pyric-tools 0.1.0-alpha.7

package/dist/cli/init.d.ts

@@ -0,0 +1,124 @@
+/**
+ * `pyric init` — scaffold a pyric project (v2, agent-first).
+ *
+ *   pyric init [dir] [--name N] [--template web|node|static] [--force] [--json]
+ *              [--deps vendor|npm] [--pyric-version X]
+ *
+ * `--deps` picks where `pyric` / `pyric-tools` resolve from. The standalone
+ * binary defaults to `vendor`: it lays packed tarballs into `vendor/` and points
+ * the deps at them (`file:vendor/*.tgz`), so `bun install` works with the
+ * packages still unpublished. `--deps npm` writes registry ranges instead (pinned
+ * to the binary's version, or `--pyric-version`) for once they're published.
+ *
+ * Templates live in `./init-templates.js`. `web` (default) scaffolds a Vite app
+ * on the `pyric-tools/vite` plugin: `vite dev` runs canonical `firebase/*`
+ * imports against the in-process sandbox, `vite build` ships the real `firebase`
+ * package — one toolchain, the swap is environmental (dev vs build), never a
+ * code edit. `static` is the serve-era no-bundler scaffold (`pyric dev`).
+ *
+ * Agent-first contract (the design rationale section CLI UX):
+ *   - NEVER prompts — every choice is a flag with a default.
+ *   - Idempotent: existing files are merged (package.json) or skipped;
+ *     rerunning is safe. `--force` overwrites scaffold-owned files only.
+ *   - `--json`: one machine-readable line on stdout
+ *     `{template, dir, created, merged, skipped, conflicts, nextSteps}`;
+ *     the human report moves to stderr.
+ *   - Exit codes: 0 ok, 1 usage, 2 runtime.
+ */
+import { writeFile, readFile, mkdir } from 'node:fs/promises';
+import type { ParsedArgs } from './parse-args.js';
+import { type ScaffoldTemplate } from './init-templates.js';
+/** Where the scaffold's `pyric` / `pyric-tools` deps come from.
+ *  - `vendor`: file: refs to tarballs the standalone binary lays down in
+ *    `vendor/` — installs offline, no registry. Default in the binary.
+ *  - `npm`: registry refs (`^<version>` or `*`) — for once the packages are
+ *    published, or against a private registry. Default when not standalone. */
+export type DepsMode = 'vendor' | 'npm';
+/** Resolve deps mode: explicit `--deps` > `PYRIC_INIT_DEPS` env > default
+ *  (vendor when the binary carries tarballs, else npm). */
+export declare function resolveDepsMode(parsed: ParsedArgs, env?: Record<string, string | undefined>): DepsMode;
+/** Return a copy of `t` with `pyric` / `pyric-tools` deps rewritten for `mode`.
+ *  Pure — caller does the tarball I/O and passes `vendorSpecs`. */
+export declare function applyDepsMode(t: ScaffoldTemplate, mode: DepsMode, opts: {
+    vendorSpecs?: Record<string, string>;
+    version?: string | null;
+}): ScaffoldTemplate;
+/**
+ * Result of merging the required scaffolding into an existing
+ * package.json. Drives the user-facing report so they can see exactly
+ * what was added and what was kept.
+ */
+interface PackageJsonMerge {
+    /** New file contents to write. */
+    contents: string;
+    /** Keys added by this run (e.g. ["scripts.start", "dependencies.pyric"]). */
+    added: string[];
+    /**
+     * Keys that already existed with a value that differs from what we
+     * would have written. NOT overwritten — surfaced so the user can
+     * reconcile manually.
+     */
+    conflicts: Array<{
+        key: string;
+        existing: unknown;
+        wanted: unknown;
+    }>;
+    /** True when no keys changed (everything was already present). */
+    unchanged: boolean;
+}
+/**
+ * Merge the template's required fields into an already-existing
+ * package.json. Never overwrites; only fills in what's missing.
+ * Existing-but-different values are recorded as conflicts.
+ *
+ * Pure function — caller does the I/O. Easy to unit-test.
+ */
+export declare function mergeIntoExistingPackageJson(raw: string, projectName: string, template: ScaffoldTemplate): PackageJsonMerge;
+/** The `--json` contract — keep stable; agents parse this. */
+export interface InitResult {
+    template: 'web' | 'node' | 'static';
+    dir: string;
+    /** Where pyric/pyric-tools deps resolve from: vendored tarballs or npm. */
+    depsMode: DepsMode;
+    created: string[];
+    merged: string[];
+    skipped: string[];
+    conflicts: Array<{
+        key: string;
+        existing: unknown;
+        wanted: unknown;
+    }>;
+    nextSteps: string[];
+}
+export interface InitDeps {
+    writeFile?: typeof writeFile;
+    readFile?: typeof readFile;
+    mkdir?: typeof mkdir;
+    /** Returns true when a file/dir already exists at `path`. */
+    exists?: (path: string) => Promise<boolean>;
+    cwd?: string;
+    stdout?: {
+        write(s: string): void;
+    };
+    stderr?: {
+        write(s: string): void;
+    };
+}
+export declare function runInit(parsed: ParsedArgs, deps?: InitDeps): Promise<number>;
+/**
+ * The deps-only "template" for `pyric vendor`: `pyric-tools` as a devDependency.
+ * `applyDepsMode(..., 'vendor', { vendorSpecs })` rewrites it to a `file:` ref and
+ * adds `pyric` + the `overrides.pyric` pin alongside it. No scripts, dirs, or
+ * scaffold files — vendoring touches package.json deps only.
+ */
+export declare const VENDOR_TEMPLATE: ScaffoldTemplate;
+/**
+ * `pyric vendor [dir]` — lay the vendored `pyric` / `pyric-tools` tarballs into an
+ * existing project and merge their `file:` deps into its package.json. The
+ * retrofit counterpart to `init`: it scaffolds nothing, so any Firebase app can
+ * adopt the sandbox without `init --template web`. Standalone-binary only (the
+ * tarballs are embedded in the binary).
+ */
+export declare function runVendor(parsed: ParsedArgs, deps?: InitDeps): Promise<number>;
+export {};
+//# sourceMappingURL=init.d.ts.map

package/dist/cli/init.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"init.d.ts","sourceRoot":"","sources":["../../src/cli/init.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,EAAU,MAAM,kBAAkB,CAAC;AAEtE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EAAa,KAAK,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAQvE;;;;+EAI+E;AAC/E,MAAM,MAAM,QAAQ,GAAG,QAAQ,GAAG,KAAK,CAAC;AAExC;2DAC2D;AAC3D,wBAAgB,eAAe,CAC7B,MAAM,EAAE,UAAU,EAClB,GAAG,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAe,GACpD,QAAQ,CAMV;AAED;mEACmE;AACnE,wBAAgB,aAAa,CAC3B,CAAC,EAAE,gBAAgB,EACnB,IAAI,EAAE,QAAQ,EACd,IAAI,EAAE;IAAE,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,GACtE,gBAAgB,CAgClB;AAED;;;;GAIG;AACH,UAAU,gBAAgB;IACxB,kCAAkC;IAClC,QAAQ,EAAE,MAAM,CAAC;IACjB,6EAA6E;IAC7E,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB;;;;OAIG;IACH,SAAS,EAAE,KAAK,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,OAAO,CAAC;QAAC,MAAM,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IACtE,kEAAkE;IAClE,SAAS,EAAE,OAAO,CAAC;CACpB;AAUD;;;;;;GAMG;AACH,wBAAgB,4BAA4B,CAC1C,GAAG,EAAE,MAAM,EACX,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,gBAAgB,GACzB,gBAAgB,CAyDlB;AAqBD,8DAA8D;AAC9D,MAAM,WAAW,UAAU;IACzB,QAAQ,EAAE,KAAK,GAAG,MAAM,GAAG,QAAQ,CAAC;IACpC,GAAG,EAAE,MAAM,CAAC;IACZ,2EAA2E;IAC3E,QAAQ,EAAE,QAAQ,CAAC;IACnB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,SAAS,EAAE,KAAK,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,OAAO,CAAC;QAAC,MAAM,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IACtE,SAAS,EAAE,MAAM,EAAE,CAAC;CACrB;AAED,MAAM,WAAW,QAAQ;IACvB,SAAS,CAAC,EAAE,OAAO,SAAS,CAAC;IAC7B,QAAQ,CAAC,EAAE,OAAO,QAAQ,CAAC;IAC3B,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;IACrB,6DAA6D;IAC7D,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAC5C,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE;QAAE,KAAK,CAAC,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;IACpC,MAAM,CAAC,EAAE;QAAE,KAAK,CAAC,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;CACrC;AAuBD,wBAAsB,OAAO,CAAC,MAAM,EAAE,UAAU,EAAE,IAAI,GAAE,QAAa,GAAG,OAAO,CAAC,MAAM,CAAC,CAuKtF;AAID;;;;;GAKG;AACH,eAAO,MAAM,eAAe,EAAE,gBAO7B,CAAC;AAEF;;;;;;GAMG;AACH,wBAAsB,SAAS,CAAC,MAAM,EAAE,UAAU,EAAE,IAAI,GAAE,QAAa,GAAG,OAAO,CAAC,MAAM,CAAC,CAqFxF"}

package/dist/cli/init.js

@@ -0,0 +1,423 @@
+/**
+ * `pyric init` — scaffold a pyric project (v2, agent-first).
+ *
+ *   pyric init [dir] [--name N] [--template web|node|static] [--force] [--json]
+ *              [--deps vendor|npm] [--pyric-version X]
+ *
+ * `--deps` picks where `pyric` / `pyric-tools` resolve from. The standalone
+ * binary defaults to `vendor`: it lays packed tarballs into `vendor/` and points
+ * the deps at them (`file:vendor/*.tgz`), so `bun install` works with the
+ * packages still unpublished. `--deps npm` writes registry ranges instead (pinned
+ * to the binary's version, or `--pyric-version`) for once they're published.
+ *
+ * Templates live in `./init-templates.js`. `web` (default) scaffolds a Vite app
+ * on the `pyric-tools/vite` plugin: `vite dev` runs canonical `firebase/*`
+ * imports against the in-process sandbox, `vite build` ships the real `firebase`
+ * package — one toolchain, the swap is environmental (dev vs build), never a
+ * code edit. `static` is the serve-era no-bundler scaffold (`pyric dev`).
+ *
+ * Agent-first contract (the design rationale section CLI UX):
+ *   - NEVER prompts — every choice is a flag with a default.
+ *   - Idempotent: existing files are merged (package.json) or skipped;
+ *     rerunning is safe. `--force` overwrites scaffold-owned files only.
+ *   - `--json`: one machine-readable line on stdout
+ *     `{template, dir, created, merged, skipped, conflicts, nextSteps}`;
+ *     the human report moves to stderr.
+ *   - Exit codes: 0 ok, 1 usage, 2 runtime.
+ */
+import { writeFile, readFile, mkdir, access } from 'node:fs/promises';
+import { join, basename, resolve } from 'node:path';
+import { TEMPLATES } from './init-templates.js';
+import { isStandalone, hasEmbeddedTarballs, embeddedVersion, materializeVendorTarballs, } from '../serve/standalone-assets.js';
+/** Resolve deps mode: explicit `--deps` > `PYRIC_INIT_DEPS` env > default
+ *  (vendor when the binary carries tarballs, else npm). */
+export function resolveDepsMode(parsed, env = process.env) {
+    const flag = parsed.flags.get('deps');
+    if (flag === 'vendor' || flag === 'npm')
+        return flag;
+    const fromEnv = env.PYRIC_INIT_DEPS;
+    if (fromEnv === 'vendor' || fromEnv === 'npm')
+        return fromEnv;
+    return isStandalone() && hasEmbeddedTarballs() ? 'vendor' : 'npm';
+}
+/** Return a copy of `t` with `pyric` / `pyric-tools` deps rewritten for `mode`.
+ *  Pure — caller does the tarball I/O and passes `vendorSpecs`. */
+export function applyDepsMode(t, mode, opts) {
+    const WORKSPACE_PKGS = ['pyric', 'pyric-tools'];
+    const rewrite = (section) => {
+        const next = { ...section };
+        for (const pkg of WORKSPACE_PKGS) {
+            if (!(pkg in next))
+                continue;
+            next[pkg] =
+                mode === 'vendor'
+                    ? (opts.vendorSpecs?.[pkg] ?? next[pkg])
+                    : opts.version
+                        ? `^${opts.version}`
+                        : next[pkg]; // npm with no pin: keep the template's range (e.g. '*')
+        }
+        // Vendor mode: `pyric-tools` needs `pyric` co-installed (its own dep on
+        // pyric is `*`, resolved from the root file: dep). The web/static templates
+        // only list `pyric-tools`, so add `pyric` alongside it.
+        if (mode === 'vendor' && 'pyric-tools' in next && !('pyric' in next) && opts.vendorSpecs?.pyric) {
+            next.pyric = opts.vendorSpecs.pyric;
+        }
+        return next;
+    };
+    // Vendor mode pins `pyric` via overrides: a placeholder `pyric` IS published
+    // to npm at a higher version than the local 0.0.0, so pyric-tools' `pyric@*`
+    // would otherwise resolve to that empty stub instead of the vendored tarball.
+    const overrides = mode === 'vendor' && opts.vendorSpecs?.pyric ? { pyric: opts.vendorSpecs.pyric } : t.overrides;
+    return {
+        ...t,
+        dependencies: rewrite(t.dependencies),
+        devDependencies: rewrite(t.devDependencies),
+        overrides,
+    };
+}
+function detectIndent(raw) {
+    // Cheap heuristic: scan for the indent of the first nested key.
+    const m = raw.match(/\n([ \t]+)"/);
+    if (!m)
+        return 2;
+    const ws = m[1];
+    return ws.includes('\t') ? '\t' : ws.length;
+}
+/**
+ * Merge the template's required fields into an already-existing
+ * package.json. Never overwrites; only fills in what's missing.
+ * Existing-but-different values are recorded as conflicts.
+ *
+ * Pure function — caller does the I/O. Easy to unit-test.
+ */
+export function mergeIntoExistingPackageJson(raw, projectName, template) {
+    let parsed;
+    try {
+        parsed = JSON.parse(raw);
+    }
+    catch (e) {
+        throw new Error(`package.json is not valid JSON: ${e instanceof Error ? e.message : String(e)}`);
+    }
+    const indent = detectIndent(raw);
+    const added = [];
+    const conflicts = [];
+    // Top-level scalars: add when missing, never overwrite.
+    if (parsed.name === undefined) {
+        parsed.name = projectName;
+        added.push('name');
+    }
+    if (parsed.type === undefined) {
+        parsed.type = 'module';
+        added.push('type');
+    }
+    else if (parsed.type !== 'module') {
+        conflicts.push({ key: 'type', existing: parsed.type, wanted: 'module' });
+    }
+    if (parsed.private === undefined) {
+        parsed.private = true;
+        added.push('private');
+    }
+    const mergeObject = (field, wanted) => {
+        if (parsed[field] === undefined) {
+            parsed[field] = {};
+        }
+        const obj = parsed[field];
+        for (const [key, value] of Object.entries(wanted)) {
+            if (obj[key] === undefined) {
+                obj[key] = value;
+                added.push(`${field}.${key}`);
+            }
+            else if (obj[key] !== value) {
+                conflicts.push({ key: `${field}.${key}`, existing: obj[key], wanted: value });
+            }
+        }
+    };
+    mergeObject('scripts', template.scripts);
+    mergeObject('dependencies', template.dependencies);
+    mergeObject('devDependencies', template.devDependencies);
+    if (template.overrides)
+        mergeObject('overrides', template.overrides);
+    return {
+        contents: JSON.stringify(parsed, null, indent) + '\n',
+        added,
+        conflicts,
+        unchanged: added.length === 0 && conflicts.length === 0,
+    };
+}
+function packageJsonFor(name, t) {
+    return (JSON.stringify({
+        name,
+        version: '0.0.0',
+        type: 'module',
+        private: true,
+        scripts: t.scripts,
+        dependencies: t.dependencies,
+        devDependencies: t.devDependencies,
+        ...(t.overrides ? { overrides: t.overrides } : {}),
+    }, null, 2) + '\n');
+}
+async function defaultExists(path) {
+    try {
+        await access(path);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+/** The parser binds `--force dir` as flag=dir; reclaim the value as the
+ *  positional it was and keep the flag boolean. */
+function normalizeBoolFlags(parsed) {
+    for (const key of ['force', 'json']) {
+        const v = parsed.flags.get(key);
+        if (typeof v === 'string') {
+            parsed.positional.push(v);
+            parsed.flags.set(key, true);
+        }
+    }
+}
+export async function runInit(parsed, deps = {}) {
+    const out = deps.stdout ?? process.stdout;
+    const err = deps.stderr ?? process.stderr;
+    const cwd = deps.cwd ?? process.cwd();
+    const write = deps.writeFile ?? writeFile;
+    const read = deps.readFile ?? readFile;
+    const mk = deps.mkdir ?? mkdir;
+    const exists = deps.exists ?? defaultExists;
+    normalizeBoolFlags(parsed);
+    const json = parsed.flags.get('json') === true;
+    const force = parsed.flags.get('force') === true;
+    const report = json ? err : out; // human report; stdout stays machine-clean under --json
+    const templateFlag = parsed.flags.get('template');
+    const templateName = typeof templateFlag === 'string' ? templateFlag : 'web';
+    if (templateName !== 'web' && templateName !== 'node' && templateName !== 'static') {
+        err.write(`pyric init: unknown template '${templateName}' (expected web|node|static)\n`);
+        return 1;
+    }
+    const template = TEMPLATES[templateName];
+    const depsFlag = parsed.flags.get('deps');
+    if (depsFlag !== undefined && depsFlag !== 'vendor' && depsFlag !== 'npm') {
+        err.write(`pyric init: --deps must be 'vendor' or 'npm' (got '${String(depsFlag)}')\n`);
+        return 1;
+    }
+    const depsMode = resolveDepsMode(parsed);
+    if (depsMode === 'vendor' && !(isStandalone() && hasEmbeddedTarballs())) {
+        err.write(`pyric init: --deps vendor needs the standalone binary (with embedded packages). Use --deps npm.\n`);
+        return 1;
+    }
+    // npm-mode version pin: explicit flag > the binary's baked version > the
+    // template's own range (kept when neither is available, e.g. from the monorepo).
+    const versionFlag = parsed.flags.get('pyric-version');
+    const pinVersion = typeof versionFlag === 'string' && versionFlag.length > 0
+        ? versionFlag
+        : isStandalone()
+            ? embeddedVersion()
+            : null;
+    const dir = parsed.positional[0] ? resolve(cwd, parsed.positional[0]) : cwd;
+    const nameFlag = parsed.flags.get('name');
+    const projectName = typeof nameFlag === 'string' && nameFlag.length > 0 ? nameFlag : basename(dir);
+    try {
+        for (const d of [dir, ...template.dirs.map((d) => join(dir, d))]) {
+            await mk(d, { recursive: true });
+        }
+    }
+    catch (e) {
+        err.write(`pyric init: failed to create project directories: ${e instanceof Error ? e.message : String(e)}\n`);
+        return 2;
+    }
+    const result = {
+        template: templateName,
+        dir,
+        depsMode,
+        created: [],
+        merged: [],
+        skipped: [],
+        conflicts: [],
+        nextSteps: template.nextSteps,
+    };
+    // ─── deps mode: vendor the embedded tarballs, or pin npm versions ───
+    // `effective` is the template with `pyric` / `pyric-tools` deps rewritten;
+    // it (not `template`) drives package.json below. Everything else — files,
+    // dirs, nextSteps — is identical across modes.
+    let effective = template;
+    if (depsMode === 'vendor') {
+        try {
+            const vendorSpecs = await materializeVendorTarballs(dir);
+            for (const spec of Object.values(vendorSpecs))
+                result.created.push(spec.replace(/^file:/, ''));
+            effective = applyDepsMode(template, 'vendor', { vendorSpecs });
+        }
+        catch (e) {
+            err.write(`pyric init: failed to vendor packages: ${e instanceof Error ? e.message : String(e)}\n`);
+            return 2;
+        }
+    }
+    else {
+        effective = applyDepsMode(template, 'npm', { version: pinVersion });
+    }
+    // ─── package.json: merge-into-existing or create ───────────────────
+    // The only file we modify when it already exists (so the project gets
+    // the scripts/deps it needs). `--force` never touches existing keys.
+    const pkgPath = join(dir, 'package.json');
+    let pkgMerge = null;
+    try {
+        if (await exists(pkgPath)) {
+            const raw = (await read(pkgPath, 'utf-8'));
+            const text = typeof raw === 'string' ? raw : String(raw);
+            pkgMerge = mergeIntoExistingPackageJson(text, projectName, effective);
+            result.conflicts = pkgMerge.conflicts;
+            if (pkgMerge.unchanged) {
+                result.skipped.push('package.json');
+            }
+            else {
+                await write(pkgPath, pkgMerge.contents, 'utf-8');
+                result.merged.push('package.json');
+            }
+        }
+        else {
+            await write(pkgPath, packageJsonFor(projectName, effective), 'utf-8');
+            result.created.push('package.json');
+        }
+    }
+    catch (e) {
+        err.write(`pyric init: failed to handle package.json: ${e instanceof Error ? e.message : String(e)}\n`);
+        return 2;
+    }
+    // ─── scaffold-owned files: skip-on-exist (or overwrite with --force) ──
+    for (const t of template.files(projectName)) {
+        const path = join(dir, t.name);
+        if (!force && (await exists(path))) {
+            result.skipped.push(t.name);
+            continue;
+        }
+        try {
+            await write(path, t.content, 'utf-8');
+            result.created.push(t.name);
+        }
+        catch (e) {
+            err.write(`pyric init: failed to write ${t.name}: ${e instanceof Error ? e.message : String(e)}\n`);
+            return 2;
+        }
+    }
+    // ─── report ───────────────────────────────────────────────────────
+    report.write(`pyric init: scaffolded ${templateName} project "${projectName}" in ${dir}\n`);
+    for (const c of result.created)
+        report.write(`  + wrote ${c}\n`);
+    for (const m of result.merged) {
+        report.write(`  ~ merged ${m} (added: ${pkgMerge.added.join(', ')})\n`);
+    }
+    for (const s of result.skipped)
+        report.write(`  · skipped ${s} (already exists)\n`);
+    if (result.conflicts.length > 0) {
+        report.write('\npackage.json — kept your values for these keys (pyric wanted different):\n');
+        for (const c of result.conflicts) {
+            report.write(`  · ${c.key}: ${JSON.stringify(c.existing)}  (pyric would have set ${JSON.stringify(c.wanted)})\n`);
+        }
+    }
+    report.write(depsMode === 'vendor'
+        ? '\n  deps: vendored pyric + pyric-tools into vendor/ — installs offline, no registry\n'
+        : `\n  deps: pyric + pyric-tools from npm${pinVersion ? ` (^${pinVersion})` : ''}\n`);
+    report.write('\nNext steps:\n');
+    for (const s of result.nextSteps)
+        report.write(`  ${s}\n`);
+    if (json)
+        out.write(JSON.stringify(result) + '\n');
+    return 0;
+}
+// ─── pyric vendor: retrofit the vendored packages into any project ─────────
+/**
+ * The deps-only "template" for `pyric vendor`: `pyric-tools` as a devDependency.
+ * `applyDepsMode(..., 'vendor', { vendorSpecs })` rewrites it to a `file:` ref and
+ * adds `pyric` + the `overrides.pyric` pin alongside it. No scripts, dirs, or
+ * scaffold files — vendoring touches package.json deps only.
+ */
+export const VENDOR_TEMPLATE = {
+    scripts: {},
+    dependencies: {},
+    devDependencies: { 'pyric-tools': '*' },
+    dirs: [],
+    files: () => [],
+    nextSteps: [],
+};
+/**
+ * `pyric vendor [dir]` — lay the vendored `pyric` / `pyric-tools` tarballs into an
+ * existing project and merge their `file:` deps into its package.json. The
+ * retrofit counterpart to `init`: it scaffolds nothing, so any Firebase app can
+ * adopt the sandbox without `init --template web`. Standalone-binary only (the
+ * tarballs are embedded in the binary).
+ */
+export async function runVendor(parsed, deps = {}) {
+    const out = deps.stdout ?? process.stdout;
+    const err = deps.stderr ?? process.stderr;
+    const cwd = deps.cwd ?? process.cwd();
+    const write = deps.writeFile ?? writeFile;
+    const read = deps.readFile ?? readFile;
+    const mk = deps.mkdir ?? mkdir;
+    const exists = deps.exists ?? defaultExists;
+    normalizeBoolFlags(parsed);
+    const json = parsed.flags.get('json') === true;
+    const report = json ? err : out;
+    if (!(isStandalone() && hasEmbeddedTarballs())) {
+        err.write('pyric vendor: needs the standalone binary (it carries the embedded pyric / ' +
+            'pyric-tools tarballs). A monorepo/npm checkout has nothing to vendor; depend ' +
+            'on the packages directly instead.\n');
+        return 1;
+    }
+    const dir = parsed.positional[0] ? resolve(cwd, parsed.positional[0]) : cwd;
+    const projectName = basename(dir);
+    let vendorSpecs;
+    try {
+        await mk(dir, { recursive: true });
+        vendorSpecs = await materializeVendorTarballs(dir);
+    }
+    catch (e) {
+        err.write(`pyric vendor: failed to lay down vendor tarballs: ${e instanceof Error ? e.message : String(e)}\n`);
+        return 2;
+    }
+    const effective = applyDepsMode(VENDOR_TEMPLATE, 'vendor', { vendorSpecs });
+    const pkgPath = join(dir, 'package.json');
+    let added;
+    let conflicts = [];
+    let created = false;
+    try {
+        if (await exists(pkgPath)) {
+            const raw = String(await read(pkgPath, 'utf-8'));
+            const merge = mergeIntoExistingPackageJson(raw, projectName, effective);
+            conflicts = merge.conflicts;
+            added = merge.added;
+            if (!merge.unchanged)
+                await write(pkgPath, merge.contents, 'utf-8');
+        }
+        else {
+            await write(pkgPath, packageJsonFor(projectName, effective), 'utf-8');
+            added = [];
+            created = true;
+        }
+    }
+    catch (e) {
+        err.write(`pyric vendor: failed to update package.json: ${e instanceof Error ? e.message : String(e)}\n`);
+        return 2;
+    }
+    report.write(`pyric vendor: vendored pyric + pyric-tools into ${join(dir, 'vendor')}\n`);
+    for (const spec of Object.values(vendorSpecs)) {
+        report.write(`  + ${spec.replace(/^file:/, '')}\n`);
+    }
+    if (created) {
+        report.write('  + package.json (created)\n');
+    }
+    else if (added.length === 0) {
+        report.write('  · package.json already had the vendored deps\n');
+    }
+    else {
+        report.write(`  ~ package.json (added: ${added.join(', ')})\n`);
+    }
+    for (const c of conflicts) {
+        report.write(`  · ${c.key}: kept ${JSON.stringify(c.existing)} (pyric would set ${JSON.stringify(c.wanted)})\n`);
+    }
+    report.write('\n  next: run `bun install` (or npm/pnpm install) to install the vendored packages.\n');
+    if (json) {
+        out.write(JSON.stringify({ dir, vendored: Object.keys(vendorSpecs), added, conflicts, created }) + '\n');
+    }
+    return 0;
+}
+//# sourceMappingURL=init.js.map

package/dist/cli/init.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"init.js","sourceRoot":"","sources":["../../src/cli/init.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AACtE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpD,OAAO,EAAE,SAAS,EAAyB,MAAM,qBAAqB,CAAC;AACvE,OAAO,EACL,YAAY,EACZ,mBAAmB,EACnB,eAAe,EACf,yBAAyB,GAC1B,MAAM,+BAA+B,CAAC;AASvC;2DAC2D;AAC3D,MAAM,UAAU,eAAe,CAC7B,MAAkB,EAClB,MAA0C,OAAO,CAAC,GAAG;IAErD,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACtC,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC;IACrD,MAAM,OAAO,GAAG,GAAG,CAAC,eAAe,CAAC;IACpC,IAAI,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK;QAAE,OAAO,OAAO,CAAC;IAC9D,OAAO,YAAY,EAAE,IAAI,mBAAmB,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC;AACpE,CAAC;AAED;mEACmE;AACnE,MAAM,UAAU,aAAa,CAC3B,CAAmB,EACnB,IAAc,EACd,IAAuE;IAEvE,MAAM,cAAc,GAAG,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;IAChD,MAAM,OAAO,GAAG,CAAC,OAA+B,EAA0B,EAAE;QAC1E,MAAM,IAAI,GAAG,EAAE,GAAG,OAAO,EAAE,CAAC;QAC5B,KAAK,MAAM,GAAG,IAAI,cAAc,EAAE,CAAC;YACjC,IAAI,CAAC,CAAC,GAAG,IAAI,IAAI,CAAC;gBAAE,SAAS;YAC7B,IAAI,CAAC,GAAG,CAAC;gBACP,IAAI,KAAK,QAAQ;oBACf,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC;oBACxC,CAAC,CAAC,IAAI,CAAC,OAAO;wBACZ,CAAC,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE;wBACpB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,wDAAwD;QAC7E,CAAC;QACD,wEAAwE;QACxE,4EAA4E;QAC5E,wDAAwD;QACxD,IAAI,IAAI,KAAK,QAAQ,IAAI,aAAa,IAAI,IAAI,IAAI,CAAC,CAAC,OAAO,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC,WAAW,EAAE,KAAK,EAAE,CAAC;YAChG,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC;QACtC,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IACF,6EAA6E;IAC7E,6EAA6E;IAC7E,8EAA8E;IAC9E,MAAM,SAAS,GACb,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACjG,OAAO;QACL,GAAG,CAAC;QACJ,YAAY,EAAE,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC;QACrC,eAAe,EAAE,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;QAC3C,SAAS;KACV,CAAC;AACJ,CAAC;AAsBD,SAAS,YAAY,CAAC,GAAW;IAC/B,gEAAgE;IAChE,MAAM,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IACnC,IAAI,CAAC,CAAC;QAAE,OAAO,CAAC,CAAC;IACjB,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC;IACjB,OAAO,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC;AAC9C,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,4BAA4B,CAC1C,GAAW,EACX,WAAmB,EACnB,QAA0B;IAE1B,IAAI,MAA+B,CAAC;IACpC,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CACb,mCAAmC,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAChF,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IACjC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,SAAS,GAAkC,EAAE,CAAC;IAEpD,wDAAwD;IACxD,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC9B,MAAM,CAAC,IAAI,GAAG,WAAW,CAAC;QAC1B,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACrB,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC9B,MAAM,CAAC,IAAI,GAAG,QAAQ,CAAC;QACvB,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACrB,CAAC;SAAM,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QACpC,SAAS,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC3E,CAAC;IACD,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QACjC,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC;QACtB,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACxB,CAAC;IAED,MAAM,WAAW,GAAG,CAClB,KAAmE,EACnE,MAA8B,EAC9B,EAAE;QACF,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,SAAS,EAAE,CAAC;YAChC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;QACrB,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAA4B,CAAC;QACrD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAClD,IAAI,GAAG,CAAC,GAAG,CAAC,KAAK,SAAS,EAAE,CAAC;gBAC3B,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;gBACjB,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,IAAI,GAAG,EAAE,CAAC,CAAC;YAChC,CAAC;iBAAM,IAAI,GAAG,CAAC,GAAG,CAAC,KAAK,KAAK,EAAE,CAAC;gBAC9B,SAAS,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,GAAG,KAAK,IAAI,GAAG,EAAE,EAAE,QAAQ,EAAE,GAAG,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;YAChF,CAAC;QACH,CAAC;IACH,CAAC,CAAC;IACF,WAAW,CAAC,SAAS,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;IACzC,WAAW,CAAC,cAAc,EAAE,QAAQ,CAAC,YAAY,CAAC,CAAC;IACnD,WAAW,CAAC,iBAAiB,EAAE,QAAQ,CAAC,eAAe,CAAC,CAAC;IACzD,IAAI,QAAQ,CAAC,SAAS;QAAE,WAAW,CAAC,WAAW,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC;IAErE,OAAO;QACL,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,GAAG,IAAI;QACrD,KAAK;QACL,SAAS;QACT,SAAS,EAAE,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;KACxD,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,IAAY,EAAE,CAAmB;IACvD,OAAO,CACL,IAAI,CAAC,SAAS,CACZ;QACE,IAAI;QACJ,OAAO,EAAE,OAAO;QAChB,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,IAAI;QACb,OAAO,EAAE,CAAC,CAAC,OAAO;QAClB,YAAY,EAAE,CAAC,CAAC,YAAY;QAC5B,eAAe,EAAE,CAAC,CAAC,eAAe;QAClC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACnD,EACD,IAAI,EACJ,CAAC,CACF,GAAG,IAAI,CACT,CAAC;AACJ,CAAC;AA0BD,KAAK,UAAU,aAAa,CAAC,IAAY;IACvC,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;QACnB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;mDACmD;AACnD,SAAS,kBAAkB,CAAC,MAAkB;IAC5C,KAAK,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,CAAC;QACpC,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;YAC1B,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAC1B,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,MAAkB,EAAE,OAAiB,EAAE;IACnE,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC;IAC1C,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC;IAC1C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IACtC,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC;IAC1C,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC;IACvC,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC;IAC/B,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,aAAa,CAAC;IAE5C,kBAAkB,CAAC,MAAM,CAAC,CAAC;IAC3B,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC;IAC/C,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC;IACjD,MAAM,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,wDAAwD;IAEzF,MAAM,YAAY,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAClD,MAAM,YAAY,GAAG,OAAO,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC;IAC7E,IAAI,YAAY,KAAK,KAAK,IAAI,YAAY,KAAK,MAAM,IAAI,YAAY,KAAK,QAAQ,EAAE,CAAC;QACnF,GAAG,CAAC,KAAK,CAAC,iCAAiC,YAAY,gCAAgC,CAAC,CAAC;QACzF,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,QAAQ,GAAG,SAAS,CAAC,YAAY,CAAC,CAAC;IAEzC,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC1C,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,KAAK,EAAE,CAAC;QAC1E,GAAG,CAAC,KAAK,CAAC,sDAAsD,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACxF,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,QAAQ,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;IACzC,IAAI,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,YAAY,EAAE,IAAI,mBAAmB,EAAE,CAAC,EAAE,CAAC;QACxE,GAAG,CAAC,KAAK,CACP,mGAAmG,CACpG,CAAC;QACF,OAAO,CAAC,CAAC;IACX,CAAC;IACD,yEAAyE;IACzE,iFAAiF;IACjF,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IACtD,MAAM,UAAU,GACd,OAAO,WAAW,KAAK,QAAQ,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC;QACvD,CAAC,CAAC,WAAW;QACb,CAAC,CAAC,YAAY,EAAE;YACd,CAAC,CAAC,eAAe,EAAE;YACnB,CAAC,CAAC,IAAI,CAAC;IAEb,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IAC5E,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC1C,MAAM,WAAW,GACf,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IAEjF,IAAI,CAAC;QACH,KAAK,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACjE,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACnC,CAAC;IACH,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,GAAG,CAAC,KAAK,CACP,qDAAqD,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CACpG,CAAC;QACF,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,MAAM,GAAe;QACzB,QAAQ,EAAE,YAAY;QACtB,GAAG;QACH,QAAQ;QACR,OAAO,EAAE,EAAE;QACX,MAAM,EAAE,EAAE;QACV,OAAO,EAAE,EAAE;QACX,SAAS,EAAE,EAAE;QACb,SAAS,EAAE,QAAQ,CAAC,SAAS;KAC9B,CAAC;IAEF,uEAAuE;IACvE,2EAA2E;IAC3E,0EAA0E;IAC1E,+CAA+C;IAC/C,IAAI,SAAS,GAAG,QAAQ,CAAC;IACzB,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC1B,IAAI,CAAC;YACH,MAAM,WAAW,GAAG,MAAM,yBAAyB,CAAC,GAAG,CAAC,CAAC;YACzD,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC;gBAAE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC;YAC/F,SAAS,GAAG,aAAa,CAAC,QAAQ,EAAE,QAAQ,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC;QACjE,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,GAAG,CAAC,KAAK,CACP,0CAA0C,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CACzF,CAAC;YACF,OAAO,CAAC,CAAC;QACX,CAAC;IACH,CAAC;SAAM,CAAC;QACN,SAAS,GAAG,aAAa,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC;IACtE,CAAC;IAED,sEAAsE;IACtE,sEAAsE;IACtE,qEAAqE;IACrE,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;IAC1C,IAAI,QAAQ,GAA4B,IAAI,CAAC;IAC7C,IAAI,CAAC;QACH,IAAI,MAAM,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;YAC1B,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAY,CAAC;YACtD,MAAM,IAAI,GAAG,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACzD,QAAQ,GAAG,4BAA4B,CAAC,IAAI,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC;YACtE,MAAM,CAAC,SAAS,GAAG,QAAQ,CAAC,SAAS,CAAC;YACtC,IAAI,QAAQ,CAAC,SAAS,EAAE,CAAC;gBACvB,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YACtC,CAAC;iBAAM,CAAC;gBACN,MAAM,KAAK,CAAC,OAAO,EAAE,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;gBACjD,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YACrC,CAAC;QACH,CAAC;aAAM,CAAC;YACN,MAAM,KAAK,CAAC,OAAO,EAAE,cAAc,CAAC,WAAW,EAAE,SAAS,CAAC,EAAE,OAAO,CAAC,CAAC;YACtE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QACtC,CAAC;IACH,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,GAAG,CAAC,KAAK,CACP,8CAA8C,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAC7F,CAAC;QACF,OAAO,CAAC,CAAC;IACX,CAAC;IAED,yEAAyE;IACzE,KAAK,MAAM,CAAC,IAAI,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC;QAC5C,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,CAAC,KAAK,IAAI,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YACnC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAC5B,SAAS;QACX,CAAC;QACD,IAAI,CAAC;YACH,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACtC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC9B,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,GAAG,CAAC,KAAK,CACP,+BAA+B,CAAC,CAAC,IAAI,KAAK,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CACzF,CAAC;YACF,OAAO,CAAC,CAAC;QACX,CAAC;IACH,CAAC;IAED,qEAAqE;IACrE,MAAM,CAAC,KAAK,CACV,0BAA0B,YAAY,aAAa,WAAW,QAAQ,GAAG,IAAI,CAC9E,CAAC;IACF,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO;QAAE,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;IACjE,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAC9B,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,YAAY,QAAS,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC3E,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO;QAAE,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,qBAAqB,CAAC,CAAC;IAEpF,IAAI,MAAM,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChC,MAAM,CAAC,KAAK,CAAC,8EAA8E,CAAC,CAAC;QAC7F,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;YACjC,MAAM,CAAC,KAAK,CACV,OAAO,CAAC,CAAC,GAAG,KAAK,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,2BAA2B,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CACpG,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,CAAC,KAAK,CACV,QAAQ,KAAK,QAAQ;QACnB,CAAC,CAAC,uFAAuF;QACzF,CAAC,CAAC,yCAAyC,UAAU,CAAC,CAAC,CAAC,MAAM,UAAU,GAAG,CAAC,CAAC,CAAC,EAAE,IAAI,CACvF,CAAC;IAEF,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;IAChC,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,SAAS;QAAE,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAE3D,IAAI,IAAI;QAAE,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC;IACnD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,8EAA8E;AAE9E;;;;;GAKG;AACH,MAAM,CAAC,MAAM,eAAe,GAAqB;IAC/C,OAAO,EAAE,EAAE;IACX,YAAY,EAAE,EAAE;IAChB,eAAe,EAAE,EAAE,aAAa,EAAE,GAAG,EAAE;IACvC,IAAI,EAAE,EAAE;IACR,KAAK,EAAE,GAAG,EAAE,CAAC,EAAE;IACf,SAAS,EAAE,EAAE;CACd,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,MAAkB,EAAE,OAAiB,EAAE;IACrE,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC;IAC1C,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC;IAC1C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IACtC,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC;IAC1C,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC;IACvC,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC;IAC/B,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,aAAa,CAAC;IAE5C,kBAAkB,CAAC,MAAM,CAAC,CAAC;IAC3B,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC;IAC/C,MAAM,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;IAEhC,IAAI,CAAC,CAAC,YAAY,EAAE,IAAI,mBAAmB,EAAE,CAAC,EAAE,CAAC;QAC/C,GAAG,CAAC,KAAK,CACP,6EAA6E;YAC3E,+EAA+E;YAC/E,qCAAqC,CACxC,CAAC;QACF,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IAC5E,MAAM,WAAW,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;IAElC,IAAI,WAAmC,CAAC;IACxC,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACnC,WAAW,GAAG,MAAM,yBAAyB,CAAC,GAAG,CAAC,CAAC;IACrD,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,GAAG,CAAC,KAAK,CACP,qDAAqD,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CACpG,CAAC;QACF,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,SAAS,GAAG,aAAa,CAAC,eAAe,EAAE,QAAQ,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC;IAE5E,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;IAC1C,IAAI,KAAe,CAAC;IACpB,IAAI,SAAS,GAAkC,EAAE,CAAC;IAClD,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,CAAC;QACH,IAAI,MAAM,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;YAC1B,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;YACjD,MAAM,KAAK,GAAG,4BAA4B,CAAC,GAAG,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC;YACxE,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC;YAC5B,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;YACpB,IAAI,CAAC,KAAK,CAAC,SAAS;gBAAE,MAAM,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACtE,CAAC;aAAM,CAAC;YACN,MAAM,KAAK,CAAC,OAAO,EAAE,cAAc,CAAC,WAAW,EAAE,SAAS,CAAC,EAAE,OAAO,CAAC,CAAC;YACtE,KAAK,GAAG,EAAE,CAAC;YACX,OAAO,GAAG,IAAI,CAAC;QACjB,CAAC;IACH,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,GAAG,CAAC,KAAK,CACP,gDAAgD,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAC/F,CAAC;QACF,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,mDAAmD,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;IACzF,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC;QAC9C,MAAM,CAAC,KAAK,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;IACtD,CAAC;IACD,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAC/C,CAAC;SAAM,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9B,MAAM,CAAC,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACnE,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,KAAK,CAAC,4BAA4B,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClE,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;QAC1B,MAAM,CAAC,KAAK,CACV,OAAO,CAAC,CAAC,GAAG,UAAU,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,qBAAqB,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CACnG,CAAC;IACJ,CAAC;IACD,MAAM,CAAC,KAAK,CAAC,uFAAuF,CAAC,CAAC;IAEtG,IAAI,IAAI,EAAE,CAAC;QACT,GAAG,CAAC,KAAK,CACP,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,GAAG,IAAI,CAC9F,CAAC;IACJ,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/cli/login.d.ts

@@ -0,0 +1,18 @@
+import type { Authorizer, CredentialStore } from '../credentials/core/types.js';
+export interface LoginDeps {
+    env?: NodeJS.ProcessEnv;
+    store?: CredentialStore;
+    authorizer?: Authorizer;
+    stdout?: {
+        write(s: string): void;
+    };
+    stderr?: {
+        write(s: string): void;
+    };
+    /** `--ci`: print the refresh token (for PYRIC_REFRESH_TOKEN) instead of a friendly line. */
+    ci?: boolean;
+}
+export declare function runLoginCommand(deps?: LoginDeps): Promise<number>;
+export declare function runLogoutCommand(deps?: LoginDeps): Promise<number>;
+export declare function runWhoamiCommand(deps?: LoginDeps): Promise<number>;
+//# sourceMappingURL=login.d.ts.map

package/dist/cli/login.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"login.d.ts","sourceRoot":"","sources":["../../src/cli/login.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAKhF,MAAM,WAAW,SAAS;IACxB,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,KAAK,CAAC,EAAE,eAAe,CAAC;IACxB,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,MAAM,CAAC,EAAE;QAAE,KAAK,CAAC,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;IACpC,MAAM,CAAC,EAAE;QAAE,KAAK,CAAC,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;IACpC,4FAA4F;IAC5F,EAAE,CAAC,EAAE,OAAO,CAAC;CACd;AAED,wBAAsB,eAAe,CAAC,IAAI,GAAE,SAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CA6B3E;AAED,wBAAsB,gBAAgB,CAAC,IAAI,GAAE,SAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CAK5E;AAED,wBAAsB,gBAAgB,CAAC,IAAI,GAAE,SAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CAS5E"}

package/dist/cli/login.js

@@ -0,0 +1,59 @@
+/**
+ * `pyric login` / `logout` / `whoami` — interactive Google sign-in for deploy.
+ * Thin: wire the Node loopback authorizer + file store + the OAuth client, then
+ * call the isomorphic `runLogin` core. All effects are injectable for tests.
+ */
+import { runLogin } from '../credentials/core/flow.js';
+import { oauthClient } from '../credentials/core/client.js';
+import { BASE_SCOPES } from '../credentials/core/scopes.js';
+import { loopbackAuthorizer } from '../credentials/node/loopback-authorizer.js';
+import { fileCredentialStore } from '../credentials/node/file-store.js';
+import { openBrowser } from '../serve/open-browser.js';
+/** Registered Google OAuth client baked for the published binary; env-overridable. */
+const DEFAULT_OAUTH_CLIENT_ID = '';
+export async function runLoginCommand(deps = {}) {
+    const out = deps.stdout ?? process.stdout;
+    const err = deps.stderr ?? process.stderr;
+    const env = deps.env ?? process.env;
+    const clientId = env.PYRIC_OAUTH_CLIENT_ID ?? DEFAULT_OAUTH_CLIENT_ID;
+    if (!clientId) {
+        err.write('pyric login: no OAuth client configured. Set PYRIC_OAUTH_CLIENT_ID (a Google "Desktop app" client id).\n');
+        return 1;
+    }
+    const client = oauthClient({ clientId, clientSecret: env.PYRIC_OAUTH_CLIENT_SECRET });
+    const store = deps.store ?? fileCredentialStore();
+    const authorizer = deps.authorizer ?? loopbackAuthorizer({ openUrl: openBrowser, print: (l) => out.write(`${l}\n`) });
+    try {
+        const cred = await runLogin({ authorizer, store, client, scopes: BASE_SCOPES });
+        if (deps.ci) {
+            // CI: the refresh token goes to stdout (capturable); instructions to stderr.
+            err.write('Set this as PYRIC_REFRESH_TOKEN in your CI environment:\n');
+            out.write(`${cred.refreshToken}\n`);
+        }
+        else {
+            out.write(`Signed in${cred.email ? ` as ${cred.email}` : ''}.\n`);
+        }
+        return 0;
+    }
+    catch (e) {
+        err.write(`pyric login: ${e instanceof Error ? e.message : String(e)}\n`);
+        return 2;
+    }
+}
+export async function runLogoutCommand(deps = {}) {
+    const out = deps.stdout ?? process.stdout;
+    await (deps.store ?? fileCredentialStore()).clear();
+    out.write('Signed out.\n');
+    return 0;
+}
+export async function runWhoamiCommand(deps = {}) {
+    const out = deps.stdout ?? process.stdout;
+    const cred = await (deps.store ?? fileCredentialStore()).read();
+    if (!cred) {
+        out.write('Not signed in. Run `pyric login`.\n');
+        return 0;
+    }
+    out.write(`Signed in${cred.email ? ` as ${cred.email}` : ''} (scopes: ${cred.scopes.join(', ')}).\n`);
+    return 0;
+}
+//# sourceMappingURL=login.js.map