sweetlink 0.1.0 → 0.2.1

package/dist/src/shared/index.js

@@ -1,15 +1,15 @@
-import { createHmac, randomUUID, timingSafeEqual } from 'node:crypto';
+import { createHmac, randomUUID, timingSafeEqual } from "node:crypto";
 export const SWEETLINK_DEFAULT_PORT = 4455;
-export const SWEETLINK_WS_PATH = '/bridge';
+export const SWEETLINK_WS_PATH = "/bridge";
 export const SWEETLINK_SESSION_EXP_SECONDS = 60 * 5; // 5 minutes
 export const SWEETLINK_CLI_EXP_SECONDS = 60 * 60; // 1 hour
 export const SWEETLINK_HEARTBEAT_INTERVAL_MS = 15_000;
 export const SWEETLINK_HEARTBEAT_TOLERANCE_MS = 45_000;
-export function signSweetLinkToken({ secret, scope, subject, ttlSeconds, sessionId }) {
+export function signSweetLinkToken({ secret, scope, subject, ttlSeconds, sessionId, }) {
     // We encode the payload ourselves (instead of relying on a JWT lib) so both daemon and browser
     // can verify tokens without pulling in heavyweight dependencies.
     if (!secret) {
-        throw new Error('SweetLink secret is not configured');
+        throw new Error("SweetLink secret is not configured");
     }
     const issuedAt = Math.floor(Date.now() / 1000);
     const payload = {
@@ -20,37 +20,37 @@ export function signSweetLinkToken({ secret, scope, subject, ttlSeconds, session
         issuedAt,
         expiresAt: issuedAt + ttlSeconds,
     };
-    const encodedPayload = Buffer.from(JSON.stringify(payload), 'utf8').toString('base64url');
+    const encodedPayload = Buffer.from(JSON.stringify(payload), "utf8").toString("base64url");
     const signature = signEncodedPayload(secret, encodedPayload);
     return `${encodedPayload}.${signature}`;
 }
-export function verifySweetLinkToken({ secret, token, expectedScope }) {
+export function verifySweetLinkToken({ secret, token, expectedScope, }) {
     if (!secret) {
-        throw new Error('SweetLink secret is not configured');
+        throw new Error("SweetLink secret is not configured");
     }
-    const [encodedPayload, providedSignature] = token.split('.', 2);
+    const [encodedPayload, providedSignature] = token.split(".", 2);
     if (!(encodedPayload && providedSignature)) {
-        throw new Error('Malformed SweetLink token');
+        throw new Error("Malformed SweetLink token");
     }
     const expectedSignature = signEncodedPayload(secret, encodedPayload);
-    if (!timingSafeCompare(Buffer.from(providedSignature, 'base64url'), Buffer.from(expectedSignature, 'base64url'))) {
-        throw new Error('Invalid SweetLink token signature');
+    if (!timingSafeCompare(Buffer.from(providedSignature, "base64url"), Buffer.from(expectedSignature, "base64url"))) {
+        throw new Error("Invalid SweetLink token signature");
     }
-    const decoded = JSON.parse(Buffer.from(encodedPayload, 'base64url').toString('utf8'));
-    if (!decoded || typeof decoded !== 'object') {
-        throw new Error('Invalid SweetLink token payload');
+    const decoded = JSON.parse(Buffer.from(encodedPayload, "base64url").toString("utf8"));
+    if (!decoded || typeof decoded !== "object") {
+        throw new Error("Invalid SweetLink token payload");
     }
     const now = Math.floor(Date.now() / 1000);
     if (decoded.expiresAt < now) {
-        throw new Error('SweetLink token expired');
+        throw new Error("SweetLink token expired");
     }
     if (expectedScope && decoded.scope !== expectedScope) {
-        throw new Error('SweetLink token scope mismatch');
+        throw new Error("SweetLink token scope mismatch");
     }
     return decoded;
 }
 function signEncodedPayload(secret, encodedPayload) {
-    return createHmac('sha256', secret).update(encodedPayload).digest('base64url');
+    return createHmac("sha256", secret).update(encodedPayload).digest("base64url");
 }
 function timingSafeCompare(a, b) {
     if (a.length !== b.length) {

package/dist/src/shared/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/shared/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAEtE,MAAM,CAAC,MAAM,sBAAsB,GAAG,IAAI,CAAC;AAC3C,MAAM,CAAC,MAAM,iBAAiB,GAAG,SAAS,CAAC;AAC3C,MAAM,CAAC,MAAM,6BAA6B,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,YAAY;AACjE,MAAM,CAAC,MAAM,yBAAyB,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,SAAS;AAC3D,MAAM,CAAC,MAAM,+BAA+B,GAAG,MAAM,CAAC;AACtD,MAAM,CAAC,MAAM,gCAAgC,GAAG,MAAM,CAAC;AAqBvD,MAAM,UAAU,kBAAkB,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAoB;IACpG,+FAA+F;IAC/F,iEAAiE;IACjE,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACxD,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAC/C,MAAM,OAAO,GAA0B;QACrC,OAAO,EAAE,UAAU,EAAE;QACrB,KAAK;QACL,GAAG,EAAE,OAAO;QACZ,SAAS;QACT,QAAQ;QACR,SAAS,EAAE,QAAQ,GAAG,UAAU;KACjC,CAAC;IACF,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAC1F,MAAM,SAAS,GAAG,kBAAkB,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IAC7D,OAAO,GAAG,cAAc,IAAI,SAAS,EAAE,CAAC;AAC1C,CAAC;AAQD,MAAM,UAAU,oBAAoB,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,EAAsB;IACvF,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACxD,CAAC;IACD,MAAM,CAAC,cAAc,EAAE,iBAAiB,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IAChE,IAAI,CAAC,CAAC,cAAc,IAAI,iBAAiB,CAAC,EAAE,CAAC;QAC3C,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC/C,CAAC;IACD,MAAM,iBAAiB,GAAG,kBAAkB,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IACrE,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,IAAI,CAAC,iBAAiB,EAAE,WAAW,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,iBAAiB,EAAE,WAAW,CAAC,CAAC,EAAE,CAAC;QACjH,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACvD,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAA0B,CAAC;IAC/G,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACrD,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAC1C,IAAI,OAAO,CAAC,SAAS,GAAG,GAAG,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;IAC7C,CAAC;IACD,IAAI,aAAa,IAAI,OAAO,CAAC,KAAK,KAAK,aAAa,EAAE,CAAC;QACrD,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACpD,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,kBAAkB,CAAC,MAAc,EAAE,cAAsB;IAChE,OAAO,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;AACjF,CAAC;AAED,SAAS,iBAAiB,CAAC,CAAS,EAAE,CAAS;IAC7C,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC;QAC1B,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,CAAC;QACH,0FAA0F;QAC1F,OAAO,eAAe,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,UAAU,wBAAwB;IACtC,OAAO,UAAU,EAAE,CAAC;AACtB,CAAC;AAED,MAAM,UAAU,wBAAwB;IACtC,OAAO,UAAU,EAAE,CAAC;AACtB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/shared/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAEtE,MAAM,CAAC,MAAM,sBAAsB,GAAG,IAAI,CAAC;AAC3C,MAAM,CAAC,MAAM,iBAAiB,GAAG,SAAS,CAAC;AAC3C,MAAM,CAAC,MAAM,6BAA6B,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,YAAY;AACjE,MAAM,CAAC,MAAM,yBAAyB,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,SAAS;AAC3D,MAAM,CAAC,MAAM,+BAA+B,GAAG,MAAM,CAAC;AACtD,MAAM,CAAC,MAAM,gCAAgC,GAAG,MAAM,CAAC;AAqBvD,MAAM,UAAU,kBAAkB,CAAC,EACjC,MAAM,EACN,KAAK,EACL,OAAO,EACP,UAAU,EACV,SAAS,GACQ;IACjB,+FAA+F;IAC/F,iEAAiE;IACjE,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACxD,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAC/C,MAAM,OAAO,GAA0B;QACrC,OAAO,EAAE,UAAU,EAAE;QACrB,KAAK;QACL,GAAG,EAAE,OAAO;QACZ,SAAS;QACT,QAAQ;QACR,SAAS,EAAE,QAAQ,GAAG,UAAU;KACjC,CAAC;IACF,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAC1F,MAAM,SAAS,GAAG,kBAAkB,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IAC7D,OAAO,GAAG,cAAc,IAAI,SAAS,EAAE,CAAC;AAC1C,CAAC;AAQD,MAAM,UAAU,oBAAoB,CAAC,EACnC,MAAM,EACN,KAAK,EACL,aAAa,GACM;IACnB,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACxD,CAAC;IACD,MAAM,CAAC,cAAc,EAAE,iBAAiB,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IAChE,IAAI,CAAC,CAAC,cAAc,IAAI,iBAAiB,CAAC,EAAE,CAAC;QAC3C,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC/C,CAAC;IACD,MAAM,iBAAiB,GAAG,kBAAkB,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IACrE,IACE,CAAC,iBAAiB,CAChB,MAAM,CAAC,IAAI,CAAC,iBAAiB,EAAE,WAAW,CAAC,EAC3C,MAAM,CAAC,IAAI,CAAC,iBAAiB,EAAE,WAAW,CAAC,CAC5C,EACD,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACvD,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CACxB,MAAM,CAAC,IAAI,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CACjC,CAAC;IAC3B,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACrD,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAC1C,IAAI,OAAO,CAAC,SAAS,GAAG,GAAG,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;IAC7C,CAAC;IACD,IAAI,aAAa,IAAI,OAAO,CAAC,KAAK,KAAK,aAAa,EAAE,CAAC;QACrD,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACpD,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,kBAAkB,CAAC,MAAc,EAAE,cAAsB;IAChE,OAAO,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;AACjF,CAAC;AAED,SAAS,iBAAiB,CAAC,CAAS,EAAE,CAAS;IAC7C,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC;QAC1B,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,CAAC;QACH,0FAA0F;QAC1F,OAAO,eAAe,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,UAAU,wBAAwB;IACtC,OAAO,UAAU,EAAE,CAAC;AACtB,CAAC;AAED,MAAM,UAAU,wBAAwB;IACtC,OAAO,UAAU,EAAE,CAAC;AACtB,CAAC"}

package/dist/src/shared/node.d.ts

@@ -4,7 +4,7 @@ export interface ResolveSweetLinkSecretOptions {
 }
 export interface SweetLinkSecretResolution {
     readonly secret: string;
-    readonly source: 'env' | 'file' | 'generated';
+    readonly source: "env" | "file" | "generated";
     readonly path?: string;
 }
 export declare function resolveSweetLinkSecret(options?: ResolveSweetLinkSecretOptions): Promise<SweetLinkSecretResolution>;

package/dist/src/shared/node.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"node.d.ts","sourceRoot":"","sources":["../../../src/shared/node.ts"],"names":[],"mappings":"AASA,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC;IAC9B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,KAAK,GAAG,MAAM,GAAG,WAAW,CAAC;IAC9C,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;CACxB;AAmCD,wBAAsB,sBAAsB,CAC1C,OAAO,GAAE,6BAAkC,GAC1C,OAAO,CAAC,yBAAyB,CAAC,CAmCpC;AAED,wBAAgB,6BAA6B,IAAI,MAAM,CAEtD"}
+{"version":3,"file":"node.d.ts","sourceRoot":"","sources":["../../../src/shared/node.ts"],"names":[],"mappings":"AASA,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC;IAC9B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,KAAK,GAAG,MAAM,GAAG,WAAW,CAAC;IAC9C,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;CACxB;AAqCD,wBAAsB,sBAAsB,CAC1C,OAAO,GAAE,6BAAkC,GAC1C,OAAO,CAAC,yBAAyB,CAAC,CAqCpC;AAED,wBAAgB,6BAA6B,IAAI,MAAM,CAEtD"}

package/dist/src/shared/node.js

@@ -1,13 +1,13 @@
-import { randomBytes } from 'node:crypto';
-import { constants as fsConstants } from 'node:fs';
-import os from 'node:os';
-import path from 'node:path';
-import { debuglog } from 'node:util';
-import { sweetLinkEnv } from './env.js';
-const DEFAULT_SECRET_PATH = path.join(os.homedir(), '.sweetlink', 'secret.key');
-const FS_PROMISES_MODULE = 'node:fs/promises';
+import { randomBytes } from "node:crypto";
+import { constants as fsConstants } from "node:fs";
+import os from "node:os";
+import path from "node:path";
+import { debuglog } from "node:util";
+import { sweetLinkEnv } from "./env.js";
+const DEFAULT_SECRET_PATH = path.join(os.homedir(), ".sweetlink", "secret.key");
+const FS_PROMISES_MODULE = "node:fs/promises";
 let cachedFsPromises = null;
-const debug = debuglog('sweetlink');
+const debug = debuglog("sweetlink");
 function ensureNodeRuntime() {
     const globalScope = globalThis;
     const nodeVersion = globalScope.process?.versions?.node;
@@ -15,9 +15,9 @@ function ensureNodeRuntime() {
         return;
     }
     if (globalScope.window !== undefined) {
-        throw new TypeError('SweetLink secret resolution requires a Node.js runtime; detected browser-like window without Node metadata.');
+        throw new TypeError("SweetLink secret resolution requires a Node.js runtime; detected browser-like window without Node metadata.");
     }
-    throw new TypeError('Node.js runtime metadata is unavailable; refusing to access SweetLink secrets.');
+    throw new TypeError("Node.js runtime metadata is unavailable; refusing to access SweetLink secrets.");
 }
 async function loadFsModule() {
     if (cachedFsPromises) {
@@ -30,36 +30,36 @@ async function loadFsModule() {
 export async function resolveSweetLinkSecret(options = {}) {
     const envSecret = sweetLinkEnv.secret;
     if (envSecret && envSecret.length >= 32) {
-        return { secret: envSecret, source: 'env' };
+        return { secret: envSecret, source: "env" };
     }
     const secretPath = options.secretPath ?? DEFAULT_SECRET_PATH;
     try {
         const fsModule = await loadFsModule();
         const readSecretFile = async () => {
             await fsModule.access(secretPath, fsConstants.R_OK);
-            return fsModule.readFile(secretPath, 'utf8');
+            return fsModule.readFile(secretPath, "utf8");
         };
         const secretFileContents = await readSecretFile();
         const fileSecret = secretFileContents.trim();
         if (fileSecret.length >= 32) {
-            return { secret: fileSecret, source: 'file', path: secretPath };
+            return { secret: fileSecret, source: "file", path: secretPath };
         }
     }
     catch (error) {
-        debug('Unable to read SweetLink secret from file; falling back to autoCreate logic.', {
+        debug("Unable to read SweetLink secret from file; falling back to autoCreate logic.", {
             path: secretPath,
             error,
         });
     }
     if (!options.autoCreate) {
-        throw new Error('SWEETLINK_SECRET is not configured; provide env var or run daemon with autoCreate enabled');
+        throw new Error("SWEETLINK_SECRET is not configured; provide env var or run daemon with autoCreate enabled");
     }
-    const generated = randomBytes(48).toString('base64url');
+    const generated = randomBytes(48).toString("base64url");
     const directory = path.dirname(secretPath);
     const { mkdir, writeFile } = await loadFsModule();
     await mkdir(directory, { recursive: true });
     await writeFile(secretPath, `${generated}\n`, { mode: 0o600 });
-    return { secret: generated, source: 'generated', path: secretPath };
+    return { secret: generated, source: "generated", path: secretPath };
 }
 export function getDefaultSweetLinkSecretPath() {
     return DEFAULT_SECRET_PATH;

package/dist/src/shared/node.js.map

@@ -1 +1 @@
-{"version":3,"file":"node.js","sourceRoot":"","sources":["../../../src/shared/node.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,SAAS,IAAI,WAAW,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACrC,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAExC,MAAM,mBAAmB,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,YAAY,EAAE,YAAY,CAAC,CAAC;AAahF,MAAM,kBAAkB,GAAG,kBAAkB,CAAC;AAI9C,IAAI,gBAAgB,GAA4B,IAAI,CAAC;AACrD,MAAM,KAAK,GAAG,QAAQ,CAAC,WAAW,CAAC,CAAC;AAEpC,SAAS,iBAAiB;IACxB,MAAM,WAAW,GAAG,UAGnB,CAAC;IACF,MAAM,WAAW,GAAG,WAAW,CAAC,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC;IACxD,IAAI,WAAW,EAAE,CAAC;QAChB,OAAO;IACT,CAAC;IACD,IAAI,WAAW,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QACrC,MAAM,IAAI,SAAS,CACjB,6GAA6G,CAC9G,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,SAAS,CAAC,gFAAgF,CAAC,CAAC;AACxG,CAAC;AACD,KAAK,UAAU,YAAY;IACzB,IAAI,gBAAgB,EAAE,CAAC;QACrB,OAAO,gBAAgB,CAAC;IAC1B,CAAC;IAED,iBAAiB,EAAE,CAAC;IACpB,gBAAgB,GAAG,CAAC,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAqB,CAAC;IAC1E,OAAO,gBAAgB,CAAC;AAC1B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,UAAyC,EAAE;IAE3C,MAAM,SAAS,GAAG,YAAY,CAAC,MAAM,CAAC;IACtC,IAAI,SAAS,IAAI,SAAS,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;QACxC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IAC9C,CAAC;IAED,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,mBAAmB,CAAC;IAC7D,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,YAAY,EAAE,CAAC;QACtC,MAAM,cAAc,GAAG,KAAK,IAAI,EAAE;YAChC,MAAM,QAAQ,CAAC,MAAM,CAAC,UAAU,EAAE,WAAW,CAAC,IAAI,CAAC,CAAC;YACpD,OAAO,QAAQ,CAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QAC/C,CAAC,CAAC;QACF,MAAM,kBAAkB,GAAG,MAAM,cAAc,EAAE,CAAC;QAClD,MAAM,UAAU,GAAG,kBAAkB,CAAC,IAAI,EAAE,CAAC;QAC7C,IAAI,UAAU,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;YAC5B,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;QAClE,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,KAAK,CAAC,8EAA8E,EAAE;YACpF,IAAI,EAAE,UAAU;YAChB,KAAK;SACN,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,2FAA2F,CAAC,CAAC;IAC/G,CAAC;IAED,MAAM,SAAS,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACxD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC3C,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,MAAM,YAAY,EAAE,CAAC;IAClD,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5C,MAAM,SAAS,CAAC,UAAU,EAAE,GAAG,SAAS,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC/D,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;AACtE,CAAC;AAED,MAAM,UAAU,6BAA6B;IAC3C,OAAO,mBAAmB,CAAC;AAC7B,CAAC"}
+{"version":3,"file":"node.js","sourceRoot":"","sources":["../../../src/shared/node.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,SAAS,IAAI,WAAW,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACrC,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAExC,MAAM,mBAAmB,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,YAAY,EAAE,YAAY,CAAC,CAAC;AAahF,MAAM,kBAAkB,GAAG,kBAAkB,CAAC;AAI9C,IAAI,gBAAgB,GAA4B,IAAI,CAAC;AACrD,MAAM,KAAK,GAAG,QAAQ,CAAC,WAAW,CAAC,CAAC;AAEpC,SAAS,iBAAiB;IACxB,MAAM,WAAW,GAAG,UAGnB,CAAC;IACF,MAAM,WAAW,GAAG,WAAW,CAAC,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC;IACxD,IAAI,WAAW,EAAE,CAAC;QAChB,OAAO;IACT,CAAC;IACD,IAAI,WAAW,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QACrC,MAAM,IAAI,SAAS,CACjB,6GAA6G,CAC9G,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,SAAS,CACjB,gFAAgF,CACjF,CAAC;AACJ,CAAC;AACD,KAAK,UAAU,YAAY;IACzB,IAAI,gBAAgB,EAAE,CAAC;QACrB,OAAO,gBAAgB,CAAC;IAC1B,CAAC;IAED,iBAAiB,EAAE,CAAC;IACpB,gBAAgB,GAAG,CAAC,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAqB,CAAC;IAC1E,OAAO,gBAAgB,CAAC;AAC1B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,OAAO,GAAkC,EAAE;IAE3C,MAAM,SAAS,GAAG,YAAY,CAAC,MAAM,CAAC;IACtC,IAAI,SAAS,IAAI,SAAS,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;QACxC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IAC9C,CAAC;IAED,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,mBAAmB,CAAC;IAC7D,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,YAAY,EAAE,CAAC;QACtC,MAAM,cAAc,GAAG,KAAK,IAAI,EAAE;YAChC,MAAM,QAAQ,CAAC,MAAM,CAAC,UAAU,EAAE,WAAW,CAAC,IAAI,CAAC,CAAC;YACpD,OAAO,QAAQ,CAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QAC/C,CAAC,CAAC;QACF,MAAM,kBAAkB,GAAG,MAAM,cAAc,EAAE,CAAC;QAClD,MAAM,UAAU,GAAG,kBAAkB,CAAC,IAAI,EAAE,CAAC;QAC7C,IAAI,UAAU,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;YAC5B,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;QAClE,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,KAAK,CAAC,8EAA8E,EAAE;YACpF,IAAI,EAAE,UAAU;YAChB,KAAK;SACN,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CACb,2FAA2F,CAC5F,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACxD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC3C,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,MAAM,YAAY,EAAE,CAAC;IAClD,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5C,MAAM,SAAS,CAAC,UAAU,EAAE,GAAG,SAAS,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC/D,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;AACtE,CAAC;AAED,MAAM,UAAU,6BAA6B;IAC3C,OAAO,mBAAmB,CAAC;AAC7B,CAAC"}

package/dist/src/token.d.ts

@@ -1,4 +1,4 @@
-import type { CliConfig } from './types.js';
+import type { CliConfig } from "./types.js";
 export declare function resetCliTokenCache(): void;
 export declare function fetchCliToken(config: CliConfig): Promise<string>;
 //# sourceMappingURL=token.d.ts.map

package/dist/src/token.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"token.d.ts","sourceRoot":"","sources":["../../src/token.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAwB,SAAS,EAAE,MAAM,YAAY,CAAC;AAclE,wBAAgB,kBAAkB,IAAI,IAAI,CAEzC;AAED,wBAAsB,aAAa,CAAC,MAAM,EAAE,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,CAiDtE"}
+{"version":3,"file":"token.d.ts","sourceRoot":"","sources":["../../src/token.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAwB,SAAS,EAAE,MAAM,YAAY,CAAC;AAalE,wBAAgB,kBAAkB,IAAI,IAAI,CAEzC;AAED,wBAAsB,aAAa,CAAC,MAAM,EAAE,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,CAuDtE"}

package/dist/src/token.js

@@ -1,9 +1,10 @@
-import { SWEETLINK_CLI_EXP_SECONDS, signSweetLinkToken } from '../shared/src/index.js';
-import { resolveSweetLinkSecret } from '../shared/src/node.js';
-import { fetchJson } from './http.js';
-import { describeAppForPrompt } from './util/app-label.js';
-import { describeUnknown } from './util/errors.js';
-import { TRAILING_SLASH_PATTERN } from './util/regex.js';
+import { SWEETLINK_CLI_EXP_SECONDS, signSweetLinkToken } from "../shared/src/index.js";
+import { resolveSweetLinkSecret } from "../shared/src/node.js";
+import { loadDevBootstrap } from "./core/dev-bootstrap.js";
+import { fetchJson } from "./http.js";
+import { describeAppForPrompt } from "./util/app-label.js";
+import { describeUnknown } from "./util/errors.js";
+import { TRAILING_SLASH_PATTERN } from "./util/regex.js";
 let cachedCliToken = null;
 export function resetCliTokenCache() {
     cachedCliToken = null;
@@ -13,45 +14,47 @@ export async function fetchCliToken(config) {
     if (cachedCliToken && cachedCliToken.expiresAt - 30 > now) {
         return cachedCliToken.token;
     }
-    if (config.adminApiKey) {
+    const bootstrap = await loadDevBootstrap(config).catch(() => null);
+    const adminApiKey = config.adminApiKey ?? bootstrap?.adminApiKey ?? null;
+    if (adminApiKey) {
         try {
-            const response = await fetchJson(`${config.appBaseUrl.replace(TRAILING_SLASH_PATTERN, '')}/api/admin/sweetlink/cli-token`, {
-                method: 'POST',
+            const response = await fetchJson(`${config.appBaseUrl.replace(TRAILING_SLASH_PATTERN, "")}/api/admin/sweetlink/cli-token`, {
+                method: "POST",
                 headers: {
-                    Authorization: `Bearer ${config.adminApiKey}`,
-                    'Content-Type': 'application/json',
+                    Authorization: `Bearer ${adminApiKey}`,
+                    "Content-Type": "application/json",
                 },
             });
             cachedCliToken = {
                 token: response.accessToken,
                 expiresAt: response.expiresAt,
-                source: 'api',
+                source: "api",
             };
             return response.accessToken;
         }
         catch (error) {
             const detail = error instanceof Error ? error.message : String(error);
-            console.warn('[SweetLink CLI] Falling back to local secret after CLI token request failed:', detail);
+            console.warn("[SweetLink CLI] Falling back to local secret after CLI token request failed:", detail);
         }
     }
     try {
         const secretResolution = await resolveSweetLinkSecret();
         const token = signSweetLinkToken({
             secret: secretResolution.secret,
-            scope: 'cli',
-            subject: 'local-cli',
+            scope: "cli",
+            subject: "local-cli",
             ttlSeconds: SWEETLINK_CLI_EXP_SECONDS,
         });
         const expiresAt = Math.floor(Date.now() / 1000) + SWEETLINK_CLI_EXP_SECONDS;
-        cachedCliToken = { token, expiresAt, source: 'secret' };
+        cachedCliToken = { token, expiresAt, source: "secret" };
         return token;
     }
     catch (error) {
         const detail = error instanceof Error ? error.message : describeUnknown(error);
         const targetDescription = describeAppForPrompt(config.appLabel);
-        const hint = config.adminApiKey
+        const hint = adminApiKey
             ? `Check that your admin key is valid or ensure ${targetDescription} is running.`
-            : 'Provide --admin-key or start the SweetLink daemon once (pnpm sweetlink) to generate the shared secret.';
+            : "Provide --admin-key or start the SweetLink daemon once (pnpm sweetlink) to generate the shared secret.";
         throw new Error(`Unable to resolve SweetLink CLI token. Reason: ${detail}. ${hint}`);
     }
 }

package/dist/src/token.js.map

@@ -1 +1 @@
-{"version":3,"file":"token.js","sourceRoot":"","sources":["../../src/token.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yBAAyB,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AACvF,OAAO,EAAE,sBAAsB,EAAkC,MAAM,uBAAuB,CAAC;AAC/F,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAEtC,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAC;AASzD,IAAI,cAAc,GAA0B,IAAI,CAAC;AAEjD,MAAM,UAAU,kBAAkB;IAChC,cAAc,GAAG,IAAI,CAAC;AACxB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,MAAiB;IACnD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAC1C,IAAI,cAAc,IAAI,cAAc,CAAC,SAAS,GAAG,EAAE,GAAG,GAAG,EAAE,CAAC;QAC1D,OAAO,cAAc,CAAC,KAAK,CAAC;IAC9B,CAAC;IAED,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;QACvB,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,SAAS,CAC9B,GAAG,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,sBAAsB,EAAE,EAAE,CAAC,gCAAgC,EACxF;gBACE,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,aAAa,EAAE,UAAU,MAAM,CAAC,WAAW,EAAE;oBAC7C,cAAc,EAAE,kBAAkB;iBACnC;aACF,CACF,CAAC;YACF,cAAc,GAAG;gBACf,KAAK,EAAE,QAAQ,CAAC,WAAW;gBAC3B,SAAS,EAAE,QAAQ,CAAC,SAAS;gBAC7B,MAAM,EAAE,KAAK;aACd,CAAC;YACF,OAAO,QAAQ,CAAC,WAAW,CAAC;QAC9B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,MAAM,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACtE,OAAO,CAAC,IAAI,CAAC,8EAA8E,EAAE,MAAM,CAAC,CAAC;QACvG,CAAC;IACH,CAAC;IAED,IAAI,CAAC;QACH,MAAM,gBAAgB,GAA8B,MAAM,sBAAsB,EAAE,CAAC;QACnF,MAAM,KAAK,GAAG,kBAAkB,CAAC;YAC/B,MAAM,EAAE,gBAAgB,CAAC,MAAM;YAC/B,KAAK,EAAE,KAAK;YACZ,OAAO,EAAE,WAAW;YACpB,UAAU,EAAE,yBAAyB;SACtC,CAAC,CAAC;QACH,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,yBAAyB,CAAC;QAC5E,cAAc,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;QACxD,OAAO,KAAK,CAAC;IACf,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,MAAM,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;QAC/E,MAAM,iBAAiB,GAAG,oBAAoB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAChE,MAAM,IAAI,GAAG,MAAM,CAAC,WAAW;YAC7B,CAAC,CAAC,gDAAgD,iBAAiB,cAAc;YACjF,CAAC,CAAC,wGAAwG,CAAC;QAC7G,MAAM,IAAI,KAAK,CAAC,kDAAkD,MAAM,KAAK,IAAI,EAAE,CAAC,CAAC;IACvF,CAAC;AACH,CAAC"}
+{"version":3,"file":"token.js","sourceRoot":"","sources":["../../src/token.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yBAAyB,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AACvF,OAAO,EAAE,sBAAsB,EAAkC,MAAM,uBAAuB,CAAC;AAC/F,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAEtC,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAC;AAQzD,IAAI,cAAc,GAA0B,IAAI,CAAC;AAEjD,MAAM,UAAU,kBAAkB;IAChC,cAAc,GAAG,IAAI,CAAC;AACxB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,MAAiB;IACnD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAC1C,IAAI,cAAc,IAAI,cAAc,CAAC,SAAS,GAAG,EAAE,GAAG,GAAG,EAAE,CAAC;QAC1D,OAAO,cAAc,CAAC,KAAK,CAAC;IAC9B,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,gBAAgB,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IACnE,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,IAAI,SAAS,EAAE,WAAW,IAAI,IAAI,CAAC;IAEzE,IAAI,WAAW,EAAE,CAAC;QAChB,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,SAAS,CAC9B,GAAG,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,sBAAsB,EAAE,EAAE,CAAC,gCAAgC,EACxF;gBACE,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,aAAa,EAAE,UAAU,WAAW,EAAE;oBACtC,cAAc,EAAE,kBAAkB;iBACnC;aACF,CACF,CAAC;YACF,cAAc,GAAG;gBACf,KAAK,EAAE,QAAQ,CAAC,WAAW;gBAC3B,SAAS,EAAE,QAAQ,CAAC,SAAS;gBAC7B,MAAM,EAAE,KAAK;aACd,CAAC;YACF,OAAO,QAAQ,CAAC,WAAW,CAAC;QAC9B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,MAAM,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACtE,OAAO,CAAC,IAAI,CACV,8EAA8E,EAC9E,MAAM,CACP,CAAC;QACJ,CAAC;IACH,CAAC;IAED,IAAI,CAAC;QACH,MAAM,gBAAgB,GAA8B,MAAM,sBAAsB,EAAE,CAAC;QACnF,MAAM,KAAK,GAAG,kBAAkB,CAAC;YAC/B,MAAM,EAAE,gBAAgB,CAAC,MAAM;YAC/B,KAAK,EAAE,KAAK;YACZ,OAAO,EAAE,WAAW;YACpB,UAAU,EAAE,yBAAyB;SACtC,CAAC,CAAC;QACH,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,yBAAyB,CAAC;QAC5E,cAAc,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;QACxD,OAAO,KAAK,CAAC;IACf,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,MAAM,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;QAC/E,MAAM,iBAAiB,GAAG,oBAAoB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAChE,MAAM,IAAI,GAAG,WAAW;YACtB,CAAC,CAAC,gDAAgD,iBAAiB,cAAc;YACjF,CAAC,CAAC,wGAAwG,CAAC;QAC7G,MAAM,IAAI,KAAK,CAAC,kDAAkD,MAAM,KAAK,IAAI,EAAE,CAAC,CAAC;IACvF,CAAC;AACH,CAAC"}

package/dist/src/types.d.ts

@@ -3,10 +3,16 @@ export interface CliConfig {
     readonly appBaseUrl: string;
     readonly daemonBaseUrl: string;
     readonly adminApiKey: string | null;
+    readonly devBootstrap: DevBootstrapConfig | null;
     readonly oauthScriptPath: string | null;
     readonly servers: Record<string, ServerConfig>;
 }
-export type CachedCliTokenSource = 'secret' | 'api';
+export interface DevBootstrapConfig {
+    readonly endpoint: string | null;
+    readonly loginPath: string | null;
+    readonly redirectParam: string | null;
+}
+export type CachedCliTokenSource = "secret" | "api";
 export interface ServerConfig {
     readonly env: string;
     readonly start: string[] | null;

package/dist/src/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/types.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,QAAQ,CAAC,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IACxC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;CAChD;AAED,MAAM,MAAM,oBAAoB,GAAG,QAAQ,GAAG,KAAK,CAAC;AAEpD,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAChC,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAChC,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CACnC"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/types.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,QAAQ,CAAC,YAAY,EAAE,kBAAkB,GAAG,IAAI,CAAC;IACjD,QAAQ,CAAC,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IACxC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;CAChD;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,QAAQ,CAAC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;CACvC;AAED,MAAM,MAAM,oBAAoB,GAAG,QAAQ,GAAG,KAAK,CAAC;AAEpD,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAChC,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAChC,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CACnC"}

package/dist/src/util/app-label.js

@@ -1,8 +1,8 @@
-import { regex } from 'arkregex';
-export const DEFAULT_APP_LABEL = 'your application';
-const LEADING_ARTICLE_PATTERN = regex.as(String.raw `^(?:the|a|an|your)\b`, 'i');
+import { regex } from "arkregex";
+export const DEFAULT_APP_LABEL = "your application";
+const LEADING_ARTICLE_PATTERN = regex.as(String.raw `^(?:the|a|an|your)\b`, "i");
 export function normalizeAppLabel(value) {
-    if (typeof value !== 'string') {
+    if (typeof value !== "string") {
         return null;
     }
     const trimmed = value.trim();

package/dist/src/util/errors.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../../src/util/errors.ts"],"names":[],"mappings":"AAEA,kEAAkE;AAClE,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,CAgB3E;AAED,4CAA4C;AAC5C,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAAC,cAAc,CAE/E;AAED,yDAAyD;AACzD,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,SAAY,GAAG,MAAM,CAkB5E;AAED,qDAAqD;AACrD,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,IAAI,CAMnE"}
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../../src/util/errors.ts"],"names":[],"mappings":"AAEA,kEAAkE;AAClE,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,CAgB3E;AAED,4CAA4C;AAC5C,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAAC,cAAc,CAM/E;AAED,yDAAyD;AACzD,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,SAAY,GAAG,MAAM,CAkB5E;AAED,qDAAqD;AACrD,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,IAAI,CAMnE"}

package/dist/src/util/errors.js

@@ -1,41 +1,43 @@
-import { sweetLinkDebug } from '../env.js';
+import { sweetLinkDebug } from "../env.js";
 /** Extracts a readable message from unknown error-like values. */
 export function extractEventMessage(event, prefix) {
     const parts = [];
     if (prefix) {
         parts.push(prefix);
     }
-    if (typeof event === 'string') {
+    if (typeof event === "string") {
         parts.push(event);
     }
     else if (event instanceof Error) {
-        parts.push(event.message || event.name || 'Unknown error');
+        parts.push(event.message || event.name || "Unknown error");
     }
-    else if (event && typeof event === 'object' && 'message' in event) {
+    else if (event && typeof event === "object" && "message" in event) {
         const message = event.message;
-        parts.push(typeof message === 'string' ? message : JSON.stringify(message));
+        parts.push(typeof message === "string" ? message : JSON.stringify(message));
     }
     else {
         parts.push(String(event));
     }
-    return parts.join(': ');
+    return parts.join(": ");
 }
 /** Type guard for Node errno exceptions. */
 export function isErrnoException(value) {
-    return typeof value === 'object' && value !== null && typeof value.code === 'string';
+    return (typeof value === "object" &&
+        value !== null &&
+        typeof value.code === "string");
 }
 /** Formats unknown values for human-readable logging. */
-export function describeUnknown(value, fallback = 'unknown') {
+export function describeUnknown(value, fallback = "unknown") {
     if (value === null || value === undefined) {
         return fallback;
     }
     if (value instanceof Error) {
         return value.message || value.name || fallback;
     }
-    if (typeof value === 'string') {
+    if (typeof value === "string") {
         return value;
     }
-    if (typeof value === 'number' || typeof value === 'boolean' || typeof value === 'bigint') {
+    if (typeof value === "number" || typeof value === "boolean" || typeof value === "bigint") {
         return String(value);
     }
     try {

package/dist/src/util/errors.js.map

@@ -1 +1 @@
-{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../../src/util/errors.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAE3C,kEAAkE;AAClE,MAAM,UAAU,mBAAmB,CAAC,KAAc,EAAE,MAAe;IACjE,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,MAAM,EAAE,CAAC;QACX,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACrB,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACpB,CAAC;SAAM,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;QAClC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,IAAI,IAAI,eAAe,CAAC,CAAC;IAC7D,CAAC;SAAM,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,SAAS,IAAI,KAAK,EAAE,CAAC;QACpE,MAAM,OAAO,GAAI,KAA+B,CAAC,OAAO,CAAC;QACzD,KAAK,CAAC,IAAI,CAAC,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;IAC9E,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAC5B,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,4CAA4C;AAC5C,MAAM,UAAU,gBAAgB,CAAC,KAAc;IAC7C,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,OAAQ,KAA4B,CAAC,IAAI,KAAK,QAAQ,CAAC;AAC/G,CAAC;AAED,yDAAyD;AACzD,MAAM,UAAU,eAAe,CAAC,KAAc,EAAE,QAAQ,GAAG,SAAS;IAClE,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QAC1C,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;QAC3B,OAAO,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,IAAI,IAAI,QAAQ,CAAC;IACjD,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACzF,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;IACD,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,QAAQ,CAAC;IAClB,CAAC;AACH,CAAC;AAED,qDAAqD;AACrD,MAAM,UAAU,aAAa,CAAC,OAAe,EAAE,KAAc;IAC3D,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,OAAO;IACT,CAAC;IACD,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;IAChF,OAAO,CAAC,IAAI,CAAC,mBAAmB,OAAO,KAAK,OAAO,EAAE,EAAE,KAAK,CAAC,CAAC;AAChE,CAAC"}
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../../src/util/errors.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAE3C,kEAAkE;AAClE,MAAM,UAAU,mBAAmB,CAAC,KAAc,EAAE,MAAe;IACjE,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,MAAM,EAAE,CAAC;QACX,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACrB,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACpB,CAAC;SAAM,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;QAClC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,IAAI,IAAI,eAAe,CAAC,CAAC;IAC7D,CAAC;SAAM,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,SAAS,IAAI,KAAK,EAAE,CAAC;QACpE,MAAM,OAAO,GAAI,KAA+B,CAAC,OAAO,CAAC;QACzD,KAAK,CAAC,IAAI,CAAC,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;IAC9E,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAC5B,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,4CAA4C;AAC5C,MAAM,UAAU,gBAAgB,CAAC,KAAc;IAC7C,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,KAAK,IAAI;QACd,OAAQ,KAA4B,CAAC,IAAI,KAAK,QAAQ,CACvD,CAAC;AACJ,CAAC;AAED,yDAAyD;AACzD,MAAM,UAAU,eAAe,CAAC,KAAc,EAAE,QAAQ,GAAG,SAAS;IAClE,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QAC1C,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;QAC3B,OAAO,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,IAAI,IAAI,QAAQ,CAAC;IACjD,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACzF,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;IACD,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,QAAQ,CAAC;IAClB,CAAC;AACH,CAAC;AAED,qDAAqD;AACrD,MAAM,UAAU,aAAa,CAAC,OAAe,EAAE,KAAc;IAC3D,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,OAAO;IACT,CAAC;IACD,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;IAChF,OAAO,CAAC,IAAI,CAAC,mBAAmB,OAAO,KAAK,OAAO,EAAE,EAAE,KAAK,CAAC,CAAC;AAChE,CAAC"}

package/dist/src/util/path.js

@@ -1,6 +1,6 @@
-import os from 'node:os';
+import os from "node:os";
 /** Collapses the current home directory so paths read cleanly in logs. */
 export function formatPathForDisplay(value) {
-    return value.replace(os.homedir(), '~');
+    return value.replace(os.homedir(), "~");
 }
 //# sourceMappingURL=path.js.map

package/dist/src/util/regex.js

@@ -1,5 +1,5 @@
-import { regex } from 'arkregex';
-export const TRAILING_SLASH_PATTERN = regex.as('/+$');
-export const OPTIONAL_TRAILING_SLASH_PATTERN = regex.as('/?$');
-export const LEADING_SLASH_PATTERN = regex.as('^/+');
+import { regex } from "arkregex";
+export const TRAILING_SLASH_PATTERN = regex.as("/+$");
+export const OPTIONAL_TRAILING_SLASH_PATTERN = regex.as("/?$");
+export const LEADING_SLASH_PATTERN = regex.as("^/+");
 //# sourceMappingURL=regex.js.map

package/package.json

@@ -1,37 +1,27 @@
 {
   "name": "sweetlink",
-  "version": "0.1.0",
-  "license": "MIT",
+  "version": "0.2.1",
   "private": false,
-  "type": "module",
   "description": "Controlled-browser automation CLI for SweetLink sessions.",
-  "homepage": "https://github.com/steipete/sweetlink",
-  "repository": {
-    "type": "git",
-    "url": "https://github.com/steipete/sweetlink.git",
-    "directory": "apps/sweetlink"
-  },
-  "bugs": {
-    "url": "https://github.com/steipete/sweetlink/issues"
-  },
   "keywords": [
-    "sweetlink",
     "automation",
     "browser",
+    "cli",
     "devtools",
-    "cli"
+    "sweetlink"
   ],
-  "bin": {
-    "sweetlink": "./dist/src/index.js"
+  "homepage": "https://github.com/steipete/sweetlink",
+  "bugs": {
+    "url": "https://github.com/steipete/sweetlink/issues"
   },
-  "devDependencies": {
-    "@biomejs/biome": "^2.3.4",
-    "@types/node": "^22.19.0",
-    "@types/ws": "^8.18.1",
-    "tsx": "^4.20.6",
-    "typescript": "^5.9.3",
-    "ultracite": "^6.3.2",
-    "vitest": "^4.0.8"
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/steipete/sweetlink.git"
+  },
+  "bin": {
+    "sweetlink": "./dist/src/index.js",
+    "sweetlinkd": "./dist/daemon/src/index.js"
   },
   "files": [
     "dist",
@@ -39,6 +29,7 @@
     "LICENSE",
     "CHANGELOG.md"
   ],
+  "type": "module",
   "main": "./dist/src/index.js",
   "module": "./dist/src/index.js",
   "types": "./dist/src/index.d.ts",
@@ -57,30 +48,47 @@
   "publishConfig": {
     "access": "public"
   },
-  "engines": {
-    "node": ">=22.0.0",
-    "pnpm": ">=10.16.0"
-  },
   "dependencies": {
-    "arkregex": "^0.0.2",
-    "chrome-cookies-secure": "^3.0.0",
-    "commander": "^14.0.2",
-    "dotenv": "^17.2.3",
-    "es-toolkit": "^1.41.0",
+    "@steipete/sweet-cookie": "0.3.0",
+    "arkregex": "^0.0.5",
+    "commander": "^15.0.0",
+    "dotenv": "^17.4.2",
+    "es-toolkit": "^1.47.0",
     "html2canvas": "^1.4.1",
-    "playwright-core": "^1.56.1",
-    "puppeteer": "^24.29.1",
+    "playwright-core": "^1.60.0",
+    "puppeteer-core": "^25.1.0",
     "random-word-slugs": "^0.1.7",
     "tldjs": "^2.3.2",
-    "undici": "^7.16.0",
-    "ws": "^8.18.3",
-    "zod": "^3.25.76"
+    "undici": "^8.4.1",
+    "ws": "^8.21.0",
+    "zod": "^4.4.3"
+  },
+  "devDependencies": {
+    "@types/node": "^25.9.2",
+    "@types/ws": "^8.18.1",
+    "@typescript/native-preview": "7.0.0-dev.20260609.1",
+    "jsdom": "^29.1.1",
+    "oxfmt": "^0.54.0",
+    "oxlint": "^1.69.0",
+    "tsx": "^4.22.4",
+    "typescript": "^6.0.3",
+    "ultracite": "^7.8.2",
+    "vite": "^8.0.16",
+    "vitest": "^4.1.8"
+  },
+  "engines": {
+    "node": ">=24.0.0",
+    "pnpm": ">=10.16.0"
   },
   "scripts": {
     "dev": "tsx src/index.ts",
-    "build": "tsc --project tsconfig.build.json",
+    "build": "tsgo --project tsconfig.build.json",
     "test": "vitest run --config vitest.config.ts",
-    "lint": "biome lint ./src ./shared/src ./daemon/src ./tests",
+    "typecheck": "tsgo --project tsconfig.json --noEmit",
+    "format": "node scripts/format.mjs --write",
+    "format:check": "node scripts/format.mjs",
+    "lint": "pnpm format:check && oxlint --deny-warnings ./src ./shared/src ./daemon/src ./tests",
+    "lint:fix": "pnpm format && oxlint --fix ./src ./shared/src ./daemon/src ./tests",
     "standalone:post-sync": "tsx scripts/post-sync.ts"
   }
 }