gibil 0.3.0 → 0.3.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (3) hide show
  1. package/README.md +1 -1
  2. package/dist/cli/index.js +23 -23
  3. package/package.json +2 -2
package/README.md CHANGED
@@ -7,7 +7,7 @@
7
7
  <p align="center"><strong>Full servers. Forged in seconds. Gone when done.</strong></p>
8
8
 
9
9
  <p align="center">
10
- <img src="https://img.shields.io/badge/version-0.2.0-blue" alt="Version 0.2.0" />
10
+ <img src="https://img.shields.io/badge/version-0.3.1-blue" alt="Version 0.3.1" />
11
11
  <img src="https://img.shields.io/badge/tests-209%20passing-brightgreen" alt="Tests: 209 passing" />
12
12
  <img src="https://img.shields.io/badge/typescript-%3E5.0-3178C6" alt="TypeScript" />
13
13
  <img src="https://img.shields.io/badge/node-%3E%3D20-339933" alt="Node >= 20" />
package/dist/cli/index.js CHANGED
@@ -1,33 +1,33 @@
1
1
  #!/usr/bin/env node
2
- var Dn=Object.defineProperty;var se=(t,e)=>()=>(t&&(e=t(t=0)),e);var st=(t,e)=>{for(var n in e)Dn(t,n,{get:e[n],enumerable:!0})};import pe from"picocolors";function Fe(t,e){let n=Math.max(t.length+4,...e.map(l=>at(l).length+4)),o=`${f("\u256D")}${f("\u2500".repeat(n))}${f("\u256E")}`,i=`${f("\u2570")}${f("\u2500".repeat(n))}${f("\u256F")}`,a=`${f("\u2502")} ${j} ${y(t)}${" ".repeat(n-at(t).length-4)}${f("\u2502")}`,s=`${f("\u251C")}${f("\u2500".repeat(n))}${f("\u2524")}`,c=e.map(l=>{let u=n-at(l).length-2;return`${f("\u2502")} ${l}${" ".repeat(Math.max(0,u))}${f("\u2502")}`});return[o,a,s,...c,i].join(`
3
- `)}function at(t){return t.replace(/\x1b\[[0-9;]*m/g,"")}var X,Kn,Q,Ln,f,y,j,G,Ee,Ct,Le,Tt,jt,Et,ke,k,O=se(()=>{"use strict";X=t=>pe.red(t),Kn=t=>pe.yellow(t),Q=t=>pe.green(t),Ln=t=>pe.red(t),f=t=>pe.dim(t),y=t=>pe.bold(t),j="\u{1F98E}",G=Q("\u2713"),Ee=Ln("\u2716"),Ct=Kn("\u26A0"),Le="\u{12248}",Tt=`
4
- ${X(" /\\")}
5
- ${X(" / \\")}
6
- ${X(" / \u{1F525} \\")}
7
- ${X(" / \\")}
2
+ var Kn=Object.defineProperty;var se=(t,e)=>()=>(t&&(e=t(t=0)),e);var at=(t,e)=>{for(var n in e)Kn(t,n,{get:e[n],enumerable:!0})};import ge from"picocolors";function Fe(t,e){let n=Math.max(t.length+4,...e.map(l=>ct(l).length+4)),o=`${f("\u256D")}${f("\u2500".repeat(n))}${f("\u256E")}`,i=`${f("\u2570")}${f("\u2500".repeat(n))}${f("\u256F")}`,a=`${f("\u2502")} ${j} ${y(t)}${" ".repeat(n-ct(t).length-4)}${f("\u2502")}`,s=`${f("\u251C")}${f("\u2500".repeat(n))}${f("\u2524")}`,c=e.map(l=>{let u=n-ct(l).length-2;return`${f("\u2502")} ${l}${" ".repeat(Math.max(0,u))}${f("\u2502")}`});return[o,a,s,...c,i].join(`
3
+ `)}function ct(t){return t.replace(/\x1b\[[0-9;]*m/g,"")}var Q,Ln,ee,Fn,f,y,j,z,Ce,Tt,Le,jt,Pt,Ct,Ee,E,H=se(()=>{"use strict";Q=t=>ge.red(t),Ln=t=>ge.yellow(t),ee=t=>ge.green(t),Fn=t=>ge.red(t),f=t=>ge.dim(t),y=t=>ge.bold(t),j="\u{1F98E}",z=ee("\u2713"),Ce=Fn("\u2716"),Tt=Ln("\u26A0"),Le="\u{12248}",jt=`
4
+ ${Q(" /\\")}
5
+ ${Q(" / \\")}
6
+ ${Q(" / \u{1F525} \\")}
7
+ ${Q(" / \\")}
8
8
  ${f(" ~~~~~~~~")}
9
9
  ${y(" g i b i l")} ${f(Le)}
10
- `,jt=`${j} ${y("gibil")} ${f(Le)}`,Et=["\u280B","\u2819","\u2839","\u2838","\u283C","\u2834","\u2826","\u2827","\u2807","\u280F"],ke=class{timer=null;frame=0;text;constructor(e){this.text=e}start(){return process.stderr.isTTY?(this.timer=setInterval(()=>{let e=X(Et[this.frame%Et.length]);process.stderr.write(`\r ${e} ${this.text}`),this.frame++},80),this):(process.stderr.write(` ${this.text}
10
+ `,Pt=`${j} ${y("gibil")} ${f(Le)}`,Ct=["\u280B","\u2819","\u2839","\u2838","\u283C","\u2834","\u2826","\u2827","\u2807","\u280F"],Ee=class{timer=null;frame=0;text;constructor(e){this.text=e}start(){return process.stderr.isTTY?(this.timer=setInterval(()=>{let e=Q(Ct[this.frame%Ct.length]);process.stderr.write(`\r ${e} ${this.text}`),this.frame++},80),this):(process.stderr.write(` ${this.text}
11
11
  `),this)}update(e){this.text=e,process.stderr.isTTY||process.stderr.write(` ${e}
12
- `)}succeed(e){this.stop(),process.stderr.write(`\r ${G} ${e??this.text}
13
- `)}fail(e){this.stop(),process.stderr.write(`\r ${Ee} ${e??this.text}
14
- `)}stop(){this.timer&&(clearInterval(this.timer),this.timer=null,process.stderr.isTTY&&process.stderr.write("\r\x1B[K"))}};k={welcome:`${j} Your first fire. Welcome to Gibil.`,noInstances:`${j} No fires burning. Gibil sleeps.`,destroyAll:`${j} All fires extinguished. Gibil moves on.`,destroySingle:t=>`${j} "${t}" \u2014 fire out.`,authSuccess:`${j} Logged in. The forge is yours.`,authLogout:`${j} Logged out. The forge cools.`,createReady:(t,e)=>`${j} "${t}" forged ${f(`(${e}s)`)}`,fleetReady:(t,e)=>`${j} Fleet forged \u2014 ${t}/${e} fires lit.`,ttlWarning:(t,e)=>`${j} ${t} \u2014 flame is low (${e}m remaining)`,initComplete:`${j} The forge is ready. Run ${y("gibil create")} to light your first fire.`,setupNeeded:`${j} No forge configured. Run ${y("gibil init")} to get started.`}});function _(t){ct=t}function ee(t){return ct&&t!=="error"?!1:Pt[t]>=Pt[Fn]}var Fn,ct,Pt,r,I=se(()=>{"use strict";O();Fn="info",ct=!1,Pt={debug:0,info:1,warn:2,error:3,silent:4};r={debug(t,...e){ee("debug")&&console.debug(`${f("[debug]")} ${t}`,...e)},info(t,...e){ee("info")&&console.log(t,...e)},warn(t,...e){ee("warn")&&console.warn(`${Ct} ${t}`,...e)},error(t,...e){ee("error")&&console.error(`${Ee} ${t}`,...e)},success(t){ee("info")&&console.log(`${G} ${t}`)},step(t){ee("info")&&console.log(` ${f("\u203A")} ${t}`)},flame(t){ee("info")&&console.log(t)},detail(t,e){ee("info")&&console.log(` ${f(t+":")} ${e}`)},spin(t){return ct?new ke(t):new ke(t).start()},json(t){console.log(JSON.stringify(t,null,2))}}});import{homedir as Gn}from"os";import{join as ne,resolve as Un}from"path";import{existsSync as Jn}from"fs";function Ge(){let t=process.argv[1];if(t){let e=Un(t);if(Jn(e))return{command:process.execPath,args:[e,"mcp"]}}return{command:"gibil",args:["mcp"]}}var te,S,D=se(()=>{"use strict";te=ne(Gn(),".gibil"),S={root:te,instances:ne(te,"instances"),keys:ne(te,"keys"),jobs:ne(te,"jobs"),instanceFile:t=>ne(te,"instances",`${t}.json`),keyDir:t=>ne(te,"keys",t),privateKey:t=>ne(te,"keys",t,"id_ed25519"),publicKey:t=>ne(te,"keys",t,"id_ed25519.pub")}});var ze={};st(ze,{clearApiKey:()=>dt,fetchUsage:()=>pt,getApiKey:()=>P,getApiUrl:()=>Vn,getApiUrlFromConfig:()=>Ue,getDefaultAgent:()=>je,getHetznerToken:()=>mt,getServerDefaults:()=>Zn,saveApiKey:()=>ut,saveDefaultAgent:()=>Je,saveHetznerToken:()=>Te,saveServerDefaults:()=>ft,trackUsage:()=>Y,verifyApiKey:()=>oe});import{readFile as zn,writeFile as Bn,mkdir as qn}from"fs/promises";import{existsSync as Wn}from"fs";import{join as Yn}from"path";async function U(){if(!Wn(lt))return{};let t=await zn(lt,"utf-8");return JSON.parse(t)}async function Ce(t){await qn(S.root,{recursive:!0,mode:448}),await Bn(lt,JSON.stringify(t,null,2),{mode:384})}async function ut(t){let e=await U();e.api_key=t,await Ce(e)}async function P(){return process.env.GIBIL_API_KEY?process.env.GIBIL_API_KEY:(await U()).api_key??null}async function dt(){let t=await U();delete t.api_key,await Ce(t)}function Vn(){return process.env.GIBIL_API_URL??Nt}async function Ue(){return process.env.GIBIL_API_URL?process.env.GIBIL_API_URL:(await U()).api_url??Nt}async function Te(t){let e=await U();e.hetzner_token=t,await Ce(e)}async function mt(){return process.env.HETZNER_API_TOKEN?process.env.HETZNER_API_TOKEN:(await U()).hetzner_token??null}async function ft(t,e){let n=await U();n.default_server_type=t,n.default_location=e,await Ce(n)}async function Zn(){let t=await U();return{serverType:t.default_server_type??"cax11",location:t.default_location??"fsn1"}}async function Je(t){let e=await U();t?e.default_agent=t:delete e.default_agent,await Ce(e)}async function je(){return(await U()).default_agent??null}async function oe(t){let e=await Ue(),n=await fetch(`${e}/auth-verify`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({api_key:t})});if(n.status===401)throw new Error("Invalid API key. Get one at https://gibil.dev");if(!n.ok){let o=await n.text();throw new Error(`API error (${n.status}): ${o}`)}return await n.json()}async function Y(t,e,n,o){let i=await Ue(),a=await fetch(`${i}/usage-track`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({api_key:t,event:e,instance_name:n,server_type:o})});if(a.status===429)throw new Error("Usage limit reached. Please try again later or contact support.");if(!a.ok){let s=await a.text();throw new Error(`Usage tracking failed (${a.status}): ${s}`)}}async function pt(t){let e=await Ue(),n=await fetch(`${e}/usage-get`,{headers:{Authorization:`Bearer ${t}`}});if(!n.ok){let o=await n.text();throw new Error(`Failed to fetch usage (${n.status}): ${o}`)}return await n.json()}var lt,Nt,J=se(()=>{"use strict";D();lt=Yn(S.root,"config.json"),Nt="https://zopdxjruwktjyjunitrv.supabase.co/functions/v1"});var At={};st(At,{HetznerProvider:()=>N});function gt(t){return{id:t.id,name:t.name,status:t.status,ipv4:t.public_net.ipv4.ip,ipv6:t.public_net.ipv6.ip,serverType:t.server_type?.name??"unknown",location:t.datacenter?.location?.name??"unknown",labels:t.labels,created:t.created}}function Qn(t){return{id:t.id,name:t.name,fingerprint:t.fingerprint??""}}var Xn,N,ge=se(()=>{"use strict";I();Xn="https://api.hetzner.cloud/v1";N=class t{token;constructor(e){this.token=e}static async create(e){let{getHetznerToken:n}=await Promise.resolve().then(()=>(J(),ze)),o=e??await n();if(!o)throw new Error("HETZNER_API_TOKEN is required. Run 'gibil init' or set it in your environment.");return new t(o)}async request(e,n,o){let i=`${Xn}${n}`;r.debug(`${e} ${i}`);let a=await fetch(i,{method:e,headers:{Authorization:`Bearer ${this.token}`,"Content-Type":"application/json"},body:o?JSON.stringify(o):void 0,signal:AbortSignal.timeout(3e4)});if(!a.ok){let s=await a.text(),c;try{c=JSON.parse(s).error?.message??s}catch{c=s}let l="";throw a.status===401||a.status===403?l=`
12
+ `)}succeed(e){this.stop(),process.stderr.write(`\r ${z} ${e??this.text}
13
+ `)}fail(e){this.stop(),process.stderr.write(`\r ${Ce} ${e??this.text}
14
+ `)}stop(){this.timer&&(clearInterval(this.timer),this.timer=null,process.stderr.isTTY&&process.stderr.write("\r\x1B[K"))}};E={welcome:`${j} Your first fire. Welcome to Gibil.`,noInstances:`${j} No fires burning. Gibil sleeps.`,destroyAll:`${j} All fires extinguished. Gibil moves on.`,destroySingle:t=>`${j} "${t}" \u2014 fire out.`,authSuccess:`${j} Logged in. The forge is yours.`,authLogout:`${j} Logged out. The forge cools.`,createReady:(t,e)=>`${j} "${t}" forged ${f(`(${e}s)`)}`,fleetReady:(t,e)=>`${j} Fleet forged \u2014 ${t}/${e} fires lit.`,ttlWarning:(t,e)=>`${j} ${t} \u2014 flame is low (${e}m remaining)`,initComplete:`${j} The forge is ready. Run ${y("gibil create")} to light your first fire.`,setupNeeded:`${j} No forge configured. Run ${y("gibil init")} to get started.`}});function I(t){lt=t}function te(t){return lt&&t!=="error"?!1:Nt[t]>=Nt[Gn]}var Gn,lt,Nt,r,k=se(()=>{"use strict";H();Gn="info",lt=!1,Nt={debug:0,info:1,warn:2,error:3,silent:4};r={debug(t,...e){te("debug")&&console.debug(`${f("[debug]")} ${t}`,...e)},info(t,...e){te("info")&&console.log(t,...e)},warn(t,...e){te("warn")&&console.warn(`${Tt} ${t}`,...e)},error(t,...e){te("error")&&console.error(`${Ce} ${t}`,...e)},success(t){te("info")&&console.log(`${z} ${t}`)},step(t){te("info")&&console.log(` ${f("\u203A")} ${t}`)},flame(t){te("info")&&console.log(t)},detail(t,e){te("info")&&console.log(` ${f(t+":")} ${e}`)},spin(t){return lt?new Ee(t):new Ee(t).start()},json(t){console.log(JSON.stringify(t,null,2))}}});import{homedir as Un}from"os";import{join as oe,resolve as Jn}from"path";import{existsSync as zn}from"fs";function Ge(){let t=process.argv[1];if(t){let e=Jn(t);if(zn(e))return{command:process.execPath,args:[e,"mcp"]}}return{command:"gibil",args:["mcp"]}}var ne,_,F=se(()=>{"use strict";ne=oe(Un(),".gibil"),_={root:ne,instances:oe(ne,"instances"),keys:oe(ne,"keys"),jobs:oe(ne,"jobs"),instanceFile:t=>oe(ne,"instances",`${t}.json`),keyDir:t=>oe(ne,"keys",t),privateKey:t=>oe(ne,"keys",t,"id_ed25519"),publicKey:t=>oe(ne,"keys",t,"id_ed25519.pub")}});var ze={};at(ze,{clearApiKey:()=>mt,fetchUsage:()=>gt,getApiKey:()=>P,getApiUrl:()=>Zn,getApiUrlFromConfig:()=>Ue,getDefaultAgent:()=>Pe,getHetznerToken:()=>ft,getServerDefaults:()=>Xn,saveApiKey:()=>dt,saveDefaultAgent:()=>Je,saveHetznerToken:()=>je,saveServerDefaults:()=>pt,trackUsage:()=>V,verifyApiKey:()=>re});import{readFile as Bn,writeFile as qn,mkdir as Wn}from"fs/promises";import{existsSync as Yn}from"fs";import{join as Vn}from"path";async function B(){if(!Yn(ut))return{};let t=await Bn(ut,"utf-8");return JSON.parse(t)}async function Te(t){await Wn(_.root,{recursive:!0,mode:448}),await qn(ut,JSON.stringify(t,null,2),{mode:384})}async function dt(t){let e=await B();e.api_key=t,await Te(e)}async function P(){return process.env.GIBIL_API_KEY?process.env.GIBIL_API_KEY:(await B()).api_key??null}async function mt(){let t=await B();delete t.api_key,await Te(t)}function Zn(){return process.env.GIBIL_API_URL??At}async function Ue(){return process.env.GIBIL_API_URL?process.env.GIBIL_API_URL:(await B()).api_url??At}async function je(t){let e=await B();e.hetzner_token=t,await Te(e)}async function ft(){return process.env.HETZNER_API_TOKEN?process.env.HETZNER_API_TOKEN:(await B()).hetzner_token??null}async function pt(t,e){let n=await B();n.default_server_type=t,n.default_location=e,await Te(n)}async function Xn(){let t=await B();return{serverType:t.default_server_type??"cax11",location:t.default_location??"fsn1"}}async function Je(t){let e=await B();t?e.default_agent=t:delete e.default_agent,await Te(e)}async function Pe(){return(await B()).default_agent??null}async function re(t){let e=await Ue(),n=await fetch(`${e}/auth-verify`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({api_key:t})});if(n.status===401)throw new Error("Invalid API key. Get one at https://gibil.dev");if(!n.ok){let o=await n.text();throw new Error(`API error (${n.status}): ${o}`)}return await n.json()}async function V(t,e,n,o){let i=await Ue(),a=await fetch(`${i}/usage-track`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({api_key:t,event:e,instance_name:n,server_type:o})});if(a.status===429)throw new Error("Usage limit reached. Please try again later or contact support.");if(!a.ok){let s=await a.text();throw new Error(`Usage tracking failed (${a.status}): ${s}`)}}async function gt(t){let e=await Ue(),n=await fetch(`${e}/usage-get`,{headers:{Authorization:`Bearer ${t}`}});if(!n.ok){let o=await n.text();throw new Error(`Failed to fetch usage (${n.status}): ${o}`)}return await n.json()}var ut,At,q=se(()=>{"use strict";F();ut=Vn(_.root,"config.json"),At="https://zopdxjruwktjyjunitrv.supabase.co/functions/v1"});var Ot={};at(Ot,{HetznerProvider:()=>N});function ht(t){return{id:t.id,name:t.name,status:t.status,ipv4:t.public_net.ipv4.ip,ipv6:t.public_net.ipv6.ip,serverType:t.server_type?.name??"unknown",location:t.datacenter?.location?.name??"unknown",labels:t.labels,created:t.created}}function eo(t){return{id:t.id,name:t.name,fingerprint:t.fingerprint??""}}var Qn,N,he=se(()=>{"use strict";k();Qn="https://api.hetzner.cloud/v1";N=class t{token;constructor(e){this.token=e}static async create(e){let{getHetznerToken:n}=await Promise.resolve().then(()=>(q(),ze)),o=e??await n();if(!o)throw new Error("HETZNER_API_TOKEN is required. Run 'gibil init' or set it in your environment.");return new t(o)}async request(e,n,o){let i=`${Qn}${n}`;r.debug(`${e} ${i}`);let a=await fetch(i,{method:e,headers:{Authorization:`Bearer ${this.token}`,"Content-Type":"application/json"},body:o?JSON.stringify(o):void 0,signal:AbortSignal.timeout(3e4)});if(!a.ok){let s=await a.text(),c;try{c=JSON.parse(s).error?.message??s}catch{c=s}let l="";throw a.status===401||a.status===403?l=`
15
15
  Your Hetzner token may be invalid or expired. Run: gibil init --force`:a.status===409&&c.includes("name")?l=`
16
16
  A server with this name already exists. Try a different --name or run: gibil destroy <name>`:a.status===422&&(c.includes("location")||c.includes("server_type"))?l=`
17
17
  This server type may not be available in your region. Run: gibil init --force`:a.status===429&&(l=`
18
- Rate limited by Hetzner. Wait a moment and retry your command.`),new Error(`Hetzner API error (${a.status}): ${c}${l}`)}return a.status===204?{}:await a.json()}async createServer(e,n,o,i,a){if(!i||!a){let{getServerDefaults:d}=await Promise.resolve().then(()=>(J(),ze)),m=await d();i=i??m.serverType,a=a??m.location}if(i.startsWith("cax")&&!["fsn1","nbg1"].includes(a))throw new Error(`ARM server type "${i}" is not available in "${a}". Use --location fsn1 or --location nbg1, or switch to an x86 type (cpx11, cpx21, etc.).`);let l=typeof n=="string"?parseInt(n,10):n,u={name:e,server_type:i,image:"ubuntu-24.04",ssh_keys:[l],labels:{gibil:"true","gibil-name":e},location:a};r.debug(`createServer payload: ${JSON.stringify({name:e,server_type:i,image:"ubuntu-24.04",location:a})}`),o&&(u.user_data=o);try{let d=await this.request("POST","/servers",u);return gt(d.server)}catch(d){let m=`(server_type=${i}, location=${a}). Try a different --server-type or --location.`;throw d instanceof Error?new Error(`${d.message} ${m}`):d}}async destroyServer(e){await this.request("DELETE",`/servers/${e}`)}async getServer(e){let n=await this.request("GET",`/servers/${e}`);return gt(n.server)}async listServers(e="gibil=true"){return(await this.request("GET",`/servers?label_selector=${encodeURIComponent(e)}&per_page=50`)).servers.map(gt)}async waitForReady(e,n=12e4){let o=Date.now(),i=3e3;for(;Date.now()-o<n;){let a=await this.getServer(e);if(a.status==="running"&&a.ipv4!=="0.0.0.0")return a;r.debug(`Server ${e} status: ${a.status}, waiting...`),await new Promise(s=>setTimeout(s,i))}throw new Error(`Server ${e} did not become ready within ${n/1e3}s`)}async createSSHKey(e,n){let o=await this.request("POST","/ssh_keys",{name:e,public_key:n});return Qn(o.ssh_key)}async deleteSSHKey(e){await this.request("DELETE",`/ssh_keys/${e}`)}}});import{readFile as ho,writeFile as yo,mkdir as Jt,rm as Bt,readdir as vo,rename as wo}from"fs/promises";import{existsSync as zt}from"fs";import{join as ht}from"path";async function vt(t,e,n){let o=`${t}.tmp`;await yo(o,e,n);try{await wo(o,t)}catch(i){throw await Bt(o,{force:!0}).catch(a=>{console.warn(`Warning: failed to clean up temp file ${o}: ${a}`)}),i}}var yt,Pe,ce,We,E,we,B,A=se(()=>{"use strict";D();yt=class{instancesDir;keysDir;constructor(e){let n=e??S.root;this.instancesDir=ht(n,"instances"),this.keysDir=ht(n,"keys")}async ensureDirectories(){await Jt(this.instancesDir,{recursive:!0,mode:448}),await Jt(this.keysDir,{recursive:!0,mode:448})}instanceFile(e){return ht(this.instancesDir,`${e}.json`)}async save(e){await this.ensureDirectories(),await vt(this.instanceFile(e.name),JSON.stringify(e,null,2),{mode:384})}async load(e){let n=this.instanceFile(e);if(!zt(n))return null;let o=await ho(n,"utf-8");return JSON.parse(o)}async loadOrThrow(e){let n=await this.load(e);if(!n)throw new Error(`Instance "${e}" not found. Run "gibil list" to see active instances.`);return n}async loadActiveOrThrow(e){let n=await this.loadOrThrow(e);if(new Date>new Date(n.expiresAt))throw new Error(`Instance "${e}" has expired (TTL was ${n.ttlMinutes}m). Run "gibil destroy ${e}" to clean up.`);return n}async delete(e){let n=this.instanceFile(e);zt(n)&&await Bt(n)}async list(){await this.ensureDirectories();let e=await vo(this.instancesDir),n=[];for(let o of e){if(!o.endsWith(".json"))continue;let i=o.replace(".json",""),a=await this.load(i);a&&n.push(a)}return n}},Pe=new yt,ce=t=>Pe.save(t),We=t=>Pe.loadOrThrow(t),E=t=>Pe.loadActiveOrThrow(t),we=t=>Pe.delete(t),B=()=>Pe.list()});var en={};st(en,{JobStore:()=>Qe,deleteJob:()=>jo,deleteJobsByInstance:()=>Re,listJobs:()=>be,listJobsByInstance:()=>Po,loadJob:()=>To,loadJobOrThrow:()=>ie,saveJob:()=>K});import{readFile as ko,mkdir as Zt,rm as Eo,readdir as Co}from"fs/promises";import{existsSync as Xt}from"fs";import{join as Qt}from"path";var Qe,ue,K,To,ie,jo,be,Po,Re,de=se(()=>{"use strict";D();A();Qe=class{jobsDir;constructor(e){let n=e??S.root;this.jobsDir=Qt(n,"jobs")}jobFile(e){if(!/^[a-zA-Z0-9_-]+$/.test(e))throw new Error(`Invalid job ID: "${e}"`);return Qt(this.jobsDir,`${e}.json`)}async save(e){await Zt(this.jobsDir,{recursive:!0,mode:448}),await vt(this.jobFile(e.id),JSON.stringify(e,null,2),{mode:384})}async load(e){let n=this.jobFile(e);if(!Xt(n))return null;let o=await ko(n,"utf-8");return JSON.parse(o)}async loadOrThrow(e){let n=await this.load(e);if(!n)throw new Error(`Job "${e}" not found. Run "gibil job list" to see active jobs.`);return n}async delete(e){let n=this.jobFile(e);Xt(n)&&await Eo(n)}async list(){await Zt(this.jobsDir,{recursive:!0,mode:448});let e=await Co(this.jobsDir),n=[];for(let o of e){if(!o.endsWith(".json"))continue;let i=o.replace(".json",""),a=await this.load(i);a&&n.push(a)}return n}async listByInstance(e){return(await this.list()).filter(o=>o.instance===e)}async deleteByInstance(e){let n=await this.listByInstance(e);for(let o of n)await this.delete(o.id)}},ue=new Qe,K=t=>ue.save(t),To=t=>ue.load(t),ie=t=>ue.loadOrThrow(t),jo=t=>ue.delete(t),be=()=>ue.list(),Po=t=>ue.listByInstance(t),Re=t=>ue.deleteByInstance(t)});import{Command as pr}from"commander";import{readFileSync as gr}from"fs";import{fileURLToPath as hr}from"url";import{dirname as yr,join as vr}from"path";ge();D();import{mkdir as eo,rm as Ot,readFile as to,chmod as no}from"fs/promises";import{existsSync as Rt}from"fs";import{execFile as oo}from"child_process";import{promisify as ro}from"util";var io=ro(oo);async function Be(t){let e=S.keyDir(t);Rt(e)&&await Ot(e,{recursive:!0}),await eo(e,{recursive:!0});let n=S.privateKey(t),o=S.publicKey(t);await io("ssh-keygen",["-t","ed25519","-f",n,"-N","","-C",`gibil-${t}`]),await no(n,384);let i=await to(o,"utf-8");return{privateKeyPath:n,publicKeyPath:o,publicKey:i.trim()}}async function re(t){let e=S.keyDir(t);Rt(e)&&await Ot(e,{recursive:!0})}D();I();O();import{Client as Mt}from"ssh2";import{readFile as Ht}from"fs/promises";async function $(t){let{instanceName:e,ip:n,command:o,stream:i=!1,timeoutMs:a=3e4}=t,s=await Ht(S.privateKey(e),"utf-8");return new Promise((c,l)=>{let u=new Mt,d="",m="";u.on("ready",()=>{r.debug(`SSH connected to ${n}`),u.exec(o,(p,g)=>{if(p)return u.end(),l(p);g.on("data",h=>{let w=h.toString();d+=w,i&&process.stdout.write(w)}),g.stderr.on("data",h=>{let w=h.toString();m+=w,i&&process.stderr.write(w)}),g.on("close",h=>{u.end(),c({stdout:d,stderr:m,exitCode:h??0})})})}).on("error",p=>{let g="";p.code==="ECONNREFUSED"?g=" (instance may have been destroyed or is still booting)":p.code==="EHOSTUNREACH"?g=" (IP unreachable \u2014 instance may not be running)":p.code==="ETIMEDOUT"&&(g=" (connection timed out \u2014 check if instance is running with 'gibil list')"),l(new Error(`SSH connection to ${n} failed: ${p.message}${g}`))}).connect({host:n,port:22,username:"root",privateKey:s,readyTimeout:a,hostVerifier:()=>!0,agent:process.env.SSH_AUTH_SOCK,agentForward:!0})})}function Dt(t){let{instanceName:e,ip:n,filePath:o,timeoutMs:i=3e4}=t,a=null,s=!1;return(async()=>{try{let c=await Ht(S.privateKey(e),"utf-8");a=new Mt,await new Promise((l,u)=>{a.on("ready",()=>{a.exec(`tail -f ${o} 2>/dev/null`,(d,m)=>{if(d)return a.end(),u(d);m.on("data",p=>{s||process.stdout.write(f(p.toString()))}),m.stderr.on("data",p=>{s||process.stderr.write(f(p.toString()))}),m.on("close",()=>{a.end(),l()})})}).on("error",d=>{s||r.debug(`Verbose log tail failed: ${d.message}`),u(d)}).connect({host:n,port:22,username:"root",privateKey:c,readyTimeout:i,hostVerifier:()=>!0})})}catch{}})(),{abort(){if(s=!0,a)try{a.end()}catch{}}}}async function qe(t,e,n=12e4){let o=Date.now(),i=5e3;for(;Date.now()-o<n;)try{await $({instanceName:t,ip:e,command:"echo ready",timeoutMs:1e4});return}catch{r.debug(`SSH not ready on ${e}, retrying...`),await new Promise(a=>setTimeout(a,i))}throw new Error(`SSH did not become available on ${e} within ${n/1e3}s`)}function ae(t){let{repo:e,config:n,ttlMinutes:o,githubToken:i,gitIdentity:a}=t,s=["#!/bin/bash","set -euo pipefail","","# \u2500\u2500 Gibil cloud-init \u2500\u2500","export HOME=/root","export DEBIAN_FRONTEND=noninteractive"];i&&s.push(`export GITHUB_TOKEN=${R(i)}`),s.push("","# Base packages","apt-get update -qq","apt-get install -y -qq git curl wget build-essential unzip > /dev/null 2>&1","","# Install GitHub CLI","if ! type gh > /dev/null 2>&1; then"," curl -fsSL https://cli.github.com/packages/githubcli-archive-keyring.gpg | dd of=/usr/share/keyrings/githubcli-archive-keyring.gpg 2>/dev/null"," chmod go+r /usr/share/keyrings/githubcli-archive-keyring.gpg"," ARCH=$(dpkg --print-architecture)",' echo "deb [arch=${ARCH} signed-by=/usr/share/keyrings/githubcli-archive-keyring.gpg] https://cli.github.com/packages stable main" > /etc/apt/sources.list.d/github-cli.list'," apt-get update -qq && apt-get install -y -qq gh > /dev/null 2>&1","fi","");let c=n?.image??"node:20";if(s.push(...so(c)),t.agent){let l=lo(t.agent);l&&(s.push(`# Install ${t.agent} + tmux`),t.agent==="aider"&&s.push("apt-get install -y -qq python3-pip > /dev/null 2>&1"),s.push(`${l} > /dev/null 2>&1`,"apt-get install -y -qq tmux > /dev/null 2>&1",""))}if(n?.services&&n.services.length>0){s.push(...ao()),s.push("");for(let l of n.services)s.push(...co(l))}if(n?.env){s.push("# Environment variables");for(let[l,u]of Object.entries(n.env))s.push(`export ${l}=${R(u)}`),s.push(`echo ${R(`${l}=${u}`)} >> /etc/environment`);s.push("")}if(s.push("# Configure git"),a?(s.push(`git config --global user.email ${R(a.email)}`),s.push(`git config --global user.name ${R(a.name)}`),a.signingKey&&(s.push("git config --global gpg.format ssh"),s.push(`git config --global user.signingkey ${R("key::"+a.signingKey)}`),s.push("git config --global commit.gpgsign true"),s.push("git config --global tag.gpgsign true"),s.push("mkdir -p /root/.ssh"),s.push(`echo ${R(a.email+" "+a.signingKey)} > /root/.ssh/allowed_signers`),s.push("git config --global gpg.ssh.allowedSignersFile /root/.ssh/allowed_signers"))):(s.push("git config --global user.email 'gibil@bot.dev'"),s.push("git config --global user.name 'Gibil Bot'")),s.push(""),e){let l=e.match(/github\.com\/([^/]+\/[^/.]+)/);if(s.push("# Clone repository"),s.push("cd /root"),l){let u=l[1];s.push('if [ -n "${GITHUB_TOKEN:-}" ]; then'),s.push(` CLONE_URL="https://x-access-token:\${GITHUB_TOKEN}@github.com/${u}.git"`),s.push("else"),s.push(` CLONE_URL='https://github.com/${u}.git'`),s.push("fi"),s.push('timeout 300 git clone "$CLONE_URL" /root/project || { echo "Git clone failed or timed out"; exit 1; }')}else s.push(`timeout 300 git clone ${R(e)} /root/project || { echo "Git clone failed or timed out"; exit 1; }`);s.push("cd /root/project"),s.push(""),s.push('if [ -n "${GITHUB_TOKEN:-}" ]; then'),s.push(' echo "${GITHUB_TOKEN}" | gh auth login --with-token 2>/dev/null || true'),l&&s.push(` git -C /root/project remote set-url origin "https://x-access-token:\${GITHUB_TOKEN}@github.com/${l[1]}.git"`),s.push("fi"),s.push("")}if(o&&o>0&&(s.push("# Auto-destroy after TTL"),s.push(`echo "shutdown -h now" | at now + ${o} minutes 2>/dev/null || true`),s.push(`(sleep ${o*60} && shutdown -h now) &`),s.push("")),s.push("# Clean up cloud-init secrets"),s.push("rm -f /var/lib/cloud/instance/user-data.txt"),s.push(""),s.push("# Signal that infrastructure is ready"),s.push("touch /root/.gibil-ready"),s.push('echo "Gibil infrastructure ready"'),s.push(""),e&&n?.tasks&&n.tasks.length>0){s.push("# Run project tasks"),s.push("cd /root/project");for(let l of n.tasks)s.push(`echo '\u25B6 Running task: '${R(l.name)}`),s.push(`if ! ${l.command}; then`),s.push(` echo '\u2717 Task failed: '${R(l.name)}`),s.push(" touch /root/.gibil-tasks-failed"),s.push("fi");s.push(""),s.push("# Signal tasks complete"),s.push("if [ ! -f /root/.gibil-tasks-failed ]; then"),s.push(" touch /root/.gibil-tasks-done"),s.push(' echo "Gibil tasks complete"'),s.push("else"),s.push(' echo "Gibil tasks finished with errors"'),s.push("fi")}return s.join(`
19
- `)}function so(t){let e=[];if(t.startsWith("node:")){let n=t.split(":")[1]??"20";e.push("# Install Node.js"),e.push(`curl -fsSL https://deb.nodesource.com/setup_${n}.x | bash - > /dev/null 2>&1`),e.push("apt-get install -y -qq nodejs > /dev/null 2>&1"),e.push("npm install -g pnpm@latest > /dev/null 2>&1"),e.push("")}else if(t.startsWith("python:")){let n=t.split(":")[1]??"3.12";e.push("# Install Python"),e.push(`apt-get install -y -qq python${n} python3-pip python3-venv > /dev/null 2>&1`),e.push("")}else if(t.startsWith("go:")){let n=t.split(":")[1]??"1.22";e.push("# Install Go"),e.push('GO_ARCH=$(uname -m | sed "s/x86_64/amd64/" | sed "s/aarch64/arm64/")'),e.push(`wget -q https://go.dev/dl/go${n}.linux-\${GO_ARCH}.tar.gz -O /tmp/go.tar.gz`),e.push("tar -C /usr/local -xzf /tmp/go.tar.gz"),e.push("export PATH=$PATH:/usr/local/go/bin"),e.push('echo "export PATH=\\$PATH:/usr/local/go/bin" >> /root/.bashrc'),e.push("")}else e.push("# Install Node.js (default)"),e.push("curl -fsSL https://deb.nodesource.com/setup_20.x | bash - > /dev/null 2>&1"),e.push("apt-get install -y -qq nodejs > /dev/null 2>&1"),e.push("npm install -g pnpm@latest > /dev/null 2>&1"),e.push("");return e}function ao(){return["# Install Docker","curl -fsSL https://get.docker.com | sh > /dev/null 2>&1","systemctl enable docker --now"]}function co(t){let e=[];e.push(`# Start service: ${t.name.replace(/[^a-zA-Z0-9_-]/g,"")}`);let o=`docker run -d --name ${t.name.replace(/[^a-zA-Z0-9_-]/g,"")}`;if(t.port&&(o+=` -p ${t.port}:${t.port}`),t.env)for(let[i,a]of Object.entries(t.env))o+=` -e ${i}=${R(a)}`;return o+=` ${R(t.image)}`,e.push(o),e.push(""),e}var Kt={claude:"npm install -g @anthropic-ai/claude-code",aider:"pip install --break-system-packages aider-chat",codex:"npm install -g @openai/codex"},he={claude:["ANTHROPIC_API_KEY"],aider:["ANTHROPIC_API_KEY","OPENAI_API_KEY"],codex:["OPENAI_API_KEY"]},z=Object.keys(Kt);function lo(t){return Kt[t]??null}function R(t){return`'${t.replace(/'/g,"'\\''")}'`}import{readFile as uo}from"fs/promises";import{existsSync as Lt,statSync as mo}from"fs";import{join as fo}from"path";import{parse as Gt}from"yaml";async function ye(t){let e=t.match(/github\.com\/([^/]+)\/([^/.]+)/);if(!e)return null;let[,n,o]=e,i=`https://raw.githubusercontent.com/${n}/${o}/HEAD/.gibil.yml`;try{let a={};process.env.GITHUB_TOKEN&&(a.Authorization=`token ${process.env.GITHUB_TOKEN}`);let s=await fetch(i,{signal:AbortSignal.timeout(1e4),headers:a});if(!s.ok)return null;let c=await s.text();return go(c)}catch{return null}}var po=".gibil.yml";async function ve(t){let e;if(Lt(t)&&mo(t).isFile()?e=t:e=fo(t,po),!Lt(e))return null;let n=await uo(e,"utf-8"),o=Gt(n);return Ut(o)}function go(t){let e=Gt(t);return Ut(e)}function Ut(t){if(!t||typeof t!="object")throw new Error("Invalid .gibil.yml: must be a YAML object");let e=t,n={};return typeof e.name=="string"&&(n.name=e.name),typeof e.image=="string"&&(n.image=e.image),typeof e.server_type=="string"&&(n.server_type=e.server_type),typeof e.location=="string"&&(n.location=e.location),Array.isArray(e.services)&&(n.services=e.services.map(o=>{let i=o;if(typeof i.name!="string"||typeof i.image!="string")throw new Error("Each service must have a 'name' and 'image' field");return{name:i.name,image:i.image,port:typeof i.port=="number"?i.port:void 0,env:Ft(i.env,`service "${i.name}"`)}})),Array.isArray(e.tasks)&&(n.tasks=e.tasks.map(o=>{let i=o;if(typeof i.name!="string"||typeof i.command!="string")throw new Error("Each task must have a 'name' and 'command' field");return{name:i.name,command:i.command}})),e.env!==void 0&&(n.env=Ft(e.env,"top-level")),n}function Ft(t,e){if(t==null)return;if(typeof t!="object"||Array.isArray(t))throw new Error(`env in ${e} must be a key-value object`);let n={};for(let[o,i]of Object.entries(t))if(typeof i=="string")n[o]=i;else if(typeof i=="number"||typeof i=="boolean")n[o]=String(i);else throw new Error(`env.${o} in ${e} must be a string, number, or boolean \u2014 got ${typeof i}`);return Object.keys(n).length>0?n:void 0}A();import{randomBytes as bo}from"crypto";function le(t=6){return bo(Math.ceil(t/2)).toString("hex").slice(0,t)}function Ne(){return`gibil-${le()}`}function qt(){return`fleet-${le(8)}`}function Ye(){return`j-${le(8)}`}D();I();var $o=/^[a-zA-Z0-9][a-zA-Z0-9_-]{0,62}$/;function Ve(t){if(!$o.test(t))throw new Error(`Invalid instance name "${t}". Names must be 1-63 chars, start with alphanumeric, and contain only [a-zA-Z0-9_-].`);return t}function Ae(t,e){let n=parseInt(t,10);if(isNaN(n)||n<=0)throw new Error(`${e} must be a positive integer, got "${t}"`);return n}J();O();import{execSync as Ze}from"child_process";import{readFileSync as xo}from"fs";var wt="key::";function So(){try{let t=Ze("git config user.name",{encoding:"utf-8"}).trim(),e=Ze("git config user.email",{encoding:"utf-8"}).trim();if(!t||!e)return;let n;try{if(Ze("git config gpg.format",{encoding:"utf-8"}).trim()==="ssh"){let i=Ze("git config user.signingkey",{encoding:"utf-8"}).trim();if(i)try{n=xo(i,"utf-8").trim()}catch{(i.startsWith("ssh-")||i.startsWith(wt))&&(n=i.startsWith(wt)?i.slice(wt.length):i)}}}catch{}return{name:t,email:e,signingKey:n}}catch{return}}async function Xe(t,e,n){r.step("Generating SSH keys...");let o=await Be(e),i,a;try{r.step("Uploading SSH key..."),i=await t.createSSHKey(`gibil-${e}-${le(4)}`,o.publicKey),n.repo&&n.repo.includes("github.com")&&!process.env.GITHUB_TOKEN&&r.debug("No GITHUB_TOKEN set \u2014 private repos will fail to clone. Set GITHUB_TOKEN to enable private repo access.");let s=So(),c=ae({repo:n.repo,config:n.config??void 0,ttlMinutes:n.ttlMinutes,githubToken:process.env.GITHUB_TOKEN,gitIdentity:s,agent:n.agent}),l=r.spin("Creating server on Hetzner..."),u=await t.createServer(e,i.id,c,n.serverType??n.config?.server_type,n.location??n.config?.location);a=u.id,l.succeed("Server created");let d=r.spin("VM booting..."),p=(await t.waitForReady(u.id)).ipv4;d.succeed(`VM running at ${p}`);let g=new Date,h={name:e,serverId:u.id,ip:p,sshKeyId:i.id,keyPath:S.privateKey(e),status:"running",createdAt:g.toISOString(),ttlMinutes:n.ttlMinutes,expiresAt:new Date(g.getTime()+n.ttlMinutes*6e4).toISOString(),repo:n.repo,fleetId:n.fleetId,gitIdentity:s};await ce(h);let w=r.spin("Waiting for SSH...");if(await qe(e,p),w.succeed("SSH ready"),n.repo||n.config){let C=r.spin("Provisioning (runtime, repo, deps)..."),b;n.verbose&&!n.json&&(b=Dt({instanceName:e,ip:p,filePath:"/var/log/cloud-init-output.log"}));let v=36e4,Z=5e3,q=Date.now(),fe=!1;for(;Date.now()-q<v;){try{if((await $({instanceName:e,ip:p,command:"test -f /root/.gibil-ready && echo ready || echo waiting",timeoutMs:1e4})).stdout.trim()==="ready"){fe=!0;break}}catch{}await new Promise(W=>setTimeout(W,Z))}if(b?.abort(),fe)C.succeed("Provisioning complete");else{C.fail("Provisioning may have failed");try{let W=await $({instanceName:e,ip:p,command:"tail -20 /var/log/cloud-init-output.log 2>/dev/null || echo 'No cloud-init log found'",timeoutMs:1e4});r.info(W.stdout)}catch{r.warn("Could not read cloud-init log.")}}}return h}catch(s){throw r.error(`Failed to create instance "${e}", cleaning up...`),a&&await t.destroyServer(a).catch(c=>r.warn(`Could not destroy Hetzner server ${a}: ${c instanceof Error?c.message:String(c)}`)),i&&await t.deleteSSHKey(i.id).catch(c=>r.warn(`Could not delete Hetzner SSH key ${i.id}: ${c instanceof Error?c.message:String(c)}`)),await re(e).catch(c=>r.warn(`Could not clean up local SSH keys: ${c instanceof Error?c.message:String(c)}`)),s}}function Wt(t){let e=Math.max(0,Math.floor((new Date(t.expiresAt).getTime()-Date.now())/1e3));return{name:t.name,ip:t.ip,ssh:`ssh -i ${t.keyPath} -o StrictHostKeyChecking=no root@${t.ip}`,status:t.status,ttl_remaining:e,created_at:t.createdAt,fleet_id:t.fleetId}}function Yt(t){t.command("create").description("Spin up one or more ephemeral dev machines").option("-n, --name <name>","Instance name").option("-f, --fleet <count>","Number of instances to create in parallel").option("-r, --repo <git-url>","Git repository to clone on startup").option("--json","Output instance info as JSON").option("--ttl <minutes>","Auto-destroy after N minutes","60").option("-c, --config <path>","Path to .gibil.yml config").option("--server-type <type>","Hetzner server type (e.g. cpx11, cpx21)").option("--location <loc>","Hetzner location (e.g. fsn1, nbg1)").option("-q, --quiet","Suppress non-essential output").option("-e, --env <KEY=VALUE...>","Environment variables to set on the server").option("--agent <name>","Install a coding agent (claude, aider, codex)").option("-V, --verbose","Stream cloud-init logs during provisioning").option("--dry-run","Print config summary and cloud-init script without deploying").action(async e=>{e.json&&_(!0);let n=Ae(e.ttl??"60","TTL");if(n>10080)throw new Error("TTL cannot exceed 7 days (10080 minutes).");let o=Ae(e.fleet??"1","Fleet count");if(o>20)throw new Error("Fleet size cannot exceed 20. Contact support for higher limits.");if(e.name&&Ve(e.name),!e.agent){let l=await je();l&&(e.agent=l)}if(e.agent&&!z.includes(e.agent))throw new Error(`Unknown agent "${e.agent}". Supported: ${z.join(", ")}`);let i={};if(e.env)for(let l of e.env){let u=l.indexOf("=");if(u<=0)throw new Error(`Invalid --env format: "${l}". Use KEY=VALUE.`);i[l.slice(0,u)]=l.slice(u+1)}i.GITHUB_TOKEN&&!process.env.GITHUB_TOKEN&&(process.env.GITHUB_TOKEN=i.GITHUB_TOKEN);let a=null;if(e.config?a=await ve(e.config):e.repo?a=await ye(e.repo)??await ve(process.cwd()):a=await ve(process.cwd()),Object.keys(i).length>0&&(a||(a={}),a.env={...a.env,...i}),e.dryRun){let l=e.name??Ne(),u=e.serverType??a?.server_type??"cx22",d=e.location??a?.location??"nbg1",m=a?.image??"node:20",p=ae({repo:e.repo,config:a??void 0,ttlMinutes:n,githubToken:process.env.GITHUB_TOKEN,gitIdentity:void 0,agent:e.agent}),g={name:l,serverType:u,location:d,image:m,ttlMinutes:n,repo:e.repo,agent:e.agent,cloudInitScript:p};e.json?r.json(g):(r.info(""),r.info(y("Dry run \u2014 no server will be created")),r.info(""),r.info(` ${f("Name:")} ${l}`),r.info(` ${f("Server type:")} ${u}`),r.info(` ${f("Location:")} ${d}`),r.info(` ${f("Image:")} ${m}`),r.info(` ${f("TTL:")} ${n} minutes`),e.repo&&r.info(` ${f("Repo:")} ${e.repo}`),e.agent&&r.info(` ${f("Agent:")} ${e.agent}`),r.info(""),r.info("Cloud-init script:"),r.info("\u2500".repeat(17)),r.info(p));return}let s=await P();if(s){r.info("Verifying API key...");let l=await oe(s);r.info(` Authenticated as ${l.user.email} (${l.user.plan})`)}if(e.agent&&!he[e.agent]?.some(u=>a?.env?.[u]||i[u])){let u=he[e.agent]?.join(" or ")??"";r.warn(`${e.agent} needs ${u}. SSH in and export it (recommended) or pass with --env.`)}let c=await N.create();if(o===1){let l=e.name??Ne(),u=Date.now(),d=r.spin(`Forging "${l}"...`),m=await Xe(c,l,{repo:e.repo,ttlMinutes:n,config:a,serverType:e.serverType,location:e.location,agent:e.agent,verbose:e.verbose}),p=((Date.now()-u)/1e3).toFixed(1);d.succeed(k.createReady(l,p)),s&&await Y(s,"create",m.name,e.serverType).catch(g=>r.debug(`Usage tracking failed: ${g instanceof Error?g.message:String(g)}`)),e.json?r.json(Wt(m)):(r.info(""),r.info(Fe("Server ready",[`${f("Name:")} ${y(m.name)}`,`${f("IP:")} ${m.ip}`,`${f("TTL:")} ${n} minutes`,`${f("SSH:")} ${y(`gibil ssh ${m.name}`)}`])),r.info(""),r.info(f(" Try:")),r.info(` ${y(`gibil run ${m.name} "<your test command>"`)}`),r.info(` ${y(`gibil ssh ${m.name}`)}`),r.info(` ${y(`gibil destroy ${m.name}`)}`),r.info(""))}else{let l=qt(),u=e.name??"gibil",d=Date.now(),m=r.spin(`Forging fleet "${l}" \u2014 ${o} servers...`),p=Array.from({length:o},(b,v)=>`${u}-${v+1}-${l.slice(6)}`),g=await Promise.allSettled(p.map(b=>Xe(c,b,{repo:e.repo,ttlMinutes:n,config:a,serverType:e.serverType,location:e.location,fleetId:l,agent:e.agent,verbose:e.verbose}))),h=[],w=[];for(let b=0;b<g.length;b++){let v=g[b];v.status==="fulfilled"?h.push(v.value):w.push(`${p[b]}: ${v.reason instanceof Error?v.reason.message:String(v.reason)}`)}let C=((Date.now()-d)/1e3).toFixed(1);if(m.succeed(k.fleetReady(h.length,o)+` ${f(`(${C}s)`)}`),s&&await Promise.all(h.map(b=>Y(s,"create",b.name,e.serverType).catch(v=>r.debug(`Usage tracking failed for ${b.name}: ${v instanceof Error?v.message:String(v)}`)))),e.json)r.json({fleet_id:l,instances:h.map(Wt),errors:w});else{r.info("");for(let b of h)r.info(` ${G} ${y(b.name)} ${f("\u2192")} ${b.ip}`);for(let b of w)r.info(` ${Ee} ${b}`);r.info("")}}})}A();import{spawn as Ao}from"child_process";import{spawn as _o}from"child_process";import{existsSync as Io}from"fs";function Oe(t){if(t.includes(":")){let e=t.split(":");if(e.length!==3)throw new Error(`Invalid port mapping "${t}". Use PORT or LOCAL:HOST:REMOTE.`);let[n,,o]=e;bt(n,t),bt(o,t)}else bt(t,t)}function bt(t,e){let n=parseInt(t,10);if(isNaN(n)||n<1||n>65535||String(n)!==t)throw new Error(`Invalid port number in "${e}". Must be 1-65535.`)}function Vt(t,e){if(!Io(t.keyPath))throw new Error(`SSH key not found: ${t.keyPath}. The instance may have been destroyed.`);let n=[];for(let o of e){Oe(o);let i=o.includes(":")?o:`${o}:localhost:${o}`,a=o.includes(":")?o.split(":")[0]:o;n.push(a),_o("ssh",["-f","-N","-L",i,"-i",t.keyPath,"-o","StrictHostKeyChecking=no","-o","UserKnownHostsFile=/dev/null","-o","LogLevel=ERROR","-o","ExitOnForwardFailure=yes",`root@${t.ip}`],{stdio:"ignore",detached:!0}).unref()}return n}I();O();I();A();de();var No=["ECONNREFUSED","EHOSTUNREACH","ETIMEDOUT"];function me(t){if(!(t instanceof Error))return!1;let e=t.message;return No.some(n=>e.includes(n))}async function L(t){try{let{HetznerProvider:e}=await Promise.resolve().then(()=>(ge(),At)),{getHetznerToken:n}=await Promise.resolve().then(()=>(J(),ze)),o=await n();return o?(await(await e.create(o)).getServer(t.serverId),"still_exists"):"api_error"}catch(e){return e instanceof Error&&e.message.includes("(404)")?(await re(t.name),await Re(t.name),await we(t.name),r.warn(`Instance "${t.name}" no longer exists on Hetzner \u2014 cleaned up local metadata`),"cleaned"):"api_error"}}function tn(t){t.command("ssh <name>").description("SSH into a running ephemeral machine").option("-p, --port <ports...>","Forward local port(s) to server (e.g. --port 3000 --port 5432)").action(async(e,n)=>{let o=await E(e),i=["-A","-i",o.keyPath,"-o","StrictHostKeyChecking=no","-o","UserKnownHostsFile=/dev/null","-o","LogLevel=ERROR"];if(n.port&&n.port.length>0){for(let s of n.port){Oe(s);let c=s.includes(":")?s:`${s}:localhost:${s}`;i.push("-L",c)}r.info("");for(let s of n.port){let c=s.includes(":")?s.split(":")[0]:s;r.info(` Forwarding ${y(`localhost:${c}`)} \u2192 ${e}:${s}`)}r.info(""),r.info(f(" Tunnel active while SSH session is open. Ctrl+C to stop.")),r.info("")}i.push(`root@${o.ip}`),Ao("ssh",i,{stdio:"inherit"}).on("exit",s=>{let c=()=>process.exit(s??0);s===255?L(o).then(c,c):c()})})}A();de();I();function nn(t){t.command("run <name> <command...>").description("Execute a command on a running instance").option("--json","Output result as JSON").option("--timeout <seconds>","Command timeout in seconds (default: 30)").option("-b, --background","Run in background, return job ID immediately").action(async(e,n,o)=>{o.json&&_(!0);let i=await E(e),a=n.join(" "),s=o.timeout?Ae(o.timeout,"Timeout")*1e3:3e4;if(o.background){let l=Ye(),u="/root/.gibil-jobs",d=`${u}/${l}.log`,m=`${u}/${l}.exit`,p=`${u}/${l}.pid`,g=`${u}/${l}.sh`,h=["#!/bin/bash",`nohup bash -c '${a.replace(/'/g,"'\\''")}' > ${d} 2>&1 &`,"BGPID=$!",`echo $BGPID > ${p}`,`(wait $BGPID 2>/dev/null; echo $? > ${m}) &`,"echo $BGPID"].join(`
20
- `),w=Buffer.from(h).toString("base64"),C=`mkdir -p ${u} && echo '${w}' | base64 -d > ${g} && chmod +x ${g} && bash ${g}`,b;try{b=await $({instanceName:e,ip:i.ip,command:C,timeoutMs:1e4})}catch(Z){throw me(Z)&&await L(i)==="cleaned"&&process.exit(1),Z}let v=parseInt(b.stdout.trim(),10);isNaN(v)&&(r.error("Failed to start background job \u2014 could not capture PID"),process.exit(1)),await K({id:l,instance:e,command:a,pid:v,status:"running",startedAt:new Date().toISOString()}),o.json?r.json({job_id:l,instance:e,status:"running",pid:v}):(r.info(`Background job started: ${l} (PID ${v})`),r.info(` Poll: gibil job ${l}`));return}r.info(`Running on "${e}" (${i.ip}): ${a}`);let c;try{c=await $({instanceName:e,ip:i.ip,command:a,stream:!o.json,timeoutMs:s})}catch(l){throw me(l)&&await L(i)==="cleaned"&&process.exit(1),l}o.json?r.json({instance:e,command:a,stdout:c.stdout,stderr:c.stderr,exit_code:c.exitCode}):c.exitCode!==0&&r.error(`Command exited with code ${c.exitCode}`),process.exit(c.exitCode??1)})}ge();A();de();I();J();O();D();import{createHash as on}from"crypto";import{readFile as cn,writeFile as Oo,mkdir as Ro}from"fs/promises";import{existsSync as tt,readFileSync as Mo}from"fs";import{hostname as rn,userInfo as Ho,platform as Do,arch as Ko}from"os";import{join as Se,dirname as ln}from"path";import{fork as Lo}from"child_process";import{fileURLToPath as un}from"url";var et=Se(S.root,"device_id"),sn=Se(S.root,"config.json"),Fo=process.env.GIBIL_TELEMETRY_URL??"https://zopdxjruwktjyjunitrv.supabase.co/functions/v1/telemetry-ingest",Go="tk_alpha_09a93302e0f3e73417a9e9dbfc500a61",Me=null,$e=null;function Uo(){try{let t=Ho(),e=`${rn()}:${t.username}:${t.homedir}`;return on("sha256").update(e).digest("hex").slice(0,16)}catch{return on("sha256").update(`${rn()}:${Date.now()}`).digest("hex").slice(0,16)}}async function dn(){if(Me)return Me;if(tt(et)){let e=(await cn(et,"utf-8")).trim();if(e.length>0)return Me=e,Me}let t=Uo();return await Ro(S.root,{recursive:!0,mode:448}),await Oo(et,t,{mode:384}),Me=t,t}async function $t(){if($e!==null)return $e;let t=process.env.GIBIL_TELEMETRY;if(t!==void 0)return $e=!["0","false","off","no"].includes(t.toLowerCase()),$e;try{if(tt(sn)&&JSON.parse(await cn(sn,"utf-8")).telemetry===!1)return $e=!1,!1}catch{}return $e=!0,!0}async function mn(){return tt(et)?!1:(await dn(),!0)}var xe=null;function Jo(){if(xe)return xe;let t=ln(un(import.meta.url));for(let e of["../package.json","../../package.json"])try{return xe=JSON.parse(Mo(Se(t,e),"utf-8")).version??"0.0.0",xe}catch{}return xe="0.0.0",xe}async function He(t){if(!await $t())return;let e=await dn();if(!e)return;let n={...t,device_id:e,cli_version:Jo(),timestamp:new Date().toISOString(),os:Do(),arch:Ko(),node_version:process.version},o=ln(un(import.meta.url)),a=[Se(o,"telemetry-send.js"),Se(o,"..","utils","telemetry-send.js"),Se(o,"telemetry-send.ts")].find(s=>tt(s));if(a)try{Lo(a,{detached:!0,stdio:"ignore",...a.endsWith(".ts")?{execArgv:["--import","tsx"]}:{},env:{...process.env,TELEMETRY_PAYLOAD:JSON.stringify(n),TELEMETRY_ENDPOINT:Fo,TELEMETRY_INGEST_KEY:Go}}).unref()}catch{}}var an=new Map,zo=5e3;async function fn(t){let e=Date.now(),n=an.get(t)??0;e-n<zo||(an.set(t,e),await He({event:"mcp_tool",tool:t}))}function pn(t){return t.slice(3).filter(e=>e.startsWith("-")).map(e=>e.replace(/=.*$/,""))}async function gn(t,e){let n=await We(e);r.info(`Destroying instance "${e}" (server ${n.serverId})...`);try{await t.destroyServer(n.serverId)}catch(a){r.warn(`Could not delete server ${n.serverId}: ${a instanceof Error?a.message:String(a)}`)}try{await t.deleteSSHKey(n.sshKeyId)}catch(a){r.warn(`Could not delete SSH key ${n.sshKeyId}: ${a instanceof Error?a.message:String(a)}`)}await re(e),await Re(e),await we(e);let o=await P();o&&await Y(o,"destroy",e).catch(a=>r.warn(`Usage tracking failed (billing may be inaccurate): ${a instanceof Error?a.message:String(a)}`));let i=Math.round((Date.now()-new Date(n.createdAt).getTime())/6e4);await He({event:"lifecycle",duration_minutes:i}),r.info(` ${G} ${k.destroySingle(e)}`)}function hn(t){t.command("destroy [name]").description("Destroy a running ephemeral machine").option("-a, --all","Destroy all gibil instances").option("--json","Output result as JSON").action(async(e,n)=>{if(n.json&&_(!0),n.all){let o=await B();if(o.length===0){n.json?r.json({destroyed:[],failed:[]}):r.info(k.noInstances);return}let i=await N.create();r.info(`Destroying ${o.length} instance(s)...`);let a=await Promise.allSettled(o.map(l=>gn(i,l.name))),s=[],c=[];for(let l=0;l<a.length;l++)if(a[l].status==="fulfilled")s.push(o[l].name);else{let u=a[l].reason;c.push(`${o[l].name}: ${u instanceof Error?u.message:String(u)}`)}n.json?r.json({destroyed:s,failed:c}):c.length===0?r.info(`
21
- ${k.destroyAll}`):r.info(`
22
- ${s.length} destroyed, ${c.length} failed`)}else{e||(r.error('Specify an instance name or use --all. Run "gibil list" to see instances.'),process.exit(1));let o=await N.create();await gn(o,e),n.json&&r.json({destroyed:[e]})}})}A();I();O();function yn(t){t.command("list").alias("ls").description("List all active gibil instances").option("--json","Output as JSON").action(async e=>{e.json&&_(!0);let n=await B();if(n.length===0){e.json?r.json({instances:[]}):r.info(k.noInstances);return}let o=n.map(i=>{let a=Math.max(0,Math.floor((new Date(i.expiresAt).getTime()-Date.now())/1e3));return{name:i.name,ip:i.ip,ssh:`ssh -i ${i.keyPath} -o StrictHostKeyChecking=no root@${i.ip}`,status:i.status,ttl_remaining:a,created_at:i.createdAt,fleet_id:i.fleetId}});if(e.json){r.json({instances:o});return}r.info(f(`${"NAME".padEnd(30)} ${"IP".padEnd(18)} ${"STATUS".padEnd(12)} ${"TTL".padEnd(10)} ${"AGE".padEnd(10)}`)),r.info(f("\u2500".repeat(80)));for(let i of o){let a=vn(i.ttl_remaining),s=Bo(i.created_at),c=i.name.padEnd(30),l=i.status.padEnd(12),u=a.padEnd(10),d=s.padEnd(10),m=i.status==="running"?Q(l):X(l),p=i.ttl_remaining<=300?X(u):u;r.info(`${y(c)} ${i.ip.padEnd(18)} ${m} ${p} ${f(d)}`)}r.info(`
23
- ${f(`${o.length} server(s)`)}`)})}function vn(t){if(t<=0)return"expired";let e=Math.floor(t/60),n=t%60;return e>=60?`${Math.floor(e/60)}h ${e%60}m`:`${e}m ${n}s`}function Bo(t){let e=Date.now()-new Date(t).getTime(),n=Math.floor(e/1e3);return vn(n)}A();I();function wn(t){t.command("extend <name>").description("Extend the TTL of a running instance").requiredOption("--ttl <minutes>","New TTL in minutes from now").option("--json","Output result as JSON").action(async(e,n)=>{n.json&&_(!0);let o=await E(e),i=parseInt(n.ttl,10);(isNaN(i)||i<=0)&&(r.error("TTL must be a positive number of minutes"),process.exit(1));try{await $({instanceName:e,ip:o.ip,command:["pkill -f 'sleep.*shutdown' || true",`(sleep ${i*60} && shutdown -h now) &`].join(" && ")})}catch(s){throw me(s)&&await L(o)==="cleaned"&&process.exit(1),s}let a=new Date(Date.now()+i*6e4).toISOString();o.ttlMinutes=i,o.expiresAt=a,await ce(o),n.json?r.json({name:o.name,ttl_minutes:i,expires_at:a}):r.info(`\u2713 Extended "${e}" TTL to ${i} minutes (expires ${a})`)})}import{readFile as qo}from"fs/promises";import{randomBytes as Wo}from"crypto";A();I();function bn(t){t.command("exec <name>").description("Upload and run a local script on an instance").requiredOption("-s, --script <path>","Path to local script").option("--json","Output result as JSON").action(async(e,n)=>{n.json&&_(!0);let o=await E(e),i=await qo(n.script,"utf-8");r.info(`Uploading and running script "${n.script}" on "${e}"...`);let a=Buffer.from(i).toString("base64"),s=`/tmp/gibil-script-${Wo(4).toString("hex")}.sh`,c;try{c=await $({instanceName:e,ip:o.ip,command:`echo '${a}' | base64 -d > ${s} && chmod +x ${s} && ${s}; EXIT=$?; rm -f ${s}; exit $EXIT`,stream:!n.json})}catch(l){throw me(l)&&await L(o)==="cleaned"&&process.exit(1),l}n.json?r.json({instance:e,script:n.script,stdout:c.stdout,stderr:c.stderr,exit_code:c.exitCode}):c.exitCode!==0&&r.error(`Script exited with code ${c.exitCode}`),process.exit(c.exitCode??1)})}J();I();O();import{createInterface as Yo}from"readline";function $n(t){let e=Yo({input:process.stdin,output:process.stderr});return new Promise(n=>{e.question(t,o=>{e.close(),n(o.trim())})})}function xn(t){let e=t.command("auth").description("Manage authentication");e.command("login").description("Log in with your Gibil API key").option("--key <api-key>","API key (or enter interactively)").option("--json","Output result as JSON").action(async n=>{n.json&&_(!0);let o=n.key??process.env.GIBIL_API_KEY;o||(o=await $n("Enter your API key: ")),o||(r.error("No API key provided."),process.exit(1)),o.startsWith("pk_")||(r.error('Invalid key format. API keys start with "pk_".'),process.exit(1)),r.info("Verifying API key...");try{let i=await oe(o);await ut(o),n.json?r.json({authenticated:!0,email:i.user.email,plan:i.user.plan}):(r.info(k.authSuccess),r.detail("Email",i.user.email),r.detail("Plan","alpha (free)"))}catch(i){r.error(i instanceof Error?i.message:String(i)),process.exit(1)}}),e.command("setup").description("Configure Hetzner API token (stored in ~/.gibil/config.json)").option("--token <token>","Hetzner API token (or enter interactively)").action(async n=>{let o=n.token;o||(o=await $n("Enter your Hetzner API token: ")),o||(r.error("No token provided."),process.exit(1));try{let a=await(await fetch("https://api.hetzner.cloud/v1/servers",{headers:{Authorization:`Bearer ${o}`}})).json();a.error&&(r.error(`Invalid token: ${a.error.message}`),process.exit(1))}catch(i){r.error(`Could not verify token: ${i instanceof Error?i.message:"Check your network."}`),process.exit(1)}await Te(o),r.success("Hetzner token saved to ~/.gibil/config.json")}),e.command("logout").description("Clear stored API key").action(async()=>{await dt(),r.info(k.authLogout)}),e.command("status").description("Show current authentication status").option("--json","Output result as JSON").action(async n=>{n.json&&_(!0);let o=await P();if(!o){n.json?r.json({authenticated:!1}):r.info(`Not logged in. Run ${y("gibil auth login")} to authenticate.`);return}try{let i=await oe(o);n.json?r.json({authenticated:!0,email:i.user.email,plan:i.user.plan,limits:i.limits}):(r.success(`Authenticated as ${i.user.email}`),r.detail("Plan",i.user.plan),r.detail("Concurrent servers",String(i.limits.max_concurrent)),r.detail("Hours remaining",String(i.limits.remaining_hours)))}catch{n.json?r.json({authenticated:!1,error:"Key verification failed"}):r.error(`Stored API key is invalid. Run ${y("gibil auth login")} to re-authenticate.`)}})}J();I();function Sn(t){t.command("usage").description("Show current month's usage and plan limits").option("--json","Output as JSON").action(async e=>{e.json&&_(!0);let n=await P();n||(r.error('Not logged in. Run "gibil auth login" first.'),process.exit(1));try{let o=await pt(n);e.json?r.json(o):(r.info("Plan: alpha (free)"),r.info(`VM hours used: ${o.vm_hours_used.toFixed(1)}h`),r.info(`Active instances: ${o.active_instances}`))}catch(o){r.error(o instanceof Error?o.message:String(o)),process.exit(1)}})}import{McpServer as Vo}from"@modelcontextprotocol/sdk/server/mcp.js";import{StdioServerTransport as Zo}from"@modelcontextprotocol/sdk/server/stdio.js";import{z as x}from"zod";ge();A();D();import{execSync as nt}from"child_process";import{readFileSync as Xo}from"fs";de();A();de();I();async function xt(t){let e=await ie(t);if(e.status!=="running")return{status:e.status,exitCode:e.exitCode};let n=await E(e.instance),o="/root/.gibil-jobs",i=`${o}/${t}.exit`,a=`${o}/${t}.log`,c=(await $({instanceName:e.instance,ip:n.ip,command:`test -f ${i} && cat ${i} || echo RUNNING`,timeoutMs:1e4})).stdout.trim();if(c==="RUNNING"){try{if((await $({instanceName:e.instance,ip:n.ip,command:`kill -0 ${e.pid} 2>/dev/null && echo "alive" || echo "dead"`,timeoutMs:1e4})).stdout.trim()==="dead"){let h=new Date;e.status="orphaned",e.completedAt=h.toISOString(),await K(e);let w=Math.round((h.getTime()-new Date(e.startedAt).getTime())/1e3),C;try{C=(await $({instanceName:e.instance,ip:n.ip,command:`cat ${a} 2>/dev/null || echo ''`,timeoutMs:1e4})).stdout}catch{}return{status:"orphaned",durationS:w,stdout:C}}}catch{}return{status:"running"}}let l=parseInt(c,10),u=await $({instanceName:e.instance,ip:n.ip,command:`cat ${a} 2>/dev/null || echo ''`,timeoutMs:1e4}),d=l===0?"done":"failed",m=new Date,p=Math.round((m.getTime()-new Date(e.startedAt).getTime())/1e3);return e.status=d,e.exitCode=l,e.completedAt=m.toISOString(),await K(e),{status:d,exitCode:l,stdout:u.stdout,durationS:p}}function _n(t){let e=t.command("job").description("Manage background jobs");e.command("status <id>").description("Check status of a background job").option("--json","Output result as JSON").action(async(n,o)=>{o.json&&_(!0);let i=await ie(n),a=await xt(n);o.json?r.json({job_id:n,instance:i.instance,command:i.command,status:a.status,exit_code:a.exitCode,started_at:i.startedAt,duration_s:a.durationS,...a.stdout!==void 0?{stdout:a.stdout}:{}}):a.status==="running"?(r.info(`Job ${n} is still running on "${i.instance}"`),r.info(` Command: ${i.command}`),r.info(` Started: ${i.startedAt}`)):a.status==="orphaned"?(r.warn(`Job ${n} is orphaned \u2014 process died without writing exit code`),r.info(` Instance: ${i.instance}`),r.info(` Command: ${i.command}`),a.durationS!==void 0&&r.info(` Duration: ${a.durationS}s`),a.stdout&&(r.info(" Output:"),process.stdout.write(a.stdout))):(r.info(`Job ${n}: ${a.status} (exit code ${a.exitCode}, ${a.durationS}s)`),a.stdout&&process.stdout.write(a.stdout))}),e.command("list").description("List all background jobs").option("--json","Output result as JSON").action(async n=>{n.json&&_(!0);let o=await be(),i=await B(),a=new Set(i.map(s=>s.name));for(let s of o)s.status==="running"&&!a.has(s.instance)&&(s.status="orphaned",s.completedAt=new Date().toISOString(),await K(s));if(o.length===0){n.json?r.json([]):r.info("No background jobs.");return}if(n.json)r.json(o.map(s=>({job_id:s.id,instance:s.instance,command:s.command,status:s.status,started_at:s.startedAt,exit_code:s.exitCode})));else for(let s of o){let c=s.status==="running"?"\u27F3 running":s.status==="done"?"\u2713 done":s.status==="orphaned"?"\u26A0 orphaned":`\u2717 ${s.status}`;r.info(` ${s.id} ${c} ${s.instance} ${s.command}`)}}),e.command("cancel <id>").description("Cancel a running background job").option("--json","Output result as JSON").action(async(n,o)=>{o.json&&_(!0);let i=await ie(n);if(i.status!=="running"){o.json?r.json({job_id:n,status:i.status,message:"Job is not running"}):r.info(`Job ${n} is not running (status: ${i.status})`);return}let a=await E(i.instance);await $({instanceName:i.instance,ip:a.ip,command:`kill -- -${i.pid} 2>/dev/null || kill ${i.pid} 2>/dev/null || true`,timeoutMs:1e4}),i.status="cancelled",i.completedAt=new Date().toISOString(),await K(i),o.json?r.json({job_id:n,status:"cancelled"}):r.info(`Job ${n} cancelled.`)}),e.command("logs <id>").description("Fetch output of a background job").option("--json","Output result as JSON").option("-f, --follow","Follow log output (tail -f)").action(async(n,o)=>{o.json&&_(!0);let i=await ie(n),a=await E(i.instance),s=`/root/.gibil-jobs/${n}.log`,c=o.follow?`tail -f ${s}`:`cat ${s} 2>/dev/null || echo '(no output yet)'`,l=o.follow?3e5:1e4,u=await $({instanceName:i.instance,ip:a.ip,command:c,stream:!o.json,timeoutMs:l});o.json&&r.json({job_id:n,stdout:u.stdout})})}function M(t,e,n){let o=`[${t}] ${e}`;return n&&(o+=`
18
+ Rate limited by Hetzner. Wait a moment and retry your command.`),new Error(`Hetzner API error (${a.status}): ${c}${l}`)}return a.status===204?{}:await a.json()}async createServer(e,n,o,i,a){if(!i||!a){let{getServerDefaults:d}=await Promise.resolve().then(()=>(q(),ze)),m=await d();i=i??m.serverType,a=a??m.location}if(i.startsWith("cax")&&!["fsn1","nbg1"].includes(a))throw new Error(`ARM server type "${i}" is not available in "${a}". Use --location fsn1 or --location nbg1, or switch to an x86 type (cpx11, cpx21, etc.).`);let l=typeof n=="string"?parseInt(n,10):n,u={name:e,server_type:i,image:"ubuntu-24.04",ssh_keys:[l],labels:{gibil:"true","gibil-name":e},location:a};r.debug(`createServer payload: ${JSON.stringify({name:e,server_type:i,image:"ubuntu-24.04",location:a})}`),o&&(u.user_data=o);try{let d=await this.request("POST","/servers",u);return ht(d.server)}catch(d){let m=`(server_type=${i}, location=${a}). Try a different --server-type or --location.`;throw d instanceof Error?new Error(`${d.message} ${m}`):d}}async destroyServer(e){await this.request("DELETE",`/servers/${e}`)}async getServer(e){let n=await this.request("GET",`/servers/${e}`);return ht(n.server)}async listServers(e="gibil=true"){return(await this.request("GET",`/servers?label_selector=${encodeURIComponent(e)}&per_page=50`)).servers.map(ht)}async waitForReady(e,n=12e4){let o=Date.now(),i=3e3;for(;Date.now()-o<n;){let a=await this.getServer(e);if(a.status==="running"&&a.ipv4!=="0.0.0.0")return a;r.debug(`Server ${e} status: ${a.status}, waiting...`),await new Promise(s=>setTimeout(s,i))}throw new Error(`Server ${e} did not become ready within ${n/1e3}s`)}async createSSHKey(e,n){let o=await this.request("POST","/ssh_keys",{name:e,public_key:n});return eo(o.ssh_key)}async deleteSSHKey(e){await this.request("DELETE",`/ssh_keys/${e}`)}}});import{readFile as yo,writeFile as vo,mkdir as zt,rm as qt,readdir as wo,rename as bo}from"fs/promises";import{existsSync as Bt}from"fs";import{join as yt}from"path";async function wt(t,e,n){let o=`${t}.tmp`;await vo(o,e,n);try{await bo(o,t)}catch(i){throw await qt(o,{force:!0}).catch(a=>{console.warn(`Warning: failed to clean up temp file ${o}: ${a}`)}),i}}var vt,Ne,ce,We,C,le,Y,A=se(()=>{"use strict";F();vt=class{instancesDir;keysDir;constructor(e){let n=e??_.root;this.instancesDir=yt(n,"instances"),this.keysDir=yt(n,"keys")}async ensureDirectories(){await zt(this.instancesDir,{recursive:!0,mode:448}),await zt(this.keysDir,{recursive:!0,mode:448})}instanceFile(e){return yt(this.instancesDir,`${e}.json`)}async save(e){await this.ensureDirectories(),await wt(this.instanceFile(e.name),JSON.stringify(e,null,2),{mode:384})}async load(e){let n=this.instanceFile(e);if(!Bt(n))return null;let o=await yo(n,"utf-8");return JSON.parse(o)}async loadOrThrow(e){let n=await this.load(e);if(!n)throw new Error(`Instance "${e}" not found. Run "gibil list" to see active instances.`);return n}async loadActiveOrThrow(e){let n=await this.loadOrThrow(e);if(new Date>new Date(n.expiresAt))throw new Error(`Instance "${e}" has expired (TTL was ${n.ttlMinutes}m). Run "gibil destroy ${e}" to clean up.`);return n}async delete(e){let n=this.instanceFile(e);Bt(n)&&await qt(n)}async list(){await this.ensureDirectories();let e=await wo(this.instancesDir),n=[];for(let o of e){if(!o.endsWith(".json"))continue;let i=o.replace(".json",""),a=await this.load(i);a&&n.push(a)}return n}},Ne=new vt,ce=t=>Ne.save(t),We=t=>Ne.loadOrThrow(t),C=t=>Ne.loadActiveOrThrow(t),le=t=>Ne.delete(t),Y=()=>Ne.list()});var tn={};at(tn,{JobStore:()=>Qe,deleteJob:()=>Po,deleteJobsByInstance:()=>He,listJobs:()=>be,listJobsByInstance:()=>No,loadJob:()=>jo,loadJobOrThrow:()=>ie,saveJob:()=>G});import{readFile as Eo,mkdir as Xt,rm as Co,readdir as To}from"fs/promises";import{existsSync as Qt}from"fs";import{join as en}from"path";var Qe,de,G,jo,ie,Po,be,No,He,me=se(()=>{"use strict";F();A();Qe=class{jobsDir;constructor(e){let n=e??_.root;this.jobsDir=en(n,"jobs")}jobFile(e){if(!/^[a-zA-Z0-9_-]+$/.test(e))throw new Error(`Invalid job ID: "${e}"`);return en(this.jobsDir,`${e}.json`)}async save(e){await Xt(this.jobsDir,{recursive:!0,mode:448}),await wt(this.jobFile(e.id),JSON.stringify(e,null,2),{mode:384})}async load(e){let n=this.jobFile(e);if(!Qt(n))return null;let o=await Eo(n,"utf-8");return JSON.parse(o)}async loadOrThrow(e){let n=await this.load(e);if(!n)throw new Error(`Job "${e}" not found. Run "gibil job list" to see active jobs.`);return n}async delete(e){let n=this.jobFile(e);Qt(n)&&await Co(n)}async list(){await Xt(this.jobsDir,{recursive:!0,mode:448});let e=await To(this.jobsDir),n=[];for(let o of e){if(!o.endsWith(".json"))continue;let i=o.replace(".json",""),a=await this.load(i);a&&n.push(a)}return n}async listByInstance(e){return(await this.list()).filter(o=>o.instance===e)}async deleteByInstance(e){let n=await this.listByInstance(e);for(let o of n)await this.delete(o.id)}},de=new Qe,G=t=>de.save(t),jo=t=>de.load(t),ie=t=>de.loadOrThrow(t),Po=t=>de.delete(t),be=()=>de.list(),No=t=>de.listByInstance(t),He=t=>de.deleteByInstance(t)});import{Command as gr}from"commander";import{readFileSync as hr}from"fs";import{fileURLToPath as yr}from"url";import{dirname as vr,join as wr}from"path";he();F();import{mkdir as to,rm as Rt,readFile as no,chmod as oo}from"fs/promises";import{existsSync as Ht}from"fs";import{execFile as ro}from"child_process";import{promisify as io}from"util";var so=io(ro);async function Be(t){let e=_.keyDir(t);Ht(e)&&await Rt(e,{recursive:!0}),await to(e,{recursive:!0});let n=_.privateKey(t),o=_.publicKey(t);await so("ssh-keygen",["-t","ed25519","-f",n,"-N","","-C",`gibil-${t}`]),await oo(n,384);let i=await no(o,"utf-8");return{privateKeyPath:n,publicKeyPath:o,publicKey:i.trim()}}async function Z(t){let e=_.keyDir(t);Ht(e)&&await Rt(e,{recursive:!0})}F();k();H();import{Client as Mt}from"ssh2";import{readFile as Dt}from"fs/promises";async function x(t){let{instanceName:e,ip:n,command:o,stream:i=!1,timeoutMs:a=3e4}=t,s=await Dt(_.privateKey(e),"utf-8");return new Promise((c,l)=>{let u=new Mt,d="",m="",p=null,g=!1;u.on("ready",()=>{r.debug(`SSH connected to ${n}`),u.exec(o,(h,v)=>{if(h)return u.end(),l(h);p=setTimeout(()=>{g||(g=!0,u.destroy(),l(new Error(`Command timed out after ${a/1e3}s on ${n}`)))},a),v.on("data",$=>{let w=$.toString();d+=w,i&&process.stdout.write(w)}),v.stderr.on("data",$=>{let w=$.toString();m+=w,i&&process.stderr.write(w)}),v.on("close",$=>{p&&clearTimeout(p),!g&&(g=!0,u.end(),c({stdout:d,stderr:m,exitCode:$??0}))})})}).on("error",h=>{if(p&&clearTimeout(p),g)return;g=!0;let v="";h.code==="ECONNREFUSED"?v=" (instance may have been destroyed or is still booting)":h.code==="EHOSTUNREACH"?v=" (IP unreachable \u2014 instance may not be running)":h.code==="ETIMEDOUT"&&(v=" (connection timed out \u2014 check if instance is running with 'gibil list')"),l(new Error(`SSH connection to ${n} failed: ${h.message}${v}`))}).connect({host:n,port:22,username:"root",privateKey:s,readyTimeout:a,hostVerifier:()=>!0,agent:process.env.SSH_AUTH_SOCK,agentForward:!0})})}function Kt(t){let{instanceName:e,ip:n,filePath:o,timeoutMs:i=3e4}=t,a=null,s=!1;return(async()=>{try{let c=await Dt(_.privateKey(e),"utf-8");a=new Mt,await new Promise((l,u)=>{a.on("ready",()=>{a.exec(`tail -f ${o} 2>/dev/null`,(d,m)=>{if(d)return a.end(),u(d);m.on("data",p=>{s||process.stdout.write(f(p.toString()))}),m.stderr.on("data",p=>{s||process.stderr.write(f(p.toString()))}),m.on("close",()=>{a.end(),l()})})}).on("error",d=>{s||r.debug(`Verbose log tail failed: ${d.message}`),u(d)}).connect({host:n,port:22,username:"root",privateKey:c,readyTimeout:i,hostVerifier:()=>!0})})}catch{}})(),{abort(){if(s=!0,a)try{a.end()}catch{}}}}async function qe(t,e,n=12e4){let o=Date.now(),i=5e3;for(;Date.now()-o<n;)try{await x({instanceName:t,ip:e,command:"echo ready",timeoutMs:1e4});return}catch{r.debug(`SSH not ready on ${e}, retrying...`),await new Promise(a=>setTimeout(a,i))}throw new Error(`SSH did not become available on ${e} within ${n/1e3}s`)}function ae(t){let{repo:e,config:n,ttlMinutes:o,githubToken:i,gitIdentity:a}=t,s=["#!/bin/bash","set -euo pipefail","","# \u2500\u2500 Gibil cloud-init \u2500\u2500","export HOME=/root","export DEBIAN_FRONTEND=noninteractive"];i&&s.push(`export GITHUB_TOKEN=${M(i)}`),s.push("","# Base packages","apt-get update -qq","apt-get install -y -qq git curl wget build-essential unzip > /dev/null 2>&1","","# Install GitHub CLI","if ! type gh > /dev/null 2>&1; then"," curl -fsSL https://cli.github.com/packages/githubcli-archive-keyring.gpg | dd of=/usr/share/keyrings/githubcli-archive-keyring.gpg 2>/dev/null"," chmod go+r /usr/share/keyrings/githubcli-archive-keyring.gpg"," ARCH=$(dpkg --print-architecture)",' echo "deb [arch=${ARCH} signed-by=/usr/share/keyrings/githubcli-archive-keyring.gpg] https://cli.github.com/packages stable main" > /etc/apt/sources.list.d/github-cli.list'," apt-get update -qq && apt-get install -y -qq gh > /dev/null 2>&1","fi","");let c=n?.image??"node:20";if(s.push(...ao(c)),t.agent){let l=uo(t.agent);l&&(s.push(`# Install ${t.agent} + tmux`),t.agent==="aider"&&s.push("apt-get install -y -qq python3-pip > /dev/null 2>&1"),s.push(`${l} > /dev/null 2>&1`,"apt-get install -y -qq tmux > /dev/null 2>&1",""))}if(n?.services&&n.services.length>0){s.push(...co()),s.push("");for(let l of n.services)s.push(...lo(l))}if(n?.env){s.push("# Environment variables");for(let[l,u]of Object.entries(n.env))s.push(`export ${l}=${M(u)}`),s.push(`echo ${M(`${l}=${u}`)} >> /etc/environment`);s.push("")}if(s.push("# Configure git"),a?(s.push(`git config --global user.email ${M(a.email)}`),s.push(`git config --global user.name ${M(a.name)}`),a.signingKey&&(s.push("git config --global gpg.format ssh"),s.push(`git config --global user.signingkey ${M("key::"+a.signingKey)}`),s.push("git config --global commit.gpgsign true"),s.push("git config --global tag.gpgsign true"),s.push("mkdir -p /root/.ssh"),s.push(`echo ${M(a.email+" "+a.signingKey)} > /root/.ssh/allowed_signers`),s.push("git config --global gpg.ssh.allowedSignersFile /root/.ssh/allowed_signers"))):(s.push("git config --global user.email 'gibil@bot.dev'"),s.push("git config --global user.name 'Gibil Bot'")),s.push(""),e){let l=e.match(/github\.com\/([^/]+\/[^/.]+)/);if(s.push("# Clone repository"),s.push("cd /root"),l){let u=l[1];s.push('if [ -n "${GITHUB_TOKEN:-}" ]; then'),s.push(` CLONE_URL="https://x-access-token:\${GITHUB_TOKEN}@github.com/${u}.git"`),s.push("else"),s.push(` CLONE_URL='https://github.com/${u}.git'`),s.push("fi"),s.push('timeout 300 git clone "$CLONE_URL" /root/project || { echo "Git clone failed or timed out"; exit 1; }')}else s.push(`timeout 300 git clone ${M(e)} /root/project || { echo "Git clone failed or timed out"; exit 1; }`);s.push("cd /root/project"),s.push(""),s.push('if [ -n "${GITHUB_TOKEN:-}" ]; then'),s.push(' echo "${GITHUB_TOKEN}" | gh auth login --with-token 2>/dev/null || true'),l&&s.push(` git -C /root/project remote set-url origin "https://x-access-token:\${GITHUB_TOKEN}@github.com/${l[1]}.git"`),s.push("fi"),s.push("")}if(o&&o>0&&(s.push("# Auto-destroy after TTL"),s.push(`echo "shutdown -h now" | at now + ${o} minutes 2>/dev/null || true`),s.push(`(sleep ${o*60} && shutdown -h now) &`),s.push("")),s.push("# Clean up cloud-init secrets"),s.push("rm -f /var/lib/cloud/instance/user-data.txt"),s.push(""),s.push("# Signal that infrastructure is ready"),s.push("touch /root/.gibil-ready"),s.push('echo "Gibil infrastructure ready"'),s.push(""),e&&n?.tasks&&n.tasks.length>0){s.push("# Run project tasks"),s.push("cd /root/project");for(let l of n.tasks)s.push(`echo '\u25B6 Running task: '${M(l.name)}`),s.push(`if ! ${l.command}; then`),s.push(` echo '\u2717 Task failed: '${M(l.name)}`),s.push(" touch /root/.gibil-tasks-failed"),s.push("fi");s.push(""),s.push("# Signal tasks complete"),s.push("if [ ! -f /root/.gibil-tasks-failed ]; then"),s.push(" touch /root/.gibil-tasks-done"),s.push(' echo "Gibil tasks complete"'),s.push("else"),s.push(' echo "Gibil tasks finished with errors"'),s.push("fi")}return s.join(`
19
+ `)}function ao(t){let e=[];if(t.startsWith("node:")){let n=t.split(":")[1]??"20";e.push("# Install Node.js"),e.push(`curl -fsSL https://deb.nodesource.com/setup_${n}.x | bash - > /dev/null 2>&1`),e.push("apt-get install -y -qq nodejs > /dev/null 2>&1"),e.push("npm install -g pnpm@latest > /dev/null 2>&1"),e.push("")}else if(t.startsWith("python:")){let n=t.split(":")[1]??"3.12";e.push("# Install Python"),e.push(`apt-get install -y -qq python${n} python3-pip python3-venv > /dev/null 2>&1`),e.push("")}else if(t.startsWith("go:")){let n=t.split(":")[1]??"1.22";e.push("# Install Go"),e.push('GO_ARCH=$(uname -m | sed "s/x86_64/amd64/" | sed "s/aarch64/arm64/")'),e.push(`wget -q https://go.dev/dl/go${n}.linux-\${GO_ARCH}.tar.gz -O /tmp/go.tar.gz`),e.push("tar -C /usr/local -xzf /tmp/go.tar.gz"),e.push("export PATH=$PATH:/usr/local/go/bin"),e.push('echo "export PATH=\\$PATH:/usr/local/go/bin" >> /root/.bashrc'),e.push("")}else e.push("# Install Node.js (default)"),e.push("curl -fsSL https://deb.nodesource.com/setup_20.x | bash - > /dev/null 2>&1"),e.push("apt-get install -y -qq nodejs > /dev/null 2>&1"),e.push("npm install -g pnpm@latest > /dev/null 2>&1"),e.push("");return e}function co(){return["# Install Docker","curl -fsSL https://get.docker.com | sh > /dev/null 2>&1","systemctl enable docker --now"]}function lo(t){let e=[];e.push(`# Start service: ${t.name.replace(/[^a-zA-Z0-9_-]/g,"")}`);let o=`docker run -d --name ${t.name.replace(/[^a-zA-Z0-9_-]/g,"")}`;if(t.port&&(o+=` -p ${t.port}:${t.port}`),t.env)for(let[i,a]of Object.entries(t.env))o+=` -e ${i}=${M(a)}`;return o+=` ${M(t.image)}`,e.push(o),e.push(""),e}var Lt={claude:"npm install -g @anthropic-ai/claude-code",aider:"pip install --break-system-packages aider-chat",codex:"npm install -g @openai/codex"},ye={claude:["ANTHROPIC_API_KEY"],aider:["ANTHROPIC_API_KEY","OPENAI_API_KEY"],codex:["OPENAI_API_KEY"]},W=Object.keys(Lt);function uo(t){return Lt[t]??null}function M(t){return`'${t.replace(/'/g,"'\\''")}'`}import{readFile as mo}from"fs/promises";import{existsSync as Ft,statSync as fo}from"fs";import{join as po}from"path";import{parse as Ut}from"yaml";async function ve(t){let e=t.match(/github\.com\/([^/]+)\/([^/.]+)/);if(!e)return null;let[,n,o]=e,i=`https://raw.githubusercontent.com/${n}/${o}/HEAD/.gibil.yml`;try{let a={};process.env.GITHUB_TOKEN&&(a.Authorization=`token ${process.env.GITHUB_TOKEN}`);let s=await fetch(i,{signal:AbortSignal.timeout(1e4),headers:a});if(!s.ok)return null;let c=await s.text();return ho(c)}catch{return null}}var go=".gibil.yml";async function we(t){let e;if(Ft(t)&&fo(t).isFile()?e=t:e=po(t,go),!Ft(e))return null;let n=await mo(e,"utf-8"),o=Ut(n);return Jt(o)}function ho(t){let e=Ut(t);return Jt(e)}function Jt(t){if(!t||typeof t!="object")throw new Error("Invalid .gibil.yml: must be a YAML object");let e=t,n={};return typeof e.name=="string"&&(n.name=e.name),typeof e.image=="string"&&(n.image=e.image),typeof e.server_type=="string"&&(n.server_type=e.server_type),typeof e.location=="string"&&(n.location=e.location),Array.isArray(e.services)&&(n.services=e.services.map(o=>{let i=o;if(typeof i.name!="string"||typeof i.image!="string")throw new Error("Each service must have a 'name' and 'image' field");return{name:i.name,image:i.image,port:typeof i.port=="number"?i.port:void 0,env:Gt(i.env,`service "${i.name}"`)}})),Array.isArray(e.tasks)&&(n.tasks=e.tasks.map(o=>{let i=o;if(typeof i.name!="string"||typeof i.command!="string")throw new Error("Each task must have a 'name' and 'command' field");return{name:i.name,command:i.command}})),e.env!==void 0&&(n.env=Gt(e.env,"top-level")),n}function Gt(t,e){if(t==null)return;if(typeof t!="object"||Array.isArray(t))throw new Error(`env in ${e} must be a key-value object`);let n={};for(let[o,i]of Object.entries(t))if(typeof i=="string")n[o]=i;else if(typeof i=="number"||typeof i=="boolean")n[o]=String(i);else throw new Error(`env.${o} in ${e} must be a string, number, or boolean \u2014 got ${typeof i}`);return Object.keys(n).length>0?n:void 0}A();import{randomBytes as $o}from"crypto";function ue(t=6){return $o(Math.ceil(t/2)).toString("hex").slice(0,t)}function Ae(){return`gibil-${ue()}`}function Wt(){return`fleet-${ue(8)}`}function Ye(){return`j-${ue(8)}`}F();k();var xo=/^[a-zA-Z0-9][a-zA-Z0-9_-]{0,62}$/;function Ve(t){if(!xo.test(t))throw new Error(`Invalid instance name "${t}". Names must be 1-63 chars, start with alphanumeric, and contain only [a-zA-Z0-9_-].`);return t}function Oe(t,e){let n=parseInt(t,10);if(isNaN(n)||n<=0)throw new Error(`${e} must be a positive integer, got "${t}"`);return n}q();H();import{execSync as Ze}from"child_process";import{readFileSync as So}from"fs";var bt="key::";function _o(){try{let t=Ze("git config user.name",{encoding:"utf-8"}).trim(),e=Ze("git config user.email",{encoding:"utf-8"}).trim();if(!t||!e)return;let n;try{if(Ze("git config gpg.format",{encoding:"utf-8"}).trim()==="ssh"){let i=Ze("git config user.signingkey",{encoding:"utf-8"}).trim();if(i)try{n=So(i,"utf-8").trim()}catch{(i.startsWith("ssh-")||i.startsWith(bt))&&(n=i.startsWith(bt)?i.slice(bt.length):i)}}}catch{}return{name:t,email:e,signingKey:n}}catch{return}}async function Xe(t,e,n){r.step("Generating SSH keys...");let o=await Be(e),i,a;try{r.step("Uploading SSH key..."),i=await t.createSSHKey(`gibil-${e}-${ue(4)}`,o.publicKey),n.repo&&n.repo.includes("github.com")&&!process.env.GITHUB_TOKEN&&r.debug("No GITHUB_TOKEN set \u2014 private repos will fail to clone. Set GITHUB_TOKEN to enable private repo access.");let s=_o(),c=ae({repo:n.repo,config:n.config??void 0,ttlMinutes:n.ttlMinutes,githubToken:process.env.GITHUB_TOKEN,gitIdentity:s,agent:n.agent}),l=r.spin("Creating server on Hetzner..."),u=await t.createServer(e,i.id,c,n.serverType??n.config?.server_type,n.location??n.config?.location);a=u.id,l.succeed("Server created");let d=r.spin("VM booting..."),p=(await t.waitForReady(u.id)).ipv4;d.succeed(`VM running at ${p}`);let g=new Date,h={name:e,serverId:u.id,ip:p,sshKeyId:i.id,keyPath:_.privateKey(e),status:"running",createdAt:g.toISOString(),ttlMinutes:n.ttlMinutes,expiresAt:new Date(g.getTime()+n.ttlMinutes*6e4).toISOString(),repo:n.repo,fleetId:n.fleetId,gitIdentity:s};await ce(h);let v=r.spin("Waiting for SSH...");if(await qe(e,p),v.succeed("SSH ready"),n.repo||n.config){let $=r.spin("Provisioning (runtime, repo, deps)..."),w;n.verbose&&!n.json&&(w=Kt({instanceName:e,ip:p,filePath:"/var/log/cloud-init-output.log"}));let b=36e4,O=5e3,R=Date.now(),pe=!1;for(;Date.now()-R<b;){try{if((await x({instanceName:e,ip:p,command:"test -f /root/.gibil-ready && echo ready || echo waiting",timeoutMs:1e4})).stdout.trim()==="ready"){pe=!0;break}}catch{}await new Promise(L=>setTimeout(L,O))}if(w?.abort(),pe)$.succeed("Provisioning complete");else{$.fail("Provisioning may have failed");try{let L=await x({instanceName:e,ip:p,command:"tail -20 /var/log/cloud-init-output.log 2>/dev/null || echo 'No cloud-init log found'",timeoutMs:1e4});r.info(L.stdout)}catch{r.warn("Could not read cloud-init log.")}}}return h}catch(s){throw r.error(`Failed to create instance "${e}", cleaning up...`),a&&await t.destroyServer(a).catch(c=>r.warn(`Could not destroy Hetzner server ${a}: ${c instanceof Error?c.message:String(c)}`)),i&&await t.deleteSSHKey(i.id).catch(c=>r.warn(`Could not delete Hetzner SSH key ${i.id}: ${c instanceof Error?c.message:String(c)}`)),await Z(e).catch(c=>r.warn(`Could not clean up local SSH keys: ${c instanceof Error?c.message:String(c)}`)),s}}function Yt(t){let e=Math.max(0,Math.floor((new Date(t.expiresAt).getTime()-Date.now())/1e3));return{name:t.name,ip:t.ip,ssh:`ssh -i ${t.keyPath} -o StrictHostKeyChecking=no root@${t.ip}`,status:t.status,ttl_remaining:e,created_at:t.createdAt,fleet_id:t.fleetId}}function Vt(t){t.command("create").description("Spin up one or more ephemeral dev machines").option("-n, --name <name>","Instance name").option("-f, --fleet <count>","Number of instances to create in parallel").option("-r, --repo <git-url>","Git repository to clone on startup").option("--json","Output instance info as JSON").option("--ttl <minutes>","Auto-destroy after N minutes","60").option("-c, --config <path>","Path to .gibil.yml config").option("--server-type <type>","Hetzner server type (e.g. cpx11, cpx21)").option("--location <loc>","Hetzner location (e.g. fsn1, nbg1)").option("-q, --quiet","Suppress non-essential output").option("-e, --env <KEY=VALUE...>","Environment variables to set on the server").option("--agent <name>","Install a coding agent (claude, aider, codex)").option("-V, --verbose","Stream cloud-init logs during provisioning").option("--dry-run","Print config summary and cloud-init script without deploying").action(async e=>{e.json&&I(!0);let n=Oe(e.ttl??"60","TTL");if(n>10080)throw new Error("TTL cannot exceed 7 days (10080 minutes).");let o=Oe(e.fleet??"1","Fleet count");if(o>20)throw new Error("Fleet size cannot exceed 20. Contact support for higher limits.");if(e.name&&Ve(e.name),!e.agent){let l=await Pe();l&&(e.agent=l)}if(e.agent&&!W.includes(e.agent))throw new Error(`Unknown agent "${e.agent}". Supported: ${W.join(", ")}`);let i={};if(e.env)for(let l of e.env){let u=l.indexOf("=");if(u<=0)throw new Error(`Invalid --env format: "${l}". Use KEY=VALUE.`);i[l.slice(0,u)]=l.slice(u+1)}i.GITHUB_TOKEN&&!process.env.GITHUB_TOKEN&&(process.env.GITHUB_TOKEN=i.GITHUB_TOKEN);let a=null;if(e.config?a=await we(e.config):e.repo?a=await ve(e.repo)??await we(process.cwd()):a=await we(process.cwd()),Object.keys(i).length>0&&(a||(a={}),a.env={...a.env,...i}),e.dryRun){let l=e.name??Ae(),u=e.serverType??a?.server_type??"cx22",d=e.location??a?.location??"nbg1",m=a?.image??"node:20",p=ae({repo:e.repo,config:a??void 0,ttlMinutes:n,githubToken:process.env.GITHUB_TOKEN,gitIdentity:void 0,agent:e.agent}),g={name:l,serverType:u,location:d,image:m,ttlMinutes:n,repo:e.repo,agent:e.agent,cloudInitScript:p};e.json?r.json(g):(r.info(""),r.info(y("Dry run \u2014 no server will be created")),r.info(""),r.info(` ${f("Name:")} ${l}`),r.info(` ${f("Server type:")} ${u}`),r.info(` ${f("Location:")} ${d}`),r.info(` ${f("Image:")} ${m}`),r.info(` ${f("TTL:")} ${n} minutes`),e.repo&&r.info(` ${f("Repo:")} ${e.repo}`),e.agent&&r.info(` ${f("Agent:")} ${e.agent}`),r.info(""),r.info("Cloud-init script:"),r.info("\u2500".repeat(17)),r.info(p));return}let s=await P();if(s){r.info("Verifying API key...");let l=await re(s);r.info(` Authenticated as ${l.user.email} (${l.user.plan})`)}if(e.agent&&!ye[e.agent]?.some(u=>a?.env?.[u]||i[u])){let u=ye[e.agent]?.join(" or ")??"";r.warn(`${e.agent} needs ${u}. SSH in and export it (recommended) or pass with --env.`)}let c=await N.create();if(o===1){let l=e.name??Ae(),u=Date.now(),d=r.spin(`Forging "${l}"...`),m=await Xe(c,l,{repo:e.repo,ttlMinutes:n,config:a,serverType:e.serverType,location:e.location,agent:e.agent,verbose:e.verbose}),p=((Date.now()-u)/1e3).toFixed(1);d.succeed(E.createReady(l,p)),s&&await V(s,"create",m.name,e.serverType).catch(g=>r.debug(`Usage tracking failed: ${g instanceof Error?g.message:String(g)}`)),e.json?r.json(Yt(m)):(r.info(""),r.info(Fe("Server ready",[`${f("Name:")} ${y(m.name)}`,`${f("IP:")} ${m.ip}`,`${f("TTL:")} ${n} minutes`,`${f("SSH:")} ${y(`gibil ssh ${m.name}`)}`])),r.info(""),r.info(f(" Try:")),r.info(` ${y(`gibil run ${m.name} "<your test command>"`)}`),r.info(` ${y(`gibil ssh ${m.name}`)}`),r.info(` ${y(`gibil destroy ${m.name}`)}`),r.info(""))}else{let l=Wt(),u=e.name??"gibil",d=Date.now(),m=r.spin(`Forging fleet "${l}" \u2014 ${o} servers...`),p=Array.from({length:o},(w,b)=>`${u}-${b+1}-${l.slice(6)}`),g=await Promise.allSettled(p.map(w=>Xe(c,w,{repo:e.repo,ttlMinutes:n,config:a,serverType:e.serverType,location:e.location,fleetId:l,agent:e.agent,verbose:e.verbose}))),h=[],v=[];for(let w=0;w<g.length;w++){let b=g[w];b.status==="fulfilled"?h.push(b.value):v.push(`${p[w]}: ${b.reason instanceof Error?b.reason.message:String(b.reason)}`)}let $=((Date.now()-d)/1e3).toFixed(1);if(m.succeed(E.fleetReady(h.length,o)+` ${f(`(${$}s)`)}`),s&&await Promise.all(h.map(w=>V(s,"create",w.name,e.serverType).catch(b=>r.debug(`Usage tracking failed for ${w.name}: ${b instanceof Error?b.message:String(b)}`)))),e.json)r.json({fleet_id:l,instances:h.map(Yt),errors:v});else{r.info("");for(let w of h)r.info(` ${z} ${y(w.name)} ${f("\u2192")} ${w.ip}`);for(let w of v)r.info(` ${Ce} ${w}`);r.info("")}}})}A();import{spawn as Oo}from"child_process";import{spawn as Io}from"child_process";import{existsSync as ko}from"fs";function Re(t){if(t.includes(":")){let e=t.split(":");if(e.length!==3)throw new Error(`Invalid port mapping "${t}". Use PORT or LOCAL:HOST:REMOTE.`);let[n,,o]=e;$t(n,t),$t(o,t)}else $t(t,t)}function $t(t,e){let n=parseInt(t,10);if(isNaN(n)||n<1||n>65535||String(n)!==t)throw new Error(`Invalid port number in "${e}". Must be 1-65535.`)}function Zt(t,e){if(!ko(t.keyPath))throw new Error(`SSH key not found: ${t.keyPath}. The instance may have been destroyed.`);let n=[];for(let o of e){Re(o);let i=o.includes(":")?o:`${o}:localhost:${o}`,a=o.includes(":")?o.split(":")[0]:o;n.push(a),Io("ssh",["-f","-N","-L",i,"-i",t.keyPath,"-o","StrictHostKeyChecking=no","-o","UserKnownHostsFile=/dev/null","-o","LogLevel=ERROR","-o","ExitOnForwardFailure=yes",`root@${t.ip}`],{stdio:"ignore",detached:!0}).unref()}return n}k();H();k();A();me();var Ao=["ECONNREFUSED","EHOSTUNREACH","ETIMEDOUT"];function fe(t){if(!(t instanceof Error))return!1;let e=t.message;return Ao.some(n=>e.includes(n))}async function U(t){try{let{HetznerProvider:e}=await Promise.resolve().then(()=>(he(),Ot)),{getHetznerToken:n}=await Promise.resolve().then(()=>(q(),ze)),o=await n();return o?(await(await e.create(o)).getServer(t.serverId),"still_exists"):"api_error"}catch(e){return e instanceof Error&&e.message.includes("(404)")?(await Z(t.name),await He(t.name),await le(t.name),r.warn(`Instance "${t.name}" no longer exists on Hetzner \u2014 cleaned up local metadata`),"cleaned"):"api_error"}}function nn(t){t.command("ssh <name>").description("SSH into a running ephemeral machine").option("-p, --port <ports...>","Forward local port(s) to server (e.g. --port 3000 --port 5432)").action(async(e,n)=>{let o=await C(e),i=["-A","-i",o.keyPath,"-o","StrictHostKeyChecking=no","-o","UserKnownHostsFile=/dev/null","-o","LogLevel=ERROR"];if(n.port&&n.port.length>0){for(let s of n.port){Re(s);let c=s.includes(":")?s:`${s}:localhost:${s}`;i.push("-L",c)}r.info("");for(let s of n.port){let c=s.includes(":")?s.split(":")[0]:s;r.info(` Forwarding ${y(`localhost:${c}`)} \u2192 ${e}:${s}`)}r.info(""),r.info(f(" Tunnel active while SSH session is open. Ctrl+C to stop.")),r.info("")}i.push(`root@${o.ip}`),Oo("ssh",i,{stdio:"inherit"}).on("exit",s=>{let c=()=>process.exit(s??0);s===255?U(o).then(c,c):c()})})}A();me();k();function on(t){t.command("run <name> <command...>").description("Execute a command on a running instance").option("--json","Output result as JSON").option("--timeout <seconds>","Command timeout in seconds (default: 30)").option("-b, --background","Run in background, return job ID immediately").action(async(e,n,o)=>{o.json&&I(!0);let i=await C(e),a=n.join(" "),s=o.timeout?Oe(o.timeout,"Timeout")*1e3:3e4;if(o.background){let l=Ye(),u="/root/.gibil-jobs",d=`${u}/${l}.log`,m=`${u}/${l}.exit`,p=`${u}/${l}.pid`,g=`${u}/${l}.sh`,h=["#!/bin/bash",`nohup bash -c '${a.replace(/'/g,"'\\''")}' > ${d} 2>&1 &`,"BGPID=$!",`echo $BGPID > ${p}`,`(wait $BGPID 2>/dev/null; echo $? > ${m}) &`,"echo $BGPID"].join(`
20
+ `),v=Buffer.from(h).toString("base64"),$=`mkdir -p ${u} && echo '${v}' | base64 -d > ${g} && chmod +x ${g} && bash ${g}`,w;try{w=await x({instanceName:e,ip:i.ip,command:$,timeoutMs:1e4})}catch(O){throw fe(O)&&await U(i)==="cleaned"&&process.exit(1),O}let b=parseInt(w.stdout.trim(),10);isNaN(b)&&(r.error("Failed to start background job \u2014 could not capture PID"),process.exit(1)),await G({id:l,instance:e,command:a,pid:b,status:"running",startedAt:new Date().toISOString()}),o.json?r.json({job_id:l,instance:e,status:"running",pid:b}):(r.info(`Background job started: ${l} (PID ${b})`),r.info(` Poll: gibil job ${l}`));return}r.info(`Running on "${e}" (${i.ip}): ${a}`);let c;try{c=await x({instanceName:e,ip:i.ip,command:a,stream:!o.json,timeoutMs:s})}catch(l){throw fe(l)&&await U(i)==="cleaned"&&process.exit(1),l}o.json?r.json({instance:e,command:a,stdout:c.stdout,stderr:c.stderr,exit_code:c.exitCode}):c.exitCode!==0&&r.error(`Command exited with code ${c.exitCode}`),process.exit(c.exitCode??1)})}he();A();me();k();q();H();F();import{createHash as rn}from"crypto";import{readFile as ln,writeFile as Ro,mkdir as Ho}from"fs/promises";import{existsSync as tt,readFileSync as Mo}from"fs";import{hostname as sn,userInfo as Do,platform as Ko,arch as Lo}from"os";import{join as Se,dirname as un}from"path";import{fork as Fo}from"child_process";import{fileURLToPath as dn}from"url";var et=Se(_.root,"device_id"),an=Se(_.root,"config.json"),Go=process.env.GIBIL_TELEMETRY_URL??"https://zopdxjruwktjyjunitrv.supabase.co/functions/v1/telemetry-ingest",Uo="tk_alpha_09a93302e0f3e73417a9e9dbfc500a61",Me=null,$e=null;function Jo(){try{let t=Do(),e=`${sn()}:${t.username}:${t.homedir}`;return rn("sha256").update(e).digest("hex").slice(0,16)}catch{return rn("sha256").update(`${sn()}:${Date.now()}`).digest("hex").slice(0,16)}}async function mn(){if(Me)return Me;if(tt(et)){let e=(await ln(et,"utf-8")).trim();if(e.length>0)return Me=e,Me}let t=Jo();return await Ho(_.root,{recursive:!0,mode:448}),await Ro(et,t,{mode:384}),Me=t,t}async function xt(){if($e!==null)return $e;let t=process.env.GIBIL_TELEMETRY;if(t!==void 0)return $e=!["0","false","off","no"].includes(t.toLowerCase()),$e;try{if(tt(an)&&JSON.parse(await ln(an,"utf-8")).telemetry===!1)return $e=!1,!1}catch{}return $e=!0,!0}async function fn(){return tt(et)?!1:(await mn(),!0)}var xe=null;function zo(){if(xe)return xe;let t=un(dn(import.meta.url));for(let e of["../package.json","../../package.json"])try{return xe=JSON.parse(Mo(Se(t,e),"utf-8")).version??"0.0.0",xe}catch{}return xe="0.0.0",xe}async function De(t){if(!await xt())return;let e=await mn();if(!e)return;let n={...t,device_id:e,cli_version:zo(),timestamp:new Date().toISOString(),os:Ko(),arch:Lo(),node_version:process.version},o=un(dn(import.meta.url)),a=[Se(o,"telemetry-send.js"),Se(o,"..","utils","telemetry-send.js"),Se(o,"telemetry-send.ts")].find(s=>tt(s));if(a)try{Fo(a,{detached:!0,stdio:"ignore",...a.endsWith(".ts")?{execArgv:["--import","tsx"]}:{},env:{...process.env,TELEMETRY_PAYLOAD:JSON.stringify(n),TELEMETRY_ENDPOINT:Go,TELEMETRY_INGEST_KEY:Uo}}).unref()}catch{}}var cn=new Map,Bo=5e3;async function pn(t){let e=Date.now(),n=cn.get(t)??0;e-n<Bo||(cn.set(t,e),await De({event:"mcp_tool",tool:t}))}function gn(t){return t.slice(3).filter(e=>e.startsWith("-")).map(e=>e.replace(/=.*$/,""))}async function hn(t,e){let n=await We(e);r.info(`Destroying instance "${e}" (server ${n.serverId})...`);try{await t.destroyServer(n.serverId)}catch(a){r.warn(`Could not delete server ${n.serverId}: ${a instanceof Error?a.message:String(a)}`)}try{await t.deleteSSHKey(n.sshKeyId)}catch(a){r.warn(`Could not delete SSH key ${n.sshKeyId}: ${a instanceof Error?a.message:String(a)}`)}await Z(e),await He(e),await le(e);let o=await P();o&&await V(o,"destroy",e).catch(a=>r.warn(`Usage tracking failed (billing may be inaccurate): ${a instanceof Error?a.message:String(a)}`));let i=Math.round((Date.now()-new Date(n.createdAt).getTime())/6e4);await De({event:"lifecycle",duration_minutes:i}),r.info(` ${z} ${E.destroySingle(e)}`)}function yn(t){t.command("destroy [name]").description("Destroy a running ephemeral machine").option("-a, --all","Destroy all gibil instances").option("--json","Output result as JSON").action(async(e,n)=>{if(n.json&&I(!0),n.all){let o=await Y();if(o.length===0){n.json?r.json({destroyed:[],failed:[]}):r.info(E.noInstances);return}let i=await N.create();r.info(`Destroying ${o.length} instance(s)...`);let a=3,s=[];for(let u=0;u<o.length;u+=a){let d=o.slice(u,u+a),m=await Promise.allSettled(d.map(p=>hn(i,p.name)));s.push(...m)}let c=[],l=[];for(let u=0;u<s.length;u++)if(s[u].status==="fulfilled")c.push(o[u].name);else{let d=s[u].reason;l.push(`${o[u].name}: ${d instanceof Error?d.message:String(d)}`)}n.json?r.json({destroyed:c,failed:l}):l.length===0?r.info(`
21
+ ${E.destroyAll}`):r.info(`
22
+ ${c.length} destroyed, ${l.length} failed`)}else{e||(r.error('Specify an instance name or use --all. Run "gibil list" to see instances.'),process.exit(1));let o=await N.create();await hn(o,e),n.json&&r.json({destroyed:[e]})}})}A();k();H();function vn(t){t.command("list").alias("ls").description("List all active gibil instances").option("--json","Output as JSON").action(async e=>{e.json&&I(!0);let n=await Y();if(n.length===0){e.json?r.json({instances:[]}):r.info(E.noInstances);return}let o=n.map(i=>{let a=Math.max(0,Math.floor((new Date(i.expiresAt).getTime()-Date.now())/1e3));return{name:i.name,ip:i.ip,ssh:`ssh -i ${i.keyPath} -o StrictHostKeyChecking=no root@${i.ip}`,status:i.status,ttl_remaining:a,created_at:i.createdAt,fleet_id:i.fleetId}});if(e.json){r.json({instances:o});return}r.info(f(`${"NAME".padEnd(30)} ${"IP".padEnd(18)} ${"STATUS".padEnd(12)} ${"TTL".padEnd(10)} ${"AGE".padEnd(10)}`)),r.info(f("\u2500".repeat(80)));for(let i of o){let a=wn(i.ttl_remaining),s=qo(i.created_at),c=i.name.padEnd(30),l=i.status.padEnd(12),u=a.padEnd(10),d=s.padEnd(10),m=i.status==="running"?ee(l):Q(l),p=i.ttl_remaining<=300?Q(u):u;r.info(`${y(c)} ${i.ip.padEnd(18)} ${m} ${p} ${f(d)}`)}r.info(`
23
+ ${f(`${o.length} server(s)`)}`)})}function wn(t){if(t<=0)return"expired";let e=Math.floor(t/60),n=t%60;return e>=60?`${Math.floor(e/60)}h ${e%60}m`:`${e}m ${n}s`}function qo(t){let e=Date.now()-new Date(t).getTime(),n=Math.floor(e/1e3);return wn(n)}A();k();function bn(t){t.command("extend <name>").description("Extend the TTL of a running instance").requiredOption("--ttl <minutes>","New TTL in minutes from now").option("--json","Output result as JSON").action(async(e,n)=>{n.json&&I(!0);let o=await C(e),i=parseInt(n.ttl,10);(isNaN(i)||i<=0)&&(r.error("TTL must be a positive number of minutes"),process.exit(1));try{await x({instanceName:e,ip:o.ip,command:["pkill -f 'sleep.*shutdown' || true",`(sleep ${i*60} && shutdown -h now) &`].join(" && ")})}catch(s){throw fe(s)&&await U(o)==="cleaned"&&process.exit(1),s}let a=new Date(Date.now()+i*6e4).toISOString();o.ttlMinutes=i,o.expiresAt=a,await ce(o),n.json?r.json({name:o.name,ttl_minutes:i,expires_at:a}):r.info(`\u2713 Extended "${e}" TTL to ${i} minutes (expires ${a})`)})}import{readFile as Wo}from"fs/promises";import{randomBytes as Yo}from"crypto";A();k();function $n(t){t.command("exec <name>").description("Upload and run a local script on an instance").requiredOption("-s, --script <path>","Path to local script").option("--json","Output result as JSON").action(async(e,n)=>{n.json&&I(!0);let o=await C(e),i=await Wo(n.script,"utf-8");r.info(`Uploading and running script "${n.script}" on "${e}"...`);let a=Buffer.from(i).toString("base64"),s=`/tmp/gibil-script-${Yo(4).toString("hex")}.sh`,c;try{c=await x({instanceName:e,ip:o.ip,command:`echo '${a}' | base64 -d > ${s} && chmod +x ${s} && ${s}; EXIT=$?; rm -f ${s}; exit $EXIT`,stream:!n.json})}catch(l){throw fe(l)&&await U(o)==="cleaned"&&process.exit(1),l}n.json?r.json({instance:e,script:n.script,stdout:c.stdout,stderr:c.stderr,exit_code:c.exitCode}):c.exitCode!==0&&r.error(`Script exited with code ${c.exitCode}`),process.exit(c.exitCode??1)})}q();k();H();import{createInterface as Vo}from"readline";function xn(t){let e=Vo({input:process.stdin,output:process.stderr});return new Promise(n=>{e.question(t,o=>{e.close(),n(o.trim())})})}function Sn(t){let e=t.command("auth").description("Manage authentication");e.command("login").description("Log in with your Gibil API key").option("--key <api-key>","API key (or enter interactively)").option("--json","Output result as JSON").action(async n=>{n.json&&I(!0);let o=n.key??process.env.GIBIL_API_KEY;o||(o=await xn("Enter your API key: ")),o||(r.error("No API key provided."),process.exit(1)),o.startsWith("pk_")||(r.error('Invalid key format. API keys start with "pk_".'),process.exit(1)),r.info("Verifying API key...");try{let i=await re(o);await dt(o),n.json?r.json({authenticated:!0,email:i.user.email,plan:i.user.plan}):(r.info(E.authSuccess),r.detail("Email",i.user.email),r.detail("Plan","alpha (free)"))}catch(i){r.error(i instanceof Error?i.message:String(i)),process.exit(1)}}),e.command("setup").description("Configure Hetzner API token (stored in ~/.gibil/config.json)").option("--token <token>","Hetzner API token (or enter interactively)").action(async n=>{let o=n.token;o||(o=await xn("Enter your Hetzner API token: ")),o||(r.error("No token provided."),process.exit(1));try{let a=await(await fetch("https://api.hetzner.cloud/v1/servers",{headers:{Authorization:`Bearer ${o}`}})).json();a.error&&(r.error(`Invalid token: ${a.error.message}`),process.exit(1))}catch(i){r.error(`Could not verify token: ${i instanceof Error?i.message:"Check your network."}`),process.exit(1)}await je(o),r.success("Hetzner token saved to ~/.gibil/config.json")}),e.command("logout").description("Clear stored API key").action(async()=>{await mt(),r.info(E.authLogout)}),e.command("status").description("Show current authentication status").option("--json","Output result as JSON").action(async n=>{n.json&&I(!0);let o=await P();if(!o){n.json?r.json({authenticated:!1}):r.info(`Not logged in. Run ${y("gibil auth login")} to authenticate.`);return}try{let i=await re(o);n.json?r.json({authenticated:!0,email:i.user.email,plan:i.user.plan,limits:i.limits}):(r.success(`Authenticated as ${i.user.email}`),r.detail("Plan",i.user.plan),r.detail("Concurrent servers",String(i.limits.max_concurrent)),r.detail("Hours remaining",String(i.limits.remaining_hours)))}catch{n.json?r.json({authenticated:!1,error:"Key verification failed"}):r.error(`Stored API key is invalid. Run ${y("gibil auth login")} to re-authenticate.`)}})}q();k();function _n(t){t.command("usage").description("Show current month's usage and plan limits").option("--json","Output as JSON").action(async e=>{e.json&&I(!0);let n=await P();n||(r.error('Not logged in. Run "gibil auth login" first.'),process.exit(1));try{let o=await gt(n);e.json?r.json(o):(r.info("Plan: alpha (free)"),r.info(`VM hours used: ${o.vm_hours_used.toFixed(1)}h`),r.info(`Active instances: ${o.active_instances}`))}catch(o){r.error(o instanceof Error?o.message:String(o)),process.exit(1)}})}import{McpServer as Zo}from"@modelcontextprotocol/sdk/server/mcp.js";import{StdioServerTransport as Xo}from"@modelcontextprotocol/sdk/server/stdio.js";import{z as S}from"zod";he();A();F();import{execSync as nt}from"child_process";import{readFileSync as Qo}from"fs";me();A();me();k();async function St(t){let e=await ie(t);if(e.status!=="running")return{status:e.status,exitCode:e.exitCode};let n=await C(e.instance),o="/root/.gibil-jobs",i=`${o}/${t}.exit`,a=`${o}/${t}.log`,c=(await x({instanceName:e.instance,ip:n.ip,command:`test -f ${i} && cat ${i} || echo RUNNING`,timeoutMs:1e4})).stdout.trim();if(c==="RUNNING"){try{if((await x({instanceName:e.instance,ip:n.ip,command:`kill -0 ${e.pid} 2>/dev/null && echo "alive" || echo "dead"`,timeoutMs:1e4})).stdout.trim()==="dead"){let h=new Date;e.status="orphaned",e.completedAt=h.toISOString(),await G(e);let v=Math.round((h.getTime()-new Date(e.startedAt).getTime())/1e3),$;try{$=(await x({instanceName:e.instance,ip:n.ip,command:`cat ${a} 2>/dev/null || echo ''`,timeoutMs:1e4})).stdout}catch{}return{status:"orphaned",durationS:v,stdout:$}}}catch{}return{status:"running"}}let l=parseInt(c,10),u=await x({instanceName:e.instance,ip:n.ip,command:`cat ${a} 2>/dev/null || echo ''`,timeoutMs:1e4}),d=l===0?"done":"failed",m=new Date,p=Math.round((m.getTime()-new Date(e.startedAt).getTime())/1e3);return e.status=d,e.exitCode=l,e.completedAt=m.toISOString(),await G(e),{status:d,exitCode:l,stdout:u.stdout,durationS:p}}function In(t){let e=t.command("job").description("Manage background jobs");e.command("status <id>").description("Check status of a background job").option("--json","Output result as JSON").action(async(n,o)=>{o.json&&I(!0);let i=await ie(n),a=await St(n);o.json?r.json({job_id:n,instance:i.instance,command:i.command,status:a.status,exit_code:a.exitCode,started_at:i.startedAt,duration_s:a.durationS,...a.stdout!==void 0?{stdout:a.stdout}:{}}):a.status==="running"?(r.info(`Job ${n} is still running on "${i.instance}"`),r.info(` Command: ${i.command}`),r.info(` Started: ${i.startedAt}`)):a.status==="orphaned"?(r.warn(`Job ${n} is orphaned \u2014 process died without writing exit code`),r.info(` Instance: ${i.instance}`),r.info(` Command: ${i.command}`),a.durationS!==void 0&&r.info(` Duration: ${a.durationS}s`),a.stdout&&(r.info(" Output:"),process.stdout.write(a.stdout))):(r.info(`Job ${n}: ${a.status} (exit code ${a.exitCode}, ${a.durationS}s)`),a.stdout&&process.stdout.write(a.stdout))}),e.command("list").description("List all background jobs").option("--json","Output result as JSON").action(async n=>{n.json&&I(!0);let o=await be(),i=await Y(),a=new Set(i.map(s=>s.name));for(let s of o)s.status==="running"&&!a.has(s.instance)&&(s.status="orphaned",s.completedAt=new Date().toISOString(),await G(s));if(o.length===0){n.json?r.json([]):r.info("No background jobs.");return}if(n.json)r.json(o.map(s=>({job_id:s.id,instance:s.instance,command:s.command,status:s.status,started_at:s.startedAt,exit_code:s.exitCode})));else for(let s of o){let c=s.status==="running"?"\u27F3 running":s.status==="done"?"\u2713 done":s.status==="orphaned"?"\u26A0 orphaned":`\u2717 ${s.status}`;r.info(` ${s.id} ${c} ${s.instance} ${s.command}`)}}),e.command("cancel <id>").description("Cancel a running background job").option("--json","Output result as JSON").action(async(n,o)=>{o.json&&I(!0);let i=await ie(n);if(i.status!=="running"){o.json?r.json({job_id:n,status:i.status,message:"Job is not running"}):r.info(`Job ${n} is not running (status: ${i.status})`);return}let a=await C(i.instance);await x({instanceName:i.instance,ip:a.ip,command:`kill -- -${i.pid} 2>/dev/null || kill ${i.pid} 2>/dev/null || true`,timeoutMs:1e4}),i.status="cancelled",i.completedAt=new Date().toISOString(),await G(i),o.json?r.json({job_id:n,status:"cancelled"}):r.info(`Job ${n} cancelled.`)}),e.command("logs <id>").description("Fetch output of a background job").option("--json","Output result as JSON").option("-f, --follow","Follow log output (tail -f)").action(async(n,o)=>{o.json&&I(!0);let i=await ie(n),a=await C(i.instance),s=`/root/.gibil-jobs/${n}.log`,c=o.follow?`tail -f ${s}`:`cat ${s} 2>/dev/null || echo '(no output yet)'`,l=o.follow?3e5:1e4,u=await x({instanceName:i.instance,ip:a.ip,command:c,stream:!o.json,timeoutMs:l});o.json&&r.json({job_id:n,stdout:u.stdout})})}function D(t,e,n){let o=`[${t}] ${e}`;return n&&(o+=`
24
24
 
25
- Suggestion: ${n}`),o}function De(t){let e=t instanceof Error?t.message:String(t);return/no active server|not found|no servers|does not exist/i.test(e)?"instance_not_found":/timeout|timed out|ETIMEDOUT/i.test(e)?"timeout":/ECONNREFUSED|EHOSTUNREACH|SSH connection|ssh2|handshake/i.test(e)?"ssh_connection":/hetzner|api|token|401|403|409|422|429|quota/i.test(e)?"provider_error":/invalid|must be|validation/i.test(e)?"validation":"provider_error"}var ot="key::";function Qo(){try{let t=nt("git config user.name",{encoding:"utf-8"}).trim(),e=nt("git config user.email",{encoding:"utf-8"}).trim();if(!t||!e)return;let n;try{if(nt("git config gpg.format",{encoding:"utf-8"}).trim()==="ssh"){let i=nt("git config user.signingkey",{encoding:"utf-8"}).trim();if(i)try{n=Xo(i,"utf-8").trim()}catch{(i.startsWith("ssh-")||i.startsWith(ot))&&(n=i.startsWith(ot)?i.slice(ot.length):i)}}}catch{}return{name:t,email:e,signingKey:n}}catch{return}}async function _e(t,e){if(t)return t;if(e)return E(e);let o=(await B()).filter(i=>new Date<new Date(i.expiresAt));if(o.length===0)throw new Error("No active servers. Use create_server first.");if(o.length===1)return o[0];throw new Error(`Multiple servers running: ${o.map(i=>i.name).join(", ")}. Pass the "server" parameter to specify which one.`)}function V(t,e,n=3e4){return $({instanceName:t.name,ip:t.ip,command:e,stream:!1,timeoutMs:n})}function H(t){return`'${t.replace(/'/g,"'\\''")}'`}function er(t){let e=t.trim(),n=e.split(",");if(n.length<5)throw new Error(`Unexpected vm_stats output (expected 5 comma-separated sections, got ${n.length}): ${e}`);let o=parseInt(n[0],10);if(isNaN(o))throw new Error(`Failed to parse CPU cores: ${n[0]}`);let i=n[1].trim().split(/\s+/),a=parseFloat(i[0]),s=parseFloat(i[1]),c=parseFloat(i[2]);if(isNaN(a)||isNaN(s)||isNaN(c))throw new Error(`Failed to parse load averages: ${n[1]}`);let l=n[2].trim().split(/\s+/),u=parseInt(l[0],10),d=parseInt(l[1],10),m=parseInt(l[2],10);if(isNaN(u)||isNaN(d)||isNaN(m))throw new Error(`Failed to parse memory: ${n[2]}`);let p=n[3].trim().split(/\s+/),g=v=>Math.round(parseFloat(v.replace(/G$/i,""))),h=g(p[0]),w=g(p[1]),C=g(p[2]);if(isNaN(h)||isNaN(w)||isNaN(C))throw new Error(`Failed to parse disk: ${n[3]}`);let b=parseInt(n[4].trim(),10);if(isNaN(b))throw new Error(`Failed to parse uptime: ${n[4]}`);return{cpu:{cores:o,load_1m:a,load_5m:s,load_15m:c},memory:{total_mb:u,used_mb:d,available_mb:m},disk:{total_gb:h,used_gb:w,available_gb:C},uptime_seconds:b}}async function In(t){let e=null;if(t&&(e=await E(t),e.gitIdentity)){let{name:c,email:l,signingKey:u}=e.gitIdentity,d=[`git config --global user.name ${H(c)}`,`git config --global user.email ${H(l)}`];u&&d.push("git config --global gpg.format ssh",`git config --global user.signingkey ${H(ot+u)}`,"git config --global commit.gpgsign true"),V(e,d.join(" && ")).catch(()=>{})}let n=t?`gibil-${t}`:"gibil",o=new Vo({name:n,version:"0.4.0"}),i=o.tool.bind(o);o.tool=((...c)=>{let l=c[0],u=c.length-1;if(typeof c[u]=="function"){let d=c[u];c[u]=async(...m)=>(fn(l).catch(()=>{}),d(...m))}return i(...c)}),e||(o.tool("create_server","Forge a new ephemeral server with a full Linux environment (Ubuntu 24.04, Node.js 20, pnpm). Clones the repo to /root/project and waits until fully provisioned. After creation, use vm_bash to run commands, vm_read/vm_write for files, vm_grep to search code. Destroy with destroy_server when done.",{name:x.string().optional().describe("Server name (auto-generated if omitted)"),repo:x.string().optional().describe("Git repo URL to clone on boot"),ttl:x.number().optional().describe("Auto-destroy after N minutes (default: 60)"),server_type:x.string().optional().describe("Hetzner server type (default: auto-detected)"),location:x.string().optional().describe("Hetzner datacenter (default: auto-detected)"),env:x.record(x.string(),x.string()).optional().describe("Environment variables to set on the server")},async({name:c,repo:l,ttl:u,server_type:d,location:m,env:p})=>{try{let g=c??Ne();c&&Ve(c);let h=await N.create(),w=await Be(g),C=await h.createSSHKey(`gibil-${g}-${le(4)}`,w.publicKey),b=Qo(),v=l?await ye(l):null;p&&Object.keys(p).length>0&&(v||(v={}),v.env={...v.env,...p});let Z=(v?.services?.length??0)>0,q=u??(Z?120:60),fe=ae({repo:l,config:v??void 0,ttlMinutes:q,githubToken:process.env.GITHUB_TOKEN,gitIdentity:b}),W=await h.createServer(g,C.id,fe,d,m),Ie=(await h.waitForReady(W.id)).ipv4,It=new Date,Mn={name:g,serverId:W.id,ip:Ie,sshKeyId:C.id,keyPath:S.privateKey(g),status:"running",createdAt:It.toISOString(),ttlMinutes:q,expiresAt:new Date(It.getTime()+q*6e4).toISOString(),repo:l,gitIdentity:b};await ce(Mn),await qe(g,Ie);let rt="ready";if(l||v){let Hn=Date.now(),kt=!1;for(;Date.now()-Hn<36e4;){try{if((await $({instanceName:g,ip:Ie,command:"test -f /root/.gibil-ready && echo ready || echo waiting",timeoutMs:1e4})).stdout.trim()==="ready"){kt=!0;break}}catch{}await new Promise(it=>setTimeout(it,5e3))}if(!kt){rt="timeout";try{rt=`timeout \u2014 cloud-init log:
26
- ${(await $({instanceName:g,ip:Ie,command:"tail -20 /var/log/cloud-init-output.log 2>/dev/null || echo 'no log'",timeoutMs:1e4})).stdout}`}catch{}}}return{content:[{type:"text",text:JSON.stringify({name:g,ip:Ie,ttl_minutes:q,status:"running",provisioning:rt,working_directory:l?"/root/project":"/root",hint:l?'Server ready. Run commands with vm_bash, e.g.: vm_bash({ command: "pnpm test" })':"Server ready. Clone a repo or run commands with vm_bash."},null,2)}]}}catch(g){let h=g instanceof Error?g.message:String(g),w=De(g);return{content:[{type:"text",text:M(w,`Failed to create server: ${h}`,w==="provider_error"?"Check your HETZNER_API_TOKEN and plan limits":"Verify parameters and try again")}],isError:!0}}}),o.tool("destroy_server","Burn a server. Deletes the Hetzner VM, SSH keys, and local metadata. Always destroy servers when done to avoid costs. Works on expired instances too.",{name:x.string().describe("Name of the server to destroy")},async({name:c})=>{try{let l=await We(c),u=await N.create();await u.destroyServer(l.serverId).catch(()=>{}),await u.deleteSSHKey(l.sshKeyId).catch(()=>{}),await re(c).catch(()=>{});let{deleteJobsByInstance:d}=await Promise.resolve().then(()=>(de(),en));return await d(c).catch(()=>{}),await we(c),{content:[{type:"text",text:`Server "${c}" destroyed.`}]}}catch(l){let u=l instanceof Error?l.message:String(l),d=De(l);return{content:[{type:"text",text:M(d,`Failed to destroy server "${c}": ${u}`,d==="instance_not_found"?"Check server name with list_servers":"Check your HETZNER_API_TOKEN")}],isError:!0}}}),o.tool("list_servers","List all active gibil servers with their names, IPs, and remaining TTL.",{},async()=>{let c=await B();if(c.length===0)return{content:[{type:"text",text:"No servers running. Use create_server to forge one."}]};let l=c.map(u=>{let d=Math.max(0,Math.floor((new Date(u.expiresAt).getTime()-Date.now())/1e3));return{name:u.name,ip:u.ip,status:u.status,ttl_remaining_seconds:d,ttl_warning:d<300?"Less than 5 minutes left \u2014 extend with extend_server or finish up":void 0,repo:u.repo}});return{content:[{type:"text",text:JSON.stringify(l,null,2)}]}}),o.tool("extend_server","Extend a server's TTL. Resets the auto-destroy timer.",{name:x.string().describe("Server name"),ttl:x.number().describe("New TTL in minutes from now")},async({name:c,ttl:l})=>{try{if(l<1||l>1440)return{content:[{type:"text",text:M("validation","TTL must be between 1 and 1440 minutes (24 hours)","Pass a ttl value between 1 and 1440")}],isError:!0};let u=Math.floor(l),d=await E(c),m=await V(d,`pkill -f 'sleep.*shutdown' || true && (sleep ${u*60} && shutdown -h now) &`);return m.exitCode!==0?{content:[{type:"text",text:M("command_failed",`Failed to extend TTL: ${m.stderr}`,"The remote command failed \u2014 check instance status with list_servers")}],isError:!0}:(d.ttlMinutes=l,d.expiresAt=new Date(Date.now()+l*6e4).toISOString(),await ce(d),{content:[{type:"text",text:`Server "${c}" TTL extended to ${l} minutes.`}]})}catch(u){let d=u instanceof Error?u.message:String(u),m=De(u);return{content:[{type:"text",text:M(m,`Failed to extend server "${c}": ${d}`,m==="instance_not_found"?"Check server name with list_servers":"Instance may be unreachable \u2014 wait and retry")}],isError:!0}}}));let a=x.string().optional().describe("Server name (auto-selects if only one is running)");o.tool("vm_bash","Run a shell command on a remote server. Default working directory is /root/project. Use for: installing deps, running tests, git operations, builds. For commands over 2 minutes, set background=true to get a job_id you can poll with vm_job_status.",{command:x.string().describe("Shell command to execute"),working_dir:x.string().optional().describe("Working directory (default: /root/project)"),timeout_ms:x.number().optional().describe("Timeout in ms (default: 120000). Increase for long builds or test suites."),background:x.boolean().optional().describe("Run in background, return job ID for polling"),server:a},async c=>{let l=await _e(e,c.server),u=c.working_dir??"/root/project",d=`cd ${H(u)} 2>/dev/null || cd /root && ${c.command}`;if(c.background){let g=Ye(),h="/root/.gibil-jobs",w=`${h}/${g}.log`,C=`${h}/${g}.exit`,b=`${h}/${g}.pid`,v=`${h}/${g}.sh`,Z=["#!/bin/bash",`nohup bash -c '${d.replace(/'/g,"'\\''")}' > ${w} 2>&1 &`,"BGPID=$!",`echo $BGPID > ${b}`,`(wait $BGPID 2>/dev/null; echo $? > ${C}) &`,"echo $BGPID"].join(`
27
- `),q=Buffer.from(Z).toString("base64"),fe=`mkdir -p ${h} && echo '${q}' | base64 -d > ${v} && chmod +x ${v} && bash ${v}`,W=await V(l,fe,1e4),Ke=parseInt(W.stdout.trim(),10);return isNaN(Ke)?{content:[{type:"text",text:M("command_failed","Failed to start background job \u2014 could not capture PID","Check that the server is accessible and the command is valid")}],isError:!0}:(await K({id:g,instance:l.name,command:c.command,pid:Ke,status:"running",startedAt:new Date().toISOString()}),{content:[{type:"text",text:JSON.stringify({job_id:g,instance:l.name,status:"running",pid:Ke,hint:"Poll with vm_job_status({ job_id }) to check completion."},null,2)}]})}let m=await V(l,d,c.timeout_ms??12e4);return{content:[{type:"text",text:[m.stdout,m.stderr].filter(Boolean).join(`
28
- `)||"(no output)"}],isError:m.exitCode!==0}}),o.tool("vm_job_status","Check the status of a background job started with vm_bash(background=true). Returns status, exit code, and output when done.",{job_id:x.string().describe("Job ID returned by vm_bash with background=true")},async c=>{try{let l=await ie(c.job_id),u=await xt(c.job_id);return{content:[{type:"text",text:JSON.stringify({job_id:c.job_id,instance:l.instance,command:l.command,status:u.status,exit_code:u.exitCode,started_at:l.startedAt,duration_s:u.durationS,...u.stdout!==void 0?{stdout:u.stdout}:{}},null,2)}],isError:u.status==="failed"||u.status==="orphaned"}}catch(l){let u=l instanceof Error?l.message:String(l),d=De(l);return{content:[{type:"text",text:M(d,u,"Check job_id is correct \u2014 use vm_job_list to see all jobs")}],isError:!0}}}),o.tool("vm_job_list","List all background jobs across all servers. Read-only \u2014 does not modify job state. Use vm_sweep_orphans to mark dead jobs.",{},async()=>{let l=(await be()).map(u=>({job_id:u.id,instance:u.instance,command:u.command,status:u.status,started_at:u.startedAt,exit_code:u.exitCode}));return{content:[{type:"text",text:JSON.stringify(l,null,2)}]}}),o.tool("vm_sweep_orphans","Mark running jobs as orphaned if their server no longer exists. Use after destroy_server to clean up lingering job records.",{},async()=>{let c=await be(),l=await B(),u=new Set(l.map(m=>m.name)),d=[];for(let m of c)m.status==="running"&&!u.has(m.instance)&&(m.status="orphaned",m.completedAt=new Date().toISOString(),await K(m),d.push(m.id));return{content:[{type:"text",text:JSON.stringify({swept_count:d.length,swept_job_ids:d},null,2)}]}}),o.tool("vm_read","Read a file from a remote server. Returns the file contents with line numbers.",{path:x.string().describe("Absolute path on the server (e.g. /root/project/src/app.ts)"),offset:x.number().int().min(1).max(999999).optional().describe("Start at line N (1-based)"),limit:x.number().int().min(1).max(999999).optional().describe("Max lines to return"),server:a},async c=>{let l=await _e(e,c.server),u=H(c.path),d=`cat -n ${u}`;c.offset&&c.limit?d=`sed -n '${c.offset},${c.offset+c.limit-1}p' ${u} | cat -n`:c.offset?d=`tail -n +${c.offset} ${u} | cat -n`:c.limit&&(d=`head -n ${c.limit} ${u} | cat -n`);let m=await V(l,d);return m.exitCode!==0?{content:[{type:"text",text:M("command_failed",`Failed to read ${c.path}: ${m.stderr}`,"Check the file path exists on the server \u2014 use vm_ls to browse")}],isError:!0}:{content:[{type:"text",text:m.stdout}]}}),o.tool("vm_write","Write content to a file on a remote server. Creates parent directories if needed. Overwrites existing files.",{path:x.string().describe("Absolute path on the server"),content:x.string().describe("File content to write"),server:a},async c=>{let l=await _e(e,c.server),u=Buffer.from(c.content).toString("base64"),d=H(c.path),m=`mkdir -p "$(dirname ${d})" && echo '${u}' | base64 -d > ${d}`,p=await V(l,m);return p.exitCode!==0?{content:[{type:"text",text:M("command_failed",`Failed to write ${c.path}: ${p.stderr}`,"Check the path is valid and the disk is not full")}],isError:!0}:{content:[{type:"text",text:`Wrote ${c.path}`}]}}),o.tool("vm_ls","List files and directories on a remote server.",{path:x.string().optional().describe("Directory path (default: /root/project)"),glob:x.string().optional().describe("Glob pattern to filter (e.g. '**/*.ts')"),server:a},async c=>{let l=await _e(e,c.server),u=c.path??"/root/project",d;c.glob?d=`cd ${H(u)} && find . -path ${H("./"+c.glob)} -type f 2>/dev/null | sort | head -200`:d=`ls -la ${H(u)}`;let m=await V(l,d);return m.exitCode!==0?{content:[{type:"text",text:M("command_failed",`Failed to list ${u}: ${m.stderr}`,"Check the directory path exists on the server")}],isError:!0}:{content:[{type:"text",text:m.stdout}]}}),o.tool("vm_grep","Search for a pattern in files on a remote server. Uses ripgrep if available, falls back to grep.",{pattern:x.string().describe("Regex pattern to search for"),path:x.string().optional().describe("Directory or file to search (default: /root/project)"),include:x.string().optional().describe("File glob to include (e.g. '*.ts')"),server:a},async c=>{let l=await _e(e,c.server),u=c.path??"/root/project",d=H(c.pattern),m=H(u),p;if(c.include){let w=H(c.include);p=`cd ${m} && (rg -n --glob ${w} ${d} 2>/dev/null || grep -rn --include=${w} ${d} .) | head -100`}else p=`cd ${m} && (rg -n ${d} 2>/dev/null || grep -rn ${d} .) | head -100`;return{content:[{type:"text",text:(await V(l,p)).stdout||"(no matches)"}]}}),o.tool("vm_stats","Get server resource usage \u2014 CPU cores, load average, memory, disk, and uptime. Returns structured data for monitoring.",{server:a},async c=>{try{let l=await _e(e,c.server),d=await V(l,`echo "$(nproc),$(cat /proc/loadavg),$(free -m | awk '/Mem:/{print $2,$3,$7}'),$(df -BG / | awk 'NR==2{print $2,$3,$4}'),$(awk '{print int($1)}' /proc/uptime)"`);if(d.exitCode!==0)return{content:[{type:"text",text:M("command_failed",`Failed to collect stats: ${d.stderr}`,"Check the server is accessible with vm_bash")}],isError:!0};let m=er(d.stdout);return{content:[{type:"text",text:JSON.stringify(m,null,2)}]}}catch(l){let u=l instanceof Error?l.message:String(l),d=De(l);return{content:[{type:"text",text:M(d,`Failed to get stats: ${u}`,"Check the server is accessible with vm_bash")}],isError:!0}}});let s=new Zo;await o.connect(s)}I();D();function kn(t){t.command("mcp [name]").description("Start an MCP server (used by Claude Code, Cursor, and other agents)").option("--print-config","Print the MCP JSON config (with resolved binary path) and exit").action(async(e,n)=>{if(n.printConfig){let o={mcpServers:{gibil:Ge()}};console.log(JSON.stringify(o,null,2)),console.error(""),console.error("Copy this to one of:"),console.error(" ~/.claude/mcp.json (Claude Code CLI)"),console.error(" .claude/mcp.json (project-level)"),console.error(" Claude Code settings (VS Code extension)");return}try{await In(e)}catch(o){r.error(o instanceof Error?o.message:String(o)),process.exit(1)}})}J();I();D();O();import{createInterface as tr}from"readline";import{existsSync as nr,readFileSync as or,writeFileSync as rr,mkdirSync as ir}from"fs";import{join as St}from"path";import{homedir as sr}from"os";function En(t){let e=tr({input:process.stdin,output:process.stderr});return new Promise(n=>{e.question(t,o=>{e.close(),n(o.trim())})})}async function ar(){let t=!!await mt(),e=!!await P();return{hetzner:t,apiKey:e}}function Cn(t){t.command("init").description("Set up gibil \u2014 configure your forge in 60 seconds").option("--force","Reconfigure even if already set up").action(async e=>{console.error(Tt);let n=await ar();if(n.hetzner&&!e.force){r.info(`${G} Already configured.`),n.apiKey?(r.detail("Hetzner",Q("connected")),r.detail("Gibil API",Q("connected"))):(r.detail("Hetzner",Q("connected")),r.detail("Gibil API",f("not configured (optional)"))),r.info(""),r.info(` Run ${y("gibil init --force")} to reconfigure.`),r.info(` Run ${y("gibil create")} to forge a server.`);return}r.info(""),r.info(y("Step 1: Hetzner API Token")),r.info(f(" Your servers run on Hetzner Cloud. You need an API token.")),r.info(f(" Get one at: https://console.hetzner.cloud \u2192 API Tokens")),r.info("");let o=await En(" Hetzner API token: ");o||(r.error("No token provided. Run gibil init again when ready."),process.exit(1));let i=r.spin("Verifying Hetzner token...");try{let g=await(await fetch("https://api.hetzner.cloud/v1/servers",{headers:{Authorization:`Bearer ${o}`}})).json();g.error&&(i.fail(`Invalid token: ${g.error.message}`),process.exit(1)),i.succeed("Hetzner token verified")}catch{i.fail("Could not reach Hetzner API. Check your network."),process.exit(1)}await Te(o);let a=r.spin("Detecting available server types..."),s="cax11",c="fsn1",l=[{type:"cax11",location:"fsn1"},{type:"cpx11",location:"fsn1"}];for(let p of l)try{let h=await(await fetch("https://api.hetzner.cloud/v1/servers",{method:"POST",headers:{Authorization:`Bearer ${o}`,"Content-Type":"application/json"},body:JSON.stringify({name:"gibil-probe",server_type:p.type,image:"ubuntu-24.04",location:p.location,start_after_create:!1})})).json();if(h.server){await fetch(`https://api.hetzner.cloud/v1/servers/${h.server.id}`,{method:"DELETE",headers:{Authorization:`Bearer ${o}`}}),s=p.type,c=p.location;break}}catch{}await ft(s,c),a.succeed(`Default server type: ${s} (${c})`);let u=r.spin("Configuring MCP for Claude Code...");try{let p=St(sr(),".claude"),g=St(p,".mcp.json");ir(p,{recursive:!0});let h={};try{h=JSON.parse(or(g,"utf-8"))}catch{}h.mcpServers||(h.mcpServers={}),h.mcpServers.gibil=Ge(),rr(g,JSON.stringify(h,null,2)+`
29
- `),u.succeed("MCP configured for Claude Code")}catch{u.fail("Could not auto-configure MCP"),r.info(f(" Run gibil mcp --print-config for manual setup"))}r.info(""),r.info(y("Default coding agent (optional)")),r.info(f(` Install a coding agent on every server. Options: ${z.join(", ")}`)),r.info(f(" Press Enter to skip \u2014 you can always use --agent later.")),r.info("");let m=(await En(" Default agent [none]: ")).toLowerCase().trim();m&&z.includes(m)?(await Je(m),r.info(` ${G} Default agent: ${Q(m)}`)):m?r.info(f(` Unknown agent "${m}", skipping. Use --agent with: ${z.join(", ")}`)):(await Je(null),r.info(f(" No default agent. Use --agent claude (or aider, codex) when creating servers."))),r.info(""),r.info(k.initComplete),r.info(""),r.info(f(" Try it now:")),r.info(` ${y('gibil branch feat/my-feature --run "pnpm test"')}`),r.info(` ${y("gibil ssh feat-my-feature")}`),r.info(` ${y("gibil destroy feat-my-feature")}`),r.info(""),r.info(f(" Or with full control:")),r.info(` ${y("gibil create --name demo --repo https://github.com/lukeed/clsx --ttl 10")}`),r.info(` ${y('gibil run demo "npm test"')}`),r.info(` ${y("gibil destroy demo")}`),r.info(""),r.info(f(" Later:")),r.info(` ${y("gibil auth login")} ${f("Add a Gibil API key (optional)")}`),r.info(` ${y("gibil mcp --print-config")} ${f("MCP setup for other editors")}`),r.info("")})}async function Tn(){if(process.env.HETZNER_API_TOKEN)return!1;let t=St(S.root,"config.json");return!nr(t)}ge();import{execSync as cr}from"child_process";import{existsSync as F}from"fs";I();O();J();function lr(){try{let t=cr("git remote get-url origin",{encoding:"utf-8",stdio:["pipe","pipe","pipe"]}).trim();if(!t)throw new Error("empty");return t}catch{throw new Error("Not in a git repo, or no remote configured. Use --repo to specify.")}}function ur(t){if(!t||!t.trim())throw new Error("Branch name cannot be empty.");if(/[;&|$`(){}<>!;"'\s\\]/.test(t))throw new Error(`Invalid branch name "${t}". Contains shell-unsafe characters.`)}function _t(t){return t.replace(/\//g,"-").replace(/[^a-z0-9-]/gi,"-").replace(/-+/g,"-").replace(/^-|-$/g,"").toLowerCase().slice(0,40)}function dr(){return F("pnpm-lock.yaml")?"pnpm install":F("bun.lockb")||F("bun.lock")?"bun install":F("yarn.lock")?"yarn install":F("package-lock.json")?"npm install":F("Cargo.lock")?"cargo build":F("go.sum")?"go mod download":F("uv.lock")?"uv sync":F("poetry.lock")?"poetry install":F("requirements.txt")?"pip install -r requirements.txt":F("Gemfile.lock")?"bundle install":null}async function jn(t,e,n){let o=_t(e),i=Date.now(),a=r.spin(`Forging "${o}" for branch ${y(e)}...`),s=await Xe(t,o,{repo:n.repo,ttlMinutes:n.ttlMinutes,config:n.config,serverType:n.serverType,location:n.location,agent:n.agent,verbose:n.verbose}),c=r.spin(`Checking out ${y(e)}...`);if((await $({instanceName:o,ip:s.ip,command:"cd /root/project && git rev-parse --abbrev-ref HEAD",timeoutMs:1e4})).stdout.trim()===e)c.succeed(`Already on ${e}`);else{let d=await $({instanceName:o,ip:s.ip,command:`cd /root/project && git fetch origin '${e.replace(/'/g,"'\\''")}' && git checkout '${e.replace(/'/g,"'\\''")}'`,timeoutMs:6e4});d.exitCode!==0?(c.fail(`Failed to checkout ${e}`),d.stderr&&r.info(f(d.stderr.trim()))):c.succeed(`Checked out ${e}`)}if(!(!n.noTasks&&n.config?.tasks&&n.config.tasks.length>0)){let d=dr();if(d){let m=r.spin(`Installing deps (${d})...`),p=await $({instanceName:o,ip:s.ip,command:`cd /root/project && ${d}`,timeoutMs:3e5});p.exitCode!==0?(m.fail("Dep install failed"),p.stderr&&r.info(f(p.stderr.trim().slice(-500)))):m.succeed("Deps installed")}}if(n.run)if(n.port&&n.port.length>0)r.info(`Starting: ${y(n.run)} (background)`),await $({instanceName:o,ip:s.ip,command:`cd /root/project && nohup ${n.run} > /tmp/gibil-run.log 2>&1 &`,timeoutMs:3e4}),await new Promise(d=>setTimeout(d,3e3));else{r.info(""),r.info(`Running: ${y(n.run)}`);let d=await $({instanceName:o,ip:s.ip,command:`cd /root/project && ${n.run}`,stream:!n.json,timeoutMs:3e5});n.json&&r.info(d.stdout),d.exitCode!==0&&r.info(f(`Exit code: ${d.exitCode}`))}if(n.port&&n.port.length>0){let d=Vt(s,n.port);r.info("");for(let m of d)r.info(` ${y(`http://localhost:${m}`)} \u2192 ${o}:${m}`);r.info(""),r.info(f(" Tunnel running in background. Kill with: lsof -ti :PORT | xargs kill"))}let u=((Date.now()-i)/1e3).toFixed(1);return a.succeed(k.createReady(o,u)),n.json?console.log(JSON.stringify({name:o,branch:e,ip:s.ip,ttl_minutes:n.ttlMinutes,ssh:`gibil ssh ${o}`})):(r.info(""),r.info(Fe(`${e}`,[`Server: ${o}`,`Branch: ${e}`,`IP: ${s.ip}`,`TTL: ${n.ttlMinutes} minutes`,"",`SSH: gibil ssh ${o}`,`Test: gibil run ${o} "pnpm test"`,`Done: gibil destroy ${o}`]))),s}function Pn(t){let e=t.command("branch <branches...>").description("Spin up a branch on a clean Linux server").option("-r, --repo <git-url>","Git repo URL (auto-detected from cwd)").option("--run <command>","Run a command after checkout").option("--ttl <minutes>","Auto-destroy after N minutes","30").option("--json","Output as JSON").option("--no-tasks","Skip .gibil.yml tasks").option("--server-type <type>","Hetzner server type").option("--location <loc>","Hetzner location").option("--agent <name>","Install a coding agent (claude, aider, codex)").option("-p, --port <ports...>","Forward local port(s) to server (e.g. --port 3000)").option("-V, --verbose","Stream cloud-init logs during provisioning").option("--dry-run","Print config summary and cloud-init script without deploying").action(async(n,o)=>{o.json&&_(!0);for(let u of n)ur(u);let i=parseInt(o.ttl,10);if(isNaN(i)||i<=0)throw new Error("TTL must be a positive number of minutes.");let a=o.repo??lr(),s=null;if(s=await ye(a)??await ve(process.cwd()),!o.agent){let u=await je();u&&(o.agent=u)}if(o.agent){if(!z.includes(o.agent))throw new Error(`Unknown agent "${o.agent}". Supported: ${z.join(", ")}`);if(!he[o.agent]?.some(d=>s?.env?.[d])){let d=he[o.agent]?.join(" or ")??"";r.warn(`${o.agent} needs ${d}. SSH in and export it (recommended) or pass with --env.`)}}if(o.dryRun){for(let u of n){let d=_t(u),m=o.serverType??s?.server_type??"cx22",p=o.location??s?.location??"nbg1",g=s?.image??"node:20",h=ae({repo:a,config:s??void 0,ttlMinutes:i,githubToken:process.env.GITHUB_TOKEN,gitIdentity:void 0,agent:o.agent}),w={name:d,serverType:m,location:p,image:g,ttlMinutes:i,repo:a,agent:o.agent,cloudInitScript:h};o.json?r.json(w):(r.info(""),r.info(y("Dry run \u2014 no server will be created")),r.info(""),r.info(` ${f("Name:")} ${d}`),r.info(` ${f("Branch:")} ${u}`),r.info(` ${f("Server type:")} ${m}`),r.info(` ${f("Location:")} ${p}`),r.info(` ${f("Image:")} ${g}`),r.info(` ${f("TTL:")} ${i} minutes`),r.info(` ${f("Repo:")} ${a}`),o.agent&&r.info(` ${f("Agent:")} ${o.agent}`),r.info(""),r.info("Cloud-init script:"),r.info("\u2500".repeat(17)),r.info(h))}return}let c=await P();if(c){let u=await oe(c);r.info(`Authenticated as ${u.user.email} (${u.user.plan})`)}let l=await N.create();if(n.length===1){let u=await jn(l,n[0],{repo:a,ttlMinutes:i,config:s,run:o.run,json:o.json,noTasks:o.noTasks,serverType:o.serverType,location:o.location,agent:o.agent,port:o.port,verbose:o.verbose});c&&await Y(c,"create",u.name).catch(()=>{})}else{r.info(`Forging ${y(String(n.length))} branches in parallel...`),r.info("");let u=await Promise.allSettled(n.map(p=>jn(l,p,{repo:a,ttlMinutes:i,config:s,run:o.run,json:o.json,noTasks:o.noTasks,serverType:o.serverType,location:o.location,agent:o.agent,port:o.port,verbose:o.verbose}))),d=u.filter(p=>p.status==="fulfilled"),m=u.filter(p=>p.status==="rejected");if(!o.json){if(r.info(""),r.info(`${d.length}/${n.length} branches ready.`),m.length>0)for(let p=0;p<u.length;p++){let g=u[p];g.status==="rejected"&&r.error(` ${n[p]}: ${g.reason instanceof Error?g.reason.message:String(g.reason)}`)}r.info(""),r.info(f(`Destroy all: gibil destroy ${n.map(_t).join(" ")}`))}if(c)for(let p of u)p.status==="fulfilled"&&await Y(c,"create",p.value.name).catch(()=>{});m.length>0&&process.exit(1)}})}function Nn(){let t=process.argv.indexOf("checkout");t>=2&&t===2&&(process.argv[t]="branch")}A();import{spawn as mr}from"child_process";I();O();function An(t){if(t.includes(":")){let e=t.split(":");if(e.length===2)return{local:e[0],host:"localhost",remote:e[1]};if(e.length===3)return{local:e[0],host:e[1],remote:e[2]};throw new Error(`Invalid port spec "${t}". Use PORT, LOCAL:REMOTE, or LOCAL:HOST:REMOTE.`)}return{local:t,host:"localhost",remote:t}}function fr(t){let{local:e,host:n,remote:o}=An(t);return Oe(`${e}:${n}:${o}`),`${e}:${n}:${o}`}function On(t){t.command("forward <name> <ports...>").description("Forward local ports to a running ephemeral machine via SSH").action(async(e,n)=>{let o=await E(e),i=n.map(c=>({spec:c,mapping:fr(c),...An(c)})),a=["-N","-i",o.keyPath,"-o","StrictHostKeyChecking=no","-o","UserKnownHostsFile=/dev/null","-o","LogLevel=ERROR","-o","ExitOnForwardFailure=yes"];for(let{mapping:c}of i)a.push("-L",c);a.push(`root@${o.ip}`),r.info("");for(let{local:c,host:l,remote:u}of i)r.info(` Forwarding ${y(`localhost:${c}`)} \u2192 ${e}:${l}:${u}`);r.info(""),r.info(f(" Tunnel active. Press Ctrl+C to stop.")),r.info(""),mr("ssh",a,{stdio:"inherit"}).on("exit",c=>{let l=()=>process.exit(c??0);c===255?(r.warn(" SSH connection failed \u2014 checking if server still exists..."),L(o).then(l,l)):(r.info(" Tunnel closed."),l())})})}I();O();try{await import("dotenv/config")}catch{}var wr=yr(hr(import.meta.url)),Rn={version:"0.0.0"};for(let t of["../package.json","../../package.json"])try{Rn=JSON.parse(gr(vr(wr,t),"utf-8"));break}catch{}var T=new pr;T.name("gibil").description("Ephemeral dev compute for humans and AI agents").version(`${Rn.version} ${Le}`,"-v, --version").addHelpText("before",`
30
- ${jt}
25
+ Suggestion: ${n}`),o}function Ke(t){let e=t instanceof Error?t.message:String(t);return/no active server|not found|no servers|does not exist/i.test(e)?"instance_not_found":/timeout|timed out|ETIMEDOUT/i.test(e)?"timeout":/ECONNREFUSED|EHOSTUNREACH|SSH connection|ssh2|handshake/i.test(e)?"ssh_connection":/hetzner|api|token|401|403|409|422|429|quota/i.test(e)?"provider_error":/invalid|must be|validation/i.test(e)?"validation":"provider_error"}var ot="key::";function er(){try{let t=nt("git config user.name",{encoding:"utf-8"}).trim(),e=nt("git config user.email",{encoding:"utf-8"}).trim();if(!t||!e)return;let n;try{if(nt("git config gpg.format",{encoding:"utf-8"}).trim()==="ssh"){let i=nt("git config user.signingkey",{encoding:"utf-8"}).trim();if(i)try{n=Qo(i,"utf-8").trim()}catch{(i.startsWith("ssh-")||i.startsWith(ot))&&(n=i.startsWith(ot)?i.slice(ot.length):i)}}}catch{}return{name:t,email:e,signingKey:n}}catch{return}}async function _e(t,e){if(t)return t;if(e)return C(e);let o=(await Y()).filter(i=>new Date<new Date(i.expiresAt));if(o.length===0)throw new Error("No active servers. Use create_server first.");if(o.length===1)return o[0];throw new Error(`Multiple servers running: ${o.map(i=>i.name).join(", ")}. Pass the "server" parameter to specify which one.`)}function X(t,e,n=3e4){return x({instanceName:t.name,ip:t.ip,command:e,stream:!1,timeoutMs:n})}function K(t){return`'${t.replace(/'/g,"'\\''")}'`}function tr(t){let e=t.trim(),n=e.split(",");if(n.length<5)throw new Error(`Unexpected vm_stats output (expected 5 comma-separated sections, got ${n.length}): ${e}`);let o=parseInt(n[0],10);if(isNaN(o))throw new Error(`Failed to parse CPU cores: ${n[0]}`);let i=n[1].trim().split(/\s+/),a=parseFloat(i[0]),s=parseFloat(i[1]),c=parseFloat(i[2]);if(isNaN(a)||isNaN(s)||isNaN(c))throw new Error(`Failed to parse load averages: ${n[1]}`);let l=n[2].trim().split(/\s+/),u=parseInt(l[0],10),d=parseInt(l[1],10),m=parseInt(l[2],10);if(isNaN(u)||isNaN(d)||isNaN(m))throw new Error(`Failed to parse memory: ${n[2]}`);let p=n[3].trim().split(/\s+/),g=b=>Math.round(parseFloat(b.replace(/G$/i,""))),h=g(p[0]),v=g(p[1]),$=g(p[2]);if(isNaN(h)||isNaN(v)||isNaN($))throw new Error(`Failed to parse disk: ${n[3]}`);let w=parseInt(n[4].trim(),10);if(isNaN(w))throw new Error(`Failed to parse uptime: ${n[4]}`);return{cpu:{cores:o,load_1m:a,load_5m:s,load_15m:c},memory:{total_mb:u,used_mb:d,available_mb:m},disk:{total_gb:h,used_gb:v,available_gb:$},uptime_seconds:w}}async function kn(t){let e=null;if(t&&(e=await C(t),e.gitIdentity)){let{name:c,email:l,signingKey:u}=e.gitIdentity,d=[`git config --global user.name ${K(c)}`,`git config --global user.email ${K(l)}`];u&&d.push("git config --global gpg.format ssh",`git config --global user.signingkey ${K(ot+u)}`,"git config --global commit.gpgsign true"),X(e,d.join(" && ")).catch(()=>{})}let n=t?`gibil-${t}`:"gibil",o=new Zo({name:n,version:"0.4.0"}),i=o.tool.bind(o);o.tool=((...c)=>{let l=c[0],u=c.length-1;if(typeof c[u]=="function"){let d=c[u];c[u]=async(...m)=>(pn(l).catch(()=>{}),d(...m))}return i(...c)}),e||(o.tool("create_server","Forge a new ephemeral server with a full Linux environment (Ubuntu 24.04, Node.js 20, pnpm). Clones the repo to /root/project and waits until fully provisioned. After creation, use vm_bash to run commands, vm_read/vm_write for files, vm_grep to search code. Destroy with destroy_server when done.",{name:S.string().optional().describe("Server name (auto-generated if omitted)"),repo:S.string().optional().describe("Git repo URL to clone on boot"),ttl:S.number().optional().describe("Auto-destroy after N minutes (default: 60)"),server_type:S.string().optional().describe("Hetzner server type (default: auto-detected)"),location:S.string().optional().describe("Hetzner datacenter (default: auto-detected)"),env:S.record(S.string(),S.string()).optional().describe("Environment variables to set on the server")},async({name:c,repo:l,ttl:u,server_type:d,location:m,env:p})=>{let g=null,h=null,v=null,$=null;try{v=c??Ae(),c&&Ve(c),$=await N.create();let w=await Be(v),b=await $.createSSHKey(`gibil-${v}-${ue(4)}`,w.publicKey);g=b;let O=er(),R=l?await ve(l):null;p&&Object.keys(p).length>0&&(R||(R={}),R.env={...R.env,...p});let pe=(R?.services?.length??0)>0,L=u??(pe?120:60),Ie=ae({repo:l,config:R??void 0,ttlMinutes:L,githubToken:process.env.GITHUB_TOKEN,gitIdentity:O}),rt=await $.createServer(v,b.id,Ie,d,m);h=rt.id;let ke=(await $.waitForReady(rt.id)).ipv4,kt=new Date,Mn={name:v,serverId:rt.id,ip:ke,sshKeyId:b.id,keyPath:_.privateKey(v),status:"running",createdAt:kt.toISOString(),ttlMinutes:L,expiresAt:new Date(kt.getTime()+L*6e4).toISOString(),repo:l,gitIdentity:O};await ce(Mn),await qe(v,ke);let it="ready";if(l||R){let Dn=Date.now(),Et=!1;for(;Date.now()-Dn<36e4;){try{if((await x({instanceName:v,ip:ke,command:"test -f /root/.gibil-ready && echo ready || echo waiting",timeoutMs:1e4})).stdout.trim()==="ready"){Et=!0;break}}catch{}await new Promise(st=>setTimeout(st,5e3))}if(!Et){it="timeout";try{it=`timeout \u2014 cloud-init log:
26
+ ${(await x({instanceName:v,ip:ke,command:"tail -20 /var/log/cloud-init-output.log 2>/dev/null || echo 'no log'",timeoutMs:1e4})).stdout}`}catch{}}}return{content:[{type:"text",text:JSON.stringify({name:v,ip:ke,ttl_minutes:L,status:"running",provisioning:it,working_directory:l?"/root/project":"/root",hint:l?'Server ready. Run commands with vm_bash, e.g.: vm_bash({ command: "pnpm test" })':"Server ready. Clone a repo or run commands with vm_bash."},null,2)}]}}catch(w){$&&h&&await $.destroyServer(h).catch(()=>{}),$&&g&&await $.deleteSSHKey(g.id).catch(()=>{}),v&&(await Z(v).catch(()=>{}),await le(v).catch(()=>{}));let b=w instanceof Error?w.message:String(w),O=Ke(w);return{content:[{type:"text",text:D(O,`Failed to create server: ${b}`,O==="provider_error"?"Check your HETZNER_API_TOKEN and plan limits":"Verify parameters and try again")}],isError:!0}}}),o.tool("destroy_server","Burn a server. Deletes the Hetzner VM, SSH keys, and local metadata. Always destroy servers when done to avoid costs. Works on expired instances too.",{name:S.string().describe("Name of the server to destroy")},async({name:c})=>{try{let l=await We(c),u=await N.create();await u.destroyServer(l.serverId).catch(()=>{}),await u.deleteSSHKey(l.sshKeyId).catch(()=>{}),await Z(c).catch(()=>{});let{deleteJobsByInstance:d}=await Promise.resolve().then(()=>(me(),tn));return await d(c).catch(()=>{}),await le(c),{content:[{type:"text",text:`Server "${c}" destroyed.`}]}}catch(l){let u=l instanceof Error?l.message:String(l),d=Ke(l);return{content:[{type:"text",text:D(d,`Failed to destroy server "${c}": ${u}`,d==="instance_not_found"?"Check server name with list_servers":"Check your HETZNER_API_TOKEN")}],isError:!0}}}),o.tool("list_servers","List all active gibil servers with their names, IPs, and remaining TTL.",{},async()=>{let c=await Y();if(c.length===0)return{content:[{type:"text",text:"No servers running. Use create_server to forge one."}]};let l=c.map(u=>{let d=Math.max(0,Math.floor((new Date(u.expiresAt).getTime()-Date.now())/1e3));return{name:u.name,ip:u.ip,status:u.status,ttl_remaining_seconds:d,ttl_warning:d<300?"Less than 5 minutes left \u2014 extend with extend_server or finish up":void 0,repo:u.repo}});return{content:[{type:"text",text:JSON.stringify(l,null,2)}]}}),o.tool("extend_server","Extend a server's TTL. Resets the auto-destroy timer.",{name:S.string().describe("Server name"),ttl:S.number().describe("New TTL in minutes from now")},async({name:c,ttl:l})=>{try{if(l<1||l>1440)return{content:[{type:"text",text:D("validation","TTL must be between 1 and 1440 minutes (24 hours)","Pass a ttl value between 1 and 1440")}],isError:!0};let u=Math.floor(l),d=await C(c),m=await X(d,`pkill -f 'sleep.*shutdown' || true && (sleep ${u*60} && shutdown -h now) &`);return m.exitCode!==0?{content:[{type:"text",text:D("command_failed",`Failed to extend TTL: ${m.stderr}`,"The remote command failed \u2014 check instance status with list_servers")}],isError:!0}:(d.ttlMinutes=l,d.expiresAt=new Date(Date.now()+l*6e4).toISOString(),await ce(d),{content:[{type:"text",text:`Server "${c}" TTL extended to ${l} minutes.`}]})}catch(u){let d=u instanceof Error?u.message:String(u),m=Ke(u);return{content:[{type:"text",text:D(m,`Failed to extend server "${c}": ${d}`,m==="instance_not_found"?"Check server name with list_servers":"Instance may be unreachable \u2014 wait and retry")}],isError:!0}}}));let a=S.string().optional().describe("Server name (auto-selects if only one is running)");o.tool("vm_bash","Run a shell command on a remote server. Default working directory is /root/project. Use for: installing deps, running tests, git operations, builds. For commands over 2 minutes, set background=true to get a job_id you can poll with vm_job_status.",{command:S.string().describe("Shell command to execute"),working_dir:S.string().optional().describe("Working directory (default: /root/project)"),timeout_ms:S.number().optional().describe("Timeout in ms (default: 120000). Increase for long builds or test suites."),background:S.boolean().optional().describe("Run in background, return job ID for polling"),server:a},async c=>{let l=await _e(e,c.server),u=c.working_dir??"/root/project",d=`cd ${K(u)} 2>/dev/null || cd /root && ${c.command}`;if(c.background){let g=Ye(),h="/root/.gibil-jobs",v=`${h}/${g}.log`,$=`${h}/${g}.exit`,w=`${h}/${g}.pid`,b=`${h}/${g}.sh`,O=["#!/bin/bash",`nohup bash -c '${d.replace(/'/g,"'\\''")}' > ${v} 2>&1 &`,"BGPID=$!",`echo $BGPID > ${w}`,`(wait $BGPID 2>/dev/null; echo $? > ${$}) &`,"echo $BGPID"].join(`
27
+ `),R=Buffer.from(O).toString("base64"),pe=`mkdir -p ${h} && echo '${R}' | base64 -d > ${b} && chmod +x ${b} && bash ${b}`,L=await X(l,pe,1e4),Ie=parseInt(L.stdout.trim(),10);return isNaN(Ie)?{content:[{type:"text",text:D("command_failed","Failed to start background job \u2014 could not capture PID","Check that the server is accessible and the command is valid")}],isError:!0}:(await G({id:g,instance:l.name,command:c.command,pid:Ie,status:"running",startedAt:new Date().toISOString()}),{content:[{type:"text",text:JSON.stringify({job_id:g,instance:l.name,status:"running",pid:Ie,hint:"Poll with vm_job_status({ job_id }) to check completion."},null,2)}]})}let m=await X(l,d,c.timeout_ms??12e4);return{content:[{type:"text",text:[m.stdout,m.stderr].filter(Boolean).join(`
28
+ `)||"(no output)"}],isError:m.exitCode!==0}}),o.tool("vm_job_status","Check the status of a background job started with vm_bash(background=true). Returns status, exit code, and output when done.",{job_id:S.string().describe("Job ID returned by vm_bash with background=true")},async c=>{try{let l=await ie(c.job_id),u=await St(c.job_id);return{content:[{type:"text",text:JSON.stringify({job_id:c.job_id,instance:l.instance,command:l.command,status:u.status,exit_code:u.exitCode,started_at:l.startedAt,duration_s:u.durationS,...u.stdout!==void 0?{stdout:u.stdout}:{}},null,2)}],isError:u.status==="failed"||u.status==="orphaned"}}catch(l){let u=l instanceof Error?l.message:String(l),d=Ke(l);return{content:[{type:"text",text:D(d,u,"Check job_id is correct \u2014 use vm_job_list to see all jobs")}],isError:!0}}}),o.tool("vm_job_list","List all background jobs across all servers. Read-only \u2014 does not modify job state. Use vm_sweep_orphans to mark dead jobs.",{},async()=>{let l=(await be()).map(u=>({job_id:u.id,instance:u.instance,command:u.command,status:u.status,started_at:u.startedAt,exit_code:u.exitCode}));return{content:[{type:"text",text:JSON.stringify(l,null,2)}]}}),o.tool("vm_sweep_orphans","Mark running jobs as orphaned if their server no longer exists. Use after destroy_server to clean up lingering job records.",{},async()=>{let c=await be(),l=await Y(),u=new Set(l.map(m=>m.name)),d=[];for(let m of c)m.status==="running"&&!u.has(m.instance)&&(m.status="orphaned",m.completedAt=new Date().toISOString(),await G(m),d.push(m.id));return{content:[{type:"text",text:JSON.stringify({swept_count:d.length,swept_job_ids:d},null,2)}]}}),o.tool("vm_read","Read a file from a remote server. Returns the file contents with line numbers.",{path:S.string().describe("Absolute path on the server (e.g. /root/project/src/app.ts)"),offset:S.number().int().min(1).max(999999).optional().describe("Start at line N (1-based)"),limit:S.number().int().min(1).max(999999).optional().describe("Max lines to return"),server:a},async c=>{let l=await _e(e,c.server),u=K(c.path),d=`cat -n ${u}`;c.offset&&c.limit?d=`awk 'NR>=${c.offset} && NR<=${c.offset+c.limit-1} {printf "%6d\\t%s\\n", NR, $0}' ${u}`:c.offset?d=`awk 'NR>=${c.offset} {printf "%6d\\t%s\\n", NR, $0}' ${u}`:c.limit&&(d=`head -n ${c.limit} ${u} | cat -n`);let m=await X(l,d);return m.exitCode!==0?{content:[{type:"text",text:D("command_failed",`Failed to read ${c.path}: ${m.stderr}`,"Check the file path exists on the server \u2014 use vm_ls to browse")}],isError:!0}:{content:[{type:"text",text:m.stdout}]}}),o.tool("vm_write","Write content to a file on a remote server. Creates parent directories if needed. Overwrites existing files.",{path:S.string().describe("Absolute path on the server"),content:S.string().describe("File content to write"),server:a},async c=>{let l=await _e(e,c.server),u=Buffer.from(c.content).toString("base64"),d=K(c.path),m=`mkdir -p "$(dirname ${d})" && echo '${u}' | base64 -d > ${d}`,p=await X(l,m);return p.exitCode!==0?{content:[{type:"text",text:D("command_failed",`Failed to write ${c.path}: ${p.stderr}`,"Check the path is valid and the disk is not full")}],isError:!0}:{content:[{type:"text",text:`Wrote ${c.path}`}]}}),o.tool("vm_ls","List files and directories on a remote server.",{path:S.string().optional().describe("Directory path (default: /root/project)"),glob:S.string().optional().describe("Glob pattern to filter (e.g. '**/*.ts')"),server:a},async c=>{let l=await _e(e,c.server),u=c.path??"/root/project",d;c.glob?d=`cd ${K(u)} && find . -path ${K("./"+c.glob)} -type f 2>/dev/null | sort | head -200`:d=`ls -la ${K(u)}`;let m=await X(l,d);return m.exitCode!==0?{content:[{type:"text",text:D("command_failed",`Failed to list ${u}: ${m.stderr}`,"Check the directory path exists on the server")}],isError:!0}:{content:[{type:"text",text:m.stdout}]}}),o.tool("vm_grep","Search for a pattern in files on a remote server. Uses ripgrep if available, falls back to grep.",{pattern:S.string().describe("Regex pattern to search for"),path:S.string().optional().describe("Directory or file to search (default: /root/project)"),include:S.string().optional().describe("File glob to include (e.g. '*.ts')"),server:a},async c=>{let l=await _e(e,c.server),u=c.path??"/root/project",d=K(c.pattern),m=K(u),p;if(c.include){let v=K(c.include);p=`cd ${m} && (rg -n --glob ${v} ${d} 2>/dev/null || grep -rn --include=${v} ${d} .) | head -100`}else p=`cd ${m} && (rg -n ${d} 2>/dev/null || grep -rn ${d} .) | head -100`;return{content:[{type:"text",text:(await X(l,p)).stdout||"(no matches)"}]}}),o.tool("vm_stats","Get server resource usage \u2014 CPU cores, load average, memory, disk, and uptime. Returns structured data for monitoring.",{server:a},async c=>{try{let l=await _e(e,c.server),d=await X(l,`echo "$(nproc),$(cat /proc/loadavg),$(free -m | awk '/Mem:/{print $2,$3,$7}'),$(df -BG / | awk 'NR==2{print $2,$3,$4}'),$(awk '{print int($1)}' /proc/uptime)"`);if(d.exitCode!==0)return{content:[{type:"text",text:D("command_failed",`Failed to collect stats: ${d.stderr}`,"Check the server is accessible with vm_bash")}],isError:!0};let m=tr(d.stdout);return{content:[{type:"text",text:JSON.stringify(m,null,2)}]}}catch(l){let u=l instanceof Error?l.message:String(l),d=Ke(l);return{content:[{type:"text",text:D(d,`Failed to get stats: ${u}`,"Check the server is accessible with vm_bash")}],isError:!0}}});let s=new Xo;await o.connect(s)}k();F();function En(t){t.command("mcp [name]").description("Start an MCP server (used by Claude Code, Cursor, and other agents)").option("--print-config","Print the MCP JSON config (with resolved binary path) and exit").action(async(e,n)=>{if(n.printConfig){let o={mcpServers:{gibil:Ge()}};console.log(JSON.stringify(o,null,2)),console.error(""),console.error("Copy this to one of:"),console.error(" ~/.claude/mcp.json (Claude Code CLI)"),console.error(" .claude/mcp.json (project-level)"),console.error(" Claude Code settings (VS Code extension)");return}try{await kn(e)}catch(o){r.error(o instanceof Error?o.message:String(o)),process.exit(1)}})}q();k();F();H();import{createInterface as nr}from"readline";import{existsSync as or,readFileSync as rr,writeFileSync as ir,mkdirSync as sr}from"fs";import{join as _t}from"path";import{homedir as ar}from"os";function Cn(t){let e=nr({input:process.stdin,output:process.stderr});return new Promise(n=>{e.question(t,o=>{e.close(),n(o.trim())})})}async function cr(){let t=!!await ft(),e=!!await P();return{hetzner:t,apiKey:e}}function Tn(t){t.command("init").description("Set up gibil \u2014 configure your forge in 60 seconds").option("--force","Reconfigure even if already set up").action(async e=>{console.error(jt);let n=await cr();if(n.hetzner&&!e.force){r.info(`${z} Already configured.`),n.apiKey?(r.detail("Hetzner",ee("connected")),r.detail("Gibil API",ee("connected"))):(r.detail("Hetzner",ee("connected")),r.detail("Gibil API",f("not configured (optional)"))),r.info(""),r.info(` Run ${y("gibil init --force")} to reconfigure.`),r.info(` Run ${y("gibil create")} to forge a server.`);return}r.info(""),r.info(y("Step 1: Hetzner API Token")),r.info(f(" Your servers run on Hetzner Cloud. You need an API token.")),r.info(f(" Get one at: https://console.hetzner.cloud \u2192 API Tokens")),r.info("");let o=await Cn(" Hetzner API token: ");o||(r.error("No token provided. Run gibil init again when ready."),process.exit(1));let i=r.spin("Verifying Hetzner token...");try{let g=await(await fetch("https://api.hetzner.cloud/v1/servers",{headers:{Authorization:`Bearer ${o}`}})).json();g.error&&(i.fail(`Invalid token: ${g.error.message}`),process.exit(1)),i.succeed("Hetzner token verified")}catch{i.fail("Could not reach Hetzner API. Check your network."),process.exit(1)}await je(o);let a=r.spin("Detecting available server types..."),s="cax11",c="fsn1",l=[{type:"cax11",location:"fsn1"},{type:"cpx11",location:"fsn1"}];for(let p of l)try{let h=await(await fetch("https://api.hetzner.cloud/v1/servers",{method:"POST",headers:{Authorization:`Bearer ${o}`,"Content-Type":"application/json"},body:JSON.stringify({name:"gibil-probe",server_type:p.type,image:"ubuntu-24.04",location:p.location,start_after_create:!1})})).json();if(h.server){await fetch(`https://api.hetzner.cloud/v1/servers/${h.server.id}`,{method:"DELETE",headers:{Authorization:`Bearer ${o}`}}),s=p.type,c=p.location;break}}catch{}await pt(s,c),a.succeed(`Default server type: ${s} (${c})`);let u=r.spin("Configuring MCP for Claude Code...");try{let p=_t(ar(),".claude"),g=_t(p,".mcp.json");sr(p,{recursive:!0});let h={};try{h=JSON.parse(rr(g,"utf-8"))}catch{}h.mcpServers||(h.mcpServers={}),h.mcpServers.gibil=Ge(),ir(g,JSON.stringify(h,null,2)+`
29
+ `),u.succeed("MCP configured for Claude Code")}catch{u.fail("Could not auto-configure MCP"),r.info(f(" Run gibil mcp --print-config for manual setup"))}r.info(""),r.info(y("Default coding agent (optional)")),r.info(f(` Install a coding agent on every server. Options: ${W.join(", ")}`)),r.info(f(" Press Enter to skip \u2014 you can always use --agent later.")),r.info("");let m=(await Cn(" Default agent [none]: ")).toLowerCase().trim();m&&W.includes(m)?(await Je(m),r.info(` ${z} Default agent: ${ee(m)}`)):m?r.info(f(` Unknown agent "${m}", skipping. Use --agent with: ${W.join(", ")}`)):(await Je(null),r.info(f(" No default agent. Use --agent claude (or aider, codex) when creating servers."))),r.info(""),r.info(E.initComplete),r.info(""),r.info(f(" Try it now:")),r.info(` ${y('gibil branch feat/my-feature --run "pnpm test"')}`),r.info(` ${y("gibil ssh feat-my-feature")}`),r.info(` ${y("gibil destroy feat-my-feature")}`),r.info(""),r.info(f(" Or with full control:")),r.info(` ${y("gibil create --name demo --repo https://github.com/lukeed/clsx --ttl 10")}`),r.info(` ${y('gibil run demo "npm test"')}`),r.info(` ${y("gibil destroy demo")}`),r.info(""),r.info(f(" Later:")),r.info(` ${y("gibil auth login")} ${f("Add a Gibil API key (optional)")}`),r.info(` ${y("gibil mcp --print-config")} ${f("MCP setup for other editors")}`),r.info("")})}async function jn(){if(process.env.HETZNER_API_TOKEN)return!1;let t=_t(_.root,"config.json");return!or(t)}he();import{execSync as lr}from"child_process";import{existsSync as J}from"fs";k();H();q();function ur(){try{let t=lr("git remote get-url origin",{encoding:"utf-8",stdio:["pipe","pipe","pipe"]}).trim();if(!t)throw new Error("empty");return t}catch{throw new Error("Not in a git repo, or no remote configured. Use --repo to specify.")}}function dr(t){if(!t||!t.trim())throw new Error("Branch name cannot be empty.");if(/[;&|$`(){}<>!;"'\s\\]/.test(t))throw new Error(`Invalid branch name "${t}". Contains shell-unsafe characters.`)}function It(t){return t.replace(/\//g,"-").replace(/[^a-z0-9-]/gi,"-").replace(/-+/g,"-").replace(/^-|-$/g,"").toLowerCase().slice(0,40)}function mr(){return J("pnpm-lock.yaml")?"pnpm install":J("bun.lockb")||J("bun.lock")?"bun install":J("yarn.lock")?"yarn install":J("package-lock.json")?"npm install":J("Cargo.lock")?"cargo build":J("go.sum")?"go mod download":J("uv.lock")?"uv sync":J("poetry.lock")?"poetry install":J("requirements.txt")?"pip install -r requirements.txt":J("Gemfile.lock")?"bundle install":null}async function Pn(t,e,n){let o=It(e),i=Date.now(),a=r.spin(`Forging "${o}" for branch ${y(e)}...`),s=await Xe(t,o,{repo:n.repo,ttlMinutes:n.ttlMinutes,config:n.config,serverType:n.serverType,location:n.location,agent:n.agent,verbose:n.verbose}),c=r.spin(`Checking out ${y(e)}...`);if((await x({instanceName:o,ip:s.ip,command:"cd /root/project && git rev-parse --abbrev-ref HEAD",timeoutMs:1e4})).stdout.trim()===e)c.succeed(`Already on ${e}`);else{let d=await x({instanceName:o,ip:s.ip,command:`cd /root/project && git fetch origin '${e.replace(/'/g,"'\\''")}' && git checkout '${e.replace(/'/g,"'\\''")}'`,timeoutMs:6e4});d.exitCode!==0?(c.fail(`Failed to checkout ${e}`),d.stderr&&r.info(f(d.stderr.trim()))):c.succeed(`Checked out ${e}`)}if(!(!n.noTasks&&n.config?.tasks&&n.config.tasks.length>0)){let d=mr();if(d){let m=r.spin(`Installing deps (${d})...`),p=await x({instanceName:o,ip:s.ip,command:`cd /root/project && ${d}`,timeoutMs:3e5});p.exitCode!==0?(m.fail("Dep install failed"),p.stderr&&r.info(f(p.stderr.trim().slice(-500)))):m.succeed("Deps installed")}}if(n.run)if(n.port&&n.port.length>0)r.info(`Starting: ${y(n.run)} (background)`),await x({instanceName:o,ip:s.ip,command:`cd /root/project && nohup ${n.run} > /tmp/gibil-run.log 2>&1 &`,timeoutMs:3e4}),await new Promise(d=>setTimeout(d,3e3));else{r.info(""),r.info(`Running: ${y(n.run)}`);let d=await x({instanceName:o,ip:s.ip,command:`cd /root/project && ${n.run}`,stream:!n.json,timeoutMs:3e5});n.json&&r.info(d.stdout),d.exitCode!==0&&r.info(f(`Exit code: ${d.exitCode}`))}if(n.port&&n.port.length>0){let d=Zt(s,n.port);r.info("");for(let m of d)r.info(` ${y(`http://localhost:${m}`)} \u2192 ${o}:${m}`);r.info(""),r.info(f(" Tunnel running in background. Kill with: lsof -ti :PORT | xargs kill"))}let u=((Date.now()-i)/1e3).toFixed(1);return a.succeed(E.createReady(o,u)),n.json?console.log(JSON.stringify({name:o,branch:e,ip:s.ip,ttl_minutes:n.ttlMinutes,ssh:`gibil ssh ${o}`})):(r.info(""),r.info(Fe(`${e}`,[`Server: ${o}`,`Branch: ${e}`,`IP: ${s.ip}`,`TTL: ${n.ttlMinutes} minutes`,"",`SSH: gibil ssh ${o}`,`Test: gibil run ${o} "pnpm test"`,`Done: gibil destroy ${o}`]))),s}function Nn(t){let e=t.command("branch <branches...>").description("Spin up a branch on a clean Linux server").option("-r, --repo <git-url>","Git repo URL (auto-detected from cwd)").option("--run <command>","Run a command after checkout").option("--ttl <minutes>","Auto-destroy after N minutes","30").option("--json","Output as JSON").option("--no-tasks","Skip .gibil.yml tasks").option("--server-type <type>","Hetzner server type").option("--location <loc>","Hetzner location").option("--agent <name>","Install a coding agent (claude, aider, codex)").option("-p, --port <ports...>","Forward local port(s) to server (e.g. --port 3000)").option("-V, --verbose","Stream cloud-init logs during provisioning").option("--dry-run","Print config summary and cloud-init script without deploying").action(async(n,o)=>{o.json&&I(!0);for(let u of n)dr(u);let i=parseInt(o.ttl,10);if(isNaN(i)||i<=0)throw new Error("TTL must be a positive number of minutes.");let a=o.repo??ur(),s=null;if(s=await ve(a)??await we(process.cwd()),!o.agent){let u=await Pe();u&&(o.agent=u)}if(o.agent){if(!W.includes(o.agent))throw new Error(`Unknown agent "${o.agent}". Supported: ${W.join(", ")}`);if(!ye[o.agent]?.some(d=>s?.env?.[d])){let d=ye[o.agent]?.join(" or ")??"";r.warn(`${o.agent} needs ${d}. SSH in and export it (recommended) or pass with --env.`)}}if(o.dryRun){for(let u of n){let d=It(u),m=o.serverType??s?.server_type??"cx22",p=o.location??s?.location??"nbg1",g=s?.image??"node:20",h=ae({repo:a,config:s??void 0,ttlMinutes:i,githubToken:process.env.GITHUB_TOKEN,gitIdentity:void 0,agent:o.agent}),v={name:d,serverType:m,location:p,image:g,ttlMinutes:i,repo:a,agent:o.agent,cloudInitScript:h};o.json?r.json(v):(r.info(""),r.info(y("Dry run \u2014 no server will be created")),r.info(""),r.info(` ${f("Name:")} ${d}`),r.info(` ${f("Branch:")} ${u}`),r.info(` ${f("Server type:")} ${m}`),r.info(` ${f("Location:")} ${p}`),r.info(` ${f("Image:")} ${g}`),r.info(` ${f("TTL:")} ${i} minutes`),r.info(` ${f("Repo:")} ${a}`),o.agent&&r.info(` ${f("Agent:")} ${o.agent}`),r.info(""),r.info("Cloud-init script:"),r.info("\u2500".repeat(17)),r.info(h))}return}let c=await P();if(c){let u=await re(c);r.info(`Authenticated as ${u.user.email} (${u.user.plan})`)}let l=await N.create();if(n.length===1){let u=await Pn(l,n[0],{repo:a,ttlMinutes:i,config:s,run:o.run,json:o.json,noTasks:o.noTasks,serverType:o.serverType,location:o.location,agent:o.agent,port:o.port,verbose:o.verbose});c&&await V(c,"create",u.name).catch(()=>{})}else{r.info(`Forging ${y(String(n.length))} branches in parallel...`),r.info("");let u=await Promise.allSettled(n.map(p=>Pn(l,p,{repo:a,ttlMinutes:i,config:s,run:o.run,json:o.json,noTasks:o.noTasks,serverType:o.serverType,location:o.location,agent:o.agent,port:o.port,verbose:o.verbose}))),d=u.filter(p=>p.status==="fulfilled"),m=u.filter(p=>p.status==="rejected");if(!o.json){if(r.info(""),r.info(`${d.length}/${n.length} branches ready.`),m.length>0)for(let p=0;p<u.length;p++){let g=u[p];g.status==="rejected"&&r.error(` ${n[p]}: ${g.reason instanceof Error?g.reason.message:String(g.reason)}`)}r.info(""),r.info(f(`Destroy all: gibil destroy ${n.map(It).join(" ")}`))}if(c)for(let p of u)p.status==="fulfilled"&&await V(c,"create",p.value.name).catch(()=>{});m.length>0&&process.exit(1)}})}function An(){let t=process.argv.indexOf("checkout");t>=2&&t===2&&(process.argv[t]="branch")}A();import{spawn as fr}from"child_process";k();H();function On(t){if(t.includes(":")){let e=t.split(":");if(e.length===2)return{local:e[0],host:"localhost",remote:e[1]};if(e.length===3)return{local:e[0],host:e[1],remote:e[2]};throw new Error(`Invalid port spec "${t}". Use PORT, LOCAL:REMOTE, or LOCAL:HOST:REMOTE.`)}return{local:t,host:"localhost",remote:t}}function pr(t){let{local:e,host:n,remote:o}=On(t);return Re(`${e}:${n}:${o}`),`${e}:${n}:${o}`}function Rn(t){t.command("forward <name> <ports...>").description("Forward local ports to a running ephemeral machine via SSH").action(async(e,n)=>{let o=await C(e),i=n.map(c=>({spec:c,mapping:pr(c),...On(c)})),a=["-N","-i",o.keyPath,"-o","StrictHostKeyChecking=no","-o","UserKnownHostsFile=/dev/null","-o","LogLevel=ERROR","-o","ExitOnForwardFailure=yes"];for(let{mapping:c}of i)a.push("-L",c);a.push(`root@${o.ip}`),r.info("");for(let{local:c,host:l,remote:u}of i)r.info(` Forwarding ${y(`localhost:${c}`)} \u2192 ${e}:${l}:${u}`);r.info(""),r.info(f(" Tunnel active. Press Ctrl+C to stop.")),r.info(""),fr("ssh",a,{stdio:"inherit"}).on("exit",c=>{let l=()=>process.exit(c??0);c===255?(r.warn(" SSH connection failed \u2014 checking if server still exists..."),U(o).then(l,l)):(r.info(" Tunnel closed."),l())})})}k();H();try{await import("dotenv/config")}catch{}var br=vr(yr(import.meta.url)),Hn={version:"0.0.0"};for(let t of["../package.json","../../package.json"])try{Hn=JSON.parse(hr(wr(br,t),"utf-8"));break}catch{}var T=new gr;T.name("gibil").description("Ephemeral dev compute for humans and AI agents").version(`${Hn.version} ${Le}`,"-v, --version").addHelpText("before",`
30
+ ${Pt}
31
31
  `).addHelpText("after",`
32
32
  ${f("Docs:")} https://gibil.dev/docs
33
- `);Cn(T);Yt(T);tn(T);nn(T);hn(T);yn(T);wn(T);bn(T);xn(T);Sn(T);_n(T);kn(T);Pn(T);On(T);async function br(){Nn();let t=process.argv.slice(2);!(t.length===0||t.includes("init")||t.includes("auth")||t.includes("--help")||t.includes("-h")||t.includes("--version")||t.includes("-v")||t.includes("-V")||t.includes("mcp")||t.includes("ssh")||t.includes("run")||t.includes("exec")||t.includes("list")||t.includes("ls")||t.includes("forward"))&&await Tn()&&(r.info(""),r.info(k.setupNeeded),r.info(""),process.exit(1)),await mn()&&await $t()&&r.info(f("gibil collects anonymous usage stats to improve the CLI. To disable: GIBIL_TELEMETRY=0"));let o=t[0]??"help",i=pn(process.argv),a=Date.now(),s=0;try{await T.parseAsync(process.argv)}catch(l){s=1,l instanceof Error&&r.error(l.message)}["auth","config","--help","-h","--version","-v","help"].includes(o)||await He({event:"command",command:o,flags:i,exit_code:s,duration_ms:Date.now()-a}),s!==0&&process.exit(1)}br();
33
+ `);Tn(T);Vt(T);nn(T);on(T);yn(T);vn(T);bn(T);$n(T);Sn(T);_n(T);In(T);En(T);Nn(T);Rn(T);async function $r(){An();let t=process.argv.slice(2);!(t.length===0||t.includes("init")||t.includes("auth")||t.includes("--help")||t.includes("-h")||t.includes("--version")||t.includes("-v")||t.includes("-V")||t.includes("mcp")||t.includes("ssh")||t.includes("run")||t.includes("exec")||t.includes("list")||t.includes("ls")||t.includes("forward"))&&await jn()&&(r.info(""),r.info(E.setupNeeded),r.info(""),process.exit(1)),await fn()&&await xt()&&r.info(f("gibil collects anonymous usage stats to improve the CLI. To disable: GIBIL_TELEMETRY=0"));let o=t[0]??"help",i=gn(process.argv),a=Date.now(),s=0;try{await T.parseAsync(process.argv)}catch(l){s=1,l instanceof Error&&r.error(l.message)}["auth","config","--help","-h","--version","-v","help"].includes(o)||await De({event:"command",command:o,flags:i,exit_code:s,duration_ms:Date.now()-a}),s!==0&&process.exit(1)}$r();
package/package.json CHANGED
@@ -1,11 +1,11 @@
1
1
  {
2
2
  "name": "gibil",
3
- "version": "0.3.0",
3
+ "version": "0.3.1",
4
4
  "description": "Ephemeral dev compute for humans and AI agents",
5
5
  "homepage": "https://gibil.dev",
6
6
  "type": "module",
7
7
  "bin": {
8
- "gibil": "./dist/index.js"
8
+ "gibil": "./dist/cli/index.js"
9
9
  },
10
10
  "files": [
11
11
  "dist",