oneclient 0.1.0

package/dist/platform-auth.js

@@ -0,0 +1,61 @@
+import { validateApiUrl } from "./credentials.js";
+export async function sendDeveloperOtp(apiUrl, email, fetcher = globalThis.fetch) {
+    await authRequest(fetcher, apiUrl, "/v1/platform/auth/email-otp/send-verification-otp", {
+        email: normalizeEmail(email),
+        type: "sign-in",
+    });
+}
+export async function verifyDeveloperOtp(apiUrl, email, otp, fetcher = globalThis.fetch) {
+    const response = await authRequest(fetcher, apiUrl, "/v1/platform/auth/sign-in/email-otp", {
+        email: normalizeEmail(email),
+        otp: normalizeOtp(otp),
+    });
+    const token = response.headers.get("set-auth-token");
+    if (!token)
+        throw new Error("The control plane did not return a signed CLI session token");
+    return token;
+}
+export async function revokeDeveloperSession(apiUrl, sessionToken, fetcher = globalThis.fetch) {
+    await authRequest(fetcher, apiUrl, "/v1/platform/auth/sign-out", {}, sessionToken);
+}
+async function authRequest(fetcher, apiUrl, path, body, sessionToken) {
+    const response = await fetcher(`${validateApiUrl(apiUrl)}${path}`, {
+        method: "POST",
+        headers: {
+            Accept: "application/json",
+            "Content-Type": "application/json",
+            ...(sessionToken ? { Authorization: `Bearer ${sessionToken}` } : {}),
+        },
+        body: JSON.stringify(body),
+    });
+    if (response.ok)
+        return response;
+    const value = await response.json().catch(() => ({}));
+    const payload = isAuthErrorPayload(value) ? value : {};
+    throw new Error(payload.error?.message ??
+        payload.message ??
+        `Authentication failed with HTTP ${response.status}`);
+}
+function isAuthErrorPayload(value) {
+    if (typeof value !== "object" || value === null)
+        return false;
+    const payload = value;
+    return ((payload.message === undefined || typeof payload.message === "string") &&
+        (payload.error === undefined ||
+            (typeof payload.error === "object" &&
+                payload.error !== null &&
+                (!("message" in payload.error) ||
+                    typeof payload.error.message === "string"))));
+}
+function normalizeEmail(value) {
+    const email = value.trim().toLowerCase();
+    if (!/^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(email))
+        throw new Error("Enter a valid email address");
+    return email;
+}
+function normalizeOtp(value) {
+    const otp = value.trim();
+    if (!/^\d{6}$/.test(otp))
+        throw new Error("The email OTP must contain exactly six digits");
+    return otp;
+}

package/dist/presenter.d.ts

@@ -0,0 +1,9 @@
+export interface PresentationOptions {
+    color: boolean;
+    json: boolean;
+    title?: string;
+}
+export declare function formatOutput(value: unknown, options: PresentationOptions): string;
+export declare function brand(color: boolean): string;
+export declare function statusLine(state: "done" | "working" | "error", message: string, color: boolean): string;
+//# sourceMappingURL=presenter.d.ts.map

package/dist/presenter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"presenter.d.ts","sourceRoot":"","sources":["../src/presenter.ts"],"names":[],"mappings":"AAWA,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,OAAO,CAAC;IACf,IAAI,EAAE,OAAO,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AA6ED,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,mBAAmB,GAAG,MAAM,CAyBjF;AAED,wBAAgB,KAAK,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAE5C;AAED,wBAAgB,UAAU,CACxB,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,EACnC,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,OAAO,GACb,MAAM,CAIR"}

package/dist/presenter.js

@@ -0,0 +1,106 @@
+const ansi = {
+    reset: "\u001b[0m",
+    bold: "\u001b[1m",
+    dim: "\u001b[2m",
+    green: "\u001b[38;2;88;206;145m",
+    mint: "\u001b[38;2;108;222;163m",
+    amber: "\u001b[38;2;229;187;111m",
+    red: "\u001b[38;2;224;106;99m",
+    gray: "\u001b[38;2;137;149;140m",
+};
+function paint(value, code, enabled) {
+    return enabled ? `${code}${value}${ansi.reset}` : value;
+}
+function label(value) {
+    return value
+        .replace(/([a-z0-9])([A-Z])/g, "$1 $2")
+        .replaceAll("_", " ")
+        .replace(/^./, (character) => character.toUpperCase());
+}
+function scalar(value, color) {
+    if (value === null || value === undefined)
+        return paint("—", ansi.gray, color);
+    if (typeof value === "boolean")
+        return value ? paint("yes", ansi.green, color) : paint("no", ansi.gray, color);
+    if (typeof value === "number")
+        return value.toLocaleString("en-US");
+    if (typeof value === "string") {
+        if (/^-?[0-9]+$/.test(value) && /micros/i.test(value))
+            return value;
+        if (/^(ready|active|complete|completed|promoted|true)$/i.test(value))
+            return paint(value, ansi.green, color);
+        if (/^(failed|suspended|revoked|false)$/i.test(value))
+            return paint(value, ansi.red, color);
+        if (/^(queued|building|provisioning|pending|warning)$/i.test(value))
+            return paint(value, ansi.amber, color);
+        return value;
+    }
+    return JSON.stringify(value);
+}
+function compactValue(value, color) {
+    if (Array.isArray(value))
+        return `${value.length} item${value.length === 1 ? "" : "s"}`;
+    if (value && typeof value === "object")
+        return Object.keys(value).join(", ");
+    return scalar(value, color);
+}
+function objectLines(value, color, indent = "") {
+    const lines = [];
+    for (const [key, item] of Object.entries(value)) {
+        if (item && typeof item === "object" && !Array.isArray(item)) {
+            lines.push(`${indent}${paint(label(key), ansi.gray, color)}`);
+            lines.push(...objectLines(item, color, `${indent}  `));
+            continue;
+        }
+        lines.push(`${indent}${paint(label(key).padEnd(22), ansi.gray, color)} ${compactValue(item, color)}`);
+    }
+    return lines;
+}
+function table(rows, color) {
+    if (!rows.length)
+        return paint("No results", ansi.gray, color);
+    const keys = [...new Set(rows.flatMap((row) => Object.keys(row)))].slice(0, 6);
+    const widths = keys.map((key) => Math.min(36, Math.max(label(key).length, ...rows.map((row) => compactValue(row[key], false).length))));
+    const header = keys
+        .map((key, index) => paint(label(key).padEnd(widths[index] ?? 0), ansi.gray, color))
+        .join("  ");
+    const divider = widths.map((width) => "─".repeat(width)).join("──");
+    const body = rows.map((row) => keys
+        .map((key, index) => {
+        const raw = compactValue(row[key], false);
+        const width = widths[index] ?? 0;
+        const clipped = raw.length > width ? `${raw.slice(0, Math.max(0, width - 1))}…` : raw;
+        return scalar(clipped.padEnd(width), color);
+    })
+        .join("  "));
+    return [header, paint(divider, ansi.dim, color), ...body].join("\n");
+}
+export function formatOutput(value, options) {
+    if (options.json)
+        return `${JSON.stringify(value, null, 2)}\n`;
+    const heading = options.title
+        ? `${paint("◆", ansi.mint, options.color)} ${paint(options.title, ansi.bold, options.color)}\n\n`
+        : "";
+    if (Array.isArray(value)) {
+        const rows = value.filter((item) => Boolean(item) && typeof item === "object");
+        return `${heading}${rows.length === value.length ? table(rows, options.color) : value.map((item) => scalar(item, options.color)).join("\n")}\n`;
+    }
+    if (value && typeof value === "object") {
+        const record = value;
+        const singleArray = Object.entries(record).find(([, item]) => Array.isArray(item) && Object.keys(record).length === 1);
+        if (singleArray) {
+            const rows = singleArray[1].filter((item) => Boolean(item) && typeof item === "object");
+            return `${heading}${paint(label(singleArray[0]), ansi.bold, options.color)}\n${table(rows, options.color)}\n`;
+        }
+        return `${heading}${objectLines(record, options.color).join("\n")}\n`;
+    }
+    return `${heading}${scalar(value, options.color)}\n`;
+}
+export function brand(color) {
+    return `${paint("◇", ansi.mint, color)} ${paint("oneclient", ansi.bold, color)} ${paint("— build the product, run everything else", ansi.gray, color)}`;
+}
+export function statusLine(state, message, color) {
+    const symbol = state === "done" ? "✓" : state === "error" ? "×" : "◌";
+    const tone = state === "done" ? ansi.green : state === "error" ? ansi.red : ansi.amber;
+    return `${paint(symbol, tone, color)} ${message}`;
+}

package/dist/secret-input.d.ts

@@ -0,0 +1,8 @@
+import type { Readable } from "node:stream";
+export interface SecretInputOptions {
+    fromEnv?: string;
+    stdin?: boolean;
+}
+export declare function secretValueFromOptions(options: SecretInputOptions, environment?: NodeJS.ProcessEnv, input?: Readable): Promise<string>;
+export declare function readSecretFromStdin(input: Readable, maximumBytes?: number): Promise<string>;
+//# sourceMappingURL=secret-input.d.ts.map

package/dist/secret-input.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-input.d.ts","sourceRoot":"","sources":["../src/secret-input.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAE5C,MAAM,WAAW,kBAAkB;IACjC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED,wBAAsB,sBAAsB,CAC1C,OAAO,EAAE,kBAAkB,EAC3B,WAAW,GAAE,MAAM,CAAC,UAAwB,EAC5C,KAAK,GAAE,QAAwB,GAC9B,OAAO,CAAC,MAAM,CAAC,CAajB;AAED,wBAAsB,mBAAmB,CACvC,KAAK,EAAE,QAAQ,EACf,YAAY,SAAY,GACvB,OAAO,CAAC,MAAM,CAAC,CAajB"}

package/dist/secret-input.js

@@ -0,0 +1,33 @@
+import { Buffer } from "node:buffer";
+export async function secretValueFromOptions(options, environment = process.env, input = process.stdin) {
+    if (Boolean(options.fromEnv) === Boolean(options.stdin)) {
+        throw new Error("Choose exactly one of --from-env <name> or --stdin");
+    }
+    if (options.fromEnv) {
+        if (!/^[A-Za-z_][A-Za-z0-9_]*$/.test(options.fromEnv))
+            throw new Error("from-env must name a valid environment variable");
+        const value = environment[options.fromEnv];
+        if (value === undefined)
+            throw new Error(`Environment variable ${options.fromEnv} is not set`);
+        if (!value)
+            throw new Error("Secret values cannot be empty");
+        return value;
+    }
+    return readSecretFromStdin(input);
+}
+export async function readSecretFromStdin(input, maximumBytes = 64 * 1024) {
+    if ("isTTY" in input && input.isTTY)
+        throw new Error("--stdin requires piped input; secret values are never prompted or echoed");
+    const chunks = [];
+    let bytes = 0;
+    for await (const chunk of input) {
+        const buffer = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);
+        bytes += buffer.byteLength;
+        if (bytes > maximumBytes)
+            throw new Error(`Secret value exceeds ${maximumBytes} bytes`);
+        chunks.push(buffer);
+    }
+    if (bytes === 0)
+        throw new Error("Secret values cannot be empty");
+    return Buffer.concat(chunks).toString("utf8");
+}

package/dist/slug.d.ts

@@ -0,0 +1,2 @@
+export declare function slugify(value: string): string;
+//# sourceMappingURL=slug.d.ts.map

package/dist/slug.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"slug.d.ts","sourceRoot":"","sources":["../src/slug.ts"],"names":[],"mappings":"AAAA,wBAAgB,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAS7C"}

package/dist/slug.js

@@ -0,0 +1,10 @@
+export function slugify(value) {
+    return value
+        .normalize("NFKD")
+        .replace(/[\u0300-\u036f]/g, "")
+        .toLowerCase()
+        .trim()
+        .replace(/[^a-z0-9]+/g, "-")
+        .replace(/^-+|-+$/g, "")
+        .slice(0, 48);
+}

package/llms.txt

@@ -0,0 +1,17 @@
+# OneClient
+
+OneClient is a managed application platform for auth, data, storage, jobs, email, AI, analytics,
+hosting, domains, and prepaid spend control.
+
+Human docs: https://one-client.com/docs
+Quickstart: https://one-client.com/docs/quickstart
+AI guide: https://one-client.com/docs/ai
+OpenAPI: https://console.one-client.com/openapi.yaml
+MCP: https://control.one-client.com/mcp
+
+Install: npm install oneclient
+CLI login: npx oneclient login --email you@company.com
+
+Use pk_* only in browser/mobile clients, sk_* only on trusted servers, and dp_* only for deploys.
+Never expose sk_* or dp_* values in client bundles or model output. Every mutation is idempotent and
+every costly operation is prepaid or bounded by a funded reservation.

package/package.json

@@ -0,0 +1,56 @@
+{
+  "name": "oneclient",
+  "version": "0.1.0",
+  "description": "One package for the complete OneClient TypeScript SDK and developer CLI.",
+  "license": "UNLICENSED",
+  "homepage": "https://one-client.com",
+  "keywords": [
+    "oneclient",
+    "cli",
+    "sdk",
+    "backend",
+    "deployment",
+    "ai"
+  ],
+  "files": [
+    "dist",
+    "README.md",
+    "llms.txt"
+  ],
+  "publishConfig": {
+    "access": "public",
+    "provenance": true
+  },
+  "type": "module",
+  "bin": {
+    "oneclient": "./dist/index.js"
+  },
+  "exports": {
+    ".": {
+      "types": "./dist/client.d.ts",
+      "import": "./dist/client.js"
+    },
+    "./sdk": {
+      "types": "./dist/client.d.ts",
+      "import": "./dist/client.js"
+    }
+  },
+  "dependencies": {
+    "commander": "15.0.0",
+    "tar": "7.5.22",
+    "@oneclient/contracts": "0.1.0",
+    "@oneclient/sdk": "0.1.0"
+  },
+  "devDependencies": {
+    "@types/node": "26.4.0",
+    "tsx": "4.23.12",
+    "typescript": "5.9.3",
+    "vitest": "4.1.11"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.build.json",
+    "dev": "tsx src/index.ts",
+    "test": "vitest run src --passWithNoTests",
+    "typecheck": "tsc -p tsconfig.json --noEmit"
+  }
+}