datavessel-cli 0.1.0

package/dist/errors.js

@@ -0,0 +1,70 @@
+/**
+ * Error types and backend-error mapping.
+ *
+ * The backend returns errors as `{ error: { code, message, statusCode,
+ * details } }` (see execute.controller.ts). We translate the codes the MCP
+ * server already special-cases into actionable, human-readable guidance so the
+ * CLI behaves consistently with the rest of the product.
+ */
+/** Process exit codes. Kept small and stable so scripts can branch on them. */
+export const ExitCode = {
+    OK: 0,
+    ERROR: 1,
+    USAGE: 2,
+    AUTH: 3,
+    QUOTA: 4,
+    NOT_CONNECTED: 5,
+};
+export class CliError extends Error {
+    exitCode;
+    hint;
+    constructor(message, exitCode = ExitCode.ERROR, hint) {
+        super(message);
+        this.name = 'CliError';
+        this.exitCode = exitCode;
+        this.hint = hint;
+    }
+}
+/**
+ * Map a backend error payload (and/or HTTP status) to a CliError with the
+ * right exit code and a helpful hint. Mirrors the handling in the MCP server's
+ * `execute_tool` so users get the same guidance everywhere.
+ */
+export function mapBackendError(status, body) {
+    const err = body?.error;
+    const code = err?.code;
+    const message = err?.message ?? `Backend request failed (HTTP ${status})`;
+    switch (code) {
+        case 'oauth_token_not_found':
+            return new CliError('No connection found for this provider.', ExitCode.NOT_CONNECTED, 'Connect your account in the web app first: https://app.datavessel.io/settings');
+        case 'oauth_token_refresh_failed':
+            return new CliError('Failed to refresh the OAuth token for this provider.', ExitCode.NOT_CONNECTED, 'Reconnect your account in the web app: https://app.datavessel.io/settings');
+        case 'rate_limit_exceeded': {
+            const d = err?.details ?? {};
+            const current = d.current ?? '?';
+            const limit = d.limit ?? '?';
+            const tier = d.tier ?? 'your current plan';
+            const end = d.billingPeriodEnd ? String(d.billingPeriodEnd) : '';
+            const lines = [
+                `API quota exceeded: ${current}/${limit} calls used this month on ${tier}.`,
+                'To continue you can:',
+                '  1. Upgrade your plan at https://app.datavessel.io/settings',
+                '  2. Contact sales at contact@datavessel.io for enterprise options',
+            ];
+            if (end)
+                lines.push(`  3. Wait until your quota resets on ${end}`);
+            return new CliError(lines.join('\n'), ExitCode.QUOTA);
+        }
+        case 'unauthorized':
+            return new CliError('Authentication failed or session expired.', ExitCode.AUTH, 'Run `datavessel login` to authenticate again.');
+    }
+    // Fall back to HTTP status when no recognised code is present.
+    if (status === 401) {
+        return new CliError('Authentication failed or session expired.', ExitCode.AUTH, 'Run `datavessel login` to authenticate again.');
+    }
+    if (status === 429) {
+        return new CliError('API quota exceeded.', ExitCode.QUOTA, 'Upgrade your plan at https://app.datavessel.io/settings');
+    }
+    return new CliError(code ? `Backend error (${code}): ${message}` : message, ExitCode.ERROR);
+}
+//# sourceMappingURL=errors.js.map

package/dist/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,+EAA+E;AAC/E,MAAM,CAAC,MAAM,QAAQ,GAAG;IACtB,EAAE,EAAE,CAAC;IACL,KAAK,EAAE,CAAC;IACR,KAAK,EAAE,CAAC;IACR,IAAI,EAAE,CAAC;IACP,KAAK,EAAE,CAAC;IACR,aAAa,EAAE,CAAC;CACR,CAAC;AAEX,MAAM,OAAO,QAAS,SAAQ,KAAK;IACxB,QAAQ,CAAS;IACjB,IAAI,CAAU;IAEvB,YAAY,OAAe,EAAE,WAAmB,QAAQ,CAAC,KAAK,EAAE,IAAa;QAC3E,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC;QACvB,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF;AASD;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAC7B,MAAc,EACd,IAA0C;IAE1C,MAAM,GAAG,GAAG,IAAI,EAAE,KAAK,CAAC;IACxB,MAAM,IAAI,GAAG,GAAG,EAAE,IAAI,CAAC;IACvB,MAAM,OAAO,GAAG,GAAG,EAAE,OAAO,IAAI,gCAAgC,MAAM,GAAG,CAAC;IAE1E,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,uBAAuB;YAC1B,OAAO,IAAI,QAAQ,CACjB,wCAAwC,EACxC,QAAQ,CAAC,aAAa,EACtB,+EAA+E,CAChF,CAAC;QACJ,KAAK,4BAA4B;YAC/B,OAAO,IAAI,QAAQ,CACjB,sDAAsD,EACtD,QAAQ,CAAC,aAAa,EACtB,2EAA2E,CAC5E,CAAC;QACJ,KAAK,qBAAqB,CAAC,CAAC,CAAC;YAC3B,MAAM,CAAC,GAAG,GAAG,EAAE,OAAO,IAAI,EAAE,CAAC;YAC7B,MAAM,OAAO,GAAG,CAAC,CAAC,OAAO,IAAI,GAAG,CAAC;YACjC,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,IAAI,GAAG,CAAC;YAC7B,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,IAAI,mBAAmB,CAAC;YAC3C,MAAM,GAAG,GAAG,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACjE,MAAM,KAAK,GAAG;gBACZ,uBAAuB,OAAO,IAAI,KAAK,6BAA6B,IAAI,GAAG;gBAC3E,sBAAsB;gBACtB,8DAA8D;gBAC9D,oEAAoE;aACrE,CAAC;YACF,IAAI,GAAG;gBAAE,KAAK,CAAC,IAAI,CAAC,wCAAwC,GAAG,EAAE,CAAC,CAAC;YACnE,OAAO,IAAI,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;QACxD,CAAC;QACD,KAAK,cAAc;YACjB,OAAO,IAAI,QAAQ,CACjB,2CAA2C,EAC3C,QAAQ,CAAC,IAAI,EACb,+CAA+C,CAChD,CAAC;IACN,CAAC;IAED,+DAA+D;IAC/D,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QACnB,OAAO,IAAI,QAAQ,CACjB,2CAA2C,EAC3C,QAAQ,CAAC,IAAI,EACb,+CAA+C,CAChD,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QACnB,OAAO,IAAI,QAAQ,CACjB,qBAAqB,EACrB,QAAQ,CAAC,KAAK,EACd,yDAAyD,CAC1D,CAAC;IACJ,CAAC;IAED,OAAO,IAAI,QAAQ,CACjB,IAAI,CAAC,CAAC,CAAC,kBAAkB,IAAI,MAAM,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,EACtD,QAAQ,CAAC,KAAK,CACf,CAAC;AACJ,CAAC"}

package/dist/index.js

@@ -0,0 +1,29 @@
+#!/usr/bin/env node
+/**
+ * CLI entry point. Parses argv and maps thrown errors to clean messages and
+ * stable exit codes (see errors.ts).
+ */
+import { buildProgram } from './cli.js';
+import { CliError } from './errors.js';
+import { errorLine, c } from './output.js';
+async function main() {
+    const program = buildProgram();
+    await program.parseAsync(process.argv);
+}
+main().catch((err) => {
+    if (err instanceof CliError) {
+        errorLine(err.message);
+        if (err.hint)
+            process.stderr.write(c.dim('  → ' + err.hint) + '\n');
+        process.exit(err.exitCode);
+    }
+    // Commander raises CommanderError for its own flows (help/version/parse).
+    // It carries an exitCode and has already written output; just honour it.
+    const maybe = err;
+    if (maybe && typeof maybe.exitCode === 'number' && maybe.code?.startsWith('commander.')) {
+        process.exit(maybe.exitCode);
+    }
+    errorLine(err instanceof Error ? err.message : String(err));
+    process.exit(1);
+});
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA;;;GAGG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AACxC,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACvC,OAAO,EAAE,SAAS,EAAE,CAAC,EAAE,MAAM,aAAa,CAAC;AAE3C,KAAK,UAAU,IAAI;IACjB,MAAM,OAAO,GAAG,YAAY,EAAE,CAAC;IAC/B,MAAM,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;AACzC,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;IAC5B,IAAI,GAAG,YAAY,QAAQ,EAAE,CAAC;QAC5B,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACvB,IAAI,GAAG,CAAC,IAAI;YAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;QACpE,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC7B,CAAC;IACD,0EAA0E;IAC1E,yEAAyE;IACzE,MAAM,KAAK,GAAG,GAA6D,CAAC;IAC5E,IAAI,KAAK,IAAI,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QACxF,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC/B,CAAC;IACD,SAAS,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/oauth.js

@@ -0,0 +1,153 @@
+/**
+ * Browser login via a localhost loopback handoff.
+ *
+ * Flow:
+ *   1. Start an HTTP server on a random 127.0.0.1 port.
+ *   2. Open the web app's `/cli-auth?port=…&state=…` page.
+ *   3. The user signs in with the normal Google flow; the page then redirects
+ *      the browser to `http://127.0.0.1:<port>/callback#<tokens>` where the
+ *      hash carries the Supabase session (access/refresh tokens + the public
+ *      supabase URL & anon key the CLI needs to self-refresh).
+ *   4. The loopback page posts the hash back to `/store`; we resolve it here.
+ *
+ * Tokens travel in the URL *fragment* (never sent to a server) and are then
+ * posted same-origin to the loopback, keeping them out of any logs. The random
+ * `state` is echoed back and verified to bind the response to this request.
+ */
+import { createServer } from 'node:http';
+import { randomUUID } from 'node:crypto';
+import { spawn } from 'node:child_process';
+import { CliError, ExitCode } from './errors.js';
+import { info, c } from './output.js';
+const LOOPBACK_HOST = '127.0.0.1';
+const DEFAULT_TIMEOUT_MS = 5 * 60 * 1000;
+export function buildAuthUrl(appUrl, port, state) {
+    const base = appUrl.replace(/\/+$/, '');
+    const u = new URL(`${base}/cli-auth`);
+    u.searchParams.set('port', String(port));
+    u.searchParams.set('state', state);
+    return u.toString();
+}
+/** Validate and shape the handoff payload posted back by the loopback page. */
+export function parseHandoff(data, expectedState) {
+    if (typeof data.state !== 'string' || data.state !== expectedState) {
+        throw new CliError('Login response failed state validation (possible CSRF).', ExitCode.AUTH);
+    }
+    const accessToken = str(data.access_token);
+    const refreshToken = str(data.refresh_token);
+    const supabaseUrl = str(data.supabase_url);
+    const anonKey = str(data.anon_key);
+    if (!accessToken || !refreshToken || !supabaseUrl || !anonKey) {
+        throw new CliError('Login response was missing required fields.', ExitCode.AUTH);
+    }
+    const expiresAt = Number(data.expires_at);
+    return {
+        type: 'oauth',
+        accessToken,
+        refreshToken,
+        supabaseUrl,
+        anonKey,
+        expiresAt: Number.isFinite(expiresAt)
+            ? expiresAt
+            : Math.floor(Date.now() / 1000) + 3600,
+    };
+}
+function str(v) {
+    return typeof v === 'string' && v.length > 0 ? v : undefined;
+}
+const SUCCESS_HTML = `<!doctype html><html><head><meta charset="utf-8"><title>datavessel CLI</title>
+<style>body{font-family:system-ui,sans-serif;max-width:32rem;margin:18vh auto;text-align:center;color:#111}
+.muted{color:#666}</style></head><body>
+<h2 id="msg">Finishing sign-in…</h2><p class="muted" id="sub">One moment.</p>
+<script>
+(async () => {
+  const params = new URLSearchParams(location.hash.slice(1));
+  const payload = Object.fromEntries(params.entries());
+  try {
+    const r = await fetch('/store', { method:'POST', headers:{'Content-Type':'application/json'}, body: JSON.stringify(payload) });
+    if (!r.ok) throw new Error(await r.text());
+    document.getElementById('msg').textContent = 'You are signed in ✓';
+    document.getElementById('sub').textContent = 'You can close this tab and return to the terminal.';
+  } catch (e) {
+    document.getElementById('msg').textContent = 'Sign-in failed';
+    document.getElementById('sub').textContent = String(e);
+  }
+})();
+</script></body></html>`;
+function readBody(stream) {
+    return new Promise((resolve) => {
+        let d = '';
+        stream.on('data', (c2) => (d += c2));
+        stream.on('end', () => resolve(d));
+    });
+}
+function openBrowser(url) {
+    const platform = process.platform;
+    const cmd = platform === 'darwin' ? 'open' : platform === 'win32' ? 'cmd' : 'xdg-open';
+    const args = platform === 'win32' ? ['/c', 'start', '', url] : [url];
+    try {
+        const child = spawn(cmd, args, { stdio: 'ignore', detached: true });
+        child.on('error', () => {
+            /* fall back to printed URL */
+        });
+        child.unref();
+    }
+    catch {
+        /* ignore; URL is printed regardless */
+    }
+}
+/** Run the full browser handoff and resolve with the captured OAuth session. */
+export function loginViaBrowser(opts) {
+    const state = randomUUID();
+    const timeoutMs = opts.timeoutMs ?? DEFAULT_TIMEOUT_MS;
+    return new Promise((resolve, reject) => {
+        let settled = false;
+        const finish = (fn) => {
+            if (settled)
+                return;
+            settled = true;
+            clearTimeout(timer);
+            server.close();
+            fn();
+        };
+        const server = createServer(async (req, res) => {
+            const url = req.url ?? '/';
+            if (req.method === 'GET' && url.startsWith('/callback')) {
+                res.writeHead(200, { 'Content-Type': 'text/html; charset=utf-8' });
+                res.end(SUCCESS_HTML);
+                return;
+            }
+            if (req.method === 'POST' && url.startsWith('/store')) {
+                try {
+                    const body = await readBody(req);
+                    const data = JSON.parse(body || '{}');
+                    const credential = parseHandoff(data, state);
+                    res.writeHead(200, { 'Content-Type': 'application/json' });
+                    res.end('{"ok":true}');
+                    finish(() => resolve(credential));
+                }
+                catch (err) {
+                    res.writeHead(400, { 'Content-Type': 'application/json' });
+                    res.end(JSON.stringify({ ok: false }));
+                    finish(() => reject(err));
+                }
+                return;
+            }
+            res.writeHead(404);
+            res.end();
+        });
+        const timer = setTimeout(() => {
+            finish(() => reject(new CliError('Timed out waiting for browser sign-in.', ExitCode.AUTH)));
+        }, timeoutMs);
+        server.on('error', (err) => finish(() => reject(new CliError(`Could not start local login server: ${err.message}`))));
+        server.listen(0, LOOPBACK_HOST, () => {
+            const { port } = server.address();
+            const authUrl = buildAuthUrl(opts.appUrl, port, state);
+            info(`Opening your browser to sign in…`);
+            info(`If it doesn't open, visit:\n  ${c.cyan(authUrl)}\n`);
+            if (opts.open !== false)
+                openBrowser(authUrl);
+        });
+    });
+}
+//# sourceMappingURL=oauth.js.map

package/dist/oauth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth.js","sourceRoot":"","sources":["../src/oauth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,YAAY,EAAe,MAAM,WAAW,CAAC;AACtD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAE3C,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAEjD,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,aAAa,CAAC;AAEtC,MAAM,aAAa,GAAG,WAAW,CAAC;AAClC,MAAM,kBAAkB,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAEzC,MAAM,UAAU,YAAY,CAAC,MAAc,EAAE,IAAY,EAAE,KAAa;IACtE,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACxC,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,IAAI,WAAW,CAAC,CAAC;IACtC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IACzC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACnC,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC;AACtB,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,YAAY,CAC1B,IAA6B,EAC7B,aAAqB;IAErB,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,IAAI,IAAI,CAAC,KAAK,KAAK,aAAa,EAAE,CAAC;QACnE,MAAM,IAAI,QAAQ,CAAC,yDAAyD,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC/F,CAAC;IACD,MAAM,WAAW,GAAG,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAC3C,MAAM,YAAY,GAAG,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAC7C,MAAM,WAAW,GAAG,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAC3C,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACnC,IAAI,CAAC,WAAW,IAAI,CAAC,YAAY,IAAI,CAAC,WAAW,IAAI,CAAC,OAAO,EAAE,CAAC;QAC9D,MAAM,IAAI,QAAQ,CAAC,6CAA6C,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;IACnF,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC1C,OAAO;QACL,IAAI,EAAE,OAAO;QACb,WAAW;QACX,YAAY;QACZ,WAAW;QACX,OAAO;QACP,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC;YACnC,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI;KACzC,CAAC;AACJ,CAAC;AAED,SAAS,GAAG,CAAC,CAAU;IACrB,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC/D,CAAC;AAED,MAAM,YAAY,GAAG;;;;;;;;;;;;;;;;;;wBAkBG,CAAC;AAEzB,SAAS,QAAQ,CAAC,MAA6B;IAC7C,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,IAAI,CAAC,GAAG,EAAE,CAAC;QACX,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QACrC,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,WAAW,CAAC,GAAW;IAC9B,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;IAClC,MAAM,GAAG,GAAG,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC;IACvF,MAAM,IAAI,GAAG,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACrE,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QACpE,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACrB,8BAA8B;QAChC,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,KAAK,EAAE,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,uCAAuC;IACzC,CAAC;AACH,CAAC;AAQD,gFAAgF;AAChF,MAAM,UAAU,eAAe,CAAC,IAAyB;IACvD,MAAM,KAAK,GAAG,UAAU,EAAE,CAAC;IAC3B,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,kBAAkB,CAAC;IAEvD,OAAO,IAAI,OAAO,CAAkB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACtD,IAAI,OAAO,GAAG,KAAK,CAAC;QAEpB,MAAM,MAAM,GAAG,CAAC,EAAc,EAAE,EAAE;YAChC,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,CAAC,KAAK,EAAE,CAAC;YACf,EAAE,EAAE,CAAC;QACP,CAAC,CAAC;QAEF,MAAM,MAAM,GAAW,YAAY,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;YACrD,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC;YAC3B,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;gBACxD,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,0BAA0B,EAAE,CAAC,CAAC;gBACnE,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;gBACtB,OAAO;YACT,CAAC;YACD,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACtD,IAAI,CAAC;oBACH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;oBACjC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,IAAI,CAA4B,CAAC;oBACjE,MAAM,UAAU,GAAG,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;oBAC7C,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;oBAC3D,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;oBACvB,MAAM,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC;gBACpC,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;oBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;oBACvC,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;gBAC5B,CAAC;gBACD,OAAO;YACT,CAAC;YACD,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YACnB,GAAG,CAAC,GAAG,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC;QAEH,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,MAAM,CAAC,GAAG,EAAE,CACV,MAAM,CAAC,IAAI,QAAQ,CAAC,wCAAwC,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAC9E,CAAC;QACJ,CAAC,EAAE,SAAS,CAAC,CAAC;QAEd,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CACzB,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,QAAQ,CAAC,uCAAuC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CACzF,CAAC;QAEF,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,aAAa,EAAE,GAAG,EAAE;YACnC,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,CAAC,OAAO,EAAiB,CAAC;YACjD,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;YACvD,IAAI,CAAC,kCAAkC,CAAC,CAAC;YACzC,IAAI,CAAC,iCAAiC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAC3D,IAAI,IAAI,CAAC,IAAI,KAAK,KAAK;gBAAE,WAAW,CAAC,OAAO,CAAC,CAAC;QAChD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/output.js

@@ -0,0 +1,54 @@
+/**
+ * Terminal output helpers: colours, tables, and structured printing.
+ *
+ * No runtime dependencies — a tiny ANSI helper that disables itself when output
+ * is not a TTY or when NO_COLOR is set (https://no-color.org).
+ */
+const colorEnabled = process.env.NO_COLOR === undefined &&
+    process.env.DATAVESSEL_NO_COLOR === undefined &&
+    process.stdout.isTTY === true;
+function wrap(code, close) {
+    return (s) => (colorEnabled ? `\x1b[${code}m${s}\x1b[${close}m` : s);
+}
+export const c = {
+    bold: wrap(1, 22),
+    dim: wrap(2, 22),
+    red: wrap(31, 39),
+    green: wrap(32, 39),
+    yellow: wrap(33, 39),
+    blue: wrap(34, 39),
+    cyan: wrap(36, 39),
+    gray: wrap(90, 39),
+};
+/** Visible width of a string, ignoring ANSI escape sequences. */
+function visibleWidth(s) {
+    // eslint-disable-next-line no-control-regex
+    return s.replace(/\x1b\[[0-9;]*m/g, '').length;
+}
+function pad(s, width) {
+    const diff = width - visibleWidth(s);
+    return diff > 0 ? s + ' '.repeat(diff) : s;
+}
+/** Render a simple left-aligned columnar table with a dim header row. */
+export function table(headers, rows) {
+    const widths = headers.map((h, i) => Math.max(visibleWidth(h), ...rows.map((r) => visibleWidth(r[i] ?? ''))));
+    const headerLine = headers.map((h, i) => c.dim(pad(h, widths[i]))).join('  ');
+    const body = rows.map((r) => r.map((cell, i) => pad(cell ?? '', widths[i])).join('  '));
+    return [headerLine, ...body].join('\n');
+}
+export function printJson(value) {
+    process.stdout.write(JSON.stringify(value, null, 2) + '\n');
+}
+export function info(msg) {
+    process.stderr.write(msg + '\n');
+}
+export function success(msg) {
+    process.stderr.write(c.green('✓ ') + msg + '\n');
+}
+export function warn(msg) {
+    process.stderr.write(c.yellow('! ') + msg + '\n');
+}
+export function errorLine(msg) {
+    process.stderr.write(c.red('✗ ') + msg + '\n');
+}
+//# sourceMappingURL=output.js.map

package/dist/output.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"output.js","sourceRoot":"","sources":["../src/output.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,MAAM,YAAY,GAChB,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,SAAS;IAClC,OAAO,CAAC,GAAG,CAAC,mBAAmB,KAAK,SAAS;IAC7C,OAAO,CAAC,MAAM,CAAC,KAAK,KAAK,IAAI,CAAC;AAEhC,SAAS,IAAI,CAAC,IAAY,EAAE,KAAa;IACvC,OAAO,CAAC,CAAS,EAAU,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACvF,CAAC;AAED,MAAM,CAAC,MAAM,CAAC,GAAG;IACf,IAAI,EAAE,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC;IACjB,GAAG,EAAE,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC;IAChB,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC;IACjB,KAAK,EAAE,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC;IACnB,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC;IACpB,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC;IAClB,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC;IAClB,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC;CACnB,CAAC;AAEF,iEAAiE;AACjE,SAAS,YAAY,CAAC,CAAS;IAC7B,4CAA4C;IAC5C,OAAO,CAAC,CAAC,OAAO,CAAC,iBAAiB,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC;AACjD,CAAC;AAED,SAAS,GAAG,CAAC,CAAS,EAAE,KAAa;IACnC,MAAM,IAAI,GAAG,KAAK,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC;IACrC,OAAO,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC7C,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,KAAK,CAAC,OAAiB,EAAE,IAAgB;IACvD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAClC,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CACxE,CAAC;IACF,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9E,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACxF,OAAO,CAAC,UAAU,EAAE,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1C,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,KAAc;IACtC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;AAC9D,CAAC;AAED,MAAM,UAAU,IAAI,CAAC,GAAW;IAC9B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC;AACnC,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,GAAW;IACjC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,GAAG,GAAG,IAAI,CAAC,CAAC;AACnD,CAAC;AAED,MAAM,UAAU,IAAI,CAAC,GAAW;IAC9B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,GAAG,GAAG,IAAI,CAAC,CAAC;AACpD,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,GAAW;IACnC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,GAAG,GAAG,IAAI,CAAC,CAAC;AACjD,CAAC"}

package/dist/prompt.js

@@ -0,0 +1,69 @@
+/**
+ * Minimal interactive prompts over stdin/stdout. Used only when the CLI needs
+ * input it wasn't given on the command line (e.g. pasting a token at login,
+ * confirming a write tool).
+ */
+import { createInterface } from 'node:readline';
+export function isInteractive() {
+    return process.stdin.isTTY === true && process.stdout.isTTY === true;
+}
+export async function prompt(question) {
+    const rl = createInterface({ input: process.stdin, output: process.stderr });
+    try {
+        return await new Promise((resolve) => rl.question(question, resolve));
+    }
+    finally {
+        rl.close();
+    }
+}
+/** Read a line without echoing it back (best-effort, for secrets). */
+export async function promptSecret(question) {
+    process.stderr.write(question);
+    const stdin = process.stdin;
+    const wasRaw = stdin.isRaw ?? false;
+    if (stdin.isTTY)
+        stdin.setRawMode(true);
+    return await new Promise((resolve) => {
+        let value = '';
+        const cleanup = () => {
+            stdin.removeListener('data', onData);
+            if (stdin.isTTY)
+                stdin.setRawMode(wasRaw);
+            stdin.pause();
+        };
+        const onData = (chunk) => {
+            for (const code of chunk) {
+                if (code === 0x0a || code === 0x0d) {
+                    // Enter (LF / CR)
+                    cleanup();
+                    process.stderr.write('\n');
+                    resolve(value);
+                    return;
+                }
+                else if (code === 0x03) {
+                    // Ctrl-C
+                    cleanup();
+                    process.stderr.write('\n');
+                    process.exit(130);
+                }
+                else if (code === 0x7f || code === 0x08) {
+                    // Backspace / Delete
+                    value = value.slice(0, -1);
+                }
+                else if (code >= 0x20) {
+                    value += String.fromCharCode(code);
+                }
+            }
+        };
+        stdin.resume();
+        stdin.on('data', onData);
+    });
+}
+export async function confirm(question, defaultYes = false) {
+    const suffix = defaultYes ? ' [Y/n] ' : ' [y/N] ';
+    const answer = (await prompt(question + suffix)).trim().toLowerCase();
+    if (answer === '')
+        return defaultYes;
+    return answer === 'y' || answer === 'yes';
+}
+//# sourceMappingURL=prompt.js.map

package/dist/prompt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompt.js","sourceRoot":"","sources":["../src/prompt.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAEhD,MAAM,UAAU,aAAa;IAC3B,OAAO,OAAO,CAAC,KAAK,CAAC,KAAK,KAAK,IAAI,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,KAAK,IAAI,CAAC;AACvE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,QAAgB;IAC3C,MAAM,EAAE,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAC7E,IAAI,CAAC;QACH,OAAO,MAAM,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;IAChF,CAAC;YAAS,CAAC;QACT,EAAE,CAAC,KAAK,EAAE,CAAC;IACb,CAAC;AACH,CAAC;AAED,sEAAsE;AACtE,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,QAAgB;IACjD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC/B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;IAC5B,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC;IACpC,IAAI,KAAK,CAAC,KAAK;QAAE,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IAExC,OAAO,MAAM,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,EAAE;QAC3C,IAAI,KAAK,GAAG,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,GAAG,EAAE;YACnB,KAAK,CAAC,cAAc,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YACrC,IAAI,KAAK,CAAC,KAAK;gBAAE,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;YAC1C,KAAK,CAAC,KAAK,EAAE,CAAC;QAChB,CAAC,CAAC;QACF,MAAM,MAAM,GAAG,CAAC,KAAa,EAAE,EAAE;YAC/B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;oBACnC,kBAAkB;oBAClB,OAAO,EAAE,CAAC;oBACV,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;oBAC3B,OAAO,CAAC,KAAK,CAAC,CAAC;oBACf,OAAO;gBACT,CAAC;qBAAM,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;oBACzB,SAAS;oBACT,OAAO,EAAE,CAAC;oBACV,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;oBAC3B,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBACpB,CAAC;qBAAM,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;oBAC1C,qBAAqB;oBACrB,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;gBAC7B,CAAC;qBAAM,IAAI,IAAI,IAAI,IAAI,EAAE,CAAC;oBACxB,KAAK,IAAI,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;gBACrC,CAAC;YACH,CAAC;QACH,CAAC,CAAC;QACF,KAAK,CAAC,MAAM,EAAE,CAAC;QACf,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC3B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,QAAgB,EAAE,UAAU,GAAG,KAAK;IAChE,MAAM,MAAM,GAAG,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;IAClD,MAAM,MAAM,GAAG,CAAC,MAAM,MAAM,CAAC,QAAQ,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACtE,IAAI,MAAM,KAAK,EAAE;QAAE,OAAO,UAAU,CAAC;IACrC,OAAO,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,KAAK,CAAC;AAC5C,CAAC"}

package/dist/schema.js

@@ -0,0 +1,154 @@
+/**
+ * JSON Schema → CLI flags.
+ *
+ * This is what makes the CLI self-updating: each tool's `inputSchema` (a JSON
+ * Schema object served by the backend) is turned into command-line options,
+ * help text, value coercion, and required-field validation. Adding a tool on
+ * the backend makes it appear here with no CLI code change.
+ */
+import { Option } from 'commander';
+import { CliError, ExitCode } from './errors.js';
+import { c } from './output.js';
+export function toKebab(name) {
+    return name
+        .replace(/_/g, '-')
+        .replace(/([A-Z]+)([A-Z][a-z])/g, '$1-$2') // HTTPServer -> HTTP-Server
+        .replace(/([a-z0-9])([A-Z])/g, '$1-$2') // propertyId -> property-Id
+        .replace(/[^a-zA-Z0-9-]/g, '-')
+        .toLowerCase()
+        .replace(/-+/g, '-')
+        .replace(/^-|-$/g, '');
+}
+function toCamel(flag) {
+    return flag.replace(/-([a-z0-9])/g, (_, ch) => ch.toUpperCase());
+}
+/** Pick a single primary type from a schema's `type` (which may be an array). */
+function primaryType(t) {
+    if (Array.isArray(t)) {
+        const real = t.find((x) => x !== 'null');
+        return (real ?? 'string');
+    }
+    return (t ?? 'string');
+}
+/** Turn an object input schema into an ordered list of parameter descriptors. */
+export function schemaToParams(input) {
+    const props = input?.properties ?? {};
+    const required = new Set(input?.required ?? []);
+    return Object.entries(props).map(([prop, schema]) => {
+        const flag = toKebab(prop);
+        const type = primaryType(schema.type);
+        return {
+            prop,
+            flag,
+            attr: toCamel(flag),
+            type,
+            itemType: type === 'array' ? primaryType(schema.items?.type) : 'string',
+            required: required.has(prop),
+            description: schema.description ?? '',
+            enum: schema.enum,
+            default: schema.default,
+        };
+    });
+}
+/** Register each descriptor as a commander option on the given command. */
+export function registerOptions(cmd, params) {
+    for (const p of params) {
+        const label = p.required ? `${p.description} ${c.dim('(required)')}` : p.description;
+        if (p.type === 'boolean') {
+            // Boolean flags get a negatable form so `--no-foo` can send false.
+            cmd.addOption(new Option(`--${p.flag}`, label || `Set ${p.prop}`));
+            cmd.addOption(new Option(`--no-${p.flag}`, `Set ${p.prop} to false`).hideHelp());
+            continue;
+        }
+        const placeholder = p.type === 'array' ? '<value...>' : `<${p.type}>`;
+        const opt = new Option(`--${p.flag} ${placeholder}`, label || `Set ${p.prop}`);
+        if (p.type === 'array') {
+            opt.argParser((val, prev = []) => [...prev, val]);
+        }
+        if (p.enum && p.type !== 'array')
+            opt.choices(p.enum.map(String));
+        cmd.addOption(opt);
+    }
+}
+function coerceScalar(raw, type, prop) {
+    switch (type) {
+        case 'integer': {
+            const n = Number(raw);
+            if (!Number.isInteger(n)) {
+                throw new CliError(`--${toKebab(prop)} must be an integer, got "${raw}"`, ExitCode.USAGE);
+            }
+            return n;
+        }
+        case 'number': {
+            const n = Number(raw);
+            if (Number.isNaN(n)) {
+                throw new CliError(`--${toKebab(prop)} must be a number, got "${raw}"`, ExitCode.USAGE);
+            }
+            return n;
+        }
+        case 'boolean':
+            return raw === 'true' || raw === '1';
+        case 'object':
+        case 'array':
+            try {
+                return JSON.parse(raw);
+            }
+            catch {
+                throw new CliError(`--${toKebab(prop)} must be valid JSON, got "${raw}"`, ExitCode.USAGE);
+            }
+        default:
+            return raw;
+    }
+}
+/**
+ * Collect coerced parameters from parsed commander options. `extra` holds
+ * values supplied via the generic escape hatches (`--param`, `--params-json`)
+ * and takes precedence so power users can always override.
+ */
+export function collectParams(params, opts, extra = {}) {
+    const out = { ...extra };
+    for (const p of params) {
+        if (p.prop in out)
+            continue; // escape-hatch override wins
+        const raw = opts[p.attr];
+        if (raw === undefined)
+            continue;
+        if (p.type === 'boolean') {
+            out[p.prop] = Boolean(raw);
+        }
+        else if (p.type === 'array') {
+            const arr = Array.isArray(raw) ? raw : [raw];
+            out[p.prop] = arr.map((v) => coerceScalar(String(v), p.itemType, p.prop));
+        }
+        else {
+            out[p.prop] = coerceScalar(String(raw), p.type, p.prop);
+        }
+    }
+    const missing = params.filter((p) => p.required && !(p.prop in out)).map((p) => `--${p.flag}`);
+    if (missing.length > 0) {
+        throw new CliError(`Missing required option(s): ${missing.join(', ')}`, ExitCode.USAGE);
+    }
+    return out;
+}
+/** Human-readable description of a tool's inputs, for `tools show`. */
+export function describeSchema(params) {
+    if (params.length === 0)
+        return c.dim('  (no parameters)');
+    return params
+        .map((p) => {
+        const type = p.type === 'array' ? `${p.itemType}[]` : p.type;
+        const req = p.required ? c.red('required') : c.dim('optional');
+        const head = `  ${c.cyan('--' + p.flag)} ${c.dim(type)}  ${req}`;
+        const lines = [head];
+        if (p.description)
+            lines.push(`      ${p.description}`);
+        if (p.enum)
+            lines.push(`      ${c.dim('choices:')} ${p.enum.map(String).join(', ')}`);
+        if (p.default !== undefined) {
+            lines.push(`      ${c.dim('default:')} ${JSON.stringify(p.default)}`);
+        }
+        return lines.join('\n');
+    })
+        .join('\n');
+}
+//# sourceMappingURL=schema.js.map

package/dist/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../src/schema.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAW,MAAM,EAAE,MAAM,WAAW,CAAC;AAC5C,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAAE,CAAC,EAAE,MAAM,aAAa,CAAC;AA+BhC,MAAM,UAAU,OAAO,CAAC,IAAY;IAClC,OAAO,IAAI;SACR,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC;SAClB,OAAO,CAAC,uBAAuB,EAAE,OAAO,CAAC,CAAC,4BAA4B;SACtE,OAAO,CAAC,oBAAoB,EAAE,OAAO,CAAC,CAAC,4BAA4B;SACnE,OAAO,CAAC,gBAAgB,EAAE,GAAG,CAAC;SAC9B,WAAW,EAAE;SACb,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;SACnB,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;AAC3B,CAAC;AAED,SAAS,OAAO,CAAC,IAAY;IAC3B,OAAO,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC,EAAE,EAAU,EAAE,EAAE,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;AAC3E,CAAC;AAED,iFAAiF;AACjF,SAAS,WAAW,CAAC,CAAqB;IACxC,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC;QACzC,OAAO,CAAC,IAAI,IAAI,QAAQ,CAAa,CAAC;IACxC,CAAC;IACD,OAAO,CAAC,CAAC,IAAI,QAAQ,CAAa,CAAC;AACrC,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,cAAc,CAAC,KAAsC;IACnE,MAAM,KAAK,GAAG,KAAK,EAAE,UAAU,IAAI,EAAE,CAAC;IACtC,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,KAAK,EAAE,QAAQ,IAAI,EAAE,CAAC,CAAC;IAChD,OAAO,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE;QAClD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAC3B,MAAM,IAAI,GAAG,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACtC,OAAO;YACL,IAAI;YACJ,IAAI;YACJ,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC;YACnB,IAAI;YACJ,QAAQ,EAAE,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ;YACvE,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC;YAC5B,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,EAAE;YACrC,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,OAAO,EAAE,MAAM,CAAC,OAAO;SACxB,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,eAAe,CAAC,GAAY,EAAE,MAAyB;IACrE,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,MAAM,KAAK,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC;QACrF,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YACzB,mEAAmE;YACnE,GAAG,CAAC,SAAS,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,KAAK,IAAI,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;YACnE,GAAG,CAAC,SAAS,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,EAAE,OAAO,CAAC,CAAC,IAAI,WAAW,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;YACjF,SAAS;QACX,CAAC;QACD,MAAM,WAAW,GAAG,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,GAAG,CAAC;QACtE,MAAM,GAAG,GAAG,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,IAAI,WAAW,EAAE,EAAE,KAAK,IAAI,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAC/E,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YACvB,GAAG,CAAC,SAAS,CAAC,CAAC,GAAW,EAAE,OAAiB,EAAE,EAAE,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;QACtE,CAAC;QACD,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO;YAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;QAClE,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,GAAW,EAAE,IAAc,EAAE,IAAY;IAC7D,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,SAAS,CAAC,CAAC,CAAC;YACf,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;YACtB,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;gBACzB,MAAM,IAAI,QAAQ,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC,6BAA6B,GAAG,GAAG,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;YAC5F,CAAC;YACD,OAAO,CAAC,CAAC;QACX,CAAC;QACD,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;YACtB,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;gBACpB,MAAM,IAAI,QAAQ,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC,2BAA2B,GAAG,GAAG,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;YAC1F,CAAC;YACD,OAAO,CAAC,CAAC;QACX,CAAC;QACD,KAAK,SAAS;YACZ,OAAO,GAAG,KAAK,MAAM,IAAI,GAAG,KAAK,GAAG,CAAC;QACvC,KAAK,QAAQ,CAAC;QACd,KAAK,OAAO;YACV,IAAI,CAAC;gBACH,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACzB,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,IAAI,QAAQ,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC,6BAA6B,GAAG,GAAG,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;YAC5F,CAAC;QACH;YACE,OAAO,GAAG,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAC3B,MAAyB,EACzB,IAA6B,EAC7B,QAAiC,EAAE;IAEnC,MAAM,GAAG,GAA4B,EAAE,GAAG,KAAK,EAAE,CAAC;IAElD,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,IAAI,CAAC,CAAC,IAAI,IAAI,GAAG;YAAE,SAAS,CAAC,6BAA6B;QAC1D,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACzB,IAAI,GAAG,KAAK,SAAS;YAAE,SAAS;QAEhC,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YACzB,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;QAC7B,CAAC;aAAM,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC9B,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;YAC7C,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QAC5E,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAC/F,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,QAAQ,CAAC,+BAA+B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC1F,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,cAAc,CAAC,MAAyB;IACtD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;IAC3D,OAAO,MAAM;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACT,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC7D,MAAM,GAAG,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC/D,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;QACjE,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,CAAC;QACrB,IAAI,CAAC,CAAC,WAAW;YAAE,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;QACxD,IAAI,CAAC,CAAC,IAAI;YAAE,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACtF,IAAI,CAAC,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YAC5B,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACxE,CAAC;QACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC,CAAC;SACD,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC"}

package/dist/session.js

@@ -0,0 +1,52 @@
+/**
+ * Supabase session refresh.
+ *
+ * The web app authenticates with Supabase (the backend's authorization
+ * server). Access tokens are short-lived (~1h), so the CLI refreshes them on
+ * its own using the stored refresh token. `supabaseUrl`/`anonKey` are captured
+ * during login (both are public values) so no secrets are baked into the CLI.
+ */
+import { CliError, ExitCode } from './errors.js';
+/** True when the access token is expired or within `skewSec` of expiring. */
+export function needsRefresh(cred, skewSec = 60) {
+    return Date.now() / 1000 >= cred.expiresAt - skewSec;
+}
+/**
+ * Exchange the refresh token for a fresh access token via Supabase GoTrue.
+ * Supabase rotates the refresh token, so the returned credential supersedes the
+ * old one and must be persisted.
+ */
+export async function refreshOAuth(cred) {
+    const url = `${cred.supabaseUrl.replace(/\/+$/, '')}/auth/v1/token?grant_type=refresh_token`;
+    let res;
+    try {
+        res = await fetch(url, {
+            method: 'POST',
+            headers: {
+                apikey: cred.anonKey,
+                Authorization: `Bearer ${cred.anonKey}`,
+                'Content-Type': 'application/json',
+            },
+            body: JSON.stringify({ refresh_token: cred.refreshToken }),
+        });
+    }
+    catch (err) {
+        const reason = err instanceof Error ? err.message : String(err);
+        throw new CliError(`Could not reach the auth server to refresh the session: ${reason}`);
+    }
+    if (!res.ok) {
+        throw new CliError('Your session has expired and could not be refreshed.', ExitCode.AUTH, 'Run `datavessel login` to sign in again.');
+    }
+    const body = (await res.json());
+    if (!body.access_token) {
+        throw new CliError('Auth server returned no access token on refresh.', ExitCode.AUTH);
+    }
+    const expiresAt = body.expires_at ?? Math.floor(Date.now() / 1000) + (body.expires_in ?? 3600);
+    return {
+        ...cred,
+        accessToken: body.access_token,
+        refreshToken: body.refresh_token ?? cred.refreshToken,
+        expiresAt,
+    };
+}
+//# sourceMappingURL=session.js.map

package/dist/session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.js","sourceRoot":"","sources":["../src/session.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAGjD,6EAA6E;AAC7E,MAAM,UAAU,YAAY,CAAC,IAAqB,EAAE,OAAO,GAAG,EAAE;IAC9D,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,IAAI,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC;AACvD,CAAC;AASD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IAAqB;IACtD,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,yCAAyC,CAAC;IAC7F,IAAI,GAAa,CAAC;IAClB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YACrB,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,MAAM,EAAE,IAAI,CAAC,OAAO;gBACpB,aAAa,EAAE,UAAU,IAAI,CAAC,OAAO,EAAE;gBACvC,cAAc,EAAE,kBAAkB;aACnC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,aAAa,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC;SAC3D,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,MAAM,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAChE,MAAM,IAAI,QAAQ,CAAC,2DAA2D,MAAM,EAAE,CAAC,CAAC;IAC1F,CAAC;IAED,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,QAAQ,CAChB,sDAAsD,EACtD,QAAQ,CAAC,IAAI,EACb,0CAA0C,CAC3C,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAwB,CAAC;IACvD,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;QACvB,MAAM,IAAI,QAAQ,CAAC,kDAAkD,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;IACxF,CAAC;IACD,MAAM,SAAS,GACb,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,CAAC;IAC/E,OAAO;QACL,GAAG,IAAI;QACP,WAAW,EAAE,IAAI,CAAC,YAAY;QAC9B,YAAY,EAAE,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,YAAY;QACrD,SAAS;KACV,CAAC;AACJ,CAAC"}