@agent-team-foundation/first-tree-hub 0.11.4 → 0.12.0

package/dist/{bootstrap-D-Yf8yOc.mjs → bootstrap-C_K2CKXC.mjs}

@@ -569,6 +569,13 @@ const serverConfigSchema = defineConfig({
 		refreshTokenExpiry: field(z.string().default("30d"), { env: "FIRST_TREE_HUB_AUTH_REFRESH_TOKEN_EXPIRY" }),
 		connectTokenExpiry: field(z.string().default("10m"), { env: "FIRST_TREE_HUB_AUTH_CONNECT_TOKEN_EXPIRY" })
 	},
+	contextTreeSync: optional({
+		githubToken: field(z.string(), {
+			env: "FIRST_TREE_HUB_CONTEXT_TREE_GITHUB_TOKEN",
+			secret: true
+		}),
+		githubTokenRepos: field(z.string().optional(), { env: "FIRST_TREE_HUB_CONTEXT_TREE_GITHUB_TOKEN_REPOS" })
+	}),
 	oauth: optional({ github: optional({
 		clientId: field(z.string(), { env: "FIRST_TREE_HUB_GITHUB_OAUTH_CLIENT_ID" }),
 		clientSecret: field(z.string(), {

package/dist/cli/index.mjs

@@ -1,15 +1,15 @@
 #!/usr/bin/env node
-import "../observability-BAScT_5S-gw1ODB_o.mjs";
-import { $ as formatStaleReason, A as checkDocker, B as isServiceSupported, C as createApiNameResolver, D as checkBackgroundService, E as checkAgentConfigs, F as checkWebSocket, H as restartClientService, I as printResults, J as stopPostgres, L as reconcileAgentConfigs, M as checkServerConfig, N as checkServerHealth, O as checkClientConfig, P as checkServerReachable, Q as findStaleAliases, R as getClientServiceStatus, S as runHomeMigration, T as runMigrations, U as startClientService, W as stopClientService, X as handleClientOrgMismatch, Y as ClientRuntime, _ as formatCheckReport, a as declineUpdate, at as success, b as onboardCreate, c as detectInstallMode, ct as FirstTreeHubSDK, d as startServer, dt as cleanWorkspaces, et as removeLocalAgent, f as reconcileLocalRuntimeProviders, ft as probeCapabilities, g as promptMissingFields, h as promptAddAgent, i as createExecuteUpdate, it as fail, j as checkNodeVersion, k as checkDatabase, l as fetchLatestVersion, lt as SdkError, m as isInteractive, mt as configureClientLoggerForService, o as promptUpdate, ot as ClientOrgMismatchError, p as uploadClientCapabilities, pt as applyClientLoggerConfig, r as registerSaaSConnectCommand, rt as resolveReplyToFromEnv, s as PACKAGE_NAME, st as ClientUserMismatchError, tt as createOwner, u as installGlobalLatest, ut as SessionRegistry, v as loadOnboardState, w as migrateLocalAgentDirs, x as saveOnboardState, y as onboardCheck, z as installClientService } from "../saas-connect-CVoRK0Ex.mjs";
+import "../observability-BAScT_5S-BcW9HgkG.mjs";
+import { $ as formatStaleReason, A as checkDocker, B as isServiceSupported, C as createApiNameResolver, D as checkBackgroundService, E as checkAgentConfigs, F as checkWebSocket, H as restartClientService, I as printResults, J as stopPostgres, L as reconcileAgentConfigs, M as checkServerConfig, N as checkServerHealth, O as checkClientConfig, P as checkServerReachable, Q as findStaleAliases, R as getClientServiceStatus, S as runHomeMigration, T as runMigrations, U as startClientService, W as stopClientService, X as handleClientOrgMismatch, Y as ClientRuntime, _ as formatCheckReport, a as declineUpdate, at as success, b as onboardCreate, c as detectInstallMode, ct as FirstTreeHubSDK, d as startServer, dt as cleanWorkspaces, et as removeLocalAgent, f as reconcileLocalRuntimeProviders, ft as probeCapabilities, g as promptMissingFields, h as promptAddAgent, i as createExecuteUpdate, it as fail, j as checkNodeVersion, k as checkDatabase, l as fetchLatestVersion, lt as SdkError, m as isInteractive, mt as configureClientLoggerForService, o as promptUpdate, ot as ClientOrgMismatchError, p as uploadClientCapabilities, pt as applyClientLoggerConfig, r as registerSaaSConnectCommand, rt as resolveReplyToFromEnv, s as PACKAGE_NAME, st as ClientUserMismatchError, tt as createOwner, u as installGlobalLatest, ut as SessionRegistry, v as loadOnboardState, w as migrateLocalAgentDirs, x as saveOnboardState, y as onboardCheck, z as installClientService } from "../saas-connect-Drn9g6cR.mjs";
 import "../logger-core-BTmvdflj-DjW8FM4T.mjs";
-import { C as resetConfigMeta, E as setConfigValue, S as resetConfig, T as serverConfigSchema, _ as getConfigValue, a as ensureFreshAdminToken, c as resolveServerUrl, d as DEFAULT_CONFIG_DIR, f as DEFAULT_DATA_DIR, h as clientConfigSchema, i as ensureFreshAccessToken, l as saveAgentConfig, m as agentConfigSchema, o as loadCredentials, p as DEFAULT_HOME_DIR, u as saveCredentials, v as initConfig, w as resolveConfigReadonly, x as readConfigFile, y as loadAgents } from "../bootstrap-D-Yf8yOc.mjs";
+import { C as resetConfigMeta, E as setConfigValue, S as resetConfig, T as serverConfigSchema, _ as getConfigValue, a as ensureFreshAdminToken, c as resolveServerUrl, d as DEFAULT_CONFIG_DIR, f as DEFAULT_DATA_DIR, h as clientConfigSchema, i as ensureFreshAccessToken, l as saveAgentConfig, m as agentConfigSchema, o as loadCredentials, p as DEFAULT_HOME_DIR, u as saveCredentials, v as initConfig, w as resolveConfigReadonly, x as readConfigFile, y as loadAgents } from "../bootstrap-C_K2CKXC.mjs";
 import { a as print, n as CLI_USER_AGENT, o as setJsonMode, r as COMMAND_VERSION, t as cliFetch } from "../cli-fetch--tiwKm5S.mjs";
-import "../dist-ClFs4WMj.mjs";
-import { n as bindFeishuUser, t as bindFeishuBot } from "../feishu-AI3pwmqN.mjs";
-import "../errors-BmyRwN0Y-Dad3eV8F.mjs";
-import "../client-CLdRbuml-svTO0Eat.mjs";
-import "../src-aJMV60mR.mjs";
-import "../invitation-Dnn5gGGX-DXryyvRG.mjs";
+import "../dist-UOZ6vMUW.mjs";
+import { n as bindFeishuUser, t as bindFeishuBot } from "../feishu-C6qlhju2.mjs";
+import "../errors-CF5evtJt-B0NTIVPt.mjs";
+import "../src-DNBS5Yjj.mjs";
+import "../client-BPUdUaZT-CyCrpCTP.mjs";
+import "../invitation-Bg0TRiyx-BsZH4GCS.mjs";
 import { join } from "node:path";
 import { existsSync, mkdirSync, readFileSync, readdirSync } from "node:fs";
 import * as semver from "semver";
@@ -1670,13 +1670,13 @@ function isSecretField(schema, dotPath) {
 //#region src/commands/onboard.ts
 async function promptMissing(args) {
 	if (!args.server) try {
-		const { resolveServerUrl } = await import("../bootstrap-D-Yf8yOc.mjs").then((n) => n.r);
+		const { resolveServerUrl } = await import("../bootstrap-C_K2CKXC.mjs").then((n) => n.r);
 		resolveServerUrl();
 	} catch {
 		args.server = await input({ message: "Hub server URL:" });
 		saveOnboardState(args);
 	}
-	const { loadCredentials } = await import("../bootstrap-D-Yf8yOc.mjs").then((n) => n.r);
+	const { loadCredentials } = await import("../bootstrap-C_K2CKXC.mjs").then((n) => n.r);
 	if (!loadCredentials()) throw new Error("No saved credentials. Run `first-tree-hub client connect <server-url>` before onboarding.");
 	if (!args.id) {
 		args.id = await input({ message: "Agent ID:" });
@@ -1798,6 +1798,67 @@ function registerOnboardCommand(program) {
 	});
 }
 //#endregion
+//#region src/commands/org.ts
+/**
+* `first-tree-hub org` — organization-level operations.
+*
+* Today this only ships `bind-tree`, called by Step 3 onboarding agents
+* after they create a fresh context-tree GitHub repo so the Hub records
+* the binding in the org's `context_tree` settings namespace. The verb
+* mirrors first-tree CLI's own `tree bind` vocabulary so agents reading
+* "bind-tree" know what it means without translation. See
+* docs/new-user-onboarding-design.md §7.4 (Path B).
+*/
+function registerOrgCommands(program) {
+	program.command("org").description("Organization-level operations").command("bind-tree").description("Bind the caller's organization to a context-tree GitHub URL").argument("<url>", "GitHub URL of the context-tree repository (https://github.com/...)").option("--org <orgId>", "Override the org to bind. Defaults to your selected/default org via /me.").action(async (rawUrl, options) => {
+		try {
+			const url = rawUrl.trim();
+			if (!url) fail("INVALID_URL", "URL must not be empty", 2);
+			try {
+				const parsed = new URL(url);
+				if (parsed.protocol !== "https:" && parsed.protocol !== "http:") fail("INVALID_URL", `URL scheme must be http or https (got ${parsed.protocol})`, 2);
+			} catch {
+				fail("INVALID_URL", `"${url}" is not a valid URL`, 2);
+			}
+			const serverUrl = resolveServerUrl();
+			const accessToken = await ensureFreshAccessToken();
+			const orgId = options.org?.trim() || await resolveDefaultOrgId(serverUrl, accessToken);
+			const res = await fetch(`${serverUrl}/api/v1/orgs/${encodeURIComponent(orgId)}/settings/context_tree`, {
+				method: "PUT",
+				headers: {
+					Authorization: `Bearer ${accessToken}`,
+					"Content-Type": "application/json"
+				},
+				body: JSON.stringify({ repo: url })
+			});
+			if (!res.ok) {
+				const text = await res.text().catch(() => "");
+				fail("PUT_FAILED", `hub returned ${res.status} on PUT /orgs/${orgId}/settings/context_tree: ${text.slice(0, 256)}`, 1);
+			}
+			print.status("•", `Bound organization to context-tree at ${url}`);
+			success({
+				orgId,
+				repo: url
+			});
+		} catch (err) {
+			fail("UNEXPECTED", err instanceof Error ? err.message : String(err), 1);
+		}
+	});
+}
+async function resolveDefaultOrgId(serverUrl, accessToken) {
+	const res = await fetch(`${serverUrl}/api/v1/me`, {
+		headers: { Authorization: `Bearer ${accessToken}` },
+		signal: AbortSignal.timeout(1e4)
+	});
+	if (!res.ok) fail("ME_FAILED", `hub returned ${res.status} on /me`, 1);
+	const me = await res.json();
+	const memberships = me.memberships ?? [];
+	if (me.defaultOrganizationId && memberships.some((m) => m.organizationId === me.defaultOrganizationId)) return me.defaultOrganizationId;
+	if (memberships.length === 1 && memberships[0]) return memberships[0].organizationId;
+	if (memberships.length === 0) fail("NO_ORG", "You don't belong to any organization", 1);
+	fail("AMBIGUOUS_ORG", "Multiple organizations — pass --org <orgId> explicitly or set a default in the web UI first", 1);
+}
+//#endregion
 //#region src/commands/server.ts
 function registerServerCommands(program) {
 	const server = program.command("server").description("Manage First Tree Hub server");
@@ -1990,6 +2051,7 @@ registerAgentCommands(program);
 registerConfigCommands(program);
 registerUpdateCommand(program);
 registerOnboardCommand(program);
+registerOrgCommands(program);
 program.parse();
 //#endregion
 export {};