wldx-cli 1.0.0 → 1.2.0

package/src/commands/profile.mjs

@@ -1,51 +0,0 @@
-// wx profile: the profiles (logged-in e-mails) and which one is the default. No network; never prints a token.
-import {defaultProfile, sessions, setDefaultProfile} from '../auth.mjs';
-import {AuthError} from '../errors.mjs';
-import {localTime, paint, table} from '../format.mjs';
-
-const profiles = (ctx) => {
-  const byDefault = defaultProfile(ctx.env);
-  return sessions(ctx.env).map((s) => ({
-    email: s.email,
-    default: s.email === byDefault,
-    tokenValidUntil: s.expiresAt ? new Date(s.expiresAt).toISOString() : null,
-    expired: s.expiresAt <= ctx.now,
-  }));
-};
-
-export const groups = {
-  profile: {
-    summary: 'your profiles (the e-mails you are logged in with) and the default one',
-    commands: {
-      list: {
-        summary: 'your profiles; * marks the default one',
-        usage: 'wx profile list',
-        options: {},
-        args: [0, 0],
-        run: (ctx) => ({profiles: profiles(ctx)}),
-        text(r, ctx) {
-          if (!r.profiles.length) return 'Not logged in. Run: wx login <e-mail>';
-          const c = paint(ctx);
-          const lines = table(r.profiles.map((p) => [p.default ? '*' : ' ', p.email, p.expired ? c.dim('token renewed on next use') : `token valid until ${localTime(p.tokenValidUntil)}`]));
-          if (r.profiles.length > 1 && !r.profiles.some((p) => p.default)) lines.push(c.yellow('No default profile: set one with wx profile use <e-mail>'));
-          return lines;
-        },
-      },
-      use: {
-        summary: 'make a profile the default one (used when no --profile is given)',
-        usage: 'wx profile use <e-mail>',
-        options: {},
-        args: [1, 1],
-        complete: 'profiles',
-        run(ctx) {
-          const wanted = ctx.positionals[0];
-          const found = sessions(ctx.env).find((s) => s.email.toLowerCase() === wanted.toLowerCase());
-          if (!found) throw new AuthError(`No profile ${wanted}: log in first: wx login ${wanted}`);
-          setDefaultProfile(found.email, ctx.env);
-          return {defaultProfile: found.email};
-        },
-        text: (r) => `Default profile: ${r.defaultProfile}`,
-      },
-    },
-  },
-};

package/src/commands/status.mjs

@@ -1,95 +0,0 @@
-// wx status: the version, the profiles and who the current one is (from the claims of its token). No
-// network, unless --check asks Wildix whether it accepts the token. Never prints a token.
-import {chooseProfile, defaultProfile, getToken, jwtClaims, savedSession, sessions} from '../auth.mjs';
-import {AuthError, HttpError} from '../errors.mjs';
-import {localTime, paint, table} from '../format.mjs';
-import {request} from '../http.mjs';
-import {XBEES_API} from '../services.mjs';
-import {VERSION} from '../version.mjs';
-
-function whoami(claims) {
-  const port = claims['custom:pbx_port'];
-  return {
-    email: claims.email,
-    name: claims.name,
-    company: claims['custom:company_name'],
-    license: claims['custom:company_license_type'],
-    pbx: claims['custom:pbx_domain']
-      ? {
-          host: claims['custom:pbx_domain'] + (port && String(port) !== '443' ? `:${port}` : ''),
-          serial: claims['custom:pbx_serial'],
-          extension: claims['custom:pbx_user_extension'],
-          role: claims['custom:pbx_user_role'],
-        }
-      : undefined,
-  };
-}
-
-export default {
-  summary: 'who you are logged in as, until when, and the version of wx',
-  usage: 'wx status [--profile EMAIL] [--check]',
-  options: {
-    check: {type: 'boolean', description: 'also ask Wildix whether it accepts the token (renews it when needed)'},
-  },
-  args: [0, 0],
-  async run(ctx) {
-    const {env, values} = ctx;
-    const byDefault = defaultProfile(env);
-    const all = sessions(env).map((s) => ({email: s.email, default: s.email === byDefault, tokenValidUntil: s.expiresAt ? new Date(s.expiresAt).toISOString() : null, expired: s.expiresAt <= ctx.now}));
-    const out = {version: VERSION, loggedIn: false, profile: null, user: null, tokenFromEnvironment: Boolean(env.WILDIX_ID_TOKEN), profiles: all};
-    let token;
-    if (env.WILDIX_ID_TOKEN) {
-      token = env.WILDIX_ID_TOKEN;
-    } else {
-      let email;
-      try {
-        const chosen = chooseProfile(env, values.profile);
-        email = chosen.email;
-        out.profile = {email, by: chosen.by};
-      } catch (e) {
-        if (!(e instanceof AuthError)) throw e;
-        out.problem = e.message;
-        return out;
-      }
-      const session = all.find((s) => s.email === email);
-      if (!session) {
-        out.problem = `No saved session for ${email}. Log in with: wx login ${email}`;
-        return out;
-      }
-      out.tokenValidUntil = session.tokenValidUntil;
-      token = values.check ? await getToken({profile: email, env, fetchImpl: ctx.fetch, now: ctx.clock()}) : savedSession(email, env)?.IdToken;
-    }
-    out.loggedIn = true;
-    out.user = whoami(jwtClaims(token));
-    if (values.check) {
-      try {
-        await request(`${XBEES_API}/v2/conversations/inbox/state`, {token, fetchImpl: ctx.fetch, service: 'x-bees'});
-        out.tokenAccepted = true;
-      } catch (e) {
-        if (!(e instanceof HttpError) || ![401, 403].includes(e.status)) throw e;
-        out.tokenAccepted = false;
-        out.problem = `Wildix rejected the token (HTTP ${e.status}). Log in again: wx login ${out.user.email ?? '<e-mail>'}`;
-      }
-    }
-    return out;
-  },
-  text(r, ctx) {
-    const c = paint(ctx);
-    const rows = [['wx', r.version]];
-    if (r.user) {
-      const a = r.user;
-      const why = r.profile ? {option: 'chosen with --profile', environment: 'chosen with WILDIX_EMAIL', default: 'the default', only: 'the only one'}[r.profile.by] : 'from WILDIX_ID_TOKEN';
-      rows.push(['Profile', `${a.email ?? ''}${a.name ? ` (${a.name})` : ''} · ${why}`]);
-      if (a.company) rows.push(['Company', `${a.company}${a.license ? ` · ${a.license}` : ''}`]);
-      if (a.pbx) rows.push(['PBX', [a.pbx.host, a.pbx.serial && `serial ${a.pbx.serial}`, a.pbx.extension && `extension ${a.pbx.extension}`, a.pbx.role].filter(Boolean).join(' · ')]);
-    }
-    if (r.tokenFromEnvironment) rows.push(['Token', 'from WILDIX_ID_TOKEN']);
-    else if (r.tokenValidUntil) rows.push(['Token', `valid until ${localTime(r.tokenValidUntil)} (renewed automatically)`]);
-    if (r.tokenAccepted !== undefined) rows.push(['Check', r.tokenAccepted ? c.green('Wildix accepts the token') : c.red('rejected')]);
-    if (r.profiles.length > 1) rows.push(['Profiles', `${r.profiles.map((p) => `${p.email}${p.default ? ' (default)' : ''}`).join(', ')} · wx profile use <e-mail>`]);
-    const lines = table(rows);
-    if (r.problem) lines.push(c.yellow(r.problem));
-    else if (!r.loggedIn) lines.push(c.yellow('Not logged in. Run: wx login <e-mail>'));
-    return lines;
-  },
-};

package/src/completion.mjs

@@ -1,132 +0,0 @@
-// Shell completion. `wx completion <shell>` prints a small script; on every Tab it runs
-// `wx __complete -- <words after wx, the last one being the word under the cursor>`, which prints the candidates,
-// one per line as "value<TAB>description". The candidates come from the command definitions (and the saved
-// profiles for --profile), so completion follows the commands without a regenerated script. No network.
-import {sessions} from './auth.mjs';
-import {COMMON_OPTIONS, GLOBAL_OPTIONS, REGISTRY, commandOf, groupOf, singleOf} from './commands/index.mjs';
-
-export const SHELLS = ['bash', 'zsh', 'fish'];
-
-export const TOP_LEVEL = {
-  completion: 'print the shell completion script (bash, zsh, fish)',
-};
-
-const TOP_OPTIONS = {'--help': 'help of wx', '--version': 'the version of wx', '--profile': 'the profile (a logged-in e-mail) to use', '--output': 'text or json'};
-
-function valuesOf(option, env) {
-  if (option.choices) return option.choices.map((v) => [v]);
-  if (option.complete === 'profiles') return sessions(env).map((s) => [s.email]);
-  return [];
-}
-
-// The candidates for the word under the cursor: ["value\tdescription", ...].
-export function complete(words, env = process.env, registry = REGISTRY) {
-  const cur = words.length ? words[words.length - 1] : '';
-  const offer = (pairs) => pairs.filter(([v]) => v.startsWith(cur)).map(([v, d]) => (d ? `${v}\t${d}` : v));
-  // The global options may stand anywhere: the value of one is offered, and they are left out of what names the
-  // command (wx --profile a@b.c chat <Tab> completes like wx chat <Tab>).
-  const globalOf = (word) => {
-    const name = word?.startsWith('--') ? word.slice(2).split('=')[0] : undefined;
-    return name && Object.hasOwn(GLOBAL_OPTIONS, name) ? name : undefined;
-  };
-  const before = words.slice(0, -1);
-  const last = before[before.length - 1];
-  if (globalOf(last) && !last.includes('=') && GLOBAL_OPTIONS[globalOf(last)].type === 'string') {
-    return offer(valuesOf(GLOBAL_OPTIONS[globalOf(last)], env));
-  }
-  const done = [];
-  for (let i = 0; i < before.length; i += 1) {
-    const name = globalOf(before[i]);
-    if (name) {
-      if (GLOBAL_OPTIONS[name].type === 'string' && !before[i].includes('=')) i += 1;
-      continue;
-    }
-    done.push(before[i]);
-  }
-
-  if (done.length === 0) {
-    return offer([
-      ...Object.entries(registry.groups).map(([name, g]) => [name, g.summary]),
-      ...Object.entries(registry.commands).map(([name, c]) => [name, c.summary]),
-      ...Object.entries(TOP_LEVEL),
-      ...(cur.startsWith('-') ? Object.entries(TOP_OPTIONS) : []),
-    ]);
-  }
-  if (done[0] === 'completion') return done.length === 1 ? offer(SHELLS.map((s) => [s, `the script for ${s}`])) : [];
-
-  // The command and how many words name it: 1 for a single command, 2 for a group and its command.
-  let cmd = singleOf(done[0], registry);
-  let depth = 1;
-  if (!cmd) {
-    const group = groupOf(done[0], registry);
-    if (!group) return [];
-    if (done.length === 1) return offer(Object.entries(group.commands).map(([name, c]) => [name, c.summary]));
-    cmd = commandOf(group, done[1]);
-    depth = 2;
-  }
-  if (!cmd) return [];
-  const options = {...cmd.options, ...COMMON_OPTIONS, ...GLOBAL_OPTIONS};
-  const prev = done[done.length - 1];
-  if (done.length > depth && prev.startsWith('--')) {
-    const option = Object.hasOwn(options, prev.slice(2)) ? options[prev.slice(2)] : undefined;
-    if (option?.type === 'string') return offer(valuesOf(option, env));
-  }
-  if (cur.startsWith('-')) {
-    const used = new Set(done.slice(depth).filter((w) => w.startsWith('--')).map((w) => w.slice(2)));
-    return offer(Object.entries(options).filter(([name, o]) => o.multiple || !used.has(name)).map(([name, o]) => [`--${name}`, o.description]));
-  }
-  // A command whose argument is a profile (wx profile use <Tab>).
-  if (cmd.complete === 'profiles') return offer(valuesOf({complete: 'profiles'}, env));
-  return [];
-}
-
-const SCRIPTS = {
-  bash: `# wx completion for bash. Add to ~/.bashrc:  eval "$(wx completion bash)"
-_wx_complete() {
-  # The words are taken as an array first: bash 3.2 (macOS) joins the elements of a quoted array slice when IFS
-  # is a newline.
-  local words=("\${COMP_WORDS[@]:1:COMP_CWORD}") out line
-  COMPREPLY=()
-  out=$(wx __complete -- "\${words[@]}" 2>/dev/null) || return 0
-  # Line by line from a here-string: no word splitting and no glob expansion of the candidates.
-  while IFS= read -r line; do
-    [[ -n $line ]] && COMPREPLY+=("\${line%%$'\\t'*}")
-  done <<< "$out"
-}
-complete -F _wx_complete wx
-`,
-  zsh: `# wx completion for zsh. Add to ~/.zshrc (after compinit):  eval "$(wx completion zsh)"
-_wx() {
-  local -a lines items
-  local line
-  lines=("\${(@f)$(wx __complete -- "\${(@)words[2,CURRENT]}" 2>/dev/null)}")
-  for line in $lines; do
-    [[ -n $line ]] || continue
-    if [[ $line == *$'\\t'* ]]; then items+=("\${\${line%%$'\\t'*}//:/\\\\:}:\${line#*$'\\t'}")
-    else items+=("\${line//:/\\\\:}"); fi
-  done
-  (( \${#items} )) && _describe -t wx-candidates 'wx' items
-}
-(( \${+functions[compdef]} )) || { autoload -Uz compinit && compinit; }
-compdef _wx wx
-`,
-  fish: `# wx completion for fish. Save as ~/.config/fish/completions/wx.fish:  wx completion fish > ~/.config/fish/completions/wx.fish
-complete -c wx -f -a '(wx __complete -- (commandline -opc)[2..-1] (commandline -ct) 2>/dev/null)'
-`,
-};
-
-export function completionScript(shell) {
-  return Object.hasOwn(SCRIPTS, shell) ? SCRIPTS[shell] : undefined;
-}
-
-export function completionUsage() {
-  return [
-    'Usage: wx completion [bash|zsh|fish]   (default: the shell of $SHELL)',
-    '',
-    'Prints the completion script. To turn completion on for good:',
-    '  bash:  echo \'eval "$(wx completion bash)"\' >> ~/.bashrc',
-    '  zsh:   echo \'eval "$(wx completion zsh)"\' >> ~/.zshrc',
-    '  fish:  wx completion fish > ~/.config/fish/completions/wx.fish',
-    'then open a new terminal. It completes an installed `wx` (npm i -g wldx-cli), not `npx wldx-cli`.',
-  ].join('\n');
-}

package/src/errors.mjs

@@ -1,30 +0,0 @@
-// Errors that map to exit codes: UsageError 64 (EX_USAGE), AuthError 2, anything else 1.
-
-export class UsageError extends Error {
-  constructor(message, usage) {
-    super(message);
-    this.name = 'UsageError';
-    this.usage = usage;
-  }
-}
-
-export class AuthError extends Error {
-  constructor(message) {
-    super(message);
-    this.name = 'AuthError';
-  }
-}
-
-const NOT_IMPLEMENTED = /is not implemented/;
-
-export class HttpError extends Error {
-  constructor(status, method, path, body, service = 'the service') {
-    const lines = [`HTTP ${status} from ${service} (${method} ${path})`];
-    if (body) lines.push(body.length > 2000 ? `${body.slice(0, 2000)}…` : body);
-    if (status === 401) lines.push('The token was rejected: log in again.');
-    if (NOT_IMPLEMENTED.test(body ?? '')) lines.push('The service does not implement this operation yet. Do not retry.');
-    super(lines.join('\n'));
-    this.name = 'HttpError';
-    this.status = status;
-  }
-}

package/src/files.mjs

@@ -1,98 +0,0 @@
-// Local files that commands read or write on behalf of the user, where the path may have come from fetched text
-// (an agent asked to "save the attachment to …" or to "attach …"): the guards that keep secrets in and startup
-// files out.
-import fs from 'node:fs';
-import os from 'node:os';
-import path from 'node:path';
-import {configDir} from './auth.mjs';
-import {UsageError} from './errors.mjs';
-
-// macOS and Windows file systems ignore case by default: compare paths without it there.
-const FOLD = process.platform === 'darwin' || process.platform === 'win32';
-const norm = (p) => (FOLD ? p.toLowerCase() : p);
-const within = (child, parent) => norm(child) === norm(parent) || norm(child).startsWith(norm(parent) + path.sep);
-
-// The real path (symlinks resolved, true case on macOS) of a path that may not exist yet: the nearest existing
-// ancestor resolved, the rest appended.
-export function realPath(p) {
-  const abs = path.resolve(p);
-  let head = abs;
-  const rest = [];
-  for (;;) {
-    try {
-      return path.join(fs.realpathSync.native(head), ...rest);
-    } catch (e) {
-      if (e.code !== 'ENOENT' && e.code !== 'ENOTDIR') throw e;
-      const up = path.dirname(head);
-      if (up === head) return abs;
-      rest.unshift(path.basename(head));
-      head = up;
-    }
-  }
-}
-
-const homeOf = (env) => env.HOME || os.homedir();
-
-// Where a file written for the user must never land: anything hidden (a segment that starts with ".": ~/.ssh,
-// ~/.zshenv, .git/hooks, node_modules/.bin…) and the macOS startup folders. A downloaded file there could give
-// someone a login or run code; a person who really wants it there can move it.
-const STARTUP = ['Library/LaunchAgents', 'Library/LaunchDaemons', 'Library/StartupItems'];
-
-// Returns the real path; throws a UsageError for a path that is refused.
-export function refuseUnsafeWrite(target, env = process.env) {
-  const real = realPath(target);
-  const hidden = real.split(path.sep).find((s) => s.startsWith('.') && s !== '.' && s !== '..');
-  if (hidden) throw new UsageError(`Refusing to write into a hidden file or folder (${hidden}): ${target}. Choose a visible path.`);
-  const homes = [homeOf(env), realPath(homeOf(env))];
-  if (homes.some((h) => STARTUP.some((d) => within(real, path.join(h, d)) || within(real, path.join('/', d))))) {
-    throw new UsageError(`Refusing to write into a startup folder: ${target}`);
-  }
-  return real;
-}
-
-// Credentials: folders and files that hold keys and tokens, and names that look like secrets.
-const SECRET_FOLDERS = ['.wildix', '.ssh', '.aws', '.gnupg', '.config/gcloud', '.kube', '.docker', '.claude', '.agents'];
-const SECRET_FILES = ['.netrc', '.npmrc'];
-const SECRET_NAME = /^(\.env|\.env\..*|.*\.pem|.*\.key|.*\.p12|.*\.pfx|id_rsa.*|id_ed25519.*|id_ecdsa.*|.*\.kdbx|credentials.*\.json|.*secret.*|.*\.token)$/is;
-
-// A file to send out of the machine (an attachment) is refused when it is, or points to, a credential: its real
-// path (symlinks resolved, true case) in a credentials folder, a secret-looking name (given or real), or a file with
-// other hard links (which could be one). The user can copy the file elsewhere if they really mean it.
-export function refuseSecretPath(file, env = process.env) {
-  let real;
-  let stat;
-  try {
-    real = fs.realpathSync.native(file);
-    stat = fs.statSync(real);
-  } catch {
-    real = realPath(file); // not there (yet): its folder still counts
-  }
-  const home = homeOf(env);
-  const roots = [home, realPath(home)];
-  const folders = [configDir(env), realPath(configDir(env)), ...roots.flatMap((h) => SECRET_FOLDERS.map((d) => path.join(h, d)))];
-  const files = roots.flatMap((h) => SECRET_FILES.map((f) => path.join(h, f)));
-  if (folders.some((d) => within(real, d)) || files.some((f) => norm(f) === norm(real))) {
-    throw new UsageError(`Refusing to attach a file from a credentials folder: ${file}`);
-  }
-  for (const name of new Set([path.basename(file), path.basename(real)])) {
-    if (SECRET_NAME.test(name)) throw new UsageError(`Refusing to attach what looks like a secret: ${name}`);
-  }
-  if (stat?.isFile() && stat.nlink > 1) throw new UsageError(`Refusing to attach a file with other hard links (it could be a credential): ${file}`);
-  return {real, stat};
-}
-
-// Reads a file to send out: checked with refuseSecretPath, then read from the descriptor that was opened, which
-// must still be the file that was checked (nothing can be swapped in between).
-export function readForUpload(file, env = process.env) {
-  const {real, stat} = refuseSecretPath(file, env);
-  if (!stat) throw new UsageError(`File not found: ${file}`);
-  if (!stat.isFile()) throw new UsageError(`Not a file: ${file}`);
-  const fd = fs.openSync(real, 'r');
-  try {
-    const now = fs.fstatSync(fd);
-    if (now.ino !== stat.ino || now.dev !== stat.dev || now.nlink > 1) throw new UsageError(`The file changed while it was checked: ${file}`);
-    return fs.readFileSync(fd);
-  } finally {
-    fs.closeSync(fd);
-  }
-}

package/src/format.mjs

@@ -1,82 +0,0 @@
-// Text output: what `--output text` (the default) prints. A command gives `text(result, ctx)` (and `textEvent(event,
-// ctx)` for a streaming one) returning a string or an array of lines; without one, toText() prints the data as
-// indented "key: value" lines. Helpers for formatters: colors (only on a terminal), times, tables.
-
-// Colors: on when ctx.color (a terminal, no --no-color, no NO_COLOR).
-const CODES = {bold: [1, 22], dim: [2, 22], red: [31, 39], green: [32, 39], yellow: [33, 39], blue: [34, 39], cyan: [36, 39]};
-export function paint(ctx) {
-  const on = Boolean(ctx?.color);
-  return Object.fromEntries(Object.entries(CODES).map(([name, [a, b]]) => [name, (s) => (on ? `\x1b[${a}m${s}\x1b[${b}m` : String(s))]));
-}
-
-const pad2 = (n) => String(n).padStart(2, '0');
-
-// "2026-11-07 10:23" in the local time zone of the machine (ISO string or ms); '' for nothing.
-export function localTime(value, {seconds = false} = {}) {
-  if (value === undefined || value === null || value === '') return '';
-  const d = new Date(typeof value === 'number' || /^\d+$/.test(String(value)) ? Number(value) : value);
-  if (Number.isNaN(d.getTime())) return String(value);
-  const t = `${d.getFullYear()}-${pad2(d.getMonth() + 1)}-${pad2(d.getDate())} ${pad2(d.getHours())}:${pad2(d.getMinutes())}`;
-  return seconds ? `${t}:${pad2(d.getSeconds())}` : t;
-}
-
-// "1:05:09" / "5:09" from seconds.
-export function duration(seconds) {
-  if (!Number.isFinite(seconds)) return '';
-  const s = Math.max(0, Math.round(seconds));
-  const h = Math.floor(s / 3600);
-  const m = Math.floor((s % 3600) / 60);
-  return h ? `${h}:${pad2(m)}:${pad2(s % 60)}` : `${m}:${pad2(s % 60)}`;
-}
-
-// One line: newlines folded, cut to max characters.
-export function oneLine(text, max = 120) {
-  const s = String(text ?? '').replace(/\s+/g, ' ').trim();
-  return s.length > max ? `${s.slice(0, max - 1)}…` : s;
-}
-
-// Aligned columns: rows are arrays of cells; the last column is not padded. Colors in cells are not counted.
-export function table(rows) {
-  const visible = (s) => String(s ?? '').replace(/\x1b\[\d+m/g, '').length;
-  const widths = [];
-  for (const row of rows) row.forEach((c, i) => (widths[i] = Math.max(widths[i] ?? 0, visible(c))));
-  return rows.map((row) => row.map((c, i) => (i === row.length - 1 ? String(c ?? '') : String(c ?? '') + ' '.repeat(widths[i] - visible(c)))).join('  ').trimEnd());
-}
-
-const scalar = (v) => v === null || typeof v !== 'object';
-
-// Any data as indented "key: value" lines (the fallback of commands without a formatter).
-export function toText(value, indent = '') {
-  if (value === undefined) return [];
-  if (scalar(value)) return [`${indent}${value}`];
-  const lines = [];
-  if (Array.isArray(value)) {
-    if (value.every(scalar)) return [`${indent}${value.join(', ')}`];
-    value.forEach((item, i) => {
-      if (i && !scalar(item)) lines.push('');
-      lines.push(...toText(item, indent));
-    });
-    return lines;
-  }
-  for (const [k, v] of Object.entries(value)) {
-    if (v === undefined) continue;
-    if (scalar(v)) lines.push(`${indent}${k}: ${v}`);
-    else if (Array.isArray(v) && v.every(scalar)) lines.push(`${indent}${k}: ${v.join(', ')}`);
-    else if (Array.isArray(v) && !v.length) lines.push(`${indent}${k}: (none)`);
-    else lines.push(`${indent}${k}:`, ...toText(v, `${indent}  `));
-  }
-  return lines;
-}
-
-// Text for a terminal from data that may hold control sequences (a message, a name, an error of a service): kept
-// are newlines, tabs and the color codes paint() itself writes; every other control character is dropped, so a
-// fetched text cannot write the clipboard (OSC 52), move the cursor, rewrite lines or hide text.
-const OWN_SGR = new Set(Object.values(CODES).flat().map(String));
-export function clean(text) {
-  // NUL goes first: it then marks the color codes that are kept, and no input can forge such a mark.
-  return String(text)
-    .replace(/\u0000/g, '')
-    .replace(/\x1b\[(\d+)m/g, (m, code) => (OWN_SGR.has(code) ? `\u0000${code}\u0000` : ''))
-    .replace(/[\x01-\x08\x0b-\x1f\x7f-\x9f]/g, '')
-    .replace(/\u0000(\d+)\u0000/g, '\x1b[$1m');
-}

package/src/http.mjs

@@ -1,64 +0,0 @@
-import {HttpError} from './errors.mjs';
-import {USER_AGENT} from './version.mjs';
-
-const SEGMENT = /^[A-Za-z0-9_+][A-Za-z0-9_.:+@-]*$/;
-
-// A tagged template for request paths: every interpolated value is one path segment of id characters (no "/",
-// "?", "#", "..", nothing empty), so an id taken from fetched data cannot rewrite the path.
-//   apiPath`/channels/${id}/messages`
-export function apiPath(strings, ...values) {
-  return strings.reduce((out, s, i) => {
-    if (i === 0) return s;
-    const v = String(values[i - 1] ?? '');
-    if (!SEGMENT.test(v) || v.includes('..')) throw new Error(`An id is not safe in a request path: ${JSON.stringify(v)}`);
-    return out + encodeURIComponent(v) + s;
-  }, '');
-}
-
-// "?a=1&b=2" from an object; undefined, null, false and '' are left out; an array repeats the parameter.
-export function query(params) {
-  const q = new URLSearchParams();
-  for (const [k, v] of Object.entries(params)) {
-    for (const item of Array.isArray(v) ? v : [v]) if (item !== undefined && item !== null && item !== false && item !== '') q.append(k, String(item));
-  }
-  const s = q.toString();
-  return s ? `?${s}` : '';
-}
-
-// One request. Redirects are refused, so the token never follows one to another host.
-//   body          sent as JSON
-//   raw           {data, contentType}: sent as it is (an upload); never with a token to a host the caller did not choose
-//   headers       more headers
-//   responseType  'json' (default: the parsed answer, {ok: true} when empty), 'text', 'buffer' (a Buffer), 'response'
-// Throws HttpError on a status other than 2xx (except with responseType 'response').
-export async function request(url, {method = 'GET', token, body, raw, headers = {}, responseType = 'json', service, fetchImpl = globalThis.fetch, timeoutMs = 60_000, signal} = {}) {
-  const h = {'user-agent': USER_AGENT, accept: responseType === 'json' ? 'application/json' : '*/*', ...headers};
-  if (token) h.authorization = `Bearer ${token}`;
-  let payload;
-  if (raw) {
-    payload = raw.data;
-    if (raw.contentType) h['content-type'] = raw.contentType;
-  } else if (body !== undefined) {
-    payload = JSON.stringify(body);
-    h['content-type'] = 'application/json';
-  }
-  const timeout = AbortSignal.timeout(timeoutMs);
-  const res = await fetchImpl(url, {
-    method,
-    headers: h,
-    body: payload,
-    redirect: 'error',
-    signal: signal ? AbortSignal.any([signal, timeout]) : timeout,
-  });
-  if (responseType === 'response') return res;
-  if (!res.ok) throw new HttpError(res.status, method, new URL(url).pathname, await res.text().catch(() => ''), service);
-  if (responseType === 'buffer') return Buffer.from(await res.arrayBuffer());
-  const text = await res.text();
-  if (responseType === 'text') return text;
-  if (!text) return {ok: true};
-  try {
-    return JSON.parse(text);
-  } catch {
-    return {text};
-  }
-}

package/src/services.mjs

@@ -1,58 +0,0 @@
-// The addresses of the Wildix services. The token is sent only to these: https/wss hosts under wildix.com, the
-// x-bees API, and the user's own PBX named in the claims of the login token. Overrides (tests against a local
-// server) are honoured only with WILDIX_ALLOW_CUSTOM_URL=1, except WILDIX_STREAM_URL and WILDIX_WDA_URL, which may
-// name another https host under wildix.com.
-import {jwtClaims} from './auth.mjs';
-import {UsageError} from './errors.mjs';
-
-export const XBEES_API = 'https://api.x-bees.com';
-
-const UNDER_WILDIX = (scheme) => new RegExp(`^${scheme}://[a-z0-9-]+(\\.[a-z0-9-]+)*\\.wildix\\.com(:[0-9]+)?$`);
-const HTTPS_WILDIX = UNDER_WILDIX('https');
-const HOST = /^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)+$/;
-
-const custom = (env) => env.WILDIX_ALLOW_CUSTOM_URL === '1';
-const trim = (url) => url.replace(/\/+$/, '');
-
-// base(variable, default, env, {wildixOverride}): the default, or the override in `variable` when allowed.
-function base(variable, fallback, env, {wildixOverride = false} = {}) {
-  const given = env[variable];
-  if (!given) return fallback;
-  const url = trim(given);
-  if (custom(env)) return url;
-  if (wildixOverride && HTTPS_WILDIX.test(url)) return url;
-  throw new UsageError(
-    wildixOverride
-      ? `${variable} must be https://<host>.wildix.com (another address only with WILDIX_ALLOW_CUSTOM_URL=1), got: ${url}`
-      : `${variable} is honoured only with WILDIX_ALLOW_CUSTOM_URL=1 (tests), got: ${url}`,
-  );
-}
-
-function region(env) {
-  const r = env.WILDIX_STREAM_REGION || 'eu-1';
-  if (!/^[a-z0-9-]{1,32}$/.test(r)) throw new UsageError(`WILDIX_STREAM_REGION is not a region: ${r}`);
-  return r;
-}
-
-// Chats (the stream service): https://<region>.stream.wildix.com, the live feed wss://<region>-ws.stream.wildix.com.
-export const streamUrl = (env = process.env) => base('WILDIX_STREAM_URL', `https://${region(env)}.stream.wildix.com`, env, {wildixOverride: true});
-export const streamWsUrl = (env = process.env) => base('WILDIX_STREAM_WS_URL', `wss://${region(env)}-ws.stream.wildix.com`, env);
-
-// Wildix Data Analytics: history, insights, reports (https://wda.wildix.com), the live stream (wss://wda-ws...).
-export const wdaUrl = (env = process.env) => base('WILDIX_WDA_URL', 'https://wda.wildix.com', env, {wildixOverride: true});
-export const wdaWsUrl = (env = process.env) => base('WILDIX_WDA_WS_URL', 'wss://wda-ws.wildix.com', env);
-
-// The x-bees API (users, conversations of the older service, token check).
-export const xbeesUrl = (env = process.env) => base('WILDIX_XBEES_URL', XBEES_API, env);
-
-// The user's PBX: the login token names it (custom:pbx_domain, custom:pbx_port) and the PBX accepts that token.
-export function pbxUrl(token, env = process.env) {
-  if (env.WILDIX_PBX_URL) return base('WILDIX_PBX_URL', undefined, env);
-  const claims = jwtClaims(token);
-  const host = claims['custom:pbx_domain'];
-  const port = claims['custom:pbx_port'];
-  if (!host) throw new UsageError('This login is not linked to a PBX (the token has no custom:pbx_domain): this needs a PBX user');
-  if (!HOST.test(host)) throw new UsageError(`The PBX address in the login is not a host name: ${host}`);
-  if (port !== undefined && port !== '' && !/^[0-9]{1,5}$/.test(String(port))) throw new UsageError(`The PBX port in the login is not a number: ${port}`);
-  return `https://${host}${port && String(port) !== '443' ? `:${port}` : ''}`;
-}