latchkey 2.6.0 → 2.7.0

package/dist/src/curl.js

@@ -2,7 +2,12 @@
  * Curl subprocess utilities.
  */
 import { spawn, spawnSync } from 'node:child_process';
+import { CurlParseError, parseCurlArgs } from '@imbue-ai/detent';
 import { CONFIG } from './config.js';
+// Re-export detent's curl-parsing primitives so the rest of the codebase can
+// treat `./curl.js` as the single entry point for curl parsing and doesn't
+// have to depend on detent directly.
+export { CurlParseError, parseCurlArgs };
 function defaultSubprocessRunner(args) {
     const result = spawnSync(CONFIG.curlCommand, args, {
         stdio: ['inherit', 'inherit', 'inherit'],
@@ -33,7 +38,38 @@ function defaultDetachedSubprocessRunner(args) {
 }
 let subprocessRunner = defaultSubprocessRunner;
 let capturingSubprocessRunner = defaultCapturingSubprocessRunner;
+function defaultAsyncSubprocessRunner(args, options) {
+    return new Promise((resolve, reject) => {
+        const child = spawn(CONFIG.curlCommand, args, {
+            stdio: ['pipe', 'pipe', 'pipe'],
+        });
+        const stdoutChunks = [];
+        const stderrChunks = [];
+        child.stdout.on('data', (chunk) => {
+            stdoutChunks.push(chunk);
+        });
+        child.stderr.on('data', (chunk) => {
+            stderrChunks.push(chunk.toString());
+        });
+        child.on('error', reject);
+        child.on('close', (code) => {
+            resolve({
+                returncode: code ?? 1,
+                stdout: Buffer.concat(stdoutChunks),
+                stderr: stderrChunks.join(''),
+            });
+        });
+        if (options?.stdin !== undefined) {
+            child.stdin.write(options.stdin);
+            child.stdin.end();
+        }
+        else {
+            child.stdin.end();
+        }
+    });
+}
 let detachedSubprocessRunner = defaultDetachedSubprocessRunner;
+let asyncSubprocessRunner = defaultAsyncSubprocessRunner;
 export function setSubprocessRunner(runner) {
     subprocessRunner = runner;
 }
@@ -52,6 +88,12 @@ export function setDetachedSubprocessRunner(runner) {
 export function resetDetachedSubprocessRunner() {
     detachedSubprocessRunner = defaultDetachedSubprocessRunner;
 }
+export function setAsyncSubprocessRunner(runner) {
+    asyncSubprocessRunner = runner;
+}
+export function resetAsyncSubprocessRunner() {
+    asyncSubprocessRunner = defaultAsyncSubprocessRunner;
+}
 /**
  * Run curl without capturing output (for interactive CLI use).
  */
@@ -71,89 +113,52 @@ export function runCaptured(args, timeout = 10) {
 export function runDetached(args) {
     detachedSubprocessRunner(args);
 }
-// Curl flags that don't affect the HTTP request semantics but may not be supported by URL extraction.
-const CURL_PASSTHROUGH_FLAGS = new Set(['-v', '--verbose']);
-function filterPassthroughFlags(args) {
-    return args.filter((arg) => !CURL_PASSTHROUGH_FLAGS.has(arg));
+/**
+ * Run curl asynchronously with output capture (for gateway proxy use).
+ */
+export function runAsync(args, options) {
+    return asyncSubprocessRunner(args, options);
 }
 /**
- * Parse the HTTP method from curl arguments. Defaults to GET unless -d / --data* is present
- * (which implies POST) or -X / --request overrides it.
+ * Extract the target URL argument from a curl invocation.
+ *
+ * Delegates curl flag parsing to `parseCurlArgs` from detent (which knows the
+ * full curl flag vocabulary) to determine the canonical request URL, and then
+ * returns the original, unnormalized argument string so callers can use it for
+ * positional substitution (gateway rewriting, Telegram URL rewriting, ...).
+ *
+ * Schemeless URLs (e.g. `www.example.com`) are supported: curl defaults them
+ * to `http://`, and we do the same when normalizing for the comparison.
+ * Only http(s) URLs are recognized; other schemes (ftp, file, ...) return
+ * null.
+ *
+ * Throws `CurlParseError` (from detent) when the arguments don't form a valid
+ * curl invocation (missing URL, malformed header, ...). The error message
+ * carries useful detail for the user, so callers should surface it rather
+ * than silently swallow it.
  */
-export function extractMethodFromCurlArguments(curlArguments) {
-    let method;
-    let hasData = false;
-    for (let i = 0; i < curlArguments.length; i++) {
-        const argument = curlArguments[i];
-        if (argument === '-X' || argument === '--request') {
-            method = curlArguments[i + 1]?.toUpperCase();
-            i++;
-        }
-        else if (argument === '-d' ||
-            argument === '--data' ||
-            argument === '--data-raw' ||
-            argument === '--data-binary' ||
-            argument === '--data-urlencode') {
-            hasData = true;
-            i++;
-        }
-    }
-    if (method !== undefined) {
-        return method;
+export function extractUrlFromCurlArguments(args) {
+    const parsedUrl = parseCurlArgs(args).url;
+    if (!parsedUrl.startsWith('http://') && !parsedUrl.startsWith('https://')) {
+        return null;
     }
-    return hasData ? 'POST' : 'GET';
-}
-/** Extract the request body from -d / --data* curl arguments. */
-export function extractBodyFromCurlArguments(curlArguments) {
-    for (let i = 0; i < curlArguments.length; i++) {
-        const argument = curlArguments[i];
-        if (argument === '-d' ||
-            argument === '--data' ||
-            argument === '--data-raw' ||
-            argument === '--data-binary') {
-            return curlArguments[i + 1] ?? '';
+    // Find the original input argument that produced this URL, so callers can
+    // substitute it in-place. Each candidate arg is normalized the same way
+    // curl / parseCurlArgs would (defaulting the scheme to http://) before the
+    // comparison.
+    for (const arg of args) {
+        if (arg === parsedUrl) {
+            return arg;
         }
-    }
-    return '';
-}
-/** Extract headers already present in curl arguments. */
-export function extractHeadersFromCurlArguments(curlArguments) {
-    const headers = {};
-    for (let i = 0; i < curlArguments.length; i++) {
-        const argument = curlArguments[i];
-        if (argument === '-H' || argument === '--header') {
-            const headerValue = curlArguments[i + 1];
-            if (headerValue !== undefined) {
-                const colonIndex = headerValue.indexOf(':');
-                if (colonIndex > 0) {
-                    const name = headerValue.slice(0, colonIndex).trim().toLowerCase();
-                    const value = headerValue.slice(colonIndex + 1).trim();
-                    headers[name] = value;
-                }
-            }
-            i++;
+        const withScheme = /^[a-zA-Z][a-zA-Z0-9+.-]*:\/\//.test(arg) ? arg : `http://${arg}`;
+        let normalized;
+        try {
+            normalized = new URL(withScheme).href;
         }
-    }
-    return headers;
-}
-export function extractUrlFromCurlArguments(args) {
-    const filteredArgs = filterPassthroughFlags(args);
-    // Simple URL extraction: look for arguments that look like URLs
-    // or parse known curl argument patterns
-    for (let i = 0; i < filteredArgs.length; i++) {
-        const arg = filteredArgs[i];
-        if (arg === undefined)
-            continue;
-        // Skip flags and their values
-        if (arg.startsWith('-')) {
-            // Skip flags that take a value
-            if (['-H', '-d', '-X', '-o', '-w', '-u', '-A', '-e', '-b', '-c', '-F', '-T'].includes(arg)) {
-                i++; // Skip the next argument which is the value
-            }
+        catch {
             continue;
         }
-        // This looks like a URL
-        if (arg.startsWith('http://') || arg.startsWith('https://')) {
+        if (normalized === parsedUrl) {
             return arg;
         }
     }

package/dist/src/curl.js.map

@@ -1 +1 @@
-{"version":3,"file":"curl.js","sourceRoot":"","sources":["../../src/curl.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,KAAK,EAAE,SAAS,EAAoB,MAAM,oBAAoB,CAAC;AACxE,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAuBrC,SAAS,uBAAuB,CAAC,IAAuB;IACtD,MAAM,MAAM,GAA6B,SAAS,CAAC,MAAM,CAAC,WAAW,EAAE,IAAgB,EAAE;QACvF,KAAK,EAAE,CAAC,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC;KACzC,CAAC,CAAC;IACH,OAAO;QACL,UAAU,EAAE,MAAM,CAAC,MAAM,IAAI,CAAC;QAC9B,MAAM,EAAE,EAAE;QACV,MAAM,EAAE,EAAE;KACX,CAAC;AACJ,CAAC;AAED,SAAS,gCAAgC,CAAC,IAAuB,EAAE,OAAe;IAChF,MAAM,MAAM,GAA6B,SAAS,CAAC,MAAM,CAAC,WAAW,EAAE,IAAgB,EAAE;QACvF,QAAQ,EAAE,OAAO;QACjB,OAAO,EAAE,OAAO,GAAG,IAAI;KACxB,CAAC,CAAC;IACH,OAAO;QACL,UAAU,EAAE,MAAM,CAAC,MAAM,IAAI,CAAC;QAC9B,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,MAAM,EAAE,MAAM,CAAC,MAAM;KACtB,CAAC;AACJ,CAAC;AAED,SAAS,+BAA+B,CAAC,IAAuB;IAC9D,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,WAAW,EAAE,IAAgB,EAAE;QACxD,KAAK,EAAE,QAAQ;QACf,QAAQ,EAAE,IAAI;KACf,CAAC,CAAC;IACH,KAAK,CAAC,KAAK,EAAE,CAAC;AAChB,CAAC;AAED,IAAI,gBAAgB,GAAqB,uBAAuB,CAAC;AACjE,IAAI,yBAAyB,GAA8B,gCAAgC,CAAC;AAC5F,IAAI,wBAAwB,GAA6B,+BAA+B,CAAC;AAEzF,MAAM,UAAU,mBAAmB,CAAC,MAAwB;IAC1D,gBAAgB,GAAG,MAAM,CAAC;AAC5B,CAAC;AAED,MAAM,UAAU,qBAAqB;IACnC,gBAAgB,GAAG,uBAAuB,CAAC;AAC7C,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,MAAiC;IAC5E,yBAAyB,GAAG,MAAM,CAAC;AACrC,CAAC;AAED,MAAM,UAAU,8BAA8B;IAC5C,yBAAyB,GAAG,gCAAgC,CAAC;AAC/D,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,MAAgC;IAC1E,wBAAwB,GAAG,MAAM,CAAC;AACpC,CAAC;AAED,MAAM,UAAU,6BAA6B;IAC3C,wBAAwB,GAAG,+BAA+B,CAAC;AAC7D,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,GAAG,CAAC,IAAuB;IACzC,OAAO,gBAAgB,CAAC,IAAI,CAAC,CAAC;AAChC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,WAAW,CAAC,IAAuB,EAAE,OAAO,GAAG,EAAE;IAC/D,OAAO,yBAAyB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AAClD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,IAAuB;IACjD,wBAAwB,CAAC,IAAI,CAAC,CAAC;AACjC,CAAC;AAED,sGAAsG;AACtG,MAAM,sBAAsB,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC;AAE5D,SAAS,sBAAsB,CAAC,IAAc;IAC5C,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,sBAAsB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;AAChE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,8BAA8B,CAAC,aAAgC;IAC7E,IAAI,MAA0B,CAAC;IAC/B,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,aAAa,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC9C,MAAM,QAAQ,GAAG,aAAa,CAAC,CAAC,CAAE,CAAC;QACnC,IAAI,QAAQ,KAAK,IAAI,IAAI,QAAQ,KAAK,WAAW,EAAE,CAAC;YAClD,MAAM,GAAG,aAAa,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC;YAC7C,CAAC,EAAE,CAAC;QACN,CAAC;aAAM,IACL,QAAQ,KAAK,IAAI;YACjB,QAAQ,KAAK,QAAQ;YACrB,QAAQ,KAAK,YAAY;YACzB,QAAQ,KAAK,eAAe;YAC5B,QAAQ,KAAK,kBAAkB,EAC/B,CAAC;YACD,OAAO,GAAG,IAAI,CAAC;YACf,CAAC,EAAE,CAAC;QACN,CAAC;IACH,CAAC;IACD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,OAAO,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC;AAClC,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,4BAA4B,CAAC,aAAgC;IAC3E,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,aAAa,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC9C,MAAM,QAAQ,GAAG,aAAa,CAAC,CAAC,CAAE,CAAC;QACnC,IACE,QAAQ,KAAK,IAAI;YACjB,QAAQ,KAAK,QAAQ;YACrB,QAAQ,KAAK,YAAY;YACzB,QAAQ,KAAK,eAAe,EAC5B,CAAC;YACD,OAAO,aAAa,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;QACpC,CAAC;IACH,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,yDAAyD;AACzD,MAAM,UAAU,+BAA+B,CAC7C,aAAgC;IAEhC,MAAM,OAAO,GAA2B,EAAE,CAAC;IAC3C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,aAAa,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC9C,MAAM,QAAQ,GAAG,aAAa,CAAC,CAAC,CAAE,CAAC;QACnC,IAAI,QAAQ,KAAK,IAAI,IAAI,QAAQ,KAAK,UAAU,EAAE,CAAC;YACjD,MAAM,WAAW,GAAG,aAAa,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YACzC,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;gBAC9B,MAAM,UAAU,GAAG,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;gBAC5C,IAAI,UAAU,GAAG,CAAC,EAAE,CAAC;oBACnB,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;oBACnE,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;oBACvD,OAAO,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;gBACxB,CAAC;YACH,CAAC;YACD,CAAC,EAAE,CAAC;QACN,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,IAAc;IACxD,MAAM,YAAY,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAC;IAElD,gEAAgE;IAChE,wCAAwC;IACxC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,YAAY,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC7C,MAAM,GAAG,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC;QAC5B,IAAI,GAAG,KAAK,SAAS;YAAE,SAAS;QAEhC,8BAA8B;QAC9B,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACxB,+BAA+B;YAC/B,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC3F,CAAC,EAAE,CAAC,CAAC,4CAA4C;YACnD,CAAC;YACD,SAAS;QACX,CAAC;QAED,wBAAwB;QACxB,IAAI,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAC5D,OAAO,GAAG,CAAC;QACb,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC"}
+{"version":3,"file":"curl.js","sourceRoot":"","sources":["../../src/curl.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,KAAK,EAAE,SAAS,EAAoB,MAAM,oBAAoB,CAAC;AACxE,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjE,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAErC,6EAA6E;AAC7E,2EAA2E;AAC3E,qCAAqC;AACrC,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,CAAC;AAuBzC,SAAS,uBAAuB,CAAC,IAAuB;IACtD,MAAM,MAAM,GAA6B,SAAS,CAAC,MAAM,CAAC,WAAW,EAAE,IAAgB,EAAE;QACvF,KAAK,EAAE,CAAC,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC;KACzC,CAAC,CAAC;IACH,OAAO;QACL,UAAU,EAAE,MAAM,CAAC,MAAM,IAAI,CAAC;QAC9B,MAAM,EAAE,EAAE;QACV,MAAM,EAAE,EAAE;KACX,CAAC;AACJ,CAAC;AAED,SAAS,gCAAgC,CAAC,IAAuB,EAAE,OAAe;IAChF,MAAM,MAAM,GAA6B,SAAS,CAAC,MAAM,CAAC,WAAW,EAAE,IAAgB,EAAE;QACvF,QAAQ,EAAE,OAAO;QACjB,OAAO,EAAE,OAAO,GAAG,IAAI;KACxB,CAAC,CAAC;IACH,OAAO;QACL,UAAU,EAAE,MAAM,CAAC,MAAM,IAAI,CAAC;QAC9B,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,MAAM,EAAE,MAAM,CAAC,MAAM;KACtB,CAAC;AACJ,CAAC;AAED,SAAS,+BAA+B,CAAC,IAAuB;IAC9D,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,WAAW,EAAE,IAAgB,EAAE;QACxD,KAAK,EAAE,QAAQ;QACf,QAAQ,EAAE,IAAI;KACf,CAAC,CAAC;IACH,KAAK,CAAC,KAAK,EAAE,CAAC;AAChB,CAAC;AAED,IAAI,gBAAgB,GAAqB,uBAAuB,CAAC;AACjE,IAAI,yBAAyB,GAA8B,gCAAgC,CAAC;AAkB5F,SAAS,4BAA4B,CACnC,IAAuB,EACvB,OAA4B;IAE5B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,WAAW,EAAE,IAAgB,EAAE;YACxD,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;SAChC,CAAC,CAAC;QAEH,MAAM,YAAY,GAAa,EAAE,CAAC;QAClC,MAAM,YAAY,GAAa,EAAE,CAAC;QAElC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACxC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC3B,CAAC,CAAC,CAAC;QAEH,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACxC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;QACtC,CAAC,CAAC,CAAC;QAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAE1B,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YACzB,OAAO,CAAC;gBACN,UAAU,EAAE,IAAI,IAAI,CAAC;gBACrB,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC;gBACnC,MAAM,EAAE,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;aAC9B,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,IAAI,OAAO,EAAE,KAAK,KAAK,SAAS,EAAE,CAAC;YACjC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YACjC,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;QACpB,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;QACpB,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,IAAI,wBAAwB,GAA6B,+BAA+B,CAAC;AACzF,IAAI,qBAAqB,GAA0B,4BAA4B,CAAC;AAEhF,MAAM,UAAU,mBAAmB,CAAC,MAAwB;IAC1D,gBAAgB,GAAG,MAAM,CAAC;AAC5B,CAAC;AAED,MAAM,UAAU,qBAAqB;IACnC,gBAAgB,GAAG,uBAAuB,CAAC;AAC7C,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,MAAiC;IAC5E,yBAAyB,GAAG,MAAM,CAAC;AACrC,CAAC;AAED,MAAM,UAAU,8BAA8B;IAC5C,yBAAyB,GAAG,gCAAgC,CAAC;AAC/D,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,MAAgC;IAC1E,wBAAwB,GAAG,MAAM,CAAC;AACpC,CAAC;AAED,MAAM,UAAU,6BAA6B;IAC3C,wBAAwB,GAAG,+BAA+B,CAAC;AAC7D,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,MAA6B;IACpE,qBAAqB,GAAG,MAAM,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,0BAA0B;IACxC,qBAAqB,GAAG,4BAA4B,CAAC;AACvD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,GAAG,CAAC,IAAuB;IACzC,OAAO,gBAAgB,CAAC,IAAI,CAAC,CAAC;AAChC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,WAAW,CAAC,IAAuB,EAAE,OAAO,GAAG,EAAE;IAC/D,OAAO,yBAAyB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AAClD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,IAAuB;IACjD,wBAAwB,CAAC,IAAI,CAAC,CAAC;AACjC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,QAAQ,CACtB,IAAuB,EACvB,OAA4B;IAE5B,OAAO,qBAAqB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AAC9C,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,2BAA2B,CAAC,IAAuB;IACjE,MAAM,SAAS,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC;IAC1C,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC1E,OAAO,IAAI,CAAC;IACd,CAAC;IACD,0EAA0E;IAC1E,wEAAwE;IACxE,2EAA2E;IAC3E,cAAc;IACd,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,OAAO,GAAG,CAAC;QACb,CAAC;QACD,MAAM,UAAU,GAAG,+BAA+B,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,GAAG,EAAE,CAAC;QACrF,IAAI,UAAkB,CAAC;QACvB,IAAI,CAAC;YACH,UAAU,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC;QACxC,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YAC7B,OAAO,GAAG,CAAC;QACb,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/src/curlInjection.d.ts

@@ -0,0 +1,46 @@
+/**
+ * Shared credential-injection pipeline used by both `latchkey curl` and the
+ * gateway's `/gateway/<url>` proxy.
+ *
+ * Given the raw curl arguments of an outgoing request, this function performs
+ * the permission check, URL extraction, service lookup, credential load and
+ * expiry/refresh steps, and returns the final argument list to pass to curl.
+ * Problems are reported as dedicated error subclasses. Actually invoking curl
+ * is left to the caller, so the CLI can inherit stdio while the gateway can
+ * stream request bodies and capture response headers.
+ */
+import type { ApiCredentialStore } from './apiCredentials/store.js';
+import type { ServiceRegistry } from './serviceRegistry.js';
+export declare class RequestNotPermittedError extends Error {
+    constructor();
+}
+export declare class UrlExtractionFailedError extends Error {
+    constructor(detail?: string);
+}
+export declare class NoServiceForUrlError extends Error {
+    readonly url: string;
+    constructor(url: string);
+}
+export declare class NoCredentialsForServiceError extends Error {
+    readonly serviceName: string;
+    constructor(serviceName: string);
+}
+export declare class CredentialsExpiredError extends Error {
+    readonly serviceName: string;
+    constructor(serviceName: string);
+}
+export interface CurlInjectionDependencies {
+    readonly registry: ServiceRegistry;
+    readonly checkPermission: (curlArguments: readonly string[], configPath: string, doNotUseBuiltinSchemas: boolean) => Promise<boolean>;
+    readonly permissionsConfigPath: string;
+    readonly permissionsDoNotUseBuiltinSchemas: boolean;
+    readonly passthroughUnknown: boolean;
+}
+/**
+ * Run the credential-injection pipeline for a curl invocation and return the
+ * final argument list to pass to curl. On problems, throws one of the error
+ * classes exported from this module (or a `PermissionCheckError` from the
+ * underlying permission check).
+ */
+export declare function prepareCurlInvocation(curlArguments: readonly string[], apiCredentialStore: ApiCredentialStore, dependencies: CurlInjectionDependencies): Promise<readonly string[]>;
+//# sourceMappingURL=curlInjection.d.ts.map

package/dist/src/curlInjection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"curlInjection.d.ts","sourceRoot":"","sources":["../../src/curlInjection.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAGH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAIpE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAE5D,qBAAa,wBAAyB,SAAQ,KAAK;;CAKlD;AAED,qBAAa,wBAAyB,SAAQ,KAAK;gBACrC,MAAM,CAAC,EAAE,MAAM;CAQ5B;AAED,qBAAa,oBAAqB,SAAQ,KAAK;IAC7C,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;gBAET,GAAG,EAAE,MAAM;CAKxB;AAED,qBAAa,4BAA6B,SAAQ,KAAK;IACrD,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;gBAEjB,WAAW,EAAE,MAAM;CAKhC;AAED,qBAAa,uBAAwB,SAAQ,KAAK;IAChD,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;gBAEjB,WAAW,EAAE,MAAM;CAKhC;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAC;IACnC,QAAQ,CAAC,eAAe,EAAE,CACxB,aAAa,EAAE,SAAS,MAAM,EAAE,EAChC,UAAU,EAAE,MAAM,EAClB,sBAAsB,EAAE,OAAO,KAC5B,OAAO,CAAC,OAAO,CAAC,CAAC;IACtB,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAC;IACvC,QAAQ,CAAC,iCAAiC,EAAE,OAAO,CAAC;IACpD,QAAQ,CAAC,kBAAkB,EAAE,OAAO,CAAC;CACtC;AAED;;;;;GAKG;AACH,wBAAsB,qBAAqB,CACzC,aAAa,EAAE,SAAS,MAAM,EAAE,EAChC,kBAAkB,EAAE,kBAAkB,EACtC,YAAY,EAAE,yBAAyB,GACtC,OAAO,CAAC,SAAS,MAAM,EAAE,CAAC,CA+C5B"}

package/dist/src/curlInjection.js

@@ -0,0 +1,99 @@
+/**
+ * Shared credential-injection pipeline used by both `latchkey curl` and the
+ * gateway's `/gateway/<url>` proxy.
+ *
+ * Given the raw curl arguments of an outgoing request, this function performs
+ * the permission check, URL extraction, service lookup, credential load and
+ * expiry/refresh steps, and returns the final argument list to pass to curl.
+ * Problems are reported as dedicated error subclasses. Actually invoking curl
+ * is left to the caller, so the CLI can inherit stdio while the gateway can
+ * stream request bodies and capture response headers.
+ */
+import { maybeRefreshCredentials } from './apiCredentials/utils.js';
+import { CurlParseError, extractUrlFromCurlArguments } from './curl.js';
+import { ErrorMessages } from './errorMessages.js';
+export class RequestNotPermittedError extends Error {
+    constructor() {
+        super(ErrorMessages.requestNotPermitted);
+        this.name = 'RequestNotPermittedError';
+    }
+}
+export class UrlExtractionFailedError extends Error {
+    constructor(detail) {
+        super(detail === undefined
+            ? ErrorMessages.couldNotExtractUrl
+            : `${ErrorMessages.couldNotExtractUrlBrief} ${detail}`);
+        this.name = 'UrlExtractionFailedError';
+    }
+}
+export class NoServiceForUrlError extends Error {
+    url;
+    constructor(url) {
+        super(ErrorMessages.noServiceMatchesUrl(url));
+        this.name = 'NoServiceForUrlError';
+        this.url = url;
+    }
+}
+export class NoCredentialsForServiceError extends Error {
+    serviceName;
+    constructor(serviceName) {
+        super(ErrorMessages.noCredentialsFound(serviceName));
+        this.name = 'NoCredentialsForServiceError';
+        this.serviceName = serviceName;
+    }
+}
+export class CredentialsExpiredError extends Error {
+    serviceName;
+    constructor(serviceName) {
+        super(ErrorMessages.credentialsExpired(serviceName));
+        this.name = 'CredentialsExpiredError';
+        this.serviceName = serviceName;
+    }
+}
+/**
+ * Run the credential-injection pipeline for a curl invocation and return the
+ * final argument list to pass to curl. On problems, throws one of the error
+ * classes exported from this module (or a `PermissionCheckError` from the
+ * underlying permission check).
+ */
+export async function prepareCurlInvocation(curlArguments, apiCredentialStore, dependencies) {
+    const allowed = await dependencies.checkPermission(curlArguments, dependencies.permissionsConfigPath, dependencies.permissionsDoNotUseBuiltinSchemas);
+    if (!allowed) {
+        throw new RequestNotPermittedError();
+    }
+    let url;
+    try {
+        url = extractUrlFromCurlArguments(curlArguments);
+    }
+    catch (error) {
+        if (error instanceof CurlParseError) {
+            throw new UrlExtractionFailedError(error.message);
+        }
+        throw error;
+    }
+    if (url === null) {
+        throw new UrlExtractionFailedError();
+    }
+    const service = dependencies.registry.getByUrl(url);
+    if (service === null) {
+        if (dependencies.passthroughUnknown) {
+            return [...curlArguments];
+        }
+        throw new NoServiceForUrlError(url);
+    }
+    let apiCredentials = apiCredentialStore.get(service.name);
+    if (apiCredentials === null) {
+        if (dependencies.passthroughUnknown) {
+            return [...curlArguments];
+        }
+        throw new NoCredentialsForServiceError(service.name);
+    }
+    if (apiCredentials.isExpired() === true) {
+        apiCredentials = await maybeRefreshCredentials(service, apiCredentials, apiCredentialStore);
+        if (apiCredentials.isExpired() === true) {
+            throw new CredentialsExpiredError(service.name);
+        }
+    }
+    return await apiCredentials.injectIntoCurlCall(curlArguments);
+}
+//# sourceMappingURL=curlInjection.js.map

package/dist/src/curlInjection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"curlInjection.js","sourceRoot":"","sources":["../../src/curlInjection.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAIH,OAAO,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AACpE,OAAO,EAAE,cAAc,EAAE,2BAA2B,EAAE,MAAM,WAAW,CAAC;AACxE,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAGnD,MAAM,OAAO,wBAAyB,SAAQ,KAAK;IACjD;QACE,KAAK,CAAC,aAAa,CAAC,mBAAmB,CAAC,CAAC;QACzC,IAAI,CAAC,IAAI,GAAG,0BAA0B,CAAC;IACzC,CAAC;CACF;AAED,MAAM,OAAO,wBAAyB,SAAQ,KAAK;IACjD,YAAY,MAAe;QACzB,KAAK,CACH,MAAM,KAAK,SAAS;YAClB,CAAC,CAAC,aAAa,CAAC,kBAAkB;YAClC,CAAC,CAAC,GAAG,aAAa,CAAC,uBAAuB,IAAI,MAAM,EAAE,CACzD,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,0BAA0B,CAAC;IACzC,CAAC;CACF;AAED,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IACpC,GAAG,CAAS;IAErB,YAAY,GAAW;QACrB,KAAK,CAAC,aAAa,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC;QAC9C,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;QACnC,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;IACjB,CAAC;CACF;AAED,MAAM,OAAO,4BAA6B,SAAQ,KAAK;IAC5C,WAAW,CAAS;IAE7B,YAAY,WAAmB;QAC7B,KAAK,CAAC,aAAa,CAAC,kBAAkB,CAAC,WAAW,CAAC,CAAC,CAAC;QACrD,IAAI,CAAC,IAAI,GAAG,8BAA8B,CAAC;QAC3C,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;IACjC,CAAC;CACF;AAED,MAAM,OAAO,uBAAwB,SAAQ,KAAK;IACvC,WAAW,CAAS;IAE7B,YAAY,WAAmB;QAC7B,KAAK,CAAC,aAAa,CAAC,kBAAkB,CAAC,WAAW,CAAC,CAAC,CAAC;QACrD,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;QACtC,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;IACjC,CAAC;CACF;AAcD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,aAAgC,EAChC,kBAAsC,EACtC,YAAuC;IAEvC,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,eAAe,CAChD,aAAa,EACb,YAAY,CAAC,qBAAqB,EAClC,YAAY,CAAC,iCAAiC,CAC/C,CAAC;IACF,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,wBAAwB,EAAE,CAAC;IACvC,CAAC;IAED,IAAI,GAAkB,CAAC;IACvB,IAAI,CAAC;QACH,GAAG,GAAG,2BAA2B,CAAC,aAAa,CAAC,CAAC;IACnD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,cAAc,EAAE,CAAC;YACpC,MAAM,IAAI,wBAAwB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACpD,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;IACD,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;QACjB,MAAM,IAAI,wBAAwB,EAAE,CAAC;IACvC,CAAC;IAED,MAAM,OAAO,GAAG,YAAY,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IACpD,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACrB,IAAI,YAAY,CAAC,kBAAkB,EAAE,CAAC;YACpC,OAAO,CAAC,GAAG,aAAa,CAAC,CAAC;QAC5B,CAAC;QACD,MAAM,IAAI,oBAAoB,CAAC,GAAG,CAAC,CAAC;IACtC,CAAC;IAED,IAAI,cAAc,GAA0B,kBAAkB,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACjF,IAAI,cAAc,KAAK,IAAI,EAAE,CAAC;QAC5B,IAAI,YAAY,CAAC,kBAAkB,EAAE,CAAC;YACpC,OAAO,CAAC,GAAG,aAAa,CAAC,CAAC;QAC5B,CAAC;QACD,MAAM,IAAI,4BAA4B,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACvD,CAAC;IAED,IAAI,cAAc,CAAC,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC;QACxC,cAAc,GAAG,MAAM,uBAAuB,CAAC,OAAO,EAAE,cAAc,EAAE,kBAAkB,CAAC,CAAC;QAC5F,IAAI,cAAc,CAAC,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC;YACxC,MAAM,IAAI,uBAAuB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAClD,CAAC;IACH,CAAC;IAED,OAAO,MAAM,cAAc,CAAC,kBAAkB,CAAC,aAAa,CAAC,CAAC;AAChE,CAAC"}

package/dist/src/errorMessages.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Centralized error messages used by both the CLI and the gateway.
+ */
+export declare const ErrorMessages: {
+    readonly requestNotPermitted: "Error: Request not permitted by the user.";
+    readonly couldNotExtractUrl: "Error: Could not extract URL from curl arguments. Only http(s) requests are supported.";
+    readonly couldNotExtractUrlBrief: "Error: Could not extract URL from curl arguments.";
+    readonly upstreamRequestFailed: "Error: Upstream request failed.";
+    readonly requestBodyTooLarge: "Error: Request body too large.";
+    readonly noServiceMatchesUrl: (url: string) => string;
+    readonly noCredentialsFound: (serviceName: string) => string;
+    readonly credentialsExpired: (serviceName: string) => string;
+};
+//# sourceMappingURL=errorMessages.d.ts.map

package/dist/src/errorMessages.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errorMessages.d.ts","sourceRoot":"","sources":["../../src/errorMessages.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,eAAO,MAAM,aAAa;;;;;;wCAQC,MAAM,KAAG,MAAM;+CAIR,MAAM,KAAG,MAAM;+CAOf,MAAM,KAAG,MAAM;CAMvC,CAAC"}

package/dist/src/errorMessages.js

@@ -0,0 +1,22 @@
+/**
+ * Centralized error messages used by both the CLI and the gateway.
+ */
+export const ErrorMessages = {
+    requestNotPermitted: 'Error: Request not permitted by the user.',
+    couldNotExtractUrl: 'Error: Could not extract URL from curl arguments. Only http(s) requests are supported.',
+    couldNotExtractUrlBrief: 'Error: Could not extract URL from curl arguments.',
+    upstreamRequestFailed: 'Error: Upstream request failed.',
+    requestBodyTooLarge: 'Error: Request body too large.',
+    noServiceMatchesUrl(url) {
+        return `Error: No service matches URL: ${url}`;
+    },
+    noCredentialsFound(serviceName) {
+        return (`Error: No credentials found for ${serviceName}.\n` +
+            `Run 'latchkey auth browser ${serviceName}' or 'latchkey auth set ${serviceName}' first.`);
+    },
+    credentialsExpired(serviceName) {
+        return (`Error: Credentials for ${serviceName} are expired.\n` +
+            `Run 'latchkey auth browser ${serviceName}' or 'latchkey auth set ${serviceName}' to refresh them.`);
+    },
+};
+//# sourceMappingURL=errorMessages.js.map

package/dist/src/errorMessages.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errorMessages.js","sourceRoot":"","sources":["../../src/errorMessages.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,mBAAmB,EAAE,2CAA2C;IAChE,kBAAkB,EAChB,wFAAwF;IAC1F,uBAAuB,EAAE,mDAAmD;IAC5E,qBAAqB,EAAE,iCAAiC;IACxD,mBAAmB,EAAE,gCAAgC;IAErD,mBAAmB,CAAC,GAAW;QAC7B,OAAO,kCAAkC,GAAG,EAAE,CAAC;IACjD,CAAC;IAED,kBAAkB,CAAC,WAAmB;QACpC,OAAO,CACL,mCAAmC,WAAW,KAAK;YACnD,8BAA8B,WAAW,2BAA2B,WAAW,UAAU,CAC1F,CAAC;IACJ,CAAC;IAED,kBAAkB,CAAC,WAAmB;QACpC,OAAO,CACL,0BAA0B,WAAW,iBAAiB;YACtD,8BAA8B,WAAW,2BAA2B,WAAW,oBAAoB,CACpG,CAAC;IACJ,CAAC;CACO,CAAC"}

package/dist/src/gateway/client.d.ts

@@ -0,0 +1,32 @@
+/**
+ * Client used by the CLI when `LATCHKEY_GATEWAY` is set.
+ *
+ * Commands are forwarded to the gateway's `/latchkey/` RPC endpoint, while
+ * `latchkey curl` has its target URL rewritten to route through `/gateway/`.
+ */
+import type { LatchkeyRequest } from './latchkeyEndpoint.js';
+export declare class GatewayRequestError extends Error {
+    readonly statusCode: number;
+    constructor(message: string, statusCode: number);
+}
+export declare class GatewayCommandNotSupportedError extends Error {
+    constructor(commandName: string);
+}
+export declare class GatewayCurlRewriteError extends Error {
+    constructor(message: string);
+}
+/**
+ * POST a request to the gateway's `/latchkey/` endpoint and return its `result`.
+ */
+export declare function callLatchkeyEndpoint(gatewayUrl: string, request: LatchkeyRequest): Promise<unknown>;
+/**
+ * Build the URL used to proxy a `latchkey curl` invocation through the
+ * gateway's `/gateway/` endpoint.
+ */
+export declare function buildGatewayProxyUrl(gatewayUrl: string, targetUrl: string): string;
+/**
+ * Rewrite a curl argument list so the target URL points at the gateway's
+ * `/gateway/<target>` endpoint. Returns a new array; the original is unchanged.
+ */
+export declare function rewriteCurlArgumentsForGateway(curlArguments: readonly string[], targetUrl: string, gatewayUrl: string): readonly string[];
+//# sourceMappingURL=client.d.ts.map

package/dist/src/gateway/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../../src/gateway/client.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAE7D,qBAAa,mBAAoB,SAAQ,KAAK;IAC5C,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;gBAEhB,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM;CAKhD;AAED,qBAAa,+BAAgC,SAAQ,KAAK;gBAC5C,WAAW,EAAE,MAAM;CAOhC;AAED,qBAAa,uBAAwB,SAAQ,KAAK;gBACpC,OAAO,EAAE,MAAM;CAI5B;AAOD;;GAEG;AACH,wBAAsB,oBAAoB,CACxC,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,eAAe,GACvB,OAAO,CAAC,OAAO,CAAC,CAoClB;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAElF;AAED;;;GAGG;AACH,wBAAgB,8BAA8B,CAC5C,aAAa,EAAE,SAAS,MAAM,EAAE,EAChC,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,GACjB,SAAS,MAAM,EAAE,CAkBnB"}

package/dist/src/gateway/client.js

@@ -0,0 +1,89 @@
+/**
+ * Client used by the CLI when `LATCHKEY_GATEWAY` is set.
+ *
+ * Commands are forwarded to the gateway's `/latchkey/` RPC endpoint, while
+ * `latchkey curl` has its target URL rewritten to route through `/gateway/`.
+ */
+export class GatewayRequestError extends Error {
+    statusCode;
+    constructor(message, statusCode) {
+        super(message);
+        this.name = 'GatewayRequestError';
+        this.statusCode = statusCode;
+    }
+}
+export class GatewayCommandNotSupportedError extends Error {
+    constructor(commandName) {
+        super(`'${commandName}' cannot be invoked when LATCHKEY_GATEWAY is set. ` +
+            `Unset the environment variable to run it locally.`);
+        this.name = 'GatewayCommandNotSupportedError';
+    }
+}
+export class GatewayCurlRewriteError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'GatewayCurlRewriteError';
+    }
+}
+function buildEndpointUrl(gatewayUrl, path) {
+    const base = gatewayUrl.replace(/\/+$/, '');
+    return `${base}${path}`;
+}
+/**
+ * POST a request to the gateway's `/latchkey/` endpoint and return its `result`.
+ */
+export async function callLatchkeyEndpoint(gatewayUrl, request) {
+    const endpoint = buildEndpointUrl(gatewayUrl, '/latchkey');
+    let response;
+    try {
+        response = await fetch(endpoint, {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/json' },
+            body: JSON.stringify(request),
+        });
+    }
+    catch (error) {
+        const message = error instanceof Error ? error.message : String(error);
+        throw new GatewayRequestError(`Failed to reach latchkey gateway at ${endpoint}: ${message}`, 0);
+    }
+    const bodyText = await response.text();
+    let parsedBody;
+    try {
+        parsedBody =
+            bodyText === '' ? {} : JSON.parse(bodyText);
+    }
+    catch {
+        throw new GatewayRequestError(`Latchkey gateway returned invalid JSON (status ${response.status.toString()}): ${bodyText}`, response.status);
+    }
+    if (!response.ok) {
+        const message = typeof parsedBody.error === 'string'
+            ? parsedBody.error
+            : `Latchkey gateway returned status ${response.status.toString()}`;
+        throw new GatewayRequestError(message, response.status);
+    }
+    return parsedBody.result ?? null;
+}
+/**
+ * Build the URL used to proxy a `latchkey curl` invocation through the
+ * gateway's `/gateway/` endpoint.
+ */
+export function buildGatewayProxyUrl(gatewayUrl, targetUrl) {
+    return `${buildEndpointUrl(gatewayUrl, '/gateway/')}${targetUrl}`;
+}
+/**
+ * Rewrite a curl argument list so the target URL points at the gateway's
+ * `/gateway/<target>` endpoint. Returns a new array; the original is unchanged.
+ */
+export function rewriteCurlArgumentsForGateway(curlArguments, targetUrl, gatewayUrl) {
+    const occurrences = curlArguments.reduce((count, argument) => (argument === targetUrl ? count + 1 : count), 0);
+    if (occurrences === 0) {
+        throw new GatewayCurlRewriteError(`Target URL '${targetUrl}' not found in curl arguments; refusing to rewrite.`);
+    }
+    if (occurrences > 1) {
+        throw new GatewayCurlRewriteError(`Target URL '${targetUrl}' appears ${occurrences.toString()} times in curl arguments; ` +
+            `refusing to rewrite to avoid ambiguous substitution.`);
+    }
+    const proxyUrl = buildGatewayProxyUrl(gatewayUrl, targetUrl);
+    return curlArguments.map((argument) => (argument === targetUrl ? proxyUrl : argument));
+}
+//# sourceMappingURL=client.js.map

package/dist/src/gateway/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../../../src/gateway/client.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IACnC,UAAU,CAAS;IAE5B,YAAY,OAAe,EAAE,UAAkB;QAC7C,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;QAClC,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;CACF;AAED,MAAM,OAAO,+BAAgC,SAAQ,KAAK;IACxD,YAAY,WAAmB;QAC7B,KAAK,CACH,IAAI,WAAW,oDAAoD;YACjE,mDAAmD,CACtD,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,iCAAiC,CAAC;IAChD,CAAC;CACF;AAED,MAAM,OAAO,uBAAwB,SAAQ,KAAK;IAChD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;IACxC,CAAC;CACF;AAED,SAAS,gBAAgB,CAAC,UAAkB,EAAE,IAAY;IACxD,MAAM,IAAI,GAAG,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC5C,OAAO,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC;AAC1B,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,UAAkB,EAClB,OAAwB;IAExB,MAAM,QAAQ,GAAG,gBAAgB,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;IAE3D,IAAI,QAAkB,CAAC;IACvB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,KAAK,CAAC,QAAQ,EAAE;YAC/B,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;SAC9B,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvE,MAAM,IAAI,mBAAmB,CAAC,uCAAuC,QAAQ,KAAK,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;IAClG,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IACvC,IAAI,UAAgD,CAAC;IACrD,IAAI,CAAC;QACH,UAAU;YACR,QAAQ,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,CAA0C,CAAC;IAC1F,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,mBAAmB,CAC3B,kDAAkD,QAAQ,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,QAAQ,EAAE,EAC5F,QAAQ,CAAC,MAAM,CAChB,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,OAAO,GACX,OAAO,UAAU,CAAC,KAAK,KAAK,QAAQ;YAClC,CAAC,CAAC,UAAU,CAAC,KAAK;YAClB,CAAC,CAAC,oCAAoC,QAAQ,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC;QACvE,MAAM,IAAI,mBAAmB,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC1D,CAAC;IAED,OAAO,UAAU,CAAC,MAAM,IAAI,IAAI,CAAC;AACnC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAAC,UAAkB,EAAE,SAAiB;IACxE,OAAO,GAAG,gBAAgB,CAAC,UAAU,EAAE,WAAW,CAAC,GAAG,SAAS,EAAE,CAAC;AACpE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,8BAA8B,CAC5C,aAAgC,EAChC,SAAiB,EACjB,UAAkB;IAElB,MAAM,WAAW,GAAG,aAAa,CAAC,MAAM,CACtC,CAAC,KAAK,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,EACjE,CAAC,CACF,CAAC;IACF,IAAI,WAAW,KAAK,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,uBAAuB,CAC/B,eAAe,SAAS,qDAAqD,CAC9E,CAAC;IACJ,CAAC;IACD,IAAI,WAAW,GAAG,CAAC,EAAE,CAAC;QACpB,MAAM,IAAI,uBAAuB,CAC/B,eAAe,SAAS,aAAa,WAAW,CAAC,QAAQ,EAAE,4BAA4B;YACrF,sDAAsD,CACzD,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,oBAAoB,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;IAC7D,OAAO,aAAa,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;AACzF,CAAC"}

package/dist/src/gateway/gatewayEndpoint.d.ts

@@ -0,0 +1,43 @@
+/**
+ * HTTP handler for the `/gateway/<target-url>` proxy endpoint.
+ *
+ * Forwards the incoming HTTP request through latchkey's credential injection
+ * pipeline (via `curl`) to the target URL and streams the upstream response
+ * back to the client.
+ */
+import * as http from 'node:http';
+import type { ApiCredentialStore } from '../apiCredentials/store.js';
+import type { CliDependencies } from '../cliCommands.js';
+export declare const GATEWAY_PATH_PREFIX = "/gateway/";
+export declare class BodyTooLargeError extends Error {
+    constructor();
+}
+export interface GatewayOptions {
+    readonly port: number;
+    readonly host: string;
+    readonly maxBodySize: number;
+}
+/**
+ * Extract the target URL from a raw gateway request URL.
+ * Strips the `/gateway/` prefix and returns the target URL.
+ * Returns null if the path doesn't start with `/gateway/` or the target URL is invalid.
+ */
+export declare function extractTargetUrl(rawUrl: string): string | null;
+/**
+ * Build curl arguments from an HTTP request's components.
+ * Strips hop-by-hop headers and constructs a curl-compatible argument array.
+ */
+export declare function buildCurlArguments(method: string, headers: ReadonlyMap<string, string>, targetUrl: string, hasBody: boolean): readonly string[];
+/**
+ * Parse response headers from curl's -D output.
+ * Returns the status code from the last status line and all response headers.
+ */
+export declare function parseResponseHeaders(headerDump: string): {
+    statusCode: number;
+    headers: ReadonlyMap<string, readonly string[]>;
+};
+/**
+ * Execute a proxied request through the credential injection pipeline.
+ */
+export declare function handleGatewayRequest(request: http.IncomingMessage, response: http.ServerResponse, targetUrl: string, deps: CliDependencies, apiCredentialStore: ApiCredentialStore, options: GatewayOptions): Promise<void>;
+//# sourceMappingURL=gatewayEndpoint.d.ts.map

package/dist/src/gateway/gatewayEndpoint.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gatewayEndpoint.d.ts","sourceRoot":"","sources":["../../../src/gateway/gatewayEndpoint.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAIlC,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAErE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AA2BzD,eAAO,MAAM,mBAAmB,cAAc,CAAC;AAE/C,qBAAa,iBAAkB,SAAQ,KAAK;;CAK3C;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAwBD;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAU9D;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,EACpC,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,OAAO,GACf,SAAS,MAAM,EAAE,CAqBnB;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,UAAU,EAAE,MAAM,GAAG;IACxD,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,WAAW,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC,CAAC;CACjD,CAiCA;AAkED;;GAEG;AACH,wBAAsB,oBAAoB,CACxC,OAAO,EAAE,IAAI,CAAC,eAAe,EAC7B,QAAQ,EAAE,IAAI,CAAC,cAAc,EAC7B,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,eAAe,EACrB,kBAAkB,EAAE,kBAAkB,EACtC,OAAO,EAAE,cAAc,GACtB,OAAO,CAAC,IAAI,CAAC,CA6Hf"}