moodle-cli 0.7.0-alpha.1 → 0.7.0-alpha.3

package/README.md

@@ -174,7 +174,7 @@ moodle mcp bridge
 
 The default client connection uses `moodle mcp bridge`, which keeps the Bearer token out of client configuration. Use `moodle mcp connect CLIENT --mode remote` for clients that support authenticated remote MCP headers.
 
-Alpha version `0.7.0-alpha.1` supports MCP `2026-07-28` and a stateless compatibility lane for `2025-11-25` clients.
+Alpha version `0.7.0-alpha.3` supports MCP `2026-07-28` and a stateless compatibility lane for `2025-11-25` clients.
 
 ### Configuration
 

package/dist/moodle.js

@@ -1861,7 +1861,7 @@ var MoodleClientCore = class {
   constructor(baseUrl, options) {
     this.baseUrl = baseUrl.replace(/\/$/, "");
     const resolvedOptions = typeof options === "string" ? { cookie: { name: "MoodleSession", value: options } } : options;
-    this.fetchImpl = resolvedOptions.fetchImpl ?? fetch;
+    this.fetchImpl = resolvedOptions.fetchImpl ?? ((input, init) => fetch(input, init));
     this.cookie = resolvedOptions.cookie;
     this.sesskey = resolvedOptions.pageContext?.sesskey ?? resolvedOptions.sesskey ?? null;
     this.userid = resolvedOptions.pageContext?.user_info.userid ?? resolvedOptions.userid ?? null;
@@ -3700,7 +3700,7 @@ function escapeXml(value) {
 }
 
 // src/version.ts
-var VERSION = "0.7.0-alpha.1";
+var VERSION = "0.7.0-alpha.3";
 
 // src/forum.ts
 function parseDiscussionReference(value) {
@@ -4519,6 +4519,61 @@ import { chmod as chmod3, mkdir as mkdir5, readFile as readFile4, rename as rena
 import { homedir as homedir6 } from "os";
 import { dirname as dirname5, join as join6, win32 as windowsPath } from "path";
 var SERVICE = "moodle-cli-mcp";
+var MACOS_KEYCHAIN_SCRIPT = `
+ObjC.import("Foundation")
+ObjC.import("Security")
+
+function main() {
+  const input = $.NSFileHandle.fileHandleWithStandardInput.readDataToEndOfFile
+  const text = $.NSString.alloc.initWithDataEncoding(input, $.NSUTF8StringEncoding)
+  const payload = JSON.parse(ObjC.unwrap(text))
+  const keys = {
+    class: "class",
+    genericPassword: "genp",
+    service: "svce",
+    account: "acct",
+    valueData: "v_Data",
+    returnData: "r_Data",
+  }
+  const query = $.NSMutableDictionary.alloc.init
+  query.setObjectForKey(keys.genericPassword, keys.class)
+  query.setObjectForKey(payload.service, keys.service)
+  query.setObjectForKey(payload.profile, keys.account)
+
+  if (payload.operation === "read") {
+    query.setObjectForKey(true, keys.returnData)
+    const result = $()
+    const status = Number($.SecItemCopyMatching(query, result))
+    if (status === -25300) return
+    if (status !== 0) throw new Error("Keychain read failed: " + status)
+    $.NSFileHandle.fileHandleWithStandardOutput.writeData(result)
+    return
+  }
+
+  if (payload.operation === "write") {
+    const value = $(payload.credentials).dataUsingEncoding($.NSUTF8StringEncoding)
+    const attributes = $.NSMutableDictionary.alloc.init
+    attributes.setObjectForKey(value, keys.valueData)
+    let status = Number($.SecItemUpdate(query, attributes))
+    if (status === -25300) {
+      query.setObjectForKey(value, keys.valueData)
+      status = Number($.SecItemAdd(query, null))
+    }
+    if (status !== 0) throw new Error("Keychain write failed: " + status)
+    return
+  }
+
+  if (payload.operation === "delete") {
+    const status = Number($.SecItemDelete(query))
+    if (status !== 0 && status !== -25300) throw new Error("Keychain delete failed: " + status)
+    return
+  }
+
+  throw new Error("Unsupported Keychain operation")
+}
+
+main()
+`;
 var WINDOWS_CREDENTIAL_READ = `
 $ErrorActionPreference = "Stop"
 [Console]::InputEncoding = [Text.UTF8Encoding]::new($false)
@@ -4623,24 +4678,30 @@ var MacOSKeychainCredentialBackend = class {
   name = "macOS Login Keychain";
   async read(profile) {
     try {
-      const result = await this.runner.run("security", ["find-generic-password", "-s", SERVICE, "-a", profile, "-w"]);
-      return parseCredentials(result.stdout.trim());
+      const result = await this.runner.run(
+        "osascript",
+        ["-l", "JavaScript", "-e", MACOS_KEYCHAIN_SCRIPT],
+        macosKeychainInput("read", profile)
+      );
+      const value = result.stdout.trim();
+      if (value) {
+        return parseCredentials(value);
+      }
+      await this.deleteEmptyLegacyEntry(profile);
+      return null;
     } catch (error) {
       if (commandNotFound(error)) {
         throw new CredentialBackendUnavailableError(this.name, error);
       }
-      if (commandExitCode(error) === 44) {
-        return null;
-      }
       throw error;
     }
   }
   async write(profile, credentials) {
     try {
       await this.runner.run(
-        "security",
-        ["add-generic-password", "-s", SERVICE, "-a", profile, "-U", "-w"],
-        JSON.stringify(credentials)
+        "osascript",
+        ["-l", "JavaScript", "-e", MACOS_KEYCHAIN_SCRIPT],
+        macosKeychainInput("write", profile, credentials)
       );
     } catch (error) {
       if (commandNotFound(error)) {
@@ -4651,14 +4712,26 @@ var MacOSKeychainCredentialBackend = class {
   }
   async delete(profile) {
     try {
-      await this.runner.run("security", ["delete-generic-password", "-s", SERVICE, "-a", profile]);
+      await this.runner.run(
+        "osascript",
+        ["-l", "JavaScript", "-e", MACOS_KEYCHAIN_SCRIPT],
+        macosKeychainInput("delete", profile)
+      );
     } catch (error) {
       if (commandNotFound(error)) {
         throw new CredentialBackendUnavailableError(this.name, error);
       }
-      if (commandExitCode(error) !== 44) {
-        throw error;
+      throw error;
+    }
+  }
+  async deleteEmptyLegacyEntry(profile) {
+    try {
+      await this.runner.run("security", ["delete-generic-password", "-s", SERVICE, "-a", profile]);
+    } catch (error) {
+      if (commandNotFound(error) || commandExitCode(error) === 44) {
+        return;
       }
+      throw error;
     }
   }
 };
@@ -4883,6 +4956,14 @@ function parseCredentials(value) {
 function powershellArgs(script) {
   return ["-NoProfile", "-NonInteractive", "-Command", script];
 }
+function macosKeychainInput(operation, profile, credentials) {
+  return JSON.stringify({
+    operation,
+    service: SERVICE,
+    profile,
+    ...credentials ? { credentials: JSON.stringify(credentials) } : {}
+  });
+}
 function windowsCredentialInput(profile, credentials) {
   return JSON.stringify({
     service: SERVICE,
@@ -5073,7 +5154,7 @@ var ManagedMcpDeployment = class {
         `Worker ${intent.workerName} is not owned by Moodle MCP profile ${intent.profile}`
       );
     }
-    const receipt = replacingExisting ? null : matchingReceipt;
+    const receipt = replacingExisting || remote === null ? null : matchingReceipt;
     const existing = remote && receipt ? { ...remote, productionEndpoint: receipt.productionEndpoint, releaseDigest: receipt.releaseDigest } : remote;
     const rotate = intent.rotateToken === true && credentials !== null;
     const releaseChanged = existing?.releaseDigest !== intent.releaseDigest;
@@ -5098,8 +5179,10 @@ var ManagedMcpDeployment = class {
     let credentials = null;
     let credentialsBefore = null;
     let secretsUploaded = false;
+    let initializedWorker = null;
     let candidate = null;
     let appliedReceipt = null;
+    let productionRestored = false;
     let moodleUser = null;
     try {
       yield started(activeStage);
@@ -5122,6 +5205,14 @@ var ManagedMcpDeployment = class {
       activeStage = "upload_private_credentials";
       yield started(activeStage);
       if (plan.uploadCandidate) {
+        if (plan.operation === "create") {
+          initializedWorker = await this.dependencies.wrangler.initializeWorker({
+            accountId: plan.intent.accountId,
+            workerName: plan.intent.workerName,
+            configPath: prepared.wranglerConfigPath,
+            releaseDigest: plan.intent.releaseDigest
+          });
+        }
         await this.dependencies.wrangler.uploadSecrets({
           accountId: plan.intent.accountId,
           workerName: plan.intent.workerName,
@@ -5134,17 +5225,30 @@ var ManagedMcpDeployment = class {
       activeStage = "deploy_candidate_version";
       yield started(activeStage);
       if (plan.uploadCandidate) {
+        const productionEndpoint2 = initializedWorker?.productionEndpoint ?? plan.existing?.productionEndpoint;
+        if (!productionEndpoint2) {
+          throw new DeploymentApplyError("MISSING_ENDPOINT", "The Worker production endpoint is unavailable");
+        }
         candidate = await this.dependencies.wrangler.uploadCandidate({
           accountId: plan.intent.accountId,
           workerName: plan.intent.workerName,
           configPath: prepared.wranglerConfigPath,
-          releaseDigest: plan.intent.releaseDigest
+          releaseDigest: plan.intent.releaseDigest,
+          productionEndpoint: productionEndpoint2
         });
+        if (!candidate.previewEndpoint) {
+          await this.dependencies.wrangler.promote({
+            accountId: plan.intent.accountId,
+            workerName: plan.intent.workerName,
+            versionId: candidate.versionId
+          });
+          promoted = true;
+        }
       }
       yield completed(activeStage);
       activeStage = "upload_moodle_session";
       yield started(activeStage);
-      const sessionEndpoint = candidate?.previewEndpoint ?? plan.existing?.productionEndpoint;
+      const sessionEndpoint = candidate?.previewEndpoint ?? candidate?.productionEndpoint ?? plan.existing?.productionEndpoint;
       if (!sessionEndpoint) {
         throw new DeploymentApplyError("MISSING_ENDPOINT", "The Worker did not provide a session endpoint");
       }
@@ -5162,7 +5266,7 @@ var ManagedMcpDeployment = class {
       yield completed(activeStage);
       activeStage = "run_release_checks";
       yield started(activeStage);
-      if (candidate) {
+      if (candidate?.previewEndpoint) {
         try {
           await this.dependencies.worker.runSmoke({
             endpoint: candidate.previewEndpoint,
@@ -5197,6 +5301,9 @@ var ManagedMcpDeployment = class {
         if (!promoted) {
           throw new DeploymentApplyError("PRODUCTION_VALIDATION_FAILED", "The existing Worker failed validation");
         }
+        if (plan.operation === "create") {
+          throw new DeploymentApplyError("PRODUCTION_VALIDATION_FAILED", "The new Worker failed production validation");
+        }
         candidateRevision = await this.rollbackProduction(
           plan,
           credentials,
@@ -5204,6 +5311,7 @@ var ManagedMcpDeployment = class {
           productionEndpoint,
           candidateRevision
         );
+        productionRestored = true;
         throw new DeploymentApplyError(
           "PRODUCTION_VALIDATION_FAILED_RESTORED",
           "The previous healthy release was restored with the current credentials and Moodle session"
@@ -5221,7 +5329,25 @@ var ManagedMcpDeployment = class {
       if (plan.intent.rotateToken && credentialsBefore && !secretsUploaded) {
         await this.dependencies.credentials.write(plan.intent.profile, credentialsBefore);
       }
-      if (!appliedReceipt && plan.receipt && candidateRevision !== null) {
+      if (promoted && plan.existing && !productionRestored && !appliedReceipt) {
+        await this.dependencies.wrangler.restoreProduction({
+          accountId: plan.intent.accountId,
+          workerName: plan.intent.workerName,
+          previousVersionId: plan.existing.productionVersionId
+        });
+        productionRestored = true;
+        if (plan.intent.rotateToken && credentialsBefore) {
+          await this.dependencies.credentials.write(plan.intent.profile, credentialsBefore);
+        }
+      }
+      if (initializedWorker && !appliedReceipt) {
+        await this.dependencies.wrangler.removeWorker({
+          accountId: plan.intent.accountId,
+          workerName: plan.intent.workerName,
+          deploymentId: deploymentId(plan.intent.accountId, plan.intent.workerName)
+        });
+        await this.removeLocalState(plan.intent.profile);
+      } else if (!appliedReceipt && plan.receipt && candidateRevision !== null) {
         await this.dependencies.receipts.write({ ...plan.receipt, sessionRevision: candidateRevision });
       }
       const safe = asDeploymentError(error);
@@ -5458,6 +5584,9 @@ function validateIntent(intent) {
     throw new DeploymentPlanError("INVALID_INTENT", "Cloudflare account and release digest are required");
   }
 }
+function deploymentId(accountId, workerName) {
+  return `moodle-cli:${accountId}:${workerName}`;
+}
 function isOwnedByProfile(worker, receipt, profile) {
   return receipt ? receipt.accountId === worker.accountId && receipt.workerName === worker.workerName && receipt.deploymentId === worker.ownershipTag : worker.ownershipTag === `moodle-cli:${profile}`;
 }
@@ -5930,6 +6059,8 @@ function isMissing3(error) {
 
 // src/mcp/deployment/node-adapters.ts
 var MODERN_MCP_VERSION = "2026-07-28";
+var WORKER_PROPAGATION_ATTEMPTS = 10;
+var WORKER_PROPAGATION_MAX_DELAY_MS = 4e3;
 var NodeDeploymentCommandRunner = class {
   async run(command, args, environment = {}) {
     return new Promise((resolve, reject) => {
@@ -6016,12 +6147,12 @@ ${error.stderr}`)) {
       return null;
     }
     const productionEndpoint = firstWorkersDevUrl(document) ?? `https://${workerName}.workers.dev`;
-    const deploymentId = ownershipId(accountId, workerName);
+    const deploymentId2 = ownershipId(accountId, workerName);
     return {
       accountId,
       workerName,
-      deploymentId,
-      ownershipTag: deploymentId,
+      deploymentId: deploymentId2,
+      ownershipTag: deploymentId2,
       productionEndpoint,
       productionVersionId: versionIds[0],
       previousHealthyVersionId: versionIds[1] ?? null,
@@ -6039,6 +6170,36 @@ ${error.stderr}`)) {
       input.configPath
     ], input.accountId);
   }
+  async initializeWorker(input) {
+    let result = null;
+    try {
+      result = await this.wrangler([
+        "deploy",
+        "--name",
+        input.workerName,
+        "--config",
+        input.configPath,
+        "--message",
+        `moodle-cli-bootstrap:${input.releaseDigest}`
+      ], input.accountId);
+      const worker = await this.inspect(input.accountId, input.workerName);
+      if (!worker) {
+        throw new DeploymentApplyError("INITIAL_WORKER_INVALID", "Wrangler did not return the initialized Worker");
+      }
+      const productionEndpoint = firstWorkersDevUrl([result.stdout, result.stderr]);
+      return productionEndpoint ? { ...worker, productionEndpoint } : worker;
+    } catch (error) {
+      const worker = await this.inspect(input.accountId, input.workerName).catch(() => null);
+      if (worker || result) {
+        await this.removeWorker({
+          accountId: input.accountId,
+          workerName: input.workerName,
+          deploymentId: ownershipId(input.accountId, input.workerName)
+        }).catch(() => void 0);
+      }
+      throw error;
+    }
+  }
   async uploadCandidate(input) {
     const outputFilePath = join7(dirname7(input.configPath), "wrangler-version-upload.jsonl");
     await rm6(outputFilePath, { force: true });
@@ -6058,13 +6219,13 @@ ${error.stderr}`)) {
       const document = await readWranglerVersionUpload(outputFilePath, input.workerName);
       const versionId = typeof document.version_id === "string" ? document.version_id : null;
       const previewEndpoint = firstWorkersDevUrl(document.preview_alias_url) ?? firstWorkersDevUrl(document.preview_url);
-      if (!versionId || !previewEndpoint) {
-        throw new DeploymentApplyError("CANDIDATE_UPLOAD_INVALID", "Wrangler did not return a candidate version and preview endpoint");
+      if (!versionId) {
+        throw new DeploymentApplyError("CANDIDATE_UPLOAD_INVALID", "Wrangler did not return a candidate version");
       }
       return {
         versionId,
-        previewEndpoint,
-        productionEndpoint: productionEndpointFromPreview(previewEndpoint, input.workerName),
+        previewEndpoint: previewEndpoint ?? null,
+        productionEndpoint: input.productionEndpoint,
         deploymentId: ownershipId(input.accountId, input.workerName)
       };
     } finally {
@@ -6130,6 +6291,7 @@ var NodeReleaseMaterializer = class {
       account_id: plan.intent.accountId,
       main: `./${basename(workerFile)}`,
       compatibility_date: this.options.compatibilityDate,
+      preview_urls: true,
       vars: { MOODLE_ORIGIN: plan.intent.moodleOrigin },
       durable_objects: {
         bindings: [{ name: "SESSION_BROKER", class_name: "SessionBroker" }]
@@ -6185,12 +6347,14 @@ function createBackgroundMoodleSessionSource(options = {}) {
   return new DefaultMoodleSessionSource({ ...options, interactive: false });
 }
 var FetchManagedWorkerClient = class {
-  constructor(fetchImpl = fetch) {
-    this.fetchImpl = fetchImpl;
+  constructor(fetchImpl, sleep = (milliseconds) => new Promise((resolve) => setTimeout(resolve, milliseconds))) {
+    this.sleep = sleep;
+    this.fetchImpl = fetchImpl ?? ((input, init) => fetch(input, init));
   }
+  sleep;
   fetchImpl;
   async putSession(input) {
-    const response = await this.fetchImpl(endpointUrl(input.endpoint, "/session"), {
+    const response = await this.fetchWithRetry(endpointUrl(input.endpoint, "/session"), {
       method: "PUT",
       headers: {
         authorization: `Bearer ${input.sessionSyncToken}`,
@@ -6202,18 +6366,18 @@ var FetchManagedWorkerClient = class {
         cookieValue: input.session.cookieValue,
         expectedRevision: input.expectedRevision
       })
-    });
+    }, isRetryableSessionUpload);
     const body = await safeJson(response);
-    if (!response.ok || !isRecord8(body) || typeof body.revision !== "number") {
-      const code = isRecord8(body) && typeof body.code === "string" ? body.code : "SESSION_UPLOAD_FAILED";
-      throw new DeploymentApplyError(code, "The Worker rejected the Moodle session update");
+    if (response.ok && isRecord8(body) && typeof body.revision === "number") {
+      return { revision: body.revision };
     }
-    return { revision: body.revision };
+    const code = isRecord8(body) && typeof body.code === "string" ? body.code : "SESSION_UPLOAD_FAILED";
+    throw new DeploymentApplyError(code, "The Worker rejected the Moodle session update");
   }
   async getReadiness(input) {
-    const response = await this.fetchImpl(endpointUrl(input.endpoint, "/readyz"), {
+    const response = await this.fetchWithRetry(endpointUrl(input.endpoint, "/readyz"), {
       headers: { authorization: `Bearer ${input.sessionSyncToken}` }
-    });
+    }, isRetryableWorkerPropagation);
     const body = await safeJson(response);
     if (isRecord8(body) && (body.status === "pass" || body.status === "warn" || body.status === "fail")) {
       const session = firstHealthCheck(body, "moodle:session");
@@ -6227,7 +6391,11 @@ var FetchManagedWorkerClient = class {
     return { status: "fail", reasonCode: null, revision: null };
   }
   async runSmoke(input) {
-    const health = await this.fetchImpl(endpointUrl(input.endpoint, "/healthz"));
+    const health = await this.fetchWithRetry(
+      endpointUrl(input.endpoint, "/healthz"),
+      void 0,
+      isRetryableWorkerPropagation
+    );
     const healthBody = await safeJson(health);
     if (!health.ok || !isRecord8(healthBody) || healthBody.status !== "pass") {
       throw new DeploymentApplyError("HEALTH_CHECK_FAILED", "Worker liveness check failed");
@@ -6261,7 +6429,7 @@ var FetchManagedWorkerClient = class {
     if (typeof params.name === "string") {
       headers["mcp-name"] = params.name;
     }
-    const response = await this.fetchImpl(endpointUrl(endpoint, "/mcp"), {
+    const response = await this.fetchWithRetry(endpointUrl(endpoint, "/mcp"), {
       method: "POST",
       headers,
       body: JSON.stringify({
@@ -6277,13 +6445,23 @@ var FetchManagedWorkerClient = class {
           }
         }
       })
-    });
+    }, isRetryableWorkerPropagation);
     const body = await safeJson(response);
     if (!response.ok || !isRecord8(body) || body.jsonrpc !== "2.0" || body.id !== id || "error" in body || !("result" in body)) {
       throw new DeploymentApplyError("MCP_SMOKE_FAILED", `MCP ${method} check failed`);
     }
     return body.result;
   }
+  async fetchWithRetry(input, init, retryable) {
+    for (let attempt = 0; attempt < WORKER_PROPAGATION_ATTEMPTS; attempt += 1) {
+      const response = await this.fetchImpl(input, init);
+      if (!retryable(response.status) || attempt === WORKER_PROPAGATION_ATTEMPTS - 1) {
+        return response;
+      }
+      await this.sleep(Math.min(500 * 2 ** attempt, WORKER_PROPAGATION_MAX_DELAY_MS));
+    }
+    throw new Error("Worker propagation retry loop exhausted unexpectedly");
+  }
 };
 var PrivateDeploymentReceiptStore = class {
   constructor(baseDirectory = join7(homedir8(), ".config", "moodle-cli", "mcp", "deployments")) {
@@ -6366,6 +6544,12 @@ function ownershipId(accountId, workerName) {
 function endpointUrl(endpoint, path4) {
   return `${endpoint.replace(/\/$/u, "")}${path4}`;
 }
+function isRetryableSessionUpload(status) {
+  return status === 401 || isRetryableWorkerPropagation(status);
+}
+function isRetryableWorkerPropagation(status) {
+  return status === 404 || status === 429 || status >= 500;
+}
 async function safeJson(response) {
   try {
     return await response.json();
@@ -6469,18 +6653,6 @@ function firstWorkersDevUrl(value) {
   });
   return found;
 }
-function productionEndpointFromPreview(preview2, workerName) {
-  const url = new URL(preview2);
-  const labels = url.hostname.split(".");
-  if (labels[0] !== workerName && labels[0]?.endsWith(`-${workerName}`)) {
-    labels[0] = workerName;
-    url.hostname = labels.join(".");
-  }
-  url.pathname = "";
-  url.search = "";
-  url.hash = "";
-  return url.origin;
-}
 function visit(value, visitor, key = "") {
   visitor(key, value);
   if (Array.isArray(value)) {
@@ -7860,7 +8032,10 @@ Log: ${result.log_path}`, options);
     await outputMcpResult(runtime, result, options);
   });
   addOutputOptions(mcp.command("status").description("Show local and remote Moodle MCP readiness.")).option("--verbose", "Include sanitized deployment diagnostics.").option("--logs", "Include sanitized recent Worker logs.").action(async (options) => {
-    const result = await getMcpService().status({ verbose: Boolean(options.verbose), logs: Boolean(options.logs) });
+    const result = await getMcpService().status({
+      verbose: Boolean(options.verbose || program.opts().verbose),
+      logs: Boolean(options.logs)
+    });
     await outputMcpResult(runtime, result, options);
   });
   addOutputOptions(mutating(mcp.command("login").description("Acquire and upload a fresh Moodle session."))).action(

package/dist/worker/worker.js

@@ -5996,7 +5996,7 @@ function problemResponse(status, code, title, detail, headers) {
 }
 
 // src/version.ts
-var VERSION = "0.7.0-alpha.1";
+var VERSION = "0.7.0-alpha.3";
 
 // src/worker/http.ts
 var HEALTH_PATH = "/healthz";
@@ -22117,7 +22117,7 @@ var MoodleClientCore = class {
   constructor(baseUrl, options) {
     this.baseUrl = baseUrl.replace(/\/$/, "");
     const resolvedOptions = typeof options === "string" ? { cookie: { name: "MoodleSession", value: options } } : options;
-    this.fetchImpl = resolvedOptions.fetchImpl ?? fetch;
+    this.fetchImpl = resolvedOptions.fetchImpl ?? ((input, init) => fetch(input, init));
     this.cookie = resolvedOptions.cookie;
     this.sesskey = resolvedOptions.pageContext?.sesskey ?? resolvedOptions.sesskey ?? null;
     this.userid = resolvedOptions.pageContext?.user_info.userid ?? resolvedOptions.userid ?? null;
@@ -23214,12 +23214,12 @@ var AJAX_PATH = "/lib/ajax/service.php";
 var SESSION_TOUCH = "core_session_touch";
 var SESSION_TIME_REMAINING = "core_session_time_remaining";
 var FetchMoodleSessionUpstream = class {
-  constructor(origin, fetchImpl = fetch) {
-    this.fetchImpl = fetchImpl;
+  origin;
+  fetchImpl;
+  constructor(origin, fetchImpl) {
     this.origin = new URL(origin).origin;
+    this.fetchImpl = fetchImpl ?? ((input, init) => fetch(input, init));
   }
-  fetchImpl;
-  origin;
   async validate(candidate) {
     if (new URL(candidate.moodleOrigin).origin !== this.origin) return { valid: false, code: "SESSION_INVALID" };
     const response = await this.fetchImpl(`${this.origin}${DASHBOARD_PATH2}`, {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "moodle-cli",
-  "version": "0.7.0-alpha.1",
+  "version": "0.7.0-alpha.3",
   "description": "Terminal-first CLI for Moodle LMS",
   "license": "MIT",
   "type": "module",