@aria_asi/cli 0.2.2 → 0.2.4

package/bin/aria.js

@@ -8,6 +8,16 @@ import { AriaChat } from '../dist/aria-connector/src/chat.js';
 import { checkHarnessHealth } from '../dist/aria-connector/src/harness-client.js';
 import { login, status, logout, revoke } from '../dist/aria-connector/src/auth-commands.js';
 import { installHooks } from '../dist/aria-connector/src/install-hooks.js';
+import { maybePrintUpdateNotice, checkForUpdate } from '../dist/aria-connector/src/self-update.js';
+
+// ── Self-update notice (non-blocking, rate-limited once per 24h) ──
+// Fires-and-forgets — the registry check runs in parallel with command
+// dispatch and prints a one-line notice on stderr if newer version available.
+// Hamza 2026-04-26: continuous overnight improvement reaches clients via
+// this primitive. Kill-switch: ARIA_SELF_UPDATE=off env.
+if (process.env.ARIA_SELF_UPDATE !== 'off') {
+  maybePrintUpdateNotice().catch(() => {});
+}
 
 // ── Auth + install subcommands — handled BEFORE the chat flow.
 // Hamza 2026-04-26: license-aware CLI for client-tonight ship +
@@ -16,7 +26,24 @@ import { installHooks } from '../dist/aria-connector/src/install-hooks.js';
 const command = process.argv[2];
 const args = process.argv.slice(3);
 
-if (command === 'install-hooks') {
+if (command === 'check-update') {
+  // Force a check + print result, bypassing the 24h rate limit
+  checkForUpdate({ force: true }).then((result) => {
+    if (!result.ok) {
+      console.error(`I couldn't check for updates: ${result.reason}`);
+      process.exit(1);
+    }
+    if (result.updateAvailable) {
+      console.log(`  ${result.message}`);
+    } else {
+      console.log(`  You're on the latest version (${result.current}). Nothing to do.`);
+    }
+    process.exit(0);
+  }).catch((err) => {
+    console.error(`I hit an unexpected error checking for updates: ${err && err.message ? err.message : err}`);
+    process.exit(1);
+  });
+} else if (command === 'install-hooks') {
   const force = args.includes('--force');
   const harnessUrlIdx = args.indexOf('--harness-url');
   const harnessUrl = harnessUrlIdx >= 0 && args[harnessUrlIdx + 1] ? args[harnessUrlIdx + 1] : undefined;
@@ -43,14 +70,41 @@ if (command === 'install-hooks') {
   const dispatch = async () => {
     switch (command) {
       case 'login': {
-        const token = args[0];
-        if (!token) {
-          console.error('Usage: aria login <token>');
+        const arg = args[0];
+
+        // ── Help text ──────────────────────────────────────────────────────────
+        if (arg === '--help' || arg === '-h') {
+          console.log('');
+          console.log('  aria login <token>          Log in with an Aria harness license token.');
+          console.log('  aria login --anthropic      Open Anthropic Console, paste your API key back here.');
+          console.log('  aria login -a               Shorthand for --anthropic.');
+          console.log('');
+          console.log("  I'll store your Aria license in ~/.aria/license.json and your Anthropic");
+          console.log('  API key in ~/.aria/config.json (mode 0600, readable only by you).');
+          console.log('');
+          process.exit(0);
+        }
+
+        // ── Anthropic browser-paste flow ───────────────────────────────────────
+        if (arg === '--anthropic' || arg === '-a') {
+          const { loginAnthropic } = await import('../dist/aria-connector/src/anthropic-oauth.js');
+          const result = await loginAnthropic();
+          if (!result.ok) {
+            console.error(`I couldn't log you in: ${result.error}`);
+            process.exit(1);
+          }
+          console.log("I'm logged into Anthropic. Your API key is saved to ~/.aria/config.json.");
+          process.exit(0);
+        }
+
+        // ── Original harness-license path (preserved) ─────────────────────────
+        if (!arg) {
+          console.error("Usage: aria login <token>  |  aria login --anthropic  |  aria login --help");
           process.exit(1);
         }
-        const result = await login(token);
+        const result = await login(arg);
         if (result.ok) {
-          console.log(`You're logged in. I see your license — tier ${result.tier}, expires ${result.expiresAt}.`);
+          console.log(`I see your license — tier ${result.tier}, expires ${result.expiresAt}. You're logged in.`);
         } else {
           console.error(`I couldn't log you in: ${result.error}`);
           process.exit(1);
@@ -60,7 +114,7 @@ if (command === 'install-hooks') {
       case 'status': {
         const result = await status();
         if (!result.loggedIn) {
-          console.log("I don't see a license on this machine. Try 'aria login <token>'.");
+          console.log("I don't see a license on this machine. Try 'aria login <token>' or 'aria login --anthropic'.");
         } else if (result.revoked) {
           console.log(`Your license was revoked. You'll need to log in again with a fresh token.`);
         } else {
@@ -93,6 +147,27 @@ if (command === 'install-hooks') {
     process.exit(1);
   });
 } else {
+  // ── Self-service onboarding gate ──
+  // When neither a license file (~/.aria/license.json) nor model config
+  // exist, launch the full onboarding wizard. This collects email +
+  // tenant + tier + LLM provider + key, validates the LLM key with the
+  // provider, self-issues a license, persists everything, and auto-runs
+  // install-hooks to bind the user's Claude Code to the harness.
+  // Hamza 2026-04-26: "burn through onboarding with quality and USE THE
+  // HARNESS PLEASE." Email-verify-code lands in Phase 11 (no SMTP yet).
+  const fsMod = require('fs');
+  const pathMod = require('path');
+  const osMod = require('os');
+  const LICENSE_PATH = pathMod.join(osMod.homedir(), '.aria', 'license.json');
+  const hasLicense = fsMod.existsSync(LICENSE_PATH);
+
+  if (!hasLicense) {
+    const { runOnboardingWizard } = await import('../dist/aria-connector/src/onboarding-wizard.js');
+    const result = await runOnboardingWizard();
+    if (!result.ok) process.exit(1);
+    process.exit(0);
+  }
+
   // ── Existing interactive chat flow (preserved verbatim from prior CLI).
 
   const config = loadConfig();

package/dist/aria-connector/src/anthropic-oauth.d.ts

@@ -0,0 +1,28 @@
+export interface AnthropicLoginResult {
+    ok: boolean;
+    apiKey?: string;
+    error?: string;
+}
+/** Options accepted by loginAnthropic. */
+export interface AnthropicLoginOptions {
+    /** If true, skip the browser-open attempt and just prompt for the key. */
+    noBrowser?: boolean;
+}
+/**
+ * Run the Anthropic login flow.
+ *
+ * Today this is the browser-paste flow (path b) because Anthropic does not
+ * expose a public PKCE/OAuth token endpoint for console API keys.
+ *
+ * On success, the validated API key is persisted to ~/.aria/config.json under
+ * `model.apiKey` and returned in the result object. The harness license token
+ * in ~/.aria/license.json is NOT modified — that belongs to the Aria harness,
+ * not Anthropic.
+ */
+export declare function loginAnthropic(opts?: AnthropicLoginOptions): Promise<AnthropicLoginResult>;
+/**
+ * Validate an Anthropic API key by hitting GET /v1/models.
+ * Returns true when the server responds 2xx; false on 401/403/network error.
+ */
+export declare function _validateKey(apiKey: string): Promise<boolean>;
+//# sourceMappingURL=anthropic-oauth.d.ts.map

package/dist/aria-connector/src/anthropic-oauth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"anthropic-oauth.d.ts","sourceRoot":"","sources":["../../../src/anthropic-oauth.ts"],"names":[],"mappings":"AAgCA,MAAM,WAAW,oBAAoB;IACnC,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,0CAA0C;AAC1C,MAAM,WAAW,qBAAqB;IACpC,0EAA0E;IAC1E,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAID;;;;;;;;;;GAUG;AACH,wBAAsB,cAAc,CAClC,IAAI,GAAE,qBAA0B,GAC/B,OAAO,CAAC,oBAAoB,CAAC,CAuB/B;AAqED;;;GAGG;AACH,wBAAsB,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAenE"}

package/dist/aria-connector/src/anthropic-oauth.js

@@ -0,0 +1,177 @@
+// anthropic-oauth.ts — Anthropic login flow for `aria login --anthropic`
+//
+// OAuth path decision (2026-04-26):
+//   Anthropic does not publish a public PKCE/OAuth endpoint for end-user
+//   API-key issuance via the console.anthropic.com auth surface. The only
+//   standardised way to obtain an API key is through the Anthropic Console
+//   web UI. Therefore we use the browser-paste fallback (path b):
+//     1. Open https://console.anthropic.com/account/keys in the user's browser.
+//     2. Prompt them to paste the new key back into the CLI.
+//     3. Validate the key against GET https://api.anthropic.com/v1/models.
+//     4. Return the validated key to the caller.
+//
+//   If Anthropic ships a public OAuth/PKCE spec in the future, replace the
+//   body of `_oauthPKCEFlow` below with the real implementation and call it
+//   instead of `_browserPasteFlow`.
+//
+// Voice: first-person Aria ("I'll open", "I see", "I couldn't reach").
+// ESM: all internal imports use .js extensions.
+import * as readline from 'node:readline';
+import * as fs from 'node:fs';
+import * as path from 'node:path';
+import { homedir } from 'node:os';
+import { spawn } from 'node:child_process';
+const ANTHROPIC_KEYS_URL = 'https://console.anthropic.com/account/keys';
+const ANTHROPIC_MODELS_URL = 'https://api.anthropic.com/v1/models';
+const ANTHROPIC_API_VERSION = '2023-06-01';
+const CONFIG_PATH = path.join(homedir(), '.aria', 'config.json');
+const ARIA_DIR = path.join(homedir(), '.aria');
+// ── Public API ───────────────────────────────────────────────────────────────
+/**
+ * Run the Anthropic login flow.
+ *
+ * Today this is the browser-paste flow (path b) because Anthropic does not
+ * expose a public PKCE/OAuth token endpoint for console API keys.
+ *
+ * On success, the validated API key is persisted to ~/.aria/config.json under
+ * `model.apiKey` and returned in the result object. The harness license token
+ * in ~/.aria/license.json is NOT modified — that belongs to the Aria harness,
+ * not Anthropic.
+ */
+export async function loginAnthropic(opts = {}) {
+    try {
+        const apiKey = await _browserPasteFlow(opts.noBrowser ?? false);
+        if (!apiKey) {
+            return { ok: false, error: "I didn't receive a key — aborting." };
+        }
+        console.log("  I'm validating your key against the Anthropic API...");
+        const valid = await _validateKey(apiKey);
+        if (!valid) {
+            return {
+                ok: false,
+                error: "I couldn't verify that key with Anthropic. Double-check that it starts with sk-ant- and hasn't been revoked.",
+            };
+        }
+        _persistApiKey(apiKey);
+        return { ok: true, apiKey };
+    }
+    catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        return { ok: false, error: `I hit an unexpected error: ${msg}` };
+    }
+}
+// ── Internal: browser-paste flow (path b) ────────────────────────────────────
+async function _browserPasteFlow(noBrowser) {
+    console.log('');
+    console.log("  I'll open https://console.anthropic.com/account/keys in your browser.");
+    console.log('  Create a new API key there, then paste it back here.');
+    console.log('');
+    if (!noBrowser) {
+        _openBrowser(ANTHROPIC_KEYS_URL);
+    }
+    const rl = readline.createInterface({
+        input: process.stdin,
+        output: process.stdout,
+        terminal: true,
+    });
+    const rawKey = await new Promise((resolve) => {
+        rl.question('  Paste your Anthropic API key: ', (answer) => {
+            rl.close();
+            resolve(answer.trim());
+        });
+    });
+    return rawKey || null;
+}
+// ── Internal: browser open (cross-platform) ───────────────────────────────────
+function _openBrowser(url) {
+    const platform = process.platform;
+    let cmd;
+    let args;
+    if (platform === 'darwin') {
+        cmd = 'open';
+        args = [url];
+    }
+    else if (platform === 'win32') {
+        cmd = 'cmd';
+        args = ['/c', 'start', '', url];
+    }
+    else {
+        // Linux / *BSD / WSL
+        cmd = 'xdg-open';
+        args = [url];
+    }
+    try {
+        const child = spawn(cmd, args, {
+            detached: true,
+            stdio: 'ignore',
+        });
+        child.unref();
+    }
+    catch {
+        // If browser open fails, the user can still paste — not fatal.
+        console.log(`  I couldn't open your browser automatically. Please visit:\n  ${url}`);
+    }
+}
+// ── Internal: key validation ──────────────────────────────────────────────────
+/**
+ * Validate an Anthropic API key by hitting GET /v1/models.
+ * Returns true when the server responds 2xx; false on 401/403/network error.
+ */
+export async function _validateKey(apiKey) {
+    try {
+        const resp = await fetch(ANTHROPIC_MODELS_URL, {
+            method: 'GET',
+            headers: {
+                'x-api-key': apiKey,
+                'anthropic-version': ANTHROPIC_API_VERSION,
+            },
+        });
+        // 200 = valid key; anything else = invalid or revoked
+        return resp.status === 200;
+    }
+    catch {
+        // Network failure — we can't confirm validity
+        return false;
+    }
+}
+// ── Internal: config persistence ──────────────────────────────────────────────
+function _persistApiKey(apiKey) {
+    if (!fs.existsSync(ARIA_DIR)) {
+        fs.mkdirSync(ARIA_DIR, { recursive: true, mode: 0o700 });
+    }
+    let config = {};
+    if (fs.existsSync(CONFIG_PATH)) {
+        try {
+            config = JSON.parse(fs.readFileSync(CONFIG_PATH, 'utf-8'));
+        }
+        catch {
+            config = {};
+        }
+    }
+    const model = config.model ?? {};
+    model.provider = model.provider ?? 'anthropic';
+    model.model = model.model ?? 'claude-sonnet-4-20250514';
+    model.apiKey = apiKey;
+    config.model = model;
+    fs.writeFileSync(CONFIG_PATH, JSON.stringify(config, null, 2) + '\n', {
+        mode: 0o600,
+        encoding: 'utf-8',
+    });
+}
+// ── Placeholder for future PKCE flow ─────────────────────────────────────────
+// When Anthropic ships a public OAuth/PKCE endpoint for console key issuance,
+// implement the full flow here and call it from loginAnthropic() instead of
+// _browserPasteFlow():
+//
+// async function _oauthPKCEFlow(): Promise<string | null> {
+//   const port = await _findFreePort();
+//   const { verifier, challenge } = _pkceChallenge();
+//   const authUrl = `https://console.anthropic.com/oauth/authorize?` +
+//     `response_type=code&client_id=<CLIENT_ID>&redirect_uri=http://localhost:${port}/callback` +
+//     `&code_challenge=${challenge}&code_challenge_method=S256`;
+//   _openBrowser(authUrl);
+//   const code = await _waitForCallback(port);
+//   const token = await _exchangeCode(code, verifier, port);
+//   return token;
+// }
+//# sourceMappingURL=anthropic-oauth.js.map

package/dist/aria-connector/src/anthropic-oauth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"anthropic-oauth.js","sourceRoot":"","sources":["../../../src/anthropic-oauth.ts"],"names":[],"mappings":"AAAA,yEAAyE;AACzE,EAAE;AACF,oCAAoC;AACpC,yEAAyE;AACzE,0EAA0E;AAC1E,2EAA2E;AAC3E,kEAAkE;AAClE,gFAAgF;AAChF,6DAA6D;AAC7D,2EAA2E;AAC3E,iDAAiD;AACjD,EAAE;AACF,2EAA2E;AAC3E,4EAA4E;AAC5E,oCAAoC;AACpC,EAAE;AACF,uEAAuE;AACvE,gDAAgD;AAGhD,OAAO,KAAK,QAAQ,MAAM,eAAe,CAAC;AAC1C,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAE3C,MAAM,kBAAkB,GAAG,4CAA4C,CAAC;AACxE,MAAM,oBAAoB,GAAG,qCAAqC,CAAC;AACnE,MAAM,qBAAqB,GAAG,YAAY,CAAC;AAC3C,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,aAAa,CAAC,CAAC;AACjE,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,OAAO,CAAC,CAAC;AAc/C,gFAAgF;AAEhF;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,OAA8B,EAAE;IAEhC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC,CAAC;QAChE,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,oCAAoC,EAAE,CAAC;QACpE,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,wDAAwD,CAAC,CAAC;QACtE,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,MAAM,CAAC,CAAC;QACzC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,KAAK,EACH,8GAA8G;aACjH,CAAC;QACJ,CAAC;QAED,cAAc,CAAC,MAAM,CAAC,CAAC;QACvB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAC9B,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,8BAA8B,GAAG,EAAE,EAAE,CAAC;IACnE,CAAC;AACH,CAAC;AAED,gFAAgF;AAEhF,KAAK,UAAU,iBAAiB,CAAC,SAAkB;IACjD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CACT,yEAAyE,CAC1E,CAAC;IACF,OAAO,CAAC,GAAG,CACT,wDAAwD,CACzD,CAAC;IACF,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAEhB,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,YAAY,CAAC,kBAAkB,CAAC,CAAC;IACnC,CAAC;IAED,MAAM,EAAE,GAAG,QAAQ,CAAC,eAAe,CAAC;QAClC,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,QAAQ,EAAE,IAAI;KACf,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,MAAM,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,EAAE;QACnD,EAAE,CAAC,QAAQ,CAAC,kCAAkC,EAAE,CAAC,MAAM,EAAE,EAAE;YACzD,EAAE,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QACzB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,IAAI,IAAI,CAAC;AACxB,CAAC;AAED,iFAAiF;AAEjF,SAAS,YAAY,CAAC,GAAW;IAC/B,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;IAClC,IAAI,GAAW,CAAC;IAChB,IAAI,IAAc,CAAC;IAEnB,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC1B,GAAG,GAAG,MAAM,CAAC;QACb,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IACf,CAAC;SAAM,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QAChC,GAAG,GAAG,KAAK,CAAC;QACZ,IAAI,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;IAClC,CAAC;SAAM,CAAC;QACN,qBAAqB;QACrB,GAAG,GAAG,UAAU,CAAC;QACjB,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IACf,CAAC;IAED,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE;YAC7B,QAAQ,EAAE,IAAI;YACd,KAAK,EAAE,QAAQ;SAChB,CAAC,CAAC;QACH,KAAK,CAAC,KAAK,EAAE,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,+DAA+D;QAC/D,OAAO,CAAC,GAAG,CACT,kEAAkE,GAAG,EAAE,CACxE,CAAC;IACJ,CAAC;AACH,CAAC;AAED,iFAAiF;AAEjF;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,MAAc;IAC/C,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,oBAAoB,EAAE;YAC7C,MAAM,EAAE,KAAK;YACb,OAAO,EAAE;gBACP,WAAW,EAAE,MAAM;gBACnB,mBAAmB,EAAE,qBAAqB;aAC3C;SACF,CAAC,CAAC;QACH,sDAAsD;QACtD,OAAO,IAAI,CAAC,MAAM,KAAK,GAAG,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,8CAA8C;QAC9C,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,iFAAiF;AAEjF,SAAS,cAAc,CAAC,MAAc;IACpC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7B,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3D,CAAC;IAED,IAAI,MAAM,GAA4B,EAAE,CAAC;IACzC,IAAI,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QAC/B,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC;QAC7D,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,GAAG,EAAE,CAAC;QACd,CAAC;IACH,CAAC;IAED,MAAM,KAAK,GAAI,MAAM,CAAC,KAAiC,IAAI,EAAE,CAAC;IAC9D,KAAK,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,IAAI,WAAW,CAAC;IAC/C,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,IAAI,0BAA0B,CAAC;IACxD,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC;IACtB,MAAM,CAAC,KAAK,GAAG,KAAK,CAAC;IAErB,EAAE,CAAC,aAAa,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE;QACpE,IAAI,EAAE,KAAK;QACX,QAAQ,EAAE,OAAO;KAClB,CAAC,CAAC;AACL,CAAC;AAED,gFAAgF;AAChF,8EAA8E;AAC9E,4EAA4E;AAC5E,uBAAuB;AACvB,EAAE;AACF,4DAA4D;AAC5D,wCAAwC;AACxC,sDAAsD;AACtD,uEAAuE;AACvE,kGAAkG;AAClG,iEAAiE;AACjE,2BAA2B;AAC3B,+CAA+C;AAC/C,6DAA6D;AAC7D,kBAAkB;AAClB,IAAI"}

package/dist/aria-connector/src/auth-commands.d.ts

@@ -3,6 +3,8 @@ interface LoginResult {
     tier?: string;
     jti?: string;
     expiresAt?: string;
+    /** Set when loginAnthropic() is used instead of the harness license path. */
+    anthropic?: boolean;
     error?: string;
 }
 interface StatusResult {
@@ -20,6 +22,20 @@ interface RevokeResult {
     jti?: string;
     error?: string;
 }
+/**
+ * Log in to the Aria harness with a license token, OR authenticate via
+ * Anthropic's console (browser-paste flow) when token === '--anthropic' or
+ * token === '-a'.
+ *
+ * Anthropic path: opens console.anthropic.com/account/keys, waits for the
+ * user to paste their API key, validates it against /v1/models, then persists
+ * it to ~/.aria/config.json under `model.apiKey`. The harness license file
+ * (~/.aria/license.json) is NOT modified — it belongs to the Aria license,
+ * not Anthropic credentials.
+ *
+ * Harness path: unchanged — validates via heartbeat / issue endpoint and
+ * writes license claims to ~/.aria/license.json.
+ */
 export declare function login(token: string): Promise<LoginResult>;
 export declare function status(): Promise<StatusResult>;
 export declare function logout(): Promise<LogoutResult>;

package/dist/aria-connector/src/auth-commands.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth-commands.d.ts","sourceRoot":"","sources":["../../../src/auth-commands.ts"],"names":[],"mappings":"AAgBA,UAAU,WAAW;IACnB,EAAE,EAAE,OAAO,CAAC;IACZ,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,UAAU,YAAY;IACpB,QAAQ,EAAE,OAAO,CAAC;IAClB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,UAAU,YAAY;IACpB,EAAE,EAAE,OAAO,CAAC;CACb;AAED,UAAU,YAAY;IACpB,EAAE,EAAE,OAAO,CAAC;IACZ,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,wBAAsB,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CA0C/D;AAED,wBAAsB,MAAM,IAAI,OAAO,CAAC,YAAY,CAAC,CAmDpD;AAED,wBAAsB,MAAM,IAAI,OAAO,CAAC,YAAY,CAAC,CAUpD;AAED,wBAAsB,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CAuBnE"}
+{"version":3,"file":"auth-commands.d.ts","sourceRoot":"","sources":["../../../src/auth-commands.ts"],"names":[],"mappings":"AAiBA,UAAU,WAAW;IACnB,EAAE,EAAE,OAAO,CAAC;IACZ,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,6EAA6E;IAC7E,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,UAAU,YAAY;IACpB,QAAQ,EAAE,OAAO,CAAC;IAClB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,UAAU,YAAY;IACpB,EAAE,EAAE,OAAO,CAAC;CACb;AAED,UAAU,YAAY;IACpB,EAAE,EAAE,OAAO,CAAC;IACZ,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAoD/D;AAED,wBAAsB,MAAM,IAAI,OAAO,CAAC,YAAY,CAAC,CAmDpD;AAED,wBAAsB,MAAM,IAAI,OAAO,CAAC,YAAY,CAAC,CAUpD;AAED,wBAAsB,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CAuBnE"}

package/dist/aria-connector/src/auth-commands.js

@@ -1,10 +1,34 @@
 import { loadLicense } from './auth.js';
 import { harnessClient } from './harness-client.js';
+import { loginAnthropic } from './anthropic-oauth.js';
 import * as fs from 'node:fs';
 import * as path from 'node:path';
 import { homedir } from 'node:os';
 const LICENSE_PATH = path.join(homedir(), '.aria', 'license.json');
+/**
+ * Log in to the Aria harness with a license token, OR authenticate via
+ * Anthropic's console (browser-paste flow) when token === '--anthropic' or
+ * token === '-a'.
+ *
+ * Anthropic path: opens console.anthropic.com/account/keys, waits for the
+ * user to paste their API key, validates it against /v1/models, then persists
+ * it to ~/.aria/config.json under `model.apiKey`. The harness license file
+ * (~/.aria/license.json) is NOT modified — it belongs to the Aria license,
+ * not Anthropic credentials.
+ *
+ * Harness path: unchanged — validates via heartbeat / issue endpoint and
+ * writes license claims to ~/.aria/license.json.
+ */
 export async function login(token) {
+    // ── Anthropic OAuth/paste branch ────────────────────────────────────────────
+    if (token === '--anthropic' || token === '-a') {
+        const result = await loginAnthropic();
+        if (!result.ok) {
+            return { ok: false, error: result.error };
+        }
+        return { ok: true, anthropic: true };
+    }
+    // ── Original harness-license branch (preserved verbatim) ────────────────────
     try {
         // Validate token via heartbeat; if unverified, issue endpoint
         let response;

package/dist/aria-connector/src/auth-commands.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth-commands.js","sourceRoot":"","sources":["../../../src/auth-commands.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAe,MAAM,WAAW,CAAC;AACrD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAElC,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,cAAc,CAAC,CAAC;AAoCnE,MAAM,CAAC,KAAK,UAAU,KAAK,CAAC,KAAa;IACvC,IAAI,CAAC;QACH,8DAA8D;QAC9D,IAAI,QAAQ,CAAC;QACb,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,wBAAwB,EAAE;gBAC3D,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE;aAC9C,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,mDAAmD;YACnD,QAAQ,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,oBAAoB,EAAE;gBACxD,IAAI,EAAE,EAAE,KAAK,EAAE;aAChB,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YACxD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,cAAc,EAAE,CAAC;QAC/D,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACnC,MAAM,MAAM,GAAkB,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC;QAElD,iDAAiD;QACjD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QACvC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACxB,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACtD,CAAC;QACD,EAAE,CAAC,aAAa,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE;YAC9D,IAAI,EAAE,KAAK;YACX,QAAQ,EAAE,OAAO;SAClB,CAAC,CAAC;QAEH,OAAO;YACL,EAAE,EAAE,IAAI;YACR,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,GAAG,EAAE,MAAM,CAAC,GAAG;YACf,SAAS,EAAE,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE;SACrD,CAAC;IACJ,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,IAAI,+BAA+B,EAAE,CAAC;IAC9E,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,MAAM;IAC1B,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,WAAW,EAAE,CAAC;QACpC,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;YAC7B,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;QAC7B,CAAC;QAED,qBAAqB;QACrB,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,wBAAwB,EAAE;YACjE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,OAAO,CAAC,GAAG,EAAE,EAAE;SACpD,CAAC,CAAC;QAEH,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAC5B,iBAAiB;YACjB,OAAO;gBACL,QAAQ,EAAE,IAAI;gBACd,GAAG,EAAE,OAAO,CAAC,GAAG;gBAChB,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,SAAS;gBAC/E,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;QAC7B,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACnC,MAAM,MAAM,GAAkB,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC;QAElD,OAAO;YACL,QAAQ,EAAE,IAAI;YACd,GAAG,EAAE,MAAM,CAAC,GAAG;YACf,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,SAAS,EAAE,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE;YACpD,OAAO,EAAE,KAAK;SACf,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,2CAA2C;QAC3C,MAAM,OAAO,GAAG,MAAM,WAAW,EAAE,CAAC;QACpC,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;YAC7B,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;QAC7B,CAAC;QACD,OAAO;YACL,QAAQ,EAAE,IAAI;YACd,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,SAAS;YAC/E,OAAO,EAAE,SAAS,EAAE,UAAU;SAC/B,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,MAAM;IAC1B,IAAI,CAAC;QACH,IAAI,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YAChC,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;QAC9B,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC;IAAC,MAAM,CAAC;QACP,kCAAkC;QAClC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,MAAe;IAC1C,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,WAAW,EAAE,CAAC;QACpC,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;YAC7B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,6BAA6B,EAAE,CAAC;QAC7D,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,qBAAqB,EAAE;YAC/D,IAAI,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,IAAI,2BAA2B,EAAE,SAAS,EAAE,MAAM,EAAE;SAC7F,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YACxD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,mBAAmB,EAAE,CAAC;QACpE,CAAC;QAED,oBAAoB;QACpB,MAAM,MAAM,EAAE,CAAC;QAEf,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC;IACxC,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,IAAI,oCAAoC,EAAE,CAAC;IACnF,CAAC;AACH,CAAC"}
+{"version":3,"file":"auth-commands.js","sourceRoot":"","sources":["../../../src/auth-commands.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAe,MAAM,WAAW,CAAC;AACrD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAElC,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,cAAc,CAAC,CAAC;AAsCnE;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,KAAK,CAAC,KAAa;IACvC,+EAA+E;IAC/E,IAAI,KAAK,KAAK,aAAa,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAC9C,MAAM,MAAM,GAAG,MAAM,cAAc,EAAE,CAAC;QACtC,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACf,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;QAC5C,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IACvC,CAAC;IAED,+EAA+E;IAC/E,IAAI,CAAC;QACH,8DAA8D;QAC9D,IAAI,QAAQ,CAAC;QACb,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,wBAAwB,EAAE;gBAC3D,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE;aAC9C,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,mDAAmD;YACnD,QAAQ,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,oBAAoB,EAAE;gBACxD,IAAI,EAAE,EAAE,KAAK,EAAE;aAChB,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YACxD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,cAAc,EAAE,CAAC;QAC/D,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACnC,MAAM,MAAM,GAAkB,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC;QAElD,iDAAiD;QACjD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QACvC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACxB,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACtD,CAAC;QACD,EAAE,CAAC,aAAa,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE;YAC9D,IAAI,EAAE,KAAK;YACX,QAAQ,EAAE,OAAO;SAClB,CAAC,CAAC;QAEH,OAAO;YACL,EAAE,EAAE,IAAI;YACR,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,GAAG,EAAE,MAAM,CAAC,GAAG;YACf,SAAS,EAAE,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE;SACrD,CAAC;IACJ,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,IAAI,+BAA+B,EAAE,CAAC;IAC9E,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,MAAM;IAC1B,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,WAAW,EAAE,CAAC;QACpC,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;YAC7B,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;QAC7B,CAAC;QAED,qBAAqB;QACrB,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,wBAAwB,EAAE;YACjE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,OAAO,CAAC,GAAG,EAAE,EAAE;SACpD,CAAC,CAAC;QAEH,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAC5B,iBAAiB;YACjB,OAAO;gBACL,QAAQ,EAAE,IAAI;gBACd,GAAG,EAAE,OAAO,CAAC,GAAG;gBAChB,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,SAAS;gBAC/E,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;QAC7B,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACnC,MAAM,MAAM,GAAkB,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC;QAElD,OAAO;YACL,QAAQ,EAAE,IAAI;YACd,GAAG,EAAE,MAAM,CAAC,GAAG;YACf,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,SAAS,EAAE,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE;YACpD,OAAO,EAAE,KAAK;SACf,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,2CAA2C;QAC3C,MAAM,OAAO,GAAG,MAAM,WAAW,EAAE,CAAC;QACpC,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;YAC7B,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;QAC7B,CAAC;QACD,OAAO;YACL,QAAQ,EAAE,IAAI;YACd,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,SAAS;YAC/E,OAAO,EAAE,SAAS,EAAE,UAAU;SAC/B,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,MAAM;IAC1B,IAAI,CAAC;QACH,IAAI,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YAChC,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;QAC9B,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC;IAAC,MAAM,CAAC;QACP,kCAAkC;QAClC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,MAAe;IAC1C,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,WAAW,EAAE,CAAC;QACpC,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;YAC7B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,6BAA6B,EAAE,CAAC;QAC7D,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,qBAAqB,EAAE;YAC/D,IAAI,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,IAAI,2BAA2B,EAAE,SAAS,EAAE,MAAM,EAAE;SAC7F,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YACxD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,mBAAmB,EAAE,CAAC;QACpE,CAAC;QAED,oBAAoB;QACpB,MAAM,MAAM,EAAE,CAAC;QAEf,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC;IACxC,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,IAAI,oCAAoC,EAAE,CAAC;IACnF,CAAC;AACH,CAAC"}

package/dist/aria-connector/src/onboarding-wizard.d.ts

@@ -0,0 +1,5 @@
+export declare function runOnboardingWizard(): Promise<{
+    ok: boolean;
+    error?: string;
+}>;
+//# sourceMappingURL=onboarding-wizard.d.ts.map

package/dist/aria-connector/src/onboarding-wizard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"onboarding-wizard.d.ts","sourceRoot":"","sources":["../../../src/onboarding-wizard.ts"],"names":[],"mappings":"AAoEA,wBAAsB,mBAAmB,IAAI,OAAO,CAAC;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CA0IpF"}

package/dist/aria-connector/src/onboarding-wizard.js

@@ -0,0 +1,199 @@
+// onboarding-wizard.ts — interactive self-service onboarding for `aria`
+// (no args) when ~/.aria/license.json is missing.
+//
+// Flow:
+//   1. Greet — first-person Aria voice
+//   2. Collect email (validated shape, NOT verified via code in v0)
+//   3. Collect tenant_id (lowercase + hyphens only)
+//   4. Collect tier (free / pro / enterprise)
+//   5. Collect LLM provider + API key
+//   6. POST /api/onboarding/self-issue (server validates LLM key by
+//      hitting the provider's identity endpoint, then issues license)
+//   7. Persist license to ~/.aria/license.json mode 0600
+//   8. Persist provider/model/key to ~/.aria/config.json mode 0600
+//   9. Auto-run installHooks() to bind Claude Code to the harness
+//
+// Email-verify-code is deferred to Phase 11 (no SMTP wired tonight).
+// The wizard collects email so future re-verify works without re-onboarding.
+//
+// Direction: Hamza 2026-04-26 — "burn through onboarding with quality and
+// USE THE HARNESS PLEASE". This wizard ships as v0; full onboarding (email
+// verify + Anthropic OAuth + per-tenant usage tracking) lands in Phase 11.
+import { createInterface } from 'node:readline';
+import { writeFileSync, existsSync, mkdirSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { join } from 'node:path';
+import { installHooks } from './install-hooks.js';
+const HARNESS_URL = process.env.ARIA_HARNESS_BASE_URL ?? 'https://harness.ariasos.com';
+const ARIA_DIR = join(homedir(), '.aria');
+const LICENSE_PATH = join(ARIA_DIR, 'license.json');
+const CONFIG_PATH = join(ARIA_DIR, 'config.json');
+function prompt(rl, question, hidden = false) {
+    return new Promise((resolve) => {
+        if (hidden) {
+            // Crude hidden-input — node's readline doesn't natively mask; we just
+            // prompt and accept. For Phase 11 we add proper masking via raw mode.
+            process.stdout.write(question);
+            const onData = (chunk) => {
+                process.stdin.removeListener('data', onData);
+                resolve(chunk.toString().trim());
+            };
+            process.stdin.once('data', onData);
+        }
+        else {
+            rl.question(question, (answer) => resolve(answer.trim()));
+        }
+    });
+}
+function isValidEmail(email) {
+    return /^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(email);
+}
+function isValidTenantId(tenant) {
+    return /^[a-z0-9][a-z0-9-]{1,40}$/.test(tenant);
+}
+export async function runOnboardingWizard() {
+    const rl = createInterface({
+        input: process.stdin,
+        output: process.stdout,
+        terminal: true,
+    });
+    try {
+        console.log('');
+        console.log("  Hi, I'm Aria. I don't see a license on this machine — let me set you up.");
+        console.log('');
+        console.log("  Three minutes, four questions. I'll handle the rest.");
+        console.log('');
+        // ── Step 1: email ──
+        let email = '';
+        while (!isValidEmail(email)) {
+            email = await prompt(rl, '  Email: ');
+            if (!isValidEmail(email)) {
+                console.log("  That doesn't look like a valid email. Try again.");
+            }
+        }
+        // ── Step 2: tenant_id ──
+        let tenantId = '';
+        while (!isValidTenantId(tenantId)) {
+            tenantId = (await prompt(rl, '  Tenant name (lowercase, hyphens ok, e.g. acme-corp): ')).toLowerCase();
+            if (!isValidTenantId(tenantId)) {
+                console.log("  Tenant name needs to be lowercase letters/digits/hyphens, 2-41 chars.");
+            }
+        }
+        // ── Step 3: tier ──
+        let tier = 'free';
+        let tierAnswer = '';
+        while (!['free', 'pro', 'enterprise', ''].includes(tierAnswer)) {
+            tierAnswer = (await prompt(rl, '  Tier [free / pro / enterprise] (default: free): ')).toLowerCase();
+            if (tierAnswer === '')
+                tierAnswer = 'free';
+            if (!['free', 'pro', 'enterprise'].includes(tierAnswer)) {
+                console.log("  I only know free, pro, or enterprise.");
+                tierAnswer = '';
+            }
+        }
+        tier = tierAnswer;
+        // ── Step 4: LLM provider ──
+        const providerOptions = ['anthropic', 'openai', 'deepseek', 'google', 'openrouter', 'ollama'];
+        let provider = '';
+        while (!providerOptions.includes(provider)) {
+            const p = (await prompt(rl, `  Which LLM provider? [${providerOptions.join(' / ')}]: `)).toLowerCase();
+            if (providerOptions.includes(p)) {
+                provider = p;
+            }
+            else {
+                console.log(`  I don't recognize "${p}". Pick one of: ${providerOptions.join(', ')}.`);
+            }
+        }
+        // ── Step 5: API key ──
+        let llmKey = '';
+        if (provider === 'ollama') {
+            llmKey = 'local';
+            console.log('  (Ollama is local — no API key needed.)');
+        }
+        else {
+            while (!llmKey) {
+                llmKey = await prompt(rl, `  Paste your ${provider} API key: `);
+                if (!llmKey)
+                    console.log('  I need the key to set up your provider.');
+            }
+        }
+        // ── Step 6: POST to server ──
+        console.log('');
+        console.log("  Validating your key with the provider...");
+        let response;
+        try {
+            const resp = await fetch(`${HARNESS_URL}/api/onboarding/self-issue`, {
+                method: 'POST',
+                headers: { 'Content-Type': 'application/json' },
+                body: JSON.stringify({ email, tenant_id: tenantId, tier, provider, llm_key: llmKey }),
+            });
+            response = await resp.json();
+            if (!resp.ok || !response.ok || !response.license) {
+                console.log(`  ${response.error || `Server returned ${resp.status} — try again later.`}`);
+                return { ok: false, error: response.error };
+            }
+        }
+        catch (err) {
+            const msg = err instanceof Error ? err.message : String(err);
+            console.log(`  I couldn't reach the server: ${msg}`);
+            return { ok: false, error: msg };
+        }
+        // ── Step 7: persist license ──
+        if (!existsSync(ARIA_DIR))
+            mkdirSync(ARIA_DIR, { recursive: true, mode: 0o700 });
+        const licenseRecord = {
+            ...response.claims,
+            harnessToken: response.license.token,
+            jti: response.license.jti,
+            tier: response.license.tier,
+            exp: response.claims?.exp,
+            sub: response.claims?.sub ?? tenantId,
+            email,
+            issuedAt: new Date().toISOString(),
+        };
+        writeFileSync(LICENSE_PATH, JSON.stringify(licenseRecord, null, 2) + '\n', { mode: 0o600 });
+        // ── Step 8: persist provider/key config ──
+        // By this point the while-loop above has exited with a valid Provider —
+        // narrow the union type for TypeScript.
+        const validatedProvider = provider;
+        const configRecord = {
+            model: { provider: validatedProvider, model: defaultModelFor(validatedProvider), apiKey: llmKey },
+            tenantId,
+            email,
+        };
+        writeFileSync(CONFIG_PATH, JSON.stringify(configRecord, null, 2) + '\n', { mode: 0o600 });
+        // ── Step 9: install hooks ──
+        console.log('');
+        console.log("  License issued. Saving your config and binding my gates to your Claude Code...");
+        const hookResult = await installHooks({ force: false });
+        if (!hookResult.ok) {
+            console.log(`  License saved, but I couldn't install the gates: ${hookResult.error}`);
+            console.log("  Run 'aria install-hooks' manually when you're ready.");
+        }
+        else {
+            console.log(`  Done. I've installed ${hookResult.installed.length} gate(s) into ~/.claude/hooks and merged them into your settings.json.`);
+        }
+        rl.close();
+        console.log('');
+        console.log(`  You're set up. License jti: ${response.license.jti}, tier: ${tier}, provider: ${provider}.`);
+        console.log("  Open a fresh Claude Code session — every Bash, Edit, Write, and Stop event now runs through my cognition gates.");
+        console.log("  Or talk to me directly: just type 'aria' again.");
+        console.log('');
+        return { ok: true };
+    }
+    finally {
+        rl.close();
+    }
+}
+function defaultModelFor(provider) {
+    const defaults = {
+        anthropic: 'claude-sonnet-4-20250514',
+        openai: 'gpt-4o',
+        deepseek: 'deepseek-chat',
+        google: 'gemini-2.5-pro-preview-05-06',
+        openrouter: 'openai/gpt-4o',
+        ollama: 'llama3',
+    };
+    return defaults[provider];
+}
+//# sourceMappingURL=onboarding-wizard.js.map