assistant-ui 0.0.120 → 0.0.121

package/dist/lib/agent-skill.js.map

@@ -1 +1 @@
-{"version":3,"file":"agent-skill.js","names":[],"sources":["../../src/lib/agent-skill.ts"],"sourcesContent":["import fs from \"node:fs\";\nimport os from \"node:os\";\nimport path from \"node:path\";\nimport { downloadTemplate } from \"giget\";\nimport {\n  DOWNLOAD_TIMEOUT_MS,\n  dlxCommand,\n  resolveGitHubAuthToken,\n} from \"./create-project\";\nimport { type PackageManagerName } from \"./utils/package-manager\";\n\nexport const SKILLS_PACKAGE = \"assistant-ui/skills\";\nexport const SKILLS_COMMIT = \"4007601e2e16762060f02d45ad82f453eed5409a\";\nexport const SKILLS_PLUGIN_SOURCE = `gh:${SKILLS_PACKAGE}/assistant-ui#${SKILLS_COMMIT}`;\n\nexport function resolveSkillsInstall(params: {\n  skills?: boolean;\n  stdinIsTTY?: boolean;\n}): boolean | undefined {\n  const { skills, stdinIsTTY = process.stdin.isTTY } = params;\n  if (skills !== undefined) return skills;\n  if (!stdinIsTTY) return true;\n  return undefined;\n}\n\nexport function buildSkillsAddCommand(\n  pm: PackageManagerName,\n  params: { stdinIsTTY?: boolean } = {},\n): [string, string[]] {\n  const { stdinIsTTY = process.stdin.isTTY } = params;\n  const [command, dlxArgs] = dlxCommand(pm);\n  const args = [...dlxArgs, \"skills\", \"add\", SKILLS_PACKAGE];\n\n  // Without a TTY the skills CLI cannot prompt for agent platforms, so skip its\n  // confirmation; with a TTY it owns the platform selection interactively.\n  if (!stdinIsTTY) args.push(\"--yes\");\n\n  return [command, args];\n}\n\nexport function skillsPluginDir(): string {\n  const cacheHome =\n    process.env.XDG_CACHE_HOME || path.join(os.homedir(), \".cache\");\n  return path.join(cacheHome, \"assistant-ui\", \"skills\", SKILLS_COMMIT);\n}\n\nexport async function ensureSkillsPlugin(): Promise<string> {\n  const dir = skillsPluginDir();\n  const marker = path.join(dir, \".claude-plugin\", \"plugin.json\");\n  if (fs.existsSync(marker)) return dir;\n\n  const parent = path.dirname(dir);\n  await fs.promises.mkdir(parent, { recursive: true });\n  const staging = await fs.promises.mkdtemp(path.join(parent, \".staging-\"));\n  // Node emits no \"exit\" when a signal kills the process, so the staging\n  // directory is removed on the signal and the signal re-raised. The\n  // listeners stay armed until the removal runs, which a download that\n  // outlives the timeout defers past the caller's own exit.\n  const removeStaging = () => {\n    process.removeListener(\"exit\", removeStaging);\n    process.removeListener(\"SIGINT\", removeStagingOnSignal);\n    process.removeListener(\"SIGTERM\", removeStagingOnSignal);\n    fs.rmSync(staging, { recursive: true, force: true });\n  };\n  const removeStagingOnSignal = (signal: NodeJS.Signals) => {\n    removeStaging();\n    process.kill(process.pid, signal);\n  };\n  process.once(\"exit\", removeStaging);\n  process.once(\"SIGINT\", removeStagingOnSignal);\n  process.once(\"SIGTERM\", removeStagingOnSignal);\n\n  // giget logs to console.debug whenever DEBUG is set, which the `debug`\n  // package does at module load for an unrelated namespace.\n  const origDebug = process.env.DEBUG;\n  delete process.env.DEBUG;\n  let timer: ReturnType<typeof setTimeout> | undefined;\n  let downloadSettled = false;\n  let download: Promise<unknown> | undefined;\n  try {\n    const authToken = resolveGitHubAuthToken();\n    download = downloadTemplate(SKILLS_PLUGIN_SOURCE, {\n      dir: staging,\n      preferOffline: true,\n      silent: true,\n      ...(authToken ? { auth: authToken } : {}),\n    }).finally(() => {\n      downloadSettled = true;\n    });\n    const timeout = new Promise<never>((_, reject) => {\n      timer = setTimeout(\n        () => reject(new Error(\"Download timed out.\")),\n        DOWNLOAD_TIMEOUT_MS,\n      );\n    });\n    await Promise.race([download, timeout]).catch((error: unknown) => {\n      throw new Error(\n        \"Could not fetch the assistant-ui skills from GitHub. Check your network, or set GITHUB_TOKEN if you are rate limited.\",\n        { cause: error },\n      );\n    });\n    await publish(staging, dir, marker);\n  } finally {\n    clearTimeout(timer);\n    if (origDebug !== undefined) process.env.DEBUG = origDebug;\n    if (!download || downloadSettled) removeStaging();\n    else void download.then(removeStaging, removeStaging);\n  }\n\n  return dir;\n}\n\n// A rename fails when the target directory exists and is not empty. A\n// concurrent invocation that published the same commit meanwhile wins and\n// the staged copy is dropped; a directory without the marker is a stale\n// partial cache and is replaced.\nasync function publish(\n  staging: string,\n  dir: string,\n  marker: string,\n  retry = true,\n): Promise<void> {\n  try {\n    await fs.promises.rename(staging, dir);\n  } catch (error) {\n    if (fs.existsSync(marker)) return;\n    if (!retry) throw error;\n    await fs.promises.rm(dir, { recursive: true, force: true });\n    await publish(staging, dir, marker, false);\n  }\n}\n"],"mappings":";;;;;;AAWA,MAAa,iBAAiB;AAC9B,MAAa,gBAAgB;AAC7B,MAAa,uBAAuB,MAAM,eAAe,gBAAgB;AAEzE,SAAgB,qBAAqB,QAGb;CACtB,MAAM,EAAE,QAAQ,aAAa,QAAQ,MAAM,UAAU;CACrD,IAAI,WAAW,KAAA,GAAW,OAAO;CACjC,IAAI,CAAC,YAAY,OAAO;AAE1B;AAEA,SAAgB,sBACd,IACA,SAAmC,CAAC,GAChB;CACpB,MAAM,EAAE,aAAa,QAAQ,MAAM,UAAU;CAC7C,MAAM,CAAC,SAAS,WAAW,WAAW,EAAE;CACxC,MAAM,OAAO;EAAC,GAAG;EAAS;EAAU;EAAO;CAAc;CAIzD,IAAI,CAAC,YAAY,KAAK,KAAK,OAAO;CAElC,OAAO,CAAC,SAAS,IAAI;AACvB;AAEA,SAAgB,kBAA0B;CACxC,MAAM,YACJ,QAAQ,IAAI,kBAAkB,KAAK,KAAK,GAAG,QAAQ,GAAG,QAAQ;CAChE,OAAO,KAAK,KAAK,WAAW,gBAAgB,UAAU,aAAa;AACrE;AAEA,eAAsB,qBAAsC;CAC1D,MAAM,MAAM,gBAAgB;CAC5B,MAAM,SAAS,KAAK,KAAK,KAAK,kBAAkB,aAAa;CAC7D,IAAI,GAAG,WAAW,MAAM,GAAG,OAAO;CAElC,MAAM,SAAS,KAAK,QAAQ,GAAG;CAC/B,MAAM,GAAG,SAAS,MAAM,QAAQ,EAAE,WAAW,KAAK,CAAC;CACnD,MAAM,UAAU,MAAM,GAAG,SAAS,QAAQ,KAAK,KAAK,QAAQ,WAAW,CAAC;CAKxE,MAAM,sBAAsB;EAC1B,QAAQ,eAAe,QAAQ,aAAa;EAC5C,QAAQ,eAAe,UAAU,qBAAqB;EACtD,QAAQ,eAAe,WAAW,qBAAqB;EACvD,GAAG,OAAO,SAAS;GAAE,WAAW;GAAM,OAAO;EAAK,CAAC;CACrD;CACA,MAAM,yBAAyB,WAA2B;EACxD,cAAc;EACd,QAAQ,KAAK,QAAQ,KAAK,MAAM;CAClC;CACA,QAAQ,KAAK,QAAQ,aAAa;CAClC,QAAQ,KAAK,UAAU,qBAAqB;CAC5C,QAAQ,KAAK,WAAW,qBAAqB;CAI7C,MAAM,YAAY,QAAQ,IAAI;CAC9B,OAAO,QAAQ,IAAI;CACnB,IAAI;CACJ,IAAI,kBAAkB;CACtB,IAAI;CACJ,IAAI;EACF,MAAM,YAAY,uBAAuB;EACzC,WAAW,iBAAiB,sBAAsB;GAChD,KAAK;GACL,eAAe;GACf,QAAQ;GACR,GAAI,YAAY,EAAE,MAAM,UAAU,IAAI,CAAC;EACzC,CAAC,CAAC,CAAC,cAAc;GACf,kBAAkB;EACpB,CAAC;EACD,MAAM,UAAU,IAAI,SAAgB,GAAG,WAAW;GAChD,QAAQ,iBACA,uBAAO,IAAI,MAAM,qBAAqB,CAAC,GAC7C,mBACF;EACF,CAAC;EACD,MAAM,QAAQ,KAAK,CAAC,UAAU,OAAO,CAAC,CAAC,CAAC,OAAO,UAAmB;GAChE,MAAM,IAAI,MACR,yHACA,EAAE,OAAO,MAAM,CACjB;EACF,CAAC;EACD,MAAM,QAAQ,SAAS,KAAK,MAAM;CACpC,UAAU;EACR,aAAa,KAAK;EAClB,IAAI,cAAc,KAAA,GAAW,QAAQ,IAAI,QAAQ;EACjD,IAAI,CAAC,YAAY,iBAAiB,cAAc;OAC3C,SAAc,KAAK,eAAe,aAAa;CACtD;CAEA,OAAO;AACT;AAMA,eAAe,QACb,SACA,KACA,QACA,QAAQ,MACO;CACf,IAAI;EACF,MAAM,GAAG,SAAS,OAAO,SAAS,GAAG;CACvC,SAAS,OAAO;EACd,IAAI,GAAG,WAAW,MAAM,GAAG;EAC3B,IAAI,CAAC,OAAO,MAAM;EAClB,MAAM,GAAG,SAAS,GAAG,KAAK;GAAE,WAAW;GAAM,OAAO;EAAK,CAAC;EAC1D,MAAM,QAAQ,SAAS,KAAK,QAAQ,KAAK;CAC3C;AACF"}
+{"version":3,"file":"agent-skill.js","names":[],"sources":["../../src/lib/agent-skill.ts"],"sourcesContent":["import fs from \"node:fs\";\nimport os from \"node:os\";\nimport path from \"node:path\";\nimport { downloadTemplate } from \"giget\";\nimport {\n  DOWNLOAD_TIMEOUT_MS,\n  dlxCommand,\n  resolveGitHubAuthToken,\n} from \"./create-project\";\nimport { type PackageManagerName } from \"./utils/package-manager\";\n\nexport const SKILLS_PACKAGE = \"assistant-ui/skills\";\nexport const SKILLS_COMMIT = \"139674dc888ee076982b6726e8e6f5d0fe0b5f67\";\nexport const SKILLS_PLUGIN_SOURCE = `gh:${SKILLS_PACKAGE}/assistant-ui#${SKILLS_COMMIT}`;\n\nexport function resolveSkillsInstall(params: {\n  skills?: boolean;\n  stdinIsTTY?: boolean;\n}): boolean | undefined {\n  const { skills, stdinIsTTY = process.stdin.isTTY } = params;\n  if (skills !== undefined) return skills;\n  if (!stdinIsTTY) return true;\n  return undefined;\n}\n\nexport function buildSkillsAddCommand(\n  pm: PackageManagerName,\n  params: { stdinIsTTY?: boolean } = {},\n): [string, string[]] {\n  const { stdinIsTTY = process.stdin.isTTY } = params;\n  const [command, dlxArgs] = dlxCommand(pm);\n  const args = [...dlxArgs, \"skills\", \"add\", SKILLS_PACKAGE];\n\n  // Without a TTY the skills CLI cannot prompt for agent platforms, so skip its\n  // confirmation; with a TTY it owns the platform selection interactively.\n  if (!stdinIsTTY) args.push(\"--yes\");\n\n  return [command, args];\n}\n\nexport function skillsPluginDir(): string {\n  const cacheHome =\n    process.env.XDG_CACHE_HOME || path.join(os.homedir(), \".cache\");\n  return path.join(cacheHome, \"assistant-ui\", \"skills\", SKILLS_COMMIT);\n}\n\nexport async function ensureSkillsPlugin(): Promise<string> {\n  const dir = skillsPluginDir();\n  const marker = path.join(dir, \".claude-plugin\", \"plugin.json\");\n  if (fs.existsSync(marker)) return dir;\n\n  const parent = path.dirname(dir);\n  await fs.promises.mkdir(parent, { recursive: true });\n  const staging = await fs.promises.mkdtemp(path.join(parent, \".staging-\"));\n  // Node emits no \"exit\" when a signal kills the process, so the staging\n  // directory is removed on the signal and the signal re-raised. The\n  // listeners stay armed until the removal runs, which a download that\n  // outlives the timeout defers past the caller's own exit.\n  const removeStaging = () => {\n    process.removeListener(\"exit\", removeStaging);\n    process.removeListener(\"SIGINT\", removeStagingOnSignal);\n    process.removeListener(\"SIGTERM\", removeStagingOnSignal);\n    fs.rmSync(staging, { recursive: true, force: true });\n  };\n  const removeStagingOnSignal = (signal: NodeJS.Signals) => {\n    removeStaging();\n    process.kill(process.pid, signal);\n  };\n  process.once(\"exit\", removeStaging);\n  process.once(\"SIGINT\", removeStagingOnSignal);\n  process.once(\"SIGTERM\", removeStagingOnSignal);\n\n  // giget logs to console.debug whenever DEBUG is set, which the `debug`\n  // package does at module load for an unrelated namespace.\n  const origDebug = process.env.DEBUG;\n  delete process.env.DEBUG;\n  let timer: ReturnType<typeof setTimeout> | undefined;\n  let downloadSettled = false;\n  let download: Promise<unknown> | undefined;\n  try {\n    const authToken = resolveGitHubAuthToken();\n    download = downloadTemplate(SKILLS_PLUGIN_SOURCE, {\n      dir: staging,\n      preferOffline: true,\n      silent: true,\n      ...(authToken ? { auth: authToken } : {}),\n    }).finally(() => {\n      downloadSettled = true;\n    });\n    const timeout = new Promise<never>((_, reject) => {\n      timer = setTimeout(\n        () => reject(new Error(\"Download timed out.\")),\n        DOWNLOAD_TIMEOUT_MS,\n      );\n    });\n    await Promise.race([download, timeout]).catch((error: unknown) => {\n      throw new Error(\n        \"Could not fetch the assistant-ui skills from GitHub. Check your network, or set GITHUB_TOKEN if you are rate limited.\",\n        { cause: error },\n      );\n    });\n    await publish(staging, dir, marker);\n  } finally {\n    clearTimeout(timer);\n    if (origDebug !== undefined) process.env.DEBUG = origDebug;\n    if (!download || downloadSettled) removeStaging();\n    else void download.then(removeStaging, removeStaging);\n  }\n\n  return dir;\n}\n\n// A rename fails when the target directory exists and is not empty. A\n// concurrent invocation that published the same commit meanwhile wins and\n// the staged copy is dropped; a directory without the marker is a stale\n// partial cache and is replaced.\nasync function publish(\n  staging: string,\n  dir: string,\n  marker: string,\n  retry = true,\n): Promise<void> {\n  try {\n    await fs.promises.rename(staging, dir);\n  } catch (error) {\n    if (fs.existsSync(marker)) return;\n    if (!retry) throw error;\n    await fs.promises.rm(dir, { recursive: true, force: true });\n    await publish(staging, dir, marker, false);\n  }\n}\n"],"mappings":";;;;;;AAWA,MAAa,iBAAiB;AAC9B,MAAa,gBAAgB;AAC7B,MAAa,uBAAuB,MAAM,eAAe,gBAAgB;AAEzE,SAAgB,qBAAqB,QAGb;CACtB,MAAM,EAAE,QAAQ,aAAa,QAAQ,MAAM,UAAU;CACrD,IAAI,WAAW,KAAA,GAAW,OAAO;CACjC,IAAI,CAAC,YAAY,OAAO;AAE1B;AAEA,SAAgB,sBACd,IACA,SAAmC,CAAC,GAChB;CACpB,MAAM,EAAE,aAAa,QAAQ,MAAM,UAAU;CAC7C,MAAM,CAAC,SAAS,WAAW,WAAW,EAAE;CACxC,MAAM,OAAO;EAAC,GAAG;EAAS;EAAU;EAAO;CAAc;CAIzD,IAAI,CAAC,YAAY,KAAK,KAAK,OAAO;CAElC,OAAO,CAAC,SAAS,IAAI;AACvB;AAEA,SAAgB,kBAA0B;CACxC,MAAM,YACJ,QAAQ,IAAI,kBAAkB,KAAK,KAAK,GAAG,QAAQ,GAAG,QAAQ;CAChE,OAAO,KAAK,KAAK,WAAW,gBAAgB,UAAU,aAAa;AACrE;AAEA,eAAsB,qBAAsC;CAC1D,MAAM,MAAM,gBAAgB;CAC5B,MAAM,SAAS,KAAK,KAAK,KAAK,kBAAkB,aAAa;CAC7D,IAAI,GAAG,WAAW,MAAM,GAAG,OAAO;CAElC,MAAM,SAAS,KAAK,QAAQ,GAAG;CAC/B,MAAM,GAAG,SAAS,MAAM,QAAQ,EAAE,WAAW,KAAK,CAAC;CACnD,MAAM,UAAU,MAAM,GAAG,SAAS,QAAQ,KAAK,KAAK,QAAQ,WAAW,CAAC;CAKxE,MAAM,sBAAsB;EAC1B,QAAQ,eAAe,QAAQ,aAAa;EAC5C,QAAQ,eAAe,UAAU,qBAAqB;EACtD,QAAQ,eAAe,WAAW,qBAAqB;EACvD,GAAG,OAAO,SAAS;GAAE,WAAW;GAAM,OAAO;EAAK,CAAC;CACrD;CACA,MAAM,yBAAyB,WAA2B;EACxD,cAAc;EACd,QAAQ,KAAK,QAAQ,KAAK,MAAM;CAClC;CACA,QAAQ,KAAK,QAAQ,aAAa;CAClC,QAAQ,KAAK,UAAU,qBAAqB;CAC5C,QAAQ,KAAK,WAAW,qBAAqB;CAI7C,MAAM,YAAY,QAAQ,IAAI;CAC9B,OAAO,QAAQ,IAAI;CACnB,IAAI;CACJ,IAAI,kBAAkB;CACtB,IAAI;CACJ,IAAI;EACF,MAAM,YAAY,uBAAuB;EACzC,WAAW,iBAAiB,sBAAsB;GAChD,KAAK;GACL,eAAe;GACf,QAAQ;GACR,GAAI,YAAY,EAAE,MAAM,UAAU,IAAI,CAAC;EACzC,CAAC,CAAC,CAAC,cAAc;GACf,kBAAkB;EACpB,CAAC;EACD,MAAM,UAAU,IAAI,SAAgB,GAAG,WAAW;GAChD,QAAQ,iBACA,uBAAO,IAAI,MAAM,qBAAqB,CAAC,GAC7C,mBACF;EACF,CAAC;EACD,MAAM,QAAQ,KAAK,CAAC,UAAU,OAAO,CAAC,CAAC,CAAC,OAAO,UAAmB;GAChE,MAAM,IAAI,MACR,yHACA,EAAE,OAAO,MAAM,CACjB;EACF,CAAC;EACD,MAAM,QAAQ,SAAS,KAAK,MAAM;CACpC,UAAU;EACR,aAAa,KAAK;EAClB,IAAI,cAAc,KAAA,GAAW,QAAQ,IAAI,QAAQ;EACjD,IAAI,CAAC,YAAY,iBAAiB,cAAc;OAC3C,SAAc,KAAK,eAAe,aAAa;CACtD;CAEA,OAAO;AACT;AAMA,eAAe,QACb,SACA,KACA,QACA,QAAQ,MACO;CACf,IAAI;EACF,MAAM,GAAG,SAAS,OAAO,SAAS,GAAG;CACvC,SAAS,OAAO;EACd,IAAI,GAAG,WAAW,MAAM,GAAG;EAC3B,IAAI,CAAC,OAAO,MAAM;EAClB,MAAM,GAAG,SAAS,GAAG,KAAK;GAAE,WAAW;GAAM,OAAO;EAAK,CAAC;EAC1D,MAAM,QAAQ,SAAS,KAAK,QAAQ,KAAK;CAC3C;AACF"}

package/dist/lib/cloud-abort.d.ts

@@ -0,0 +1,2 @@
+export declare const abortable: <T>(promise: Promise<T>, signal: AbortSignal) => Promise<T>;
+//# sourceMappingURL=cloud-abort.d.ts.map

package/dist/lib/cloud-abort.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloud-abort.d.ts","sourceRoot":"","sources":["../../src/lib/cloud-abort.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,SAAS,GAAI,CAAC,EACzB,SAAS,OAAO,CAAC,CAAC,CAAC,EACnB,QAAQ,WAAW,KAClB,OAAO,CAAC,CAAC,CAQR,CAAC"}

package/dist/lib/cloud-abort.js

@@ -0,0 +1,13 @@
+//#region src/lib/cloud-abort.ts
+const abortable = (promise, signal) => new Promise((resolve, reject) => {
+	const abort = () => reject(signal.reason);
+	signal.addEventListener("abort", abort, { once: true });
+	if (signal.aborted) abort();
+	promise.then(resolve, reject).finally(() => {
+		signal.removeEventListener("abort", abort);
+	});
+});
+//#endregion
+export { abortable };
+
+//# sourceMappingURL=cloud-abort.js.map

package/dist/lib/cloud-abort.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloud-abort.js","names":[],"sources":["../../src/lib/cloud-abort.ts"],"sourcesContent":["export const abortable = <T>(\n  promise: Promise<T>,\n  signal: AbortSignal,\n): Promise<T> =>\n  new Promise((resolve, reject) => {\n    const abort = () => reject(signal.reason);\n    signal.addEventListener(\"abort\", abort, { once: true });\n    if (signal.aborted) abort();\n    promise.then(resolve, reject).finally(() => {\n      signal.removeEventListener(\"abort\", abort);\n    });\n  });\n"],"mappings":";AAAA,MAAa,aACX,SACA,WAEA,IAAI,SAAS,SAAS,WAAW;CAC/B,MAAM,cAAc,OAAO,OAAO,MAAM;CACxC,OAAO,iBAAiB,SAAS,OAAO,EAAE,MAAM,KAAK,CAAC;CACtD,IAAI,OAAO,SAAS,MAAM;CAC1B,QAAQ,KAAK,SAAS,MAAM,CAAC,CAAC,cAAc;EAC1C,OAAO,oBAAoB,SAAS,KAAK;CAC3C,CAAC;AACH,CAAC"}

package/dist/lib/cloud-auth.d.ts

@@ -0,0 +1,28 @@
+import { type DeviceCredentials } from "aui-auth/device";
+export { validateCloudUrl } from "./cloud-url.js";
+export type CloudAuthConfig = {
+    issuer: string;
+    clientId: string;
+    credentialsFile: string;
+};
+type SavedCredentials = DeviceCredentials & {
+    issuer: string;
+    clientId: string;
+};
+export declare const cloudAuthConfig: () => CloudAuthConfig;
+export declare const readCloudCredentials: (config: CloudAuthConfig, options?: {
+    matchConfig?: boolean;
+}) => Promise<SavedCredentials | null>;
+export declare const saveCloudCredentials: (config: CloudAuthConfig, credentials: DeviceCredentials, signal?: AbortSignal) => Promise<void>;
+export declare const loginToCloud: (config: CloudAuthConfig, options?: {
+    noOpen?: boolean;
+    setupUrl?: string;
+    print?: (text: string) => void;
+}) => Promise<DeviceCredentials>;
+export declare const cloudAccessToken: (config: CloudAuthConfig, options?: {
+    noOpen?: boolean;
+    setupUrl?: string;
+    print?: (text: string) => void;
+}) => Promise<string>;
+export declare const logoutFromCloud: (config: CloudAuthConfig) => Promise<void>;
+//# sourceMappingURL=cloud-auth.d.ts.map

package/dist/lib/cloud-auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloud-auth.d.ts","sourceRoot":"","sources":["../../src/lib/cloud-auth.ts"],"names":[],"mappings":"AAcA,OAAO,EAGL,KAAK,iBAAiB,EACvB,MAAM,iBAAiB,CAAC;AAIzB,OAAO,EAAE,gBAAgB,EAAE,uBAAoB;AAE/C,MAAM,MAAM,eAAe,GAAG;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,eAAe,EAAE,MAAM,CAAC;CACzB,CAAC;AAEF,KAAK,gBAAgB,GAAG,iBAAiB,GAAG;IAC1C,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF,eAAO,MAAM,eAAe,QAAO,eAWjC,CAAC;AAEH,eAAO,MAAM,oBAAoB,GAC/B,QAAQ,eAAe,EACvB,UAAS;IAAE,WAAW,CAAC,EAAE,OAAO,CAAA;CAAO,KACtC,OAAO,CAAC,gBAAgB,GAAG,IAAI,CA8BjC,CAAC;AAEF,eAAO,MAAM,oBAAoB,GAC/B,QAAQ,eAAe,EACvB,aAAa,iBAAiB,EAC9B,SAAS,WAAW,KACnB,OAAO,CAAC,IAAI,CA8Cd,CAAC;AAgBF,eAAO,MAAM,YAAY,GACvB,QAAQ,eAAe,EACvB,UAAS;IACP,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CAC3B,KACL,OAAO,CAAC,iBAAiB,CA0E3B,CAAC;AAEF,eAAO,MAAM,gBAAgB,GAC3B,QAAQ,eAAe,EACvB,UAAS;IACP,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CAC3B,KACL,OAAO,CAAC,MAAM,CAoBhB,CAAC;AAEF,eAAO,MAAM,eAAe,GAC1B,QAAQ,eAAe,KACtB,OAAO,CAAC,IAAI,CASd,CAAC"}

package/dist/lib/cloud-auth.js

@@ -0,0 +1,169 @@
+import { abortable } from "./cloud-abort.js";
+import { validateCloudUrl } from "./cloud-url.js";
+import { renameSync, statSync, unlinkSync } from "node:fs";
+import path from "node:path";
+import os from "node:os";
+import { chmod, link, mkdir, readFile, rename, rm, writeFile } from "node:fs/promises";
+import { spawn } from "node:child_process";
+import { randomUUID } from "node:crypto";
+import { createDeviceLogin, isAccessDenied } from "aui-auth/device";
+//#region src/lib/cloud-auth.ts
+const cloudAuthConfig = () => ({
+	issuer: validateCloudUrl(process.env.ASSISTANT_UI_ACCOUNTS_URL ?? "https://accounts.assistant-ui.com"),
+	clientId: process.env.ASSISTANT_UI_OIDC_CLIENT_ID ?? "assistant-ui-cli",
+	credentialsFile: path.join(process.env.ASSISTANT_UI_CONFIG_DIR ?? path.join(os.homedir(), ".assistant-ui"), "credentials.json")
+});
+const readCloudCredentials = async (config, options = {}) => {
+	let contents;
+	try {
+		contents = await readFile(config.credentialsFile, "utf8");
+	} catch (error) {
+		if (error.code === "ENOENT") return null;
+		throw error;
+	}
+	let saved;
+	try {
+		saved = JSON.parse(contents);
+	} catch {
+		throw new Error("Invalid saved login. Run assistant-ui cloud login again.");
+	}
+	if (!saved || typeof saved !== "object") throw new Error("Invalid saved login. Run assistant-ui cloud login again.");
+	if (options.matchConfig !== false && (saved.issuer !== config.issuer || saved.clientId !== config.clientId)) return null;
+	if (!saved.tokens?.accessToken || !saved.user?.id || typeof saved.tokens.accessTokenExpiresAt !== "number") throw new Error("Invalid saved login. Run assistant-ui cloud login again.");
+	return saved;
+};
+const saveCloudCredentials = async (config, credentials, signal) => {
+	await mkdir(path.dirname(config.credentialsFile), {
+		recursive: true,
+		mode: 448
+	});
+	const temporary = `${config.credentialsFile}.${randomUUID()}.tmp`;
+	const backup = `${temporary}.previous`;
+	let previous = false;
+	let replacement;
+	let renamed = false;
+	try {
+		try {
+			await link(config.credentialsFile, backup);
+			previous = true;
+		} catch (error) {
+			if (error.code !== "ENOENT") throw error;
+		}
+		await writeFile(temporary, `${JSON.stringify({
+			...credentials,
+			issuer: config.issuer,
+			clientId: config.clientId
+		}, null, 2)}\n`, {
+			mode: 384,
+			flag: "wx"
+		});
+		await chmod(temporary, 384);
+		replacement = statSync(temporary);
+		signal?.throwIfAborted();
+		await rename(temporary, config.credentialsFile);
+		renamed = true;
+		signal?.throwIfAborted();
+	} catch (error) {
+		if (renamed && replacement) {
+			let current;
+			try {
+				current = statSync(config.credentialsFile);
+			} catch (failure) {
+				if (failure.code !== "ENOENT") throw failure;
+			}
+			if (current?.dev === replacement.dev && current.ino === replacement.ino) {
+				if (previous) renameSync(backup, config.credentialsFile);
+				else unlinkSync(config.credentialsFile);
+			}
+		}
+		throw error;
+	} finally {
+		await rm(temporary, { force: true });
+		await rm(backup, { force: true });
+	}
+};
+const openBrowser = (url) => {
+	const command = process.platform === "darwin" ? "open" : process.platform === "win32" ? "rundll32" : "xdg-open";
+	const args = process.platform === "win32" ? ["url.dll,FileProtocolHandler", url] : [url];
+	const child = spawn(command, args, {
+		detached: true,
+		stdio: "ignore"
+	});
+	child.on("error", () => {});
+	child.unref();
+};
+const loginToCloud = async (config, options = {}) => {
+	if (options.setupUrl && !["assistant-ui-cli", "assistant-ui-cli-dev"].includes(config.clientId)) throw new Error("Wizard sign-in requires the assistant-ui CLI OAuth client.");
+	const print = options.print ?? console.log;
+	const setup = options.setupUrl ? await (await import("./cloud-setup-login.js")).connectCloudLoginSetup(options.setupUrl) : void 0;
+	const signal = AbortSignal.any([AbortSignal.timeout(6e5), ...setup ? [setup.signal] : []]);
+	const login = createDeviceLogin({
+		issuer: config.issuer,
+		clientId: config.clientId,
+		fetch: (input, init) => {
+			const url = new URL(input instanceof Request ? input.url : String(input));
+			return fetch(input, url.pathname === "/api/auth/device/code" ? {
+				...init,
+				signal: AbortSignal.any([signal, ...init?.signal ? [init.signal] : []])
+			} : init);
+		}
+	});
+	let credentials;
+	let committed = false;
+	try {
+		signal.throwIfAborted();
+		const authorization = await abortable(login.start(), signal);
+		signal.throwIfAborted();
+		const approvalUrl = await setup?.publish(authorization, config.issuer) ?? authorization.verificationUriComplete;
+		print(`Confirm code ${authorization.userCode} at ${approvalUrl}`);
+		if (!options.noOpen && !setup) openBrowser(authorization.verificationUriComplete);
+		credentials = await login.wait(authorization, { signal });
+		signal.throwIfAborted();
+		await saveCloudCredentials(config, credentials, signal);
+		committed = true;
+		await setup?.complete("signed-in").catch(() => {
+			print("Signed in locally. The setup connection could not be updated.");
+		});
+		print(`Signed in as ${credentials.user.email || credentials.user.id}.`);
+		return credentials;
+	} catch (error) {
+		if (credentials && !committed) await login.revoke(credentials).catch(() => {
+			print("The cancelled login could not be revoked. End it from your Accounts Sessions page.");
+		});
+		await setup?.complete(signal.aborted ? "cancelled" : "failed").catch(() => {});
+		throw error;
+	} finally {
+		await setup?.dispose();
+	}
+};
+const cloudAccessToken = async (config, options = {}) => {
+	const saved = await readCloudCredentials(config);
+	if (!saved) return (await loginToCloud(config, options)).tokens.accessToken;
+	const login = createDeviceLogin({
+		issuer: config.issuer,
+		clientId: config.clientId
+	});
+	try {
+		const credentials = await login.ensureFresh(saved);
+		if (credentials !== saved) await saveCloudCredentials(config, credentials);
+		return credentials.tokens.accessToken;
+	} catch (error) {
+		if (isAccessDenied(error)) {
+			await rm(config.credentialsFile, { force: true });
+			throw new Error("Your login expired. Run assistant-ui cloud login again.");
+		}
+		throw error;
+	}
+};
+const logoutFromCloud = async (config) => {
+	const saved = await readCloudCredentials(config, { matchConfig: false });
+	if (saved) await createDeviceLogin({
+		issuer: validateCloudUrl(saved.issuer),
+		clientId: saved.clientId
+	}).revoke(saved);
+	await rm(config.credentialsFile, { force: true });
+};
+//#endregion
+export { cloudAccessToken, cloudAuthConfig, loginToCloud, logoutFromCloud, readCloudCredentials, saveCloudCredentials, validateCloudUrl };
+
+//# sourceMappingURL=cloud-auth.js.map

package/dist/lib/cloud-auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloud-auth.js","names":[],"sources":["../../src/lib/cloud-auth.ts"],"sourcesContent":["import { spawn } from \"node:child_process\";\nimport { randomUUID } from \"node:crypto\";\nimport { renameSync, statSync, unlinkSync } from \"node:fs\";\nimport {\n  chmod,\n  link,\n  mkdir,\n  readFile,\n  rename,\n  rm,\n  writeFile,\n} from \"node:fs/promises\";\nimport os from \"node:os\";\nimport path from \"node:path\";\nimport {\n  createDeviceLogin,\n  isAccessDenied,\n  type DeviceCredentials,\n} from \"aui-auth/device\";\nimport { abortable } from \"./cloud-abort\";\nimport { validateCloudUrl } from \"./cloud-url\";\n\nexport { validateCloudUrl } from \"./cloud-url\";\n\nexport type CloudAuthConfig = {\n  issuer: string;\n  clientId: string;\n  credentialsFile: string;\n};\n\ntype SavedCredentials = DeviceCredentials & {\n  issuer: string;\n  clientId: string;\n};\n\nexport const cloudAuthConfig = (): CloudAuthConfig => ({\n  issuer: validateCloudUrl(\n    process.env.ASSISTANT_UI_ACCOUNTS_URL ??\n      \"https://accounts.assistant-ui.com\",\n  ),\n  clientId: process.env.ASSISTANT_UI_OIDC_CLIENT_ID ?? \"assistant-ui-cli\",\n  credentialsFile: path.join(\n    process.env.ASSISTANT_UI_CONFIG_DIR ??\n      path.join(os.homedir(), \".assistant-ui\"),\n    \"credentials.json\",\n  ),\n});\n\nexport const readCloudCredentials = async (\n  config: CloudAuthConfig,\n  options: { matchConfig?: boolean } = {},\n): Promise<SavedCredentials | null> => {\n  let contents: string;\n  try {\n    contents = await readFile(config.credentialsFile, \"utf8\");\n  } catch (error) {\n    if ((error as NodeJS.ErrnoException).code === \"ENOENT\") return null;\n    throw error;\n  }\n  let saved: SavedCredentials;\n  try {\n    saved = JSON.parse(contents) as SavedCredentials;\n  } catch {\n    throw new Error(\"Invalid saved login. Run assistant-ui cloud login again.\");\n  }\n  if (!saved || typeof saved !== \"object\")\n    throw new Error(\"Invalid saved login. Run assistant-ui cloud login again.\");\n  if (\n    options.matchConfig !== false &&\n    (saved.issuer !== config.issuer || saved.clientId !== config.clientId)\n  ) {\n    return null;\n  }\n  if (\n    !saved.tokens?.accessToken ||\n    !saved.user?.id ||\n    typeof saved.tokens.accessTokenExpiresAt !== \"number\"\n  ) {\n    throw new Error(\"Invalid saved login. Run assistant-ui cloud login again.\");\n  }\n  return saved;\n};\n\nexport const saveCloudCredentials = async (\n  config: CloudAuthConfig,\n  credentials: DeviceCredentials,\n  signal?: AbortSignal,\n): Promise<void> => {\n  await mkdir(path.dirname(config.credentialsFile), {\n    recursive: true,\n    mode: 0o700,\n  });\n  const temporary = `${config.credentialsFile}.${randomUUID()}.tmp`;\n  const backup = `${temporary}.previous`;\n  let previous = false;\n  let replacement: ReturnType<typeof statSync> | undefined;\n  let renamed = false;\n  try {\n    try {\n      await link(config.credentialsFile, backup);\n      previous = true;\n    } catch (error) {\n      if ((error as NodeJS.ErrnoException).code !== \"ENOENT\") throw error;\n    }\n    await writeFile(\n      temporary,\n      `${JSON.stringify({ ...credentials, issuer: config.issuer, clientId: config.clientId }, null, 2)}\\n`,\n      { mode: 0o600, flag: \"wx\" },\n    );\n    await chmod(temporary, 0o600);\n    replacement = statSync(temporary);\n    signal?.throwIfAborted();\n    await rename(temporary, config.credentialsFile);\n    renamed = true;\n    signal?.throwIfAborted();\n  } catch (error) {\n    if (renamed && replacement) {\n      let current: ReturnType<typeof statSync> | undefined;\n      try {\n        current = statSync(config.credentialsFile);\n      } catch (failure) {\n        if ((failure as NodeJS.ErrnoException).code !== \"ENOENT\") throw failure;\n      }\n      if (current?.dev === replacement.dev && current.ino === replacement.ino) {\n        if (previous) renameSync(backup, config.credentialsFile);\n        else unlinkSync(config.credentialsFile);\n      }\n    }\n    throw error;\n  } finally {\n    await rm(temporary, { force: true });\n    await rm(backup, { force: true });\n  }\n};\n\nconst openBrowser = (url: string): void => {\n  const command =\n    process.platform === \"darwin\"\n      ? \"open\"\n      : process.platform === \"win32\"\n        ? \"rundll32\"\n        : \"xdg-open\";\n  const args =\n    process.platform === \"win32\" ? [\"url.dll,FileProtocolHandler\", url] : [url];\n  const child = spawn(command, args, { detached: true, stdio: \"ignore\" });\n  child.on(\"error\", () => {});\n  child.unref();\n};\n\nexport const loginToCloud = async (\n  config: CloudAuthConfig,\n  options: {\n    noOpen?: boolean;\n    setupUrl?: string;\n    print?: (text: string) => void;\n  } = {},\n): Promise<DeviceCredentials> => {\n  if (\n    options.setupUrl &&\n    ![\"assistant-ui-cli\", \"assistant-ui-cli-dev\"].includes(config.clientId)\n  ) {\n    throw new Error(\n      \"Wizard sign-in requires the assistant-ui CLI OAuth client.\",\n    );\n  }\n  const print = options.print ?? console.log;\n  const setup = options.setupUrl\n    ? await (\n        await import(\"./cloud-setup-login\")\n      ).connectCloudLoginSetup(options.setupUrl)\n    : undefined;\n  const signal = AbortSignal.any([\n    AbortSignal.timeout(10 * 60 * 1000),\n    ...(setup ? [setup.signal] : []),\n  ]);\n  const login = createDeviceLogin({\n    issuer: config.issuer,\n    clientId: config.clientId,\n    fetch: (input, init) => {\n      const url = new URL(input instanceof Request ? input.url : String(input));\n      return fetch(\n        input,\n        url.pathname === \"/api/auth/device/code\"\n          ? {\n              ...init,\n              signal: AbortSignal.any([\n                signal,\n                ...(init?.signal ? [init.signal] : []),\n              ]),\n            }\n          : init,\n      );\n    },\n  });\n  let credentials: DeviceCredentials | undefined;\n  let committed = false;\n  try {\n    signal.throwIfAborted();\n    const authorization = await abortable(login.start(), signal);\n    signal.throwIfAborted();\n    const approvalUrl =\n      (await setup?.publish(authorization, config.issuer)) ??\n      authorization.verificationUriComplete;\n    print(`Confirm code ${authorization.userCode} at ${approvalUrl}`);\n    if (!options.noOpen && !setup)\n      openBrowser(authorization.verificationUriComplete);\n    credentials = await login.wait(authorization, { signal });\n    signal.throwIfAborted();\n    await saveCloudCredentials(config, credentials, signal);\n    committed = true;\n    await setup?.complete(\"signed-in\").catch(() => {\n      print(\"Signed in locally. The setup connection could not be updated.\");\n    });\n    print(`Signed in as ${credentials.user.email || credentials.user.id}.`);\n    return credentials;\n  } catch (error) {\n    if (credentials && !committed) {\n      await login.revoke(credentials).catch(() => {\n        print(\n          \"The cancelled login could not be revoked. End it from your Accounts Sessions page.\",\n        );\n      });\n    }\n    await setup\n      ?.complete(signal.aborted ? \"cancelled\" : \"failed\")\n      .catch(() => {});\n    throw error;\n  } finally {\n    await setup?.dispose();\n  }\n};\n\nexport const cloudAccessToken = async (\n  config: CloudAuthConfig,\n  options: {\n    noOpen?: boolean;\n    setupUrl?: string;\n    print?: (text: string) => void;\n  } = {},\n): Promise<string> => {\n  const saved = await readCloudCredentials(config);\n  if (!saved) return (await loginToCloud(config, options)).tokens.accessToken;\n  const login = createDeviceLogin({\n    issuer: config.issuer,\n    clientId: config.clientId,\n  });\n  try {\n    const credentials = await login.ensureFresh(saved);\n    if (credentials !== saved) await saveCloudCredentials(config, credentials);\n    return credentials.tokens.accessToken;\n  } catch (error) {\n    if (isAccessDenied(error)) {\n      await rm(config.credentialsFile, { force: true });\n      throw new Error(\n        \"Your login expired. Run assistant-ui cloud login again.\",\n      );\n    }\n    throw error;\n  }\n};\n\nexport const logoutFromCloud = async (\n  config: CloudAuthConfig,\n): Promise<void> => {\n  const saved = await readCloudCredentials(config, { matchConfig: false });\n  if (saved) {\n    await createDeviceLogin({\n      issuer: validateCloudUrl(saved.issuer),\n      clientId: saved.clientId,\n    }).revoke(saved);\n  }\n  await rm(config.credentialsFile, { force: true });\n};\n"],"mappings":";;;;;;;;;;AAmCA,MAAa,yBAA0C;CACrD,QAAQ,iBACN,QAAQ,IAAI,6BACV,mCACJ;CACA,UAAU,QAAQ,IAAI,+BAA+B;CACrD,iBAAiB,KAAK,KACpB,QAAQ,IAAI,2BACV,KAAK,KAAK,GAAG,QAAQ,GAAG,eAAe,GACzC,kBACF;AACF;AAEA,MAAa,uBAAuB,OAClC,QACA,UAAqC,CAAC,MACD;CACrC,IAAI;CACJ,IAAI;EACF,WAAW,MAAM,SAAS,OAAO,iBAAiB,MAAM;CAC1D,SAAS,OAAO;EACd,IAAK,MAAgC,SAAS,UAAU,OAAO;EAC/D,MAAM;CACR;CACA,IAAI;CACJ,IAAI;EACF,QAAQ,KAAK,MAAM,QAAQ;CAC7B,QAAQ;EACN,MAAM,IAAI,MAAM,0DAA0D;CAC5E;CACA,IAAI,CAAC,SAAS,OAAO,UAAU,UAC7B,MAAM,IAAI,MAAM,0DAA0D;CAC5E,IACE,QAAQ,gBAAgB,UACvB,MAAM,WAAW,OAAO,UAAU,MAAM,aAAa,OAAO,WAE7D,OAAO;CAET,IACE,CAAC,MAAM,QAAQ,eACf,CAAC,MAAM,MAAM,MACb,OAAO,MAAM,OAAO,yBAAyB,UAE7C,MAAM,IAAI,MAAM,0DAA0D;CAE5E,OAAO;AACT;AAEA,MAAa,uBAAuB,OAClC,QACA,aACA,WACkB;CAClB,MAAM,MAAM,KAAK,QAAQ,OAAO,eAAe,GAAG;EAChD,WAAW;EACX,MAAM;CACR,CAAC;CACD,MAAM,YAAY,GAAG,OAAO,gBAAgB,GAAG,WAAW,EAAE;CAC5D,MAAM,SAAS,GAAG,UAAU;CAC5B,IAAI,WAAW;CACf,IAAI;CACJ,IAAI,UAAU;CACd,IAAI;EACF,IAAI;GACF,MAAM,KAAK,OAAO,iBAAiB,MAAM;GACzC,WAAW;EACb,SAAS,OAAO;GACd,IAAK,MAAgC,SAAS,UAAU,MAAM;EAChE;EACA,MAAM,UACJ,WACA,GAAG,KAAK,UAAU;GAAE,GAAG;GAAa,QAAQ,OAAO;GAAQ,UAAU,OAAO;EAAS,GAAG,MAAM,CAAC,EAAE,KACjG;GAAE,MAAM;GAAO,MAAM;EAAK,CAC5B;EACA,MAAM,MAAM,WAAW,GAAK;EAC5B,cAAc,SAAS,SAAS;EAChC,QAAQ,eAAe;EACvB,MAAM,OAAO,WAAW,OAAO,eAAe;EAC9C,UAAU;EACV,QAAQ,eAAe;CACzB,SAAS,OAAO;EACd,IAAI,WAAW,aAAa;GAC1B,IAAI;GACJ,IAAI;IACF,UAAU,SAAS,OAAO,eAAe;GAC3C,SAAS,SAAS;IAChB,IAAK,QAAkC,SAAS,UAAU,MAAM;GAClE;GACA,IAAI,SAAS,QAAQ,YAAY,OAAO,QAAQ,QAAQ,YAAY,KAAK;IACvE,IAAI,UAAU,WAAW,QAAQ,OAAO,eAAe;SAClD,WAAW,OAAO,eAAe;GACxC;EACF;EACA,MAAM;CACR,UAAU;EACR,MAAM,GAAG,WAAW,EAAE,OAAO,KAAK,CAAC;EACnC,MAAM,GAAG,QAAQ,EAAE,OAAO,KAAK,CAAC;CAClC;AACF;AAEA,MAAM,eAAe,QAAsB;CACzC,MAAM,UACJ,QAAQ,aAAa,WACjB,SACA,QAAQ,aAAa,UACnB,aACA;CACR,MAAM,OACJ,QAAQ,aAAa,UAAU,CAAC,+BAA+B,GAAG,IAAI,CAAC,GAAG;CAC5E,MAAM,QAAQ,MAAM,SAAS,MAAM;EAAE,UAAU;EAAM,OAAO;CAAS,CAAC;CACtE,MAAM,GAAG,eAAe,CAAC,CAAC;CAC1B,MAAM,MAAM;AACd;AAEA,MAAa,eAAe,OAC1B,QACA,UAII,CAAC,MAC0B;CAC/B,IACE,QAAQ,YACR,CAAC,CAAC,oBAAoB,sBAAsB,CAAC,CAAC,SAAS,OAAO,QAAQ,GAEtE,MAAM,IAAI,MACR,4DACF;CAEF,MAAM,QAAQ,QAAQ,SAAS,QAAQ;CACvC,MAAM,QAAQ,QAAQ,WAClB,OACE,MAAM,OAAO,0BAAA,CACb,uBAAuB,QAAQ,QAAQ,IACzC,KAAA;CACJ,MAAM,SAAS,YAAY,IAAI,CAC7B,YAAY,QAAQ,GAAc,GAClC,GAAI,QAAQ,CAAC,MAAM,MAAM,IAAI,CAAC,CAChC,CAAC;CACD,MAAM,QAAQ,kBAAkB;EAC9B,QAAQ,OAAO;EACf,UAAU,OAAO;EACjB,QAAQ,OAAO,SAAS;GACtB,MAAM,MAAM,IAAI,IAAI,iBAAiB,UAAU,MAAM,MAAM,OAAO,KAAK,CAAC;GACxE,OAAO,MACL,OACA,IAAI,aAAa,0BACb;IACE,GAAG;IACH,QAAQ,YAAY,IAAI,CACtB,QACA,GAAI,MAAM,SAAS,CAAC,KAAK,MAAM,IAAI,CAAC,CACtC,CAAC;GACH,IACA,IACN;EACF;CACF,CAAC;CACD,IAAI;CACJ,IAAI,YAAY;CAChB,IAAI;EACF,OAAO,eAAe;EACtB,MAAM,gBAAgB,MAAM,UAAU,MAAM,MAAM,GAAG,MAAM;EAC3D,OAAO,eAAe;EACtB,MAAM,cACH,MAAM,OAAO,QAAQ,eAAe,OAAO,MAAM,KAClD,cAAc;EAChB,MAAM,gBAAgB,cAAc,SAAS,MAAM,aAAa;EAChE,IAAI,CAAC,QAAQ,UAAU,CAAC,OACtB,YAAY,cAAc,uBAAuB;EACnD,cAAc,MAAM,MAAM,KAAK,eAAe,EAAE,OAAO,CAAC;EACxD,OAAO,eAAe;EACtB,MAAM,qBAAqB,QAAQ,aAAa,MAAM;EACtD,YAAY;EACZ,MAAM,OAAO,SAAS,WAAW,CAAC,CAAC,YAAY;GAC7C,MAAM,+DAA+D;EACvE,CAAC;EACD,MAAM,gBAAgB,YAAY,KAAK,SAAS,YAAY,KAAK,GAAG,EAAE;EACtE,OAAO;CACT,SAAS,OAAO;EACd,IAAI,eAAe,CAAC,WAClB,MAAM,MAAM,OAAO,WAAW,CAAC,CAAC,YAAY;GAC1C,MACE,oFACF;EACF,CAAC;EAEH,MAAM,OACF,SAAS,OAAO,UAAU,cAAc,QAAQ,CAAC,CAClD,YAAY,CAAC,CAAC;EACjB,MAAM;CACR,UAAU;EACR,MAAM,OAAO,QAAQ;CACvB;AACF;AAEA,MAAa,mBAAmB,OAC9B,QACA,UAII,CAAC,MACe;CACpB,MAAM,QAAQ,MAAM,qBAAqB,MAAM;CAC/C,IAAI,CAAC,OAAO,QAAQ,MAAM,aAAa,QAAQ,OAAO,EAAA,CAAG,OAAO;CAChE,MAAM,QAAQ,kBAAkB;EAC9B,QAAQ,OAAO;EACf,UAAU,OAAO;CACnB,CAAC;CACD,IAAI;EACF,MAAM,cAAc,MAAM,MAAM,YAAY,KAAK;EACjD,IAAI,gBAAgB,OAAO,MAAM,qBAAqB,QAAQ,WAAW;EACzE,OAAO,YAAY,OAAO;CAC5B,SAAS,OAAO;EACd,IAAI,eAAe,KAAK,GAAG;GACzB,MAAM,GAAG,OAAO,iBAAiB,EAAE,OAAO,KAAK,CAAC;GAChD,MAAM,IAAI,MACR,yDACF;EACF;EACA,MAAM;CACR;AACF;AAEA,MAAa,kBAAkB,OAC7B,WACkB;CAClB,MAAM,QAAQ,MAAM,qBAAqB,QAAQ,EAAE,aAAa,MAAM,CAAC;CACvE,IAAI,OACF,MAAM,kBAAkB;EACtB,QAAQ,iBAAiB,MAAM,MAAM;EACrC,UAAU,MAAM;CAClB,CAAC,CAAC,CAAC,OAAO,KAAK;CAEjB,MAAM,GAAG,OAAO,iBAAiB,EAAE,OAAO,KAAK,CAAC;AAClD"}

package/dist/lib/cloud-config.d.ts

@@ -0,0 +1,21 @@
+export type CloudProjectConfig = {
+    organizationId: string;
+    organizationSlug: string;
+    projectId: string;
+    projectSlug: string;
+    harnessId: string;
+    harnessOrigin: string;
+    apiOrigin: string;
+    workspaceId: string;
+    backendUrl: string;
+};
+export declare const writeCloudFile: (file: string, contents: string, options?: {
+    exclusive?: boolean;
+    mode?: number;
+}) => Promise<void>;
+export declare const cloudProjectConfigPath: (directory: string) => string;
+export declare const readCloudProjectConfig: (directory: string) => Promise<CloudProjectConfig | null>;
+export declare const readOptionalFile: (file: string) => Promise<string>;
+export declare const mergeCloudEnvironment: (contents: string, values: Record<string, string>) => string;
+export declare const writeCloudProjectConfig: (directory: string, config: CloudProjectConfig, apiKey: string) => Promise<void>;
+//# sourceMappingURL=cloud-config.d.ts.map

package/dist/lib/cloud-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloud-config.d.ts","sourceRoot":"","sources":["../../src/lib/cloud-config.ts"],"names":[],"mappings":"AAYA,MAAM,MAAM,kBAAkB,GAAG;IAC/B,cAAc,EAAE,MAAM,CAAC;IACvB,gBAAgB,EAAE,MAAM,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,eAAO,MAAM,cAAc,GACzB,MAAM,MAAM,EACZ,UAAU,MAAM,EAChB,UAAS;IAAE,SAAS,CAAC,EAAE,OAAO,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAO,KACnD,OAAO,CAAC,IAAI,CAad,CAAC;AAEF,eAAO,MAAM,sBAAsB,GAAI,WAAW,MAAM,KAAG,MACN,CAAC;AAEtD,eAAO,MAAM,sBAAsB,GACjC,WAAW,MAAM,KAChB,OAAO,CAAC,kBAAkB,GAAG,IAAI,CASnC,CAAC;AAEF,eAAO,MAAM,gBAAgB,GAAU,MAAM,MAAM,KAAG,OAAO,CAAC,MAAM,CAOnE,CAAC;AAEF,eAAO,MAAM,qBAAqB,GAChC,UAAU,MAAM,EAChB,QAAQ,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KAC7B,MA6BF,CAAC;AAEF,eAAO,MAAM,uBAAuB,GAClC,WAAW,MAAM,EACjB,QAAQ,kBAAkB,EAC1B,QAAQ,MAAM,KACb,OAAO,CAAC,IAAI,CA+Bd,CAAC"}

package/dist/lib/cloud-config.js

@@ -0,0 +1,76 @@
+import path from "node:path";
+import { link, mkdir, readFile, rename, rm, stat, writeFile } from "node:fs/promises";
+import { randomUUID } from "node:crypto";
+//#region src/lib/cloud-config.ts
+const writeCloudFile = async (file, contents, options = {}) => {
+	await mkdir(path.dirname(file), { recursive: true });
+	const temporary = `${file}.${randomUUID()}.tmp`;
+	try {
+		await writeFile(temporary, contents, {
+			flag: "wx",
+			mode: options.mode ?? 384
+		});
+		if (options.exclusive) await link(temporary, file);
+		else await rename(temporary, file);
+	} finally {
+		await rm(temporary, { force: true });
+	}
+};
+const cloudProjectConfigPath = (directory) => path.join(directory, ".assistant-ui", "cloud.json");
+const readCloudProjectConfig = async (directory) => {
+	try {
+		return JSON.parse(await readFile(cloudProjectConfigPath(directory), "utf8"));
+	} catch (error) {
+		if (error.code === "ENOENT") return null;
+		throw error;
+	}
+};
+const readOptionalFile = async (file) => {
+	try {
+		return await readFile(file, "utf8");
+	} catch (error) {
+		if (error.code === "ENOENT") return "";
+		throw error;
+	}
+};
+const mergeCloudEnvironment = (contents, values) => {
+	const lines = contents.split(/\r?\n/);
+	const pending = new Map(Object.entries(values));
+	for (const line of lines) {
+		const match = line.match(/^\s*(?:export\s+)?([A-Z_][A-Z0-9_]*)\s*=\s*(.*)$/);
+		if (!match) continue;
+		const key = match[1];
+		const expected = values[key];
+		if (expected === void 0) continue;
+		const existing = match[2].trim();
+		const quoted = JSON.stringify(expected);
+		if (existing !== expected && existing !== quoted && existing !== `'${expected}'`) throw new Error(`${key} is already configured in .env.local. Keep your existing configuration or use a new directory.`);
+		pending.delete(key);
+	}
+	if (pending.size === 0) return contents;
+	const additions = [...pending].map(([key, value]) => `${key}=${JSON.stringify(value)}`);
+	return `${contents}${contents && !contents.endsWith("\n") ? "\n" : ""}${additions.join("\n")}\n`;
+};
+const writeCloudProjectConfig = async (directory, config, apiKey) => {
+	const envFile = path.join(directory, ".env.local");
+	const contents = await readOptionalFile(envFile);
+	const environment = mergeCloudEnvironment(contents, {
+		ASSISTANT_API_KEY: apiKey,
+		NEXT_PUBLIC_ASSISTANT_BASE_URL: config.apiOrigin,
+		NEXT_PUBLIC_ASSISTANT_HARNESS_URL: config.harnessOrigin,
+		NEXT_PUBLIC_ASSISTANT_WORKSPACE_ID: config.workspaceId
+	});
+	const gitignoreFile = path.join(directory, ".gitignore");
+	const gitignore = await readOptionalFile(gitignoreFile);
+	const ignored = gitignore.split(/\r?\n/).map((line) => line.trim());
+	if (!ignored.includes(".env.local") && !ignored.includes(".env*.local")) await writeCloudFile(gitignoreFile, `${gitignore}${gitignore && !gitignore.endsWith("\n") ? "\n" : ""}.env.local\n`, { mode: await stat(gitignoreFile).then((info) => info.mode & 511).catch((error) => {
+		if (error.code === "ENOENT") return 420;
+		throw error;
+	}) });
+	await writeCloudFile(envFile, environment);
+	await writeCloudFile(cloudProjectConfigPath(directory), `${JSON.stringify(config, null, 2)}\n`);
+};
+//#endregion
+export { cloudProjectConfigPath, mergeCloudEnvironment, readCloudProjectConfig, readOptionalFile, writeCloudFile, writeCloudProjectConfig };
+
+//# sourceMappingURL=cloud-config.js.map

package/dist/lib/cloud-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloud-config.js","names":[],"sources":["../../src/lib/cloud-config.ts"],"sourcesContent":["import {\n  mkdir,\n  readFile,\n  writeFile,\n  link,\n  rename,\n  rm,\n  stat,\n} from \"node:fs/promises\";\nimport { randomUUID } from \"node:crypto\";\nimport path from \"node:path\";\n\nexport type CloudProjectConfig = {\n  organizationId: string;\n  organizationSlug: string;\n  projectId: string;\n  projectSlug: string;\n  harnessId: string;\n  harnessOrigin: string;\n  apiOrigin: string;\n  workspaceId: string;\n  backendUrl: string;\n};\n\nexport const writeCloudFile = async (\n  file: string,\n  contents: string,\n  options: { exclusive?: boolean; mode?: number } = {},\n): Promise<void> => {\n  await mkdir(path.dirname(file), { recursive: true });\n  const temporary = `${file}.${randomUUID()}.tmp`;\n  try {\n    await writeFile(temporary, contents, {\n      flag: \"wx\",\n      mode: options.mode ?? 0o600,\n    });\n    if (options.exclusive) await link(temporary, file);\n    else await rename(temporary, file);\n  } finally {\n    await rm(temporary, { force: true });\n  }\n};\n\nexport const cloudProjectConfigPath = (directory: string): string =>\n  path.join(directory, \".assistant-ui\", \"cloud.json\");\n\nexport const readCloudProjectConfig = async (\n  directory: string,\n): Promise<CloudProjectConfig | null> => {\n  try {\n    return JSON.parse(\n      await readFile(cloudProjectConfigPath(directory), \"utf8\"),\n    ) as CloudProjectConfig;\n  } catch (error) {\n    if ((error as NodeJS.ErrnoException).code === \"ENOENT\") return null;\n    throw error;\n  }\n};\n\nexport const readOptionalFile = async (file: string): Promise<string> => {\n  try {\n    return await readFile(file, \"utf8\");\n  } catch (error) {\n    if ((error as NodeJS.ErrnoException).code === \"ENOENT\") return \"\";\n    throw error;\n  }\n};\n\nexport const mergeCloudEnvironment = (\n  contents: string,\n  values: Record<string, string>,\n): string => {\n  const lines = contents.split(/\\r?\\n/);\n  const pending = new Map(Object.entries(values));\n  for (const line of lines) {\n    const match = line.match(\n      /^\\s*(?:export\\s+)?([A-Z_][A-Z0-9_]*)\\s*=\\s*(.*)$/,\n    );\n    if (!match) continue;\n    const key = match[1]!;\n    const expected = values[key];\n    if (expected === undefined) continue;\n    const existing = match[2]!.trim();\n    const quoted = JSON.stringify(expected);\n    if (\n      existing !== expected &&\n      existing !== quoted &&\n      existing !== `'${expected}'`\n    ) {\n      throw new Error(\n        `${key} is already configured in .env.local. Keep your existing configuration or use a new directory.`,\n      );\n    }\n    pending.delete(key);\n  }\n  if (pending.size === 0) return contents;\n  const additions = [...pending].map(\n    ([key, value]) => `${key}=${JSON.stringify(value)}`,\n  );\n  return `${contents}${contents && !contents.endsWith(\"\\n\") ? \"\\n\" : \"\"}${additions.join(\"\\n\")}\\n`;\n};\n\nexport const writeCloudProjectConfig = async (\n  directory: string,\n  config: CloudProjectConfig,\n  apiKey: string,\n): Promise<void> => {\n  const envFile = path.join(directory, \".env.local\");\n  const contents = await readOptionalFile(envFile);\n  const environment = mergeCloudEnvironment(contents, {\n    ASSISTANT_API_KEY: apiKey,\n    NEXT_PUBLIC_ASSISTANT_BASE_URL: config.apiOrigin,\n    NEXT_PUBLIC_ASSISTANT_HARNESS_URL: config.harnessOrigin,\n    NEXT_PUBLIC_ASSISTANT_WORKSPACE_ID: config.workspaceId,\n  });\n  const gitignoreFile = path.join(directory, \".gitignore\");\n  const gitignore = await readOptionalFile(gitignoreFile);\n  const ignored = gitignore.split(/\\r?\\n/).map((line) => line.trim());\n  if (!ignored.includes(\".env.local\") && !ignored.includes(\".env*.local\")) {\n    await writeCloudFile(\n      gitignoreFile,\n      `${gitignore}${gitignore && !gitignore.endsWith(\"\\n\") ? \"\\n\" : \"\"}.env.local\\n`,\n      {\n        mode: await stat(gitignoreFile)\n          .then((info) => info.mode & 0o777)\n          .catch((error: NodeJS.ErrnoException) => {\n            if (error.code === \"ENOENT\") return 0o644;\n            throw error;\n          }),\n      },\n    );\n  }\n  await writeCloudFile(envFile, environment);\n  await writeCloudFile(\n    cloudProjectConfigPath(directory),\n    `${JSON.stringify(config, null, 2)}\\n`,\n  );\n};\n"],"mappings":";;;;AAwBA,MAAa,iBAAiB,OAC5B,MACA,UACA,UAAkD,CAAC,MACjC;CAClB,MAAM,MAAM,KAAK,QAAQ,IAAI,GAAG,EAAE,WAAW,KAAK,CAAC;CACnD,MAAM,YAAY,GAAG,KAAK,GAAG,WAAW,EAAE;CAC1C,IAAI;EACF,MAAM,UAAU,WAAW,UAAU;GACnC,MAAM;GACN,MAAM,QAAQ,QAAQ;EACxB,CAAC;EACD,IAAI,QAAQ,WAAW,MAAM,KAAK,WAAW,IAAI;OAC5C,MAAM,OAAO,WAAW,IAAI;CACnC,UAAU;EACR,MAAM,GAAG,WAAW,EAAE,OAAO,KAAK,CAAC;CACrC;AACF;AAEA,MAAa,0BAA0B,cACrC,KAAK,KAAK,WAAW,iBAAiB,YAAY;AAEpD,MAAa,yBAAyB,OACpC,cACuC;CACvC,IAAI;EACF,OAAO,KAAK,MACV,MAAM,SAAS,uBAAuB,SAAS,GAAG,MAAM,CAC1D;CACF,SAAS,OAAO;EACd,IAAK,MAAgC,SAAS,UAAU,OAAO;EAC/D,MAAM;CACR;AACF;AAEA,MAAa,mBAAmB,OAAO,SAAkC;CACvE,IAAI;EACF,OAAO,MAAM,SAAS,MAAM,MAAM;CACpC,SAAS,OAAO;EACd,IAAK,MAAgC,SAAS,UAAU,OAAO;EAC/D,MAAM;CACR;AACF;AAEA,MAAa,yBACX,UACA,WACW;CACX,MAAM,QAAQ,SAAS,MAAM,OAAO;CACpC,MAAM,UAAU,IAAI,IAAI,OAAO,QAAQ,MAAM,CAAC;CAC9C,KAAK,MAAM,QAAQ,OAAO;EACxB,MAAM,QAAQ,KAAK,MACjB,kDACF;EACA,IAAI,CAAC,OAAO;EACZ,MAAM,MAAM,MAAM;EAClB,MAAM,WAAW,OAAO;EACxB,IAAI,aAAa,KAAA,GAAW;EAC5B,MAAM,WAAW,MAAM,EAAE,CAAE,KAAK;EAChC,MAAM,SAAS,KAAK,UAAU,QAAQ;EACtC,IACE,aAAa,YACb,aAAa,UACb,aAAa,IAAI,SAAS,IAE1B,MAAM,IAAI,MACR,GAAG,IAAI,+FACT;EAEF,QAAQ,OAAO,GAAG;CACpB;CACA,IAAI,QAAQ,SAAS,GAAG,OAAO;CAC/B,MAAM,YAAY,CAAC,GAAG,OAAO,CAAC,CAAC,KAC5B,CAAC,KAAK,WAAW,GAAG,IAAI,GAAG,KAAK,UAAU,KAAK,GAClD;CACA,OAAO,GAAG,WAAW,YAAY,CAAC,SAAS,SAAS,IAAI,IAAI,OAAO,KAAK,UAAU,KAAK,IAAI,EAAE;AAC/F;AAEA,MAAa,0BAA0B,OACrC,WACA,QACA,WACkB;CAClB,MAAM,UAAU,KAAK,KAAK,WAAW,YAAY;CACjD,MAAM,WAAW,MAAM,iBAAiB,OAAO;CAC/C,MAAM,cAAc,sBAAsB,UAAU;EAClD,mBAAmB;EACnB,gCAAgC,OAAO;EACvC,mCAAmC,OAAO;EAC1C,oCAAoC,OAAO;CAC7C,CAAC;CACD,MAAM,gBAAgB,KAAK,KAAK,WAAW,YAAY;CACvD,MAAM,YAAY,MAAM,iBAAiB,aAAa;CACtD,MAAM,UAAU,UAAU,MAAM,OAAO,CAAC,CAAC,KAAK,SAAS,KAAK,KAAK,CAAC;CAClE,IAAI,CAAC,QAAQ,SAAS,YAAY,KAAK,CAAC,QAAQ,SAAS,aAAa,GACpE,MAAM,eACJ,eACA,GAAG,YAAY,aAAa,CAAC,UAAU,SAAS,IAAI,IAAI,OAAO,GAAG,eAClE,EACE,MAAM,MAAM,KAAK,aAAa,CAAC,CAC5B,MAAM,SAAS,KAAK,OAAO,GAAK,CAAC,CACjC,OAAO,UAAiC;EACvC,IAAI,MAAM,SAAS,UAAU,OAAO;EACpC,MAAM;CACR,CAAC,EACL,CACF;CAEF,MAAM,eAAe,SAAS,WAAW;CACzC,MAAM,eACJ,uBAAuB,SAAS,GAChC,GAAG,KAAK,UAAU,QAAQ,MAAM,CAAC,EAAE,GACrC;AACF"}

package/dist/lib/cloud-provision.d.ts

@@ -0,0 +1,20 @@
+export type CloudProvisionRequest = {
+    org_id: string;
+    project_id: string;
+    harness_name: string;
+    backend_urls: string[];
+    allow_localhost: boolean;
+    idempotency_key: string;
+    access_code?: string;
+};
+export type CloudProvisionResult = {
+    project_id: string;
+    workspace_id: string;
+    harness_id: string;
+    harness_origin: string;
+    api_key: string;
+    api_origin: string;
+};
+export declare const resolveProvisionRequest: (directory: string, input: Omit<CloudProvisionRequest, "idempotency_key" | "access_code">, accessCode?: string) => Promise<CloudProvisionRequest>;
+export declare const provisionCloudHarness: (managementUrl: string, accessToken: string, request: CloudProvisionRequest) => Promise<CloudProvisionResult>;
+//# sourceMappingURL=cloud-provision.d.ts.map

package/dist/lib/cloud-provision.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloud-provision.d.ts","sourceRoot":"","sources":["../../src/lib/cloud-provision.ts"],"names":[],"mappings":"AAKA,MAAM,MAAM,qBAAqB,GAAG;IAClC,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,eAAe,EAAE,OAAO,CAAC;IACzB,eAAe,EAAE,MAAM,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IACjC,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,eAAO,MAAM,uBAAuB,GAClC,WAAW,MAAM,EACjB,OAAO,IAAI,CAAC,qBAAqB,EAAE,iBAAiB,GAAG,aAAa,CAAC,EACrE,aAAa,MAAM,KAClB,OAAO,CAAC,qBAAqB,CAmB/B,CAAC;AAEF,eAAO,MAAM,qBAAqB,GAChC,eAAe,MAAM,EACrB,aAAa,MAAM,EACnB,SAAS,qBAAqB,KAC7B,OAAO,CAAC,oBAAoB,CAuC9B,CAAC"}

package/dist/lib/cloud-provision.js

@@ -0,0 +1,55 @@
+import { validateCloudUrl } from "./cloud-url.js";
+import { readOptionalFile, writeCloudFile } from "./cloud-config.js";
+import path from "node:path";
+import { randomUUID } from "node:crypto";
+//#region src/lib/cloud-provision.ts
+const resolveProvisionRequest = async (directory, input, accessCode) => {
+	const file = path.join(directory, ".assistant-ui", "provision.json");
+	const previous = await readOptionalFile(file);
+	let request;
+	if (previous) {
+		request = JSON.parse(previous);
+		const { idempotency_key: _key, ...savedInput } = request;
+		if (JSON.stringify(savedInput) !== JSON.stringify(input)) throw new Error("This directory has a pending setup for another project or backend. Resume that setup or use a new directory.");
+	} else {
+		request = {
+			...input,
+			idempotency_key: randomUUID()
+		};
+		await writeCloudFile(file, `${JSON.stringify(request, null, 2)}\n`, { exclusive: true });
+	}
+	return {
+		...request,
+		...accessCode ? { access_code: accessCode } : {}
+	};
+};
+const provisionCloudHarness = async (managementUrl, accessToken, request) => {
+	const response = await fetch(`${validateCloudUrl(managementUrl)}/api/cli/provision`, {
+		method: "POST",
+		headers: {
+			Authorization: `Bearer ${accessToken}`,
+			"Content-Type": "application/json"
+		},
+		body: JSON.stringify(request),
+		signal: AbortSignal.timeout(3e4),
+		redirect: "error"
+	});
+	if (!response.ok) {
+		const body = await response.json().catch(() => null);
+		const detail = body?.message ?? body?.error ?? response.statusText;
+		throw new Error(`Cloud setup failed (${response.status}): ${detail}`);
+	}
+	const result = await response.json();
+	if (!result || [
+		result.api_key,
+		result.harness_id,
+		result.workspace_id,
+		result.harness_origin,
+		result.api_origin
+	].some((value) => typeof value !== "string" || value.length === 0) || result.project_id !== request.project_id) throw new Error("Cloud returned an incomplete setup response. Rerun the same command to resume safely.");
+	return result;
+};
+//#endregion
+export { provisionCloudHarness, resolveProvisionRequest };
+
+//# sourceMappingURL=cloud-provision.js.map

package/dist/lib/cloud-provision.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloud-provision.js","names":[],"sources":["../../src/lib/cloud-provision.ts"],"sourcesContent":["import { randomUUID } from \"node:crypto\";\nimport path from \"node:path\";\nimport { readOptionalFile, writeCloudFile } from \"./cloud-config\";\nimport { validateCloudUrl } from \"./cloud-auth\";\n\nexport type CloudProvisionRequest = {\n  org_id: string;\n  project_id: string;\n  harness_name: string;\n  backend_urls: string[];\n  allow_localhost: boolean;\n  idempotency_key: string;\n  access_code?: string;\n};\n\nexport type CloudProvisionResult = {\n  project_id: string;\n  workspace_id: string;\n  harness_id: string;\n  harness_origin: string;\n  api_key: string;\n  api_origin: string;\n};\n\nexport const resolveProvisionRequest = async (\n  directory: string,\n  input: Omit<CloudProvisionRequest, \"idempotency_key\" | \"access_code\">,\n  accessCode?: string,\n): Promise<CloudProvisionRequest> => {\n  const file = path.join(directory, \".assistant-ui\", \"provision.json\");\n  const previous = await readOptionalFile(file);\n  let request: CloudProvisionRequest;\n  if (previous) {\n    request = JSON.parse(previous) as CloudProvisionRequest;\n    const { idempotency_key: _key, ...savedInput } = request;\n    if (JSON.stringify(savedInput) !== JSON.stringify(input)) {\n      throw new Error(\n        \"This directory has a pending setup for another project or backend. Resume that setup or use a new directory.\",\n      );\n    }\n  } else {\n    request = { ...input, idempotency_key: randomUUID() };\n    await writeCloudFile(file, `${JSON.stringify(request, null, 2)}\\n`, {\n      exclusive: true,\n    });\n  }\n  return { ...request, ...(accessCode ? { access_code: accessCode } : {}) };\n};\n\nexport const provisionCloudHarness = async (\n  managementUrl: string,\n  accessToken: string,\n  request: CloudProvisionRequest,\n): Promise<CloudProvisionResult> => {\n  const response = await fetch(\n    `${validateCloudUrl(managementUrl)}/api/cli/provision`,\n    {\n      method: \"POST\",\n      headers: {\n        Authorization: `Bearer ${accessToken}`,\n        \"Content-Type\": \"application/json\",\n      },\n      body: JSON.stringify(request),\n      signal: AbortSignal.timeout(30_000),\n      redirect: \"error\",\n    },\n  );\n  if (!response.ok) {\n    const body = (await response.json().catch(() => null)) as {\n      error?: string;\n      message?: string;\n    } | null;\n    const detail = body?.message ?? body?.error ?? response.statusText;\n    throw new Error(`Cloud setup failed (${response.status}): ${detail}`);\n  }\n  const result = (await response.json()) as CloudProvisionResult;\n  if (\n    !result ||\n    [\n      result.api_key,\n      result.harness_id,\n      result.workspace_id,\n      result.harness_origin,\n      result.api_origin,\n    ].some((value) => typeof value !== \"string\" || value.length === 0) ||\n    result.project_id !== request.project_id\n  ) {\n    throw new Error(\n      \"Cloud returned an incomplete setup response. Rerun the same command to resume safely.\",\n    );\n  }\n  return result;\n};\n"],"mappings":";;;;;AAwBA,MAAa,0BAA0B,OACrC,WACA,OACA,eACmC;CACnC,MAAM,OAAO,KAAK,KAAK,WAAW,iBAAiB,gBAAgB;CACnE,MAAM,WAAW,MAAM,iBAAiB,IAAI;CAC5C,IAAI;CACJ,IAAI,UAAU;EACZ,UAAU,KAAK,MAAM,QAAQ;EAC7B,MAAM,EAAE,iBAAiB,MAAM,GAAG,eAAe;EACjD,IAAI,KAAK,UAAU,UAAU,MAAM,KAAK,UAAU,KAAK,GACrD,MAAM,IAAI,MACR,8GACF;CAEJ,OAAO;EACL,UAAU;GAAE,GAAG;GAAO,iBAAiB,WAAW;EAAE;EACpD,MAAM,eAAe,MAAM,GAAG,KAAK,UAAU,SAAS,MAAM,CAAC,EAAE,KAAK,EAClE,WAAW,KACb,CAAC;CACH;CACA,OAAO;EAAE,GAAG;EAAS,GAAI,aAAa,EAAE,aAAa,WAAW,IAAI,CAAC;CAAG;AAC1E;AAEA,MAAa,wBAAwB,OACnC,eACA,aACA,YACkC;CAClC,MAAM,WAAW,MAAM,MACrB,GAAG,iBAAiB,aAAa,EAAE,qBACnC;EACE,QAAQ;EACR,SAAS;GACP,eAAe,UAAU;GACzB,gBAAgB;EAClB;EACA,MAAM,KAAK,UAAU,OAAO;EAC5B,QAAQ,YAAY,QAAQ,GAAM;EAClC,UAAU;CACZ,CACF;CACA,IAAI,CAAC,SAAS,IAAI;EAChB,MAAM,OAAQ,MAAM,SAAS,KAAK,CAAC,CAAC,YAAY,IAAI;EAIpD,MAAM,SAAS,MAAM,WAAW,MAAM,SAAS,SAAS;EACxD,MAAM,IAAI,MAAM,uBAAuB,SAAS,OAAO,KAAK,QAAQ;CACtE;CACA,MAAM,SAAU,MAAM,SAAS,KAAK;CACpC,IACE,CAAC,UACD;EACE,OAAO;EACP,OAAO;EACP,OAAO;EACP,OAAO;EACP,OAAO;CACT,CAAC,CAAC,MAAM,UAAU,OAAO,UAAU,YAAY,MAAM,WAAW,CAAC,KACjE,OAAO,eAAe,QAAQ,YAE9B,MAAM,IAAI,MACR,uFACF;CAEF,OAAO;AACT"}

package/dist/lib/cloud-setup-login.d.ts

@@ -0,0 +1,9 @@
+import type { DeviceAuthorization } from "aui-auth/device";
+export declare const setupLoginUrl: (authorization: DeviceAuthorization, issuer: string, attempt?: string) => string;
+export declare const connectCloudLoginSetup: (url: string) => Promise<{
+    signal: AbortSignal;
+    publish(authorization: DeviceAuthorization, issuer: string): Promise<string>;
+    complete(result: "signed-in" | "cancelled" | "failed"): Promise<void>;
+    dispose: () => Promise<void>;
+}>;
+//# sourceMappingURL=cloud-setup-login.d.ts.map

package/dist/lib/cloud-setup-login.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloud-setup-login.d.ts","sourceRoot":"","sources":["../../src/lib/cloud-setup-login.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAqC3D,eAAO,MAAM,aAAa,GACxB,eAAe,mBAAmB,EAClC,QAAQ,MAAM,EACd,UAAS,MAAqB,WA8B/B,CAAC;AAEF,eAAO,MAAM,sBAAsB,GAAU,KAAK,MAAM;;2BAgIvB,mBAAmB,UAAU,MAAM;qBAgCzC,WAAW,GAAG,WAAW,GAAG,QAAQ;;EAM9D,CAAC"}