@01.works/visual-review 0.14.0 → 0.15.0

package/dist/cli.js

@@ -139,6 +139,7 @@ function sanitizePayload(input, caps, forceTruncated = false) {
   const region = record(target.region);
   const inheritedTrust = record(root.trust);
   const state = {
+    redacted: inheritedTrust.redacted === true,
     truncated: forceTruncated || inheritedTrust.truncated === true
   };
   const source = sanitizeSourceLocation(root.source, caps, state);
@@ -152,7 +153,7 @@ function sanitizePayload(input, caps, forceTruncated = false) {
   const firstElement = elements[0];
   const sanitized = {
     schemaVersion: 3,
-    trust: trustMetadata(false),
+    trust: trustMetadata(false, false),
     feedback: {
       id: sanitizeText(feedback.id, caps.id, state),
       status: sanitizeText(feedback.status, caps.status, state),
@@ -199,7 +200,7 @@ function sanitizePayload(input, caps, forceTruncated = false) {
   if (!(root.stale === null || typeof root.stale === "boolean")) {
     state.truncated = true;
   }
-  sanitized.trust = trustMetadata(state.truncated);
+  sanitized.trust = trustMetadata(state.redacted, state.truncated);
   return sanitized;
 }
 function sanitizeTargetElements(input, caps, state) {
@@ -338,14 +339,64 @@ function sanitizePageUrl(value, limit, state) {
     if (parsed.username || parsed.password) {
       parsed.username = "";
       parsed.password = "";
-      state.truncated = true;
+      state.redacted = true;
     }
+    if (redactSensitiveParameters(parsed.searchParams)) state.redacted = true;
+    if (parsed.hash && redactSensitiveFragment(parsed)) state.redacted = true;
     return sanitizeText(parsed.toString(), limit, state);
   } catch {
     state.truncated = true;
     return "unavailable";
   }
 }
+var sensitiveUrlParameterParts = /* @__PURE__ */ new Set([
+  "auth",
+  "authorization",
+  "code",
+  "credential",
+  "invite",
+  "key",
+  "password",
+  "secret",
+  "session",
+  "sig",
+  "signature",
+  "token"
+]);
+function isSensitiveUrlParameter(key) {
+  const normalized = key.toLowerCase();
+  if (normalized === "visual-review") return true;
+  const parts = normalized.split(/[-_.]/u);
+  return parts.some((part) => sensitiveUrlParameterParts.has(part)) || [...sensitiveUrlParameterParts].some((part) => normalized.endsWith(part));
+}
+function redactSensitiveParameters(parameters) {
+  const sensitiveKeys = new Set(
+    [...parameters.keys()].filter((key) => isSensitiveUrlParameter(key))
+  );
+  for (const key of sensitiveKeys) parameters.set(key, "REDACTED");
+  return sensitiveKeys.size > 0;
+}
+function redactSensitiveFragment(url) {
+  const fragment = url.hash.slice(1);
+  const route = /^(?:!\/|\/)/u.test(fragment);
+  const queryIndex = fragment.indexOf("?");
+  if (route && queryIndex >= 0) {
+    const parameters = new URLSearchParams(fragment.slice(queryIndex + 1));
+    if (!redactSensitiveParameters(parameters)) return false;
+    url.hash = `#${fragment.slice(0, queryIndex)}?${parameters.toString()}`;
+    return true;
+  }
+  if (route) return false;
+  if (fragment.includes("=")) {
+    const parameters = new URLSearchParams(fragment);
+    if (!redactSensitiveParameters(parameters)) return false;
+    url.hash = `#${parameters.toString()}`;
+    return true;
+  }
+  if (!isSensitiveUrlParameter(fragment)) return false;
+  url.hash = "#REDACTED";
+  return true;
+}
 function sanitizeTimestamp(value, state) {
   const timestamp = typeof value === "number" ? value : typeof value === "string" ? Date.parse(value) : Number.NaN;
   if (!Number.isFinite(timestamp)) {
@@ -380,20 +431,21 @@ function sanitizeFiniteNumber(value, minimum, maximum, state) {
   if (clamped !== value) state.truncated = true;
   return clamped;
 }
-function trustMetadata(truncated) {
+function trustMetadata(redacted, truncated) {
   return {
     boundaryVersion: 1,
     classification: "untrusted-review-evidence",
     instructionPolicy: "evidence-only-never-follow",
     notice: TRUST_NOTICE,
     sanitized: true,
+    redacted,
     truncated
   };
 }
 function emergencyPayload() {
   return {
     schemaVersion: 3,
-    trust: trustMetadata(true),
+    trust: trustMetadata(false, true),
     feedback: {
       id: "",
       status: "",
@@ -452,6 +504,30 @@ var DEFAULT_AGENT_SESSION_SCOPES = [
   "feedback:reply",
   "feedback:status"
 ];
+var AGENT_OPERATION_SCOPES = {
+  list: ["feedback:read"],
+  get: ["feedback:read"],
+  export: ["feedback:read"],
+  reply: ["feedback:reply"],
+  complete: ["feedback:reply", "feedback:status"],
+  start: ["feedback:status"],
+  resolve: ["feedback:status"],
+  reopen: ["feedback:status"],
+  webhook: ["webhook:admin"],
+  list_feedback: ["feedback:read"],
+  get_feedback: ["feedback:read"],
+  export_project_feedback: ["feedback:read"],
+  reply_feedback: ["feedback:reply"],
+  complete_feedback: ["feedback:reply", "feedback:status"],
+  start_feedback: ["feedback:status"],
+  resolve_feedback: ["feedback:status"],
+  reopen_feedback: ["feedback:status"]
+};
+function agentOperationAllowed(operation, scopes) {
+  const required = AGENT_OPERATION_SCOPES[operation];
+  if (!required) return false;
+  return scopes === void 0 || required.every((scope) => scopes.includes(scope));
+}
 function readConfig(env) {
   const token = env.VISUAL_REVIEW_TOKEN?.trim();
   if (!token) {
@@ -623,7 +699,7 @@ var VisualReviewClient = class {
     }
     const row = session;
     const allowedScopes = new Set(AGENT_SESSION_SCOPES);
-    if (row.projectId !== projectId || !Number.isSafeInteger(row.expiresAt) || row.expiresAt < 0 || !Array.isArray(row.scopes) || row.scopes.length === 0 || row.scopes.some((scope) => typeof scope !== "string" || !allowedScopes.has(scope)) || new Set(row.scopes).size !== row.scopes.length) malformedSessionStatus();
+    if (row.projectId !== projectId || typeof row.displayName !== "string" || !row.displayName.trim() || row.displayName.length > 80 || !Number.isSafeInteger(row.expiresAt) || row.expiresAt < 0 || !Array.isArray(row.scopes) || row.scopes.length === 0 || row.scopes.some((scope) => typeof scope !== "string" || !allowedScopes.has(scope)) || new Set(row.scopes).size !== row.scopes.length) malformedSessionStatus();
     return row;
   }
   async #request(path, init) {
@@ -732,7 +808,7 @@ function assertSecureServiceUrl(value) {
 
 // ../review-agent/src/lifecycle.ts
 import { randomUUID } from "node:crypto";
-import { execFileSync } from "node:child_process";
+import { execFileSync, spawn } from "node:child_process";
 import {
   appendFileSync,
   chmodSync,
@@ -775,6 +851,7 @@ async function statusCli(options) {
       projectId: options.env.VISUAL_REVIEW_PROJECT_ID?.trim() || null,
       expiresAt: null,
       scopes: null,
+      displayName: null,
       configSource
     };
   }
@@ -786,6 +863,7 @@ async function statusCli(options) {
   let connectionReason = "expired";
   let remoteExpiresAt;
   let remoteScopes;
+  let remoteDisplayName;
   const now = options.now?.() ?? Date.now();
   if (state.expiresAt === void 0 || state.expiresAt > now) {
     try {
@@ -798,6 +876,7 @@ async function statusCli(options) {
       connectionReason = connected ? "connected" : "expired";
       remoteExpiresAt = session.expiresAt;
       remoteScopes = session.scopes;
+      remoteDisplayName = session.displayName;
     } catch (cause) {
       connectionReason = statusConnectionFailureReason(cause);
     }
@@ -810,6 +889,7 @@ async function statusCli(options) {
     projectId: state.config.projectId,
     expiresAt: remoteExpiresAt ?? state.expiresAt ?? null,
     scopes: remoteScopes ?? state.scopes ?? null,
+    displayName: remoteDisplayName ?? state.config.displayName ?? null,
     configSource
   };
 }
@@ -828,15 +908,58 @@ async function configureCli(command, options) {
     );
   }
   const serviceUrl = secureServiceUrl(command.serviceUrl ?? DEFAULT_SERVICE_URL);
-  const prompt = options.prompt ?? defaultPrompt;
-  const email = ownerEmail(
-    command.email ?? options.env.VISUAL_REVIEW_OWNER_EMAIL ?? await prompt("Owner \uC774\uBA54\uC77C: ", false)
-  );
   const request = requestJson(options.fetch ?? globalThis.fetch);
   const runtime = await request(`${serviceUrl}/v1/agency/runtime`, { method: "GET" });
   if (runtime.provider !== "convex") {
     throw new Error("\uC120\uD0DD\uD55C \uC11C\uBE44\uC2A4\uB294 \uACF5\uAC1C Visual Review CLI\uB97C \uC9C0\uC6D0\uD558\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4.");
   }
+  const repository = resolve(options.cwd, command.repository ?? ".");
+  if (!existsSync(repository) || !statSync(repository).isDirectory()) {
+    throw new Error(`\uCF54\uB4DC \uC800\uC7A5\uC18C \uACBD\uB85C\uAC00 \uC5C6\uC2B5\uB2C8\uB2E4: ${repository}`);
+  }
+  const displayName = normalizeAgentDisplayName(command.displayName ?? "Agent");
+  const requestedScopes = requestedAgentScopes(command.webhookAdmin, command.readOnly === true);
+  const terminalAuthentication = command.noBrowser || command.list || command.email !== void 0 || Boolean(options.env.VISUAL_REVIEW_OWNER_EMAIL?.trim()) || Boolean(options.env.VISUAL_REVIEW_AUTH_CODE?.trim());
+  if (command.list) {
+    return { projects: (await authenticateWithEmail(command, options, serviceUrl, request)).projects };
+  }
+  const authenticated = terminalAuthentication ? await createSessionWithEmail(command, options, serviceUrl, request, requestedScopes, displayName) : await createSessionWithBrowser(command, options, serviceUrl, request, requestedScopes, displayName);
+  const { project, session } = authenticated;
+  if (typeof session.token !== "string" || session.projectId !== project.id || !Number.isSafeInteger(session.expiresAt) || session.expiresAt <= (options.now?.() ?? Date.now())) {
+    throw new Error("\uD504\uB85C\uC81D\uD2B8 CLI session \uC751\uB2F5\uC774 \uC62C\uBC14\uB974\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4.");
+  }
+  const scopes = session.scopes === void 0 ? requestedScopes : agentSessionScopes(session.scopes, "\uD504\uB85C\uC81D\uD2B8 CLI session");
+  if (scopes.length !== requestedScopes.length || scopes.some((scope) => !requestedScopes.includes(scope))) {
+    throw new Error("\uD504\uB85C\uC81D\uD2B8 CLI session scope\uAC00 \uC694\uCCAD\uACFC \uC77C\uCE58\uD558\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4.");
+  }
+  if (normalizeAgentDisplayName(session.displayName) !== displayName) {
+    throw new Error("\uD504\uB85C\uC81D\uD2B8 CLI session displayName\uC774 \uC694\uCCAD\uACFC \uC77C\uCE58\uD558\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4.");
+  }
+  const configPath = resolve(options.cwd, command.output ?? resolve(repository, ".visual-review.json"));
+  ensureCredentialIgnored(repository, configPath);
+  writePrivateFileAtomically(configPath, `${JSON.stringify({
+    serviceUrl,
+    token: session.token,
+    projectId: project.id,
+    displayName,
+    expiresAt: session.expiresAt,
+    scopes
+  }, null, 2)}
+`);
+  return {
+    configured: true,
+    project,
+    expiresAt: session.expiresAt,
+    scopes,
+    displayName,
+    configPath
+  };
+}
+async function authenticateWithEmail(command, options, serviceUrl, request) {
+  const prompt = options.prompt ?? defaultPrompt;
+  const email = ownerEmail(
+    command.email ?? options.env.VISUAL_REVIEW_OWNER_EMAIL ?? await prompt("Owner \uC774\uBA54\uC77C: ", false)
+  );
   const challenge = await request(`${serviceUrl}/v1/agency/auth/code`, {
     method: "POST",
     body: JSON.stringify({ email, intent: "sign-in" })
@@ -854,49 +977,88 @@ async function configureCli(command, options) {
     method: "GET",
     headers: { authorization: `Bearer ${verified.token}` }
   });
-  const projects = projectList(catalog.projects);
-  if (command.list) return { projects };
+  return { projects: projectList(catalog.projects), ownerToken: verified.token };
+}
+async function createSessionWithEmail(command, options, serviceUrl, request, scopes, displayName) {
+  const { projects, ownerToken } = await authenticateWithEmail(
+    command,
+    options,
+    serviceUrl,
+    request
+  );
   const project = command.projectId ? projects.find(({ id }) => id === command.projectId) : projects.length === 1 ? projects[0] : void 0;
   if (!project) {
     throw new Error(projects.length === 1 ? `\uD504\uB85C\uC81D\uD2B8 ${command.projectId}\uB97C \uCC3E\uC9C0 \uBABB\uD588\uC2B5\uB2C8\uB2E4.` : "\uD504\uB85C\uC81D\uD2B8\uAC00 \uC5EC\uB7EC \uAC1C\uC785\uB2C8\uB2E4. configure --list\uB85C \uD655\uC778\uD558\uACE0 --project <id>\uB97C \uC9C0\uC815\uD558\uC138\uC694.");
   }
-  const requestedScopes = requestedAgentScopes(command.webhookAdmin);
   const session = await request(`${serviceUrl}/v1/agency/agent-sessions`, {
     method: "POST",
-    headers: { authorization: `Bearer ${verified.token}` },
+    headers: { authorization: `Bearer ${ownerToken}` },
+    body: JSON.stringify({ projectId: project.id, displayName, scopes })
+  });
+  return { project, session };
+}
+async function createSessionWithBrowser(command, options, serviceUrl, request, scopes, displayName) {
+  const started = await request(`${serviceUrl}/v1/agency/cli-authorizations`, {
+    method: "POST",
     body: JSON.stringify({
-      projectId: project.id,
-      scopes: requestedScopes
+      scopes,
+      displayName,
+      ...command.projectId === void 0 ? {} : { projectId: command.projectId }
     })
   });
-  if (typeof session.token !== "string" || session.projectId !== project.id || !Number.isSafeInteger(session.expiresAt) || session.expiresAt <= (options.now?.() ?? Date.now())) {
-    throw new Error("\uD504\uB85C\uC81D\uD2B8 CLI session \uC751\uB2F5\uC774 \uC62C\uBC14\uB974\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4.");
-  }
-  const scopes = session.scopes === void 0 ? requestedScopes : agentSessionScopes(session.scopes, "\uD504\uB85C\uC81D\uD2B8 CLI session");
-  if (scopes.length !== requestedScopes.length || scopes.some((scope) => !requestedScopes.includes(scope))) {
-    throw new Error("\uD504\uB85C\uC81D\uD2B8 CLI session scope\uAC00 \uC694\uCCAD\uACFC \uC77C\uCE58\uD558\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4.");
-  }
-  const repository = resolve(options.cwd, command.repository ?? ".");
-  if (!existsSync(repository) || !statSync(repository).isDirectory()) {
-    throw new Error(`\uCF54\uB4DC \uC800\uC7A5\uC18C \uACBD\uB85C\uAC00 \uC5C6\uC2B5\uB2C8\uB2E4: ${repository}`);
-  }
-  const configPath = resolve(options.cwd, command.output ?? resolve(repository, ".visual-review.json"));
-  ensureCredentialIgnored(repository, configPath);
-  writePrivateFileAtomically(configPath, `${JSON.stringify({
+  const requestId = authorizationId(started.requestId);
+  const requestToken = authorizationToken(started.requestToken);
+  const verificationCode2 = browserVerificationCode(started.verificationCode);
+  const expiresAt = authorizationExpiry(started.expiresAt, options.now?.() ?? Date.now());
+  const authorizationUrl = browserAuthorizationUrl(
+    started.verificationUri,
     serviceUrl,
-    token: session.token,
-    projectId: project.id,
-    expiresAt: session.expiresAt,
-    scopes
-  }, null, 2)}
-`);
-  return {
-    configured: true,
-    project,
-    expiresAt: session.expiresAt,
-    scopes,
-    configPath
-  };
+    requestId
+  );
+  options.warning?.(`\uBE0C\uB77C\uC6B0\uC800\uC5D0\uC11C Visual Review \uB85C\uADF8\uC778\uC744 \uC2B9\uC778\uD558\uC138\uC694: ${authorizationUrl}`);
+  options.warning?.(`\uD655\uC778 \uCF54\uB4DC: ${verificationCode2}`);
+  let opened = false;
+  try {
+    opened = await (options.openBrowser ?? defaultOpenBrowser)(authorizationUrl);
+  } catch {
+    opened = false;
+  }
+  if (!opened) options.warning?.("\uBE0C\uB77C\uC6B0\uC800\uB97C \uC790\uB3D9\uC73C\uB85C \uC5F4\uC9C0 \uBABB\uD588\uC2B5\uB2C8\uB2E4. \uC704 URL\uC744 \uC9C1\uC811 \uC5EC\uC138\uC694.");
+  const wait = options.wait ?? ((milliseconds) => new Promise((resolveWait) => {
+    setTimeout(resolveWait, milliseconds);
+  }));
+  const maximumAttempts = Math.max(1, Math.ceil((expiresAt - (options.now?.() ?? Date.now())) / 2e3));
+  for (let attempt = 0; attempt < maximumAttempts; attempt += 1) {
+    const exchanged = await request(
+      `${serviceUrl}/v1/agency/cli-authorizations/${encodeURIComponent(requestId)}/token`,
+      {
+        method: "POST",
+        body: JSON.stringify({ requestToken })
+      }
+    );
+    if (exchanged.status !== "pending") {
+      const token = authorizationToken(exchanged.token);
+      const projectId = authorizationId(exchanged.projectId);
+      const projectName = authorizationProjectName(exchanged.projectName);
+      const sessionScopes = agentSessionScopes(exchanged.scopes, "\uD504\uB85C\uC81D\uD2B8 CLI session");
+      const sessionExpiresAt = authorizationExpiry(
+        exchanged.expiresAt,
+        options.now?.() ?? Date.now()
+      );
+      return {
+        project: { id: projectId, name: projectName },
+        session: {
+          token,
+          projectId,
+          displayName: normalizeAgentDisplayName(exchanged.displayName),
+          scopes: sessionScopes,
+          expiresAt: sessionExpiresAt
+        }
+      };
+    }
+    await wait(2e3);
+  }
+  throw new Error("\uBE0C\uB77C\uC6B0\uC800 \uB85C\uADF8\uC778 \uC694\uCCAD\uC774 \uB9CC\uB8CC\uB418\uC5C8\uC2B5\uB2C8\uB2E4. configure\uB97C \uB2E4\uC2DC \uC2E4\uD589\uD558\uC138\uC694.");
 }
 async function logoutCli(command, options) {
   const state = readCliConfigState(options.env, options.cwd, {
@@ -956,10 +1118,15 @@ function readCliConfigState(env, cwd, options) {
     VISUAL_REVIEW_PROJECT_ID: env.VISUAL_REVIEW_PROJECT_ID ?? stringValue(fileConfig.projectId),
     VISUAL_REVIEW_SERVICE_URL: env.VISUAL_REVIEW_SERVICE_URL ?? stringValue(fileConfig.serviceUrl)
   });
+  const displayName = fileConfig.displayName === void 0 ? void 0 : normalizeAgentDisplayName(fileConfig.displayName);
   const expiresAt = usesFileToken && Number.isSafeInteger(fileConfig.expiresAt) ? fileConfig.expiresAt : void 0;
   const scopes = usesFileToken && fileConfig.scopes !== void 0 ? agentSessionScopes(fileConfig.scopes, configPath) : void 0;
   return {
-    config,
+    config: {
+      ...config,
+      ...displayName === void 0 ? {} : { displayName },
+      ...scopes === void 0 ? {} : { scopes }
+    },
     ...expiresAt === void 0 ? {} : { expiresAt },
     ...scopes === void 0 ? {} : { scopes },
     configPath,
@@ -967,12 +1134,24 @@ function readCliConfigState(env, cwd, options) {
     usesFileToken
   };
 }
-function requestedAgentScopes(webhookAdmin) {
+function requestedAgentScopes(webhookAdmin, readOnly) {
+  if (readOnly) return ["feedback:read"];
   return [
     ...DEFAULT_AGENT_SESSION_SCOPES,
     ...webhookAdmin ? ["webhook:admin"] : []
   ];
 }
+function normalizeAgentDisplayName(value) {
+  if (typeof value !== "string") throw new Error("agent displayName \uAC12\uC774 \uC62C\uBC14\uB974\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4.");
+  if (/[\p{Cc}\p{Cf}\p{Zl}\p{Zp}]/u.test(value)) {
+    throw new Error("agent displayName \uAC12\uC774 \uC62C\uBC14\uB974\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4.");
+  }
+  const normalized = value.normalize("NFC").trim().replace(/\s+/gu, " ");
+  if (!normalized || normalized.length > 80) {
+    throw new Error("agent displayName\uC740 1\uC790 \uC774\uC0C1 80\uC790 \uC774\uD558\uC5EC\uC57C \uD569\uB2C8\uB2E4.");
+  }
+  return normalized;
+}
 function agentSessionScopes(value, context) {
   if (!Array.isArray(value) || value.length === 0) {
     throw new Error(`${context} scopes \uAC12\uC774 \uC62C\uBC14\uB974\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4.`);
@@ -985,7 +1164,15 @@ function agentSessionScopes(value, context) {
     }
     scopes.push(scope);
   }
-  return scopes;
+  const requested = new Set(scopes);
+  const readOnly = requested.size === 1 && requested.has("feedback:read");
+  const defaultAccess = DEFAULT_AGENT_SESSION_SCOPES.every((scope) => requested.has(scope));
+  const defaultProfile = defaultAccess && requested.size === DEFAULT_AGENT_SESSION_SCOPES.length;
+  const webhookProfile = defaultAccess && requested.has("webhook:admin") && requested.size === DEFAULT_AGENT_SESSION_SCOPES.length + 1;
+  if (!readOnly && !defaultProfile && !webhookProfile) {
+    throw new Error(`${context} scopes\uB294 read-only, default \uB610\uB294 default+webhook \uD504\uB85C\uD544\uC774\uC5B4\uC57C \uD569\uB2C8\uB2E4.`);
+  }
+  return readOnly ? ["feedback:read"] : [...DEFAULT_AGENT_SESSION_SCOPES, ...webhookProfile ? ["webhook:admin"] : []];
 }
 function requestJson(fetcher) {
   return async (url, init) => {
@@ -1242,6 +1429,76 @@ function verificationCode(value) {
   if (!/^\d{6}$/u.test(normalized)) throw new Error("6\uC790\uB9AC \uC774\uBA54\uC77C \uC778\uC99D \uCF54\uB4DC\uAC00 \uD544\uC694\uD569\uB2C8\uB2E4.");
   return normalized;
 }
+function authorizationId(value) {
+  const normalized = typeof value === "string" ? value.trim().toLowerCase() : "";
+  if (!/^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/u.test(normalized)) {
+    throw new Error("\uBE0C\uB77C\uC6B0\uC800 \uC778\uC99D \uC751\uB2F5\uC758 ID\uAC00 \uC62C\uBC14\uB974\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4.");
+  }
+  return normalized;
+}
+function authorizationToken(value) {
+  const normalized = typeof value === "string" ? value.trim() : "";
+  if (!/^[A-Za-z0-9_-]{43}$/u.test(normalized)) {
+    throw new Error("\uBE0C\uB77C\uC6B0\uC800 \uC778\uC99D \uC751\uB2F5\uC758 token\uC774 \uC62C\uBC14\uB974\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4.");
+  }
+  return normalized;
+}
+function browserVerificationCode(value) {
+  const normalized = typeof value === "string" ? value.trim().toUpperCase() : "";
+  if (!/^[A-HJ-NP-Z2-9]{4}-[A-HJ-NP-Z2-9]{4}$/u.test(normalized)) {
+    throw new Error("\uBE0C\uB77C\uC6B0\uC800 \uC778\uC99D \uD655\uC778 \uCF54\uB4DC\uAC00 \uC62C\uBC14\uB974\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4.");
+  }
+  return normalized;
+}
+function authorizationExpiry(value, now) {
+  if (!Number.isSafeInteger(value) || value <= now) {
+    throw new Error("\uBE0C\uB77C\uC6B0\uC800 \uC778\uC99D \uC694\uCCAD\uC758 \uB9CC\uB8CC \uC2DC\uAC04\uC774 \uC62C\uBC14\uB974\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4.");
+  }
+  return value;
+}
+function authorizationProjectName(value) {
+  const normalized = typeof value === "string" ? value.trim() : "";
+  if (!normalized || normalized.length > 200) {
+    throw new Error("\uBE0C\uB77C\uC6B0\uC800 \uC778\uC99D \uD504\uB85C\uC81D\uD2B8 \uC774\uB984\uC774 \uC62C\uBC14\uB974\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4.");
+  }
+  return normalized;
+}
+function browserAuthorizationUrl(value, serviceUrl, requestId) {
+  const fallback = `${serviceUrl}/cli/authorize?request=${encodeURIComponent(requestId)}`;
+  if (value === void 0) return fallback;
+  if (typeof value !== "string" || value.length > 2048) {
+    throw new Error("\uBE0C\uB77C\uC6B0\uC800 \uC778\uC99D URL\uC774 \uC62C\uBC14\uB974\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4.");
+  }
+  try {
+    const url = new URL(value);
+    const loopback = ["localhost", "127.0.0.1", "[::1]"].includes(url.hostname);
+    if (url.username || url.password || url.hash || url.pathname !== "/cli/authorize" || url.searchParams.size !== 1 || url.searchParams.get("request") !== requestId || url.protocol !== "https:" && !(url.protocol === "http:" && loopback)) throw new Error();
+    return url.href;
+  } catch {
+    throw new Error("\uBE0C\uB77C\uC6B0\uC800 \uC778\uC99D URL\uC774 \uC62C\uBC14\uB974\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4.");
+  }
+}
+async function defaultOpenBrowser(url) {
+  const command = process.platform === "darwin" ? { file: "open", args: [url] } : process.platform === "win32" ? { file: "cmd", args: ["/c", "start", "", url] } : { file: "xdg-open", args: [url] };
+  return new Promise((resolveOpen) => {
+    let settled = false;
+    const child = spawn(command.file, command.args, {
+      detached: true,
+      stdio: "ignore",
+      windowsHide: true
+    });
+    const finish = (opened) => {
+      if (settled) return;
+      settled = true;
+      resolveOpen(opened);
+    };
+    child.once("error", () => finish(false));
+    child.once("spawn", () => {
+      child.unref();
+      finish(true);
+    });
+  });
+}
 function secureServiceUrl(value) {
   const normalized = value.trim().replace(/\/+$/u, "");
   try {
@@ -1341,11 +1598,11 @@ function summarize(payload) {
 var CLI_HELP = `Visual Review CLI
 
 Usage:
-  visual-review configure [--email <email>] [--project <id>] [--list]
+  visual-review configure [--email <email>] [--project <id>] [--list] [--no-browser]
                           [--service-url <url>] [--repo <path> | --output <path>]
-                          [--webhook-admin]
+                          [--name <display-name>] [--read-only | --webhook-admin]
   visual-review status
-  visual-review list [--status open|resolved|all] [--limit 1..100] [--cursor <cursor>]
+  visual-review list [--status open|in_progress|resolved|all] [--limit 1..100] [--cursor <cursor>]
   visual-review get <comment-id>
   visual-review export [--format json|markdown] [--output <new-file>]
   visual-review reply <comment-id> (--body <text> | --body-file <path>)
@@ -1358,6 +1615,8 @@ Usage:
                           --expected-thread-revision <revision>]
   visual-review reopen <comment-id> [--expected-workflow-revision <revision>
                           --expected-thread-revision <revision>]
+  visual-review start <comment-id> [--expected-workflow-revision <revision>
+                          --expected-thread-revision <revision>]
   visual-review webhook get|delete
   visual-review webhook set --url <https-url>
                           (--secret <32..256 chars> | --secret-file <path>) [--inactive]
@@ -1376,16 +1635,18 @@ Configuration:
 Run visual-review help <command> or visual-review <command> --help for details.
 `;
 var CLI_HELP_TOPICS = {
-  configure: `Usage: visual-review configure [--email <email>] [--project <id>] [--list]
-  [--service-url <https-url>] [--repo <path> | --output <path>] [--webhook-admin]
+  configure: `Usage: visual-review configure [--email <email>] [--project <id>] [--list] [--no-browser]
+  [--service-url <https-url>] [--repo <path> | --output <path>] [--name <display-name>]
+  [--read-only | --webhook-admin]
 
-Authenticates with a hidden email code and writes one project-scoped credential.
+Opens browser approval by default and writes one named project-scoped credential.
+--read-only requests only feedback:read. --no-browser (or --email) uses a hidden terminal email code.
 `,
   status: `Usage: visual-review status
 
 Returns configuration, connectionReason, expiry, and scopes as JSON.
 `,
-  list: `Usage: visual-review list [--status open|resolved|all] [--limit 1..100] [--cursor <cursor>]
+  list: `Usage: visual-review list [--status open|in_progress|resolved|all] [--limit 1..100] [--cursor <cursor>]
 
 Lists compact feedback summaries. Pass nextCursor to --cursor when hasMore is true.
 `,
@@ -1413,6 +1674,10 @@ Without revisions, the CLI reads the latest pair first and still uses CAS.
   reopen: `Usage: visual-review reopen <comment-id> [--expected-workflow-revision <revision> --expected-thread-revision <revision>]
 
 Without revisions, the CLI reads the latest pair first and still uses CAS.
+`,
+  start: `Usage: visual-review start <comment-id> [--expected-workflow-revision <revision> --expected-thread-revision <revision>]
+
+Moves requested feedback to in progress. Without revisions, the CLI reads the latest pair first.
 `,
   webhook: `Usage: visual-review webhook get|delete
   visual-review webhook set --url <https-url> (--secret <text> | --secret-file <path>) [--inactive]
@@ -1425,7 +1690,7 @@ Revokes the remote session before removing the local credential unless --local-o
 `
 };
 var CLI_COMMAND_NAMES = Object.keys(CLI_HELP_TOPICS);
-var CLI_VERSION = "0.14.0";
+var CLI_VERSION = "0.15.0";
 var CliUsageError = class extends Error {
 };
 function parseCliCommand(args) {
@@ -1452,8 +1717,11 @@ function parseCliCommand(args) {
     let serviceUrl;
     let output;
     let repository;
+    let displayName;
     let list = false;
     let webhookAdmin = false;
+    let readOnly = false;
+    let noBrowser = false;
     for (let index = 0; index < rest.length; index += 1) {
       const token = rest[index];
       if (token === "--list") {
@@ -1464,9 +1732,17 @@ function parseCliCommand(args) {
         webhookAdmin = true;
         continue;
       }
+      if (token === "--read-only") {
+        readOnly = true;
+        continue;
+      }
+      if (token === "--no-browser") {
+        noBrowser = true;
+        continue;
+      }
       const [flagValue, inlineValue] = token.split("=", 2);
       const flag = flagValue;
-      if (!["--email", "--project", "--service-url", "--output", "--repo"].includes(flag)) {
+      if (!["--email", "--project", "--service-url", "--output", "--repo", "--name"].includes(flag)) {
         throw new CliUsageError(`\uC54C \uC218 \uC5C6\uB294 configure \uC635\uC158: ${token}`);
       }
       const value = inlineValue ?? rest[++index];
@@ -1476,17 +1752,22 @@ function parseCliCommand(args) {
       if (flag === "--service-url") serviceUrl = value;
       if (flag === "--output") output = value;
       if (flag === "--repo") repository = value;
+      if (flag === "--name") displayName = value;
     }
     if (output && repository) throw new CliUsageError("--output\uACFC --repo\uB294 \uD568\uAED8 \uC0AC\uC6A9\uD560 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4.");
+    if (readOnly && webhookAdmin) throw new CliUsageError("--read-only\uC640 --webhook-admin\uC740 \uD568\uAED8 \uC0AC\uC6A9\uD560 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4.");
     return {
       name,
       list,
       webhookAdmin,
+      readOnly,
+      noBrowser,
       ...email ? { email } : {},
       ...projectId ? { projectId } : {},
       ...serviceUrl ? { serviceUrl } : {},
       ...output ? { output } : {},
-      ...repository ? { repository } : {}
+      ...repository ? { repository } : {},
+      ...displayName ? { displayName } : {}
     };
   }
   if (name === "status") {
@@ -1507,8 +1788,8 @@ function parseCliCommand(args) {
       const [flag, inlineValue] = token.split("=", 2);
       if (flag === "--status") {
         const value = inlineValue ?? rest[++index];
-        if (value !== "open" && value !== "resolved" && value !== "all") {
-          throw new CliUsageError("--status\uB294 'open', 'resolved', 'all' \uC911 \uD558\uB098\uC5EC\uC57C \uD569\uB2C8\uB2E4.");
+        if (value !== "open" && value !== "in_progress" && value !== "resolved" && value !== "all") {
+          throw new CliUsageError("--status\uB294 'open', 'in_progress', 'resolved', 'all' \uC911 \uD558\uB098\uC5EC\uC57C \uD569\uB2C8\uB2E4.");
         }
         status = value;
         continue;
@@ -1698,7 +1979,7 @@ function parseCliCommand(args) {
       ...secretFile === void 0 ? {} : { secretFile }
     };
   }
-  if (name === "resolve" || name === "reopen") {
+  if (name === "start" || name === "resolve" || name === "reopen") {
     const commentId = rest[0]?.trim();
     if (!commentId) throw new CliUsageError(`${name} \uBA85\uB839\uC5D0\uB294 comment-id\uAC00 \uD544\uC694\uD569\uB2C8\uB2E4.`);
     let expectedWorkflowRevision;
@@ -1822,7 +2103,7 @@ ${formatAgentFeedbackMarkdown(feedback)}`).join("\n\n---\n\n")
   return client.setStatus(
     projectId,
     command.commentId,
-    command.name === "resolve" ? "resolved" : "open",
+    command.name === "resolve" ? "resolved" : command.name === "start" ? "in_progress" : "open",
     precondition
   );
 }
@@ -1878,6 +2159,8 @@ async function runCli(args, options = {}) {
       fetch: options.fetch,
       now: options.now,
       prompt: options.prompt,
+      openBrowser: options.openBrowser,
+      wait: options.wait,
       warning: (text) => stderr(`${text}
 `)
     };
@@ -1900,6 +2183,7 @@ async function runCli(args, options = {}) {
       now: lifecycleOptions.now,
       warning: lifecycleOptions.warning
     });
+    assertCommandScope(command, config.scopes);
     sensitiveValues.add(config.token);
     const result = await executeCliCommand(
       new VisualReviewClient({
@@ -1932,6 +2216,11 @@ async function runCli(args, options = {}) {
     return cause instanceof CliUsageError ? 2 : 1;
   }
 }
+function assertCommandScope(command, scopes) {
+  if (!agentOperationAllowed(command.name, scopes)) {
+    throw new CliUsageError("\uC774 CLI session\uC758 \uC2B9\uC778\uB41C scope\uB85C\uB294 \uC774 \uBA85\uB839\uC744 \uC0AC\uC6A9\uD560 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4.");
+  }
+}
 function cliErrorEnvelope(cause, sensitiveValues) {
   if (cause instanceof CliUsageError) {
     return {