eve 0.5.4 → 0.6.0-beta.3

package/dist/src/compiled/@workflow/world/spec-version.d.ts

@@ -0,0 +1,46 @@
+/**
+ * Spec version utilities for backwards compatibility.
+ *
+ * Uses a branded type to ensure packages import the version constants
+ * from @workflow/world rather than using arbitrary numbers.
+ */
+declare const SpecVersionBrand: unique symbol;
+/**
+ * Branded type for spec versions. Must be created via SPEC_VERSION constants.
+ * This ensures all packages use the canonical version from @workflow/world.
+ */
+export type SpecVersion = number & {
+    readonly [SpecVersionBrand]: typeof SpecVersionBrand;
+};
+/**
+ * Legacy spec version (pre-event-sourcing). Also used for runs without specVersion.
+ * This is the only true legacy version — specVersion 2+ all use the event-sourced model.
+ */
+export declare const SPEC_VERSION_LEGACY: SpecVersion;
+export declare const SPEC_VERSION_SUPPORTS_EVENT_SOURCING: SpecVersion;
+export declare const SPEC_VERSION_SUPPORTS_CBOR_QUEUE_TRANSPORT: SpecVersion;
+/** Current spec version (event-sourced architecture with CBOR queue transport). */
+export declare const SPEC_VERSION_CURRENT: SpecVersion;
+/**
+ * Check if a spec version is legacy (<= SPEC_VERSION_LEGACY or undefined).
+ * Legacy runs require different handling - they use direct entity mutation
+ * instead of the event-sourced model.
+ *
+ * Checks against SPEC_VERSION_LEGACY (1), not SPEC_VERSION_CURRENT, so that
+ * intermediate versions (e.g. 2) are not incorrectly treated as legacy when
+ * SPEC_VERSION_CURRENT is bumped.
+ *
+ * @param v - The spec version number, or undefined/null for legacy runs
+ * @returns true if the run is a legacy run
+ */
+export declare function isLegacySpecVersion(v: number | undefined | null): boolean;
+/**
+ * Check if a spec version requires a newer world (> SPEC_VERSION_CURRENT).
+ * This happens when a run was created by a newer SDK version.
+ *
+ * @param v - The spec version number, or undefined/null for legacy runs
+ * @returns true if the run requires a newer world version
+ */
+export declare function requiresNewerWorld(v: number | undefined | null): boolean;
+export {};
+//# sourceMappingURL=spec-version.d.ts.map

package/dist/src/compiled/@workflow/world/steps.d.ts

@@ -0,0 +1,70 @@
+import { z } from '#compiled/zod/index.js';
+import { type SerializedData } from './serialization.js';
+import type { PaginationOptions, ResolveData } from './shared.js';
+export declare const StepStatusSchema: z.ZodEnum<{
+    pending: "pending";
+    running: "running";
+    completed: "completed";
+    failed: "failed";
+    cancelled: "cancelled";
+}>;
+/**
+ * Schema for workflow steps.
+ *
+ * Note: input/output use SerializedDataSchema to support both:
+ * - specVersion >= 2: Uint8Array (binary devalue format)
+ * - specVersion 1: any (legacy JSON format)
+ */
+export declare const StepSchema: z.ZodObject<{
+    runId: z.ZodString;
+    stepId: z.ZodString;
+    stepName: z.ZodString;
+    status: z.ZodEnum<{
+        pending: "pending";
+        running: "running";
+        completed: "completed";
+        failed: "failed";
+        cancelled: "cancelled";
+    }>;
+    input: z.ZodOptional<z.ZodUnion<readonly [z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>, z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>]>>;
+    output: z.ZodOptional<z.ZodUnion<readonly [z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>, z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>]>>;
+    error: z.ZodOptional<z.ZodUnion<readonly [z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>, z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>]>>;
+    attempt: z.ZodNumber;
+    startedAt: z.ZodOptional<z.ZodCoercedDate<unknown>>;
+    completedAt: z.ZodOptional<z.ZodCoercedDate<unknown>>;
+    createdAt: z.ZodCoercedDate<unknown>;
+    updatedAt: z.ZodCoercedDate<unknown>;
+    retryAfter: z.ZodOptional<z.ZodCoercedDate<unknown>>;
+    specVersion: z.ZodOptional<z.ZodNumber>;
+}, z.core.$strip>;
+export type StepStatus = z.infer<typeof StepStatusSchema>;
+export type Step = z.infer<typeof StepSchema>;
+/**
+ * Step with input/output fields excluded (when resolveData='none').
+ * Used for listing steps without fetching the full serialized data.
+ */
+export type StepWithoutData = Omit<Step, 'input' | 'output'> & {
+    input: undefined;
+    output: undefined;
+};
+export interface CreateStepRequest {
+    stepId: string;
+    stepName: string;
+    input: SerializedData;
+}
+export interface UpdateStepRequest {
+    attempt?: number;
+    status?: StepStatus;
+    output?: SerializedData;
+    error?: SerializedData;
+    retryAfter?: Date;
+}
+export interface GetStepParams {
+    resolveData?: ResolveData;
+}
+export interface ListWorkflowRunStepsParams {
+    runId: string;
+    pagination?: PaginationOptions;
+    resolveData?: ResolveData;
+}
+//# sourceMappingURL=steps.d.ts.map

package/dist/src/compiled/@workflow/world/ulid.d.ts

@@ -0,0 +1,35 @@
+/**
+ * Default threshold for ULID timestamps in the past (24 hours).
+ *
+ * Set to 24 hours to support the resilient start path: when start() fails to
+ * create run_created, the queue carries the run input and the runtime creates
+ * the run on run_started. VQS supports delayed messages up to 24 hours.
+ */
+export declare const DEFAULT_TIMESTAMP_THRESHOLD_PAST_MS: number;
+/**
+ * Default threshold for ULID timestamps in the future (5 minutes).
+ *
+ * Kept tight to prevent abuse from client-generated ULIDs with manipulated
+ * future timestamps while still tolerating minor clock skew.
+ */
+export declare const DEFAULT_TIMESTAMP_THRESHOLD_FUTURE_MS: number;
+/** @deprecated Use DEFAULT_TIMESTAMP_THRESHOLD_PAST_MS instead */
+export declare const DEFAULT_TIMESTAMP_THRESHOLD_MS: number;
+/**
+ * Extracts a Date from a ULID string, or null if the string is not a valid ULID.
+ */
+export declare function ulidToDate(maybeUlid: string): Date | null;
+/**
+ * Validates that a prefixed ULID's embedded timestamp is within acceptable thresholds
+ * of the current server time. Uses asymmetric thresholds: 24h in the past (to support
+ * resilient start with queue delays) and 5min in the future (to prevent abuse while
+ * tolerating clock skew).
+ *
+ * @param prefixedUlid - The prefixed ULID to validate (e.g., "wrun_01ARYZ...")
+ * @param prefix - The prefix to strip (e.g., "wrun_")
+ * @param pastThresholdMs - Maximum allowed age in the past (default: 24 hours)
+ * @param futureThresholdMs - Maximum allowed distance in the future (default: 5 minutes)
+ * @returns null if valid, or an error message string if invalid
+ */
+export declare function validateUlidTimestamp(prefixedUlid: string, prefix: string, pastThresholdMs?: number, futureThresholdMs?: number): string | null;
+//# sourceMappingURL=ulid.d.ts.map

package/dist/src/compiled/@workflow/world/waits.d.ts

@@ -0,0 +1,21 @@
+import { z } from '#compiled/zod/index.js';
+export declare const WaitStatusSchema: z.ZodEnum<{
+    completed: "completed";
+    waiting: "waiting";
+}>;
+export declare const WaitSchema: z.ZodObject<{
+    waitId: z.ZodString;
+    runId: z.ZodString;
+    status: z.ZodEnum<{
+        completed: "completed";
+        waiting: "waiting";
+    }>;
+    resumeAt: z.ZodOptional<z.ZodCoercedDate<unknown>>;
+    completedAt: z.ZodOptional<z.ZodCoercedDate<unknown>>;
+    createdAt: z.ZodCoercedDate<unknown>;
+    updatedAt: z.ZodCoercedDate<unknown>;
+    specVersion: z.ZodOptional<z.ZodNumber>;
+}, z.core.$strip>;
+export type WaitStatus = z.infer<typeof WaitStatusSchema>;
+export type Wait = z.infer<typeof WaitSchema>;
+//# sourceMappingURL=waits.d.ts.map

package/dist/src/compiled/_chunks/node/auth-BsyzphzW.js

@@ -0,0 +1,2 @@
+import{c as e,o as t,r as n}from"./dist-BdTs18CF.js";import{n as r,t as i}from"./version-BGue04qw.js";import*as a from"node:path";import o from"node:path";import{homedir as s}from"node:os";import c from"node:fs";import{setTimeout as l}from"node:timers/promises";import*as u from"node:fs/promises";import d from"os";const f=r.string().transform((e,t)=>{try{return JSON.parse(e)}catch(e){return t.addIssue({code:r.ZodIssueCode.custom,message:`Invalid JSON: ${e.message}`}),r.NEVER}});var p=n(((e,n)=>{let r=t(`os`),i=t(`path`),a=/^win/i.test(process.platform);function o(e){return i.normalize(i.join(e,`.`))}let s=()=>{let{env:e}=process,t={};return t.home=()=>o(r.homedir?r.homedir():e.HOME),t.temp=()=>o(r.tmpdir?r.tmpdir():e.TMPDIR||e.TEMP||e.TMP),t},c=()=>{let{env:e}=process,t={};return t.home=()=>o(r.homedir?r.homedir():e.USERPROFILE||i.join(e.HOMEDRIVE,e.HOMEPATH)||e.HOME),t.temp=()=>o(r.tmpdir?r.tmpdir():e.TEMP||e.TMP||i.join(e.LOCALAPPDATA||e.SystemRoot||e.windir,`Temp`)),t};n.exports=new class e{constructor(){let t=function(){return new e};this._fn=t;let n=a?c():s();return Object.keys(n).forEach(e=>{this._fn[e]=n[e]}),this._fn}}})),m=n(((e,n)=>{let r=t(`path`),i=p(),a=()=>{let e={};return e.cache=()=>process.env.XDG_CACHE_HOME||r.join(i.home()||i.temp(),`.cache`),e.config=()=>process.env.XDG_CONFIG_HOME||r.join(i.home()||i.temp(),`.config`),e.data=()=>process.env.XDG_DATA_HOME||r.join(i.home()||i.temp(),`.local`,`share`),e.runtime=()=>process.env.XDG_RUNTIME_DIR||void 0,e.state=()=>process.env.XDG_STATE_HOME||r.join(i.home()||i.temp(),`.local`,`state`),e},o=()=>{let e={};return e.cache=()=>process.env.XDG_CACHE_HOME||r.join(r.join(i.home()||i.temp(),`Library`),`Caches`),e.config=()=>process.env.XDG_CONFIG_HOME||r.join(r.join(i.home()||i.temp(),`Library`),`Preferences`),e.data=()=>process.env.XDG_DATA_HOME||r.join(r.join(i.home()||i.temp(),`Library`),`Application Support`),e.runtime=()=>process.env.XDG_RUNTIME_DIR||void 0,e.state=()=>process.env.XDG_STATE_HOME||r.join(r.join(i.home()||i.temp(),`Library`),`State`),e},s=()=>{let e={};return e.cache=()=>{let e=process.env.LOCALAPPDATA||r.join(i.home()||i.temp(),`AppData`,`Local`);return process.env.XDG_CACHE_HOME||r.join(e,`xdg.cache`)},e.config=()=>{let e=process.env.APPDATA||r.join(i.home()||i.temp(),`AppData`,`Roaming`);return process.env.XDG_CONFIG_HOME||r.join(e,`xdg.config`)},e.data=()=>{let e=process.env.APPDATA||r.join(i.home()||i.temp(),`AppData`,`Roaming`);return process.env.XDG_DATA_HOME||r.join(e,`xdg.data`)},e.runtime=()=>process.env.XDG_RUNTIME_DIR||void 0,e.state=()=>{let e=process.env.LOCALAPPDATA||r.join(i.home()||i.temp(),`AppData`,`Local`);return process.env.XDG_STATE_HOME||r.join(e,`xdg.state`)},e},c=()=>{let e=function(){return c()},t={};return t=/^darwin$/i.test(process.platform)?o():/^win/i.test(process.platform)?s():a(),t.configDirs=()=>{let e=[];return e.push(t.config()),process.env.XDG_CONFIG_DIRS&&e.push(...process.env.XDG_CONFIG_DIRS.split(r.delimiter)),e},t.dataDirs=()=>{let e=[];return e.push(t.data()),process.env.XDG_DATA_DIRS&&e.push(...process.env.XDG_DATA_DIRS.split(r.delimiter)),e},Object.keys(t).forEach(n=>{e[n]=t[n]}),e};n.exports=c()})),h=e(n(((e,n)=>{let r=t(`path`),i=t(`os`),a=m(),o=/^win/i.test(process.platform);function s(e,t){if(e||={},typeof e!=`object`&&(e={isolated:e}),e.isolated=e.isolated===void 0||e.isolated===null?t:e.isolated,typeof e.isolated!=`boolean`)throw TypeError(`Expected boolean for "isolated" argument, got ${typeof e.isolated}`);return e}let c=(e,t)=>{let n={};return n.cache=(n={isolated:null})=>(n=s(n,t),r.join(a.cache(),n.isolated?e:``)),n.config=(n={isolated:null})=>(n=s(n,t),r.join(a.config(),n.isolated?e:``)),n.data=(n={isolated:null})=>(n=s(n,t),r.join(a.data(),n.isolated?e:``)),n.runtime=(n={isolated:null})=>(n=s(n,t),a.runtime()?r.join(a.runtime(),n.isolated?e:``):void 0),n.state=(n={isolated:null})=>(n=s(n,t),r.join(a.state(),n.isolated?e:``)),n.configDirs=(n={isolated:null})=>(n=s(n,t),a.configDirs().map(t=>r.join(t,n.isolated?e:``))),n.dataDirs=(n={isolated:null})=>(n=s(n,t),a.dataDirs().map(t=>r.join(t,n.isolated?e:``))),n},l=(e,t)=>{let{env:n}=process,o=i.homedir(),c=i.tmpdir(),l=n.APPDATA||r.join(o||c,`AppData`,`Roaming`),u=n.LOCALAPPDATA||r.join(o||c,`AppData`,`Local`),d={};return d.cache=(i={isolated:null})=>(i=s(i,t),!i.isolated||n.XDG_CACHE_HOME?r.join(a.cache(),i.isolated?e:``):r.join(u,i.isolated?e:``,`Cache`)),d.config=(i={isolated:null})=>(i=s(i,t),!i.isolated||n.XDG_CONFIG_HOME?r.join(a.config(),i.isolated?e:``):r.join(l,i.isolated?e:``,`Config`)),d.data=(i={isolated:null})=>(i=s(i,t),!i.isolated||n.XDG_DATA_HOME?r.join(a.data(),i.isolated?e:``):r.join(l,i.isolated?e:``,`Data`)),d.runtime=(n={isolated:null})=>(n=s(n,t),a.runtime()?r.join(a.runtime(),n.isolated?e:``):void 0),d.state=(i={isolated:null})=>(i=s(i,t),!i.isolated||n.XDG_STATE_HOME?r.join(a.state(),i.isolated?e:``):r.join(u,i.isolated?e:``,`State`)),d.configDirs=(i={isolated:null})=>{i=s(i,t);let a=[d.config(i)];return n.XDG_CONFIG_DIRS&&a.push(...n.XDG_CONFIG_DIRS.split(r.delimiter).map(t=>r.join(t,i.isolated?e:``))),a},d.dataDirs=(i={isolated:null})=>{i=s(i,t);let a=[d.data(i)];return n.XDG_DATA_DIRS&&a.push(...n.XDG_DATA_DIRS.split(r.delimiter).map(t=>r.join(t,i.isolated?e:``))),a},d};n.exports=new class e{constructor(n={name:null,suffix:null,isolated:!0}){let i=function(t={name:null,suffix:null,isolated:!0}){return new e(t)};this._fn=i,n||={},typeof n!=`object`&&(n={name:n});let a=n.name||``;if(typeof a!=`string`)throw TypeError(`Expected string for "name" argument, got ${typeof a}`);let s=n.suffix||``;if(typeof s!=`string`)throw TypeError(`Expected string for "suffix" argument, got ${typeof s}`);let u=n.isolated===void 0||n.isolated===null?!0:n.isolated;if(typeof u!=`boolean`)throw TypeError(`Expected boolean for "isolated" argument, got ${typeof u}`);a||=r.parse(process.pkg?process.execPath:t.main?t.main.filename:process.argv[0]).name,s&&(a+=s),this._fn.$name=()=>a,this._fn.$isolated=()=>u;let d=o?l(a,u):c(a,u);return Object.keys(d).forEach(e=>{this._fn[e]=d[e]}),this._fn}}}))(),1);const g=r.number().transform(e=>new Date(e*1e3)),_=r.object({token:r.string().min(1).optional(),refreshToken:r.string().min(1).optional(),expiresAt:g.optional()}),v=f.pipe(_),y=e=>{try{return c.lstatSync(e).isDirectory()}catch{return!1}},b=()=>{if(process.env.VERCEL_AUTH_CONFIG_DIR)return process.env.VERCEL_AUTH_CONFIG_DIR;let e=(0,h.default)(`com.vercel.cli`).dataDirs();return[...e,o.join(s(),`.now`),...(0,h.default)(`now`).dataDirs()].find(e=>y(e))||e[0]},x=()=>{try{let e=o.join(b(),`auth.json`);return v.parse(c.readFileSync(e,`utf8`))}catch{return null}};function S(e){let t=o.join(b(),`auth.json`);c.mkdirSync(o.dirname(t),{recursive:!0});let n={token:e.token,expiresAt:e.expiresAt&&Math.round(e.expiresAt.getTime()/1e3),refreshToken:e.refreshToken};c.writeFileSync(t,JSON.stringify(n)+`
+`)}const C=`${d.hostname()} @ vercel/sandbox/${i} node-${process.version} ${d.platform()} (${d.arch()})`,w=new URL(`https://vercel.com`),T=`cl_HYyOPBNtFMfHhaUn9L4QPfTZz6TP47bp`,E=r.object({issuer:r.string().url(),device_authorization_endpoint:r.string().url(),token_endpoint:r.string().url(),revocation_endpoint:r.string().url(),jwks_uri:r.string().url(),introspection_endpoint:r.string().url()});let D;const O=r.object({device_code:r.string(),user_code:r.string(),verification_uri:r.string().url(),verification_uri_complete:r.string().url(),expires_in:r.number(),interval:r.number()}),k=r.object({active:r.literal(!0),client_id:r.string(),session_id:r.string()}).or(r.object({active:r.literal(!1)}));async function A(){if(D)return D;let e=await fetch(new URL(`.well-known/openid-configuration`,w),{headers:{"Content-Type":`application/json`,"user-agent":C}});return D=E.parse(await e.json()),D}async function j(){let e=await A();return{async deviceAuthorizationRequest(){let t=await(await fetch(e.device_authorization_endpoint,{method:`POST`,headers:{"Content-Type":`application/x-www-form-urlencoded`,"user-agent":C},body:new URLSearchParams({client_id:T,scope:`openid offline_access`})})).json(),n=O.safeParse(t);if(!n.success)throw new F(`Failed to parse device authorization response: ${n.error.message}`,t);return{device_code:n.data.device_code,user_code:n.data.user_code,verification_uri:n.data.verification_uri,verification_uri_complete:n.data.verification_uri_complete,expiresAt:Date.now()+n.data.expires_in*1e3,interval:n.data.interval}},async deviceAccessTokenRequest(t){try{return[null,await fetch(e.token_endpoint,{method:`POST`,headers:{"Content-Type":`application/x-www-form-urlencoded`,"user-agent":C},body:new URLSearchParams({client_id:T,grant_type:`urn:ietf:params:oauth:grant-type:device_code`,device_code:t}),signal:AbortSignal.timeout(10*1e3)})]}catch(e){return e instanceof Error?[e]:[Error(`An unknown error occurred. See the logs for details.`,{cause:e})]}},async processTokenResponse(e){let t=await e.json(),n=M.safeParse(t);return n.success?[null,n.data]:[new F(`Failed to parse token response: ${n.error.message}`,t)]},async revokeToken(t){let n=await fetch(e.revocation_endpoint,{method:`POST`,headers:{"Content-Type":`application/x-www-form-urlencoded`,"user-agent":C},body:new URLSearchParams({token:t,client_id:T})});if(!n.ok)return new F(`Revocation request failed`,await n.json())},async refreshToken(t){let n=await fetch(e.token_endpoint,{method:`POST`,headers:{"Content-Type":`application/x-www-form-urlencoded`,"user-agent":C},body:new URLSearchParams({client_id:T,grant_type:`refresh_token`,refresh_token:t})}),[r,i]=await this.processTokenResponse(n);if(r)throw r;return i},async introspectToken(t){let n=await(await fetch(e.introspection_endpoint,{method:`POST`,headers:{"Content-Type":`application/x-www-form-urlencoded`,"user-agent":C},body:new URLSearchParams({token:t})})).json(),r=k.safeParse(n);if(!r.success)throw new F(`Failed to parse introspection response: ${r.error.message}`,n);return r.data}}}const M=r.object({access_token:r.string(),token_type:r.literal(`Bearer`),expires_in:r.number(),refresh_token:r.string().optional(),scope:r.string().optional()}),N=r.object({error:r.enum([`invalid_request`,`invalid_client`,`invalid_grant`,`unauthorized_client`,`unsupported_grant_type`,`invalid_scope`,`server_error`,`authorization_pending`,`slow_down`,`access_denied`,`expired_token`,`unsupported_token_type`]),error_description:r.string().optional(),error_uri:r.string().optional()});function P(e){try{return N.parse(e)}catch(e){return e instanceof r.ZodError?TypeError(`Invalid OAuth error response: ${e.message}`):TypeError(`Failed to parse OAuth error response`)}}var F=class extends Error{constructor(e,t){super(e),this.name=`OAuthError`;let n=P(t);if(n instanceof TypeError){let e=`Unexpected server response: ${JSON.stringify(t)}`;this.cause=Error(e,{cause:n}),this.code=`server_error`;return}let r=n.error;n.error_description&&(r+=`: ${n.error_description}`),n.error_uri&&(r+=` (${n.error_uri})`),this.cause=Error(r),this.code=n.error}};function I(e){return e instanceof F}async function*L({request:e,oauth:t}){let n=new AbortController;try{let r=e.interval*1e3;for(;Date.now()<e.expiresAt;){let[i,a]=await t.deviceAccessTokenRequest(e.device_code);if(i){if(i.message.includes(`timeout`)){r*=2,yield{_tag:`Timeout`,newInterval:r},await l(r,{signal:n.signal});continue}yield{_tag:`Error`,error:i};return}yield{_tag:`Response`,response:a.clone()};let[o,s]=await t.processTokenResponse(a);if(I(o)){let{code:e}=o;switch(e){case`authorization_pending`:await l(r,{signal:n.signal});continue;case`slow_down`:r+=5*1e3,yield{_tag:`SlowDown`,newInterval:r},await l(r,{signal:n.signal});continue;default:yield{_tag:`Error`,error:o.cause};return}}if(o){yield{_tag:`Error`,error:o};return}S({token:s.access_token,expiresAt:new Date(Date.now()+s.expires_in*1e3),refreshToken:s.refresh_token});return}yield{_tag:`Error`,error:Error(`Timed out waiting for authentication. Please try again.`)};return}finally{n.abort()}}var R=class extends Error{constructor(e){super(`HTTP ${e.statusCode}: ${e.responseText}`),this.name=`NotOk`,this.response=e}};async function z(e){let t=await fetch(`https://vercel.com/api${e.endpoint}`,{method:e.method,body:e.body,headers:{Authorization:`Bearer ${e.token}`,"Content-Type":`application/json`}});if(!t.ok){let e=await t.text();try{let{error:t}=JSON.parse(e);e=`${t.code.toUpperCase()}: ${t.message}`}catch{}throw new R({responseText:e,statusCode:t.status})}return await t.json()}const B=f.pipe(r.object({projectId:r.string(),orgId:r.string()}));async function V(e){let t=a.join(e,`.vercel`,`project.json`),n;try{n=await u.readFile(t,`utf-8`)}catch{return null}let r=B.safeParse(n);return r.success?{projectId:r.data.projectId,teamId:r.data.orgId}:null}const H=r.object({user:r.object({defaultTeamId:r.string().nullable(),username:r.string()})}),U=r.object({id:r.string(),slug:r.string(),updatedAt:r.number(),membership:r.object({role:r.string()}),billing:r.object({plan:r.string()})}),W=r.object({teams:r.array(U),pagination:r.object({count:r.number(),next:r.number().nullable()})}),G=`vercel-sandbox-default-project`;function K(e){return e instanceof R&&(e.response.statusCode===402||e.response.statusCode===403)}async function q(e){let t=await V(e.cwd??process.cwd());if(t){let n=await Y(e.token,t.teamId,t.projectId);return{...t,created:!1,...n}}if(e.teamId)return J(e.token,e.teamId);let{defaultTeamId:n,username:i}=(await z({token:e.token,endpoint:`/v2/user`}).then(H.parse)).user;if(n)try{let t=await J(e.token,n);try{let i=await z({token:e.token,endpoint:`/v2/teams/${encodeURIComponent(n)}`}).then(r.object({slug:r.string()}).parse);return{...t,teamSlug:i.slug}}catch{return t}}catch(e){if(!K(e))throw e}let a=null;do{let t=a===null?`/v2/teams?limit=20`:`/v2/teams?limit=20&until=${a}`,r=await z({token:e.token,endpoint:t}).then(W.parse);a=r.pagination.next;let o=r.teams.filter(e=>e.membership.role===`OWNER`&&e.billing.plan===`hobby`);if(o.length===0)continue;let s=o.find(e=>e.slug===i)??o.sort((e,t)=>t.updatedAt-e.updatedAt)[0];if(s&&s.id!==n)try{return{...await J(e.token,s.id),teamSlug:s.slug}}catch(e){if(!K(e))throw e}}while(a!==null);try{return{...await J(e.token,i),teamSlug:i}}catch(e){if(!K(e))throw e}throw new R({statusCode:403,responseText:`Authenticated as "${i}" but none of the available teams allow sandbox creation. Specify a team explicitly with --scope <team-id-or-slug>.`})}async function J(e,t){let n=t.startsWith(`team_`)?`teamId=${encodeURIComponent(t)}`:`slug=${encodeURIComponent(t)}`,r=!1;try{await z({token:e,endpoint:`/v2/projects/vercel-sandbox-default-project?${n}`})}catch(t){if(!(t instanceof R)||t.response.statusCode!==404)throw t;await z({token:e,endpoint:`/v11/projects?${n}`,method:`POST`,body:JSON.stringify({name:G})}),r=!0}return{projectId:G,teamId:t,created:r}}async function Y(e,t,n){try{let i=t.startsWith(`team_`)?`teamId=${encodeURIComponent(t)}`:`slug=${encodeURIComponent(t)}`,[a,o]=await Promise.all([z({token:e,endpoint:`/v2/teams/${encodeURIComponent(t)}`}).then(r.object({slug:r.string()}).parse),z({token:e,endpoint:`/v2/projects/${encodeURIComponent(n)}?${i}`}).then(r.object({name:r.string()}).parse)]);return{teamSlug:a.slug,projectSlug:o.name}}catch{return{}}}export{R as NotOk,j as OAuth,x as getAuth,q as inferScope,I as isOAuthError,L as pollForToken,S as updateAuthConfig};