localant 1.0.1 → 1.1.0

package/packages/cli/dist/serveo-setup.js

@@ -0,0 +1,168 @@
+import { spawn, execFileSync } from "node:child_process";
+import fs from "node:fs";
+import os from "node:os";
+import path from "node:path";
+import { c, ok, warn, openBrowser } from "./util.js";
+/** Candidate default SSH public keys, in the order ssh itself prefers them. */
+const SSH_PUBKEYS = ["id_ed25519.pub", "id_rsa.pub", "id_ecdsa.pub"];
+function sshDir() {
+    return path.join(os.homedir(), ".ssh");
+}
+/** Returns the first existing default SSH public key path, or undefined. */
+function findSshPublicKey() {
+    for (const name of SSH_PUBKEYS) {
+        const p = path.join(sshDir(), name);
+        if (fs.existsSync(p))
+            return p;
+    }
+    return undefined;
+}
+/**
+ * Ensure an SSH key pair exists. If none is present, generate a passphrase-less
+ * ed25519 key non-interactively. Returns the public key path.
+ */
+function ensureSshKey() {
+    const existing = findSshPublicKey();
+    if (existing)
+        return existing;
+    const dir = sshDir();
+    fs.mkdirSync(dir, { recursive: true, mode: 0o700 });
+    const keyPath = path.join(dir, "id_ed25519");
+    // -N "" = no passphrase, -q = quiet. execFileSync avoids shell injection.
+    execFileSync("ssh-keygen", ["-t", "ed25519", "-N", "", "-f", keyPath, "-q"], { stdio: "ignore" });
+    console.log(ok(`Generated SSH key: ${keyPath}.pub`));
+    return `${keyPath}.pub`;
+}
+/**
+ * Parse accumulated serveo SSH banner output into a registration verdict.
+ * Returns null until the decisive "Forwarding HTTP traffic from …" line (always
+ * emitted last) has arrived, so callers can keep buffering. Pure + synchronous
+ * to keep the spawn logic thin and unit-testable.
+ */
+export function parseServeoBanner(acc, subdomain) {
+    const fwd = acc.match(/Forwarding HTTP traffic from (https:\/\/\S+)/i);
+    if (!fwd || !fwd[1])
+        return null;
+    const url = fwd[1];
+    const consoleUrl = acc.match(/https:\/\/console\.serveo\.net\/ssh\/keys\?add=\S+/i)?.[0];
+    const needsRegistration = /register your SSH public key/i.test(acc);
+    const host = url.replace(/^https:\/\//, "");
+    const registered = !needsRegistration && host.startsWith(`${subdomain}.`);
+    return { registered, consoleUrl, url };
+}
+/**
+ * Open a short-lived serveo SSH tunnel and inspect its banner to determine
+ * whether the SSH key is registered (fixed subdomain granted) or not. Never
+ * leaves a process behind — the child is always killed before resolving.
+ */
+export function checkServeoRegistration(subdomain, port, timeoutMs = 15000) {
+    return new Promise((resolve) => {
+        const args = [
+            "-R",
+            `${subdomain}:80:127.0.0.1:${port}`,
+            "-o",
+            "StrictHostKeyChecking=no",
+            "-o",
+            "ConnectTimeout=10",
+            "serveo.net",
+        ];
+        const child = spawn("ssh", args, { shell: false });
+        let acc = "";
+        let done = false;
+        const finish = (r) => {
+            if (done)
+                return;
+            done = true;
+            clearTimeout(timer);
+            try {
+                child.stdout?.removeAllListeners();
+                child.stderr?.removeAllListeners();
+                child.removeAllListeners();
+                child.kill("SIGTERM");
+            }
+            catch {
+                /* ignore */
+            }
+            resolve(r);
+        };
+        const onData = (buf) => {
+            acc += buf.toString("utf8");
+            // The "Forwarding HTTP traffic from …" line is emitted last in both the
+            // registered and unregistered cases, so once we see it the accumulated
+            // buffer already contains the registration notice + console URL (if any).
+            const verdict = parseServeoBanner(acc, subdomain);
+            if (verdict)
+                finish(verdict);
+        };
+        child.stdout.on("data", onData);
+        child.stderr.on("data", onData);
+        child.on("error", () => finish({ registered: false }));
+        const timer = setTimeout(() => {
+            const consoleUrl = acc.match(/https:\/\/console\.serveo\.net\/ssh\/keys\?add=\S+/i)?.[0];
+            finish({ registered: false, consoleUrl });
+        }, timeoutMs);
+    });
+}
+const sleep = (ms) => new Promise((r) => setTimeout(r, ms));
+/**
+ * Make sure the user's SSH key is registered with Serveo so the configured
+ * fixed subdomain is granted on every restart.
+ *
+ * - If a key is already registered, returns immediately (no prompts).
+ * - Otherwise generates a key if needed, shows it, opens the pre-filled
+ *   registration page, and polls until the user completes the one-time
+ *   browser login — then continues automatically.
+ *
+ * Returns true if registration is confirmed, false if the user should proceed
+ * without a guaranteed fixed URL (timeout / opted out).
+ */
+export async function ensureServeoRegistration(subdomain, port, opts = {}) {
+    const pubKeyPath = ensureSshKey();
+    process.stdout.write(c.gray("Checking Serveo SSH key registration… "));
+    const first = await checkServeoRegistration(subdomain, port);
+    if (first.registered) {
+        process.stdout.write(c.green("already registered\n"));
+        console.log(ok(`Fixed URL ready: ${c.cyan(`https://${subdomain}.serveousercontent.com`)}`));
+        return true;
+    }
+    process.stdout.write(c.yellow("not registered\n"));
+    const consoleUrl = first.consoleUrl ?? "https://console.serveo.net/ssh/keys";
+    const pubKey = (() => {
+        try {
+            return fs.readFileSync(pubKeyPath, "utf8").trim();
+        }
+        catch {
+            return "(unable to read public key)";
+        }
+    })();
+    console.log("");
+    console.log(c.bold("One-time Serveo SSH key registration (needed for a permanent URL):"));
+    console.log(`  1. A browser will open ${c.cyan("console.serveo.net")} (your key is pre-filled).`);
+    console.log("  2. Sign in with Google or GitHub and confirm adding the key.");
+    console.log(c.gray("     Your public key:"));
+    console.log(c.gray(`       ${pubKey}`));
+    console.log(c.gray(`     Registration URL: ${consoleUrl}`));
+    console.log("");
+    if (!opts.noOpen)
+        openBrowser(consoleUrl);
+    // Poll until serveo grants the fixed subdomain. ~2 min budget, zero typing.
+    const maxAttempts = 24;
+    const intervalMs = 5000;
+    process.stdout.write(c.gray("Waiting for registration to complete"));
+    for (let i = 0; i < maxAttempts; i++) {
+        await sleep(intervalMs);
+        process.stdout.write(c.gray("."));
+        const check = await checkServeoRegistration(subdomain, port);
+        if (check.registered) {
+            process.stdout.write(c.green(" done\n"));
+            console.log(ok(`SSH key registered. Fixed URL: ${c.cyan(`https://${subdomain}.serveousercontent.com`)}`));
+            return true;
+        }
+    }
+    process.stdout.write(c.yellow(" timed out\n"));
+    console.log(warn("Registration not detected yet. The tunnel will still start, but the URL may " +
+        "change until you finish registering. Re-run `localant setup` after registering, " +
+        `or open ${consoleUrl} manually.`));
+    return false;
+}
+//# sourceMappingURL=serveo-setup.js.map

package/packages/cli/dist/serveo-setup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"serveo-setup.js","sourceRoot":"","sources":["../src/serveo-setup.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAErD,+EAA+E;AAC/E,MAAM,WAAW,GAAG,CAAC,gBAAgB,EAAE,YAAY,EAAE,cAAc,CAAC,CAAC;AAErE,SAAS,MAAM;IACb,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,MAAM,CAAC,CAAC;AACzC,CAAC;AAED,4EAA4E;AAC5E,SAAS,gBAAgB;IACvB,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;QAC/B,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,IAAI,CAAC,CAAC;QACpC,IAAI,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC;YAAE,OAAO,CAAC,CAAC;IACjC,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;GAGG;AACH,SAAS,YAAY;IACnB,MAAM,QAAQ,GAAG,gBAAgB,EAAE,CAAC;IACpC,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAE9B,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC;IACrB,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACpD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;IAC7C,0EAA0E;IAC1E,YAAY,CAAC,YAAY,EAAE,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;IAClG,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,sBAAsB,OAAO,MAAM,CAAC,CAAC,CAAC;IACrD,OAAO,GAAG,OAAO,MAAM,CAAC;AAC1B,CAAC;AAWD;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,GAAW,EAAE,SAAiB;IAC9D,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACvE,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACjC,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;IACnB,MAAM,UAAU,GAAG,GAAG,CAAC,KAAK,CAAC,qDAAqD,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACzF,MAAM,iBAAiB,GAAG,+BAA+B,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACpE,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;IAC5C,MAAM,UAAU,GAAG,CAAC,iBAAiB,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,SAAS,GAAG,CAAC,CAAC;IAC1E,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC;AACzC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CAAC,SAAiB,EAAE,IAAY,EAAE,SAAS,GAAG,KAAK;IACxF,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,IAAI,GAAG;YACX,IAAI;YACJ,GAAG,SAAS,iBAAiB,IAAI,EAAE;YACnC,IAAI;YACJ,0BAA0B;YAC1B,IAAI;YACJ,mBAAmB;YACnB,YAAY;SACb,CAAC;QACF,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QACnD,IAAI,GAAG,GAAG,EAAE,CAAC;QACb,IAAI,IAAI,GAAG,KAAK,CAAC;QACjB,MAAM,MAAM,GAAG,CAAC,CAAc,EAAE,EAAE;YAChC,IAAI,IAAI;gBAAE,OAAO;YACjB,IAAI,GAAG,IAAI,CAAC;YACZ,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,IAAI,CAAC;gBACH,KAAK,CAAC,MAAM,EAAE,kBAAkB,EAAE,CAAC;gBACnC,KAAK,CAAC,MAAM,EAAE,kBAAkB,EAAE,CAAC;gBACnC,KAAK,CAAC,kBAAkB,EAAE,CAAC;gBAC3B,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACxB,CAAC;YAAC,MAAM,CAAC;gBACP,YAAY;YACd,CAAC;YACD,OAAO,CAAC,CAAC,CAAC,CAAC;QACb,CAAC,CAAC;QAEF,MAAM,MAAM,GAAG,CAAC,GAAW,EAAE,EAAE;YAC7B,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAC5B,wEAAwE;YACxE,uEAAuE;YACvE,0EAA0E;YAC1E,MAAM,OAAO,GAAG,iBAAiB,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;YAClD,IAAI,OAAO;gBAAE,MAAM,CAAC,OAAO,CAAC,CAAC;QAC/B,CAAC,CAAC;QAEF,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAChC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAChC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;QACvD,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,MAAM,UAAU,GAAG,GAAG,CAAC,KAAK,CAAC,qDAAqD,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YACzF,MAAM,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;QAC5C,CAAC,EAAE,SAAS,CAAC,CAAC;IAChB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,KAAK,GAAG,CAAC,EAAU,EAAE,EAAE,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;AAEpE;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,SAAiB,EACjB,IAAY,EACZ,OAA6B,EAAE;IAE/B,MAAM,UAAU,GAAG,YAAY,EAAE,CAAC;IAElC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,wCAAwC,CAAC,CAAC,CAAC;IACvE,MAAM,KAAK,GAAG,MAAM,uBAAuB,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAC7D,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;QACrB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC,CAAC;QACtD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,oBAAoB,CAAC,CAAC,IAAI,CAAC,WAAW,SAAS,wBAAwB,CAAC,EAAE,CAAC,CAAC,CAAC;QAC5F,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,CAAC;IAEnD,MAAM,UAAU,GACd,KAAK,CAAC,UAAU,IAAI,qCAAqC,CAAC;IAC5D,MAAM,MAAM,GAAG,CAAC,GAAG,EAAE;QACnB,IAAI,CAAC;YACH,OAAO,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QACpD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,6BAA6B,CAAC;QACvC,CAAC;IACH,CAAC,CAAC,EAAE,CAAC;IAEL,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,oEAAoE,CAAC,CAAC,CAAC;IAC1F,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,4BAA4B,CAAC,CAAC;IAClG,OAAO,CAAC,GAAG,CAAC,gEAAgE,CAAC,CAAC;IAC9E,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC,CAAC;IAC7C,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,MAAM,EAAE,CAAC,CAAC,CAAC;IACxC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,0BAA0B,UAAU,EAAE,CAAC,CAAC,CAAC;IAC5D,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAEhB,IAAI,CAAC,IAAI,CAAC,MAAM;QAAE,WAAW,CAAC,UAAU,CAAC,CAAC;IAE1C,4EAA4E;IAC5E,MAAM,WAAW,GAAG,EAAE,CAAC;IACvB,MAAM,UAAU,GAAG,IAAI,CAAC;IACxB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAC,CAAC;IACrE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,WAAW,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,KAAK,CAAC,UAAU,CAAC,CAAC;QACxB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QAClC,MAAM,KAAK,GAAG,MAAM,uBAAuB,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAC7D,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;YACrB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;YACzC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,kCAAkC,CAAC,CAAC,IAAI,CAAC,WAAW,SAAS,wBAAwB,CAAC,EAAE,CAAC,CAAC,CAAC;YAC1G,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC;IAC/C,OAAO,CAAC,GAAG,CACT,IAAI,CACF,8EAA8E;QAC5E,kFAAkF;QAClF,WAAW,UAAU,YAAY,CACpC,CACF,CAAC;IACF,OAAO,KAAK,CAAC;AACf,CAAC"}

package/packages/cli/dist/util.d.ts

@@ -9,6 +9,12 @@ export declare const c: {
 export declare const ok: (s: string) => string;
 export declare const warn: (s: string) => string;
 export declare const fail: (s: string) => string;
+/**
+ * Ask a yes/no question on the terminal. When stdin is not a TTY (piped,
+ * CI, background run) the prompt is skipped and `def` is returned, so
+ * non-interactive invocations never hang.
+ */
+export declare function promptYesNo(question: string, def?: boolean): Promise<boolean>;
 /** Copy text to the clipboard using the platform tool. Best-effort. */
 export declare function copyToClipboard(text: string): Promise<boolean>;
 /** Open a URL in the default browser. Best-effort. */

package/packages/cli/dist/util.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"util.d.ts","sourceRoot":"","sources":["../src/util.ts"],"names":[],"mappings":"AAIA,eAAO,MAAM,CAAC;eADqB,MAAM;aAAN,MAAM;gBAAN,MAAM;cAAN,MAAM;cAAN,MAAM;cAAN,MAAM;CAQxC,CAAC;AAEF,eAAO,MAAM,EAAE,GAAI,GAAG,MAAM,WAA2B,CAAC;AACxD,eAAO,MAAM,IAAI,GAAI,GAAG,MAAM,WAA8B,CAAC;AAC7D,eAAO,MAAM,IAAI,GAAI,GAAG,MAAM,WAAyB,CAAC;AAExD,uEAAuE;AACvE,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAe9D;AAED,sDAAsD;AACtD,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAO7C;AAED,yEAAyE;AACzE,wBAAgB,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAG1C"}
+{"version":3,"file":"util.d.ts","sourceRoot":"","sources":["../src/util.ts"],"names":[],"mappings":"AAKA,eAAO,MAAM,CAAC;eADqB,MAAM;aAAN,MAAM;gBAAN,MAAM;cAAN,MAAM;cAAN,MAAM;cAAN,MAAM;CAQxC,CAAC;AAEF,eAAO,MAAM,EAAE,GAAI,GAAG,MAAM,WAA2B,CAAC;AACxD,eAAO,MAAM,IAAI,GAAI,GAAG,MAAM,WAA8B,CAAC;AAC7D,eAAO,MAAM,IAAI,GAAI,GAAG,MAAM,WAAyB,CAAC;AAExD;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,UAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,CAW3E;AAED,uEAAuE;AACvE,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAe9D;AAED,sDAAsD;AACtD,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAO7C;AAED,yEAAyE;AACzE,wBAAgB,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAG1C"}

package/packages/cli/dist/util.js

@@ -1,4 +1,5 @@
 import { spawn } from "node:child_process";
+import readline from "node:readline";
 const useColor = process.stdout.isTTY && !process.env.NO_COLOR;
 const wrap = (code) => (s) => (useColor ? `\x1b[${code}m${s}\x1b[0m` : s);
 export const c = {
@@ -12,6 +13,25 @@ export const c = {
 export const ok = (s) => `${c.green("✅")} ${s}`;
 export const warn = (s) => `${c.yellow("⚠️ ")} ${s}`;
 export const fail = (s) => `${c.red("✖")} ${s}`;
+/**
+ * Ask a yes/no question on the terminal. When stdin is not a TTY (piped,
+ * CI, background run) the prompt is skipped and `def` is returned, so
+ * non-interactive invocations never hang.
+ */
+export function promptYesNo(question, def = false) {
+    if (!process.stdin.isTTY)
+        return Promise.resolve(def);
+    return new Promise((resolve) => {
+        const rl = readline.createInterface({ input: process.stdin, output: process.stdout });
+        rl.question(`${question} ${def ? "[Y/n]" : "[y/N]"} `, (answer) => {
+            rl.close();
+            const a = answer.trim().toLowerCase();
+            if (a === "")
+                return resolve(def);
+            resolve(a === "y" || a === "yes");
+        });
+    });
+}
 /** Copy text to the clipboard using the platform tool. Best-effort. */
 export function copyToClipboard(text) {
     return new Promise((resolve) => {

package/packages/cli/dist/util.js.map

@@ -1 +1 @@
-{"version":3,"file":"util.js","sourceRoot":"","sources":["../src/util.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAE3C,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC;AAC/D,MAAM,IAAI,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC1F,MAAM,CAAC,MAAM,CAAC,GAAG;IACf,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC;IACf,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC;IACb,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC;IAChB,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC;IACd,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC;IACd,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;CACd,CAAC;AAEF,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;AACxD,MAAM,CAAC,MAAM,IAAI,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;AAC7D,MAAM,CAAC,MAAM,IAAI,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;AAExD,uEAAuE;AACvE,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,GAAG,GACP,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;QAC7F,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7E,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;YACxE,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;YACxC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC;YACjD,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACxB,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;QACpB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,KAAK,CAAC,CAAC;QACjB,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,sDAAsD;AACtD,MAAM,UAAU,WAAW,CAAC,GAAW;IACrC,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC;IACzG,IAAI,CAAC;QACH,KAAK,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;IACtG,CAAC;IAAC,MAAM,CAAC;QACP,YAAY;IACd,CAAC;AACH,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,MAAM,CAAC,GAAW;IAChC,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACtD,OAAO,IAAI,IAAI,QAAQ,GAAG,QAAQ,IAAI,GAAG,CAAC;AAC5C,CAAC"}
+{"version":3,"file":"util.js","sourceRoot":"","sources":["../src/util.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,QAAQ,MAAM,eAAe,CAAC;AAErC,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC;AAC/D,MAAM,IAAI,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC1F,MAAM,CAAC,MAAM,CAAC,GAAG;IACf,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC;IACf,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC;IACb,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC;IAChB,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC;IACd,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC;IACd,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;CACd,CAAC;AAEF,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;AACxD,MAAM,CAAC,MAAM,IAAI,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;AAC7D,MAAM,CAAC,MAAM,IAAI,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;AAExD;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAC,QAAgB,EAAE,GAAG,GAAG,KAAK;IACvD,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK;QAAE,OAAO,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACtD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,EAAE,GAAG,QAAQ,CAAC,eAAe,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QACtF,EAAE,CAAC,QAAQ,CAAC,GAAG,QAAQ,IAAI,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE,CAAC,MAAM,EAAE,EAAE;YAChE,EAAE,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YACtC,IAAI,CAAC,KAAK,EAAE;gBAAE,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC;YAClC,OAAO,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,KAAK,CAAC,CAAC;QACpC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,GAAG,GACP,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;QAC7F,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7E,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;YACxE,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;YACxC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC;YACjD,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACxB,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;QACpB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,KAAK,CAAC,CAAC;QACjB,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,sDAAsD;AACtD,MAAM,UAAU,WAAW,CAAC,GAAW;IACrC,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC;IACzG,IAAI,CAAC;QACH,KAAK,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;IACtG,CAAC;IAAC,MAAM,CAAC;QACP,YAAY;IACd,CAAC;AACH,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,MAAM,CAAC,GAAW;IAChC,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACtD,OAAO,IAAI,IAAI,QAAQ,GAAG,QAAQ,IAAI,GAAG,CAAC;AAC5C,CAAC"}

package/packages/cli/package.json

@@ -14,6 +14,6 @@
     "@localant/gateway": "workspace:*",
     "@localant/mcp": "workspace:*",
     "@localant/shared": "workspace:*",
-    "commander": "^12.1.0"
+    "commander": "^15.0.0"
   }
 }

package/packages/dashboard/dist/index.d.ts

@@ -2,9 +2,10 @@
  * Self-contained local dashboard. Returns a single HTML document that talks to
  * the gateway's /api/* endpoints on the same origin. Local-only by default.
  *
- * (A full React/Vite/Tailwind build lives under a future `web/` workspace; this
- * dependency-free version ships in v1.0 so the dashboard works with zero build
- * steps and no CDN requirement.)
+ * Dependency-free and build-free by design: this ships as one HTML string so
+ * the dashboard works with zero build steps and no CDN requirement. The inner
+ * <script> uses string concatenation (no template literals) so it can live
+ * inside this outer template literal without escaping collisions.
  */
-export declare function dashboardHtml(): string;
+export declare function dashboardHtml(token?: string): string;
 //# sourceMappingURL=index.d.ts.map

package/packages/dashboard/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,wBAAgB,aAAa,IAAI,MAAM,CAwKtC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,wBAAgB,aAAa,CAAC,KAAK,SAAK,GAAG,MAAM,CAw4BhD"}