (connectResult?.credentialAction === "created" || connectResult?.credentialAction === "rotated") {
       rollbackFailures.push("credential-unverified");
     }
@@ -30163,11 +30512,6 @@ var booleanFlag = (args, flag) => {
   return count === 1;
 };
 var positionalValues = (args) => args.filter((item, index) => index === 0 || !args[index - 1]?.startsWith("--")).filter((item) => !item.startsWith("--"));
-var positional = (args, position) => {
-  const result = positionalValues(args)[position];
-  if (result === void 0) throw new Error("A deployment URL is required");
-  return result;
-};
 var optionalPositional = (args, position) => positionalValues(args)[position];
 var print = (valueToPrint) => {
   process.stdout.write(`${typeof valueToPrint === "string" ? valueToPrint : JSON.stringify(valueToPrint, null, 2)}
@@ -30178,14 +30522,20 @@ var help = `ArtifactPass setup
 Commands:
   artifactpass [--json]
   install [--base-url <url>] [--profile <name>] [--workspace-root <path>] [--open-development] [--no-host-install] [--json]
+  deploy-public --account-id <id> --zone-id <id> --hostname <host> [--service-name <name>] --workers-subdomain <name> --pdf-key-id <id> --pdf-public-key <base64> --google-client-id <id> --github-client-id <id> (--dry-run | --write-approval-manifest <path> | --approve-manifest <path>)
   deploy --account-id <id> --zone-id <id> --hostname <host> [--service-name <name>] --workers-subdomain <name> --pdf-key-id <id> --pdf-public-key <base64> (--allow-email <email> | --allow-domain <domain>) (--dry-run | --write-approval-manifest <path> | --approve-manifest <path>)
-  connect <base-url> [--profile <name>] [--workspace-root <path>] [--host codex|claude|both] [--no-host-install] [--marketplace <source>] [--open-development]
+  connect [base-url] [--profile <name>] [--workspace-root <path>] [--host codex|claude|both] [--no-host-install] [--marketplace <source>] [--open-development]
   profile list
   profile use <name>
   disconnect [--profile <name>]
   doctor
 
 Cloudflare credentials come from CLOUDFLARE_API_TOKEN or Wrangler OAuth and are never persisted by ArtifactPass.`;
+var requiredEnvironment = (name) => {
+  const result = process.env[name];
+  if (result === void 0 || result.length === 0) throw new Error(`${name} is required`);
+  return result;
+};
 var jsonOutputRequested = false;
 var main = async () => {
   const [command, ...args] = process.argv.slice(2);
@@ -30209,6 +30559,7 @@ var main = async () => {
       ...profileName === void 0 ? {} : { profileName },
       ...workspaceRoot === void 0 ? {} : { workspaceRoot },
       openDevelopment,
+      connectAfterInstall: false,
       installKnownHostAdapters: !booleanFlag(installArgs, "--no-host-install")
     }, {
       connectDependencies: {
@@ -30235,6 +30586,39 @@ ${url2}
     if (!result.node || !result.wrangler || !result.deploymentAssets) process.exitCode = 1;
     return;
   }
+  if (command === "deploy-public") {
+    const dryRun = booleanFlag(args, "--dry-run");
+    const writeApprovalManifest = optionalValue(args, "--write-approval-manifest");
+    const approveManifest = optionalValue(args, "--approve-manifest");
+    if ([dryRun, writeApprovalManifest !== void 0, approveManifest !== void 0].filter(Boolean).length !== 1) {
+      throw new Error("Choose exactly one of --dry-run, --write-approval-manifest, or --approve-manifest");
+    }
+    const serviceName = optionalValue(args, "--service-name");
+    const result = await runDeployCommand({
+      accountId: value(args, "--account-id"),
+      zoneId: value(args, "--zone-id"),
+      hostname: value(args, "--hostname"),
+      pdfKeyId: value(args, "--pdf-key-id"),
+      pdfPublicKey: value(args, "--pdf-public-key"),
+      workersSubdomain: value(args, "--workers-subdomain"),
+      identities: [],
+      dryRun,
+      publicAuth: {
+        googleClientId: value(args, "--google-client-id"),
+        googleClientSecret: requiredEnvironment("ARTIFACTPASS_GOOGLE_OAUTH_CLIENT_SECRET"),
+        githubClientId: value(args, "--github-client-id"),
+        githubClientSecret: requiredEnvironment("ARTIFACTPASS_GITHUB_OAUTH_CLIENT_SECRET")
+      },
+      ...serviceName === void 0 ? {} : { serviceName },
+      ...writeApprovalManifest === void 0 ? {} : { writeApprovalManifest: resolve7(writeApprovalManifest) },
+      ...approveManifest === void 0 ? {} : { approveManifest: resolve7(approveManifest) }
+    }, {
+      deploymentRoot,
+      ...process.env.CLOUDFLARE_API_TOKEN === void 0 ? {} : { token: process.env.CLOUDFLARE_API_TOKEN }
+    });
+    print(result);
+    return;
+  }
   if (command === "deploy") {
     const dryRun = booleanFlag(args, "--dry-run");
     const writeApprovalManifest = optionalValue(args, "--write-approval-manifest");
@@ -30267,6 +30651,12 @@ ${url2}
     return;
   }
   if (command === "connect") {
+    const connectArguments = parseConnectArguments(args);
+    await migrateDefaultLocalState();
+    const savedSettings = await readLocalBridgeSettings(defaultLocalConfigPath()).catch((error51) => {
+      if (error51.code === "ENOENT") return null;
+      throw error51;
+    });
     const installKnownHostAdapters = !booleanFlag(args, "--no-host-install");
     const requestedHost = optionalValue(args, "--host");
     const host = requestedHost ?? "both";
@@ -30282,7 +30672,7 @@ ${url2}
     const profileName = optionalValue(args, "--profile");
     const result = await connectHost({
       ...profileName === void 0 ? {} : { profileName },
-      baseUrl: positional(args, 0),
+      baseUrl: resolveConnectDeploymentUrl(connectArguments, savedSettings, profileName),
       workspaceRoots: values(args, "--workspace-root").length > 0 ? values(args, "--workspace-root") : [process.cwd()],
       ...hosts === void 0 ? {} : { hosts },
       installKnownHostAdapters,