tenjin-cli 0.1.0-alpha.1 → 0.1.0-alpha.3

package/dist/candidate-ERMSYYQZ.js

@@ -0,0 +1,127 @@
+import { createRequire as __tenjinCreateRequire } from 'node:module'; const require = __tenjinCreateRequire(import.meta.url);
+import {
+  createCandidate,
+  dropCandidate,
+  listCandidates
+} from "./chunk-TLCMMYLY.js";
+import {
+  UUID_RE
+} from "./chunk-3OV7E5G5.js";
+import {
+  sanitizeForTerminal
+} from "./chunk-Z52RA3NC.js";
+import {
+  pathExists
+} from "./chunk-GO75V3NZ.js";
+import "./chunk-ESPNTPQ2.js";
+import "./chunk-2I4QTOLB.js";
+import "./chunk-UO22YNY4.js";
+import "./chunk-MUBUQVC3.js";
+import {
+  CliError
+} from "./chunk-OYMYCW7J.js";
+import "./chunk-ZXTAQYNA.js";
+
+// src/commands/candidate.ts
+import { readFile } from "fs/promises";
+import { dirname, join, resolve } from "path";
+async function runCandidateAdd(args, ctx, deps = {}) {
+  if (!UUID_RE.test(args.lookupId)) {
+    throw new CliError("USAGE", `Invalid --lookup-id: ${JSON.stringify(args.lookupId)}.`, {
+      fix: "Pass the lookupId from a prior `tenjin lookup` (a uuid)."
+    });
+  }
+  if (args.question !== void 0 && args.question.length > 200) {
+    throw new CliError("USAGE", "A candidate --question is at most 200 characters.", {
+      fix: "Shorten the question to 200 characters or fewer."
+    });
+  }
+  let draft;
+  try {
+    draft = await readFile(args.file, "utf8");
+  } catch (err) {
+    throw new CliError("USAGE", `Cannot read draft file ${JSON.stringify(args.file)}.`, {
+      fix: "Pass a path to a readable Markdown file.",
+      cause: err
+    });
+  }
+  const cwd = deps.cwd ?? process.cwd();
+  const sourceProject = await repoRootOrCwd(cwd);
+  const created = (deps.now?.() ?? /* @__PURE__ */ new Date()).toISOString();
+  const record = await createCandidate(ctx.dataDir, {
+    draft,
+    lookupId: args.lookupId,
+    ...args.question !== void 0 ? { question: args.question } : {},
+    created,
+    sourceProject
+  });
+  return {
+    data: {
+      id: record.id,
+      path: record.dir,
+      lookupId: record.meta.lookupId,
+      ...record.meta.question !== void 0 ? { question: record.meta.question } : {},
+      created: record.meta.created,
+      sourceProject: record.meta.sourceProject
+    },
+    humanLines: [`Parked candidate ${record.id}`, `  ${record.dir}`]
+  };
+}
+async function runCandidateList(ctx, deps = {}) {
+  const now = deps.now?.() ?? /* @__PURE__ */ new Date();
+  const records = await listCandidates(ctx.dataDir);
+  const candidates = records.map((r) => ({
+    id: r.id,
+    lookupId: r.meta.lookupId,
+    ...r.meta.question !== void 0 ? { question: r.meta.question } : {},
+    created: r.meta.created,
+    sourceProject: r.meta.sourceProject,
+    path: r.dir
+  }));
+  const humanLines = records.length === 0 ? ["No pending candidates."] : records.map((r) => {
+    const q = r.meta.question !== void 0 ? sanitizeForTerminal(r.meta.question) : "(no question)";
+    return `${r.id}  ${humanizeAge(r.meta.created, now)}  ${q}  [${sanitizeForTerminal(
+      r.meta.sourceProject
+    )}]`;
+  });
+  return { data: { candidates }, humanLines };
+}
+async function runCandidateDrop(args, ctx) {
+  const dropped = await dropCandidate(ctx.dataDir, args.id);
+  if (!dropped) {
+    throw new CliError("USAGE", `No candidate with id ${JSON.stringify(args.id)}.`, {
+      fix: "Run `tenjin candidate list` to see pending candidate ids."
+    });
+  }
+  return {
+    data: { id: args.id, dropped: true },
+    humanLines: [`Dropped candidate ${args.id}.`]
+  };
+}
+async function repoRootOrCwd(cwd) {
+  let dir = resolve(cwd);
+  for (; ; ) {
+    if (await pathExists(join(dir, ".git"))) return dir;
+    const parent = dirname(dir);
+    if (parent === dir) return resolve(cwd);
+    dir = parent;
+  }
+}
+var MINUTE = 6e4;
+var HOUR = 60 * MINUTE;
+var DAY = 24 * HOUR;
+function humanizeAge(iso, now) {
+  const then = Date.parse(iso);
+  if (Number.isNaN(then)) return "just now";
+  const ms = now.getTime() - then;
+  if (ms < MINUTE) return "just now";
+  if (ms < HOUR) return `${Math.floor(ms / MINUTE)}m ago`;
+  if (ms < DAY) return `${Math.floor(ms / HOUR)}h ago`;
+  return `${Math.floor(ms / DAY)}d ago`;
+}
+export {
+  runCandidateAdd,
+  runCandidateDrop,
+  runCandidateList
+};
+//# sourceMappingURL=candidate-ERMSYYQZ.js.map

package/dist/candidate-ERMSYYQZ.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/commands/candidate.ts"],"sourcesContent":["import { readFile } from 'node:fs/promises';\nimport { dirname, join, resolve } from 'node:path';\nimport { CliError } from '../lib/errors';\nimport { createCandidate, dropCandidate, listCandidates } from '../lib/candidate-store';\nimport { UUID_RE } from '../lib/ids';\nimport { sanitizeForTerminal } from '../lib/output';\nimport { pathExists } from '../lib/settings';\nimport type { CommandContext, CommandResult } from '../context';\n\n/**\n * `tenjin candidate [add|list|drop]`: the D40 local store of parked publish\n * drafts. Entirely offline — a candidate never touches the network and never\n * uploads; only a later `tenjin publish --candidate <id>` sends it, under the\n * D38 consent scan. This module owns the command surface; lib/candidate-store.ts\n * owns the on-disk custody (0700 dirs, 0600 files, atomic meta commit).\n */\n\nexport interface CandidateAddArgs {\n  file: string;\n  lookupId: string;\n  question?: string;\n}\n\nexport interface CandidateDeps {\n  /** Clock seam so list ordering / age tests are deterministic. */\n  now?: () => Date;\n  /** cwd seam so sourceProject discovery is testable against a temp tree. */\n  cwd?: string;\n}\n\nexport async function runCandidateAdd(\n  args: CandidateAddArgs,\n  ctx: CommandContext,\n  deps: CandidateDeps = {},\n): Promise<CommandResult> {\n  if (!UUID_RE.test(args.lookupId)) {\n    throw new CliError('USAGE', `Invalid --lookup-id: ${JSON.stringify(args.lookupId)}.`, {\n      fix: 'Pass the lookupId from a prior `tenjin lookup` (a uuid).',\n    });\n  }\n  // Cap the question at the server's questionsAnswered item bound (200) at PARK\n  // time, so a candidate can never be born unpublishable — it prefills the card's\n  // questionsAnswered, which publish would otherwise reject only at write time.\n  if (args.question !== undefined && args.question.length > 200) {\n    throw new CliError('USAGE', 'A candidate --question is at most 200 characters.', {\n      fix: 'Shorten the question to 200 characters or fewer.',\n    });\n  }\n\n  let draft: string;\n  try {\n    draft = await readFile(args.file, 'utf8');\n  } catch (err) {\n    throw new CliError('USAGE', `Cannot read draft file ${JSON.stringify(args.file)}.`, {\n      fix: 'Pass a path to a readable Markdown file.',\n      cause: err,\n    });\n  }\n\n  const cwd = deps.cwd ?? process.cwd();\n  const sourceProject = await repoRootOrCwd(cwd);\n  const created = (deps.now?.() ?? new Date()).toISOString();\n\n  const record = await createCandidate(ctx.dataDir, {\n    draft,\n    lookupId: args.lookupId,\n    ...(args.question !== undefined ? { question: args.question } : {}),\n    created,\n    sourceProject,\n  });\n\n  return {\n    data: {\n      id: record.id,\n      path: record.dir,\n      lookupId: record.meta.lookupId,\n      ...(record.meta.question !== undefined ? { question: record.meta.question } : {}),\n      created: record.meta.created,\n      sourceProject: record.meta.sourceProject,\n    },\n    humanLines: [`Parked candidate ${record.id}`, `  ${record.dir}`],\n  };\n}\n\nexport async function runCandidateList(\n  ctx: CommandContext,\n  deps: CandidateDeps = {},\n): Promise<CommandResult> {\n  const now = deps.now?.() ?? new Date();\n  const records = await listCandidates(ctx.dataDir);\n\n  const candidates = records.map((r) => ({\n    id: r.id,\n    lookupId: r.meta.lookupId,\n    ...(r.meta.question !== undefined ? { question: r.meta.question } : {}),\n    created: r.meta.created,\n    sourceProject: r.meta.sourceProject,\n    path: r.dir,\n  }));\n\n  const humanLines =\n    records.length === 0\n      ? ['No pending candidates.']\n      : records.map((r) => {\n          const q =\n            r.meta.question !== undefined ? sanitizeForTerminal(r.meta.question) : '(no question)';\n          return `${r.id}  ${humanizeAge(r.meta.created, now)}  ${q}  [${sanitizeForTerminal(\n            r.meta.sourceProject,\n          )}]`;\n        });\n\n  return { data: { candidates }, humanLines };\n}\n\nexport async function runCandidateDrop(\n  args: { id: string },\n  ctx: CommandContext,\n): Promise<CommandResult> {\n  const dropped = await dropCandidate(ctx.dataDir, args.id);\n  if (!dropped) {\n    throw new CliError('USAGE', `No candidate with id ${JSON.stringify(args.id)}.`, {\n      fix: 'Run `tenjin candidate list` to see pending candidate ids.',\n    });\n  }\n  return {\n    data: { id: args.id, dropped: true },\n    humanLines: [`Dropped candidate ${args.id}.`],\n  };\n}\n\n/**\n * The project a candidate was parked from: the nearest ancestor holding a `.git`\n * (inclusive), or the cwd when the add did not run inside a repo. Mirrors the\n * repo-root walk settings.ts uses to bound the `.tenjin.json` search.\n */\nasync function repoRootOrCwd(cwd: string): Promise<string> {\n  let dir = resolve(cwd);\n  for (;;) {\n    if (await pathExists(join(dir, '.git'))) return dir;\n    const parent = dirname(dir);\n    if (parent === dir) return resolve(cwd);\n    dir = parent;\n  }\n}\n\nconst MINUTE = 60_000;\nconst HOUR = 60 * MINUTE;\nconst DAY = 24 * HOUR;\n\n/**\n * Compact relative age for the human list (\"just now\", \"5m ago\", \"3d ago\"). A\n * future or unparseable timestamp degrades to \"just now\" rather than throwing;\n * the ISO value is always carried verbatim in the JSON data for machines.\n */\nfunction humanizeAge(iso: string, now: Date): string {\n  const then = Date.parse(iso);\n  if (Number.isNaN(then)) return 'just now';\n  const ms = now.getTime() - then;\n  if (ms < MINUTE) return 'just now';\n  if (ms < HOUR) return `${Math.floor(ms / MINUTE)}m ago`;\n  if (ms < DAY) return `${Math.floor(ms / HOUR)}h ago`;\n  return `${Math.floor(ms / DAY)}d ago`;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;AAAA,SAAS,gBAAgB;AACzB,SAAS,SAAS,MAAM,eAAe;AA6BvC,eAAsB,gBACpB,MACA,KACA,OAAsB,CAAC,GACC;AACxB,MAAI,CAAC,QAAQ,KAAK,KAAK,QAAQ,GAAG;AAChC,UAAM,IAAI,SAAS,SAAS,wBAAwB,KAAK,UAAU,KAAK,QAAQ,CAAC,KAAK;AAAA,MACpF,KAAK;AAAA,IACP,CAAC;AAAA,EACH;AAIA,MAAI,KAAK,aAAa,UAAa,KAAK,SAAS,SAAS,KAAK;AAC7D,UAAM,IAAI,SAAS,SAAS,qDAAqD;AAAA,MAC/E,KAAK;AAAA,IACP,CAAC;AAAA,EACH;AAEA,MAAI;AACJ,MAAI;AACF,YAAQ,MAAM,SAAS,KAAK,MAAM,MAAM;AAAA,EAC1C,SAAS,KAAK;AACZ,UAAM,IAAI,SAAS,SAAS,0BAA0B,KAAK,UAAU,KAAK,IAAI,CAAC,KAAK;AAAA,MAClF,KAAK;AAAA,MACL,OAAO;AAAA,IACT,CAAC;AAAA,EACH;AAEA,QAAM,MAAM,KAAK,OAAO,QAAQ,IAAI;AACpC,QAAM,gBAAgB,MAAM,cAAc,GAAG;AAC7C,QAAM,WAAW,KAAK,MAAM,KAAK,oBAAI,KAAK,GAAG,YAAY;AAEzD,QAAM,SAAS,MAAM,gBAAgB,IAAI,SAAS;AAAA,IAChD;AAAA,IACA,UAAU,KAAK;AAAA,IACf,GAAI,KAAK,aAAa,SAAY,EAAE,UAAU,KAAK,SAAS,IAAI,CAAC;AAAA,IACjE;AAAA,IACA;AAAA,EACF,CAAC;AAED,SAAO;AAAA,IACL,MAAM;AAAA,MACJ,IAAI,OAAO;AAAA,MACX,MAAM,OAAO;AAAA,MACb,UAAU,OAAO,KAAK;AAAA,MACtB,GAAI,OAAO,KAAK,aAAa,SAAY,EAAE,UAAU,OAAO,KAAK,SAAS,IAAI,CAAC;AAAA,MAC/E,SAAS,OAAO,KAAK;AAAA,MACrB,eAAe,OAAO,KAAK;AAAA,IAC7B;AAAA,IACA,YAAY,CAAC,oBAAoB,OAAO,EAAE,IAAI,KAAK,OAAO,GAAG,EAAE;AAAA,EACjE;AACF;AAEA,eAAsB,iBACpB,KACA,OAAsB,CAAC,GACC;AACxB,QAAM,MAAM,KAAK,MAAM,KAAK,oBAAI,KAAK;AACrC,QAAM,UAAU,MAAM,eAAe,IAAI,OAAO;AAEhD,QAAM,aAAa,QAAQ,IAAI,CAAC,OAAO;AAAA,IACrC,IAAI,EAAE;AAAA,IACN,UAAU,EAAE,KAAK;AAAA,IACjB,GAAI,EAAE,KAAK,aAAa,SAAY,EAAE,UAAU,EAAE,KAAK,SAAS,IAAI,CAAC;AAAA,IACrE,SAAS,EAAE,KAAK;AAAA,IAChB,eAAe,EAAE,KAAK;AAAA,IACtB,MAAM,EAAE;AAAA,EACV,EAAE;AAEF,QAAM,aACJ,QAAQ,WAAW,IACf,CAAC,wBAAwB,IACzB,QAAQ,IAAI,CAAC,MAAM;AACjB,UAAM,IACJ,EAAE,KAAK,aAAa,SAAY,oBAAoB,EAAE,KAAK,QAAQ,IAAI;AACzE,WAAO,GAAG,EAAE,EAAE,KAAK,YAAY,EAAE,KAAK,SAAS,GAAG,CAAC,KAAK,CAAC,MAAM;AAAA,MAC7D,EAAE,KAAK;AAAA,IACT,CAAC;AAAA,EACH,CAAC;AAEP,SAAO,EAAE,MAAM,EAAE,WAAW,GAAG,WAAW;AAC5C;AAEA,eAAsB,iBACpB,MACA,KACwB;AACxB,QAAM,UAAU,MAAM,cAAc,IAAI,SAAS,KAAK,EAAE;AACxD,MAAI,CAAC,SAAS;AACZ,UAAM,IAAI,SAAS,SAAS,wBAAwB,KAAK,UAAU,KAAK,EAAE,CAAC,KAAK;AAAA,MAC9E,KAAK;AAAA,IACP,CAAC;AAAA,EACH;AACA,SAAO;AAAA,IACL,MAAM,EAAE,IAAI,KAAK,IAAI,SAAS,KAAK;AAAA,IACnC,YAAY,CAAC,qBAAqB,KAAK,EAAE,GAAG;AAAA,EAC9C;AACF;AAOA,eAAe,cAAc,KAA8B;AACzD,MAAI,MAAM,QAAQ,GAAG;AACrB,aAAS;AACP,QAAI,MAAM,WAAW,KAAK,KAAK,MAAM,CAAC,EAAG,QAAO;AAChD,UAAM,SAAS,QAAQ,GAAG;AAC1B,QAAI,WAAW,IAAK,QAAO,QAAQ,GAAG;AACtC,UAAM;AAAA,EACR;AACF;AAEA,IAAM,SAAS;AACf,IAAM,OAAO,KAAK;AAClB,IAAM,MAAM,KAAK;AAOjB,SAAS,YAAY,KAAa,KAAmB;AACnD,QAAM,OAAO,KAAK,MAAM,GAAG;AAC3B,MAAI,OAAO,MAAM,IAAI,EAAG,QAAO;AAC/B,QAAM,KAAK,IAAI,QAAQ,IAAI;AAC3B,MAAI,KAAK,OAAQ,QAAO;AACxB,MAAI,KAAK,KAAM,QAAO,GAAG,KAAK,MAAM,KAAK,MAAM,CAAC;AAChD,MAAI,KAAK,IAAK,QAAO,GAAG,KAAK,MAAM,KAAK,IAAI,CAAC;AAC7C,SAAO,GAAG,KAAK,MAAM,KAAK,GAAG,CAAC;AAChC;","names":[]}

package/dist/{ccip-UCLT5VOW.js → ccip-NQXCEK2U.js}

@@ -4,14 +4,15 @@ import {
   offchainLookup,
   offchainLookupAbiItem,
   offchainLookupSignature
-} from "./chunk-LPRVHM7P.js";
-import "./chunk-BRJHUQSY.js";
-import "./chunk-CUWUHTIL.js";
-import "./chunk-3IMLRUZE.js";
+} from "./chunk-RRN3YTK7.js";
+import "./chunk-HIVZG55D.js";
+import "./chunk-RBJPAZFI.js";
+import "./chunk-5CLSD5YN.js";
+import "./chunk-ZXTAQYNA.js";
 export {
   ccipRequest,
   offchainLookup,
   offchainLookupAbiItem,
   offchainLookupSignature
 };
-//# sourceMappingURL=ccip-UCLT5VOW.js.map
+//# sourceMappingURL=ccip-NQXCEK2U.js.map

package/dist/ccip-XR5NE5QK.js

@@ -0,0 +1,19 @@
+import { createRequire as __tenjinCreateRequire } from 'node:module'; const require = __tenjinCreateRequire(import.meta.url);
+import {
+  ccipRequest,
+  offchainLookup,
+  offchainLookupAbiItem,
+  offchainLookupSignature
+} from "./chunk-ZMHYXMO6.js";
+import "./chunk-YALGASEU.js";
+import "./chunk-HIVZG55D.js";
+import "./chunk-RBJPAZFI.js";
+import "./chunk-5CLSD5YN.js";
+import "./chunk-ZXTAQYNA.js";
+export {
+  ccipRequest,
+  offchainLookup,
+  offchainLookupAbiItem,
+  offchainLookupSignature
+};
+//# sourceMappingURL=ccip-XR5NE5QK.js.map

package/dist/chunk-2I4QTOLB.js

@@ -0,0 +1,11 @@
+import { createRequire as __tenjinCreateRequire } from 'node:module'; const require = __tenjinCreateRequire(import.meta.url);
+
+// src/lib/errno.ts
+function hasCode(err, code) {
+  return typeof err === "object" && err !== null && "code" in err && err.code === code;
+}
+
+export {
+  hasCode
+};
+//# sourceMappingURL=chunk-2I4QTOLB.js.map

package/dist/chunk-2I4QTOLB.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/lib/errno.ts"],"sourcesContent":["/**\n * True when `err` is a Node system error carrying the given `code` (ENOENT,\n * EEXIST, …). One definition so the fs-error checks scattered across the wallet\n * store, config loader, and session cache stay identical.\n */\nexport function hasCode(err: unknown, code: string): boolean {\n  return (\n    typeof err === 'object' &&\n    err !== null &&\n    'code' in err &&\n    (err as { code?: unknown }).code === code\n  );\n}\n"],"mappings":";;;AAKO,SAAS,QAAQ,KAAc,MAAuB;AAC3D,SACE,OAAO,QAAQ,YACf,QAAQ,QACR,UAAU,OACT,IAA2B,SAAS;AAEzC;","names":[]}

package/dist/chunk-3OV7E5G5.js

@@ -0,0 +1,18 @@
+import { createRequire as __tenjinCreateRequire } from 'node:module'; const require = __tenjinCreateRequire(import.meta.url);
+
+// src/lib/ids.ts
+import { randomUUID } from "crypto";
+var UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+var SLUG_RE = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;
+var ATOMIC_RE = /^\d{1,39}$/;
+function newId() {
+  return randomUUID();
+}
+
+export {
+  UUID_RE,
+  SLUG_RE,
+  ATOMIC_RE,
+  newId
+};
+//# sourceMappingURL=chunk-3OV7E5G5.js.map

package/dist/chunk-3OV7E5G5.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/lib/ids.ts"],"sourcesContent":["import { randomUUID } from 'node:crypto';\n\n/**\n * The shared identity patterns for server-controlled values that become file\n * paths, URL segments, or terminal output. One definition so a future change\n * (e.g. accepting uppercase ids) cannot be applied in one command and missed in\n * another. SLUG_RE must match the server's slugify charset (lib/posts.ts:\n * lowercase a-z0-9 groups joined by single hyphens, no leading/trailing hyphen).\n */\nexport const UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;\nexport const SLUG_RE = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;\n/** A non-negative atomic USDC integer string (6-decimal base units). */\nexport const ATOMIC_RE = /^\\d{1,39}$/;\n\n/**\n * Mint a fresh opaque id for a locally-created entity (a parked candidate). A v4\n * uuid: the same shape a lookupId takes, so UUID_RE validates it and a `drop\n * <id>` argument that reaches a filesystem path can't traverse out of the store.\n */\nexport function newId(): string {\n  return randomUUID();\n}\n"],"mappings":";;;AAAA,SAAS,kBAAkB;AASpB,IAAM,UAAU;AAChB,IAAM,UAAU;AAEhB,IAAM,YAAY;AAOlB,SAAS,QAAgB;AAC9B,SAAO,WAAW;AACpB;","names":[]}

package/dist/chunk-4ONXEEQL.js

@@ -0,0 +1,152 @@
+import { createRequire as __tenjinCreateRequire } from 'node:module'; const require = __tenjinCreateRequire(import.meta.url);
+import {
+  package_default
+} from "./chunk-FJPLRISB.js";
+
+// src/lib/http.ts
+async function fetchJson(url, opts) {
+  const doFetch = opts.fetchImpl ?? fetch;
+  const controller = new AbortController();
+  let timedOut = false;
+  const timer = setTimeout(() => {
+    timedOut = true;
+    controller.abort();
+  }, opts.timeoutMs);
+  try {
+    let res;
+    try {
+      res = await doFetch(url, {
+        signal: controller.signal,
+        ...opts.headers !== void 0 ? { headers: opts.headers } : {}
+      });
+    } catch (err) {
+      return timedOut ? timeoutFailure(url, opts.timeoutMs) : { ok: false, kind: "network", message: `Request to ${url} failed: ${errorMessage(err)}` };
+    }
+    const requestId = res.headers.get("x-request-id") ?? void 0;
+    if (!res.ok) {
+      return {
+        ok: false,
+        kind: "http",
+        status: res.status,
+        ...requestId !== void 0 ? { requestId } : {},
+        message: `Request to ${url} failed with status ${res.status}`
+      };
+    }
+    let json;
+    try {
+      json = await res.json();
+    } catch (err) {
+      if (timedOut) return timeoutFailure(url, opts.timeoutMs);
+      if (err instanceof SyntaxError) {
+        return {
+          ok: false,
+          kind: "invalid-json",
+          status: res.status,
+          ...requestId !== void 0 ? { requestId } : {},
+          message: `Response from ${url} was not valid JSON`
+        };
+      }
+      return {
+        ok: false,
+        kind: "network",
+        status: res.status,
+        ...requestId !== void 0 ? { requestId } : {},
+        message: `Request to ${url} failed while reading the response body: ${errorMessage(err)}`
+      };
+    }
+    return {
+      ok: true,
+      status: res.status,
+      json,
+      ...requestId !== void 0 ? { requestId } : {}
+    };
+  } finally {
+    clearTimeout(timer);
+  }
+}
+function timeoutFailure(url, timeoutMs) {
+  return {
+    ok: false,
+    kind: "timeout",
+    message: `Request to ${url} timed out after ${timeoutMs}ms`
+  };
+}
+async function httpRequest(url, opts) {
+  const doFetch = opts.fetchImpl ?? fetch;
+  const controller = new AbortController();
+  let timedOut = false;
+  const timer = setTimeout(() => {
+    timedOut = true;
+    controller.abort();
+  }, opts.timeoutMs);
+  try {
+    const headers = { ...opts.headers ?? {} };
+    let body;
+    if (opts.jsonBody !== void 0) {
+      body = JSON.stringify(opts.jsonBody);
+      headers["content-type"] = "application/json";
+    }
+    if (opts.method === "POST" || body !== void 0) headers["accept"] ??= "application/json";
+    let res;
+    try {
+      res = await doFetch(url, {
+        method: opts.method ?? "GET",
+        headers,
+        body,
+        signal: controller.signal
+      });
+    } catch (err) {
+      return timedOut ? timeoutFailure(url, opts.timeoutMs) : { ok: false, kind: "network", message: `Request to ${url} failed: ${errorMessage(err)}` };
+    }
+    const requestId = res.headers.get("x-request-id") ?? void 0;
+    let text;
+    try {
+      text = await res.text();
+    } catch (err) {
+      if (timedOut) return timeoutFailure(url, opts.timeoutMs);
+      return {
+        ok: false,
+        kind: "network",
+        status: res.status,
+        ...requestId !== void 0 ? { requestId } : {},
+        message: `Request to ${url} failed while reading the response body: ${errorMessage(err)}`
+      };
+    }
+    let json;
+    if (text.length > 0) {
+      try {
+        json = JSON.parse(text);
+      } catch {
+        json = void 0;
+      }
+    }
+    return {
+      ok: true,
+      status: res.status,
+      header: (name) => res.headers.get(name) ?? void 0,
+      json,
+      ...requestId !== void 0 ? { requestId } : {}
+    };
+  } finally {
+    clearTimeout(timer);
+  }
+}
+function errorMessage(err) {
+  return err instanceof Error ? err.message : String(err);
+}
+
+// src/lib/client-meta.ts
+var CLIENT_HEADER = `tenjin-cli/${package_default.version}`;
+
+// src/lib/url.ts
+function trimSlash(url) {
+  return url.replace(/\/+$/, "");
+}
+
+export {
+  fetchJson,
+  httpRequest,
+  CLIENT_HEADER,
+  trimSlash
+};
+//# sourceMappingURL=chunk-4ONXEEQL.js.map

package/dist/chunk-4ONXEEQL.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/lib/http.ts","../src/lib/client-meta.ts","../src/lib/url.ts"],"sourcesContent":["import { CliError } from './errors';\n\n/**\n * The single JSON client the whole CLI grows on: `doctor` uses it in B1, `lookup`\n * reuses it in B2. It never throws on a transport/protocol failure — it returns a\n * discriminated result so callers decide how each failure class maps to a check\n * or an error. `fetchImpl` is injectable so tests never touch the network.\n */\nexport interface FetchJsonOptions {\n  /** Abort the request after this many milliseconds. */\n  timeoutMs: number;\n  /** Override global fetch (tests inject a stub returning canned Responses). */\n  fetchImpl?: typeof fetch;\n  /** Optional request headers (doctor sends the X-Tenjin-Client label). */\n  headers?: Record<string, string>;\n}\n\n/** A successful 2xx whose body parsed as JSON. */\nexport interface FetchJsonSuccess {\n  ok: true;\n  status: number;\n  json: unknown;\n  /** The server's `x-request-id`, when it sent one — useful in error reports. */\n  requestId?: string;\n}\n\n/**\n * A failed request, tagged by class so the caller maps it deliberately:\n * `network`/`timeout` (never reached the server or no answer), `http` (a non-2xx\n * status), `invalid-json` (2xx but the body was not JSON).\n */\nexport interface FetchJsonFailure {\n  ok: false;\n  kind: 'network' | 'timeout' | 'http' | 'invalid-json';\n  status?: number;\n  requestId?: string;\n  message: string;\n}\n\nexport type FetchJsonResult = FetchJsonSuccess | FetchJsonFailure;\n\nexport async function fetchJson(url: string, opts: FetchJsonOptions): Promise<FetchJsonResult> {\n  const doFetch = opts.fetchImpl ?? fetch;\n  const controller = new AbortController();\n  let timedOut = false;\n  // The timer stays armed until the body is fully consumed (cleared in the outer\n  // finally), so a server that sends headers then stalls the body still trips the\n  // deadline instead of hanging forever on res.json().\n  const timer = setTimeout(() => {\n    timedOut = true;\n    controller.abort();\n  }, opts.timeoutMs);\n\n  try {\n    let res: Response;\n    try {\n      res = await doFetch(url, {\n        signal: controller.signal,\n        ...(opts.headers !== undefined ? { headers: opts.headers } : {}),\n      });\n    } catch (err) {\n      // A timeout is a network failure the AbortController induced; distinguish it\n      // from an organic one so the caller can say \"timed out\" rather than a raw\n      // AbortError message.\n      return timedOut\n        ? timeoutFailure(url, opts.timeoutMs)\n        : { ok: false, kind: 'network', message: `Request to ${url} failed: ${errorMessage(err)}` };\n    }\n\n    const requestId = res.headers.get('x-request-id') ?? undefined;\n\n    if (!res.ok) {\n      return {\n        ok: false,\n        kind: 'http',\n        status: res.status,\n        ...(requestId !== undefined ? { requestId } : {}),\n        message: `Request to ${url} failed with status ${res.status}`,\n      };\n    }\n\n    let json: unknown;\n    try {\n      json = await res.json();\n    } catch (err) {\n      // The body read can fail three ways. A timeout wins first: the abort fires\n      // synchronously with `timedOut`, so any abort-induced rejection here is our\n      // deadline. Otherwise a SyntaxError is a genuine parse failure (invalid\n      // JSON); anything else is a transport failure mid-body (network).\n      if (timedOut) return timeoutFailure(url, opts.timeoutMs);\n      if (err instanceof SyntaxError) {\n        return {\n          ok: false,\n          kind: 'invalid-json',\n          status: res.status,\n          ...(requestId !== undefined ? { requestId } : {}),\n          message: `Response from ${url} was not valid JSON`,\n        };\n      }\n      return {\n        ok: false,\n        kind: 'network',\n        status: res.status,\n        ...(requestId !== undefined ? { requestId } : {}),\n        message: `Request to ${url} failed while reading the response body: ${errorMessage(err)}`,\n      };\n    }\n\n    return {\n      ok: true,\n      status: res.status,\n      json,\n      ...(requestId !== undefined ? { requestId } : {}),\n    };\n  } finally {\n    clearTimeout(timer);\n  }\n}\n\nfunction timeoutFailure(url: string, timeoutMs: number): FetchJsonFailure {\n  return {\n    ok: false,\n    kind: 'timeout',\n    message: `Request to ${url} timed out after ${timeoutMs}ms`,\n  };\n}\n\n/**\n * A full HTTP round trip that surfaces the STATUS, headers, and best-effort JSON\n * body for ANY status. Unlike fetchJson (2xx-only), the B2 read/pay flow needs\n * the body on a 402 (the leak-safe preview) and a 409 (the owned-re-pay gate),\n * and lookup/outcome need a 4xx validation envelope. A transport/timeout failure\n * still returns the discriminated FetchJsonFailure so callers map it uniformly.\n */\nexport interface HttpRequestOptions {\n  method?: 'GET' | 'POST';\n  timeoutMs: number;\n  headers?: Record<string, string>;\n  /** A JSON body (POST); serialized with a content-type header set automatically. */\n  jsonBody?: unknown;\n  fetchImpl?: typeof fetch;\n}\n\nexport interface HttpResponse {\n  ok: true;\n  status: number;\n  /** Case-insensitive header lookup over the response. */\n  header(name: string): string | undefined;\n  /** Parsed JSON body, or undefined when the body was empty or not JSON. */\n  json: unknown;\n  requestId?: string;\n}\n\nexport type HttpResult = HttpResponse | FetchJsonFailure;\n\nexport async function httpRequest(url: string, opts: HttpRequestOptions): Promise<HttpResult> {\n  const doFetch = opts.fetchImpl ?? fetch;\n  const controller = new AbortController();\n  let timedOut = false;\n  const timer = setTimeout(() => {\n    timedOut = true;\n    controller.abort();\n  }, opts.timeoutMs);\n\n  try {\n    const headers: Record<string, string> = { ...(opts.headers ?? {}) };\n    let body: string | undefined;\n    if (opts.jsonBody !== undefined) {\n      body = JSON.stringify(opts.jsonBody);\n      headers['content-type'] = 'application/json';\n    }\n    if (opts.method === 'POST' || body !== undefined) headers['accept'] ??= 'application/json';\n\n    let res: Response;\n    try {\n      res = await doFetch(url, {\n        method: opts.method ?? 'GET',\n        headers,\n        body,\n        signal: controller.signal,\n      });\n    } catch (err) {\n      return timedOut\n        ? timeoutFailure(url, opts.timeoutMs)\n        : { ok: false, kind: 'network', message: `Request to ${url} failed: ${errorMessage(err)}` };\n    }\n\n    const requestId = res.headers.get('x-request-id') ?? undefined;\n    // Read the raw text once; parse best-effort. A non-JSON body (empty 202, an\n    // HTML error page) yields `undefined` rather than a thrown parse, because a\n    // 402/409 caller keys off the STATUS and only some statuses carry JSON.\n    let text: string;\n    try {\n      text = await res.text();\n    } catch (err) {\n      if (timedOut) return timeoutFailure(url, opts.timeoutMs);\n      return {\n        ok: false,\n        kind: 'network',\n        status: res.status,\n        ...(requestId !== undefined ? { requestId } : {}),\n        message: `Request to ${url} failed while reading the response body: ${errorMessage(err)}`,\n      };\n    }\n    let json: unknown;\n    if (text.length > 0) {\n      try {\n        json = JSON.parse(text);\n      } catch {\n        json = undefined;\n      }\n    }\n    return {\n      ok: true,\n      status: res.status,\n      header: (name) => res.headers.get(name) ?? undefined,\n      json,\n      ...(requestId !== undefined ? { requestId } : {}),\n    };\n  } finally {\n    clearTimeout(timer);\n  }\n}\n\nexport interface FailureToCliErrorOptions {\n  fix?: string;\n  details?: unknown;\n}\n\n/**\n * Normalize a fetch failure into the CLI error contract: network/timeout are a\n * NETWORK_ERROR, an `http` status (server reachable but errored — commonly 5xx)\n * is API_UNREACHABLE, and a 2xx that failed to parse when JSON was required is a\n * CONTRACT_MISMATCH. Callers that need a check-specific code (doctor) build their\n * own CliError; this is the default B2's passthrough leans on.\n */\nexport function fetchFailureToCliError(\n  failure: FetchJsonFailure,\n  opts: FailureToCliErrorOptions = {},\n): CliError {\n  const code =\n    failure.kind === 'network' || failure.kind === 'timeout'\n      ? 'NETWORK_ERROR'\n      : failure.kind === 'invalid-json'\n        ? 'CONTRACT_MISMATCH'\n        : 'API_UNREACHABLE';\n  return new CliError(code, failure.message, {\n    ...(opts.fix !== undefined ? { fix: opts.fix } : {}),\n    ...(opts.details !== undefined ? { details: opts.details } : {}),\n  });\n}\n\nfunction errorMessage(err: unknown): string {\n  return err instanceof Error ? err.message : String(err);\n}\n","import pkg from '../../package.json';\n\n/**\n * The `X-Tenjin-Client` value on every B2 request (spec 09 §purchase-attribution):\n * the server classifies views/payments by this label, so a CLI lookup-flow\n * purchase is never mixed with a web checkout. Format `tenjin-cli/<version>`.\n */\nexport const CLIENT_HEADER = `tenjin-cli/${pkg.version}`;\n","/** Drop trailing slashes from a base URL so `${base}/path` never doubles a slash. */\nexport function trimSlash(url: string): string {\n  return url.replace(/\\/+$/, '');\n}\n"],"mappings":";;;;;;AAyCA,eAAsB,UAAU,KAAa,MAAkD;AAC7F,QAAM,UAAU,KAAK,aAAa;AAClC,QAAM,aAAa,IAAI,gBAAgB;AACvC,MAAI,WAAW;AAIf,QAAM,QAAQ,WAAW,MAAM;AAC7B,eAAW;AACX,eAAW,MAAM;AAAA,EACnB,GAAG,KAAK,SAAS;AAEjB,MAAI;AACF,QAAI;AACJ,QAAI;AACF,YAAM,MAAM,QAAQ,KAAK;AAAA,QACvB,QAAQ,WAAW;AAAA,QACnB,GAAI,KAAK,YAAY,SAAY,EAAE,SAAS,KAAK,QAAQ,IAAI,CAAC;AAAA,MAChE,CAAC;AAAA,IACH,SAAS,KAAK;AAIZ,aAAO,WACH,eAAe,KAAK,KAAK,SAAS,IAClC,EAAE,IAAI,OAAO,MAAM,WAAW,SAAS,cAAc,GAAG,YAAY,aAAa,GAAG,CAAC,GAAG;AAAA,IAC9F;AAEA,UAAM,YAAY,IAAI,QAAQ,IAAI,cAAc,KAAK;AAErD,QAAI,CAAC,IAAI,IAAI;AACX,aAAO;AAAA,QACL,IAAI;AAAA,QACJ,MAAM;AAAA,QACN,QAAQ,IAAI;AAAA,QACZ,GAAI,cAAc,SAAY,EAAE,UAAU,IAAI,CAAC;AAAA,QAC/C,SAAS,cAAc,GAAG,uBAAuB,IAAI,MAAM;AAAA,MAC7D;AAAA,IACF;AAEA,QAAI;AACJ,QAAI;AACF,aAAO,MAAM,IAAI,KAAK;AAAA,IACxB,SAAS,KAAK;AAKZ,UAAI,SAAU,QAAO,eAAe,KAAK,KAAK,SAAS;AACvD,UAAI,eAAe,aAAa;AAC9B,eAAO;AAAA,UACL,IAAI;AAAA,UACJ,MAAM;AAAA,UACN,QAAQ,IAAI;AAAA,UACZ,GAAI,cAAc,SAAY,EAAE,UAAU,IAAI,CAAC;AAAA,UAC/C,SAAS,iBAAiB,GAAG;AAAA,QAC/B;AAAA,MACF;AACA,aAAO;AAAA,QACL,IAAI;AAAA,QACJ,MAAM;AAAA,QACN,QAAQ,IAAI;AAAA,QACZ,GAAI,cAAc,SAAY,EAAE,UAAU,IAAI,CAAC;AAAA,QAC/C,SAAS,cAAc,GAAG,4CAA4C,aAAa,GAAG,CAAC;AAAA,MACzF;AAAA,IACF;AAEA,WAAO;AAAA,MACL,IAAI;AAAA,MACJ,QAAQ,IAAI;AAAA,MACZ;AAAA,MACA,GAAI,cAAc,SAAY,EAAE,UAAU,IAAI,CAAC;AAAA,IACjD;AAAA,EACF,UAAE;AACA,iBAAa,KAAK;AAAA,EACpB;AACF;AAEA,SAAS,eAAe,KAAa,WAAqC;AACxE,SAAO;AAAA,IACL,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,SAAS,cAAc,GAAG,oBAAoB,SAAS;AAAA,EACzD;AACF;AA8BA,eAAsB,YAAY,KAAa,MAA+C;AAC5F,QAAM,UAAU,KAAK,aAAa;AAClC,QAAM,aAAa,IAAI,gBAAgB;AACvC,MAAI,WAAW;AACf,QAAM,QAAQ,WAAW,MAAM;AAC7B,eAAW;AACX,eAAW,MAAM;AAAA,EACnB,GAAG,KAAK,SAAS;AAEjB,MAAI;AACF,UAAM,UAAkC,EAAE,GAAI,KAAK,WAAW,CAAC,EAAG;AAClE,QAAI;AACJ,QAAI,KAAK,aAAa,QAAW;AAC/B,aAAO,KAAK,UAAU,KAAK,QAAQ;AACnC,cAAQ,cAAc,IAAI;AAAA,IAC5B;AACA,QAAI,KAAK,WAAW,UAAU,SAAS,OAAW,SAAQ,QAAQ,MAAM;AAExE,QAAI;AACJ,QAAI;AACF,YAAM,MAAM,QAAQ,KAAK;AAAA,QACvB,QAAQ,KAAK,UAAU;AAAA,QACvB;AAAA,QACA;AAAA,QACA,QAAQ,WAAW;AAAA,MACrB,CAAC;AAAA,IACH,SAAS,KAAK;AACZ,aAAO,WACH,eAAe,KAAK,KAAK,SAAS,IAClC,EAAE,IAAI,OAAO,MAAM,WAAW,SAAS,cAAc,GAAG,YAAY,aAAa,GAAG,CAAC,GAAG;AAAA,IAC9F;AAEA,UAAM,YAAY,IAAI,QAAQ,IAAI,cAAc,KAAK;AAIrD,QAAI;AACJ,QAAI;AACF,aAAO,MAAM,IAAI,KAAK;AAAA,IACxB,SAAS,KAAK;AACZ,UAAI,SAAU,QAAO,eAAe,KAAK,KAAK,SAAS;AACvD,aAAO;AAAA,QACL,IAAI;AAAA,QACJ,MAAM;AAAA,QACN,QAAQ,IAAI;AAAA,QACZ,GAAI,cAAc,SAAY,EAAE,UAAU,IAAI,CAAC;AAAA,QAC/C,SAAS,cAAc,GAAG,4CAA4C,aAAa,GAAG,CAAC;AAAA,MACzF;AAAA,IACF;AACA,QAAI;AACJ,QAAI,KAAK,SAAS,GAAG;AACnB,UAAI;AACF,eAAO,KAAK,MAAM,IAAI;AAAA,MACxB,QAAQ;AACN,eAAO;AAAA,MACT;AAAA,IACF;AACA,WAAO;AAAA,MACL,IAAI;AAAA,MACJ,QAAQ,IAAI;AAAA,MACZ,QAAQ,CAAC,SAAS,IAAI,QAAQ,IAAI,IAAI,KAAK;AAAA,MAC3C;AAAA,MACA,GAAI,cAAc,SAAY,EAAE,UAAU,IAAI,CAAC;AAAA,IACjD;AAAA,EACF,UAAE;AACA,iBAAa,KAAK;AAAA,EACpB;AACF;AA8BA,SAAS,aAAa,KAAsB;AAC1C,SAAO,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AACxD;;;ACvPO,IAAM,gBAAgB,cAAc,gBAAI,OAAO;;;ACN/C,SAAS,UAAU,KAAqB;AAC7C,SAAO,IAAI,QAAQ,QAAQ,EAAE;AAC/B;","names":[]}

package/dist/chunk-5CLSD5YN.js

@@ -0,0 +1,209 @@
+import { createRequire as __tenjinCreateRequire } from 'node:module'; const require = __tenjinCreateRequire(import.meta.url);
+
+// node_modules/.pnpm/@noble+hashes@1.8.0/node_modules/@noble/hashes/esm/cryptoNode.js
+import * as nc from "crypto";
+var crypto = nc && typeof nc === "object" && "webcrypto" in nc ? nc.webcrypto : nc && typeof nc === "object" && "randomBytes" in nc ? nc : void 0;
+
+// node_modules/.pnpm/@noble+hashes@1.8.0/node_modules/@noble/hashes/esm/utils.js
+function isBytes(a) {
+  return a instanceof Uint8Array || ArrayBuffer.isView(a) && a.constructor.name === "Uint8Array";
+}
+function anumber(n) {
+  if (!Number.isSafeInteger(n) || n < 0)
+    throw new Error("positive integer expected, got " + n);
+}
+function abytes(b, ...lengths) {
+  if (!isBytes(b))
+    throw new Error("Uint8Array expected");
+  if (lengths.length > 0 && !lengths.includes(b.length))
+    throw new Error("Uint8Array expected of length " + lengths + ", got length=" + b.length);
+}
+function ahash(h) {
+  if (typeof h !== "function" || typeof h.create !== "function")
+    throw new Error("Hash should be wrapped by utils.createHasher");
+  anumber(h.outputLen);
+  anumber(h.blockLen);
+}
+function aexists(instance, checkFinished = true) {
+  if (instance.destroyed)
+    throw new Error("Hash instance has been destroyed");
+  if (checkFinished && instance.finished)
+    throw new Error("Hash#digest() has already been called");
+}
+function aoutput(out, instance) {
+  abytes(out);
+  const min = instance.outputLen;
+  if (out.length < min) {
+    throw new Error("digestInto() expects output buffer of length at least " + min);
+  }
+}
+function u32(arr) {
+  return new Uint32Array(arr.buffer, arr.byteOffset, Math.floor(arr.byteLength / 4));
+}
+function clean(...arrays) {
+  for (let i = 0; i < arrays.length; i++) {
+    arrays[i].fill(0);
+  }
+}
+function createView(arr) {
+  return new DataView(arr.buffer, arr.byteOffset, arr.byteLength);
+}
+function rotr(word, shift) {
+  return word << 32 - shift | word >>> shift;
+}
+function rotl(word, shift) {
+  return word << shift | word >>> 32 - shift >>> 0;
+}
+var isLE = /* @__PURE__ */ (() => new Uint8Array(new Uint32Array([287454020]).buffer)[0] === 68)();
+function byteSwap(word) {
+  return word << 24 & 4278190080 | word << 8 & 16711680 | word >>> 8 & 65280 | word >>> 24 & 255;
+}
+function byteSwap32(arr) {
+  for (let i = 0; i < arr.length; i++) {
+    arr[i] = byteSwap(arr[i]);
+  }
+  return arr;
+}
+var swap32IfBE = isLE ? (u) => u : byteSwap32;
+var hasHexBuiltin = /* @__PURE__ */ (() => (
+  // @ts-ignore
+  typeof Uint8Array.from([]).toHex === "function" && typeof Uint8Array.fromHex === "function"
+))();
+var hexes = /* @__PURE__ */ Array.from({ length: 256 }, (_, i) => i.toString(16).padStart(2, "0"));
+function bytesToHex(bytes) {
+  abytes(bytes);
+  if (hasHexBuiltin)
+    return bytes.toHex();
+  let hex = "";
+  for (let i = 0; i < bytes.length; i++) {
+    hex += hexes[bytes[i]];
+  }
+  return hex;
+}
+var nextTick = async () => {
+};
+async function asyncLoop(iters, tick, cb) {
+  let ts = Date.now();
+  for (let i = 0; i < iters; i++) {
+    cb(i);
+    const diff = Date.now() - ts;
+    if (diff >= 0 && diff < tick)
+      continue;
+    await nextTick();
+    ts += diff;
+  }
+}
+function utf8ToBytes(str) {
+  if (typeof str !== "string")
+    throw new Error("string expected");
+  return new Uint8Array(new TextEncoder().encode(str));
+}
+function toBytes(data) {
+  if (typeof data === "string")
+    data = utf8ToBytes(data);
+  abytes(data);
+  return data;
+}
+function kdfInputToBytes(data) {
+  if (typeof data === "string")
+    data = utf8ToBytes(data);
+  abytes(data);
+  return data;
+}
+function concatBytes(...arrays) {
+  let sum = 0;
+  for (let i = 0; i < arrays.length; i++) {
+    const a = arrays[i];
+    abytes(a);
+    sum += a.length;
+  }
+  const res = new Uint8Array(sum);
+  for (let i = 0, pad = 0; i < arrays.length; i++) {
+    const a = arrays[i];
+    res.set(a, pad);
+    pad += a.length;
+  }
+  return res;
+}
+function checkOpts(defaults, opts) {
+  if (opts !== void 0 && {}.toString.call(opts) !== "[object Object]")
+    throw new Error("options should be object or undefined");
+  const merged = Object.assign(defaults, opts);
+  return merged;
+}
+var Hash = class {
+};
+function createHasher(hashCons) {
+  const hashC = (msg) => hashCons().update(toBytes(msg)).digest();
+  const tmp = hashCons();
+  hashC.outputLen = tmp.outputLen;
+  hashC.blockLen = tmp.blockLen;
+  hashC.create = () => hashCons();
+  return hashC;
+}
+function randomBytes(bytesLength = 32) {
+  if (crypto && typeof crypto.getRandomValues === "function") {
+    return crypto.getRandomValues(new Uint8Array(bytesLength));
+  }
+  if (crypto && typeof crypto.randomBytes === "function") {
+    return Uint8Array.from(crypto.randomBytes(bytesLength));
+  }
+  throw new Error("crypto.getRandomValues must be defined");
+}
+
+// node_modules/.pnpm/@noble+hashes@1.8.0/node_modules/@noble/hashes/esm/_u64.js
+var U32_MASK64 = /* @__PURE__ */ BigInt(2 ** 32 - 1);
+var _32n = /* @__PURE__ */ BigInt(32);
+function fromBig(n, le = false) {
+  if (le)
+    return { h: Number(n & U32_MASK64), l: Number(n >> _32n & U32_MASK64) };
+  return { h: Number(n >> _32n & U32_MASK64) | 0, l: Number(n & U32_MASK64) | 0 };
+}
+function split(lst, le = false) {
+  const len = lst.length;
+  let Ah = new Uint32Array(len);
+  let Al = new Uint32Array(len);
+  for (let i = 0; i < len; i++) {
+    const { h, l } = fromBig(lst[i], le);
+    [Ah[i], Al[i]] = [h, l];
+  }
+  return [Ah, Al];
+}
+var rotlSH = (h, l, s) => h << s | l >>> 32 - s;
+var rotlSL = (h, l, s) => l << s | h >>> 32 - s;
+var rotlBH = (h, l, s) => l << s - 32 | h >>> 64 - s;
+var rotlBL = (h, l, s) => h << s - 32 | l >>> 64 - s;
+
+export {
+  anumber,
+  abytes,
+  ahash,
+  aexists,
+  aoutput,
+  u32,
+  clean,
+  createView,
+  rotr,
+  rotl,
+  swap32IfBE,
+  bytesToHex,
+  asyncLoop,
+  toBytes,
+  kdfInputToBytes,
+  concatBytes,
+  checkOpts,
+  Hash,
+  createHasher,
+  randomBytes,
+  split,
+  rotlSH,
+  rotlSL,
+  rotlBH,
+  rotlBL
+};
+/*! Bundled license information:
+
+@noble/hashes/esm/utils.js:
+  (*! noble-hashes - MIT License (c) 2022 Paul Miller (paulmillr.com) *)
+*/
+//# sourceMappingURL=chunk-5CLSD5YN.js.map