@askexenow/exe-os 0.9.374 → 0.9.376

package/dist/bin/cc-doctor.js

@@ -1,23 +1,31 @@
 #!/usr/bin/env node
 import {
   checkClaudeCodeInstall
-} from "../chunk-AWWKRZMB.js";
+} from "../chunk-4KVSCQND.js";
 import "../chunk-SSC7EKY2.js";
-import "../chunk-HDLAB7W3.js";
-import "../chunk-75H4R62K.js";
+import "../chunk-7UH2JWBF.js";
+import "../chunk-OQ4FNDRG.js";
+import "../chunk-RFPMXR6B.js";
+import "../chunk-CBPNZFSU.js";
+import "../chunk-PMVVUIHH.js";
+import "../chunk-VGMACSEV.js";
 import "../chunk-FNEZ4BWT.js";
-import "../chunk-NKETJCB5.js";
+import "../chunk-2ODXCCMR.js";
 import "../chunk-B6TI3TZT.js";
-import "../chunk-4QCFFW2H.js";
-import "../chunk-TAMDAOCU.js";
+import "../chunk-5DF4Y6EC.js";
+import "../chunk-K4ESASPL.js";
+import "../chunk-5QCIWWFA.js";
+import "../chunk-CVYC6DUW.js";
+import "../chunk-GJV3WDWM.js";
+import "../chunk-66CGXQUA.js";
 import "../chunk-BBMTVAE3.js";
 import "../chunk-TKDITWDN.js";
 import "../chunk-5YEUPUV4.js";
-import "../chunk-DSJI76XL.js";
+import "../chunk-AHNVFBVB.js";
 import "../chunk-YYB5PMTK.js";
-import "../chunk-NJFJWQNN.js";
-import "../chunk-V3W3SATA.js";
-import "../chunk-JY5GAZYC.js";
+import "../chunk-L5CGXEZC.js";
+import "../chunk-CL4J4757.js";
+import "../chunk-ZQEJ4IX2.js";
 import "../chunk-FXU7JOXK.js";
 import "../chunk-HPXFKUGU.js";
 import "../chunk-FTZET5YX.js";
@@ -64,7 +72,7 @@ if (isMainModule(import.meta.url) && (process.argv[1] ?? "").includes("cc-doctor
   } else {
     console.log(`
   \x1B[31mStatus: ${failed} ISSUE${failed > 1 ? "S" : ""} FOUND\x1B[0m \u2014 ${passed} passed, ${failed} failed`);
-    console.log("  Fix: npm install -g @anthropic-ai/claude-code@2.1.98\n");
+    console.log("  Fix: disable the auto-updater \u2014 export DISABLE_AUTOUPDATER=1 and CLAUDE_CODE_AUTOUPDATER_DISABLED=1 in your shell profile\n");
   }
   process.exit(failed > 0 ? 1 : 0);
 }

package/dist/bin/cleanup-stale-review-tasks.js

@@ -1,59 +1,60 @@
 #!/usr/bin/env node
 import {
   fastDbInit
-} from "../chunk-M4IRPXSZ.js";
+} from "../chunk-IZA7XW2Q.js";
 import {
   sessionScopeFilter
-} from "../chunk-AKLQSC6W.js";
-import "../chunk-BTSWFMEH.js";
-import "../chunk-6RKKVPYF.js";
-import "../chunk-4EN3IZ3Q.js";
-import "../chunk-KI5PFRG6.js";
-import "../chunk-3KDCORDO.js";
+} from "../chunk-KI7O64XV.js";
+import "../chunk-4YUGB637.js";
+import "../chunk-64ODONK2.js";
+import "../chunk-C2UN464N.js";
+import "../chunk-ZKGWHT56.js";
 import "../chunk-WT4RI36X.js";
-import "../chunk-E23LNUWJ.js";
-import "../chunk-QAEWWYHL.js";
+import "../chunk-TDF2XKLK.js";
 import "../chunk-EIKATSE4.js";
 import "../chunk-MJCSEIFI.js";
-import "../chunk-XH7YL7JM.js";
-import "../chunk-ORM7ZFKC.js";
+import "../chunk-E23LNUWJ.js";
+import "../chunk-ZMX22HSS.js";
 import "../chunk-VI4ATC6I.js";
 import "../chunk-A27Q27CT.js";
-import "../chunk-W75GTHR3.js";
+import "../chunk-BZ546I4Q.js";
+import "../chunk-3SRZNJKD.js";
 import "../chunk-AJIXH5JF.js";
-import "../chunk-7GE2EQ23.js";
+import "../chunk-YGVAKKGJ.js";
 import "../chunk-GZOG2MAX.js";
 import "../chunk-AM7S2TY6.js";
-import "../chunk-6YVUR3OU.js";
+import "../chunk-QR3BUMOS.js";
 import "../chunk-CVYC6DUW.js";
-import "../chunk-GOMQ7PVQ.js";
+import "../chunk-WJC6AAJN.js";
 import "../chunk-4IK2K3B3.js";
-import "../chunk-NUK7EEN5.js";
+import "../chunk-ZKJ5S23O.js";
+import "../chunk-GPUOUUHA.js";
+import "../chunk-BTSWFMEH.js";
 import "../chunk-ZG62LIK3.js";
-import "../chunk-EKYYMIVT.js";
+import "../chunk-IMYGYIAI.js";
 import "../chunk-NLEW62VC.js";
-import "../chunk-SLLLOOEI.js";
+import "../chunk-GPJIBLP4.js";
 import "../chunk-V3WLC5TJ.js";
-import "../chunk-JTVIANUB.js";
+import "../chunk-AEUGIJDO.js";
 import "../chunk-HYZV25LY.js";
 import "../chunk-GJV3WDWM.js";
 import "../chunk-MP2AFCGL.js";
 import {
   getClient
-} from "../chunk-TAMDAOCU.js";
+} from "../chunk-66CGXQUA.js";
 import "../chunk-BBMTVAE3.js";
 import "../chunk-TKDITWDN.js";
 import "../chunk-5YEUPUV4.js";
-import "../chunk-DSJI76XL.js";
+import "../chunk-AHNVFBVB.js";
 import "../chunk-YYB5PMTK.js";
-import "../chunk-NJFJWQNN.js";
-import "../chunk-V3W3SATA.js";
-import "../chunk-JY5GAZYC.js";
+import "../chunk-L5CGXEZC.js";
+import "../chunk-CL4J4757.js";
+import "../chunk-ZQEJ4IX2.js";
 import "../chunk-FXU7JOXK.js";
 import "../chunk-WNBZJSQT.js";
-import "../chunk-L6RXG36J.js";
+import "../chunk-Y2HD2YB7.js";
 import "../chunk-A7XLR3K7.js";
-import "../chunk-GQOEWNVM.js";
+import "../chunk-4EG4DT4F.js";
 import "../chunk-A7JYF4RG.js";
 import "../chunk-ARX6TAGN.js";
 import "../chunk-ZIG7VPJV.js";

package/dist/bin/cli.js

@@ -24,6 +24,17 @@ Install: https://nodejs.org/
   process.exit(1);
 }
 var args = process.argv.slice(2);
+async function launchTui() {
+  if (!process.stdout.isTTY) {
+    process.stderr.write(
+      "exe-os: Refusing to start interactive TUI: stdout is not a TTY.\nRun exe-os --help for non-interactive commands.\n"
+    );
+    process.exit(1);
+  }
+  checkForUpdateOnBoot().catch(() => {
+  });
+  await import("../tui/App.js");
+}
 if (process.platform === "win32") {
   const { windowsRefusalText, WINDOWS_UNSUPPORTED_EXIT } = await import("../lib/platform-support.js");
   process.stderr.write(windowsRefusalText());
@@ -75,7 +86,7 @@ exe-os v${version} \u2014 AI employee operating system
 Usage: exe-os <command>
 
 Commands:
-  login          Authenticate with GoTrue (email/password or --token)
+  login          Store a support-issued JWT (--token); not an email/password sign-in
   logout         Clear stored authentication session
   whoami         Show current auth state (email, plan, expiry)
   setup          First-time setup (encryption, license, team)
@@ -93,6 +104,7 @@ Commands:
   org phase      View/change orchestration phase
   healthcheck    Check daemon and service health
   codex-reviewd  Manage codex-reviewd PR review daemon (start/stop/status)
+  hooks          Inspect/re-baseline hook-integrity manifest (status|rebaseline)
 
 Session commands (run from a project folder):
   exe1           Launch COO session #1
@@ -112,7 +124,7 @@ if (args.includes("--global")) {
   );
   await runClaudeInstall();
 } else if (args.includes("--commands-only")) {
-  const { copySlashCommands, resolvePackageRoot } = await import("../installer-LLWKZI2S.js");
+  const { copySlashCommands, resolvePackageRoot } = await import("../installer-S624ZOMB.js");
   try {
     const packageRoot = resolvePackageRoot();
     const result = await copySlashCommands(packageRoot);
@@ -174,8 +186,11 @@ if (args.includes("--global")) {
       await runOpenCodeInstall();
       break;
   }
+} else if (args[0] === "hooks") {
+  const { runHooksCli } = await import("./hooks-cli.js");
+  process.exitCode = await runHooksCli(args.slice(1));
 } else if (args[0] === "org") {
-  const { main: runOrg } = await import("../exe-org-JXCR3JYZ.js");
+  const { main: runOrg } = await import("../exe-org-7TDIRNTE.js");
   await runOrg(args.slice(1));
 } else if (args[0] === "mcp") {
   const { main: runMcp } = await import("./exe-mcp.js");
@@ -204,7 +219,7 @@ if (args.includes("--global")) {
     process.exit(1);
   }
 } else if (args[0] === "key") {
-  const { main: runKey } = await import("../exe-key-TCMJNYLA.js");
+  const { main: runKey } = await import("../exe-key-37XIR22X.js");
   await runKey(args.slice(1));
 } else if (args[0] === "grant") {
   const { main: runGrant } = await import("./exe-grant.js");
@@ -262,7 +277,7 @@ if (args.includes("--global")) {
     process.exit(1);
   }
 } else if (args[0] === "backfill-metadata") {
-  const { backfillMetadata } = await import("../backfill-metadata-3OUSQD5V.js");
+  const { backfillMetadata } = await import("../backfill-metadata-VRP6PTPP.js");
   let batchSize = 50;
   let limit = 0;
   let dryRun = false;
@@ -293,10 +308,10 @@ if (args.includes("--global")) {
     process.exit(1);
   }
 } else if (args[0] === "export") {
-  const { runExeExport } = await import("../exe-export-IC5BT335.js");
+  const { runExeExport } = await import("../exe-export-LHN42ZUS.js");
   await runExeExport(args.slice(1));
 } else if (args[0] === "import") {
-  const { runExeImport } = await import("../exe-import-A35ZLDPG.js");
+  const { runExeImport } = await import("../exe-import-M536BEZC.js");
   await runExeImport(args.slice(1));
 } else if (args[0] === "import-history") {
   const { runImportHistory } = await import("./import-history.js");
@@ -321,7 +336,7 @@ if (args.includes("--global")) {
   const { initStore } = await import("../lib/store.js");
   await initStore();
   const { sendMessage } = await import("../lib/messaging.js");
-  const { getActiveAgent } = await import("../active-agent-ONPPEWQV.js");
+  const { getActiveAgent } = await import("../active-agent-BOBBUJ74.js");
   const { agentId } = getActiveAgent();
   const result = await sendMessage({
     fromAgent: agentId,
@@ -345,7 +360,7 @@ ID: ${result.id}`);
   process.exit(code);
 } else if (args[0] === "doctor") {
   if (args.includes("--drift")) {
-    const { runDrift } = await import("../exe-drift-AG2KMKD5.js");
+    const { runDrift } = await import("../exe-drift-V55UAYRT.js");
     await runDrift(args.slice(1));
   } else {
     const { runCcDoctor } = await import("./cc-doctor.js");
@@ -355,7 +370,7 @@ ID: ${result.id}`);
       const icon = r.pass ? "\x1B[32m\u2713\x1B[0m" : "\x1B[31m\u2717\x1B[0m";
       console.log(`  ${icon} ${r.name}: ${r.detail}`);
     }
-    const { readBreakerAlert, readSelfHealStormAlert } = await import("../daemon-restart-circuit-breaker-SMTWFX27.js");
+    const { readBreakerAlert, readSelfHealStormAlert } = await import("../daemon-restart-circuit-breaker-CD4VMCU7.js");
     const alert = readBreakerAlert();
     let breakerFailed = 0;
     if (alert) {
@@ -405,7 +420,7 @@ ID: ${result.id}`);
     daemonLastExitPath,
     readSelfHealStormAlert,
     selfHealStormAlertPath
-  } = await import("../daemon-restart-circuit-breaker-SMTWFX27.js");
+  } = await import("../daemon-restart-circuit-breaker-CD4VMCU7.js");
   const { existsSync: existsSync2, readFileSync: readFileSync2 } = await import("fs");
   if (sub === "install") {
     const mode = args[2];
@@ -544,7 +559,7 @@ ${JSON.stringify(stormAlert, null, 2)}`);
     const reason = args[2] || "manual";
     let encryptionKey;
     try {
-      const { fastDbInit } = await import("../fast-db-init-L2RGKJWH.js");
+      const { fastDbInit } = await import("../fast-db-init-GWUZ746B.js");
       await fastDbInit({ caller: "cli" });
     } catch {
     }
@@ -592,7 +607,7 @@ ${JSON.stringify(stormAlert, null, 2)}`);
       process.exit(1);
     }
   } else if (sub === "verify") {
-    const { verifyBackup } = await import("../backup-verify-ZKTUYLTA.js");
+    const { verifyBackup } = await import("../backup-verify-LWHKGOOV.js");
     let target;
     const pathIdx = args.indexOf("--path");
     if (pathIdx >= 0 && args[pathIdx + 1]) {
@@ -674,7 +689,7 @@ ${JSON.stringify(stormAlert, null, 2)}`);
     process.exit(1);
   }
 } else if (args[0] === "setup" || args[0] === "-setup" || args[0] === "--setup") {
-  const { runSetupWizard } = await import("../setup-wizard-GP3TBTPF.js");
+  const { runSetupWizard } = await import("../setup-wizard-RNU3RFBE.js");
   await runSetupWizard({
     skipModel: args.includes("--skip-model"),
     nonInteractive: args.includes("--non-interactive") || args.includes("-y") || args.includes("--yes"),
@@ -694,14 +709,14 @@ ${JSON.stringify(stormAlert, null, 2)}`);
   const { runStackUpdateCli } = await import("./stack-update.js");
   await runStackUpdateCli(args.slice(1));
 } else if (args[0] === "release") {
-  const { parseReleaseArgs, runStackRelease } = await import("../stack-release-2GZAAFO4.js");
+  const { parseReleaseArgs, runStackRelease } = await import("../stack-release-MY6U2QIO.js");
   const releaseFlags = parseReleaseArgs(args.slice(1));
   await runStackRelease(releaseFlags);
 } else if (args[0] === "stack-promote") {
-  const { runStackPromoteCli } = await import("../stack-promote-EKSCYY63.js");
+  const { runStackPromoteCli } = await import("../stack-promote-OP2URGFF.js");
   await runStackPromoteCli(args.slice(1));
 } else if (args[0] === "stack-generate-manifest") {
-  const { runStackGenerateManifestCli } = await import("../stack-generate-manifest-MFMDWRUP.js");
+  const { runStackGenerateManifestCli } = await import("../stack-generate-manifest-7WJZWSPK.js");
   process.exit(await runStackGenerateManifestCli(args.slice(1)));
 } else if (args[0] === "repo-truth") {
   const { runRepoTruthCli } = await import("./exe-repo-truth.js");
@@ -736,10 +751,10 @@ Post-deploy verification \u2014 8 runtime checks after stack-update.
 `);
   process.exit(report.failed > 0 ? 1 : 0);
 } else if (args[0] === "snapshot") {
-  const { main: runSnapshot } = await import("../exe-snapshot-SV6SRIG6.js");
+  const { main: runSnapshot } = await import("../exe-snapshot-EOUBCIQK.js");
   await runSnapshot(args.slice(1));
 } else if (args[0] === "boot") {
-  const { projectBoot, parseBootArgs } = await import("../project-boot-3Q65LCIP.js");
+  const { projectBoot, parseBootArgs } = await import("../project-boot-BLYGVUJH.js");
   const bootOpts = parseBootArgs(args.slice(1));
   console.log(await projectBoot(bootOpts));
 } else if (args[0] === "brand") {
@@ -789,9 +804,12 @@ ${result.errors.map((e) => `    - ${e}`).join("\n")}
   const { main: runRegistryProxy } = await import("./registry-proxy.js");
   await runRegistryProxy(args.slice(1));
 } else if (args.includes("--tui") || args.includes("--demo") || args[0] === "tui") {
-  checkForUpdateOnBoot().catch(() => {
-  });
-  await import("../tui/App.js");
+  await launchTui();
+} else if (args[0]) {
+  process.stderr.write(`exe-os: Unknown command: ${args[0]}
+Run exe-os --help for usage.
+`);
+  process.exit(1);
 } else {
   const claudeDir = path.join(os.homedir(), ".claude");
   const settingsPath = path.join(claudeDir, "settings.json");
@@ -823,7 +841,7 @@ cd into a project folder and run \x1B[1m${cooName}1\x1B[0m to boot your COO.
 
 \x1B[2mCommands:\x1B[0m
   ${cooName}1                   Launch COO in project folder
-  exe-os login           Authenticate with GoTrue
+  exe-os login --token   Store a support-issued JWT (rarely needed)
   exe-os logout          Clear stored auth session
   exe-os whoami          Show current auth state
   exe-os update          Check for and install updates
@@ -848,13 +866,11 @@ cd into a project folder and run \x1B[1m${cooName}1\x1B[0m to boot your COO.
   exe-os --help          Show all commands
 `);
   } else {
-    checkForUpdateOnBoot().catch(() => {
-    });
-    await import("../tui/App.js");
+    await launchTui();
   }
 }
 async function runCodeContext(ccArgs) {
-  const { buildCodeContextIndex, getCodeContextStats, searchCodeContext } = await import("../code-context-index-NOJSHLPN.js");
+  const { buildCodeContextIndex, getCodeContextStats, searchCodeContext } = await import("../code-context-index-LIDOFKOR.js");
   const sub = ccArgs[0] ?? "status";
   const projectRoot = valueAfter(ccArgs, "--project-root");
   if (sub === "init" || sub === "index") {
@@ -935,7 +951,7 @@ function numberAfter(args2, flag) {
   return Number.isFinite(parsed) ? parsed : void 0;
 }
 async function runClaudeInstall() {
-  const { runInstaller } = await import("../installer-LLWKZI2S.js");
+  const { runInstaller } = await import("../installer-S624ZOMB.js");
   try {
     await runInstaller();
   } catch (err) {
@@ -947,7 +963,7 @@ async function runClaudeInstall() {
   }
 }
 async function runOpenCodeInstall() {
-  const { runOpenCodeInstaller } = await import("../installer-54HTN5RE.js");
+  const { runOpenCodeInstaller } = await import("../installer-POV6TDQ5.js");
   try {
     await runOpenCodeInstaller();
   } catch (err) {
@@ -959,7 +975,7 @@ async function runOpenCodeInstall() {
   }
 }
 async function runCodexInstall() {
-  const { runCodexInstaller } = await import("../installer-LK35OX6R.js");
+  const { runCodexInstaller } = await import("../installer-M34Q7LAS.js");
   try {
     await runCodexInstaller();
   } catch (err) {
@@ -971,7 +987,7 @@ async function runCodexInstall() {
   }
 }
 async function runClaudeCheck() {
-  const { detectMcpNameCollisions } = await import("../installer-LLWKZI2S.js");
+  const { detectMcpNameCollisions } = await import("../installer-S624ZOMB.js");
   const claudeDir = path.join(os.homedir(), ".claude");
   const settingsPath = path.join(claudeDir, "settings.json");
   const claudeJsonPath = path.join(os.homedir(), ".claude.json");
@@ -1263,7 +1279,7 @@ async function runClaudeUninstall(flags = []) {
       const coordinatorName = roster.find((e) => isCoordinatorRole(e.role))?.name ?? DEFAULT_COORDINATOR_TEMPLATE_NAME;
       for (const emp of roster) {
         if (emp.name === coordinatorName) continue;
-        for (const suffix of ["", "-opencode"]) {
+        for (const suffix of ["", "-opencode", "-glm"]) {
           const linkPath = path.join(binDir, `${emp.name}${suffix}`);
           if (existsSync(linkPath)) {
             if (!dryRun) rmSync(linkPath, { force: true });
@@ -1466,95 +1482,51 @@ async function runLicense(subArgs) {
   process.exit(1);
 }
 async function runCloudSync() {
-  const { runCloudSyncCli } = await import("../cloud-sync-command-JPNTT4OQ.js");
+  const { runCloudSyncCli } = await import("../cloud-sync-command-QAZ2NWRA.js");
   await runCloudSyncCli();
 }
 async function runLogin(loginArgs) {
-  const { login, storeToken, getSessionInfo } = await import("../gotrue-session-ODZ2ERJX.js");
+  const { storeToken, getSessionInfo } = await import("../gotrue-session-U4H3UGHL.js");
   const tokenIdx = loginArgs.indexOf("--token");
-  if (tokenIdx >= 0) {
-    const jwt = loginArgs[tokenIdx + 1];
-    if (!jwt) {
-      console.error("Usage: exe-os login --token <jwt> [--refresh-token <rt>]");
-      process.exit(1);
-    }
-    const rtIdx = loginArgs.indexOf("--refresh-token");
-    const refreshToken = rtIdx >= 0 ? loginArgs[rtIdx + 1] : void 0;
-    const urlIdx2 = loginArgs.indexOf("--gotrue-url");
-    const gotrueUrl2 = urlIdx2 >= 0 ? loginArgs[urlIdx2 + 1] : void 0;
-    const ok = storeToken(jwt, refreshToken, gotrueUrl2);
-    if (!ok) {
-      console.error("Invalid JWT \u2014 could not decode exp claim.");
-      process.exit(1);
-    }
-    const info2 = getSessionInfo();
-    console.log(`
-  Authenticated as: ${info2.email ?? info2.userId ?? "unknown"}`);
-    console.log(`  Expires: ${info2.expiresAt}
-`);
-    return;
+  if (tokenIdx < 0) {
+    console.error("\n  exe-os does not use an email/password sign-in.");
+    console.error("  Your license key is your authentication \u2014 run \x1B[36mexe-os license\x1B[0m to check it,");
+    console.error("  or \x1B[36mexe-os setup\x1B[0m to enter one.\n");
+    console.error("  Usage: exe-os login --token <jwt> --gotrue-url <url> [--refresh-token <rt>]");
+    console.error("  (support-issued tokens only)\n");
+    process.exit(1);
   }
-  const urlIdx = loginArgs.indexOf("--gotrue-url");
-  const gotrueUrl = urlIdx >= 0 ? loginArgs[urlIdx + 1] : void 0;
-  const { createInterface } = await import("readline");
-  const rl = createInterface({ input: process.stdin, output: process.stderr });
-  const ask = (prompt) => new Promise((resolve) => rl.question(prompt, (a) => resolve(a.trim())));
-  const email = await ask("Email: ");
-  if (!email) {
-    rl.close();
-    console.error("Email is required.");
+  const jwt = loginArgs[tokenIdx + 1];
+  if (!jwt) {
+    console.error("Usage: exe-os login --token <jwt> --gotrue-url <url> [--refresh-token <rt>]");
     process.exit(1);
   }
-  const password = await new Promise((resolve) => {
-    process.stderr.write("Password: ");
-    const stdin = process.stdin;
-    const wasRaw = stdin.isRaw;
-    if (stdin.isTTY) stdin.setRawMode(true);
-    let buf = "";
-    const onData = (chunk) => {
-      const ch = chunk.toString("utf-8");
-      for (const c of ch) {
-        if (c === "\n" || c === "\r") {
-          stdin.removeListener("data", onData);
-          if (stdin.isTTY) stdin.setRawMode(wasRaw ?? false);
-          process.stderr.write("\n");
-          resolve(buf);
-          return;
-        } else if (c === "") {
-          if (stdin.isTTY) stdin.setRawMode(wasRaw ?? false);
-          process.exit(130);
-        } else if (c === "\x7F" || c === "\b") {
-          buf = buf.slice(0, -1);
-        } else {
-          buf += c;
-        }
-      }
-    };
-    stdin.on("data", onData);
-  });
-  rl.close();
-  if (!password) {
-    console.error("Password is required.");
+  const rtIdx = loginArgs.indexOf("--refresh-token");
+  const refreshToken = rtIdx >= 0 ? loginArgs[rtIdx + 1] : void 0;
+  const urlIdx = loginArgs.indexOf("--gotrue-url");
+  const gotrueUrl = urlIdx >= 0 ? loginArgs[urlIdx + 1] : void 0;
+  if (!gotrueUrl) {
+    console.error(
+      "\n  --gotrue-url is required with --token.",
+      "\n  Pass the GoTrue URL that issued the JWT, so token refreshes go to the right endpoint.",
+      "\n  Usage: exe-os login --token <jwt> --gotrue-url <url> [--refresh-token <rt>]\n"
+    );
     process.exit(1);
   }
-  process.stderr.write("Authenticating...\n");
-  const result = await login(email, password, gotrueUrl);
-  if (!result.ok) {
-    console.error(`
-  Login failed: ${result.error}
-`);
+  const ok = storeToken(jwt, refreshToken, gotrueUrl);
+  if (!ok) {
+    console.error("Invalid JWT \u2014 could not decode exp claim.");
     process.exit(1);
   }
   const info = getSessionInfo();
   console.log(`
-  Authenticated as: ${info.email}`);
-  if (info.plan) console.log(`  Plan: ${info.plan}`);
+  Authenticated as: ${info.email ?? info.userId ?? "unknown"}`);
   console.log(`  Expires: ${info.expiresAt}`);
   console.log(`  Session stored: ~/.exe-os/gotrue-session.json
 `);
 }
 async function runLogout() {
-  const { clearSession, getSession } = await import("../gotrue-session-ODZ2ERJX.js");
+  const { clearSession, getSession } = await import("../gotrue-session-U4H3UGHL.js");
   const had = getSession() !== null;
   clearSession();
   if (had) {
@@ -1564,7 +1536,7 @@ async function runLogout() {
   }
 }
 async function runWhoami() {
-  const { getSessionInfo } = await import("../gotrue-session-ODZ2ERJX.js");
+  const { getSessionInfo } = await import("../gotrue-session-U4H3UGHL.js");
   const info = getSessionInfo();
   if (!info.authenticated) {
     const configPath = path.join(os.homedir(), ".exe-os", "config.json");
@@ -1575,11 +1547,13 @@ async function runWhoami() {
     } catch {
     }
     if (hasLegacyKey) {
-      console.log("\n  Auth: legacy license key (no GoTrue session)");
-      console.log("  Run \x1B[36mexe-os login\x1B[0m to authenticate with GoTrue.\n");
+      console.log("\n  Auth: license key (no GoTrue session)");
+      console.log("  That is the normal state \u2014 the license key is how exe-os authenticates.");
+      console.log("  Run \x1B[36mexe-os license\x1B[0m to see plan and limits.\n");
     } else {
-      console.log("\n  Not authenticated.");
-      console.log("  Run \x1B[36mexe-os login\x1B[0m to sign in.\n");
+      console.log("\n  Not authenticated \u2014 no license key found.");
+      console.log("  Run \x1B[36mexe-os setup\x1B[0m to enter your license key.");
+      console.log("  \x1B[2m(exe-os login --token <jwt> exists only for support-issued tokens.)\x1B[0m\n");
     }
     return;
   }
@@ -1589,7 +1563,7 @@ async function runWhoami() {
   if (info.plan) console.log(`  Plan:       ${info.plan}`);
   console.log(`  Expires:    ${info.expiresAt}`);
   console.log(`  Status:     ${info.expired ? "\x1B[33mexpired (will auto-refresh)\x1B[0m" : "\x1B[32mactive\x1B[0m"}`);
-  console.log(`  GoTrue URL: ${info.gotrueUrl}
+  console.log(`  GoTrue URL: ${info.gotrueUrl ?? "none configured"}
 `);
 }
 function parseBackfillArgs(argv) {

package/dist/bin/daemon-restart-handoff.js

@@ -2,7 +2,8 @@
 import {
   parseHandoffConfig,
   runDaemonRestartHandoff
-} from "../chunk-PWRC5XZO.js";
+} from "../chunk-FXZ6VGFW.js";
+import "../chunk-IMYGYIAI.js";
 import {
   isMainModule
 } from "../chunk-6Y4B3QF6.js";