aui-agent-builder 0.4.31 → 0.4.33

package/dist/services/vault.service.d.ts

@@ -0,0 +1,58 @@
+/**
+ * Vault secrets service — manage user-owned secrets from the CLI.
+ *
+ * The CLI is name + scope based and friendly; the apollo-api proxy
+ * (`/v1/vault/secrets`) and agent-settings own storage + encryption.
+ * apollo's get/delete are by `secret_id`, so name-based `get`/`rm` resolve the
+ * id via the list endpoint first.
+ *
+ * Secret values only ever travel in the create body. Reads return a masked
+ * `preview` (never the value), so nothing here needs to mask output.
+ */
+import type { UserSession } from "../config/index.js";
+import type { ApolloClient, ApolloVaultSecretRead, VaultRecordScope } from "../api-client/apollo-client.js";
+import { type ScopeIds } from "./integration.service.js";
+import type { VaultScopeLevel } from "../types/vault.js";
+export interface VaultContext {
+    session: UserSession;
+    scope: ScopeIds;
+    client: ApolloClient;
+}
+export interface VaultScopeOverrides {
+    organizationId?: string;
+    accountId?: string;
+    networkId?: string;
+    /** Agent project dir whose `.auirc` supplies scope (defaults to the cwd's). */
+    path?: string;
+}
+/** Resolve auth + scope (from flags / .auirc / session) and build the apollo client. */
+export declare function resolveVaultContext(overrides?: VaultScopeOverrides): Promise<VaultContext>;
+/** Validate a secret reference name (used as `{{vault.NAME}}`). */
+export declare function validateSecretName(name: string): void;
+/** Normalize a `--scope` value to a level, defaulting to `agent`. */
+export declare function parseScopeLevel(value?: string): VaultScopeLevel;
+/**
+ * Build the RecordScope to send to agent-settings. `agent` == NETWORK scope
+ * (the agent is a network). Extra ids are harmless — agent-settings keys the
+ * secret by the scope `type` + its matching id.
+ */
+export declare function buildVaultScope(level: VaultScopeLevel, scope: ScopeIds): VaultRecordScope;
+export interface SetSecretParams {
+    name: string;
+    value: string;
+    level: VaultScopeLevel;
+    description?: string;
+}
+/** Create or rotate a secret (server-side upsert by name + scope). */
+export declare function setSecret(ctx: VaultContext, params: SetSecretParams): Promise<ApolloVaultSecretRead>;
+/** List secrets visible in the current scope chain (metadata + masked preview). */
+export declare function listSecrets(ctx: VaultContext): Promise<ApolloVaultSecretRead[]>;
+/** Find a single secret by name within the current scope chain. */
+export declare function getSecretByName(ctx: VaultContext, name: string): Promise<ApolloVaultSecretRead>;
+/** Delete a secret by name (resolves the id via list, then DELETE). */
+export declare function removeSecretByName(ctx: VaultContext, name: string): Promise<{
+    name: string;
+    id: string;
+    message: string;
+}>;
+//# sourceMappingURL=vault.service.d.ts.map

package/dist/services/vault.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"vault.service.d.ts","sourceRoot":"","sources":["../../src/services/vault.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,KAAK,EACV,YAAY,EAEZ,qBAAqB,EACrB,gBAAgB,EACjB,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAIL,KAAK,QAAQ,EACd,MAAM,0BAA0B,CAAC;AAGlC,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAKzD,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,WAAW,CAAC;IACrB,KAAK,EAAE,QAAQ,CAAC;IAChB,MAAM,EAAE,YAAY,CAAC;CACtB;AAED,MAAM,WAAW,mBAAmB;IAClC,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,+EAA+E;IAC/E,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,wFAAwF;AACxF,wBAAsB,mBAAmB,CACvC,SAAS,GAAE,mBAAwB,GAClC,OAAO,CAAC,YAAY,CAAC,CAuBvB;AAED,mEAAmE;AACnE,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAOrD;AAED,qEAAqE;AACrE,wBAAgB,eAAe,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,eAAe,CAM/D;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAC7B,KAAK,EAAE,eAAe,EACtB,KAAK,EAAE,QAAQ,GACd,gBAAgB,CAmClB;AAeD,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,eAAe,CAAC;IACvB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,sEAAsE;AACtE,wBAAsB,SAAS,CAC7B,GAAG,EAAE,YAAY,EACjB,MAAM,EAAE,eAAe,GACtB,OAAO,CAAC,qBAAqB,CAAC,CAsBhC;AAED,mFAAmF;AACnF,wBAAsB,WAAW,CAC/B,GAAG,EAAE,YAAY,GAChB,OAAO,CAAC,qBAAqB,EAAE,CAAC,CAElC;AAED,mEAAmE;AACnE,wBAAsB,eAAe,CACnC,GAAG,EAAE,YAAY,EACjB,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,qBAAqB,CAAC,CAUhC;AAED,uEAAuE;AACvE,wBAAsB,kBAAkB,CACtC,GAAG,EAAE,YAAY,EACjB,IAAI,EAAE,MAAM,GACX,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC,CAIxD"}

package/dist/services/vault.service.js

@@ -0,0 +1,143 @@
+/**
+ * Vault secrets service — manage user-owned secrets from the CLI.
+ *
+ * The CLI is name + scope based and friendly; the apollo-api proxy
+ * (`/v1/vault/secrets`) and agent-settings own storage + encryption.
+ * apollo's get/delete are by `secret_id`, so name-based `get`/`rm` resolve the
+ * id via the list endpoint first.
+ *
+ * Secret values only ever travel in the create body. Reads return a masked
+ * `preview` (never the value), so nothing here needs to mask output.
+ */
+import { buildApolloClient, getAuthenticatedSession, resolveScopeIds, } from "./integration.service.js";
+import { getOrgScopedToken } from "./auth.service.js";
+import { CLIError, ValidationError } from "../errors/index.js";
+/** Reference names are UPPER_SNAKE_CASE — same constraint agent-settings enforces. */
+const SECRET_NAME_PATTERN = /^[A-Z][A-Z0-9_]*$/;
+/** Resolve auth + scope (from flags / .auirc / session) and build the apollo client. */
+export async function resolveVaultContext(overrides = {}) {
+    const session = await getAuthenticatedSession();
+    const scope = resolveScopeIds(session, {
+        organizationId: overrides.organizationId,
+        accountId: overrides.accountId,
+        networkId: overrides.networkId,
+    }, overrides.path);
+    // Cross-org: the login token is scoped to the user's default org, but the
+    // project's `.auirc` (or --organization-id) can target an agent in a
+    // DIFFERENT org. apollo-api / the gateway trust the token's org claim, so
+    // mint a token scoped to the resolved org before hitting the vault endpoints
+    // (mirrors `apollo.tsx`). No-op — zero network calls — when they already
+    // match, and best-effort (falls back to the login token) on any failure.
+    const authToken = await getOrgScopedToken(session.auth_token, scope.organizationId, {
+        apiUrl: session.api_url,
+        environment: session.environment,
+    });
+    const client = buildApolloClient({ ...session, auth_token: authToken }, scope);
+    return { session, scope, client };
+}
+/** Validate a secret reference name (used as `{{vault.NAME}}`). */
+export function validateSecretName(name) {
+    if (!SECRET_NAME_PATTERN.test(name)) {
+        throw new ValidationError(`Invalid secret name '${name}'. Use UPPER_SNAKE_CASE (e.g. STRIPE_KEY).`, { suggestion: "Names must match ^[A-Z][A-Z0-9_]*$ — letters, digits and underscores." });
+    }
+}
+/** Normalize a `--scope` value to a level, defaulting to `agent`. */
+export function parseScopeLevel(value) {
+    const v = (value || "agent").toLowerCase();
+    if (v === "agent" || v === "account" || v === "organization")
+        return v;
+    throw new ValidationError(`Invalid --scope '${value}'. Use one of: agent, account, organization.`);
+}
+/**
+ * Build the RecordScope to send to agent-settings. `agent` == NETWORK scope
+ * (the agent is a network). Extra ids are harmless — agent-settings keys the
+ * secret by the scope `type` + its matching id.
+ */
+export function buildVaultScope(level, scope) {
+    switch (level) {
+        case "agent":
+            if (!scope.networkId) {
+                throw new ValidationError("No agent (network) id found for agent-scoped secret.", { suggestion: "Run inside an agent project (with .auirc) or pass --network-id <id>." });
+            }
+            return {
+                type: "NETWORK",
+                network_id: scope.networkId,
+                account_id: scope.accountId || undefined,
+                organization_id: scope.organizationId || undefined,
+                network_category_id: scope.networkCategoryId || undefined,
+            };
+        case "account":
+            if (!scope.accountId) {
+                throw new ValidationError("No account id found for account-scoped secret.", {
+                    suggestion: "Pass --account-id <id> or select an account first.",
+                });
+            }
+            return {
+                type: "ACCOUNT",
+                account_id: scope.accountId,
+                organization_id: scope.organizationId || undefined,
+            };
+        case "organization":
+            if (!scope.organizationId) {
+                throw new ValidationError("No organization id found for organization-scoped secret.", {
+                    suggestion: "Pass --organization-id <id> or select an organization first.",
+                });
+            }
+            return { type: "ORGANIZATION", organization_id: scope.organizationId };
+    }
+}
+/** Scope-chain query params for list (most-specific-per-name reduction happens server-side). */
+function listScopeParams(scope) {
+    return {
+        networkId: scope.networkId || undefined,
+        accountId: scope.accountId || undefined,
+        organizationId: scope.organizationId || undefined,
+    };
+}
+/** Create or rotate a secret (server-side upsert by name + scope). */
+export async function setSecret(ctx, params) {
+    validateSecretName(params.name);
+    if (!params.value) {
+        throw new ValidationError("Secret value is empty.", {
+            suggestion: "Provide a non-empty value via stdin, the prompt, or --value.",
+        });
+    }
+    if (!ctx.scope.userId) {
+        throw new ValidationError("No user id in session; cannot attribute the secret.", {
+            suggestion: "Re-run `aui login` to refresh your session.",
+        });
+    }
+    const scope = buildVaultScope(params.level, ctx.scope);
+    const body = {
+        name: params.name,
+        value: params.value,
+        description: params.description,
+        scope,
+        created_by: ctx.scope.userId,
+        updated_by: ctx.scope.userId,
+    };
+    return ctx.client.createVaultSecret(body);
+}
+/** List secrets visible in the current scope chain (metadata + masked preview). */
+export async function listSecrets(ctx) {
+    return ctx.client.listVaultSecrets(listScopeParams(ctx.scope));
+}
+/** Find a single secret by name within the current scope chain. */
+export async function getSecretByName(ctx, name) {
+    const secrets = await listSecrets(ctx);
+    const match = secrets.find((s) => s.name === name);
+    if (!match) {
+        throw new CLIError(`Secret '${name}' not found in the current scope.`, {
+            code: "API_NOT_FOUND",
+            suggestion: "Check the name and scope (try `aui vault list`).",
+        });
+    }
+    return match;
+}
+/** Delete a secret by name (resolves the id via list, then DELETE). */
+export async function removeSecretByName(ctx, name) {
+    const match = await getSecretByName(ctx, name);
+    const result = await ctx.client.deleteVaultSecret(match.id);
+    return { name, id: match.id, message: result?.message || "Secret deleted successfully" };
+}
+//# sourceMappingURL=vault.service.js.map

package/dist/services/vault.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vault.service.js","sourceRoot":"","sources":["../../src/services/vault.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AASH,OAAO,EACL,iBAAiB,EACjB,uBAAuB,EACvB,eAAe,GAEhB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAG/D,sFAAsF;AACtF,MAAM,mBAAmB,GAAG,mBAAmB,CAAC;AAgBhD,wFAAwF;AACxF,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,YAAiC,EAAE;IAEnC,MAAM,OAAO,GAAG,MAAM,uBAAuB,EAAE,CAAC;IAChD,MAAM,KAAK,GAAG,eAAe,CAC3B,OAAO,EACP;QACE,cAAc,EAAE,SAAS,CAAC,cAAc;QACxC,SAAS,EAAE,SAAS,CAAC,SAAS;QAC9B,SAAS,EAAE,SAAS,CAAC,SAAS;KAC/B,EACD,SAAS,CAAC,IAAI,CACf,CAAC;IACF,0EAA0E;IAC1E,qEAAqE;IACrE,0EAA0E;IAC1E,6EAA6E;IAC7E,yEAAyE;IACzE,yEAAyE;IACzE,MAAM,SAAS,GAAG,MAAM,iBAAiB,CAAC,OAAO,CAAC,UAAU,EAAE,KAAK,CAAC,cAAc,EAAE;QAClF,MAAM,EAAE,OAAO,CAAC,OAAO;QACvB,WAAW,EAAE,OAAO,CAAC,WAAW;KACjC,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,iBAAiB,CAAC,EAAE,GAAG,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,EAAE,KAAK,CAAC,CAAC;IAC/E,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;AACpC,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,eAAe,CACvB,wBAAwB,IAAI,4CAA4C,EACxE,EAAE,UAAU,EAAE,uEAAuE,EAAE,CACxF,CAAC;IACJ,CAAC;AACH,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,eAAe,CAAC,KAAc;IAC5C,MAAM,CAAC,GAAG,CAAC,KAAK,IAAI,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC;IAC3C,IAAI,CAAC,KAAK,OAAO,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,cAAc;QAAE,OAAO,CAAC,CAAC;IACvE,MAAM,IAAI,eAAe,CACvB,oBAAoB,KAAK,8CAA8C,CACxE,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAC7B,KAAsB,EACtB,KAAe;IAEf,QAAQ,KAAK,EAAE,CAAC;QACd,KAAK,OAAO;YACV,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;gBACrB,MAAM,IAAI,eAAe,CACvB,sDAAsD,EACtD,EAAE,UAAU,EAAE,sEAAsE,EAAE,CACvF,CAAC;YACJ,CAAC;YACD,OAAO;gBACL,IAAI,EAAE,SAAS;gBACf,UAAU,EAAE,KAAK,CAAC,SAAS;gBAC3B,UAAU,EAAE,KAAK,CAAC,SAAS,IAAI,SAAS;gBACxC,eAAe,EAAE,KAAK,CAAC,cAAc,IAAI,SAAS;gBAClD,mBAAmB,EAAE,KAAK,CAAC,iBAAiB,IAAI,SAAS;aAC1D,CAAC;QACJ,KAAK,SAAS;YACZ,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;gBACrB,MAAM,IAAI,eAAe,CAAC,gDAAgD,EAAE;oBAC1E,UAAU,EAAE,oDAAoD;iBACjE,CAAC,CAAC;YACL,CAAC;YACD,OAAO;gBACL,IAAI,EAAE,SAAS;gBACf,UAAU,EAAE,KAAK,CAAC,SAAS;gBAC3B,eAAe,EAAE,KAAK,CAAC,cAAc,IAAI,SAAS;aACnD,CAAC;QACJ,KAAK,cAAc;YACjB,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC;gBAC1B,MAAM,IAAI,eAAe,CAAC,0DAA0D,EAAE;oBACpF,UAAU,EAAE,8DAA8D;iBAC3E,CAAC,CAAC;YACL,CAAC;YACD,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,eAAe,EAAE,KAAK,CAAC,cAAc,EAAE,CAAC;IAC3E,CAAC;AACH,CAAC;AAED,gGAAgG;AAChG,SAAS,eAAe,CAAC,KAAe;IAKtC,OAAO;QACL,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,SAAS;QACvC,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,SAAS;QACvC,cAAc,EAAE,KAAK,CAAC,cAAc,IAAI,SAAS;KAClD,CAAC;AACJ,CAAC;AASD,sEAAsE;AACtE,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,GAAiB,EACjB,MAAuB;IAEvB,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAChC,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QAClB,MAAM,IAAI,eAAe,CAAC,wBAAwB,EAAE;YAClD,UAAU,EAAE,8DAA8D;SAC3E,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;QACtB,MAAM,IAAI,eAAe,CAAC,qDAAqD,EAAE;YAC/E,UAAU,EAAE,6CAA6C;SAC1D,CAAC,CAAC;IACL,CAAC;IACD,MAAM,KAAK,GAAG,eAAe,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;IACvD,MAAM,IAAI,GAA4B;QACpC,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,KAAK;QACL,UAAU,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM;QAC5B,UAAU,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM;KAC7B,CAAC;IACF,OAAO,GAAG,CAAC,MAAM,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;AAC5C,CAAC;AAED,mFAAmF;AACnF,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,GAAiB;IAEjB,OAAO,GAAG,CAAC,MAAM,CAAC,gBAAgB,CAAC,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;AACjE,CAAC;AAED,mEAAmE;AACnE,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,GAAiB,EACjB,IAAY;IAEZ,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,GAAG,CAAC,CAAC;IACvC,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IACnD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,QAAQ,CAAC,WAAW,IAAI,mCAAmC,EAAE;YACrE,IAAI,EAAE,eAAe;YACrB,UAAU,EAAE,kDAAkD;SAC/D,CAAC,CAAC;IACL,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,uEAAuE;AACvE,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,GAAiB,EACjB,IAAY;IAEZ,MAAM,KAAK,GAAG,MAAM,eAAe,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC/C,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,iBAAiB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC5D,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,IAAI,6BAA6B,EAAE,CAAC;AAC3F,CAAC"}

package/dist/types/index.d.ts

@@ -9,4 +9,5 @@ export * from './tool.js';
 export * from './agent.js';
 export * from './rule.js';
 export * from './widget.js';
+export * from './vault.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/types/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/types/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,cAAc,WAAW,CAAC;AAC1B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,aAAa,CAAC;AAC5B,cAAc,kBAAkB,CAAC;AACjC,cAAc,WAAW,CAAC;AAC1B,cAAc,YAAY,CAAC;AAC3B,cAAc,WAAW,CAAC;AAC1B,cAAc,aAAa,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/types/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,cAAc,WAAW,CAAC;AAC1B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,aAAa,CAAC;AAC5B,cAAc,kBAAkB,CAAC;AACjC,cAAc,WAAW,CAAC;AAC1B,cAAc,YAAY,CAAC;AAC3B,cAAc,WAAW,CAAC;AAC1B,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC"}

package/dist/types/index.js

@@ -9,4 +9,5 @@ export * from './tool.js';
 export * from './agent.js';
 export * from './rule.js';
 export * from './widget.js';
+export * from './vault.js';
 //# sourceMappingURL=index.js.map

package/dist/types/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/types/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,cAAc,WAAW,CAAC;AAC1B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,aAAa,CAAC;AAC5B,cAAc,kBAAkB,CAAC;AACjC,cAAc,WAAW,CAAC;AAC1B,cAAc,YAAY,CAAC;AAC3B,cAAc,WAAW,CAAC;AAC1B,cAAc,aAAa,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/types/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,cAAc,WAAW,CAAC;AAC1B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,aAAa,CAAC;AAC5B,cAAc,kBAAkB,CAAC;AACjC,cAAc,WAAW,CAAC;AAC1B,cAAc,YAAY,CAAC;AAC3B,cAAc,WAAW,CAAC;AAC1B,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC"}

package/dist/types/vault.d.ts

@@ -0,0 +1,31 @@
+/**
+ * Vault secret types for the `aui vault` command group.
+ *
+ * The CLI manages secrets by name + scope; the apollo-api proxy and
+ * agent-settings own the storage. The decrypted value is write-only — it is
+ * only ever sent on create and is never returned by reads (which expose a
+ * masked `preview`).
+ */
+/** Scope a secret lives at. `agent` maps to the NETWORK scope (the agent == network). */
+export type VaultScopeLevel = "agent" | "account" | "organization";
+/** Shared options accepted by the `aui vault` subcommands. */
+export interface VaultCommandOptions {
+    /** Scope level: agent (default) | account | organization. */
+    scope?: string;
+    /** Optional human description (set only). */
+    description?: string;
+    /** Raw secret value (set only). Discouraged — prefer stdin or the hidden prompt. */
+    value?: string;
+    /** Read the value from stdin (set only). */
+    stdin?: boolean;
+    /** Skip the confirmation prompt (rm only). */
+    yes?: boolean;
+    /** Agent project directory (defaults to the current project). */
+    path?: string;
+    /** Scope id overrides (default to .auirc / session). */
+    organizationId?: string;
+    accountId?: string;
+    networkId?: string;
+}
+export type { ApolloVaultSecretRead as VaultSecret } from "../api-client/apollo-client.js";
+//# sourceMappingURL=vault.d.ts.map

package/dist/types/vault.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"vault.d.ts","sourceRoot":"","sources":["../../src/types/vault.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,yFAAyF;AACzF,MAAM,MAAM,eAAe,GAAG,OAAO,GAAG,SAAS,GAAG,cAAc,CAAC;AAEnE,8DAA8D;AAC9D,MAAM,WAAW,mBAAmB;IAClC,6DAA6D;IAC7D,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,6CAA6C;IAC7C,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,oFAAoF;IACpF,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,4CAA4C;IAC5C,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,8CAA8C;IAC9C,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,iEAAiE;IACjE,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,wDAAwD;IACxD,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAGD,YAAY,EAAE,qBAAqB,IAAI,WAAW,EAAE,MAAM,gCAAgC,CAAC"}

package/dist/types/vault.js

@@ -0,0 +1,10 @@
+/**
+ * Vault secret types for the `aui vault` command group.
+ *
+ * The CLI manages secrets by name + scope; the apollo-api proxy and
+ * agent-settings own the storage. The decrypted value is write-only — it is
+ * only ever sent on create and is never returned by reads (which expose a
+ * masked `preview`).
+ */
+export {};
+//# sourceMappingURL=vault.js.map

package/dist/types/vault.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vault.js","sourceRoot":"","sources":["../../src/types/vault.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG"}

package/dist/ui/views/VaultView.d.ts

@@ -0,0 +1,19 @@
+import type { VaultSecret } from "../../types/vault.js";
+/** Human-readable scope label, e.g. "NETWORK:6a39...". Never shows a value. */
+export declare function scopeLabel(secret: VaultSecret): string;
+interface VaultListViewProps {
+    secrets: VaultSecret[];
+}
+export declare function VaultListView({ secrets }: VaultListViewProps): import("react/jsx-runtime").JSX.Element;
+interface VaultSecretViewProps {
+    secret: VaultSecret;
+}
+export declare function VaultSecretView({ secret }: VaultSecretViewProps): import("react/jsx-runtime").JSX.Element;
+export declare function VaultSecretSavedView({ secret }: VaultSecretViewProps): import("react/jsx-runtime").JSX.Element;
+interface VaultSecretDeletedViewProps {
+    name: string;
+    message: string;
+}
+export declare function VaultSecretDeletedView({ name, message, }: VaultSecretDeletedViewProps): import("react/jsx-runtime").JSX.Element;
+export {};
+//# sourceMappingURL=VaultView.d.ts.map

package/dist/ui/views/VaultView.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"VaultView.d.ts","sourceRoot":"","sources":["../../../src/ui/views/VaultView.tsx"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAExD,+EAA+E;AAC/E,wBAAgB,UAAU,CAAC,MAAM,EAAE,WAAW,GAAG,MAAM,CAKtD;AAoBD,UAAU,kBAAkB;IAC1B,OAAO,EAAE,WAAW,EAAE,CAAC;CACxB;AAED,wBAAgB,aAAa,CAAC,EAAE,OAAO,EAAE,EAAE,kBAAkB,2CAoD5D;AAID,UAAU,oBAAoB;IAC5B,MAAM,EAAE,WAAW,CAAC;CACrB;AAED,wBAAgB,eAAe,CAAC,EAAE,MAAM,EAAE,EAAE,oBAAoB,2CAO/D;AAID,wBAAgB,oBAAoB,CAAC,EAAE,MAAM,EAAE,EAAE,oBAAoB,2CAcpE;AAID,UAAU,2BAA2B;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,wBAAgB,sBAAsB,CAAC,EACrC,IAAI,EACJ,OAAO,GACR,EAAE,2BAA2B,2CAM7B"}

package/dist/ui/views/VaultView.js

@@ -0,0 +1,35 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { Box, Text } from "ink";
+import { Header, Section, StatusLine, KeyValueGroup, Divider, Hint, } from "../components/index.js";
+import { colors } from "../theme.js";
+/** Human-readable scope label, e.g. "NETWORK:6a39...". Never shows a value. */
+export function scopeLabel(secret) {
+    const s = secret.scope || {};
+    const id = s?.network_id || s?.account_id || s?.organization_id || s?.network_category_id || "";
+    return id ? `${s?.type}:${id}` : String(s?.type ?? "");
+}
+/** Detail rows shared by `get` and `set` — metadata + masked preview only. */
+function secretDetail(secret) {
+    return (_jsx(KeyValueGroup, { items: [
+            { label: "Name", value: secret.name },
+            { label: "Preview", value: secret.preview },
+            { label: "Scope", value: scopeLabel(secret) },
+            { label: "Version", value: String(secret.version) },
+            { label: "Description", value: secret.description ?? undefined },
+            { label: "Updated", value: secret.updated_at },
+        ] }));
+}
+export function VaultListView({ secrets }) {
+    return (_jsxs(Box, { flexDirection: "column", paddingX: 1, paddingY: 1, children: [_jsx(Header, { title: "Vault Secrets" }), secrets.length === 0 ? (_jsx(Section, { title: "Secrets", children: _jsx(Hint, { message: "No secrets in this scope. Create one with", command: "aui vault set <NAME>" }) })) : (_jsx(Section, { title: `Secrets (${secrets.length})`, children: _jsxs(Box, { flexDirection: "column", children: [_jsxs(Box, { children: [_jsx(Box, { width: 28, children: _jsx(Text, { bold: true, children: "Name" }) }), _jsx(Box, { width: 16, children: _jsx(Text, { bold: true, children: "Preview" }) }), _jsx(Box, { width: 32, children: _jsx(Text, { bold: true, children: "Scope" }) }), _jsx(Box, { children: _jsx(Text, { bold: true, children: "Ver." }) })] }), _jsx(Divider, { width: 84 }), secrets.map((secret) => (_jsxs(Box, { children: [_jsx(Box, { width: 28, children: _jsx(Text, { color: colors.brand, children: secret.name }) }), _jsx(Box, { width: 16, children: _jsx(Text, { color: colors.muted, children: secret.preview }) }), _jsx(Box, { width: 32, children: _jsx(Text, { color: colors.muted, children: scopeLabel(secret) }) }), _jsx(Box, { children: _jsx(Text, { color: colors.muted, children: secret.version }) })] }, secret.id)))] }) }))] }));
+}
+export function VaultSecretView({ secret }) {
+    return (_jsxs(Box, { flexDirection: "column", paddingX: 1, paddingY: 1, children: [_jsx(Header, { title: "Vault Secret" }), _jsx(Section, { title: "Details", children: secretDetail(secret) })] }));
+}
+// ─── Saved (set) ───
+export function VaultSecretSavedView({ secret }) {
+    return (_jsxs(Box, { flexDirection: "column", paddingX: 1, paddingY: 1, children: [_jsx(Header, { title: "Vault Secret" }), _jsx(StatusLine, { kind: "success", label: "Saved secret", value: secret.name }), _jsx(Box, { marginTop: 1, children: secretDetail(secret) }), _jsx(Box, { marginTop: 1, children: _jsx(Hint, { message: "Reference it in your integration config as", command: `{{vault.${secret.name}}}` }) })] }));
+}
+export function VaultSecretDeletedView({ name, message, }) {
+    return (_jsx(Box, { paddingX: 1, paddingY: 1, children: _jsx(StatusLine, { kind: "success", label: message, value: name }) }));
+}
+//# sourceMappingURL=VaultView.js.map

package/dist/ui/views/VaultView.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"VaultView.js","sourceRoot":"","sources":["../../../src/ui/views/VaultView.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,KAAK,CAAC;AAChC,OAAO,EACL,MAAM,EACN,OAAO,EACP,UAAU,EACV,aAAa,EACb,OAAO,EACP,IAAI,GACL,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAGrC,+EAA+E;AAC/E,MAAM,UAAU,UAAU,CAAC,MAAmB;IAC5C,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,IAAK,EAA2B,CAAC;IACvD,MAAM,EAAE,GACN,CAAC,EAAE,UAAU,IAAI,CAAC,EAAE,UAAU,IAAI,CAAC,EAAE,eAAe,IAAI,CAAC,EAAE,mBAAmB,IAAI,EAAE,CAAC;IACvF,OAAO,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;AACzD,CAAC;AAED,8EAA8E;AAC9E,SAAS,YAAY,CAAC,MAAmB;IACvC,OAAO,CACL,KAAC,aAAa,IACZ,KAAK,EAAE;YACL,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,EAAE;YACrC,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,CAAC,OAAO,EAAE;YAC3C,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,CAAC,MAAM,CAAC,EAAE;YAC7C,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE;YACnD,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE,MAAM,CAAC,WAAW,IAAI,SAAS,EAAE;YAChE,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,CAAC,UAAU,EAAE;SAC/C,GACD,CACH,CAAC;AACJ,CAAC;AAQD,MAAM,UAAU,aAAa,CAAC,EAAE,OAAO,EAAsB;IAC3D,OAAO,CACL,MAAC,GAAG,IAAC,aAAa,EAAC,QAAQ,EAAC,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,aAClD,KAAC,MAAM,IAAC,KAAK,EAAC,eAAe,GAAG,EAC/B,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CACtB,KAAC,OAAO,IAAC,KAAK,EAAC,SAAS,YACtB,KAAC,IAAI,IACH,OAAO,EAAC,2CAA2C,EACnD,OAAO,EAAC,sBAAsB,GAC9B,GACM,CACX,CAAC,CAAC,CAAC,CACF,KAAC,OAAO,IAAC,KAAK,EAAE,YAAY,OAAO,CAAC,MAAM,GAAG,YAC3C,MAAC,GAAG,IAAC,aAAa,EAAC,QAAQ,aACzB,MAAC,GAAG,eACF,KAAC,GAAG,IAAC,KAAK,EAAE,EAAE,YACZ,KAAC,IAAI,IAAC,IAAI,2BAAY,GAClB,EACN,KAAC,GAAG,IAAC,KAAK,EAAE,EAAE,YACZ,KAAC,IAAI,IAAC,IAAI,8BAAe,GACrB,EACN,KAAC,GAAG,IAAC,KAAK,EAAE,EAAE,YACZ,KAAC,IAAI,IAAC,IAAI,4BAAa,GACnB,EACN,KAAC,GAAG,cACF,KAAC,IAAI,IAAC,IAAI,2BAAY,GAClB,IACF,EAEN,KAAC,OAAO,IAAC,KAAK,EAAE,EAAE,GAAI,EAErB,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CACvB,MAAC,GAAG,eACF,KAAC,GAAG,IAAC,KAAK,EAAE,EAAE,YACZ,KAAC,IAAI,IAAC,KAAK,EAAE,MAAM,CAAC,KAAK,YAAG,MAAM,CAAC,IAAI,GAAQ,GAC3C,EACN,KAAC,GAAG,IAAC,KAAK,EAAE,EAAE,YACZ,KAAC,IAAI,IAAC,KAAK,EAAE,MAAM,CAAC,KAAK,YAAG,MAAM,CAAC,OAAO,GAAQ,GAC9C,EACN,KAAC,GAAG,IAAC,KAAK,EAAE,EAAE,YACZ,KAAC,IAAI,IAAC,KAAK,EAAE,MAAM,CAAC,KAAK,YAAG,UAAU,CAAC,MAAM,CAAC,GAAQ,GAClD,EACN,KAAC,GAAG,cACF,KAAC,IAAI,IAAC,KAAK,EAAE,MAAM,CAAC,KAAK,YAAG,MAAM,CAAC,OAAO,GAAQ,GAC9C,KAZE,MAAM,CAAC,EAAE,CAab,CACP,CAAC,IACE,GACE,CACX,IACG,CACP,CAAC;AACJ,CAAC;AAQD,MAAM,UAAU,eAAe,CAAC,EAAE,MAAM,EAAwB;IAC9D,OAAO,CACL,MAAC,GAAG,IAAC,aAAa,EAAC,QAAQ,EAAC,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,aAClD,KAAC,MAAM,IAAC,KAAK,EAAC,cAAc,GAAG,EAC/B,KAAC,OAAO,IAAC,KAAK,EAAC,SAAS,YAAE,YAAY,CAAC,MAAM,CAAC,GAAW,IACrD,CACP,CAAC;AACJ,CAAC;AAED,sBAAsB;AAEtB,MAAM,UAAU,oBAAoB,CAAC,EAAE,MAAM,EAAwB;IACnE,OAAO,CACL,MAAC,GAAG,IAAC,aAAa,EAAC,QAAQ,EAAC,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,aAClD,KAAC,MAAM,IAAC,KAAK,EAAC,cAAc,GAAG,EAC/B,KAAC,UAAU,IAAC,IAAI,EAAC,SAAS,EAAC,KAAK,EAAC,cAAc,EAAC,KAAK,EAAE,MAAM,CAAC,IAAI,GAAI,EACtE,KAAC,GAAG,IAAC,SAAS,EAAE,CAAC,YAAG,YAAY,CAAC,MAAM,CAAC,GAAO,EAC/C,KAAC,GAAG,IAAC,SAAS,EAAE,CAAC,YACf,KAAC,IAAI,IACH,OAAO,EAAC,4CAA4C,EACpD,OAAO,EAAE,WAAW,MAAM,CAAC,IAAI,IAAI,GACnC,GACE,IACF,CACP,CAAC;AACJ,CAAC;AASD,MAAM,UAAU,sBAAsB,CAAC,EACrC,IAAI,EACJ,OAAO,GACqB;IAC5B,OAAO,CACL,KAAC,GAAG,IAAC,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,YAC3B,KAAC,UAAU,IAAC,IAAI,EAAC,SAAS,EAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,GAAI,GACtD,CACP,CAAC;AACJ,CAAC"}

package/dist/utils/fetch-with-timeout.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"fetch-with-timeout.d.ts","sourceRoot":"","sources":["../../src/utils/fetch-with-timeout.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAEH,OAAkB,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAI9D,qBAAa,iBAAkB,SAAQ,KAAK;IAC1C,QAAQ,CAAC,IAAI,uBAAuB;IACpC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;gBAEf,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM;CAW9E;AA0BD,MAAM,WAAW,oBAAqB,SAAQ,WAAW;IACvD;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;GAGG;AACH,iBAAe,gBAAgB,CAC7B,GAAG,EAAE,MAAM,EACX,IAAI,CAAC,EAAE,oBAAoB,GAC1B,OAAO,CAAC,QAAQ,CAAC,CA2CnB;AAED,eAAe,gBAAgB,CAAC;AAIhC,YAAY,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC"}
+{"version":3,"file":"fetch-with-timeout.d.ts","sourceRoot":"","sources":["../../src/utils/fetch-with-timeout.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAEH,OAAkB,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAI9D,qBAAa,iBAAkB,SAAQ,KAAK;IAC1C,QAAQ,CAAC,IAAI,uBAAuB;IACpC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;gBAEf,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM;CAW9E;AA0BD,MAAM,WAAW,oBAAqB,SAAQ,WAAW;IACvD;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAyBD;;;GAGG;AACH,iBAAe,gBAAgB,CAC7B,GAAG,EAAE,MAAM,EACX,IAAI,CAAC,EAAE,oBAAoB,GAC1B,OAAO,CAAC,QAAQ,CAAC,CA4CnB;AAED,eAAe,gBAAgB,CAAC;AAIhC,YAAY,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC"}

package/dist/utils/fetch-with-timeout.js

@@ -73,12 +73,35 @@ function resolveTimeoutMs(callerTimeout) {
     }
     return DEFAULT_TIMEOUT_MS;
 }
+/**
+ * Mirror `curl`'s default by reading response bodies UNCOMPRESSED.
+ *
+ * `node-fetch@2` defaults to `compress: true`, which negotiates
+ * `Accept-Encoding: gzip,deflate` and then pipes the response through a zlib
+ * gunzip stream. On a large body over a reused keep-alive socket that stream
+ * is the well-known source of `"Premature close"` / `ECONNRESET` errors thrown
+ * mid-`response.text()` — even though the server replied `200` and every byte
+ * arrived. A bare `curl` (which sends no `Accept-Encoding`) never hits this,
+ * which is exactly why a HEALTHY endpoint like `GET /network/v1/category`
+ * failed ONLY through the CLI while curl returned 200 instantly.
+ *
+ * Defaulting to `compress: false` makes node-fetch read the body plain, just
+ * like curl. Callers that knowingly hit an always-gzip endpoint can opt back
+ * in per-call with `compress: true`.
+ */
+function withUncompressedDefault(init) {
+    if (init.compress === undefined) {
+        return { ...init, compress: false };
+    }
+    return init;
+}
 /**
  * Like `node-fetch` but bounded by an `AbortController` timeout. Drop-in
  * replacement: `import fetch from "../utils/fetch-with-timeout.js"`.
  */
 async function fetchWithTimeout(url, init) {
-    const { timeoutMs: callerTimeout, ...rest } = init ?? {};
+    const { timeoutMs: callerTimeout, ...rawRest } = init ?? {};
+    const rest = withUncompressedDefault(rawRest);
     const timeoutMs = resolveTimeoutMs(callerTimeout);
     const method = (rest.method ?? "GET").toUpperCase();
     // timeoutMs === 0 → unbounded (caller opted out explicitly)

package/dist/utils/fetch-with-timeout.js.map

@@ -1 +1 @@
-{"version":3,"file":"fetch-with-timeout.js","sourceRoot":"","sources":["../../src/utils/fetch-with-timeout.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAEH,OAAO,SAAoC,MAAM,YAAY,CAAC;AAE9D,MAAM,kBAAkB,GAAG,OAAO,CAAC;AAEnC,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IACjC,IAAI,GAAG,mBAAmB,CAAC;IAC3B,GAAG,CAAS;IACZ,MAAM,CAAS;IACf,SAAS,CAAS;IAClB,SAAS,CAAS;IAE3B,YAAY,GAAW,EAAE,MAAc,EAAE,SAAiB,EAAE,SAAiB;QAC3E,KAAK,CACH,2BAA2B,SAAS,aAAa,SAAS,QAAQ,MAAM,IAAI,GAAG,IAAI;YACjF,2EAA2E;YAC3E,yDAAyD,CAC5D,CAAC;QACF,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;QACf,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;IAC7B,CAAC;CACF;AAED;;;;;;;;;;;GAWG;AACH,SAAS,gBAAgB,CAAC,aAAsB;IAC9C,IAAI,OAAO,aAAa,KAAK,QAAQ,IAAI,aAAa,IAAI,CAAC,EAAE,CAAC;QAC5D,OAAO,aAAa,CAAC;IACvB,CAAC;IACD,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC;IACjD,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QACrC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,MAAM,IAAI,CAAC;YAAE,OAAO,MAAM,CAAC;IAC1D,CAAC;IACD,OAAO,kBAAkB,CAAC;AAC5B,CAAC;AAUD;;;GAGG;AACH,KAAK,UAAU,gBAAgB,CAC7B,GAAW,EACX,IAA2B;IAE3B,MAAM,EAAE,SAAS,EAAE,aAAa,EAAE,GAAG,IAAI,EAAE,GAAG,IAAI,IAAI,EAAE,CAAC;IACzD,MAAM,SAAS,GAAG,gBAAgB,CAAC,aAAa,CAAC,CAAC;IAClD,MAAM,MAAM,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;IAEpD,4DAA4D;IAC5D,IAAI,SAAS,KAAK,CAAC,EAAE,CAAC;QACpB,OAAO,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC9B,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACzB,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,SAAS,CAAC,CAAC;IAE9D,IAAI,CAAC;QACH,MAAM,MAAM,GAAgB,EAAE,GAAG,IAAI,EAAE,CAAC;QACxC,wDAAwD;QACxD,uEAAuE;QACvE,yEAAyE;QACzE,IAAI,IAAI,CAAC,MAAM,IAAI,OAAQ,IAAI,CAAC,MAAyC,CAAC,gBAAgB,KAAK,UAAU,EAAE,CAAC;YAC1G,MAAM,YAAY,GAAG,IAAI,CAAC,MAAgC,CAAC;YAC3D,IAAI,YAAY,CAAC,OAAO;gBAAE,UAAU,CAAC,KAAK,EAAE,CAAC;;gBACxC,YAAY,CAAC,gBAAgB,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACxF,CAAC;QACD,MAAM,CAAC,MAAM,GAAG,UAAU,CAAC,MAA0C,CAAC;QACtE,OAAO,MAAM,SAAS,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACtC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;QACrC,iEAAiE;QACjE,wEAAwE;QACxE,gDAAgD;QAChD,MAAM,OAAO,GACX,GAAG,YAAY,KAAK;YACpB,CAAC,GAAG,CAAC,IAAI,KAAK,YAAY;gBACxB,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;gBAC5B,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC/B,IAAI,OAAO,IAAI,SAAS,IAAI,SAAS,GAAG,EAAE,EAAE,CAAC;YAC3C,MAAM,IAAI,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;QACjE,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;AACH,CAAC;AAED,eAAe,gBAAgB,CAAC"}
+{"version":3,"file":"fetch-with-timeout.js","sourceRoot":"","sources":["../../src/utils/fetch-with-timeout.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAEH,OAAO,SAAoC,MAAM,YAAY,CAAC;AAE9D,MAAM,kBAAkB,GAAG,OAAO,CAAC;AAEnC,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IACjC,IAAI,GAAG,mBAAmB,CAAC;IAC3B,GAAG,CAAS;IACZ,MAAM,CAAS;IACf,SAAS,CAAS;IAClB,SAAS,CAAS;IAE3B,YAAY,GAAW,EAAE,MAAc,EAAE,SAAiB,EAAE,SAAiB;QAC3E,KAAK,CACH,2BAA2B,SAAS,aAAa,SAAS,QAAQ,MAAM,IAAI,GAAG,IAAI;YACjF,2EAA2E;YAC3E,yDAAyD,CAC5D,CAAC;QACF,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;QACf,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;IAC7B,CAAC;CACF;AAED;;;;;;;;;;;GAWG;AACH,SAAS,gBAAgB,CAAC,aAAsB;IAC9C,IAAI,OAAO,aAAa,KAAK,QAAQ,IAAI,aAAa,IAAI,CAAC,EAAE,CAAC;QAC5D,OAAO,aAAa,CAAC;IACvB,CAAC;IACD,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC;IACjD,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QACrC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,MAAM,IAAI,CAAC;YAAE,OAAO,MAAM,CAAC;IAC1D,CAAC;IACD,OAAO,kBAAkB,CAAC;AAC5B,CAAC;AAUD;;;;;;;;;;;;;;;GAeG;AACH,SAAS,uBAAuB,CAAC,IAAiB;IAChD,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QAChC,OAAO,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IACtC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,gBAAgB,CAC7B,GAAW,EACX,IAA2B;IAE3B,MAAM,EAAE,SAAS,EAAE,aAAa,EAAE,GAAG,OAAO,EAAE,GAAG,IAAI,IAAI,EAAE,CAAC;IAC5D,MAAM,IAAI,GAAG,uBAAuB,CAAC,OAAO,CAAC,CAAC;IAC9C,MAAM,SAAS,GAAG,gBAAgB,CAAC,aAAa,CAAC,CAAC;IAClD,MAAM,MAAM,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;IAEpD,4DAA4D;IAC5D,IAAI,SAAS,KAAK,CAAC,EAAE,CAAC;QACpB,OAAO,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC9B,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACzB,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,SAAS,CAAC,CAAC;IAE9D,IAAI,CAAC;QACH,MAAM,MAAM,GAAgB,EAAE,GAAG,IAAI,EAAE,CAAC;QACxC,wDAAwD;QACxD,uEAAuE;QACvE,yEAAyE;QACzE,IAAI,IAAI,CAAC,MAAM,IAAI,OAAQ,IAAI,CAAC,MAAyC,CAAC,gBAAgB,KAAK,UAAU,EAAE,CAAC;YAC1G,MAAM,YAAY,GAAG,IAAI,CAAC,MAAgC,CAAC;YAC3D,IAAI,YAAY,CAAC,OAAO;gBAAE,UAAU,CAAC,KAAK,EAAE,CAAC;;gBACxC,YAAY,CAAC,gBAAgB,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACxF,CAAC;QACD,MAAM,CAAC,MAAM,GAAG,UAAU,CAAC,MAA0C,CAAC;QACtE,OAAO,MAAM,SAAS,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACtC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;QACrC,iEAAiE;QACjE,wEAAwE;QACxE,gDAAgD;QAChD,MAAM,OAAO,GACX,GAAG,YAAY,KAAK;YACpB,CAAC,GAAG,CAAC,IAAI,KAAK,YAAY;gBACxB,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;gBAC5B,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC/B,IAAI,OAAO,IAAI,SAAS,IAAI,SAAS,GAAG,EAAE,EAAE,CAAC;YAC3C,MAAM,IAAI,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;QACjE,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;AACH,CAAC;AAED,eAAe,gBAAgB,CAAC"}

package/dist/utils/json-output.d.ts

@@ -49,6 +49,17 @@ export type JsonEnvelope<T = unknown> = JsonSuccessEnvelope<T> | JsonErrorEnvelo
 export declare function outputJson<T>(data: T): void;
 /**
  * Write an error JSON envelope to stdout and exit with the given code.
+ *
+ * Uses a synchronous fd-1 write (not `process.stdout.write`) on purpose:
+ * `process.stdout.write` to a pipe is async, and the immediately-following
+ * `process.exit` can terminate the process before the buffer flushes —
+ * silently dropping the error envelope for non-interactive callers (the BFF,
+ * Claude Code, the spawned-subprocess test harness). `fs.writeSync` blocks
+ * until the bytes are handed to the OS, so the payload always lands before we
+ * exit while keeping this function's synchronous `never` contract intact.
+ * Error envelopes are small (well under the pipe buffer) so this never blocks
+ * meaningfully or risks EAGAIN. Best-effort: if the fd write throws, fall back
+ * to the async write so we never crash on the error path itself.
  */
 export declare function outputJsonError(detail: JsonErrorDetail, exitCode?: number): never;
 /**

package/dist/utils/json-output.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"json-output.d.ts","sourceRoot":"","sources":["../../src/utils/json-output.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAIH,wBAAgB,WAAW,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAElD;AAED,wBAAgB,UAAU,IAAI,OAAO,CAEpC;AAED;;;;;;;;GAQG;AACH,wBAAgB,oBAAoB,IAAI,OAAO,CAG9C;AAED,MAAM,WAAW,mBAAmB,CAAC,CAAC,GAAG,OAAO;IAC9C,OAAO,EAAE,IAAI,CAAC;IACd,IAAI,EAAE,CAAC,CAAC;CACT;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;OAIG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,KAAK,CAAC;IACf,KAAK,EAAE,eAAe,CAAC;CACxB;AAED,MAAM,MAAM,YAAY,CAAC,CAAC,GAAG,OAAO,IAAI,mBAAmB,CAAC,CAAC,CAAC,GAAG,iBAAiB,CAAC;AAEnF;;GAEG;AACH,wBAAgB,UAAU,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,GAAG,IAAI,CAG3C;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,eAAe,EAAE,QAAQ,SAAI,GAAG,KAAK,CAI5E;AAED;;;GAGG;AACH,wBAAgB,SAAS,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAE/C"}
+{"version":3,"file":"json-output.d.ts","sourceRoot":"","sources":["../../src/utils/json-output.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAMH,wBAAgB,WAAW,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAElD;AAED,wBAAgB,UAAU,IAAI,OAAO,CAEpC;AAED;;;;;;;;GAQG;AACH,wBAAgB,oBAAoB,IAAI,OAAO,CAG9C;AAED,MAAM,WAAW,mBAAmB,CAAC,CAAC,GAAG,OAAO;IAC9C,OAAO,EAAE,IAAI,CAAC;IACd,IAAI,EAAE,CAAC,CAAC;CACT;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;OAIG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,KAAK,CAAC;IACf,KAAK,EAAE,eAAe,CAAC;CACxB;AAED,MAAM,MAAM,YAAY,CAAC,CAAC,GAAG,OAAO,IAAI,mBAAmB,CAAC,CAAC,CAAC,GAAG,iBAAiB,CAAC;AAEnF;;GAEG;AACH,wBAAgB,UAAU,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,GAAG,IAAI,CAG3C;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,eAAe,EAAE,QAAQ,SAAI,GAAG,KAAK,CAS5E;AAED;;;GAGG;AACH,wBAAgB,SAAS,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAE/C"}

package/dist/utils/json-output.js

@@ -10,6 +10,7 @@
  *   - Progress messages (spinners, status) go to stderr
  *   - Ink rendering is skipped entirely
  */
+import { writeSync } from "node:fs";
 let _jsonMode = false;
 export function setJsonMode(enabled) {
     _jsonMode = enabled;
@@ -40,10 +41,27 @@ export function outputJson(data) {
 }
 /**
  * Write an error JSON envelope to stdout and exit with the given code.
+ *
+ * Uses a synchronous fd-1 write (not `process.stdout.write`) on purpose:
+ * `process.stdout.write` to a pipe is async, and the immediately-following
+ * `process.exit` can terminate the process before the buffer flushes —
+ * silently dropping the error envelope for non-interactive callers (the BFF,
+ * Claude Code, the spawned-subprocess test harness). `fs.writeSync` blocks
+ * until the bytes are handed to the OS, so the payload always lands before we
+ * exit while keeping this function's synchronous `never` contract intact.
+ * Error envelopes are small (well under the pipe buffer) so this never blocks
+ * meaningfully or risks EAGAIN. Best-effort: if the fd write throws, fall back
+ * to the async write so we never crash on the error path itself.
  */
 export function outputJsonError(detail, exitCode = 1) {
     const envelope = { success: false, error: detail };
-    process.stdout.write(JSON.stringify(envelope, null, 2) + "\n");
+    const payload = JSON.stringify(envelope, null, 2) + "\n";
+    try {
+        writeSync(1, payload);
+    }
+    catch {
+        process.stdout.write(payload);
+    }
     process.exit(exitCode);
 }
 /**

package/dist/utils/json-output.js.map

@@ -1 +1 @@
-{"version":3,"file":"json-output.js","sourceRoot":"","sources":["../../src/utils/json-output.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,IAAI,SAAS,GAAG,KAAK,CAAC;AAEtB,MAAM,UAAU,WAAW,CAAC,OAAgB;IAC1C,SAAS,GAAG,OAAO,CAAC;AACtB,CAAC;AAED,MAAM,UAAU,UAAU;IACxB,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,oBAAoB;IAClC,IAAI,SAAS;QAAE,OAAO,KAAK,CAAC;IAC5B,OAAO,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACvE,CAAC;AA2BD;;GAEG;AACH,MAAM,UAAU,UAAU,CAAI,IAAO;IACnC,MAAM,QAAQ,GAA2B,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACjE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;AACjE,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,MAAuB,EAAE,QAAQ,GAAG,CAAC;IACnE,MAAM,QAAQ,GAAsB,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IACtE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IAC/D,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;AACzB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,SAAS,CAAC,OAAe;IACvC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;AACvC,CAAC"}
+{"version":3,"file":"json-output.js","sourceRoot":"","sources":["../../src/utils/json-output.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAEpC,IAAI,SAAS,GAAG,KAAK,CAAC;AAEtB,MAAM,UAAU,WAAW,CAAC,OAAgB;IAC1C,SAAS,GAAG,OAAO,CAAC;AACtB,CAAC;AAED,MAAM,UAAU,UAAU;IACxB,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,oBAAoB;IAClC,IAAI,SAAS;QAAE,OAAO,KAAK,CAAC;IAC5B,OAAO,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACvE,CAAC;AA2BD;;GAEG;AACH,MAAM,UAAU,UAAU,CAAI,IAAO;IACnC,MAAM,QAAQ,GAA2B,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACjE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;AACjE,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,eAAe,CAAC,MAAuB,EAAE,QAAQ,GAAG,CAAC;IACnE,MAAM,QAAQ,GAAsB,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IACtE,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC;IACzD,IAAI,CAAC;QACH,SAAS,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAChC,CAAC;IACD,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;AACzB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,SAAS,CAAC,OAAe;IACvC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;AACvC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "aui-agent-builder",
-  "version": "0.4.31",
+  "version": "0.4.33",
   "description": "CLI for building, managing, and deploying AUI AI agent configurations",
   "type": "module",
   "main": "dist/index.js",