lastlight 0.1.8 → 0.2.0

package/dist/admin/version.js

@@ -0,0 +1,73 @@
+/**
+ * Server version + drift detection for the dashboard banner.
+ *
+ * Computed agent-side (inside the container) from what the harness can reach:
+ *  - core.current  — baked at build time as LASTLIGHT_GIT_SHA (Dockerfile ARG).
+ *  - core.latest   — `git ls-remote` of the public core repo (agent has GitHub
+ *                    egress). Best-effort; null on failure.
+ *  - overlay.current — `git rev-parse HEAD` in the read-only-mounted overlay
+ *                    checkout (its .git is readable).
+ *  - overlay.latest  — best-effort `git ls-remote`; often null in-container
+ *                    (the private overlay's deploy key isn't present), shown as
+ *                    "unknown" rather than implying drift.
+ *
+ * `behind` is only true when BOTH SHAs are known and differ — so an unreachable
+ * remote never produces a false "update available". The authoritative drift
+ * view is `lastlight server status` on the host (full git access); this is the
+ * in-dashboard nudge.
+ */
+import { execFile } from "node:child_process";
+import { promisify } from "node:util";
+import { readFileSync } from "node:fs";
+import { resolve } from "node:path";
+const exec = promisify(execFile);
+const CORE_REMOTE = "https://github.com/cliftonc/lastlight";
+/** Overlay checkout path inside the container (LASTLIGHT_OVERLAY_DIR mount). */
+function overlayDir() {
+    return process.env.LASTLIGHT_OVERLAY_DIR || "/app/instance";
+}
+/** Capture trimmed stdout with a short timeout; null instead of throwing. */
+async function softCapture(cmd, args) {
+    try {
+        const { stdout } = await exec(cmd, args, { timeout: 8000 });
+        return stdout.trim() || null;
+    }
+    catch {
+        return null;
+    }
+}
+/** First column of `git ls-remote … <ref>` — the SHA, or null. */
+function lsRemoteSha(stdout) {
+    if (!stdout)
+        return null;
+    const first = stdout.split(/\s+/)[0];
+    return /^[0-9a-f]{7,40}$/i.test(first) ? first : null;
+}
+function compare(current, latest) {
+    return { current, latest, behind: !!current && !!latest && current !== latest };
+}
+function readPackageVersion() {
+    try {
+        const pkg = JSON.parse(readFileSync(resolve("package.json"), "utf8"));
+        return pkg.version ?? null;
+    }
+    catch {
+        return null;
+    }
+}
+/** Compute core + overlay version drift for `GET /admin/api/server/info`. */
+export async function getServerVersion() {
+    const ov = overlayDir();
+    const [coreLatest, overlayCurrent, overlayLatest] = await Promise.all([
+        softCapture("git", ["ls-remote", CORE_REMOTE, "HEAD"]),
+        softCapture("git", ["-C", ov, "rev-parse", "HEAD"]),
+        softCapture("git", ["-C", ov, "ls-remote", "origin", "HEAD"]),
+    ]);
+    return {
+        core: compare(process.env.LASTLIGHT_GIT_SHA || null, lsRemoteSha(coreLatest)),
+        overlay: compare(overlayCurrent, lsRemoteSha(overlayLatest)),
+        packageVersion: readPackageVersion(),
+        buildDate: process.env.LASTLIGHT_BUILD_DATE || null,
+    };
+}
+//# sourceMappingURL=version.js.map

package/dist/admin/version.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.js","sourceRoot":"","sources":["../../src/admin/version.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,MAAM,IAAI,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAEjC,MAAM,WAAW,GAAG,uCAAuC,CAAC;AAC5D,gFAAgF;AAChF,SAAS,UAAU;IACjB,OAAO,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,eAAe,CAAC;AAC9D,CAAC;AAiBD,6EAA6E;AAC7E,KAAK,UAAU,WAAW,CAAC,GAAW,EAAE,IAAc;IACpD,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5D,OAAO,MAAM,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,kEAAkE;AAClE,SAAS,WAAW,CAAC,MAAqB;IACxC,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACrC,OAAO,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AACxD,CAAC;AAED,SAAS,OAAO,CAAC,OAAsB,EAAE,MAAqB;IAC5D,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,MAAM,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;AAClF,CAAC;AAED,SAAS,kBAAkB;IACzB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC,CAAyB,CAAC;QAC9F,OAAO,GAAG,CAAC,OAAO,IAAI,IAAI,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,6EAA6E;AAC7E,MAAM,CAAC,KAAK,UAAU,gBAAgB;IACpC,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;IACxB,MAAM,CAAC,UAAU,EAAE,cAAc,EAAE,aAAa,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACpE,WAAW,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;QACtD,WAAW,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;QACnD,WAAW,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;KAC9D,CAAC,CAAC;IACH,OAAO;QACL,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,IAAI,EAAE,WAAW,CAAC,UAAU,CAAC,CAAC;QAC7E,OAAO,EAAE,OAAO,CAAC,cAAc,EAAE,WAAW,CAAC,aAAa,CAAC,CAAC;QAC5D,cAAc,EAAE,kBAAkB,EAAE;QACpC,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,IAAI;KACpD,CAAC;AACJ,CAAC"}

package/dist/admin/version.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/admin/version.test.js

@@ -0,0 +1,71 @@
+import { describe, it, expect, vi, beforeEach, afterEach } from "vitest";
+// Mock execFile so getServerVersion's git calls return controllable output.
+// promisify(execFile) calls execFile(file, args, opts, cb) — invoke cb here.
+const execFileMock = vi.hoisted(() => vi.fn());
+vi.mock("node:child_process", () => ({ execFile: execFileMock }));
+import { getServerVersion } from "./version.js";
+const OV = "/tmp/test-overlay";
+let responses;
+beforeEach(() => {
+    process.env.LASTLIGHT_OVERLAY_DIR = OV;
+    responses = {};
+    execFileMock.mockImplementation((_file, args, opts, cb) => {
+        const callback = (typeof opts === "function" ? opts : cb);
+        const r = responses[args.join(" ")];
+        if (r instanceof Error)
+            callback(r);
+        else
+            callback(null, { stdout: r ?? "", stderr: "" });
+    });
+});
+afterEach(() => {
+    delete process.env.LASTLIGHT_GIT_SHA;
+    delete process.env.LASTLIGHT_OVERLAY_DIR;
+    vi.restoreAllMocks();
+});
+const coreLsRemote = "ls-remote https://github.com/cliftonc/lastlight HEAD";
+const overlayRevParse = `-C ${OV} rev-parse HEAD`;
+const overlayLsRemote = `-C ${OV} ls-remote origin HEAD`;
+describe("getServerVersion", () => {
+    it("flags core behind when current SHA differs from remote", async () => {
+        process.env.LASTLIGHT_GIT_SHA = "aaaa1111aaaa1111";
+        responses[coreLsRemote] = "bbbb2222bbbb2222\tHEAD";
+        responses[overlayRevParse] = "cccc3333";
+        responses[overlayLsRemote] = "cccc3333\tHEAD";
+        const v = await getServerVersion();
+        expect(v.core.current).toBe("aaaa1111aaaa1111");
+        expect(v.core.latest).toBe("bbbb2222bbbb2222");
+        expect(v.core.behind).toBe(true);
+        expect(v.overlay.behind).toBe(false); // equal SHAs
+    });
+    it("is not behind when current matches remote", async () => {
+        process.env.LASTLIGHT_GIT_SHA = "deadbeefdeadbeef";
+        responses[coreLsRemote] = "deadbeefdeadbeef\tHEAD";
+        responses[overlayRevParse] = "1111";
+        responses[overlayLsRemote] = "1111\tHEAD";
+        const v = await getServerVersion();
+        expect(v.core.behind).toBe(false);
+    });
+    it("treats an unreachable remote as unknown, never behind", async () => {
+        process.env.LASTLIGHT_GIT_SHA = "aaaa1111";
+        responses[coreLsRemote] = new Error("network down");
+        responses[overlayRevParse] = "2222";
+        responses[overlayLsRemote] = new Error("no auth");
+        const v = await getServerVersion();
+        expect(v.core.current).toBe("aaaa1111");
+        expect(v.core.latest).toBeNull();
+        expect(v.core.behind).toBe(false);
+        expect(v.overlay.current).toBe("2222");
+        expect(v.overlay.latest).toBeNull();
+        expect(v.overlay.behind).toBe(false);
+    });
+    it("reports core.current null when the SHA wasn't baked", async () => {
+        responses[coreLsRemote] = "abcd1234\tHEAD";
+        responses[overlayRevParse] = "3333";
+        responses[overlayLsRemote] = "3333\tHEAD";
+        const v = await getServerVersion();
+        expect(v.core.current).toBeNull();
+        expect(v.core.behind).toBe(false); // unknown current → not behind
+    });
+});
+//# sourceMappingURL=version.test.js.map

package/dist/admin/version.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.test.js","sourceRoot":"","sources":["../../src/admin/version.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AAEzE,4EAA4E;AAC5E,6EAA6E;AAC7E,MAAM,YAAY,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;AAC/C,EAAE,CAAC,IAAI,CAAC,oBAAoB,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC;AAElE,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAEhD,MAAM,EAAE,GAAG,mBAAmB,CAAC;AAC/B,IAAI,SAAyC,CAAC;AAE9C,UAAU,CAAC,GAAG,EAAE;IACd,OAAO,CAAC,GAAG,CAAC,qBAAqB,GAAG,EAAE,CAAC;IACvC,SAAS,GAAG,EAAE,CAAC;IACf,YAAY,CAAC,kBAAkB,CAAC,CAAC,KAAa,EAAE,IAAc,EAAE,IAAa,EAAE,EAAY,EAAE,EAAE;QAC7F,MAAM,QAAQ,GAAG,CAAC,OAAO,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAsE,CAAC;QAC/H,MAAM,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QACpC,IAAI,CAAC,YAAY,KAAK;YAAE,QAAQ,CAAC,CAAC,CAAC,CAAC;;YAC/B,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,SAAS,CAAC,GAAG,EAAE;IACb,OAAO,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;IACrC,OAAO,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC;IACzC,EAAE,CAAC,eAAe,EAAE,CAAC;AACvB,CAAC,CAAC,CAAC;AAEH,MAAM,YAAY,GAAG,sDAAsD,CAAC;AAC5E,MAAM,eAAe,GAAG,MAAM,EAAE,iBAAiB,CAAC;AAClD,MAAM,eAAe,GAAG,MAAM,EAAE,wBAAwB,CAAC;AAEzD,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;IAChC,EAAE,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;QACtE,OAAO,CAAC,GAAG,CAAC,iBAAiB,GAAG,kBAAkB,CAAC;QACnD,SAAS,CAAC,YAAY,CAAC,GAAG,wBAAwB,CAAC;QACnD,SAAS,CAAC,eAAe,CAAC,GAAG,UAAU,CAAC;QACxC,SAAS,CAAC,eAAe,CAAC,GAAG,gBAAgB,CAAC;QAE9C,MAAM,CAAC,GAAG,MAAM,gBAAgB,EAAE,CAAC;QACnC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;QAChD,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;QAC/C,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,aAAa;IACrD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,KAAK,IAAI,EAAE;QACzD,OAAO,CAAC,GAAG,CAAC,iBAAiB,GAAG,kBAAkB,CAAC;QACnD,SAAS,CAAC,YAAY,CAAC,GAAG,wBAAwB,CAAC;QACnD,SAAS,CAAC,eAAe,CAAC,GAAG,MAAM,CAAC;QACpC,SAAS,CAAC,eAAe,CAAC,GAAG,YAAY,CAAC;QAE1C,MAAM,CAAC,GAAG,MAAM,gBAAgB,EAAE,CAAC;QACnC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uDAAuD,EAAE,KAAK,IAAI,EAAE;QACrE,OAAO,CAAC,GAAG,CAAC,iBAAiB,GAAG,UAAU,CAAC;QAC3C,SAAS,CAAC,YAAY,CAAC,GAAG,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC;QACpD,SAAS,CAAC,eAAe,CAAC,GAAG,MAAM,CAAC;QACpC,SAAS,CAAC,eAAe,CAAC,GAAG,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC;QAElD,MAAM,CAAC,GAAG,MAAM,gBAAgB,EAAE,CAAC;QACnC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACxC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC;QACjC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACvC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC;QACpC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;QACnE,SAAS,CAAC,YAAY,CAAC,GAAG,gBAAgB,CAAC;QAC3C,SAAS,CAAC,eAAe,CAAC,GAAG,MAAM,CAAC;QACpC,SAAS,CAAC,eAAe,CAAC,GAAG,YAAY,CAAC;QAE1C,MAAM,CAAC,GAAG,MAAM,gBAAgB,EAAE,CAAC;QACnC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC;QAClC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,+BAA+B;IACpE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/cli-config.d.ts

@@ -0,0 +1,55 @@
+export interface CliConfig {
+    /** Base URL of the Last Light instance, e.g. https://ll.example.com */
+    url: string;
+    /** Bearer token minted by the instance (7-day TTL). */
+    token: string;
+    /** ISO timestamp the token was saved — informational. */
+    savedAt: string;
+    /**
+     * Working directory for the host-local `lastlight server` lifecycle commands
+     * (start/stop/restart/update). A full git checkout of the lastlight repo plus
+     * the `instance/` overlay + the `docker-compose.override.yml` symlink — the
+     * docker build context. Written by `lastlight server setup`. Distinct from
+     * `url`/`token`, which target a *remote* instance over HTTP.
+     */
+    serverHome?: string;
+}
+export declare const DEFAULT_URL = "http://localhost:8644";
+/** Default working directory for `lastlight server` when nothing else is set. */
+export declare function defaultServerHome(): string;
+/** `~/.lastlight` — the CLI config directory. */
+export declare function configDir(): string;
+/** `~/.lastlight/config.json` — the saved-credentials file. */
+export declare function configPath(): string;
+/** Load the saved credentials, or null if none / unreadable. */
+export declare function loadConfig(): CliConfig | null;
+/**
+ * Persist `{ url, token }` (stamping `savedAt`), preserving any other fields
+ * (e.g. `serverHome`) already in the file.
+ */
+export declare function saveConfig(cfg: {
+    url: string;
+    token: string;
+}): CliConfig;
+/** Persist the `serverHome` working directory, preserving credentials. */
+export declare function saveServerHome(home: string): void;
+/**
+ * Resolve the working directory for `lastlight server` lifecycle commands.
+ * Precedence: explicit override (`--home`) → `LASTLIGHT_HOME` env → saved
+ * `serverHome` → built-in default (`~/lastlight`).
+ */
+export declare function resolveServerHome(override?: string): string;
+/** Remove the saved config (logout). No-op if it doesn't exist. */
+export declare function clearConfig(): void;
+/**
+ * Resolve the effective instance URL + token the CLI should use for a command.
+ * Precedence: explicit override (`--url`/`--token`) → env → saved file →
+ * built-in default URL (with no token).
+ */
+export declare function resolveTarget(override?: {
+    url?: string;
+    token?: string;
+}): {
+    url: string;
+    token: string;
+};

package/dist/cli-config.js

@@ -0,0 +1,119 @@
+/**
+ * Persisted CLI config — `~/.lastlight/config.json`.
+ *
+ * Stores the instance URL and bearer token that `lastlight login` obtains, so
+ * every subsequent command runs against the same remote instance without
+ * re-authenticating. The file holds a credential, so it is written mode 0600
+ * inside a 0700 directory.
+ *
+ * Env vars (`LASTLIGHT_URL` / `LASTLIGHT_TOKEN`) always take precedence over
+ * the file — see `resolveTarget()` — so CI/scripts can override without
+ * touching disk.
+ */
+import fs from "node:fs";
+import os from "node:os";
+import path from "node:path";
+export const DEFAULT_URL = "http://localhost:8644";
+/** Default working directory for `lastlight server` when nothing else is set. */
+export function defaultServerHome() {
+    return path.join(os.homedir(), "lastlight");
+}
+/** `~/.lastlight` — the CLI config directory. */
+export function configDir() {
+    return path.join(os.homedir(), ".lastlight");
+}
+/** `~/.lastlight/config.json` — the saved-credentials file. */
+export function configPath() {
+    return path.join(configDir(), "config.json");
+}
+/**
+ * Read the raw config object (any subset of fields), or null if none /
+ * unreadable. Unlike `loadConfig`, this does not require `url`/`token` — it is
+ * used when the only persisted field might be `serverHome`.
+ */
+function readRaw() {
+    try {
+        return JSON.parse(fs.readFileSync(configPath(), "utf8"));
+    }
+    catch {
+        return null;
+    }
+}
+/** Load the saved credentials, or null if none / unreadable. */
+export function loadConfig() {
+    const parsed = readRaw();
+    if (parsed && typeof parsed.url === "string" && typeof parsed.token === "string") {
+        return {
+            url: parsed.url,
+            token: parsed.token,
+            savedAt: parsed.savedAt ?? "",
+            serverHome: typeof parsed.serverHome === "string" ? parsed.serverHome : undefined,
+        };
+    }
+    return null;
+}
+/** Merge `patch` into the on-disk config and persist it (mode 0600 / dir 0700). */
+function writeMerged(patch) {
+    const dir = configDir();
+    fs.mkdirSync(dir, { recursive: true, mode: 0o700 });
+    const merged = { ...(readRaw() ?? {}), ...patch };
+    fs.writeFileSync(configPath(), JSON.stringify(merged, null, 2) + "\n", { mode: 0o600 });
+    // mkdir/writeFile honour `mode` only on creation; enforce on existing files too.
+    try {
+        fs.chmodSync(configPath(), 0o600);
+        fs.chmodSync(dir, 0o700);
+    }
+    catch {
+        /* best-effort — non-POSIX filesystems may reject chmod */
+    }
+}
+/**
+ * Persist `{ url, token }` (stamping `savedAt`), preserving any other fields
+ * (e.g. `serverHome`) already in the file.
+ */
+export function saveConfig(cfg) {
+    writeMerged({ url: cfg.url, token: cfg.token, savedAt: new Date().toISOString() });
+    return loadConfig();
+}
+/** Persist the `serverHome` working directory, preserving credentials. */
+export function saveServerHome(home) {
+    writeMerged({ serverHome: home });
+}
+/**
+ * Resolve the working directory for `lastlight server` lifecycle commands.
+ * Precedence: explicit override (`--home`) → `LASTLIGHT_HOME` env → saved
+ * `serverHome` → built-in default (`~/lastlight`).
+ */
+export function resolveServerHome(override) {
+    return (override ||
+        process.env.LASTLIGHT_HOME ||
+        readRaw()?.serverHome ||
+        defaultServerHome());
+}
+/** Remove the saved config (logout). No-op if it doesn't exist. */
+export function clearConfig() {
+    try {
+        fs.rmSync(configPath());
+    }
+    catch {
+        /* already gone */
+    }
+}
+/**
+ * Resolve the effective instance URL + token the CLI should use for a command.
+ * Precedence: explicit override (`--url`/`--token`) → env → saved file →
+ * built-in default URL (with no token).
+ */
+export function resolveTarget(override) {
+    const saved = loadConfig();
+    const url = override?.url ||
+        process.env.LASTLIGHT_URL ||
+        saved?.url ||
+        DEFAULT_URL;
+    const token = override?.token ||
+        process.env.LASTLIGHT_TOKEN ||
+        saved?.token ||
+        "";
+    return { url: url.replace(/\/+$/, ""), token };
+}
+//# sourceMappingURL=cli-config.js.map

package/dist/cli-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli-config.js","sourceRoot":"","sources":["../src/cli-config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAmB7B,MAAM,CAAC,MAAM,WAAW,GAAG,uBAAuB,CAAC;AAEnD,iFAAiF;AACjF,MAAM,UAAU,iBAAiB;IAC/B,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,WAAW,CAAC,CAAC;AAC9C,CAAC;AAED,iDAAiD;AACjD,MAAM,UAAU,SAAS;IACvB,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,YAAY,CAAC,CAAC;AAC/C,CAAC;AAED,+DAA+D;AAC/D,MAAM,UAAU,UAAU;IACxB,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,aAAa,CAAC,CAAC;AAC/C,CAAC;AAED;;;;GAIG;AACH,SAAS,OAAO;IACd,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,EAAE,MAAM,CAAC,CAAuB,CAAC;IACjF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,gEAAgE;AAChE,MAAM,UAAU,UAAU;IACxB,MAAM,MAAM,GAAG,OAAO,EAAE,CAAC;IACzB,IAAI,MAAM,IAAI,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QACjF,OAAO;YACL,GAAG,EAAE,MAAM,CAAC,GAAG;YACf,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,EAAE;YAC7B,UAAU,EAAE,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS;SAClF,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,mFAAmF;AACnF,SAAS,WAAW,CAAC,KAAyB;IAC5C,MAAM,GAAG,GAAG,SAAS,EAAE,CAAC;IACxB,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACpD,MAAM,MAAM,GAAG,EAAE,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,GAAG,KAAK,EAAE,CAAC;IAClD,EAAE,CAAC,aAAa,CAAC,UAAU,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACxF,iFAAiF;IACjF,IAAI,CAAC;QACH,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,EAAE,KAAK,CAAC,CAAC;QAClC,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,0DAA0D;IAC5D,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,UAAU,CAAC,GAAmC;IAC5D,WAAW,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IACnF,OAAO,UAAU,EAAG,CAAC;AACvB,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,WAAW,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;AACpC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,QAAiB;IACjD,OAAO,CACL,QAAQ;QACR,OAAO,CAAC,GAAG,CAAC,cAAc;QAC1B,OAAO,EAAE,EAAE,UAAU;QACrB,iBAAiB,EAAE,CACpB,CAAC;AACJ,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,WAAW;IACzB,IAAI,CAAC;QACH,EAAE,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,kBAAkB;IACpB,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,QAA2C;IAIvE,MAAM,KAAK,GAAG,UAAU,EAAE,CAAC;IAC3B,MAAM,GAAG,GACP,QAAQ,EAAE,GAAG;QACb,OAAO,CAAC,GAAG,CAAC,aAAa;QACzB,KAAK,EAAE,GAAG;QACV,WAAW,CAAC;IACd,MAAM,KAAK,GACT,QAAQ,EAAE,KAAK;QACf,OAAO,CAAC,GAAG,CAAC,eAAe;QAC3B,KAAK,EAAE,KAAK;QACZ,EAAE,CAAC;IACL,OAAO,EAAE,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC;AACjD,CAAC"}

package/dist/cli-config.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/cli-config.test.js

@@ -0,0 +1,92 @@
+import { describe, it, expect, beforeEach, afterEach } from "vitest";
+import fs from "node:fs";
+import os from "node:os";
+import path from "node:path";
+import { loadConfig, saveConfig, clearConfig, resolveTarget, saveServerHome, resolveServerHome, defaultServerHome, configPath, DEFAULT_URL, } from "./cli-config.js";
+let tmpHome;
+let origHome;
+let origUrl;
+let origToken;
+beforeEach(() => {
+    tmpHome = fs.mkdtempSync(path.join(os.tmpdir(), "ll-cli-"));
+    origHome = process.env.HOME;
+    origUrl = process.env.LASTLIGHT_URL;
+    origToken = process.env.LASTLIGHT_TOKEN;
+    process.env.HOME = tmpHome;
+    delete process.env.LASTLIGHT_URL;
+    delete process.env.LASTLIGHT_TOKEN;
+});
+afterEach(() => {
+    if (origHome === undefined)
+        delete process.env.HOME;
+    else
+        process.env.HOME = origHome;
+    if (origUrl === undefined)
+        delete process.env.LASTLIGHT_URL;
+    else
+        process.env.LASTLIGHT_URL = origUrl;
+    if (origToken === undefined)
+        delete process.env.LASTLIGHT_TOKEN;
+    else
+        process.env.LASTLIGHT_TOKEN = origToken;
+    fs.rmSync(tmpHome, { recursive: true, force: true });
+});
+describe("cli-config", () => {
+    it("round-trips save → load", () => {
+        expect(loadConfig()).toBeNull();
+        saveConfig({ url: "https://ll.example.com", token: "tok-123" });
+        const cfg = loadConfig();
+        expect(cfg?.url).toBe("https://ll.example.com");
+        expect(cfg?.token).toBe("tok-123");
+        expect(cfg?.savedAt).toBeTruthy();
+    });
+    it("writes the config file mode 0600", () => {
+        saveConfig({ url: "https://x", token: "t" });
+        const mode = fs.statSync(configPath()).mode & 0o777;
+        expect(mode).toBe(0o600);
+    });
+    it("clearConfig removes the file", () => {
+        saveConfig({ url: "https://x", token: "t" });
+        clearConfig();
+        expect(loadConfig()).toBeNull();
+        expect(() => clearConfig()).not.toThrow(); // idempotent
+    });
+    it("env vars override the saved file", () => {
+        saveConfig({ url: "https://saved", token: "saved-tok" });
+        process.env.LASTLIGHT_URL = "https://env";
+        process.env.LASTLIGHT_TOKEN = "env-tok";
+        const t = resolveTarget();
+        expect(t.url).toBe("https://env");
+        expect(t.token).toBe("env-tok");
+    });
+    it("explicit override beats env and file", () => {
+        process.env.LASTLIGHT_URL = "https://env";
+        const t = resolveTarget({ url: "https://flag", token: "flag-tok" });
+        expect(t.url).toBe("https://flag");
+        expect(t.token).toBe("flag-tok");
+    });
+    it("saveServerHome persists without clobbering credentials", () => {
+        saveConfig({ url: "https://ll.example.com", token: "tok-123" });
+        saveServerHome("/home/lastlight/lastlight");
+        const cfg = loadConfig();
+        expect(cfg?.token).toBe("tok-123"); // creds preserved
+        expect(cfg?.serverHome).toBe("/home/lastlight/lastlight");
+    });
+    it("resolveServerHome: --home > LASTLIGHT_HOME > saved > default", () => {
+        expect(resolveServerHome()).toBe(defaultServerHome());
+        saveServerHome("/saved/home");
+        expect(resolveServerHome()).toBe("/saved/home");
+        process.env.LASTLIGHT_HOME = "/env/home";
+        expect(resolveServerHome()).toBe("/env/home");
+        expect(resolveServerHome("/flag/home")).toBe("/flag/home");
+        delete process.env.LASTLIGHT_HOME;
+    });
+    it("falls back to the default URL and trims trailing slashes", () => {
+        const t = resolveTarget();
+        expect(t.url).toBe(DEFAULT_URL);
+        expect(t.token).toBe("");
+        saveConfig({ url: "https://ll.example.com/", token: "t" });
+        expect(resolveTarget().url).toBe("https://ll.example.com");
+    });
+});
+//# sourceMappingURL=cli-config.test.js.map

package/dist/cli-config.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli-config.test.js","sourceRoot":"","sources":["../src/cli-config.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACrE,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EACL,UAAU,EACV,UAAU,EACV,WAAW,EACX,aAAa,EACb,cAAc,EACd,iBAAiB,EACjB,iBAAiB,EACjB,UAAU,EACV,WAAW,GACZ,MAAM,iBAAiB,CAAC;AAEzB,IAAI,OAAe,CAAC;AACpB,IAAI,QAA4B,CAAC;AACjC,IAAI,OAA2B,CAAC;AAChC,IAAI,SAA6B,CAAC;AAElC,UAAU,CAAC,GAAG,EAAE;IACd,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC;IAC5D,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;IAC5B,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;IACpC,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC;IACxC,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,OAAO,CAAC;IAC3B,OAAO,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;IACjC,OAAO,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC;AACrC,CAAC,CAAC,CAAC;AAEH,SAAS,CAAC,GAAG,EAAE;IACb,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;;QAAM,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,QAAQ,CAAC;IACtF,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;;QAAM,OAAO,CAAC,GAAG,CAAC,aAAa,GAAG,OAAO,CAAC;IACtG,IAAI,SAAS,KAAK,SAAS;QAAE,OAAO,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC;;QAAM,OAAO,CAAC,GAAG,CAAC,eAAe,GAAG,SAAS,CAAC;IAC9G,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AACvD,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,YAAY,EAAE,GAAG,EAAE;IAC1B,EAAE,CAAC,yBAAyB,EAAE,GAAG,EAAE;QACjC,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;QAChC,UAAU,CAAC,EAAE,GAAG,EAAE,wBAAwB,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;QAChE,MAAM,GAAG,GAAG,UAAU,EAAE,CAAC;QACzB,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;QAChD,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACnC,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,UAAU,EAAE,CAAC;IACpC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;QAC1C,UAAU,CAAC,EAAE,GAAG,EAAE,WAAW,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;QAC7C,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC;QACpD,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC3B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8BAA8B,EAAE,GAAG,EAAE;QACtC,UAAU,CAAC,EAAE,GAAG,EAAE,WAAW,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;QAC7C,WAAW,EAAE,CAAC;QACd,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;QAChC,MAAM,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,aAAa;IAC1D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;QAC1C,UAAU,CAAC,EAAE,GAAG,EAAE,eAAe,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;QACzD,OAAO,CAAC,GAAG,CAAC,aAAa,GAAG,aAAa,CAAC;QAC1C,OAAO,CAAC,GAAG,CAAC,eAAe,GAAG,SAAS,CAAC;QACxC,MAAM,CAAC,GAAG,aAAa,EAAE,CAAC;QAC1B,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAClC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAC9C,OAAO,CAAC,GAAG,CAAC,aAAa,GAAG,aAAa,CAAC;QAC1C,MAAM,CAAC,GAAG,aAAa,CAAC,EAAE,GAAG,EAAE,cAAc,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;QACpE,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QACnC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;QAChE,UAAU,CAAC,EAAE,GAAG,EAAE,wBAAwB,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;QAChE,cAAc,CAAC,2BAA2B,CAAC,CAAC;QAC5C,MAAM,GAAG,GAAG,UAAU,EAAE,CAAC;QACzB,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,kBAAkB;QACtD,MAAM,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8DAA8D,EAAE,GAAG,EAAE;QACtE,MAAM,CAAC,iBAAiB,EAAE,CAAC,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC,CAAC;QACtD,cAAc,CAAC,aAAa,CAAC,CAAC;QAC9B,MAAM,CAAC,iBAAiB,EAAE,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAChD,OAAO,CAAC,GAAG,CAAC,cAAc,GAAG,WAAW,CAAC;QACzC,MAAM,CAAC,iBAAiB,EAAE,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC9C,MAAM,CAAC,iBAAiB,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC3D,OAAO,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;IACpC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;QAClE,MAAM,CAAC,GAAG,aAAa,EAAE,CAAC;QAC1B,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAChC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACzB,UAAU,CAAC,EAAE,GAAG,EAAE,yBAAyB,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;QAC3D,MAAM,CAAC,aAAa,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/cli-format.d.ts

@@ -0,0 +1,19 @@
+/** Render an array of records as an aligned text table. */
+export declare function table(rows: Array<Record<string, string>>, columns: Array<{
+    key: string;
+    header: string;
+}>): string;
+/** "3m ago" / "2h ago" / "5d ago" from an ISO timestamp or unix-seconds number. */
+export declare function age(input: string | number | null | undefined): string;
+/** Color a workflow-run / execution status string. */
+export declare function colorStatus(status: string | null | undefined): string;
+/** ✓ / ✗ for a boolean-ish success value. */
+export declare function checkmark(success: boolean | undefined): string;
+/**
+ * Follow a server-sent-events endpoint, invoking `onEvent` for each `data:`
+ * payload until the stream closes or the process is interrupted. Uses the
+ * global `fetch` ReadableStream — no EventSource polyfill or extra dependency.
+ * The token is passed as a `?token=` query param (the server's auth middleware
+ * accepts it there for SSE, which can't set headers).
+ */
+export declare function followSSE(url: string, token: string, onEvent: (data: string) => void): Promise<void>;

package/dist/cli-format.js

@@ -0,0 +1,107 @@
+/**
+ * Presentation helpers for the `lastlight` CLI — plain tables, relative ages,
+ * status coloring, and a dependency-free SSE follower. All human formatting is
+ * skipped when the caller passes `--json` (the command prints raw JSON itself).
+ */
+import chalk from "chalk";
+/** Render an array of records as an aligned text table. */
+export function table(rows, columns) {
+    if (rows.length === 0)
+        return chalk.dim("(none)");
+    const widths = columns.map((col) => Math.max(col.header.length, ...rows.map((r) => stripAnsi(r[col.key] ?? "").length)));
+    const pad = (s, w) => s + " ".repeat(Math.max(0, w - stripAnsi(s).length));
+    const headerLine = columns.map((c, i) => chalk.bold(pad(c.header, widths[i]))).join("  ");
+    const body = rows.map((r) => columns.map((c, i) => pad(r[c.key] ?? "", widths[i])).join("  "));
+    return [headerLine, ...body].join("\n");
+}
+const ANSI = /\[[0-9;]*m/g;
+function stripAnsi(s) {
+    return s.replace(ANSI, "");
+}
+/** "3m ago" / "2h ago" / "5d ago" from an ISO timestamp or unix-seconds number. */
+export function age(input) {
+    if (input === null || input === undefined || input === "")
+        return "";
+    const ms = typeof input === "number" ? input * 1000 : Date.parse(input);
+    if (Number.isNaN(ms))
+        return String(input);
+    const diff = Date.now() - ms;
+    const sec = Math.round(diff / 1000);
+    if (sec < 60)
+        return `${sec}s ago`;
+    const min = Math.round(sec / 60);
+    if (min < 60)
+        return `${min}m ago`;
+    const hr = Math.round(min / 60);
+    if (hr < 48)
+        return `${hr}h ago`;
+    return `${Math.round(hr / 24)}d ago`;
+}
+/** Color a workflow-run / execution status string. */
+export function colorStatus(status) {
+    const s = (status ?? "").toLowerCase();
+    switch (s) {
+        case "succeeded":
+        case "success":
+        case "approved":
+            return chalk.green(status);
+        case "failed":
+        case "error":
+        case "rejected":
+            return chalk.red(status);
+        case "running":
+        case "paused":
+        case "pending":
+            return chalk.yellow(status);
+        case "cancelled":
+            return chalk.dim(status);
+        default:
+            return status ?? "";
+    }
+}
+/** ✓ / ✗ for a boolean-ish success value. */
+export function checkmark(success) {
+    if (success === undefined)
+        return chalk.yellow("…");
+    return success ? chalk.green("✓") : chalk.red("✗");
+}
+/**
+ * Follow a server-sent-events endpoint, invoking `onEvent` for each `data:`
+ * payload until the stream closes or the process is interrupted. Uses the
+ * global `fetch` ReadableStream — no EventSource polyfill or extra dependency.
+ * The token is passed as a `?token=` query param (the server's auth middleware
+ * accepts it there for SSE, which can't set headers).
+ */
+export async function followSSE(url, token, onEvent) {
+    const u = new URL(url);
+    if (token)
+        u.searchParams.set("token", token);
+    const res = await fetch(u, { headers: { Accept: "text/event-stream" } });
+    if (!res.ok || !res.body) {
+        throw new Error(`stream failed: ${res.status} ${res.statusText}`);
+    }
+    const reader = res.body.getReader();
+    const decoder = new TextDecoder();
+    let buffer = "";
+    for (;;) {
+        const { done, value } = await reader.read();
+        if (done)
+            break;
+        buffer += decoder.decode(value, { stream: true });
+        // SSE frames are separated by a blank line; each frame may have multiple
+        // `data:` lines that concatenate into one payload.
+        let sep;
+        while ((sep = buffer.indexOf("\n\n")) !== -1) {
+            const frame = buffer.slice(0, sep);
+            buffer = buffer.slice(sep + 2);
+            const data = frame
+                .split("\n")
+                .filter((l) => l.startsWith("data:"))
+                .map((l) => l.slice(5).replace(/^ /, ""))
+                .join("\n");
+            if (data)
+                onEvent(data);
+        }
+    }
+}
+//# sourceMappingURL=cli-format.js.map

package/dist/cli-format.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli-format.js","sourceRoot":"","sources":["../src/cli-format.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,KAAK,MAAM,OAAO,CAAC;AAE1B,2DAA2D;AAC3D,MAAM,UAAU,KAAK,CACnB,IAAmC,EACnC,OAA+C;IAE/C,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAClD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CACjC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CACpF,CAAC;IACF,MAAM,GAAG,GAAG,CAAC,CAAS,EAAE,CAAS,EAAE,EAAE,CAAC,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IAC3F,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1F,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAC1B,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CACjE,CAAC;IACF,OAAO,CAAC,UAAU,EAAE,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1C,CAAC;AAED,MAAM,IAAI,GAAG,cAAc,CAAC;AAC5B,SAAS,SAAS,CAAC,CAAS;IAC1B,OAAO,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;AAC7B,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,GAAG,CAAC,KAAyC;IAC3D,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE;QAAE,OAAO,EAAE,CAAC;IACrE,MAAM,EAAE,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACxE,IAAI,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QAAE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IAC3C,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC;IAC7B,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;IACpC,IAAI,GAAG,GAAG,EAAE;QAAE,OAAO,GAAG,GAAG,OAAO,CAAC;IACnC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,EAAE,CAAC,CAAC;IACjC,IAAI,GAAG,GAAG,EAAE;QAAE,OAAO,GAAG,GAAG,OAAO,CAAC;IACnC,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,EAAE,CAAC,CAAC;IAChC,IAAI,EAAE,GAAG,EAAE;QAAE,OAAO,GAAG,EAAE,OAAO,CAAC;IACjC,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC;AACvC,CAAC;AAED,sDAAsD;AACtD,MAAM,UAAU,WAAW,CAAC,MAAiC;IAC3D,MAAM,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IACvC,QAAQ,CAAC,EAAE,CAAC;QACV,KAAK,WAAW,CAAC;QACjB,KAAK,SAAS,CAAC;QACf,KAAK,UAAU;YACb,OAAO,KAAK,CAAC,KAAK,CAAC,MAAO,CAAC,CAAC;QAC9B,KAAK,QAAQ,CAAC;QACd,KAAK,OAAO,CAAC;QACb,KAAK,UAAU;YACb,OAAO,KAAK,CAAC,GAAG,CAAC,MAAO,CAAC,CAAC;QAC5B,KAAK,SAAS,CAAC;QACf,KAAK,QAAQ,CAAC;QACd,KAAK,SAAS;YACZ,OAAO,KAAK,CAAC,MAAM,CAAC,MAAO,CAAC,CAAC;QAC/B,KAAK,WAAW;YACd,OAAO,KAAK,CAAC,GAAG,CAAC,MAAO,CAAC,CAAC;QAC5B;YACE,OAAO,MAAM,IAAI,EAAE,CAAC;IACxB,CAAC;AACH,CAAC;AAED,6CAA6C;AAC7C,MAAM,UAAU,SAAS,CAAC,OAA4B;IACpD,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACpD,OAAO,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AACrD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,GAAW,EACX,KAAa,EACb,OAA+B;IAE/B,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IACvB,IAAI,KAAK;QAAE,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAC9C,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,mBAAmB,EAAE,EAAE,CAAC,CAAC;IACzE,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,kBAAkB,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC;IACpE,CAAC;IACD,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;IACpC,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;IAClC,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,SAAS,CAAC;QACR,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QAC5C,IAAI,IAAI;YAAE,MAAM;QAChB,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAClD,yEAAyE;QACzE,mDAAmD;QACnD,IAAI,GAAW,CAAC;QAChB,OAAO,CAAC,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;YAC7C,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YACnC,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;YAC/B,MAAM,IAAI,GAAG,KAAK;iBACf,KAAK,CAAC,IAAI,CAAC;iBACX,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;iBACpC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;iBACxC,IAAI,CAAC,IAAI,CAAC,CAAC;YACd,IAAI,IAAI;gBAAE,OAAO,CAAC,IAAI,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;AACH,CAAC"}