iterate 0.2.7 → 0.3.0

package/dist/cli-DMS4kJph.mjs

@@ -1,868 +0,0 @@
-import { a as removeConfigSession, c as connectItx, i as readConfigFile, n as Config, o as updateConfigSession, r as readConfig, s as writeConfigFile, t as CONFIG_PATH } from "./config-DtnR7Lv7.mjs";
-import { existsSync } from "node:fs";
-import { dirname, join } from "node:path";
-import { z } from "zod/v4";
-import { spawn } from "node:child_process";
-import { createHash, randomBytes } from "node:crypto";
-import { createServer } from "node:http";
-import process from "node:process";
-import * as prompts from "@clack/prompts";
-import { createORPCClient } from "@orpc/client";
-import { RPCLink } from "@orpc/client/fetch";
-import { os } from "@orpc/server";
-import { createCli, parseRouter, yamlTableConsoleLogger } from "trpc-cli";
-//#region src/cli.ts
-const OAUTH_REFRESH_SKEW_MS = 6e4;
-const DEFAULT_CHAT_AGENT_PATH = "/agents/onboarding";
-const isAgent = process.env.AGENT === "1" || process.env.OPENCODE === "1" || Boolean(process.env.OPENCODE_SESSION) || Boolean(process.env.CLAUDE_CODE);
-/** Global override set by --config flag before CLI commands run. */
-let configFlagOverride;
-/**
-* We strip host-level flags before handing argv to `trpc-cli`,
-* That keeps router-local help/validation focused on the mounted
-* procedures instead of teaching every command about iterate-specific flags.
-*
-* Example: `iterate --config dev doctor`
-*/
-const consumeCliStringFlag = (flagName) => {
-	const args = process.argv.slice(2);
-	const flagIndex = args.indexOf(flagName);
-	if (flagIndex === -1) return void 0;
-	const value = args[flagIndex + 1];
-	if (!value || value.startsWith("-")) throw new Error(`${flagName} requires a value`);
-	process.argv.splice(flagIndex + 2, 2);
-	return value;
-};
-const firstNonFlagArgument = (args) => {
-	for (const arg of args) {
-		if (arg === "--") return void 0;
-		if (!arg.startsWith("-")) return arg;
-	}
-};
-const defaultBareInvocationToChat = (args) => args.length === 0 ? ["chat"] : args;
-const applyDefaultBareInvocation = () => {
-	const args = process.argv.slice(2);
-	const nextArgs = defaultBareInvocationToChat(args);
-	if (nextArgs !== args) process.argv.splice(2, args.length, ...nextArgs);
-};
-const resolveStreamTuiEntrypointPath = () => {
-	const moduleDir = import.meta.dirname;
-	const candidates = [
-		join(moduleDir, "stream-tui/agent-chat-terminal.tsx"),
-		join(moduleDir, "stream-tui/agent-chat-terminal.mjs"),
-		join(moduleDir, "stream-tui/agent-chat-terminal.js")
-	];
-	for (const candidate of candidates) if (existsSync(candidate)) return candidate;
-	throw new Error("Could not find the Iterate stream TUI entrypoint.");
-};
-const buildChatCommand = (input) => ({
-	command: "bun",
-	args: [
-		input.entrypointPath,
-		"--base-url",
-		input.osBaseUrl,
-		"--project-id",
-		input.projectId,
-		"--agent-path",
-		input.agentPath
-	]
-});
-const runInheritedProcess = async (input) => {
-	const child = spawn(input.command, input.args, {
-		stdio: "inherit",
-		env: {
-			...process.env,
-			...input.env
-		}
-	});
-	const result = await new Promise((resolve, reject) => {
-		child.on("error", reject);
-		child.on("exit", (code, signal) => resolve({
-			code,
-			signal
-		}));
-	});
-	if (result.signal) throw new Error(`${input.command} exited with signal ${result.signal}.`);
-	if (result.code !== 0) throw new Error(`${input.command} exited with code ${result.code ?? "unknown"}.`);
-};
-const hasConfig = (configFile, name) => name === "prd" || Boolean(configFile.configs?.[name]);
-/**
-* Resolve which config name to use.
-* Priority: --config flag > workspace match (walk up from cwd) > default > single-config auto > built-in prd
-*/
-const resolveConfigName = (workspacePath) => {
-	const configFile = readConfigFile();
-	if (configFlagOverride) {
-		if (!hasConfig(configFile, configFlagOverride)) return /* @__PURE__ */ new Error(`Config "${configFlagOverride}" not found. Available: ${Object.keys(configFile.configs || {}).join(", ") || "(none)"}`);
-		return configFlagOverride;
-	}
-	let dir = workspacePath;
-	while (dir && dir !== "/") {
-		const match = configFile.workspaces?.[dir];
-		if (match) {
-			if (!hasConfig(configFile, match)) return /* @__PURE__ */ new Error(`Workspace "${dir}" maps to config "${match}" which doesn't exist.`);
-			return match;
-		}
-		dir = dirname(dir);
-	}
-	if (configFile.default) {
-		if (!hasConfig(configFile, configFile.default)) return /* @__PURE__ */ new Error(`Default config "${configFile.default}" doesn't exist. Available: ${Object.keys(configFile.configs || {}).join(", ") || "(none)"}`);
-		return configFile.default;
-	}
-	const configNames = Object.keys(configFile.configs || {});
-	if (configNames.length === 1) return configNames[0];
-	return "prd";
-};
-function resolveConfig(workspacePath, options) {
-	const result = (() => {
-		const name = resolveConfigName(workspacePath);
-		if (name instanceof Error) return name;
-		const config = readConfig(name);
-		if (config instanceof Error) return config;
-		return {
-			name,
-			config
-		};
-	})();
-	if (result instanceof Error && options?.throw) throw result;
-	return result;
-}
-var StoredOsSessionError = class extends Error {
-	reason;
-	constructor(reason, message) {
-		super(message);
-		this.reason = reason;
-		this.name = "StoredOsSessionError";
-	}
-};
-/**
-* Get auth headers for OS API calls based on the resolved config's stored session.
-* OAuth sessions are refreshed when possible.
-*/
-const getOsAuthHeaders = async (config, configName) => {
-	let session = config.session;
-	if (!session) throw new StoredOsSessionError("missing", `Not logged in to ${config.osBaseUrl}. Run \`iterate login\` first.`);
-	if (sessionNeedsRefresh(session)) if (session.refreshToken && session.clientId) session = await refreshOAuthSession({
-		config,
-		configName,
-		session
-	});
-	else throw new StoredOsSessionError("expired", `Session expired for ${config.osBaseUrl}. Run \`iterate login\` again.`);
-	if (session.token) return { authorization: `Bearer ${session.token}` };
-	if (session.cookie) return { cookie: session.cookie };
-	throw new Error(`Stored session for ${config.osBaseUrl} has no token or cookie.`);
-};
-const osAuthFromHeaders = (headers) => {
-	if (headers.authorization) {
-		const match = /^Bearer\s+(.+)$/i.exec(headers.authorization);
-		if (!match) throw new Error("Stored OS authorization header is not a bearer token.");
-		return { credentials: {
-			type: "bearer",
-			token: match[1]
-		} };
-	}
-	if (headers.cookie) return {
-		credentials: { type: "from-server-cookie" },
-		requestHeaders: { cookie: headers.cookie }
-	};
-	throw new Error("No OS auth credentials available.");
-};
-const osAuthFromEnvironment = () => {
-	const adminSecret = process.env.APP_CONFIG_ADMIN_API_SECRET?.trim();
-	if (adminSecret) return { credentials: {
-		type: "admin-secret",
-		secret: adminSecret
-	} };
-	const bearerToken = process.env.ITERATE_BEARER_TOKEN?.trim();
-	if (bearerToken) return { credentials: {
-		type: "bearer",
-		token: bearerToken
-	} };
-};
-const disposeRpc = (stub) => {
-	try {
-		stub?.[Symbol.dispose]?.();
-	} catch {}
-};
-const errorMessage = (error) => error instanceof Error ? error.message : String(error);
-const headersRecord = (headers) => {
-	if (headers === void 0) return void 0;
-	return Object.fromEntries(new Headers(headers).entries());
-};
-const withAuthenticatedOsSession = async (input) => {
-	const session = input.createSession?.({
-		auth: input.auth,
-		baseUrl: input.baseUrl
-	}) ?? connectItx({
-		auth: input.auth.credentials,
-		baseUrl: input.baseUrl,
-		headers: headersRecord(input.auth.requestHeaders)
-	});
-	try {
-		return await input.run(session);
-	} finally {
-		disposeRpc(session);
-	}
-};
-const verifyOsSession = async (input) => {
-	return await withAuthenticatedOsSession({
-		auth: osAuthFromHeaders(input.authHeaders),
-		baseUrl: input.baseUrl,
-		createSession: input.createSession,
-		run: async (session) => await session.__describe()
-	});
-};
-const setupMissingProjectForChat = async (session, project) => {
-	let projectItx;
-	let agentStream;
-	try {
-		projectItx = await session.projects.create({
-			projectId: project.id,
-			slug: project.slug,
-			...project.organizationSlug ? { organizationSlug: project.organizationSlug } : {},
-			waitUntilCreated: false
-		});
-		agentStream = projectItx.streams.get(DEFAULT_CHAT_AGENT_PATH);
-		await agentStream.waitForEvent({
-			afterOffset: 0,
-			eventTypes: ["events.iterate.com/agent/llm-provider-selected"],
-			timeoutMs: 15e3
-		});
-	} catch (error) {
-		throw new Error(`Project "${project.slug}" (${project.id}) exists in auth but is missing in OS. Failed to set it up for chat: ${errorMessage(error)}`);
-	} finally {
-		disposeRpc(agentStream);
-		disposeRpc(projectItx);
-	}
-	return project.id;
-};
-const accessibleProjectsMessage = (projects) => projects.length === 0 ? "No accessible projects found." : `Accessible projects: ${projects.map((project) => `${project.slug} (${project.id}, ${project.deploymentStatus})`).join(", ")}.`;
-const resolveChatProject = async (input) => {
-	const configured = input.explicitProject || input.configuredDefaultProject;
-	return await withAuthenticatedOsSession({
-		auth: input.auth,
-		baseUrl: input.baseUrl,
-		createSession: input.createSession,
-		run: async (session) => {
-			let projects;
-			try {
-				projects = await session.projects.list();
-			} catch (error) {
-				if (configured) throw new Error(`Failed to resolve project "${configured}" for config "${input.configName}" in ${input.configPath}. The CLI could not list accessible projects, so it cannot resolve slugs or recover auth-known projects that are missing in OS: ${errorMessage(error)}`);
-				throw new Error(`No project specified. Pass --project or set "defaultProject" on config "${input.configName}" in ${input.configPath}. Failed to list accessible projects: ${errorMessage(error)}`);
-			}
-			if (configured) {
-				const project = projects.find((candidate) => candidate.id === configured || candidate.slug === configured);
-				if (!project) {
-					if (configured.startsWith("prj_")) return configured;
-					throw new Error(`Project "${configured}" was not found among accessible projects for config "${input.configName}" in ${input.configPath}. ${accessibleProjectsMessage(projects)}`);
-				}
-				if (project.deploymentStatus === "missing") return await setupMissingProjectForChat(session, project);
-				return project.id;
-			}
-			const readyProjects = projects.filter((project) => project.deploymentStatus === "ready");
-			const candidates = readyProjects.length > 0 ? readyProjects : projects;
-			if (candidates.length === 1) {
-				const project = candidates[0];
-				if (project.deploymentStatus === "missing") return await setupMissingProjectForChat(session, project);
-				return project.id;
-			}
-			throw new Error(`No project specified. Pass --project or set "defaultProject" on config "${input.configName}" in ${input.configPath}. ${accessibleProjectsMessage(projects)}`);
-		}
-	});
-};
-const sessionNeedsRefresh = (session) => {
-	if (!session.expiresAt) return false;
-	const expiresAt = Date.parse(session.expiresAt);
-	return Number.isFinite(expiresAt) && expiresAt <= Date.now() + OAUTH_REFRESH_SKEW_MS;
-};
-const getAuthWorkerHeaders = async (config) => {
-	const session = config.session;
-	if (!session) throw new Error(`Not logged in to ${config.authBaseUrl}. Run \`iterate login\` first.`);
-	if (session.expiresAt && new Date(session.expiresAt) < /* @__PURE__ */ new Date()) throw new Error(`Session expired for ${config.authBaseUrl}. Run \`iterate login\` again.`);
-	if (session.token) return { authorization: `Bearer ${session.token}` };
-	if (session.cookie) return { cookie: session.cookie };
-	throw new Error(`Stored session for ${config.authBaseUrl} has no token or cookie.`);
-};
-const getAuthWorkerClient = async (config) => {
-	const baseURL = config.authBaseUrl;
-	const headers = await getAuthWorkerHeaders(config);
-	return createORPCClient(new RPCLink({
-		url: `${baseURL}/api/orpc/`,
-		fetch: async (request, init) => {
-			const reqHeaders = new Headers(request instanceof Request ? request.headers : init?.headers);
-			if (headers.cookie) reqHeaders.set("cookie", headers.cookie);
-			if (headers.authorization) reqHeaders.set("authorization", headers.authorization);
-			return fetch(request, {
-				...init,
-				headers: reqHeaders
-			});
-		}
-	}));
-};
-const OAUTH_SCOPE = "openid profile email offline_access project";
-const LOOPBACK_HOST = "localhost";
-const LOOPBACK_CALLBACK_PATH = "/callback";
-const OAUTH_CALLBACK_TIMEOUT_MS = 300 * 1e3;
-const base64Url = (buffer) => buffer.toString("base64url");
-const randomBase64Url = (byteLength = 32) => base64Url(randomBytes(byteLength));
-const oauthResourceForOsBaseUrl = (osBaseUrl) => {
-	const url = new URL(osBaseUrl);
-	if (new Set([
-		"localhost",
-		"127.0.0.1",
-		"[::1]",
-		"::1"
-	]).has(url.hostname)) return `${url.protocol}//${url.hostname}`;
-	url.search = "";
-	url.hash = "";
-	url.pathname = url.pathname.replace(/\/+$/, "") || "/";
-	return url.toString().replace(/\/$/, "");
-};
-const openUrlInBrowser = async (url) => {
-	try {
-		const { execFile } = await import("node:child_process");
-		if (process.platform === "darwin") {
-			execFile("open", [url]);
-			return;
-		}
-		if (process.platform === "win32") {
-			execFile("cmd", [
-				"/c",
-				"start",
-				"",
-				url
-			]);
-			return;
-		}
-		execFile("xdg-open", [url]);
-	} catch {}
-};
-const readErrorBody = async (response) => {
-	const text = await response.text();
-	return text.length > 300 ? `${text.slice(0, 300)}...` : text;
-};
-const registerOAuthClient = async (input) => {
-	const response = await fetch(`${input.authBaseUrl}/api/auth/oauth2/register`, {
-		method: "POST",
-		headers: {
-			"content-type": "application/json",
-			origin: input.authBaseUrl
-		},
-		body: JSON.stringify({
-			client_name: "Iterate CLI",
-			redirect_uris: [input.redirectUri],
-			token_endpoint_auth_method: "none",
-			grant_types: ["authorization_code", "refresh_token"],
-			response_types: ["code"],
-			scope: OAUTH_SCOPE,
-			type: "native",
-			require_pkce: true
-		})
-	});
-	if (!response.ok) throw new Error(`OAuth client registration failed (${response.status}): ${await readErrorBody(response)}`);
-	const client = await response.json();
-	if (!client.client_id) throw new Error("OAuth client registration did not return client_id.");
-	return client.client_id;
-};
-const startOAuthCallbackServer = async () => {
-	let settled = false;
-	let resolveCallback;
-	let rejectCallback;
-	const callbackPromise = new Promise((resolve, reject) => {
-		resolveCallback = resolve;
-		rejectCallback = reject;
-	});
-	const server = createServer((request, response) => {
-		if (settled) {
-			response.writeHead(409, { "content-type": "text/plain; charset=utf-8" });
-			response.end("OAuth callback already received.");
-			return;
-		}
-		const url = new URL(request.url ?? "/", `http://${LOOPBACK_HOST}`);
-		if (url.pathname !== LOOPBACK_CALLBACK_PATH) {
-			response.writeHead(404, { "content-type": "text/plain; charset=utf-8" });
-			response.end("Not found.");
-			return;
-		}
-		const error = url.searchParams.get("error");
-		if (error) {
-			settled = true;
-			response.writeHead(400, { "content-type": "text/html; charset=utf-8" });
-			response.end("<h1>Iterate login failed</h1><p>You can return to the terminal.</p>");
-			rejectCallback?.(/* @__PURE__ */ new Error(`OAuth authorization failed: ${error}${url.searchParams.get("error_description") ? ` (${url.searchParams.get("error_description")})` : ""}`));
-			return;
-		}
-		const code = url.searchParams.get("code");
-		const state = url.searchParams.get("state");
-		if (!code || !state) {
-			settled = true;
-			response.writeHead(400, { "content-type": "text/html; charset=utf-8" });
-			response.end("<h1>Iterate login failed</h1><p>Missing code or state.</p>");
-			rejectCallback?.(/* @__PURE__ */ new Error("OAuth callback was missing code or state."));
-			return;
-		}
-		settled = true;
-		response.writeHead(200, { "content-type": "text/html; charset=utf-8" });
-		response.end("<h1>Iterate login complete</h1><p>You can close this tab.</p>");
-		const address = server.address();
-		const port = typeof address === "object" && address ? address.port : 0;
-		resolveCallback?.({
-			code,
-			state,
-			redirectUri: `http://${LOOPBACK_HOST}:${port}${LOOPBACK_CALLBACK_PATH}`
-		});
-	});
-	await new Promise((resolve, reject) => {
-		server.once("error", reject);
-		server.listen(0, LOOPBACK_HOST, () => resolve());
-	});
-	const timeout = setTimeout(() => {
-		if (!settled) {
-			settled = true;
-			rejectCallback?.(/* @__PURE__ */ new Error("Timed out waiting for OAuth callback."));
-		}
-	}, OAUTH_CALLBACK_TIMEOUT_MS);
-	timeout.unref();
-	const address = server.address();
-	return {
-		redirectUri: `http://${LOOPBACK_HOST}:${typeof address === "object" && address ? address.port : 0}${LOOPBACK_CALLBACK_PATH}`,
-		wait: () => callbackPromise.finally(() => clearTimeout(timeout)),
-		close: () => new Promise((resolve) => server.close(() => resolve()))
-	};
-};
-const exchangeOAuthCode = async (input) => {
-	const body = new URLSearchParams({
-		grant_type: "authorization_code",
-		client_id: input.clientId,
-		code: input.code,
-		redirect_uri: input.redirectUri,
-		code_verifier: input.codeVerifier,
-		resource: input.resource
-	});
-	const response = await fetch(`${input.authBaseUrl}/api/auth/oauth2/token`, {
-		method: "POST",
-		headers: {
-			"content-type": "application/x-www-form-urlencoded",
-			origin: input.authBaseUrl
-		},
-		body
-	});
-	if (!response.ok) throw new Error(`OAuth token exchange failed (${response.status}): ${await readErrorBody(response)}`);
-	const token = await response.json();
-	if (!token.access_token) throw new Error("OAuth token exchange did not return access_token.");
-	return token;
-};
-const oauthTokenToSession = (token, existing) => {
-	const expiresAtMs = token.expires_at ? token.expires_at * 1e3 : token.expires_in ? Date.now() + token.expires_in * 1e3 : void 0;
-	return {
-		token: token.access_token,
-		refreshToken: token.refresh_token ?? existing?.refreshToken,
-		clientId: existing?.clientId,
-		scope: token.scope,
-		tokenType: token.token_type,
-		expiresAt: expiresAtMs ? new Date(expiresAtMs).toISOString() : void 0
-	};
-};
-const refreshOAuthSession = async (input) => {
-	if (!input.session.refreshToken || !input.session.clientId) throw new Error(`Session expired for ${input.config.osBaseUrl}. Run \`iterate login\` again.`);
-	const authBaseUrl = input.config.authBaseUrl;
-	const body = new URLSearchParams({
-		grant_type: "refresh_token",
-		client_id: input.session.clientId,
-		refresh_token: input.session.refreshToken,
-		resource: oauthResourceForOsBaseUrl(input.config.osBaseUrl)
-	});
-	if (input.session.scope) body.set("scope", input.session.scope);
-	const response = await fetch(`${authBaseUrl}/api/auth/oauth2/token`, {
-		method: "POST",
-		headers: {
-			"content-type": "application/x-www-form-urlencoded",
-			origin: authBaseUrl
-		},
-		body
-	});
-	if (!response.ok) throw new Error(`OAuth refresh failed (${response.status}). Run \`iterate login\` again.`);
-	const refreshedSession = oauthTokenToSession(await response.json(), input.session);
-	refreshedSession.clientId = input.session.clientId;
-	input.config.session = refreshedSession;
-	if (input.configName) updateConfigSession(input.configName, refreshedSession);
-	return refreshedSession;
-};
-const oauthLogin = async (config) => {
-	const authBaseUrl = config.authBaseUrl;
-	const resource = oauthResourceForOsBaseUrl(config.osBaseUrl);
-	const codeVerifier = randomBase64Url(48);
-	const state = randomBase64Url(32);
-	const callback = await startOAuthCallbackServer();
-	const clientId = await registerOAuthClient({
-		authBaseUrl,
-		redirectUri: callback.redirectUri
-	});
-	const authorizeUrl = new URL(`${authBaseUrl}/api/auth/oauth2/authorize`);
-	authorizeUrl.searchParams.set("response_type", "code");
-	authorizeUrl.searchParams.set("client_id", clientId);
-	authorizeUrl.searchParams.set("redirect_uri", callback.redirectUri);
-	authorizeUrl.searchParams.set("scope", OAUTH_SCOPE);
-	authorizeUrl.searchParams.set("resource", resource);
-	authorizeUrl.searchParams.set("state", state);
-	authorizeUrl.searchParams.set("code_challenge", base64Url(createHash("sha256").update(codeVerifier).digest()));
-	authorizeUrl.searchParams.set("code_challenge_method", "S256");
-	console.error(`\nOpening browser to authenticate with Iterate:\n`);
-	console.error(`  ${authorizeUrl.href}\n`);
-	if (!isAgent && process.env.ITERATE_SKIP_BROWSER_OPEN !== "1") await openUrlInBrowser(authorizeUrl.href);
-	let callbackResult;
-	try {
-		callbackResult = await callback.wait();
-	} finally {
-		await callback.close().catch(() => {});
-	}
-	if (callbackResult.state !== state) throw new Error("OAuth callback state did not match. Please try again.");
-	const session = oauthTokenToSession(await exchangeOAuthCode({
-		authBaseUrl,
-		clientId,
-		code: callbackResult.code,
-		codeVerifier,
-		redirectUri: callbackResult.redirectUri,
-		resource
-	}), {
-		clientId,
-		refreshToken: void 0
-	});
-	session.clientId = clientId;
-	return session;
-};
-const loginToResolvedConfig = async (resolved) => {
-	const { config } = resolved;
-	console.error(`Logging in to ${config.authBaseUrl}...`);
-	const oauthResult = await oauthLogin(config);
-	updateConfigSession(resolved.name, oauthResult);
-	config.session = oauthResult;
-	await verifyOsSession({
-		authHeaders: await getOsAuthHeaders(config, resolved.name),
-		baseUrl: config.osBaseUrl
-	}).catch((error) => {
-		throw new Error(`Failed to verify OS session: ${errorMessage(error)}`);
-	});
-	return oauthResult;
-};
-const shouldAutoLoginForChat = (error) => error instanceof StoredOsSessionError && (error.reason === "missing" || error.reason === "expired");
-const ensureBearerAuthHeadersForChat = async (input) => {
-	let authHeaders = await input.getAuthHeaders();
-	if (authHeaders.authorization) return authHeaders;
-	console.error(`Stored session for ${input.osBaseUrl} cannot be used for chat. Starting browser login...`);
-	await input.login();
-	authHeaders = await input.getAuthHeaders();
-	if (authHeaders.authorization) return authHeaders;
-	throw new Error(`Stored session for ${input.osBaseUrl} has no bearer token. Run \`iterate login\` again.`);
-};
-const loadRemoteProcedures = async (params) => {
-	const url = `${params.baseUrl}/api/trpc-cli-procedures`;
-	const response = await fetch(url);
-	if (!response.ok) {
-		let text = await response.text();
-		if (text.includes("<title>")) text = "HTML with title: " + text.split("<title>")[1].split("</title>")[0];
-		else if ([
-			"<html>",
-			"<body>",
-			"<head>",
-			"!DOCTYPE html"
-		].some((s) => text.includes(s))) text = "<html>...</html>";
-		else {
-			text = text.split("\n")[0];
-			if (text.length > 50) text = text.slice(0, 50) + "...";
-		}
-		throw new Error(`${url} got ${response.status}: ${text}`);
-	}
-	let router;
-	try {
-		router = await response.json();
-	} catch (e) {
-		const message = e instanceof Error ? e.message : String(e);
-		throw new Error(`${url} returned invalid router: ${message}`);
-	}
-	if (!Array.isArray(router?.procedures)) throw new Error(`${url} returned invalid router: ${JSON.stringify(router)}`);
-	return router;
-};
-/** Wraps an oRPC client so `wrapper[dotPath].query(input)` and `.mutate(input)` work (for trpc-cli proxify compat) */
-const orpcToTrpcStyleClient = (orpcClient) => {
-	return new Proxy({}, { get: (_target, prop) => {
-		const parts = prop.split(".");
-		let current = orpcClient;
-		for (const part of parts) current = current[part];
-		return {
-			query: (input) => current(input),
-			mutate: (input) => current(input)
-		};
-	} });
-};
-const getOsProcedures = async (params) => {
-	return proxifyOrpc((await loadRemoteProcedures(params)).procedures, () => {
-		return orpcToTrpcStyleClient(createORPCClient(new RPCLink({
-			url: `${params.baseUrl}/api/orpc/`,
-			fetch: async (request, init) => {
-				const authHeaders = await getOsAuthHeaders(params.config, params.configName);
-				const headers = new Headers(request instanceof Request ? request.headers : init?.headers);
-				if (authHeaders.cookie) headers.set("cookie", authHeaders.cookie);
-				if (authHeaders.authorization) headers.set("authorization", authHeaders.authorization);
-				return fetch(request, {
-					...init,
-					headers
-				});
-			}
-		})));
-	});
-};
-const launcherProcedures = {
-	ping: os.input(z.object({})).handler(async () => {
-		const resolved = resolveConfig(process.cwd(), { throw: true });
-		const { config } = resolved;
-		return {
-			message: "OS session valid",
-			principal: (await verifyOsSession({
-				authHeaders: await getOsAuthHeaders(config, resolved.name),
-				baseUrl: config.osBaseUrl
-			}).catch((error) => {
-				throw new Error(`Failed to verify OS session: ${errorMessage(error)}`);
-			})).principal
-		};
-	}),
-	login: os.input(z.object({})).meta({ description: "Authenticate with the OS server via browser-based OAuth" }).handler(async () => {
-		const oauthResult = await loginToResolvedConfig(resolveConfig(process.cwd(), { throw: true }));
-		return {
-			message: "Logged in successfully",
-			expiresAt: oauthResult.expiresAt,
-			scope: oauthResult.scope
-		};
-	}),
-	logout: os.input(z.object({})).meta({ description: "Remove stored session for the current config" }).handler(async () => {
-		const resolved = resolveConfig(process.cwd(), { throw: true });
-		removeConfigSession(resolved.name);
-		return { message: `Logged out from ${resolved.name} (${resolved.config.osBaseUrl})` };
-	}),
-	chat: os.input(z.object({
-		project: z.string().trim().min(1).optional().describe("OS project id (prj_…) or slug. Defaults to the active config's defaultProject."),
-		agentPath: z.string().trim().min(1).startsWith("/agents/").optional().default(DEFAULT_CHAT_AGENT_PATH).describe("Agent stream path to chat with (default: /agents/onboarding)")
-	})).meta({ description: "Open the Iterate agent chat terminal UI" }).handler(async ({ input }) => {
-		const resolved = resolveConfig(process.cwd(), { throw: true });
-		const envAuth = osAuthFromEnvironment();
-		let storedAuthHeaders;
-		let didAutoLogin = false;
-		const loginForChat = async () => {
-			didAutoLogin = true;
-			storedAuthHeaders = void 0;
-			await loginToResolvedConfig(resolved);
-		};
-		const getStoredAuthHeaders = async () => {
-			if (storedAuthHeaders) return storedAuthHeaders;
-			try {
-				storedAuthHeaders = await getOsAuthHeaders(resolved.config, resolved.name);
-			} catch (error) {
-				if (didAutoLogin || !shouldAutoLoginForChat(error)) throw error;
-				console.error(`No active session for ${resolved.config.osBaseUrl}. Starting browser login...`);
-				await loginForChat();
-				storedAuthHeaders = await getOsAuthHeaders(resolved.config, resolved.name);
-			}
-			return storedAuthHeaders;
-		};
-		const getStoredBearerAuthHeaders = () => ensureBearerAuthHeadersForChat({
-			getAuthHeaders: getStoredAuthHeaders,
-			login: loginForChat,
-			osBaseUrl: resolved.config.osBaseUrl
-		});
-		const project = await resolveChatProject({
-			auth: envAuth ?? osAuthFromHeaders(await getStoredBearerAuthHeaders()),
-			baseUrl: resolved.config.osBaseUrl,
-			configName: resolved.name,
-			configPath: CONFIG_PATH,
-			configuredDefaultProject: resolved.config.defaultProject,
-			explicitProject: input.project
-		});
-		const command = buildChatCommand({
-			osBaseUrl: resolved.config.osBaseUrl,
-			projectId: project,
-			agentPath: input.agentPath,
-			entrypointPath: resolveStreamTuiEntrypointPath()
-		});
-		const env = { ITERATE_CONFIG_NAME: resolved.name };
-		if (!envAuth) {
-			const token = (await getStoredBearerAuthHeaders()).authorization?.replace(/^Bearer /, "");
-			if (!token) throw new Error(`Stored session for ${resolved.config.osBaseUrl} has no bearer token. Run \`iterate login\` again.`);
-			env.ITERATE_BEARER_TOKEN = token;
-		}
-		await runInheritedProcess({
-			...command,
-			env
-		});
-	}),
-	orgs: { list: os.input(z.object({})).meta({ description: "List organizations from the auth worker" }).handler(async () => {
-		return await (await getAuthWorkerClient(resolveConfig(process.cwd(), { throw: true }).config)).user.myOrganizations();
-	}) },
-	config: {
-		get: os.input(z.object({})).meta({
-			default: true,
-			description: "Show config, resolved target, and session status"
-		}).handler(async () => {
-			const configFile = readConfigFile();
-			const resolved = resolveConfig(process.cwd());
-			const configs = configFile.configs || {};
-			const sessions = Object.fromEntries(Object.entries(configs).map(([name, cfg]) => {
-				if (!cfg.session) return [name, null];
-				return [name, {
-					hasToken: Boolean(cfg.session?.token),
-					hasCookie: Boolean(cfg.session?.cookie),
-					expiresAt: cfg.session?.expiresAt,
-					expired: cfg.session?.expiresAt ? new Date(cfg.session.expiresAt) < /* @__PURE__ */ new Date() : false
-				}];
-			}));
-			if (resolved instanceof Error) return {
-				configPath: CONFIG_PATH,
-				error: resolved.message
-			};
-			return {
-				configPath: CONFIG_PATH,
-				config: resolved.name,
-				...resolved.config,
-				session: sessions[resolved.name]
-			};
-		}),
-		list: os.input(z.object({})).meta({ description: "List all named configs" }).handler(async () => {
-			const configFile = readConfigFile();
-			const currentName = resolveConfigName(process.cwd());
-			const configs = {
-				["prd"]: {},
-				...configFile.configs || {}
-			};
-			return {
-				configs: Object.fromEntries(Object.entries(configs).map(([name, cfg]) => [name, {
-					osBaseUrl: Config.parse(cfg).osBaseUrl,
-					active: name === currentName ? true : void 0
-				}])),
-				default: configFile.default
-			};
-		}),
-		set: os.input(z.object({
-			name: z.string().describe("Config name (e.g. dev, prd, preview)"),
-			osBaseUrl: z.string().optional().describe("Base URL for OS API (e.g. https://os.iterate.com)"),
-			authBaseUrl: z.string().optional().describe("Base URL for auth API (e.g. https://auth.iterate.com)"),
-			setDefault: z.boolean().optional().describe("Set as the default config"),
-			setWorkspace: z.boolean().optional().describe("Map current directory to this config")
-		})).meta({
-			prompt: true,
-			description: "Create or update a named config"
-		}).handler(async ({ input }) => {
-			const configFile = readConfigFile();
-			configFile.configs ||= {};
-			configFile.configs[input.name] ||= {};
-			if (input.osBaseUrl) configFile.configs[input.name].osBaseUrl = input.osBaseUrl;
-			if (input.authBaseUrl) configFile.configs[input.name].authBaseUrl = input.authBaseUrl;
-			if (input.setDefault) configFile.default = input.name;
-			if (input.setWorkspace) {
-				configFile.workspaces ||= {};
-				configFile.workspaces[process.cwd()] = input.name;
-			}
-			writeConfigFile(configFile);
-			return {
-				configPath: CONFIG_PATH,
-				config: configFile.configs[input.name]
-			};
-		}),
-		use: os.input(z.object({ name: z.string().meta({ positional: true }).describe("Config name to set as default") })).meta({ description: "Set the default config" }).handler(async ({ input }) => {
-			const configFile = readConfigFile();
-			if (input.name !== "prd" && !configFile.configs?.[input.name]) throw new Error(`Config "${input.name}" not found. Available: ${Object.keys(configFile.configs || {}).join(", ") || "(none)"}`);
-			configFile.default = input.name;
-			writeConfigFile(configFile);
-			return { default: input.name };
-		}),
-		current: os.input(z.object({})).meta({ description: "Show which config is active and why" }).handler(async () => {
-			const resolved = resolveConfig(process.cwd(), { throw: true });
-			return {
-				name: resolved.name,
-				config: resolved.config,
-				resolvedAuthBaseUrl: resolved.config.authBaseUrl,
-				resolvedVia: configFlagOverride ? "--config flag" : "workspace mapping or default"
-			};
-		})
-	}
-};
-const getCli = async () => {
-	configFlagOverride = consumeCliStringFlag("--config");
-	applyDefaultBareInvocation();
-	const requestedRootCommand = firstNonFlagArgument(process.argv.slice(2));
-	const shouldLoadRemoteRouters = !requestedRootCommand || !Object.prototype.hasOwnProperty.call(launcherProcedures, requestedRootCommand);
-	const errorProcedure = (problem) => (e) => {
-		const message = `${problem}: ${e.message}`;
-		return os.meta({ description: message }).handler(() => {
-			throw new Error(problem, { cause: e });
-		});
-	};
-	const routers = [launcherProcedures];
-	if (shouldLoadRemoteRouters) {
-		const resolved = resolveConfig(process.cwd());
-		if (resolved instanceof Error) {
-			const procedure = errorProcedure(`Invalid config`)(resolved);
-			routers.push({
-				os: procedure,
-				daemon: procedure
-			});
-		} else {
-			const { config } = resolved;
-			const [osProcedures] = await Promise.allSettled([getOsProcedures({
-				baseUrl: config.osBaseUrl,
-				config,
-				configName: resolved.name
-			})]);
-			if (osProcedures.status === "fulfilled") routers.push({ os: osProcedures.value });
-			else {
-				const message = `Couldn't connect to os at ${config.osBaseUrl}`;
-				routers.push({ os: errorProcedure(message)(osProcedures.reason) });
-			}
-		}
-	}
-	return {
-		cli: createCli({
-			router: Object.assign({}, ...routers),
-			name: "iterate",
-			version: "0.0.1",
-			description: "Iterate CLI"
-		}),
-		prompts: isAgent ? void 0 : prompts
-	};
-};
-const runCli = async () => {
-	const { cli, prompts: cliPrompts } = await getCli();
-	await cli.run({
-		prompts: cliPrompts,
-		logger: yamlTableConsoleLogger
-	});
-};
-const proxifyOrpc = (router, getClient) => {
-	const parsed = Array.isArray(router) ? router : parseRouter({ router });
-	const outputRouterRecord = {};
-	for (const [procedurePath, info] of parsed) {
-		const parts = procedurePath.split(".");
-		let currentRouter = outputRouterRecord;
-		for (const part of parts.slice(0, -1)) currentRouter = currentRouter[part] ||= {};
-		const schemas = info.inputSchemas.success ? info.inputSchemas.value : [];
-		const standardSchema = {
-			"~standard": {
-				vendor: "trpc-cli",
-				version: 1,
-				validate: (value) => ({ value })
-			},
-			toJsonSchema: () => {
-				if (schemas.length === 0) return {};
-				if (schemas.length === 1) return schemas[0];
-				return { allOf: schemas };
-			}
-		};
-		currentRouter[parts[parts.length - 1]] = os.input(standardSchema).handler(async ({ input }) => {
-			return (await getClient(procedurePath))[procedurePath].query(input);
-		});
-	}
-	return outputRouterRecord;
-};
-//#endregion
-export { runCli };
-
-//# sourceMappingURL=cli-DMS4kJph.mjs.map