enpilink 1.0.2

package/dist/commands/create.d.ts

@@ -0,0 +1,9 @@
+import { Command, type Command as CommandLoadable, Help } from "@oclif/core";
+export default class Create extends Command {
+    static description: string;
+    static strict: boolean;
+    run(): Promise<void>;
+}
+export declare class EnpilinkHelp extends Help {
+    showCommandHelp(command: CommandLoadable.Loadable): Promise<void>;
+}

package/dist/commands/create.js

@@ -0,0 +1,30 @@
+import { Command, Help } from "@oclif/core";
+import spawn from "cross-spawn";
+function passthrough(args) {
+    const { status, error } = spawn.sync("npx", ["--yes", "create-enpilink@latest", ...args], { stdio: "inherit" });
+    if (error) {
+        console.error(error);
+        process.exit(1);
+    }
+    process.exit(status ?? 1);
+}
+export default class Create extends Command {
+    static description = "Scaffold a new enpilink project";
+    static strict = false;
+    async run() {
+        passthrough(this.argv);
+    }
+}
+// Registered as `oclif.helpClass` so that `enpilink create --help` forwards
+// to `create-enpilink --help` (single source of truth for the help text)
+// instead of rendering oclif's auto-generated help. All other commands fall
+// through to the default `Help` behaviour.
+export class EnpilinkHelp extends Help {
+    async showCommandHelp(command) {
+        if (command.id === "create") {
+            passthrough(["--help"]);
+        }
+        return super.showCommandHelp(command);
+    }
+}
+//# sourceMappingURL=create.js.map

package/dist/commands/create.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"create.js","sourceRoot":"","sources":["../../src/commands/create.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAmC,IAAI,EAAE,MAAM,aAAa,CAAC;AAC7E,OAAO,KAAK,MAAM,aAAa,CAAC;AAEhC,SAAS,WAAW,CAAC,IAAc;IACjC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC,IAAI,CAClC,KAAK,EACL,CAAC,OAAO,EAAE,wBAAwB,EAAE,GAAG,IAAI,CAAC,EAC5C,EAAE,KAAK,EAAE,SAAS,EAAE,CACrB,CAAC;IACF,IAAI,KAAK,EAAE,CAAC;QACV,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACrB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,OAAO,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC;AAC5B,CAAC;AAED,MAAM,CAAC,OAAO,OAAO,MAAO,SAAQ,OAAO;IACzC,MAAM,CAAU,WAAW,GAAG,iCAAiC,CAAC;IAChE,MAAM,CAAU,MAAM,GAAG,KAAK,CAAC;IAExB,KAAK,CAAC,GAAG;QACd,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzB,CAAC;;AAGH,4EAA4E;AAC5E,yEAAyE;AACzE,4EAA4E;AAC5E,2CAA2C;AAC3C,MAAM,OAAO,YAAa,SAAQ,IAAI;IAC3B,KAAK,CAAC,eAAe,CAC5B,OAAiC;QAEjC,IAAI,OAAO,CAAC,EAAE,KAAK,QAAQ,EAAE,CAAC;YAC5B,WAAW,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC1B,CAAC;QACD,OAAO,KAAK,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;IACxC,CAAC;CACF","sourcesContent":["import { Command, type Command as CommandLoadable, Help } from \"@oclif/core\";\nimport spawn from \"cross-spawn\";\n\nfunction passthrough(args: string[]): never {\n  const { status, error } = spawn.sync(\n    \"npx\",\n    [\"--yes\", \"create-enpilink@latest\", ...args],\n    { stdio: \"inherit\" },\n  );\n  if (error) {\n    console.error(error);\n    process.exit(1);\n  }\n  process.exit(status ?? 1);\n}\n\nexport default class Create extends Command {\n  static override description = \"Scaffold a new enpilink project\";\n  static override strict = false;\n\n  public async run(): Promise<void> {\n    passthrough(this.argv);\n  }\n}\n\n// Registered as `oclif.helpClass` so that `enpilink create --help` forwards\n// to `create-enpilink --help` (single source of truth for the help text)\n// instead of rendering oclif's auto-generated help. All other commands fall\n// through to the default `Help` behaviour.\nexport class EnpilinkHelp extends Help {\n  override async showCommandHelp(\n    command: CommandLoadable.Loadable,\n  ): Promise<void> {\n    if (command.id === \"create\") {\n      passthrough([\"--help\"]);\n    }\n    return super.showCommandHelp(command);\n  }\n}\n"]}

package/dist/commands/dev.d.ts

@@ -0,0 +1,13 @@
+import { Command } from "@oclif/core";
+export default class Dev extends Command {
+    static description: string;
+    static examples: string[];
+    static flags: {
+        port: import("@oclif/core/interfaces").OptionFlag<number | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        tunnel: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+        open: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+        verbose: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+        mock: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+    };
+    run(): Promise<void>;
+}

package/dist/commands/dev.js

@@ -0,0 +1,112 @@
+import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
+import { Command, Flags } from "@oclif/core";
+import { Box, render, Text } from "ink";
+import { resolvePort } from "../cli/detect-port.js";
+import { Header } from "../cli/header.js";
+import { resolveViewsDir } from "../cli/resolve-views-dir.js";
+import { startTunnelControlServer } from "../cli/tunnel-control-server.js";
+import { useMessages } from "../cli/use-messages.js";
+import { useNodemon } from "../cli/use-nodemon.js";
+import { useOpenBrowser } from "../cli/use-open-browser.js";
+import { useOpenTunnelBrowser } from "../cli/use-open-tunnel-browser.js";
+import { useTunnel } from "../cli/use-tunnel.js";
+import { useTypeScriptCheck } from "../cli/use-typescript-check.js";
+import { scanAndWriteViewsDts } from "../web/plugin/scan-views.js";
+export default class Dev extends Command {
+    static description = "Start development server";
+    static examples = ["enpilink"];
+    static flags = {
+        port: Flags.integer({
+            char: "p",
+            description: "Port to run the server on",
+            min: 1,
+        }),
+        tunnel: Flags.boolean({
+            description: "Open a public srv.us tunnel (account-free) for remote testing",
+            default: false,
+        }),
+        open: Flags.boolean({
+            description: "Open DevTools in the browser when the server is ready (off by default — pass --open or set ENPILINK_OPEN=true; avoids stacking browser tabs on restart)",
+            default: process.env.ENPILINK_OPEN === "true",
+            allowNo: true,
+        }),
+        verbose: Flags.boolean({
+            char: "v",
+            description: "Show tunnel logs",
+            default: false,
+        }),
+        mock: Flags.boolean({
+            description: "Seed the dashboard with deterministic DEMO analytics (no real traffic). Implies analytics-on + in-memory storage for this dev session so the Dashboard renders full for demos/screenshots. Opt-in; off by default.",
+            default: false,
+        }),
+    };
+    async run() {
+        const { flags } = await this.parse(Dev);
+        // Generate .enpilink/views.d.ts before render() spawns `tsc --noEmit
+        // --watch`. Vite's plugin config hook writes the same file when nodemon
+        // boots the server, but tsc starts in parallel — if .enpilink/ doesn't
+        // exist at tsc startup, its watcher never picks up the late-created file
+        // and the dev UI reports phantom TS errors forever.
+        const root = process.cwd();
+        try {
+            scanAndWriteViewsDts(root, await resolveViewsDir(root));
+        }
+        catch {
+            // Best-effort: if the scan fails (e.g. broken vite config, duplicate
+            // view names) tsc may show phantom errors, but the dev server should
+            // still start so the developer can fix the underlying issue.
+        }
+        const { port, fallback, envWarning } = await resolvePort(flags.port);
+        if (envWarning) {
+            this.warn(envWarning);
+        }
+        const { port: controlPort, manager: tunnelManager, close: closeTunnelControl, } = await startTunnelControlServer(() => port);
+        const env = {
+            ...process.env,
+            __PORT: String(port),
+            __TUNNEL_CONTROL_PORT: String(controlPort),
+            // `--mock`: force analytics-on + in-memory storage for this dev session
+            // and trigger the deterministic demo seed in the spawned server process.
+            // These are scoped to the child env so a normal run is unaffected.
+            ...(flags.mock
+                ? {
+                    ENPILINK_MOCK: "1",
+                    ENPILINK_ANALYTICS: "1",
+                    ENPILINK_STORAGE: "memory",
+                }
+                : {}),
+        };
+        const App = () => {
+            const tsErrors = useTypeScriptCheck();
+            const [messages, pushMessage] = useMessages();
+            useNodemon(env, pushMessage);
+            useOpenBrowser(port, flags.open && !flags.tunnel);
+            const tunnelState = useTunnel(port, pushMessage, flags.verbose, flags.tunnel);
+            useOpenTunnelBrowser(tunnelState, flags.open && flags.tunnel);
+            return (_jsxs(Box, { flexDirection: "column", padding: 1, marginLeft: 1, children: [_jsx(Header, { version: this.config.version }), _jsxs(Box, { children: [_jsxs(Text, { children: ["\uD83C\uDFE0", "  "] }), fallback ? (_jsx(Text, { color: "yellow", children: "3000 in use, running on " })) : (_jsx(Text, { children: "Running on " })), _jsx(Text, { color: "green", children: `http://localhost:${port}/mcp` })] }), _jsxs(Box, { marginBottom: 1, children: [_jsxs(Text, { color: "#20a832", children: ["\u2192", "  "] }), _jsxs(Text, { color: "white", bold: true, children: ["Test locally with the Console:", " "] }), _jsx(Text, { color: "green", children: `http://localhost:${port}/` })] }), tunnelState.status === "idle" && (_jsxs(Box, { children: [_jsxs(Text, { children: ["\uD83C\uDF0D", "  "] }), _jsx(Text, { children: "Get a public URL for remote testing with " }), _jsx(Text, { color: "cyan", bold: true, children: "--tunnel" }), _jsx(Text, { children: "." })] })), tunnelState.status === "starting" && (_jsxs(Box, { children: [_jsxs(Text, { children: ["\uD83C\uDF0D", "  "] }), _jsx(Text, { color: "yellow", children: tunnelState.message })] })), tunnelState.status === "reconnecting" && (_jsxs(Box, { children: [_jsxs(Text, { children: ["\uD83C\uDF0D", "  "] }), _jsx(Text, { color: "yellow", children: tunnelState.message })] })), tunnelState.status === "connected" && (_jsxs(Box, { flexDirection: "column", marginBottom: 1, children: [_jsxs(Box, { children: [_jsxs(Text, { children: ["\uD83C\uDF0D", "  "] }), _jsx(Text, { children: "Exposed on " }), _jsx(Text, { color: "green", children: `${tunnelState.url}/mcp` })] }), _jsxs(Box, { children: [_jsxs(Text, { children: ["\uD83D\uDD0C", "  "] }), _jsx(Text, { color: "white", children: "Connect in Claude \u2192 Settings \u2192 Connectors \u2192 Custom connector" })] })] })), tunnelState.status === "error" && (_jsxs(Box, { flexDirection: "column", marginBottom: 1, children: [_jsxs(Box, { children: [_jsxs(Text, { children: ["\uD83C\uDF0D", "  "] }), _jsxs(Text, { color: "red", children: ["Cannot open tunnel: ", tunnelState.message] })] }), _jsxs(Box, { children: [_jsxs(Text, { color: "#20a832", children: ["\u2192", "  "] }), _jsx(Text, { color: "red", children: `Try again with: enpilink dev --tunnel -p ${port}` })] })] })), flags.mock && (_jsxs(Box, { marginBottom: 1, children: [_jsxs(Text, { children: ["\uD83C\uDFAD", "  "] }), _jsxs(Text, { color: "magenta", bold: true, children: ["Mock mode:", " "] }), _jsx(Text, { children: "dashboard seeded with deterministic demo analytics." })] })), _jsxs(Box, { children: [_jsxs(Text, { children: ["\uD83D\uDEDF", "  "] }), _jsx(Text, { children: "Need help? Reach us on " }), _jsx(Text, { color: "white", underline: true, children: "https://enpitech.dev" })] }), tsErrors.length > 0 && (_jsxs(Box, { marginTop: 1, flexDirection: "column", children: [_jsx(Text, { color: "red", bold: true, children: "\u26A0\uFE0F TypeScript errors found:" }), tsErrors.map((error) => (_jsxs(Box, { marginLeft: 2, flexDirection: "column", children: [_jsxs(Box, { children: [_jsx(Text, { color: "white", children: error.file }), _jsxs(Text, { color: "grey", children: ["(", error.line, ",", error.col, "):", " "] })] }), _jsx(Box, { marginLeft: 2, children: _jsx(Text, { color: "red", children: error.message }) })] }, `${error.file}:${error.line}:${error.col}`)))] })), messages.length > 0 && (_jsxs(Box, { marginTop: 1, flexDirection: "column", children: [_jsx(Text, { color: "white", bold: true, children: "Logs:" }), messages.map((message) => (_jsx(Box, { marginLeft: 2, children: message.type === "restart" ? (_jsxs(_Fragment, { children: [_jsxs(Text, { color: "green", children: ["\u2713", "  "] }), _jsx(Text, { color: "white", children: message.text })] })) : message.type === "error" ? (_jsx(Text, { color: "red", children: message.text })) : (_jsx(Text, { children: message.text })) }, message.id)))] }))] }));
+        };
+        // Note: `exitOnCtrlC: false` because we own SIGINT below to guarantee
+        // the tunnel subprocess gets killed before we exit. If anything ever calls `useInput` or
+        // puts stdin into raw mode, also wire an explicit `\x03` keypress to the
+        // shutdown function — Ink will otherwise swallow Ctrl-C without ever
+        // delivering SIGINT.
+        const ink = render(_jsx(App, {}), { exitOnCtrlC: false, patchConsole: true });
+        // Synchronous-first shutdown: kill the tunnel subprocess up front so we
+        // can't leave it orphaned even if another SIGINT listener (e.g. nodemon's)
+        // exits the process before our async cleanup completes.
+        const shutdown = (code) => () => {
+            tunnelManager.stop();
+            void closeTunnelControl()
+                .catch((err) => {
+                console.error("Failed to close tunnel control server", err);
+            })
+                .finally(() => {
+                ink.unmount();
+                process.exit(code);
+            });
+        };
+        process.once("SIGINT", shutdown(130));
+        process.once("SIGTERM", shutdown(143));
+    }
+}
+//# sourceMappingURL=dev.js.map

package/dist/commands/dev.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dev.js","sourceRoot":"","sources":["../../src/commands/dev.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,CAAC;AACxC,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC1C,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAC9D,OAAO,EAAE,wBAAwB,EAAE,MAAM,iCAAiC,CAAC;AAC3E,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EAAE,oBAAoB,EAAE,MAAM,mCAAmC,CAAC;AACzE,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AAEnE,MAAM,CAAC,OAAO,OAAO,GAAI,SAAQ,OAAO;IACtC,MAAM,CAAU,WAAW,GAAG,0BAA0B,CAAC;IACzD,MAAM,CAAU,QAAQ,GAAG,CAAC,UAAU,CAAC,CAAC;IACxC,MAAM,CAAU,KAAK,GAAG;QACtB,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC;YAClB,IAAI,EAAE,GAAG;YACT,WAAW,EAAE,2BAA2B;YACxC,GAAG,EAAE,CAAC;SACP,CAAC;QACF,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC;YACpB,WAAW,EACT,+DAA+D;YACjE,OAAO,EAAE,KAAK;SACf,CAAC;QACF,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC;YAClB,WAAW,EACT,yJAAyJ;YAC3J,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,aAAa,KAAK,MAAM;YAC7C,OAAO,EAAE,IAAI;SACd,CAAC;QACF,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC;YACrB,IAAI,EAAE,GAAG;YACT,WAAW,EAAE,kBAAkB;YAC/B,OAAO,EAAE,KAAK;SACf,CAAC;QACF,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC;YAClB,WAAW,EACT,oNAAoN;YACtN,OAAO,EAAE,KAAK;SACf,CAAC;KACH,CAAC;IAEK,KAAK,CAAC,GAAG;QACd,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAExC,qEAAqE;QACrE,wEAAwE;QACxE,uEAAuE;QACvE,yEAAyE;QACzE,oDAAoD;QACpD,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QAC3B,IAAI,CAAC;YACH,oBAAoB,CAAC,IAAI,EAAE,MAAM,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC;QAC1D,CAAC;QAAC,MAAM,CAAC;YACP,qEAAqE;YACrE,qEAAqE;YACrE,6DAA6D;QAC/D,CAAC;QAED,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,MAAM,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACrE,IAAI,UAAU,EAAE,CAAC;YACf,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACxB,CAAC;QAED,MAAM,EACJ,IAAI,EAAE,WAAW,EACjB,OAAO,EAAE,aAAa,EACtB,KAAK,EAAE,kBAAkB,GAC1B,GAAG,MAAM,wBAAwB,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QAE/C,MAAM,GAAG,GAAG;YACV,GAAG,OAAO,CAAC,GAAG;YACd,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC;YACpB,qBAAqB,EAAE,MAAM,CAAC,WAAW,CAAC;YAC1C,wEAAwE;YACxE,yEAAyE;YACzE,mEAAmE;YACnE,GAAG,CAAC,KAAK,CAAC,IAAI;gBACZ,CAAC,CAAC;oBACE,aAAa,EAAE,GAAG;oBAClB,kBAAkB,EAAE,GAAG;oBACvB,gBAAgB,EAAE,QAAQ;iBAC3B;gBACH,CAAC,CAAC,EAAE,CAAC;SACR,CAAC;QAEF,MAAM,GAAG,GAAG,GAAG,EAAE;YACf,MAAM,QAAQ,GAAG,kBAAkB,EAAE,CAAC;YACtC,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC,GAAG,WAAW,EAAE,CAAC;YAC9C,UAAU,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;YAC7B,cAAc,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAClD,MAAM,WAAW,GAAG,SAAS,CAC3B,IAAI,EACJ,WAAW,EACX,KAAK,CAAC,OAAO,EACb,KAAK,CAAC,MAAM,CACb,CAAC;YACF,oBAAoB,CAAC,WAAW,EAAE,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC;YAE9D,OAAO,CACL,MAAC,GAAG,IAAC,aAAa,EAAC,QAAQ,EAAC,OAAO,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,aACnD,KAAC,MAAM,IAAC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,GAAI,EAExC,MAAC,GAAG,eACF,MAAC,IAAI,+BAAI,IAAI,IAAQ,EACpB,QAAQ,CAAC,CAAC,CAAC,CACV,KAAC,IAAI,IAAC,KAAK,EAAC,QAAQ,yCAAgC,CACrD,CAAC,CAAC,CAAC,CACF,KAAC,IAAI,8BAAmB,CACzB,EACD,KAAC,IAAI,IAAC,KAAK,EAAC,OAAO,YAAE,oBAAoB,IAAI,MAAM,GAAQ,IACvD,EACN,MAAC,GAAG,IAAC,YAAY,EAAE,CAAC,aAClB,MAAC,IAAI,IAAC,KAAK,EAAC,SAAS,uBAAG,IAAI,IAAQ,EACpC,MAAC,IAAI,IAAC,KAAK,EAAC,OAAO,EAAC,IAAI,qDACS,GAAG,IAC7B,EACP,KAAC,IAAI,IAAC,KAAK,EAAC,OAAO,YAAE,oBAAoB,IAAI,GAAG,GAAQ,IACpD,EAEL,WAAW,CAAC,MAAM,KAAK,MAAM,IAAI,CAChC,MAAC,GAAG,eACF,MAAC,IAAI,+BAAI,IAAI,IAAQ,EACrB,KAAC,IAAI,4DAAiD,EACtD,KAAC,IAAI,IAAC,KAAK,EAAC,MAAM,EAAC,IAAI,+BAEhB,EACP,KAAC,IAAI,oBAAS,IACV,CACP,EACA,WAAW,CAAC,MAAM,KAAK,UAAU,IAAI,CACpC,MAAC,GAAG,eACF,MAAC,IAAI,+BAAI,IAAI,IAAQ,EACrB,KAAC,IAAI,IAAC,KAAK,EAAC,QAAQ,YAAE,WAAW,CAAC,OAAO,GAAQ,IAC7C,CACP,EACA,WAAW,CAAC,MAAM,KAAK,cAAc,IAAI,CACxC,MAAC,GAAG,eACF,MAAC,IAAI,+BAAI,IAAI,IAAQ,EACrB,KAAC,IAAI,IAAC,KAAK,EAAC,QAAQ,YAAE,WAAW,CAAC,OAAO,GAAQ,IAC7C,CACP,EACA,WAAW,CAAC,MAAM,KAAK,WAAW,IAAI,CACrC,MAAC,GAAG,IAAC,aAAa,EAAC,QAAQ,EAAC,YAAY,EAAE,CAAC,aACzC,MAAC,GAAG,eACF,MAAC,IAAI,+BAAI,IAAI,IAAQ,EACrB,KAAC,IAAI,8BAAmB,EACxB,KAAC,IAAI,IAAC,KAAK,EAAC,OAAO,YAAE,GAAG,WAAW,CAAC,GAAG,MAAM,GAAQ,IACjD,EACN,MAAC,GAAG,eACF,MAAC,IAAI,+BAAI,IAAI,IAAQ,EACrB,KAAC,IAAI,IAAC,KAAK,EAAC,OAAO,4FAEZ,IACH,IACF,CACP,EACA,WAAW,CAAC,MAAM,KAAK,OAAO,IAAI,CACjC,MAAC,GAAG,IAAC,aAAa,EAAC,QAAQ,EAAC,YAAY,EAAE,CAAC,aACzC,MAAC,GAAG,eACF,MAAC,IAAI,+BAAI,IAAI,IAAQ,EACrB,MAAC,IAAI,IAAC,KAAK,EAAC,KAAK,qCACM,WAAW,CAAC,OAAO,IACnC,IACH,EACN,MAAC,GAAG,eACF,MAAC,IAAI,IAAC,KAAK,EAAC,SAAS,uBAAG,IAAI,IAAQ,EACpC,KAAC,IAAI,IAAC,KAAK,EAAC,KAAK,YAAE,4CAA4C,IAAI,EAAE,GAAQ,IACzE,IACF,CACP,EAEA,KAAK,CAAC,IAAI,IAAI,CACb,MAAC,GAAG,IAAC,YAAY,EAAE,CAAC,aAClB,MAAC,IAAI,+BAAI,IAAI,IAAQ,EACrB,MAAC,IAAI,IAAC,KAAK,EAAC,SAAS,EAAC,IAAI,iCACb,GAAG,IACT,EACP,KAAC,IAAI,sEAA2D,IAC5D,CACP,EAED,MAAC,GAAG,eACF,MAAC,IAAI,+BAAI,IAAI,IAAQ,EACrB,KAAC,IAAI,0CAA+B,EACpC,KAAC,IAAI,IAAC,KAAK,EAAC,OAAO,EAAC,SAAS,2CAEtB,IACH,EAEL,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,CACtB,MAAC,GAAG,IAAC,SAAS,EAAE,CAAC,EAAE,aAAa,EAAC,QAAQ,aACvC,KAAC,IAAI,IAAC,KAAK,EAAC,KAAK,EAAC,IAAI,4DAEf,EACN,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CACvB,MAAC,GAAG,IAEF,UAAU,EAAE,CAAC,EACb,aAAa,EAAC,QAAQ,aAEtB,MAAC,GAAG,eACF,KAAC,IAAI,IAAC,KAAK,EAAC,OAAO,YAAE,KAAK,CAAC,IAAI,GAAQ,EACvC,MAAC,IAAI,IAAC,KAAK,EAAC,MAAM,kBACd,KAAK,CAAC,IAAI,OAAG,KAAK,CAAC,GAAG,QAAI,GAAG,IAC1B,IACH,EACN,KAAC,GAAG,IAAC,UAAU,EAAE,CAAC,YAChB,KAAC,IAAI,IAAC,KAAK,EAAC,KAAK,YAAE,KAAK,CAAC,OAAO,GAAQ,GACpC,KAZD,GAAG,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,GAAG,EAAE,CAa3C,CACP,CAAC,IACE,CACP,EACA,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,CACtB,MAAC,GAAG,IAAC,SAAS,EAAE,CAAC,EAAE,aAAa,EAAC,QAAQ,aACvC,KAAC,IAAI,IAAC,KAAK,EAAC,OAAO,EAAC,IAAI,4BAEjB,EACN,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CACzB,KAAC,GAAG,IAAkB,UAAU,EAAE,CAAC,YAChC,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,CAC5B,8BACE,MAAC,IAAI,IAAC,KAAK,EAAC,OAAO,uBAAG,IAAI,IAAQ,EAClC,KAAC,IAAI,IAAC,KAAK,EAAC,OAAO,YAAE,OAAO,CAAC,IAAI,GAAQ,IACxC,CACJ,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,CAC7B,KAAC,IAAI,IAAC,KAAK,EAAC,KAAK,YAAE,OAAO,CAAC,IAAI,GAAQ,CACxC,CAAC,CAAC,CAAC,CACF,KAAC,IAAI,cAAE,OAAO,CAAC,IAAI,GAAQ,CAC5B,IAVO,OAAO,CAAC,EAAE,CAWd,CACP,CAAC,IACE,CACP,IACG,CACP,CAAC;QACJ,CAAC,CAAC;QAEF,sEAAsE;QACtE,yFAAyF;QACzF,yEAAyE;QACzE,qEAAqE;QACrE,qBAAqB;QACrB,MAAM,GAAG,GAAG,MAAM,CAAC,KAAC,GAAG,KAAG,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;QAExE,wEAAwE;QACxE,2EAA2E;QAC3E,wDAAwD;QACxD,MAAM,QAAQ,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,GAAG,EAAE;YACtC,aAAa,CAAC,IAAI,EAAE,CAAC;YACrB,KAAK,kBAAkB,EAAE;iBACtB,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;gBACb,OAAO,CAAC,KAAK,CAAC,uCAAuC,EAAE,GAAG,CAAC,CAAC;YAC9D,CAAC,CAAC;iBACD,OAAO,CAAC,GAAG,EAAE;gBACZ,GAAG,CAAC,OAAO,EAAE,CAAC;gBACd,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACrB,CAAC,CAAC,CAAC;QACP,CAAC,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;QACtC,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;IACzC,CAAC","sourcesContent":["import { Command, Flags } from \"@oclif/core\";\nimport { Box, render, Text } from \"ink\";\nimport { resolvePort } from \"../cli/detect-port.js\";\nimport { Header } from \"../cli/header.js\";\nimport { resolveViewsDir } from \"../cli/resolve-views-dir.js\";\nimport { startTunnelControlServer } from \"../cli/tunnel-control-server.js\";\nimport { useMessages } from \"../cli/use-messages.js\";\nimport { useNodemon } from \"../cli/use-nodemon.js\";\nimport { useOpenBrowser } from \"../cli/use-open-browser.js\";\nimport { useOpenTunnelBrowser } from \"../cli/use-open-tunnel-browser.js\";\nimport { useTunnel } from \"../cli/use-tunnel.js\";\nimport { useTypeScriptCheck } from \"../cli/use-typescript-check.js\";\nimport { scanAndWriteViewsDts } from \"../web/plugin/scan-views.js\";\n\nexport default class Dev extends Command {\n  static override description = \"Start development server\";\n  static override examples = [\"enpilink\"];\n  static override flags = {\n    port: Flags.integer({\n      char: \"p\",\n      description: \"Port to run the server on\",\n      min: 1,\n    }),\n    tunnel: Flags.boolean({\n      description:\n        \"Open a public srv.us tunnel (account-free) for remote testing\",\n      default: false,\n    }),\n    open: Flags.boolean({\n      description:\n        \"Open DevTools in the browser when the server is ready (off by default — pass --open or set ENPILINK_OPEN=true; avoids stacking browser tabs on restart)\",\n      default: process.env.ENPILINK_OPEN === \"true\",\n      allowNo: true,\n    }),\n    verbose: Flags.boolean({\n      char: \"v\",\n      description: \"Show tunnel logs\",\n      default: false,\n    }),\n    mock: Flags.boolean({\n      description:\n        \"Seed the dashboard with deterministic DEMO analytics (no real traffic). Implies analytics-on + in-memory storage for this dev session so the Dashboard renders full for demos/screenshots. Opt-in; off by default.\",\n      default: false,\n    }),\n  };\n\n  public async run(): Promise<void> {\n    const { flags } = await this.parse(Dev);\n\n    // Generate .enpilink/views.d.ts before render() spawns `tsc --noEmit\n    // --watch`. Vite's plugin config hook writes the same file when nodemon\n    // boots the server, but tsc starts in parallel — if .enpilink/ doesn't\n    // exist at tsc startup, its watcher never picks up the late-created file\n    // and the dev UI reports phantom TS errors forever.\n    const root = process.cwd();\n    try {\n      scanAndWriteViewsDts(root, await resolveViewsDir(root));\n    } catch {\n      // Best-effort: if the scan fails (e.g. broken vite config, duplicate\n      // view names) tsc may show phantom errors, but the dev server should\n      // still start so the developer can fix the underlying issue.\n    }\n\n    const { port, fallback, envWarning } = await resolvePort(flags.port);\n    if (envWarning) {\n      this.warn(envWarning);\n    }\n\n    const {\n      port: controlPort,\n      manager: tunnelManager,\n      close: closeTunnelControl,\n    } = await startTunnelControlServer(() => port);\n\n    const env = {\n      ...process.env,\n      __PORT: String(port),\n      __TUNNEL_CONTROL_PORT: String(controlPort),\n      // `--mock`: force analytics-on + in-memory storage for this dev session\n      // and trigger the deterministic demo seed in the spawned server process.\n      // These are scoped to the child env so a normal run is unaffected.\n      ...(flags.mock\n        ? {\n            ENPILINK_MOCK: \"1\",\n            ENPILINK_ANALYTICS: \"1\",\n            ENPILINK_STORAGE: \"memory\",\n          }\n        : {}),\n    };\n\n    const App = () => {\n      const tsErrors = useTypeScriptCheck();\n      const [messages, pushMessage] = useMessages();\n      useNodemon(env, pushMessage);\n      useOpenBrowser(port, flags.open && !flags.tunnel);\n      const tunnelState = useTunnel(\n        port,\n        pushMessage,\n        flags.verbose,\n        flags.tunnel,\n      );\n      useOpenTunnelBrowser(tunnelState, flags.open && flags.tunnel);\n\n      return (\n        <Box flexDirection=\"column\" padding={1} marginLeft={1}>\n          <Header version={this.config.version} />\n\n          <Box>\n            <Text>🏠{\"  \"}</Text>\n            {fallback ? (\n              <Text color=\"yellow\">3000 in use, running on </Text>\n            ) : (\n              <Text>Running on </Text>\n            )}\n            <Text color=\"green\">{`http://localhost:${port}/mcp`}</Text>\n          </Box>\n          <Box marginBottom={1}>\n            <Text color=\"#20a832\">→{\"  \"}</Text>\n            <Text color=\"white\" bold>\n              Test locally with the Console:{\" \"}\n            </Text>\n            <Text color=\"green\">{`http://localhost:${port}/`}</Text>\n          </Box>\n\n          {tunnelState.status === \"idle\" && (\n            <Box>\n              <Text>🌍{\"  \"}</Text>\n              <Text>Get a public URL for remote testing with </Text>\n              <Text color=\"cyan\" bold>\n                --tunnel\n              </Text>\n              <Text>.</Text>\n            </Box>\n          )}\n          {tunnelState.status === \"starting\" && (\n            <Box>\n              <Text>🌍{\"  \"}</Text>\n              <Text color=\"yellow\">{tunnelState.message}</Text>\n            </Box>\n          )}\n          {tunnelState.status === \"reconnecting\" && (\n            <Box>\n              <Text>🌍{\"  \"}</Text>\n              <Text color=\"yellow\">{tunnelState.message}</Text>\n            </Box>\n          )}\n          {tunnelState.status === \"connected\" && (\n            <Box flexDirection=\"column\" marginBottom={1}>\n              <Box>\n                <Text>🌍{\"  \"}</Text>\n                <Text>Exposed on </Text>\n                <Text color=\"green\">{`${tunnelState.url}/mcp`}</Text>\n              </Box>\n              <Box>\n                <Text>🔌{\"  \"}</Text>\n                <Text color=\"white\">\n                  Connect in Claude → Settings → Connectors → Custom connector\n                </Text>\n              </Box>\n            </Box>\n          )}\n          {tunnelState.status === \"error\" && (\n            <Box flexDirection=\"column\" marginBottom={1}>\n              <Box>\n                <Text>🌍{\"  \"}</Text>\n                <Text color=\"red\">\n                  Cannot open tunnel: {tunnelState.message}\n                </Text>\n              </Box>\n              <Box>\n                <Text color=\"#20a832\">→{\"  \"}</Text>\n                <Text color=\"red\">{`Try again with: enpilink dev --tunnel -p ${port}`}</Text>\n              </Box>\n            </Box>\n          )}\n\n          {flags.mock && (\n            <Box marginBottom={1}>\n              <Text>🎭{\"  \"}</Text>\n              <Text color=\"magenta\" bold>\n                Mock mode:{\" \"}\n              </Text>\n              <Text>dashboard seeded with deterministic demo analytics.</Text>\n            </Box>\n          )}\n\n          <Box>\n            <Text>🛟{\"  \"}</Text>\n            <Text>Need help? Reach us on </Text>\n            <Text color=\"white\" underline>\n              https://enpitech.dev\n            </Text>\n          </Box>\n\n          {tsErrors.length > 0 && (\n            <Box marginTop={1} flexDirection=\"column\">\n              <Text color=\"red\" bold>\n                ⚠️ TypeScript errors found:\n              </Text>\n              {tsErrors.map((error) => (\n                <Box\n                  key={`${error.file}:${error.line}:${error.col}`}\n                  marginLeft={2}\n                  flexDirection=\"column\"\n                >\n                  <Box>\n                    <Text color=\"white\">{error.file}</Text>\n                    <Text color=\"grey\">\n                      ({error.line},{error.col}):{\" \"}\n                    </Text>\n                  </Box>\n                  <Box marginLeft={2}>\n                    <Text color=\"red\">{error.message}</Text>\n                  </Box>\n                </Box>\n              ))}\n            </Box>\n          )}\n          {messages.length > 0 && (\n            <Box marginTop={1} flexDirection=\"column\">\n              <Text color=\"white\" bold>\n                Logs:\n              </Text>\n              {messages.map((message) => (\n                <Box key={message.id} marginLeft={2}>\n                  {message.type === \"restart\" ? (\n                    <>\n                      <Text color=\"green\">✓{\"  \"}</Text>\n                      <Text color=\"white\">{message.text}</Text>\n                    </>\n                  ) : message.type === \"error\" ? (\n                    <Text color=\"red\">{message.text}</Text>\n                  ) : (\n                    <Text>{message.text}</Text>\n                  )}\n                </Box>\n              ))}\n            </Box>\n          )}\n        </Box>\n      );\n    };\n\n    // Note: `exitOnCtrlC: false` because we own SIGINT below to guarantee\n    // the tunnel subprocess gets killed before we exit. If anything ever calls `useInput` or\n    // puts stdin into raw mode, also wire an explicit `\\x03` keypress to the\n    // shutdown function — Ink will otherwise swallow Ctrl-C without ever\n    // delivering SIGINT.\n    const ink = render(<App />, { exitOnCtrlC: false, patchConsole: true });\n\n    // Synchronous-first shutdown: kill the tunnel subprocess up front so we\n    // can't leave it orphaned even if another SIGINT listener (e.g. nodemon's)\n    // exits the process before our async cleanup completes.\n    const shutdown = (code: number) => () => {\n      tunnelManager.stop();\n      void closeTunnelControl()\n        .catch((err) => {\n          console.error(\"Failed to close tunnel control server\", err);\n        })\n        .finally(() => {\n          ink.unmount();\n          process.exit(code);\n        });\n    };\n    process.once(\"SIGINT\", shutdown(130));\n    process.once(\"SIGTERM\", shutdown(143));\n  }\n}\n"]}

package/dist/commands/start.d.ts

@@ -0,0 +1,10 @@
+import { Command } from "@oclif/core";
+export default class Start extends Command {
+    static description: string;
+    static examples: string[];
+    static flags: {
+        port: import("@oclif/core/interfaces").OptionFlag<number | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        admin: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+    };
+    run(): Promise<void>;
+}

package/dist/commands/start.js

@@ -0,0 +1,76 @@
+import { existsSync } from "node:fs";
+import { resolve } from "node:path";
+import { Command, Flags } from "@oclif/core";
+import { resolvePort } from "../cli/detect-port.js";
+import { runCommand } from "../cli/run-command.js";
+export default class Start extends Command {
+    static description = "Start production server";
+    static examples = ["enpilink start"];
+    static flags = {
+        port: Flags.integer({
+            char: "p",
+            description: "Port to run the server on",
+            min: 1,
+        }),
+        admin: Flags.boolean({
+            description: "Enable the production admin plane (dashboard + config + observability API) behind bearer auth. OFF by default. Requires ENPILINK_ADMIN_TOKEN to be set — the server refuses to start without it.",
+            default: false,
+        }),
+    };
+    async run() {
+        const { flags } = await this.parse(Start);
+        const { port, fallback, envWarning } = await resolvePort(flags.port);
+        if (envWarning) {
+            this.warn(envWarning);
+        }
+        console.clear();
+        // `dist/server.js` is the natural entry (the user's `await server.run()`
+        // binds the port). Prefer `dist/__entry.js` when present because it
+        // primes the Vite manifest first — without it, hashed asset URLs in
+        // views won't resolve.
+        const entryPath = resolve(process.cwd(), "dist/__entry.js");
+        const fallbackPath = resolve(process.cwd(), "dist/server.js");
+        const indexPath = existsSync(entryPath) ? entryPath : fallbackPath;
+        if (!existsSync(indexPath)) {
+            console.error("❌ Error: No build output found");
+            console.error("");
+            console.error("Please build your project first:");
+            console.error("  enpilink build");
+            console.error("");
+            process.exit(1);
+        }
+        console.log(`\x1b[36m\x1b[1m⛰ enpilink\x1b[0m \x1b[36mv${this.config.version}\x1b[0m`);
+        if (fallback) {
+            console.log(`\x1b[33m3000 in use, running on\x1b[0m \x1b[32mhttp://localhost:${port}/mcp\x1b[0m`);
+        }
+        else {
+            console.log(`Running on \x1b[32mhttp://localhost:${port}/mcp\x1b[0m`);
+        }
+        // `--admin` opts into the prod admin plane; it's also enableable purely via
+        // `ENPILINK_ADMIN`. Either way the spawned server reads `ENPILINK_ADMIN` +
+        // `ENPILINK_ADMIN_TOKEN` and refuses to start without a token.
+        const adminEnabled = flags.admin ||
+            ["1", "true", "yes", "on"].includes((process.env.ENPILINK_ADMIN ?? "").trim().toLowerCase());
+        if (adminEnabled) {
+            const hasToken = (process.env.ENPILINK_ADMIN_TOKEN ?? "").trim() !== "";
+            if (!hasToken) {
+                console.error("");
+                console.error("❌ Error: --admin requires ENPILINK_ADMIN_TOKEN to be set");
+                console.error("   Set a non-empty admin token, e.g. ENPILINK_ADMIN_TOKEN=… enpilink start --admin");
+                console.error("   Refusing to start an unauthenticated admin plane.");
+                process.exit(1);
+            }
+            console.log(`Admin plane on \x1b[32mhttp://localhost:${port}/\x1b[0m \x1b[2m(behind bearer auth — send Authorization: Bearer <ENPILINK_ADMIN_TOKEN>)\x1b[0m`);
+        }
+        await runCommand(`node ${indexPath}`, {
+            stdio: ["ignore", "inherit", "inherit"],
+            env: {
+                ...process.env,
+                NODE_ENV: "production",
+                __PORT: String(port),
+                ...(flags.admin ? { ENPILINK_ADMIN: "1" } : {}),
+            },
+        });
+    }
+}
+//# sourceMappingURL=start.js.map

package/dist/commands/start.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"start.js","sourceRoot":"","sources":["../../src/commands/start.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAEnD,MAAM,CAAC,OAAO,OAAO,KAAM,SAAQ,OAAO;IACxC,MAAM,CAAU,WAAW,GAAG,yBAAyB,CAAC;IACxD,MAAM,CAAU,QAAQ,GAAG,CAAC,gBAAgB,CAAC,CAAC;IAC9C,MAAM,CAAU,KAAK,GAAG;QACtB,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC;YAClB,IAAI,EAAE,GAAG;YACT,WAAW,EAAE,2BAA2B;YACxC,GAAG,EAAE,CAAC;SACP,CAAC;QACF,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC;YACnB,WAAW,EACT,kMAAkM;YACpM,OAAO,EAAE,KAAK;SACf,CAAC;KACH,CAAC;IAEK,KAAK,CAAC,GAAG;QACd,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC1C,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,MAAM,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACrE,IAAI,UAAU,EAAE,CAAC;YACf,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACxB,CAAC;QAED,OAAO,CAAC,KAAK,EAAE,CAAC;QAEhB,yEAAyE;QACzE,oEAAoE;QACpE,oEAAoE;QACpE,uBAAuB;QACvB,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,iBAAiB,CAAC,CAAC;QAC5D,MAAM,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,gBAAgB,CAAC,CAAC;QAC9D,MAAM,SAAS,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC;QAEnE,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAC3B,OAAO,CAAC,KAAK,CAAC,gCAAgC,CAAC,CAAC;YAChD,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAClB,OAAO,CAAC,KAAK,CAAC,kCAAkC,CAAC,CAAC;YAClD,OAAO,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;YAClC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAClB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,OAAO,CAAC,GAAG,CACT,6CAA6C,IAAI,CAAC,MAAM,CAAC,OAAO,SAAS,CAC1E,CAAC;QACF,IAAI,QAAQ,EAAE,CAAC;YACb,OAAO,CAAC,GAAG,CACT,mEAAmE,IAAI,aAAa,CACrF,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,uCAAuC,IAAI,aAAa,CAAC,CAAC;QACxE,CAAC;QAED,4EAA4E;QAC5E,2EAA2E;QAC3E,+DAA+D;QAC/D,MAAM,YAAY,GAChB,KAAK,CAAC,KAAK;YACX,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,QAAQ,CACjC,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CACxD,CAAC;QACJ,IAAI,YAAY,EAAE,CAAC;YACjB,MAAM,QAAQ,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC;YACxE,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;gBAClB,OAAO,CAAC,KAAK,CACX,0DAA0D,CAC3D,CAAC;gBACF,OAAO,CAAC,KAAK,CACX,oFAAoF,CACrF,CAAC;gBACF,OAAO,CAAC,KAAK,CAAC,sDAAsD,CAAC,CAAC;gBACtE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;YACD,OAAO,CAAC,GAAG,CACT,2CAA2C,IAAI,iGAAiG,CACjJ,CAAC;QACJ,CAAC;QAED,MAAM,UAAU,CAAC,QAAQ,SAAS,EAAE,EAAE;YACpC,KAAK,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,SAAS,CAAC;YACvC,GAAG,EAAE;gBACH,GAAG,OAAO,CAAC,GAAG;gBACd,QAAQ,EAAE,YAAY;gBACtB,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC;gBACpB,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAChD;SACF,CAAC,CAAC;IACL,CAAC","sourcesContent":["import { existsSync } from \"node:fs\";\nimport { resolve } from \"node:path\";\nimport { Command, Flags } from \"@oclif/core\";\nimport { resolvePort } from \"../cli/detect-port.js\";\nimport { runCommand } from \"../cli/run-command.js\";\n\nexport default class Start extends Command {\n  static override description = \"Start production server\";\n  static override examples = [\"enpilink start\"];\n  static override flags = {\n    port: Flags.integer({\n      char: \"p\",\n      description: \"Port to run the server on\",\n      min: 1,\n    }),\n    admin: Flags.boolean({\n      description:\n        \"Enable the production admin plane (dashboard + config + observability API) behind bearer auth. OFF by default. Requires ENPILINK_ADMIN_TOKEN to be set — the server refuses to start without it.\",\n      default: false,\n    }),\n  };\n\n  public async run(): Promise<void> {\n    const { flags } = await this.parse(Start);\n    const { port, fallback, envWarning } = await resolvePort(flags.port);\n    if (envWarning) {\n      this.warn(envWarning);\n    }\n\n    console.clear();\n\n    // `dist/server.js` is the natural entry (the user's `await server.run()`\n    // binds the port). Prefer `dist/__entry.js` when present because it\n    // primes the Vite manifest first — without it, hashed asset URLs in\n    // views won't resolve.\n    const entryPath = resolve(process.cwd(), \"dist/__entry.js\");\n    const fallbackPath = resolve(process.cwd(), \"dist/server.js\");\n    const indexPath = existsSync(entryPath) ? entryPath : fallbackPath;\n\n    if (!existsSync(indexPath)) {\n      console.error(\"❌ Error: No build output found\");\n      console.error(\"\");\n      console.error(\"Please build your project first:\");\n      console.error(\"  enpilink build\");\n      console.error(\"\");\n      process.exit(1);\n    }\n\n    console.log(\n      `\\x1b[36m\\x1b[1m⛰ enpilink\\x1b[0m \\x1b[36mv${this.config.version}\\x1b[0m`,\n    );\n    if (fallback) {\n      console.log(\n        `\\x1b[33m3000 in use, running on\\x1b[0m \\x1b[32mhttp://localhost:${port}/mcp\\x1b[0m`,\n      );\n    } else {\n      console.log(`Running on \\x1b[32mhttp://localhost:${port}/mcp\\x1b[0m`);\n    }\n\n    // `--admin` opts into the prod admin plane; it's also enableable purely via\n    // `ENPILINK_ADMIN`. Either way the spawned server reads `ENPILINK_ADMIN` +\n    // `ENPILINK_ADMIN_TOKEN` and refuses to start without a token.\n    const adminEnabled =\n      flags.admin ||\n      [\"1\", \"true\", \"yes\", \"on\"].includes(\n        (process.env.ENPILINK_ADMIN ?? \"\").trim().toLowerCase(),\n      );\n    if (adminEnabled) {\n      const hasToken = (process.env.ENPILINK_ADMIN_TOKEN ?? \"\").trim() !== \"\";\n      if (!hasToken) {\n        console.error(\"\");\n        console.error(\n          \"❌ Error: --admin requires ENPILINK_ADMIN_TOKEN to be set\",\n        );\n        console.error(\n          \"   Set a non-empty admin token, e.g. ENPILINK_ADMIN_TOKEN=… enpilink start --admin\",\n        );\n        console.error(\"   Refusing to start an unauthenticated admin plane.\");\n        process.exit(1);\n      }\n      console.log(\n        `Admin plane on \\x1b[32mhttp://localhost:${port}/\\x1b[0m \\x1b[2m(behind bearer auth — send Authorization: Bearer <ENPILINK_ADMIN_TOKEN>)\\x1b[0m`,\n      );\n    }\n\n    await runCommand(`node ${indexPath}`, {\n      stdio: [\"ignore\", \"inherit\", \"inherit\"],\n      env: {\n        ...process.env,\n        NODE_ENV: \"production\",\n        __PORT: String(port),\n        ...(flags.admin ? { ENPILINK_ADMIN: \"1\" } : {}),\n      },\n    });\n  }\n}\n"]}

package/dist/commands/telemetry/disable.d.ts

@@ -0,0 +1,5 @@
+import { Command } from "@oclif/core";
+export default class TelemetryDisable extends Command {
+    static description: string;
+    run(): Promise<void>;
+}

package/dist/commands/telemetry/disable.js

@@ -0,0 +1,12 @@
+import { jsx as _jsx } from "react/jsx-runtime";
+import { Command } from "@oclif/core";
+import { Box, render, Text } from "ink";
+export default class TelemetryDisable extends Command {
+    static description = "Telemetry is removed in enpilink (no-op)";
+    async run() {
+        await this.parse(TelemetryDisable);
+        const App = () => (_jsx(Box, { flexDirection: "column", padding: 1, children: _jsx(Box, { children: _jsx(Text, { color: "gray", children: "enpilink has no telemetry \u2014 nothing is ever collected or sent. This command is a no-op." }) }) }));
+        render(_jsx(App, {}));
+    }
+}
+//# sourceMappingURL=disable.js.map

package/dist/commands/telemetry/disable.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"disable.js","sourceRoot":"","sources":["../../../src/commands/telemetry/disable.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AACtC,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,CAAC;AAExC,MAAM,CAAC,OAAO,OAAO,gBAAiB,SAAQ,OAAO;IACnD,MAAM,CAAU,WAAW,GAAG,0CAA0C,CAAC;IAElE,KAAK,CAAC,GAAG;QACd,MAAM,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;QAEnC,MAAM,GAAG,GAAG,GAAG,EAAE,CAAC,CAChB,KAAC,GAAG,IAAC,aAAa,EAAC,QAAQ,EAAC,OAAO,EAAE,CAAC,YACpC,KAAC,GAAG,cACF,KAAC,IAAI,IAAC,KAAK,EAAC,MAAM,6GAGX,GACH,GACF,CACP,CAAC;QAEF,MAAM,CAAC,KAAC,GAAG,KAAG,CAAC,CAAC;IAClB,CAAC","sourcesContent":["import { Command } from \"@oclif/core\";\nimport { Box, render, Text } from \"ink\";\n\nexport default class TelemetryDisable extends Command {\n  static override description = \"Telemetry is removed in enpilink (no-op)\";\n\n  public async run(): Promise<void> {\n    await this.parse(TelemetryDisable);\n\n    const App = () => (\n      <Box flexDirection=\"column\" padding={1}>\n        <Box>\n          <Text color=\"gray\">\n            enpilink has no telemetry — nothing is ever collected or sent. This\n            command is a no-op.\n          </Text>\n        </Box>\n      </Box>\n    );\n\n    render(<App />);\n  }\n}\n"]}

package/dist/commands/telemetry/enable.d.ts

@@ -0,0 +1,5 @@
+import { Command } from "@oclif/core";
+export default class TelemetryEnable extends Command {
+    static description: string;
+    run(): Promise<void>;
+}

package/dist/commands/telemetry/enable.js

@@ -0,0 +1,12 @@
+import { jsx as _jsx } from "react/jsx-runtime";
+import { Command } from "@oclif/core";
+import { Box, render, Text } from "ink";
+export default class TelemetryEnable extends Command {
+    static description = "Telemetry is removed in enpilink (no-op)";
+    async run() {
+        await this.parse(TelemetryEnable);
+        const App = () => (_jsx(Box, { flexDirection: "column", padding: 1, children: _jsx(Box, { children: _jsx(Text, { color: "gray", children: "enpilink has no telemetry to enable \u2014 nothing is ever collected or sent. This command is a no-op." }) }) }));
+        render(_jsx(App, {}));
+    }
+}
+//# sourceMappingURL=enable.js.map

package/dist/commands/telemetry/enable.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"enable.js","sourceRoot":"","sources":["../../../src/commands/telemetry/enable.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AACtC,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,CAAC;AAExC,MAAM,CAAC,OAAO,OAAO,eAAgB,SAAQ,OAAO;IAClD,MAAM,CAAU,WAAW,GAAG,0CAA0C,CAAC;IAElE,KAAK,CAAC,GAAG;QACd,MAAM,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;QAElC,MAAM,GAAG,GAAG,GAAG,EAAE,CAAC,CAChB,KAAC,GAAG,IAAC,aAAa,EAAC,QAAQ,EAAC,OAAO,EAAE,CAAC,YACpC,KAAC,GAAG,cACF,KAAC,IAAI,IAAC,KAAK,EAAC,MAAM,uHAGX,GACH,GACF,CACP,CAAC;QAEF,MAAM,CAAC,KAAC,GAAG,KAAG,CAAC,CAAC;IAClB,CAAC","sourcesContent":["import { Command } from \"@oclif/core\";\nimport { Box, render, Text } from \"ink\";\n\nexport default class TelemetryEnable extends Command {\n  static override description = \"Telemetry is removed in enpilink (no-op)\";\n\n  public async run(): Promise<void> {\n    await this.parse(TelemetryEnable);\n\n    const App = () => (\n      <Box flexDirection=\"column\" padding={1}>\n        <Box>\n          <Text color=\"gray\">\n            enpilink has no telemetry to enable — nothing is ever collected or\n            sent. This command is a no-op.\n          </Text>\n        </Box>\n      </Box>\n    );\n\n    render(<App />);\n  }\n}\n"]}

package/dist/commands/telemetry/status.d.ts

@@ -0,0 +1,5 @@
+import { Command } from "@oclif/core";
+export default class TelemetryStatus extends Command {
+    static description: string;
+    run(): Promise<void>;
+}

package/dist/commands/telemetry/status.js

@@ -0,0 +1,12 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { Command } from "@oclif/core";
+import { Box, render, Text } from "ink";
+export default class TelemetryStatus extends Command {
+    static description = "Show enpilink telemetry status (always off)";
+    async run() {
+        await this.parse(TelemetryStatus);
+        const App = () => (_jsxs(Box, { flexDirection: "column", padding: 1, children: [_jsx(Text, { bold: true, underline: true, children: "enpilink Telemetry" }), _jsxs(Box, { marginTop: 1, children: [_jsx(Text, { children: "Status: " }), _jsx(Text, { color: "green", bold: true, children: "Disabled" })] }), _jsx(Box, { marginTop: 1, children: _jsx(Text, { color: "gray", children: "enpilink has no telemetry. It never collects data and never phones home." }) })] }));
+        render(_jsx(App, {}));
+    }
+}
+//# sourceMappingURL=status.js.map

package/dist/commands/telemetry/status.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"status.js","sourceRoot":"","sources":["../../../src/commands/telemetry/status.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AACtC,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,CAAC;AAExC,MAAM,CAAC,OAAO,OAAO,eAAgB,SAAQ,OAAO;IAClD,MAAM,CAAU,WAAW,GAAG,6CAA6C,CAAC;IAErE,KAAK,CAAC,GAAG;QACd,MAAM,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;QAElC,MAAM,GAAG,GAAG,GAAG,EAAE,CAAC,CAChB,MAAC,GAAG,IAAC,aAAa,EAAC,QAAQ,EAAC,OAAO,EAAE,CAAC,aACpC,KAAC,IAAI,IAAC,IAAI,QAAC,SAAS,yCAEb,EAEP,MAAC,GAAG,IAAC,SAAS,EAAE,CAAC,aACf,KAAC,IAAI,2BAAgB,EACrB,KAAC,IAAI,IAAC,KAAK,EAAC,OAAO,EAAC,IAAI,+BAEjB,IACH,EAEN,KAAC,GAAG,IAAC,SAAS,EAAE,CAAC,YACf,KAAC,IAAI,IAAC,KAAK,EAAC,MAAM,yFAGX,GACH,IACF,CACP,CAAC;QAEF,MAAM,CAAC,KAAC,GAAG,KAAG,CAAC,CAAC;IAClB,CAAC","sourcesContent":["import { Command } from \"@oclif/core\";\nimport { Box, render, Text } from \"ink\";\n\nexport default class TelemetryStatus extends Command {\n  static override description = \"Show enpilink telemetry status (always off)\";\n\n  public async run(): Promise<void> {\n    await this.parse(TelemetryStatus);\n\n    const App = () => (\n      <Box flexDirection=\"column\" padding={1}>\n        <Text bold underline>\n          enpilink Telemetry\n        </Text>\n\n        <Box marginTop={1}>\n          <Text>Status: </Text>\n          <Text color=\"green\" bold>\n            Disabled\n          </Text>\n        </Box>\n\n        <Box marginTop={1}>\n          <Text color=\"gray\">\n            enpilink has no telemetry. It never collects data and never phones\n            home.\n          </Text>\n        </Box>\n      </Box>\n    );\n\n    render(<App />);\n  }\n}\n"]}

package/dist/server/admin.d.ts

@@ -0,0 +1,79 @@
+import type { Express, RequestHandler } from "express";
+import type { StorageAdapter } from "./storage/types.js";
+/**
+ * Whether the prod admin plane is enabled. OFF by default; enable with
+ * `ENPILINK_ADMIN=1` (also accepts `true`/`yes`/`on`, case-insensitive) — or via
+ * the `enpilink start --admin` flag, which sets the same env var.
+ */
+export declare function adminEnabled(): boolean;
+/**
+ * The raw admin bearer token, read in-process from the env (NOT the masked
+ * config API). Empty / unset → `undefined`. Read via `resolveConfig(null)`'s
+ * raw `values.adminAuthToken` so the single source of truth is the config
+ * schema's env mapping. Never logged, never returned by any HTTP route.
+ */
+export declare function readAdminToken(): Promise<string | undefined>;
+/**
+ * Error thrown when admin is enabled in prod but no token is configured. The
+ * prod entry should let this propagate so the process exits non-zero with a
+ * clear message — never default-open.
+ */
+export declare class AdminTokenMissingError extends Error {
+    constructor();
+}
+/**
+ * Build the bearer-auth middleware that guards the admin **data APIs** in prod
+ * (`/__enpilink/observability/*` + `/__enpilink/config*`).
+ *
+ * M6.5: this guard is mounted at the app root but enforces auth ONLY on the
+ * data-API paths — the devtools static SPA shell (and everything else,
+ * including `/mcp`) passes straight through unauthenticated, so a browser can
+ * always load the app and render its own token-login screen. The app then
+ * authenticates its own fetch/SSE calls; no data leaks without the token.
+ *
+ * **SSE auth (`?token=`):** browsers' `EventSource` cannot set an
+ * `Authorization` header, so for the observability `/stream` route ONLY we also
+ * accept the bearer via a `?token=` query param. We copy it into the
+ * `Authorization` header (so the SAME constant-time verifier enforces it — no
+ * separate compare path) and then delete the query param so it never reaches
+ * the route handler, logs, or any persisted request line. The header path stays
+ * the primary mechanism for every other route.
+ */
+export declare function adminAuthMiddleware(token: string): RequestHandler;
+/**
+ * Ensure there is an active {@link StorageAdapter} backing the admin plane, even
+ * when analytics RECORDING is off (`ENPILINK_ANALYTICS` unset). Analytics gates
+ * whether events are *recorded*; the admin still needs a store to READ/write
+ * config + observability data.
+ *
+ * If analytics already installed a store ({@link getActiveStorage}), reuse it.
+ * Otherwise resolve a fresh adapter (prod default = sqlite via
+ * `resolveStorageAdapter()` / `ENPILINK_DB_PATH`), `init()` it, register it as
+ * the active store, and return it so the caller can close it on shutdown.
+ *
+ * @returns the storage adapter the caller now OWNS (must close on shutdown), or
+ * `null` when an existing analytics store was reused (the server already owns
+ * that one) or when initialization failed.
+ */
+export declare function ensureAdminStorage(): Promise<StorageAdapter | null>;
+/**
+ * Mount the admin plane (devtools static UI + observability API + config API)
+ * onto `app`.
+ *
+ * **Shell vs data auth (M6.5).** The plane has two halves:
+ *
+ * 1. The **devtools static SPA shell** (HTML/JS/CSS — non-sensitive app code).
+ *    Served WITHOUT auth so an unauthenticated browser can always load the app
+ *    and render its own token-login screen.
+ * 2. The **data APIs** (`/__enpilink/observability/*` + `/__enpilink/config*`),
+ *    which expose real analytics/config data. In prod these are guarded by
+ *    `opts.auth` (a single bearer token); the guard is applied ONLY in front of
+ *    these two routers, never the shell.
+ *
+ * In DEV (`auth` omitted) nothing is guarded — today's localhost behavior. The
+ * net result in prod: a browser with no token gets the app shell + a login
+ * screen, but no data leaks until the token is presented.
+ */
+export declare function mountAdmin(app: Express, opts?: {
+    auth?: RequestHandler;
+}): Promise<void>;