create-maestro-app 0.0.2

package/dist/commands.js

@@ -0,0 +1,19 @@
+import { spawn } from 'node:child_process';
+export class SpawnRunner {
+    run(command, args, cwd) {
+        return new Promise((resolve) => {
+            const child = spawn(command, args, { cwd, stdio: 'inherit' });
+            child.on('error', () => resolve(false));
+            child.on('close', (code) => resolve(code === 0));
+        });
+    }
+    has(command) {
+        return new Promise((resolve) => {
+            const probe = process.platform === 'win32' ? 'where' : 'which';
+            const child = spawn(probe, [command], { stdio: 'ignore' });
+            child.on('error', () => resolve(false));
+            child.on('close', (code) => resolve(code === 0));
+        });
+    }
+}
+//# sourceMappingURL=commands.js.map

package/dist/commands.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"commands.js","sourceRoot":"","sources":["../src/commands.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAe3C,MAAM,OAAO,WAAW;IACtB,GAAG,CAAC,OAAe,EAAE,IAAc,EAAE,GAAW;QAC9C,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YAC7B,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;YAC9D,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;YACxC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC;QACnD,CAAC,CAAC,CAAC;IACL,CAAC;IAED,GAAG,CAAC,OAAe;QACjB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YAC7B,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC;YAC/D,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC3D,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;YACxC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC;QACnD,CAAC,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/credentials.d.ts

@@ -0,0 +1,34 @@
+/**
+ * Local CLI session store (spec 18 US-18.2). Holds one entry per hosted platform
+ * `baseUrl`, keeping only the **refresh token** on disk (the access token stays
+ * in memory). The file is written `0600`. The `kind` discriminator lets a future
+ * operator PAT / device-code token (spec 18 §Out of scope) reuse this shape
+ * without a UX change.
+ */
+export interface StoredSession {
+    kind: 'operator_refresh';
+    refreshToken: string;
+    operator?: {
+        id: string;
+        email: string;
+        name: string;
+    };
+    updatedAt: string;
+}
+/** Normalize a baseUrl so `https://x/` and `https://x` key the same session. */
+export declare function normalizeBaseUrl(baseUrl: string): string;
+export declare function defaultCredentialPath(): string;
+/**
+ * The credential store. Pass an explicit `filePath` in tests; production uses
+ * `defaultCredentialPath()`.
+ */
+export declare class CredentialStore {
+    private readonly filePath;
+    constructor(filePath?: string);
+    private readAll;
+    private writeAll;
+    get(baseUrl: string): Promise<StoredSession | undefined>;
+    set(baseUrl: string, session: Omit<StoredSession, 'updatedAt'>): Promise<void>;
+    clear(baseUrl: string): Promise<void>;
+}
+//# sourceMappingURL=credentials.d.ts.map

package/dist/credentials.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"credentials.d.ts","sourceRoot":"","sources":["../src/credentials.ts"],"names":[],"mappings":"AAIA;;;;;;GAMG;AAEH,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,kBAAkB,CAAC;IACzB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IACvD,SAAS,EAAE,MAAM,CAAC;CACnB;AAUD,gFAAgF;AAChF,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAExD;AAED,wBAAgB,qBAAqB,IAAI,MAAM,CAE9C;AAED;;;GAGG;AACH,qBAAa,eAAe;IACd,OAAO,CAAC,QAAQ,CAAC,QAAQ;gBAAR,QAAQ,GAAE,MAAgC;YAEzD,OAAO;YAoBP,QAAQ;IAQhB,GAAG,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,SAAS,CAAC;IAKxD,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,aAAa,EAAE,WAAW,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAS9E,KAAK,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAS5C"}

package/dist/credentials.js

@@ -0,0 +1,72 @@
+import { chmod, mkdir, readFile, rm, writeFile } from 'node:fs/promises';
+import { homedir } from 'node:os';
+import { dirname, join } from 'node:path';
+const EMPTY = { version: 1, sessions: {} };
+/** Normalize a baseUrl so `https://x/` and `https://x` key the same session. */
+export function normalizeBaseUrl(baseUrl) {
+    return baseUrl.trim().replace(/\/+$/, '');
+}
+export function defaultCredentialPath() {
+    return join(homedir(), '.maestro', 'credentials.json');
+}
+/**
+ * The credential store. Pass an explicit `filePath` in tests; production uses
+ * `defaultCredentialPath()`.
+ */
+export class CredentialStore {
+    filePath;
+    constructor(filePath = defaultCredentialPath()) {
+        this.filePath = filePath;
+    }
+    async readAll() {
+        let raw;
+        try {
+            raw = await readFile(this.filePath, 'utf8');
+        }
+        catch (err) {
+            if (err.code === 'ENOENT')
+                return { ...EMPTY, sessions: {} };
+            throw err;
+        }
+        try {
+            const parsed = JSON.parse(raw);
+            if (parsed.version !== 1 || typeof parsed.sessions !== 'object' || parsed.sessions === null) {
+                return { ...EMPTY, sessions: {} };
+            }
+            return { version: 1, sessions: parsed.sessions };
+        }
+        catch {
+            // A corrupt file must not brick the CLI — treat it as empty.
+            return { ...EMPTY, sessions: {} };
+        }
+    }
+    async writeAll(data) {
+        await mkdir(dirname(this.filePath), { recursive: true, mode: 0o700 });
+        // Create with 0600 up-front (mode on writeFile applies only on create), then
+        // chmod to enforce it even if the file already existed with looser perms.
+        await writeFile(this.filePath, JSON.stringify(data, null, 2) + '\n', { mode: 0o600 });
+        await chmod(this.filePath, 0o600);
+    }
+    async get(baseUrl) {
+        const all = await this.readAll();
+        return all.sessions[normalizeBaseUrl(baseUrl)];
+    }
+    async set(baseUrl, session) {
+        const all = await this.readAll();
+        all.sessions[normalizeBaseUrl(baseUrl)] = {
+            ...session,
+            updatedAt: new Date().toISOString(),
+        };
+        await this.writeAll(all);
+    }
+    async clear(baseUrl) {
+        const all = await this.readAll();
+        delete all.sessions[normalizeBaseUrl(baseUrl)];
+        if (Object.keys(all.sessions).length === 0) {
+            await rm(this.filePath, { force: true });
+            return;
+        }
+        await this.writeAll(all);
+    }
+}
+//# sourceMappingURL=credentials.js.map

package/dist/credentials.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credentials.js","sourceRoot":"","sources":["../src/credentials.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACzE,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAuB1C,MAAM,KAAK,GAAmB,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;AAE3D,gFAAgF;AAChF,MAAM,UAAU,gBAAgB,CAAC,OAAe;IAC9C,OAAO,OAAO,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AAC5C,CAAC;AAED,MAAM,UAAU,qBAAqB;IACnC,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,kBAAkB,CAAC,CAAC;AACzD,CAAC;AAED;;;GAGG;AACH,MAAM,OAAO,eAAe;IACG;IAA7B,YAA6B,WAAmB,qBAAqB,EAAE;QAA1C,aAAQ,GAAR,QAAQ,CAAkC;IAAG,CAAC;IAEnE,KAAK,CAAC,OAAO;QACnB,IAAI,GAAW,CAAC;QAChB,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC9C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO,EAAE,GAAG,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;YACxF,MAAM,GAAG,CAAC;QACZ,CAAC;QACD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA4B,CAAC;YAC1D,IAAI,MAAM,CAAC,OAAO,KAAK,CAAC,IAAI,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;gBAC5F,OAAO,EAAE,GAAG,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;YACpC,CAAC;YACD,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC;QACnD,CAAC;QAAC,MAAM,CAAC;YACP,6DAA6D;YAC7D,OAAO,EAAE,GAAG,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;QACpC,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,QAAQ,CAAC,IAAoB;QACzC,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACtE,6EAA6E;QAC7E,0EAA0E;QAC1E,MAAM,SAAS,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACtF,MAAM,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IACpC,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,OAAe;QACvB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;QACjC,OAAO,GAAG,CAAC,QAAQ,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC;IACjD,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,OAAe,EAAE,OAAyC;QAClE,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;QACjC,GAAG,CAAC,QAAQ,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,GAAG;YACxC,GAAG,OAAO;YACV,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,CAAC;QACF,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,OAAe;QACzB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;QACjC,OAAO,GAAG,CAAC,QAAQ,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC;QAC/C,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3C,MAAM,EAAE,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACzC,OAAO;QACT,CAAC;QACD,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;CACF"}

package/dist/flow.d.ts

@@ -0,0 +1,37 @@
+import type { CliArgs } from './args.js';
+import type { CommandRunner } from './commands.js';
+import type { Io } from './io.js';
+import type { CreatedApp, PlatformClient } from './platform-client.js';
+import type { SessionManager } from './session.js';
+/** Default hosted Core (overridable with `--api-url`). */
+export declare const DEFAULT_API_URL = "https://api.maestro.app";
+/** Where to manage the created App. */
+export declare const ADMIN_CONSOLE_URL = "https://admin.maestro.app";
+export interface CreateDeps {
+    io: Io;
+    platform: PlatformClient;
+    session: SessionManager;
+    /** Absolute path to `packages/create-app/templates`. */
+    templatesRoot: string;
+    /** Base directory a relative target dir resolves against. */
+    cwd: string;
+    /** Runs `pnpm install` / `git init`; omit to skip both (e.g. in tests). */
+    runner?: CommandRunner;
+}
+export interface CreateResult {
+    targetDir: string;
+    app: Pick<CreatedApp, 'key' | 'name'> | {
+        key: string;
+        name: string;
+    };
+    /** Blueprints applied to the App, in order (base first). */
+    blueprints: string[];
+    files: string[];
+    dryRun: boolean;
+    packageManager: string;
+    installed: boolean;
+    gitInitialized: boolean;
+}
+/** The end-to-end scaffold flow (spec 18 US-18.1–18.5). */
+export declare function runCreate(args: CliArgs, deps: CreateDeps): Promise<CreateResult>;
+//# sourceMappingURL=flow.d.ts.map

package/dist/flow.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"flow.d.ts","sourceRoot":"","sources":["../src/flow.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAQzC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AACnD,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAIvE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAEnD,0DAA0D;AAC1D,eAAO,MAAM,eAAe,4BAA4B,CAAC;AACzD,uCAAuC;AACvC,eAAO,MAAM,iBAAiB,8BAA8B,CAAC;AAI7D,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,EAAE,CAAC;IACP,QAAQ,EAAE,cAAc,CAAC;IACzB,OAAO,EAAE,cAAc,CAAC;IACxB,wDAAwD;IACxD,aAAa,EAAE,MAAM,CAAC;IACtB,6DAA6D;IAC7D,GAAG,EAAE,MAAM,CAAC;IACZ,2EAA2E;IAC3E,MAAM,CAAC,EAAE,aAAa,CAAC;CACxB;AA0ED,MAAM,WAAW,YAAY;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,EAAE,IAAI,CAAC,UAAU,EAAE,KAAK,GAAG,MAAM,CAAC,GAAG;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IACtE,4DAA4D;IAC5D,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,MAAM,EAAE,OAAO,CAAC;IAChB,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,OAAO,CAAC;IACnB,cAAc,EAAE,OAAO,CAAC;CACzB;AAmED,2DAA2D;AAC3D,wBAAsB,SAAS,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,YAAY,CAAC,CAyDtF"}

package/dist/flow.js

@@ -0,0 +1,177 @@
+import { readdir } from 'node:fs/promises';
+import { isAbsolute, join, resolve } from 'node:path';
+import { capabilitiesFromCatalog, resolveSelection, SAAS_BASE_KEY, } from './capabilities.js';
+import { PlatformRequestError } from './platform-client.js';
+import { buildProjectVars, deriveAppKey, isValidAppKey, renderDotEnv } from './project.js';
+import { scaffoldProject } from './scaffold.js';
+/** Default hosted Core (overridable with `--api-url`). */
+export const DEFAULT_API_URL = 'https://api.maestro.app';
+/** Where to manage the created App. */
+export const ADMIN_CONSOLE_URL = 'https://admin.maestro.app';
+/** The single integrated client template the CLI scaffolds. */
+const TEMPLATE_DIR = 'app';
+async function dirIsEmpty(dir) {
+    try {
+        const entries = await readdir(dir);
+        return entries.length === 0;
+    }
+    catch (err) {
+        if (err.code === 'ENOENT')
+            return true;
+        throw err;
+    }
+}
+/** Ensure a usable operator access token, prompting login if needed (US-18.2). */
+async function ensureAccessToken(deps, args) {
+    const existing = await deps.session.getAccessToken();
+    if (existing)
+        return existing;
+    if (args.yes) {
+        throw new Error('No cached Maestro session. Run `maestro login` first (a login prompt is skipped in --yes mode).');
+    }
+    deps.io.log('Sign in to the hosted Maestro platform to create your App.');
+    const email = await deps.io.text('Operator email');
+    const password = await deps.io.password('Password');
+    const session = await deps.session.signIn(email, password);
+    deps.io.log(`Signed in as ${session.operator.email}.`);
+    return session.accessToken;
+}
+/**
+ * Pick the capabilities and resolve their blueprint dependencies (US-18.3/18.6).
+ * Multiple capabilities compose into ONE integrated app; account-requiring
+ * products pull in the saas base automatically (spec 18 §Capabilities).
+ */
+async function pickSelection(deps, args, accessToken) {
+    const catalog = await deps.platform.listTemplates(accessToken);
+    const capabilities = capabilitiesFromCatalog(catalog);
+    let selected;
+    if (args.capabilities && args.capabilities.length > 0) {
+        selected = args.capabilities;
+    }
+    else if (args.yes) {
+        selected = catalog.some((t) => t.key === SAAS_BASE_KEY)
+            ? [SAAS_BASE_KEY]
+            : catalog[0]
+                ? [catalog[0].key]
+                : [];
+    }
+    else {
+        selected = await deps.io.multiselect('Which capabilities? (products requiring accounts pull in the SaaS base)', capabilities.map((c) => ({ value: c.templateKey, label: c.label })));
+    }
+    const selection = resolveSelection(selected, catalog);
+    if (selection.autoAddedSaas) {
+        deps.io.log('Added the SaaS account base (required by a selected product).');
+    }
+    return { selection, catalog };
+}
+/** Confirm the integrated client template exists on disk. */
+async function assertTemplate(templatesRoot) {
+    const dir = join(templatesRoot, TEMPLATE_DIR);
+    if (await dirIsEmpty(dir)) {
+        throw new Error(`The client template is missing from this CLI build (${dir}).`);
+    }
+    return dir;
+}
+/** Best-effort `pnpm install` (US-18.1) — a failure warns, never aborts. */
+async function installDeps(deps, args, targetDir, pm) {
+    if (!args.install || !deps.runner)
+        return false;
+    deps.io.log(`Installing dependencies with ${pm}…`);
+    const ok = await deps.runner.run(pm, ['install'], targetDir);
+    if (!ok)
+        deps.io.error(`\`${pm} install\` failed — run it yourself in ${targetDir}.`);
+    return ok;
+}
+/** Best-effort `git init` + initial commit (US-18.1). */
+async function initGit(deps, args, targetDir) {
+    if (!args.git || !deps.runner)
+        return false;
+    if (!(await deps.runner.has('git')))
+        return false;
+    const init = await deps.runner.run('git', ['init', '-q'], targetDir);
+    if (!init)
+        return false;
+    await deps.runner.run('git', ['add', '-A'], targetDir);
+    await deps.runner.run('git', ['commit', '-q', '-m', 'Initial commit from create-maestro-app'], targetDir);
+    return true;
+}
+/** Create the App with the base blueprint, then apply the rest onto it. */
+async function provisionApp(deps, accessToken, appKey, appName, selection, seed) {
+    const [base, ...rest] = selection.ordered;
+    try {
+        await deps.platform.createApp(accessToken, {
+            key: appKey,
+            name: appName,
+            templateKey: base,
+            seed,
+        });
+        deps.io.log(`Created App "${appKey}" (${base ?? 'empty'}).`);
+        for (const templateKey of rest) {
+            await deps.platform.applyTemplate(accessToken, appKey, {
+                templateKey,
+                seed,
+                onConflict: 'skip',
+            });
+            deps.io.log(`Applied "${templateKey}".`);
+        }
+    }
+    catch (err) {
+        if (err instanceof PlatformRequestError) {
+            throw new Error(`Could not provision App "${appKey}": ${err.error.code} — ${err.error.message}`);
+        }
+        throw err;
+    }
+}
+/** The end-to-end scaffold flow (spec 18 US-18.1–18.5). */
+export async function runCreate(args, deps) {
+    // 1. Target directory.
+    const dirInput = args.dir ?? (args.yes ? undefined : await deps.io.text('Project directory', 'my-maestro-app'));
+    if (!dirInput)
+        throw new Error('A project directory is required.');
+    const targetDir = isAbsolute(dirInput) ? dirInput : resolve(deps.cwd, dirInput);
+    if (!args.force && !(await dirIsEmpty(targetDir))) {
+        throw new Error(`Target directory is not empty: ${targetDir} (use --force to override).`);
+    }
+    // 2. Auth against the hosted platform.
+    const accessToken = await ensureAccessToken(deps, args);
+    // 3. Capabilities → dependency-resolved blueprint list.
+    const { selection } = await pickSelection(deps, args, accessToken);
+    const templateDir = await assertTemplate(deps.templatesRoot);
+    // 4. App identity.
+    const projectName = dirInput.split('/').pop() ?? dirInput;
+    const appKey = args.appKey ?? deriveAppKey(projectName);
+    if (!isValidAppKey(appKey)) {
+        throw new Error(`Invalid app key "${appKey}" (snake_case, starts with a letter, 2–63 chars).`);
+    }
+    const appName = args.appName ?? projectName;
+    const apiUrl = (args.apiUrl ?? DEFAULT_API_URL).replace(/\/+$/, '');
+    const seed = args.seed ?? true;
+    // 5. Provision the App (create + apply extra blueprints) — skipped in dry-run.
+    if (!args.dryRun) {
+        await provisionApp(deps, accessToken, appKey, appName, selection, seed);
+    }
+    // 6. Scaffold the single integrated client project (driven by `/runtime`).
+    const vars = buildProjectVars({ projectName, appKey, appName, apiUrl });
+    const result = await scaffoldProject({
+        templateDir,
+        targetDir,
+        vars,
+        extraFiles: { '.env': renderDotEnv(vars) },
+        dryRun: args.dryRun,
+    });
+    // 7. Install deps + init git (skipped in dry-run and when no runner is wired).
+    const pm = args.pm ?? 'pnpm';
+    const installed = args.dryRun ? false : await installDeps(deps, args, targetDir, pm);
+    const gitInitialized = args.dryRun ? false : await initGit(deps, args, targetDir);
+    return {
+        targetDir,
+        app: { key: appKey, name: appName },
+        blueprints: selection.ordered,
+        files: result.files.map((f) => f.path),
+        dryRun: args.dryRun,
+        packageManager: pm,
+        installed,
+        gitInitialized,
+    };
+}
+//# sourceMappingURL=flow.js.map

package/dist/flow.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"flow.js","sourceRoot":"","sources":["../src/flow.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAC3C,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEtD,OAAO,EACL,uBAAuB,EACvB,gBAAgB,EAChB,aAAa,GAGd,MAAM,mBAAmB,CAAC;AAI3B,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC3F,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAGhD,0DAA0D;AAC1D,MAAM,CAAC,MAAM,eAAe,GAAG,yBAAyB,CAAC;AACzD,uCAAuC;AACvC,MAAM,CAAC,MAAM,iBAAiB,GAAG,2BAA2B,CAAC;AAC7D,+DAA+D;AAC/D,MAAM,YAAY,GAAG,KAAK,CAAC;AAc3B,KAAK,UAAU,UAAU,CAAC,GAAW;IACnC,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC;QACnC,OAAO,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC;IAC9B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QAClE,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED,kFAAkF;AAClF,KAAK,UAAU,iBAAiB,CAAC,IAAgB,EAAE,IAAa;IAC9D,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC;IACrD,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC9B,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CACb,iGAAiG,CAClG,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,4DAA4D,CAAC,CAAC;IAC1E,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IACnD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IACpD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IAC3D,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,gBAAgB,OAAO,CAAC,QAAQ,CAAC,KAAK,GAAG,CAAC,CAAC;IACvD,OAAO,OAAO,CAAC,WAAW,CAAC;AAC7B,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,aAAa,CAC1B,IAAgB,EAChB,IAAa,EACb,WAAmB;IAEnB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,WAAW,CAAC,CAAC;IAC/D,MAAM,YAAY,GAAG,uBAAuB,CAAC,OAAO,CAAC,CAAC;IAEtD,IAAI,QAAkB,CAAC;IACvB,IAAI,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtD,QAAQ,GAAG,IAAI,CAAC,YAAY,CAAC;IAC/B,CAAC;SAAM,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;QACpB,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,aAAa,CAAC;YACrD,CAAC,CAAC,CAAC,aAAa,CAAC;YACjB,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;gBACV,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;gBAClB,CAAC,CAAC,EAAE,CAAC;IACX,CAAC;SAAM,CAAC;QACN,QAAQ,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,WAAW,CAClC,yEAAyE,EACzE,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CACpE,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAG,gBAAgB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACtD,IAAI,SAAS,CAAC,aAAa,EAAE,CAAC;QAC5B,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,+DAA+D,CAAC,CAAC;IAC/E,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;AAChC,CAAC;AAED,6DAA6D;AAC7D,KAAK,UAAU,cAAc,CAAC,aAAqB;IACjD,MAAM,GAAG,GAAG,IAAI,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC;IAC9C,IAAI,MAAM,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,uDAAuD,GAAG,IAAI,CAAC,CAAC;IAClF,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAcD,4EAA4E;AAC5E,KAAK,UAAU,WAAW,CACxB,IAAgB,EAChB,IAAa,EACb,SAAiB,EACjB,EAAU;IAEV,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAChD,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,gCAAgC,EAAE,GAAG,CAAC,CAAC;IACnD,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC,CAAC;IAC7D,IAAI,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,0CAA0C,SAAS,GAAG,CAAC,CAAC;IACtF,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,yDAAyD;AACzD,KAAK,UAAU,OAAO,CAAC,IAAgB,EAAE,IAAa,EAAE,SAAiB;IACvE,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC5C,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAClD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,SAAS,CAAC,CAAC;IACrE,IAAI,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IACxB,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,SAAS,CAAC,CAAC;IACvD,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CACnB,KAAK,EACL,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,wCAAwC,CAAC,EAChE,SAAS,CACV,CAAC;IACF,OAAO,IAAI,CAAC;AACd,CAAC;AAED,2EAA2E;AAC3E,KAAK,UAAU,YAAY,CACzB,IAAgB,EAChB,WAAmB,EACnB,MAAc,EACd,OAAe,EACf,SAA4B,EAC5B,IAAa;IAEb,MAAM,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;IAC1C,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,WAAW,EAAE;YACzC,GAAG,EAAE,MAAM;YACX,IAAI,EAAE,OAAO;YACb,WAAW,EAAE,IAAI;YACjB,IAAI;SACL,CAAC,CAAC;QACH,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,gBAAgB,MAAM,MAAM,IAAI,IAAI,OAAO,IAAI,CAAC,CAAC;QAC7D,KAAK,MAAM,WAAW,IAAI,IAAI,EAAE,CAAC;YAC/B,MAAM,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,WAAW,EAAE,MAAM,EAAE;gBACrD,WAAW;gBACX,IAAI;gBACJ,UAAU,EAAE,MAAM;aACnB,CAAC,CAAC;YACH,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,YAAY,WAAW,IAAI,CAAC,CAAC;QAC3C,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,oBAAoB,EAAE,CAAC;YACxC,MAAM,IAAI,KAAK,CACb,4BAA4B,MAAM,MAAM,GAAG,CAAC,KAAK,CAAC,IAAI,MAAM,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,CAChF,CAAC;QACJ,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED,2DAA2D;AAC3D,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,IAAa,EAAE,IAAgB;IAC7D,uBAAuB;IACvB,MAAM,QAAQ,GACZ,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,mBAAmB,EAAE,gBAAgB,CAAC,CAAC,CAAC;IACjG,IAAI,CAAC,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACnE,MAAM,SAAS,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAChF,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,MAAM,UAAU,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CAAC,kCAAkC,SAAS,6BAA6B,CAAC,CAAC;IAC5F,CAAC;IAED,uCAAuC;IACvC,MAAM,WAAW,GAAG,MAAM,iBAAiB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAExD,wDAAwD;IACxD,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC;IACnE,MAAM,WAAW,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAE7D,mBAAmB;IACnB,MAAM,WAAW,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,QAAQ,CAAC;IAC1D,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,YAAY,CAAC,WAAW,CAAC,CAAC;IACxD,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CAAC,oBAAoB,MAAM,mDAAmD,CAAC,CAAC;IACjG,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,WAAW,CAAC;IAC5C,MAAM,MAAM,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,eAAe,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACpE,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC;IAE/B,+EAA+E;IAC/E,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;QACjB,MAAM,YAAY,CAAC,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;IAC1E,CAAC;IAED,2EAA2E;IAC3E,MAAM,IAAI,GAAG,gBAAgB,CAAC,EAAE,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;IACxE,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC;QACnC,WAAW;QACX,SAAS;QACT,IAAI;QACJ,UAAU,EAAE,EAAE,MAAM,EAAE,YAAY,CAAC,IAAI,CAAC,EAAE;QAC1C,MAAM,EAAE,IAAI,CAAC,MAAM;KACpB,CAAC,CAAC;IAEH,+EAA+E;IAC/E,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,IAAI,MAAM,CAAC;IAC7B,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,WAAW,CAAC,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;IACrF,MAAM,cAAc,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;IAElF,OAAO;QACL,SAAS;QACT,GAAG,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE;QACnC,UAAU,EAAE,SAAS,CAAC,OAAO;QAC7B,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QACtC,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,cAAc,EAAE,EAAE;QAClB,SAAS;QACT,cAAc;KACf,CAAC;AACJ,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,11 @@
+export { parseArgs, type CliArgs } from './args.js';
+export { capabilitiesFromCatalog, capabilityKind, resolveSelection, SAAS_BASE_KEY, SITE_KEY, type Capability, type CapabilityKind, type CatalogTemplate, type ResolvedSelection, } from './capabilities.js';
+export { CredentialStore, defaultCredentialPath, normalizeBaseUrl } from './credentials.js';
+export { PlatformClient, PlatformRequestError, type CreatedApp, type OperatorSession, } from './platform-client.js';
+export { SessionManager } from './session.js';
+export { buildProjectVars, deriveAppKey, isValidAppKey, renderDotEnv, type ProjectVars, } from './project.js';
+export { scaffoldProject, substitute, type ScaffoldResult } from './scaffold.js';
+export { ADMIN_CONSOLE_URL, DEFAULT_API_URL, runCreate, type CreateDeps, type CreateResult, } from './flow.js';
+export { ReadlineIo, type Io } from './io.js';
+export { SpawnRunner, type CommandRunner } from './commands.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,KAAK,OAAO,EAAE,MAAM,WAAW,CAAC;AACpD,OAAO,EACL,uBAAuB,EACvB,cAAc,EACd,gBAAgB,EAChB,aAAa,EACb,QAAQ,EACR,KAAK,UAAU,EACf,KAAK,cAAc,EACnB,KAAK,eAAe,EACpB,KAAK,iBAAiB,GACvB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,eAAe,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAC5F,OAAO,EACL,cAAc,EACd,oBAAoB,EACpB,KAAK,UAAU,EACf,KAAK,eAAe,GACrB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EACL,gBAAgB,EAChB,YAAY,EACZ,aAAa,EACb,YAAY,EACZ,KAAK,WAAW,GACjB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,KAAK,cAAc,EAAE,MAAM,eAAe,CAAC;AACjF,OAAO,EACL,iBAAiB,EACjB,eAAe,EACf,SAAS,EACT,KAAK,UAAU,EACf,KAAK,YAAY,GAClB,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,EAAE,MAAM,SAAS,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,KAAK,aAAa,EAAE,MAAM,eAAe,CAAC"}

package/dist/index.js

@@ -0,0 +1,11 @@
+export { parseArgs } from './args.js';
+export { capabilitiesFromCatalog, capabilityKind, resolveSelection, SAAS_BASE_KEY, SITE_KEY, } from './capabilities.js';
+export { CredentialStore, defaultCredentialPath, normalizeBaseUrl } from './credentials.js';
+export { PlatformClient, PlatformRequestError, } from './platform-client.js';
+export { SessionManager } from './session.js';
+export { buildProjectVars, deriveAppKey, isValidAppKey, renderDotEnv, } from './project.js';
+export { scaffoldProject, substitute } from './scaffold.js';
+export { ADMIN_CONSOLE_URL, DEFAULT_API_URL, runCreate, } from './flow.js';
+export { ReadlineIo } from './io.js';
+export { SpawnRunner } from './commands.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAgB,MAAM,WAAW,CAAC;AACpD,OAAO,EACL,uBAAuB,EACvB,cAAc,EACd,gBAAgB,EAChB,aAAa,EACb,QAAQ,GAKT,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,eAAe,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAC5F,OAAO,EACL,cAAc,EACd,oBAAoB,GAGrB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EACL,gBAAgB,EAChB,YAAY,EACZ,aAAa,EACb,YAAY,GAEb,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,eAAe,EAAE,UAAU,EAAuB,MAAM,eAAe,CAAC;AACjF,OAAO,EACL,iBAAiB,EACjB,eAAe,EACf,SAAS,GAGV,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,UAAU,EAAW,MAAM,SAAS,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAsB,MAAM,eAAe,CAAC"}

package/dist/io.d.ts

@@ -0,0 +1,29 @@
+/**
+ * The CLI's I/O surface (spec 18). Abstracted behind an interface so the flow is
+ * testable with a scripted fake — the real implementation uses `node:readline`
+ * (zero-dep, per the initializer NFR).
+ */
+export interface Io {
+    log(message?: string): void;
+    error(message: string): void;
+    text(question: string, defaultValue?: string): Promise<string>;
+    password(question: string): Promise<string>;
+    /** Multi-select: returns the chosen values (may be empty). */
+    multiselect(question: string, choices: {
+        value: string;
+        label: string;
+    }[]): Promise<string[]>;
+    confirm(question: string, defaultValue: boolean): Promise<boolean>;
+}
+export declare class ReadlineIo implements Io {
+    log(message?: string): void;
+    error(message: string): void;
+    text(question: string, defaultValue?: string): Promise<string>;
+    password(question: string): Promise<string>;
+    multiselect(question: string, choices: {
+        value: string;
+        label: string;
+    }[]): Promise<string[]>;
+    confirm(question: string, defaultValue: boolean): Promise<boolean>;
+}
+//# sourceMappingURL=io.d.ts.map

package/dist/io.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"io.d.ts","sourceRoot":"","sources":["../src/io.ts"],"names":[],"mappings":"AAGA;;;;GAIG;AACH,MAAM,WAAW,EAAE;IACjB,GAAG,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,KAAK,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC/D,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC5C,8DAA8D;IAC9D,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAC9F,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACpE;AAED,qBAAa,UAAW,YAAW,EAAE;IACnC,GAAG,CAAC,OAAO,SAAK,GAAG,IAAI;IAIvB,KAAK,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI;IAItB,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAW9D,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAsB3C,WAAW,CACf,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,EAAE,GAC1C,OAAO,CAAC,MAAM,EAAE,CAAC;IAoBd,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;CAWzE"}

package/dist/io.js

@@ -0,0 +1,79 @@
+import { createInterface } from 'node:readline/promises';
+import { stdin, stdout } from 'node:process';
+export class ReadlineIo {
+    log(message = '') {
+        stdout.write(message + '\n');
+    }
+    error(message) {
+        process.stderr.write(message + '\n');
+    }
+    async text(question, defaultValue) {
+        const rl = createInterface({ input: stdin, output: stdout });
+        try {
+            const suffix = defaultValue ? ` (${defaultValue})` : '';
+            const answer = (await rl.question(`${question}${suffix}: `)).trim();
+            return answer || defaultValue || '';
+        }
+        finally {
+            rl.close();
+        }
+    }
+    async password(question) {
+        // Mute echo while typing the password.
+        const rl = createInterface({ input: stdin, output: stdout, terminal: true });
+        const muteWrite = rl.output;
+        const original = muteWrite.write.bind(muteWrite);
+        let muted = false;
+        muteWrite.write = (chunk) => {
+            if (muted && chunk !== '\n' && chunk !== '\r\n')
+                return true;
+            return original(chunk);
+        };
+        try {
+            const promise = rl.question(`${question}: `);
+            muted = true;
+            const answer = await promise;
+            return answer;
+        }
+        finally {
+            muted = false;
+            rl.close();
+            stdout.write('\n');
+        }
+    }
+    async multiselect(question, choices) {
+        const rl = createInterface({ input: stdin, output: stdout });
+        try {
+            this.log(question);
+            choices.forEach((choice, index) => this.log(`  ${index + 1}) ${choice.label}`));
+            this.log('Enter numbers separated by commas (e.g. 1,3).');
+            for (;;) {
+                const raw = (await rl.question('Choose: ')).trim();
+                const picked = raw
+                    .split(',')
+                    .map((s) => Number.parseInt(s.trim(), 10) - 1)
+                    .filter((i) => Number.isInteger(i) && i >= 0 && i < choices.length);
+                if (picked.length > 0)
+                    return [...new Set(picked)].map((i) => choices[i].value);
+                this.error('Pick at least one valid number.');
+            }
+        }
+        finally {
+            rl.close();
+        }
+    }
+    async confirm(question, defaultValue) {
+        const rl = createInterface({ input: stdin, output: stdout });
+        try {
+            const hint = defaultValue ? 'Y/n' : 'y/N';
+            const answer = (await rl.question(`${question} (${hint}): `)).trim().toLowerCase();
+            if (!answer)
+                return defaultValue;
+            return answer === 'y' || answer === 'yes';
+        }
+        finally {
+            rl.close();
+        }
+    }
+}
+//# sourceMappingURL=io.js.map

package/dist/io.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"io.js","sourceRoot":"","sources":["../src/io.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAiB7C,MAAM,OAAO,UAAU;IACrB,GAAG,CAAC,OAAO,GAAG,EAAE;QACd,MAAM,CAAC,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;IAC/B,CAAC;IAED,KAAK,CAAC,OAAe;QACnB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;IACvC,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,QAAgB,EAAE,YAAqB;QAChD,MAAM,EAAE,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QAC7D,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,CAAC,KAAK,YAAY,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YACxD,MAAM,MAAM,GAAG,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,GAAG,QAAQ,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YACpE,OAAO,MAAM,IAAI,YAAY,IAAI,EAAE,CAAC;QACtC,CAAC;gBAAS,CAAC;YACT,EAAE,CAAC,KAAK,EAAE,CAAC;QACb,CAAC;IACH,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,QAAgB;QAC7B,uCAAuC;QACvC,MAAM,EAAE,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7E,MAAM,SAAS,GAAI,EAAgD,CAAC,MAAM,CAAC;QAC3E,MAAM,QAAQ,GAAG,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACjD,IAAI,KAAK,GAAG,KAAK,CAAC;QACjB,SAA8D,CAAC,KAAK,GAAG,CAAC,KAAa,EAAE,EAAE;YACxF,IAAI,KAAK,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,MAAM;gBAAE,OAAO,IAAI,CAAC;YAC7D,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC;QACzB,CAAC,CAAC;QACF,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,EAAE,CAAC,QAAQ,CAAC,GAAG,QAAQ,IAAI,CAAC,CAAC;YAC7C,KAAK,GAAG,IAAI,CAAC;YACb,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC;YAC7B,OAAO,MAAM,CAAC;QAChB,CAAC;gBAAS,CAAC;YACT,KAAK,GAAG,KAAK,CAAC;YACd,EAAE,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;IAED,KAAK,CAAC,WAAW,CACf,QAAgB,EAChB,OAA2C;QAE3C,MAAM,EAAE,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QAC7D,IAAI,CAAC;YACH,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACnB,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,KAAK,GAAG,CAAC,KAAK,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YAChF,IAAI,CAAC,GAAG,CAAC,+CAA+C,CAAC,CAAC;YAC1D,SAAS,CAAC;gBACR,MAAM,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;gBACnD,MAAM,MAAM,GAAG,GAAG;qBACf,KAAK,CAAC,GAAG,CAAC;qBACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC;qBAC7C,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;gBACtE,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;oBAAE,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC,CAAC;gBACjF,IAAI,CAAC,KAAK,CAAC,iCAAiC,CAAC,CAAC;YAChD,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,EAAE,CAAC,KAAK,EAAE,CAAC;QACb,CAAC;IACH,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,QAAgB,EAAE,YAAqB;QACnD,MAAM,EAAE,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QAC7D,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC;YAC1C,MAAM,MAAM,GAAG,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,GAAG,QAAQ,KAAK,IAAI,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YACnF,IAAI,CAAC,MAAM;gBAAE,OAAO,YAAY,CAAC;YACjC,OAAO,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,KAAK,CAAC;QAC5C,CAAC;gBAAS,CAAC;YACT,EAAE,CAAC,KAAK,EAAE,CAAC;QACb,CAAC;IACH,CAAC;CACF"}

package/dist/platform-client.d.ts

@@ -0,0 +1,64 @@
+import type { CatalogTemplate } from './capabilities.js';
+/**
+ * Thin client for the hosted platform's non-app-scoped routes (spec 18 §CLI
+ * contract). The `/v1/platform/*` routes are not app-scoped, so they bypass the
+ * per-app `@bemaestro/sdk` client (mirrors `apps/app/src/lib/maestro-api.ts`).
+ * The CLI adds no new backend routes — every call here already exists.
+ */
+export interface PlatformError {
+    code: string;
+    message: string;
+    traceId?: string;
+}
+export declare class PlatformRequestError extends Error {
+    readonly status: number;
+    readonly error: PlatformError;
+    constructor(status: number, error: PlatformError);
+}
+export interface OperatorSession {
+    accessToken: string;
+    refreshToken: string;
+    operator: {
+        id: string;
+        email: string;
+        name: string;
+    };
+}
+export interface CreatedApp {
+    id: string;
+    key: string;
+    name: string;
+    status: string;
+    schemaVersion: number;
+}
+export type FetchImpl = typeof fetch;
+interface PlatformClientOptions {
+    baseUrl: string;
+    fetchImpl?: FetchImpl;
+}
+export declare class PlatformClient {
+    private readonly baseUrl;
+    private readonly fetchImpl;
+    constructor(options: PlatformClientOptions);
+    private request;
+    login(email: string, password: string): Promise<OperatorSession>;
+    refresh(refreshToken: string): Promise<{
+        accessToken: string;
+        refreshToken: string;
+    }>;
+    logout(refreshToken: string): Promise<void>;
+    listTemplates(accessToken: string): Promise<CatalogTemplate[]>;
+    createApp(accessToken: string, input: {
+        key: string;
+        name: string;
+        templateKey?: string;
+        seed?: boolean;
+    }): Promise<CreatedApp>;
+    applyTemplate(accessToken: string, appKey: string, input: {
+        templateKey: string;
+        seed?: boolean;
+        onConflict?: 'abort' | 'skip';
+    }): Promise<unknown>;
+}
+export {};
+//# sourceMappingURL=platform-client.d.ts.map

package/dist/platform-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"platform-client.d.ts","sourceRoot":"","sources":["../src/platform-client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAEzD;;;;;GAKG;AAEH,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,qBAAa,oBAAqB,SAAQ,KAAK;IAE3C,QAAQ,CAAC,MAAM,EAAE,MAAM;IACvB,QAAQ,CAAC,KAAK,EAAE,aAAa;gBADpB,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,aAAa;CAKhC;AAED,MAAM,WAAW,eAAe;IAC9B,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;CACvD;AAED,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,MAAM,SAAS,GAAG,OAAO,KAAK,CAAC;AAErC,UAAU,qBAAqB;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,SAAS,CAAC;CACvB;AAYD,qBAAa,cAAc;IACzB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAY;gBAE1B,OAAO,EAAE,qBAAqB;YAK5B,OAAO;IAoBrB,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC;IAMhE,OAAO,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAE,CAAC;IAI/E,MAAM,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAM3C,aAAa,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC;IAWpE,SAAS,CACP,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,OAAO,CAAA;KAAE,GACzE,OAAO,CAAC,UAAU,CAAC;IAStB,aAAa,CACX,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,MAAM,EACd,KAAK,EAAE;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,OAAO,CAAC;QAAC,UAAU,CAAC,EAAE,OAAO,GAAG,MAAM,CAAA;KAAE,GAC5E,OAAO,CAAC,OAAO,CAAC;CAMpB"}