krexel 0.1.0

package/dist/init.d.ts

@@ -0,0 +1,103 @@
+/**
+ * init.ts — `krexel init`
+ *
+ * One-command installer for the Krexel MCP server. Orchestrates:
+ *   1. Prerequisite check (Node version, OS detection)
+ *   2. MCP server binary resolution (npm global OR monorepo dev path)
+ *   3. Master-key mint + persist to ~/.zshrc (and ~/.bashrc if present)
+ *   4. Patch every AI client's config (skip silently when absent)
+ *   5. Run the OAuth login flow via `runLogin()`
+ *   6. Print an animated "you're set up" checklist
+ *
+ * Hard rule: a single bad client config must NOT abort the run. Each
+ * patcher is wrapped in try/catch; failures are surfaced via `warn()`
+ * and the next one is attempted.
+ */
+import { type ClientSpec } from "./paths.js";
+import { type MasterKeyResult, type PatchResult } from "./config-patchers.js";
+/** Options the orchestrator respects (matches the CLI flags). */
+export interface InitOptions {
+    /** Don't write to disk — print the diffs and exit. */
+    dryRun?: boolean;
+    /** Skip the OAuth login step (for CI / scripted installs). */
+    skipLogin?: boolean;
+    /** Reuse a known master key instead of minting a fresh one. */
+    masterKey?: string;
+    /** Override the resolved MCP server binary command. */
+    binaryCommand?: string;
+    /** Override the resolved MCP server binary args. */
+    binaryArgs?: string[];
+    /** Override the API URL injected into the entry env. */
+    apiUrl?: string;
+    /** For tests: skip the actual `runLogin` (still mints the master key). */
+    loginRunner?: () => Promise<void>;
+}
+/** Where the MCP server lives on disk. */
+export interface BinaryResolution {
+    command: string;
+    args: string[];
+    /** True if we found the dev binary in the monorepo. */
+    fromDev: boolean;
+}
+/**
+ * Detect the Node version on PATH and assert >= 20. Throws with a
+ * clean message if too old.
+ */
+export declare function assertNodeVersion(): {
+    major: number;
+    raw: string;
+};
+/**
+ * Find the MCP server binary. Resolution order:
+ *   1. Caller override (init option).
+ *   2. Dev mode: if `~/krexel/mcp-server/dist/index.js` exists AND we're
+ *      inside the monorepo, return that path with a node shebang.
+ *   3. Production: assume `krexel-mcp` is on $PATH (npm install -g).
+ *
+ * If we can't satisfy either, throw with a clear install hint.
+ */
+export declare function resolveMcpBinary(opts?: InitOptions): Promise<BinaryResolution>;
+/**
+ * Mint a fresh 64-hex-char master key, persist it to the user's shell rc,
+ * and return the persisted value + which files were touched.
+ *
+ * Set on both ~/.zshrc AND ~/.bashrc (when one or both exist) so users
+ * who switch shells between login sessions don't lose the key.
+ */
+export declare function initMasterKey(opts?: InitOptions): Promise<MasterKeyResult>;
+/**
+ * Patch every client config on disk. Returns one PatchResult per client
+ * in the same order as `resolveAll()`. Failures become `{ ok: false }`
+ * entries — the caller decides how to render them.
+ */
+export interface PatchRow {
+    spec: ClientSpec;
+    ok: boolean;
+    result?: PatchResult;
+    error?: string;
+}
+export declare function patchAllClients(binary: BinaryResolution, env: Record<string, string>, opts?: InitOptions): Promise<PatchRow[]>;
+/**
+ * Render the "you're set up" checklist. Public so tests can assert shape.
+ */
+export type ChecklistItem = {
+    kind: "ok";
+    text: string;
+} | {
+    kind: "warn";
+    text: string;
+};
+export declare function renderChecklist(args: {
+    version: string;
+    masterKey: MasterKeyResult;
+    rows: PatchRow[];
+    oauthDone: boolean;
+    apiUrl: string;
+}): ChecklistItem[];
+/**
+ * The main entry point wired into the CLI.
+ *
+ * Each phase's failure is non-fatal when possible. Truly fatal errors
+ * (no MCP server, no Node 20+) raise via `error()` and exit.
+ */
+export declare function runInit(opts?: InitOptions): Promise<void>;

package/dist/init.js

@@ -0,0 +1,312 @@
+/**
+ * init.ts — `krexel init`
+ *
+ * One-command installer for the Krexel MCP server. Orchestrates:
+ *   1. Prerequisite check (Node version, OS detection)
+ *   2. MCP server binary resolution (npm global OR monorepo dev path)
+ *   3. Master-key mint + persist to ~/.zshrc (and ~/.bashrc if present)
+ *   4. Patch every AI client's config (skip silently when absent)
+ *   5. Run the OAuth login flow via `runLogin()`
+ *   6. Print an animated "you're set up" checklist
+ *
+ * Hard rule: a single bad client config must NOT abort the run. Each
+ * patcher is wrapped in try/catch; failures are surfaced via `warn()`
+ * and the next one is attempted.
+ */
+import { randomBytes } from "node:crypto";
+import { existsSync, readFileSync } from "node:fs";
+import * as os from "node:os";
+import * as path from "node:path";
+import { runLogin } from "./login.js";
+import { dim, error, isJsonMode, success, warn } from "./output.js";
+import { resolveAll, effectiveHome, effectivePlatform, } from "./paths.js";
+import { patchJsonConfig, patchTomlConfig, persistMasterKeyToRc, maskSecret, } from "./config-patchers.js";
+/**
+ * Detect the Node version on PATH and assert >= 20. Throws with a
+ * clean message if too old.
+ */
+export function assertNodeVersion() {
+    // process.version is "vX.Y.Z" — strip the leading v.
+    const raw = process.version.replace(/^v/, "");
+    const majorStr = raw.split(".")[0] ?? "0";
+    const major = Number.parseInt(majorStr, 10);
+    if (!Number.isFinite(major) || major < 20) {
+        error(`Krexel init requires Node 20 or newer. You have Node ${raw}. ` +
+            `Install a newer Node from https://nodejs.org/ or via nvm, then re-run \`krexel init\`.`);
+    }
+    return { major, raw };
+}
+/**
+ * Find the MCP server binary. Resolution order:
+ *   1. Caller override (init option).
+ *   2. Dev mode: if `~/krexel/mcp-server/dist/index.js` exists AND we're
+ *      inside the monorepo, return that path with a node shebang.
+ *   3. Production: assume `krexel-mcp` is on $PATH (npm install -g).
+ *
+ * If we can't satisfy either, throw with a clear install hint.
+ */
+export async function resolveMcpBinary(opts = {}) {
+    if (opts.binaryCommand) {
+        return {
+            command: opts.binaryCommand,
+            args: opts.binaryArgs ?? [],
+            fromDev: false,
+        };
+    }
+    // Dev path: monorepo checkout. Check BOTH the (possibly-overridden) home
+    // and the real os.homedir() — sandboxed smoke tests override KREXEL_HOME
+    // but still want to find the actual built binary.
+    const effHome = effectiveHome();
+    const realHome = os.homedir();
+    const devCandidates = [
+        path.join(effHome, "krexel", "mcp-server", "dist", "index.js"),
+        path.join(realHome, "krexel", "mcp-server", "dist", "index.js"),
+        // Allow override via env for unusual layouts.
+        process.env.KREXEL_MCP_DEV_PATH,
+    ].filter((p) => typeof p === "string");
+    for (const candidate of devCandidates) {
+        if (existsSync(candidate)) {
+            return { command: process.execPath, args: [candidate], fromDev: true };
+        }
+    }
+    // Production: look for `krexel-mcp` on PATH.
+    if (binaryOnPath("krexel-mcp")) {
+        return { command: "krexel-mcp", args: [], fromDev: false };
+    }
+    error("Could not find the Krexel MCP server binary. Either:\n" +
+        "  • Run `npm install -g krexel-mcp` to fetch it from npm, OR\n" +
+        "  • Build the dev version: `cd ~/krexel/mcp-server && npm run build`");
+}
+/** Best-effort PATH check. */
+function binaryOnPath(name) {
+    const pathEnv = process.env.PATH ?? "";
+    const sep = process.platform === "win32" ? ";" : ":";
+    for (const dir of pathEnv.split(sep)) {
+        if (!dir)
+            continue;
+        const candidate = path.join(dir, name + (process.platform === "win32" ? ".cmd" : ""));
+        if (existsSync(candidate))
+            return true;
+    }
+    return false;
+}
+/**
+ * Mint a fresh 64-hex-char master key, persist it to the user's shell rc,
+ * and return the persisted value + which files were touched.
+ *
+ * Set on both ~/.zshrc AND ~/.bashrc (when one or both exist) so users
+ * who switch shells between login sessions don't lose the key.
+ */
+export async function initMasterKey(opts = {}) {
+    const platform = effectivePlatform();
+    const home = effectiveHome();
+    const wantedValue = opts.masterKey ?? randomBytes(32).toString("hex");
+    // Decide which files to touch. zshrc is mandatory if it exists or we're
+    // on darwin. bashrc is best-effort on linux.
+    const files = [];
+    let minted = false;
+    // The resolved key — may be the freshly minted value OR a pre-existing
+    // one pulled from one of the rc files. We surface whichever was actually
+    // on disk last.
+    let resolved = wantedValue;
+    const zshrc = path.join(home, ".zshrc");
+    const bashrc = path.join(home, ".bashrc");
+    if (existsSync(zshrc) || platform === "darwin") {
+        const res = await persistMasterKeyToRc(zshrc, wantedValue);
+        files.push(zshrc);
+        if (res.written)
+            minted = true;
+        resolved = res.value;
+    }
+    if (existsSync(bashrc) && platform !== "darwin") {
+        const res = await persistMasterKeyToRc(bashrc, wantedValue);
+        files.push(bashrc);
+        if (res.written)
+            minted = true;
+        // If bashrc has a different key than zshrc, prefer the FIRST file's
+        // value — we trust the order zshrc → bashrc.
+        if (resolved === wantedValue) {
+            resolved = res.value;
+        }
+    }
+    return { value: resolved, files, minted };
+}
+export async function patchAllClients(binary, env, opts = {}) {
+    const all = resolveAll();
+    const home = effectiveHome();
+    const rows = [];
+    for (const spec of all) {
+        if (!spec.configPath)
+            continue;
+        const present = existsSync(spec.configPath);
+        if (!present) {
+            // Skip silently — spec.label gets rendered with "(absent)" note.
+            rows.push({ spec: { ...spec, present: false }, ok: true });
+            continue;
+        }
+        rows.push({ spec: { ...spec, present: true }, ok: true });
+    }
+    // Now actually patch. We loop again so "skipped because absent" rows
+    // sit alongside "patched" rows in stable order.
+    for (let i = 0; i < rows.length; i++) {
+        const row = rows[i];
+        if (!row || !row.spec.present || !row.spec.configPath)
+            continue;
+        const input = {
+            filePath: row.spec.configPath,
+            binaryCommand: binary.command,
+            binaryArgs: binary.args,
+            env,
+            dryRun: Boolean(opts.dryRun),
+        };
+        try {
+            const result = row.spec.id === "codex"
+                ? await patchTomlConfig(input)
+                : await patchJsonConfig(input, row.spec.id);
+            rows[i] = { ...row, ok: true, result };
+        }
+        catch (err) {
+            rows[i] = {
+                ...row,
+                ok: false,
+                error: err instanceof Error ? err.message : String(err),
+            };
+        }
+    }
+    return rows;
+}
+export function renderChecklist(args) {
+    const items = [];
+    items.push({ kind: "ok", text: `Krexel v${args.version} installed` });
+    if (args.masterKey.files.length > 0) {
+        const targets = args.masterKey.files
+            .map((f) => path.basename(f))
+            .join(", ");
+        items.push({
+            kind: "ok",
+            text: `Master key (${maskSecret(args.masterKey.value)}) saved to ${targets}`,
+        });
+    }
+    else {
+        items.push({
+            kind: "ok",
+            text: `Master key (${maskSecret(args.masterKey.value)}) ready in env`,
+        });
+    }
+    for (const row of args.rows) {
+        if (!row.spec.present)
+            continue; // skip silently
+        if (!row.ok) {
+            items.push({ kind: "warn", text: `${row.spec.label}: ${row.error ?? "unknown error"}` });
+            continue;
+        }
+        if (!row.result) {
+            items.push({ kind: "warn", text: `${row.spec.label}: no result` });
+            continue;
+        }
+        if (!row.result.changed) {
+            items.push({ kind: "ok", text: `${row.spec.label}: already configured` });
+        }
+        else {
+            items.push({ kind: "ok", text: `Patched: ${row.spec.label}` });
+        }
+    }
+    if (args.oauthDone) {
+        items.push({ kind: "ok", text: "Cloudflare OAuth complete" });
+    }
+    return items;
+}
+/**
+ * The main entry point wired into the CLI.
+ *
+ * Each phase's failure is non-fatal when possible. Truly fatal errors
+ * (no MCP server, no Node 20+) raise via `error()` and exit.
+ */
+export async function runInit(opts = {}) {
+    assertNodeVersion();
+    const platform = effectivePlatform();
+    const home = effectiveHome();
+    const version = readVersion();
+    const apiUrl = opts.apiUrl ?? process.env.KREXEL_API_URL ?? "http://localhost:8787";
+    if (!isJsonMode()) {
+        dim(`OS: ${platform}`);
+        dim(`Home: ${home}`);
+    }
+    // 1. Resolve the MCP binary.
+    const binary = await resolveMcpBinary(opts);
+    // 2. Mint / load the master key.
+    const master = await initMasterKey(opts);
+    const env = {
+        KREXEL_API_URL: apiUrl,
+        KREXEL_MASTER_KEY: master.value,
+    };
+    if (!isJsonMode()) {
+        dim(`Binary: ${binary.command} ${binary.args.join(" ")}`);
+        dim(`Master key: ${maskSecret(master.value)}${master.minted ? " (newly minted)" : " (reused)"}`);
+    }
+    // 3. Patch every client config.
+    const rows = await patchAllClients(binary, env, opts);
+    // 4. Run OAuth unless caller said skip / dry-run.
+    let oauthDone = false;
+    const shouldLogin = !opts.skipLogin && !opts.dryRun;
+    if (shouldLogin) {
+        try {
+            const runner = opts.loginRunner ?? (() => runLogin({ provider: "cloudflare" }));
+            await runner();
+            oauthDone = true;
+        }
+        catch (err) {
+            // Non-fatal — we still print a successful-looking checklist so the
+            // user's MCP server is wired; they can run `krexel login` later.
+            warn(`OAuth did not complete: ${err instanceof Error ? err.message : String(err)}. ` +
+                `Run \`krexel login\` to retry.`);
+        }
+    }
+    else if (opts.dryRun) {
+        if (!isJsonMode())
+            dim("Dry run — skipping OAuth.");
+    }
+    else {
+        if (!isJsonMode())
+            dim("Skipping OAuth (--skip-login).");
+    }
+    // 5. Final checklist.
+    const items = renderChecklist({
+        version,
+        masterKey: master,
+        rows,
+        oauthDone,
+        apiUrl,
+    });
+    for (const item of items) {
+        if (item.kind === "ok")
+            success(item.text);
+        else
+            warn(item.text);
+    }
+    // 6. Handoff — what to do next.
+    if (!isJsonMode()) {
+        dim("");
+        dim("Restart Claude Desktop, then ask:");
+        dim("  \"ship my site to example.com\"");
+        dim("");
+        dim(`Dashboard:    https://app.krexel.com`);
+        dim(`Advanced:     npx krexel help`);
+    }
+}
+/**
+ * Read the CLI version straight from cli/package.json so we never drift
+ * from `npm view krexel`.
+ */
+function readVersion() {
+    try {
+        const here = path.dirname(new URL(import.meta.url).pathname);
+        const pkgPath = path.resolve(here, "..", "package.json");
+        const json = JSON.parse(readFileSync(pkgPath, "utf8"));
+        return json.version ?? "0.0.0";
+    }
+    catch {
+        return "0.0.0";
+    }
+}
+//# sourceMappingURL=init.js.map

package/dist/init.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"init.js","sourceRoot":"","sources":["../src/init.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAGH,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AACtC,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AACpE,OAAO,EACL,UAAU,EAEV,aAAa,EACb,iBAAiB,GAIlB,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,eAAe,EACf,eAAe,EACf,oBAAoB,EACpB,UAAU,GAGX,MAAM,sBAAsB,CAAC;AA4B9B;;;GAGG;AACH,MAAM,UAAU,iBAAiB;IAC/B,qDAAqD;IACrD,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAC9C,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC;IAC1C,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IAC5C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,EAAE,EAAE,CAAC;QAC1C,KAAK,CACH,wDAAwD,GAAG,IAAI;YAC7D,wFAAwF,CAC3F,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;AACxB,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,OAAoB,EAAE;IAEtB,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;QACvB,OAAO;YACL,OAAO,EAAE,IAAI,CAAC,aAAa;YAC3B,IAAI,EAAE,IAAI,CAAC,UAAU,IAAI,EAAE;YAC3B,OAAO,EAAE,KAAK;SACf,CAAC;IACJ,CAAC;IAED,yEAAyE;IACzE,yEAAyE;IACzE,kDAAkD;IAClD,MAAM,OAAO,GAAG,aAAa,EAAE,CAAC;IAChC,MAAM,QAAQ,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;IAC9B,MAAM,aAAa,GAAG;QACpB,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,EAAE,UAAU,CAAC;QAC9D,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,EAAE,UAAU,CAAC;QAC/D,8CAA8C;QAC9C,OAAO,CAAC,GAAG,CAAC,mBAAmB;KAChC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC;IAEpD,KAAK,MAAM,SAAS,IAAI,aAAa,EAAE,CAAC;QACtC,IAAI,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAC1B,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QACzE,CAAC;IACH,CAAC;IAED,6CAA6C;IAC7C,IAAI,YAAY,CAAC,YAAY,CAAC,EAAE,CAAC;QAC/B,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC7D,CAAC;IAED,KAAK,CACH,wDAAwD;QACtD,gEAAgE;QAChE,sEAAsE,CACzE,CAAC;AACJ,CAAC;AAED,8BAA8B;AAC9B,SAAS,YAAY,CAAC,IAAY;IAChC,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;IACvC,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;IACrD,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACrC,IAAI,CAAC,GAAG;YAAE,SAAS;QACnB,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACtF,IAAI,UAAU,CAAC,SAAS,CAAC;YAAE,OAAO,IAAI,CAAC;IACzC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,OAAoB,EAAE;IAEtB,MAAM,QAAQ,GAAG,iBAAiB,EAAE,CAAC;IACrC,MAAM,IAAI,GAAG,aAAa,EAAE,CAAC;IAC7B,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,IAAI,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAEtE,wEAAwE;IACxE,6CAA6C;IAC7C,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,uEAAuE;IACvE,yEAAyE;IACzE,gBAAgB;IAChB,IAAI,QAAQ,GAAW,WAAW,CAAC;IAEnC,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACxC,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAE1C,IAAI,UAAU,CAAC,KAAK,CAAC,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC/C,MAAM,GAAG,GAAG,MAAM,oBAAoB,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;QAC3D,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClB,IAAI,GAAG,CAAC,OAAO;YAAE,MAAM,GAAG,IAAI,CAAC;QAC/B,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC;IACvB,CAAC;IACD,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAChD,MAAM,GAAG,GAAG,MAAM,oBAAoB,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;QAC5D,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACnB,IAAI,GAAG,CAAC,OAAO;YAAE,MAAM,GAAG,IAAI,CAAC;QAC/B,oEAAoE;QACpE,6CAA6C;QAC7C,IAAI,QAAQ,KAAK,WAAW,EAAE,CAAC;YAC7B,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC;QACvB,CAAC;IACH,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;AAC5C,CAAC;AAcD,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,MAAwB,EACxB,GAA2B,EAC3B,OAAoB,EAAE;IAEtB,MAAM,GAAG,GAAG,UAAU,EAAE,CAAC;IACzB,MAAM,IAAI,GAAG,aAAa,EAAE,CAAC;IAC7B,MAAM,IAAI,GAAe,EAAE,CAAC;IAE5B,KAAK,MAAM,IAAI,IAAI,GAAG,EAAE,CAAC;QACvB,IAAI,CAAC,IAAI,CAAC,UAAU;YAAE,SAAS;QAC/B,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC5C,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,iEAAiE;YACjE,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;YAC3D,SAAS;QACX,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5D,CAAC;IAED,qEAAqE;IACrE,gDAAgD;IAChD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU;YAAE,SAAS;QAEhE,MAAM,KAAK,GAAG;YACZ,QAAQ,EAAE,GAAG,CAAC,IAAI,CAAC,UAAU;YAC7B,aAAa,EAAE,MAAM,CAAC,OAAO;YAC7B,UAAU,EAAE,MAAM,CAAC,IAAI;YACvB,GAAG;YACH,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC;SAC7B,CAAC;QAEF,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,OAAO;gBACpC,CAAC,CAAC,MAAM,eAAe,CAAC,KAAK,CAAC;gBAC9B,CAAC,CAAC,MAAM,eAAe,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAC9C,IAAI,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;QACzC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,CAAC,CAAC,GAAG;gBACR,GAAG,GAAG;gBACN,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;aACxD,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AASD,MAAM,UAAU,eAAe,CAAC,IAM/B;IACC,MAAM,KAAK,GAAoB,EAAE,CAAC;IAClC,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,IAAI,CAAC,OAAO,YAAY,EAAE,CAAC,CAAC;IACtE,IAAI,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpC,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK;aACjC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;aAC5B,IAAI,CAAC,IAAI,CAAC,CAAC;QACd,KAAK,CAAC,IAAI,CAAC;YACT,IAAI,EAAE,IAAI;YACV,IAAI,EAAE,eAAe,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,cAAc,OAAO,EAAE;SAC7E,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,IAAI,CAAC;YACT,IAAI,EAAE,IAAI;YACV,IAAI,EAAE,eAAe,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,gBAAgB;SACtE,CAAC,CAAC;IACL,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO;YAAE,SAAS,CAAC,gBAAgB;QACjD,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC,KAAK,KAAK,GAAG,CAAC,KAAK,IAAI,eAAe,EAAE,EAAE,CAAC,CAAC;YACzF,SAAS;QACX,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC;YAChB,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC,KAAK,aAAa,EAAE,CAAC,CAAC;YACnE,SAAS;QACX,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACxB,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC,KAAK,sBAAsB,EAAE,CAAC,CAAC;QAC5E,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,YAAY,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACjE,CAAC;IACH,CAAC;IACD,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;QACnB,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,2BAA2B,EAAE,CAAC,CAAC;IAChE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,OAAoB,EAAE;IAClD,iBAAiB,EAAE,CAAC;IACpB,MAAM,QAAQ,GAAG,iBAAiB,EAAE,CAAC;IACrC,MAAM,IAAI,GAAG,aAAa,EAAE,CAAC;IAC7B,MAAM,OAAO,GAAG,WAAW,EAAE,CAAC;IAC9B,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,uBAAuB,CAAC;IAEpF,IAAI,CAAC,UAAU,EAAE,EAAE,CAAC;QAClB,GAAG,CAAC,OAAO,QAAQ,EAAE,CAAC,CAAC;QACvB,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;IACvB,CAAC;IAED,6BAA6B;IAC7B,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,CAAC;IAE5C,iCAAiC;IACjC,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,CAAC;IACzC,MAAM,GAAG,GAA2B;QAClC,cAAc,EAAE,MAAM;QACtB,iBAAiB,EAAE,MAAM,CAAC,KAAK;KAChC,CAAC;IAEF,IAAI,CAAC,UAAU,EAAE,EAAE,CAAC;QAClB,GAAG,CAAC,WAAW,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC1D,GAAG,CAAC,eAAe,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;IACnG,CAAC;IAED,gCAAgC;IAChC,MAAM,IAAI,GAAG,MAAM,eAAe,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;IAEtD,kDAAkD;IAClD,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,MAAM,WAAW,GAAG,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC;IACpD,IAAI,WAAW,EAAE,CAAC;QAChB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC;YAChF,MAAM,MAAM,EAAE,CAAC;YACf,SAAS,GAAG,IAAI,CAAC;QACnB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,mEAAmE;YACnE,iEAAiE;YACjE,IAAI,CACF,2BAA2B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI;gBAC7E,gCAAgC,CACnC,CAAC;QACJ,CAAC;IACH,CAAC;SAAM,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QACvB,IAAI,CAAC,UAAU,EAAE;YAAE,GAAG,CAAC,2BAA2B,CAAC,CAAC;IACtD,CAAC;SAAM,CAAC;QACN,IAAI,CAAC,UAAU,EAAE;YAAE,GAAG,CAAC,gCAAgC,CAAC,CAAC;IAC3D,CAAC;IAED,sBAAsB;IACtB,MAAM,KAAK,GAAG,eAAe,CAAC;QAC5B,OAAO;QACP,SAAS,EAAE,MAAM;QACjB,IAAI;QACJ,SAAS;QACT,MAAM;KACP,CAAC,CAAC;IACH,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI;YAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;;YACtC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACvB,CAAC;IAED,gCAAgC;IAChC,IAAI,CAAC,UAAU,EAAE,EAAE,CAAC;QAClB,GAAG,CAAC,EAAE,CAAC,CAAC;QACR,GAAG,CAAC,mCAAmC,CAAC,CAAC;QACzC,GAAG,CAAC,mCAAmC,CAAC,CAAC;QACzC,GAAG,CAAC,EAAE,CAAC,CAAC;QACR,GAAG,CAAC,sCAAsC,CAAC,CAAC;QAC5C,GAAG,CAAC,+BAA+B,CAAC,CAAC;IACvC,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,WAAW;IAClB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC;QAC7D,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,cAAc,CAAC,CAAC;QACzD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAyB,CAAC;QAC/E,OAAO,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,CAAC;IACjB,CAAC;AACH,CAAC"}

package/dist/login.d.ts

@@ -0,0 +1,29 @@
+/**
+ * login.ts — `krexel login [--provider=cloudflare|vercel|netlify]`
+ *
+ * Phase 1 only wires Cloudflare. Vercel and Netlify throw a clean Phase 2
+ * error rather than silently no-oping.
+ *
+ * The flow:
+ *   1. Mint a one-shot API key locally with nanoid.
+ *   2. Open the browser to `${KREXEL_API_URL}/api/v1/auth/cloudflare/start?token=<key>`.
+ *   3. Poll the orchestrator's callback endpoint until it reports success,
+ *      showing an ora spinner. The orchestrator exchanges its own cookie
+ *      with us via the same key.
+ */
+/**
+ * Run `krexel login`. Throws (via `error`) on unrecoverable problems;
+ * happy-path returns when the browser has been opened and the orchestrator
+ * has confirmed the callback.
+ *
+ * @param options.provider one of `cloudflare` (only real in Phase 1) | `vercel` | `netlify`
+ * @param options.apiKey optional — reused session token from previous login.
+ *                       If omitted, generate a fresh one-shot API key.
+ */
+export declare function runLogin(opts: {
+    provider?: string;
+    apiKey?: string;
+    pollIntervalMs?: number;
+    timeoutMs?: number;
+    opener?: (url: string) => Promise<void>;
+}): Promise<void>;

package/dist/login.js

@@ -0,0 +1,106 @@
+/**
+ * login.ts — `krexel login [--provider=cloudflare|vercel|netlify]`
+ *
+ * Phase 1 only wires Cloudflare. Vercel and Netlify throw a clean Phase 2
+ * error rather than silently no-oping.
+ *
+ * The flow:
+ *   1. Mint a one-shot API key locally with nanoid.
+ *   2. Open the browser to `${KREXEL_API_URL}/api/v1/auth/cloudflare/start?token=<key>`.
+ *   3. Poll the orchestrator's callback endpoint until it reports success,
+ *      showing an ora spinner. The orchestrator exchanges its own cookie
+ *      with us via the same key.
+ */
+import open from "open";
+import { nanoid } from "nanoid";
+import { request } from "undici";
+import { z } from "zod";
+import { withSpinner, error, dim, success, isJsonMode } from "./output.js";
+const PROVIDERS = ["cloudflare", "vercel", "netlify"];
+// Phase-1 environment variable matching the worker's @krexel/api-client convention.
+const DEFAULT_API_URL = "http://localhost:8787";
+function apiUrl() {
+    return process.env.KREXEL_API_URL ?? DEFAULT_API_URL;
+}
+/**
+ * Run `krexel login`. Throws (via `error`) on unrecoverable problems;
+ * happy-path returns when the browser has been opened and the orchestrator
+ * has confirmed the callback.
+ *
+ * @param options.provider one of `cloudflare` (only real in Phase 1) | `vercel` | `netlify`
+ * @param options.apiKey optional — reused session token from previous login.
+ *                       If omitted, generate a fresh one-shot API key.
+ */
+export async function runLogin(opts) {
+    const provider = (opts.provider ?? "cloudflare");
+    if (!PROVIDERS.includes(provider)) {
+        error(`Unknown provider "${provider}". Expected one of: ${PROVIDERS.join(", ")}`);
+    }
+    if (provider !== "cloudflare") {
+        error(`Provider "${provider}" support lands in Phase 2. ` +
+            `Today only --provider=cloudflare is wired (Cloudflare for SaaS pipeline).`);
+    }
+    const apiKey = opts.apiKey ?? `krx_live_${nanoid(32)}`;
+    const baseUrl = apiUrl();
+    const startUrl = `${baseUrl}/api/v1/auth/cloudflare/start?token=${encodeURIComponent(apiKey)}`;
+    const statusUrl = `${baseUrl}/api/v1/auth/status?token=${encodeURIComponent(apiKey)}`;
+    if (!isJsonMode()) {
+        dim(`API: ${baseUrl}`);
+        dim(`Provider: ${provider}`);
+    }
+    // Open the browser (or fallback opener for tests / headless boxes).
+    try {
+        if (opts.opener) {
+            await opts.opener(startUrl);
+        }
+        else {
+            await open(startUrl, { wait: false });
+        }
+    }
+    catch (err) {
+        // Don't abort — the user can open the URL by hand.
+        dim(`Could not auto-open browser: ${err instanceof Error ? err.message : String(err)}. ` +
+            `Open this URL manually:\n  ${startUrl}`);
+    }
+    const pollIntervalMs = opts.pollIntervalMs ?? 2_000;
+    const timeoutMs = opts.timeoutMs ?? 5 * 60_000; // 5 minutes
+    await withSpinner(`Waiting for ${provider} callback…`, async () => {
+        await pollUntilConnected(statusUrl, pollIntervalMs, timeoutMs);
+    });
+    success(`Logged in to ${provider}.`);
+    if (!isJsonMode()) {
+        dim(`Save this token if you want to skip the browser step next time:`);
+        dim(`  ${apiKey}`);
+    }
+}
+const StatusSchema = z.object({
+    connected: z.boolean(),
+    account_email: z.string().optional(),
+    note: z.string().optional(),
+});
+async function pollUntilConnected(statusUrl, intervalMs, timeoutMs) {
+    const deadline = Date.now() + timeoutMs;
+    for (;;) {
+        if (Date.now() > deadline) {
+            error("Login timed out after 5 minutes. Re-run `krexel login` to retry.");
+        }
+        try {
+            const res = await request(statusUrl, { method: "GET" });
+            if (res.statusCode === 200) {
+                const body = (await res.body.json());
+                const parsed = StatusSchema.safeParse(body);
+                if (parsed.success && parsed.data.connected) {
+                    if (parsed.data.account_email && !isJsonMode()) {
+                        dim(`Account: ${parsed.data.account_email}`);
+                    }
+                    return;
+                }
+            }
+        }
+        catch {
+            // transient network blip — keep polling
+        }
+        await new Promise((r) => setTimeout(r, intervalMs));
+    }
+}
+//# sourceMappingURL=login.js.map

package/dist/login.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"login.js","sourceRoot":"","sources":["../src/login.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAChC,OAAO,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AACjC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAE3E,MAAM,SAAS,GAAG,CAAC,YAAY,EAAE,QAAQ,EAAE,SAAS,CAAU,CAAC;AAG/D,oFAAoF;AACpF,MAAM,eAAe,GAAG,uBAAuB,CAAC;AAChD,SAAS,MAAM;IACb,OAAO,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,eAAe,CAAC;AACvD,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,IAM9B;IACC,MAAM,QAAQ,GAAG,CAAC,IAAI,CAAC,QAAQ,IAAI,YAAY,CAAa,CAAC;IAC7D,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QAClC,KAAK,CAAC,qBAAqB,QAAQ,uBAAuB,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACpF,CAAC;IACD,IAAI,QAAQ,KAAK,YAAY,EAAE,CAAC;QAC9B,KAAK,CACH,aAAa,QAAQ,8BAA8B;YACjD,2EAA2E,CAC9E,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,YAAY,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;IACvD,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC;IACzB,MAAM,QAAQ,GAAG,GAAG,OAAO,uCAAuC,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAAC;IAC/F,MAAM,SAAS,GAAG,GAAG,OAAO,6BAA6B,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAAC;IAEtF,IAAI,CAAC,UAAU,EAAE,EAAE,CAAC;QAClB,GAAG,CAAC,QAAQ,OAAO,EAAE,CAAC,CAAC;QACvB,GAAG,CAAC,aAAa,QAAQ,EAAE,CAAC,CAAC;IAC/B,CAAC;IAED,oEAAoE;IACpE,IAAI,CAAC;QACH,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC9B,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACxC,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,mDAAmD;QACnD,GAAG,CACD,gCAAgC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI;YAClF,8BAA8B,QAAQ,EAAE,CAC3C,CAAC;IACJ,CAAC;IAED,MAAM,cAAc,GAAG,IAAI,CAAC,cAAc,IAAI,KAAK,CAAC;IACpD,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,CAAC,GAAG,MAAM,CAAC,CAAC,YAAY;IAE5D,MAAM,WAAW,CAAC,eAAe,QAAQ,YAAY,EAAE,KAAK,IAAI,EAAE;QAChE,MAAM,kBAAkB,CAAC,SAAS,EAAE,cAAc,EAAE,SAAS,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;IAEH,OAAO,CAAC,gBAAgB,QAAQ,GAAG,CAAC,CAAC;IACrC,IAAI,CAAC,UAAU,EAAE,EAAE,CAAC;QAClB,GAAG,CAAC,iEAAiE,CAAC,CAAC;QACvE,GAAG,CAAC,KAAK,MAAM,EAAE,CAAC,CAAC;IACrB,CAAC;AACH,CAAC;AAED,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5B,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE;IACtB,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACpC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC5B,CAAC,CAAC;AAEH,KAAK,UAAU,kBAAkB,CAC/B,SAAiB,EACjB,UAAkB,EAClB,SAAiB;IAEjB,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;IACxC,SAAS,CAAC;QACR,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;YAC1B,KAAK,CAAC,kEAAkE,CAAC,CAAC;QAC5E,CAAC;QACD,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;YACxD,IAAI,GAAG,CAAC,UAAU,KAAK,GAAG,EAAE,CAAC;gBAC3B,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAY,CAAC;gBAChD,MAAM,MAAM,GAAG,YAAY,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;gBAC5C,IAAI,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;oBAC5C,IAAI,MAAM,CAAC,IAAI,CAAC,aAAa,IAAI,CAAC,UAAU,EAAE,EAAE,CAAC;wBAC/C,GAAG,CAAC,YAAY,MAAM,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC;oBAC/C,CAAC;oBACD,OAAO;gBACT,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,wCAAwC;QAC1C,CAAC;QACD,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC;IACtD,CAAC;AACH,CAAC"}

package/dist/logs.d.ts

@@ -0,0 +1,10 @@
+/**
+ * logs.ts — `krexel logs <deploy_id>`
+ *
+ * Asks the MCP server for the (currently mocked, Phase 2 will stream real)
+ * build logs and prints them monospace. In `--json` mode we emit the raw MCP
+ * payload for piping to `jq`.
+ */
+export declare function runLogs(opts: {
+    deployId: string;
+}): Promise<void>;

package/dist/logs.js

@@ -0,0 +1,26 @@
+/**
+ * logs.ts — `krexel logs <deploy_id>`
+ *
+ * Asks the MCP server for the (currently mocked, Phase 2 will stream real)
+ * build logs and prints them monospace. In `--json` mode we emit the raw MCP
+ * payload for piping to `jq`.
+ */
+import { withSpinner, error, monospace, isJsonMode } from "./output.js";
+import { getClient } from "./mcp-client.js";
+export async function runLogs(opts) {
+    const deployId = (opts.deployId ?? "").trim();
+    if (!deployId)
+        error("deploy_id is required (e.g. `krexel logs dep_abc123_xyz`).");
+    if (!deployId.startsWith("dep_")) {
+        error(`Invalid deploy_id format — must start with "dep_". Got: ${deployId}`);
+    }
+    const client = getClient();
+    const result = await withSpinner(`Fetching logs for ${deployId}…`, () => client.callTool("get_logs", { deploy_id: deployId }), { enabled: true });
+    if (isJsonMode()) {
+        // eslint-disable-next-line no-console
+        console.log(JSON.stringify(result, null, 2));
+        return;
+    }
+    monospace(result.logs);
+}
+//# sourceMappingURL=logs.js.map

package/dist/logs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logs.js","sourceRoot":"","sources":["../src/logs.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACxE,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAE5C,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,IAA0B;IACtD,MAAM,QAAQ,GAAG,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC9C,IAAI,CAAC,QAAQ;QAAE,KAAK,CAAC,4DAA4D,CAAC,CAAC;IACnF,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QACjC,KAAK,CAAC,2DAA2D,QAAQ,EAAE,CAAC,CAAC;IAC/E,CAAC;IAED,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,MAAM,GAAG,MAAM,WAAW,CAC9B,qBAAqB,QAAQ,GAAG,EAChC,GAAG,EAAE,CACH,MAAM,CAAC,QAAQ,CAMZ,UAAU,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,EACzC,EAAE,OAAO,EAAE,IAAI,EAAE,CAClB,CAAC;IAEF,IAAI,UAAU,EAAE,EAAE,CAAC;QACjB,sCAAsC;QACtC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC7C,OAAO;IACT,CAAC;IAED,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;AACzB,CAAC"}