@claudexor/cli 1.0.1 → 2.1.3

package/dist/native-login.d.ts

@@ -0,0 +1,21 @@
+export interface NativeLoginSpec {
+    binary: string;
+    args: string[];
+    displayCommand: string;
+}
+/**
+ * Structured native-login command shared by CLI and setup surfaces. The
+ * resolver hook uses the same normalized harness PATH as discovery and makes
+ * the spawned executable absolute whenever it is installed.
+ */
+export declare function nativeLoginSpec(harness: string, resolver?: (binary: string) => string | null): NativeLoginSpec | null;
+export declare function nativeLoginDisplayCommand(harness: string): string | null;
+/**
+ * Terminal opens a setup script in the GUI app's login environment rather than
+ * the daemon's. Restore only non-secret paths that select the same native store
+ * post-login verification will probe; provider credentials stay excluded.
+ */
+export declare function nativeLoginTerminalExports(harness: string, source?: NodeJS.ProcessEnv): string;
+/** Native login must never inherit a provider key or endpoint override. */
+export declare function nativeLoginEnv(harness: string, source?: NodeJS.ProcessEnv, configDirOverride?: string): NodeJS.ProcessEnv;
+//# sourceMappingURL=native-login.d.ts.map

package/dist/native-login.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"native-login.d.ts","sourceRoot":"","sources":["../src/native-login.ts"],"names":[],"mappings":"AAMA,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,cAAc,EAAE,MAAM,CAAC;CACxB;AAsBD;;;;GAIG;AACH,wBAAgB,eAAe,CAC7B,OAAO,EAAE,MAAM,EACf,QAAQ,GAAE,CAAC,MAAM,EAAE,MAAM,KAAK,MAAM,GAAG,IAA2B,GACjE,eAAe,GAAG,IAAI,CAUxB;AAED,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAExE;AAED;;;;GAIG;AACH,wBAAgB,0BAA0B,CACxC,OAAO,EAAE,MAAM,EACf,MAAM,GAAE,MAAM,CAAC,UAAwB,GACtC,MAAM,CAeR;AAED,2EAA2E;AAC3E,wBAAgB,cAAc,CAC5B,OAAO,EAAE,MAAM,EACf,MAAM,GAAE,MAAM,CAAC,UAAwB,EACvC,iBAAiB,CAAC,EAAE,MAAM,GACzB,MAAM,CAAC,UAAU,CA4CnB"}

package/dist/native-login.js

@@ -0,0 +1,110 @@
+import { harnessRuntimeEnv, resolveHarnessBinary } from "@claudexor/core";
+import { defaultNativeClaudeConfigDir } from "@claudexor/harness-claude";
+import { CODEX_FILE_AUTH_ARGS, defaultNativeCodexHome } from "@claudexor/harness-codex";
+import { ensureDir } from "@claudexor/util";
+import { isAbsolute } from "node:path";
+const NATIVE_LOGIN_DEFINITIONS = {
+    codex: {
+        binaryName: () => process.env.CLAUDEXOR_CODEX_BIN || "codex",
+        args: [...CODEX_FILE_AUTH_ARGS, "login"],
+        displayCommand: "codex login (isolated Claudexor profile)",
+    },
+    claude: {
+        binaryName: () => process.env.CLAUDEXOR_CLAUDE_BIN || "claude",
+        args: ["auth", "login", "--claudeai"],
+        displayCommand: "claude auth login --claudeai",
+    },
+    cursor: {
+        binaryName: () => process.env.CLAUDEXOR_CURSOR_BIN || "cursor-agent",
+        args: ["login"],
+        displayCommand: "cursor-agent login",
+    },
+};
+/**
+ * Structured native-login command shared by CLI and setup surfaces. The
+ * resolver hook uses the same normalized harness PATH as discovery and makes
+ * the spawned executable absolute whenever it is installed.
+ */
+export function nativeLoginSpec(harness, resolver = resolveHarnessBinary) {
+    const definition = NATIVE_LOGIN_DEFINITIONS[harness];
+    if (!definition)
+        return null;
+    const resolved = resolver(definition.binaryName());
+    if (!resolved || !isAbsolute(resolved))
+        return null;
+    return {
+        binary: resolved,
+        args: [...definition.args],
+        displayCommand: definition.displayCommand,
+    };
+}
+export function nativeLoginDisplayCommand(harness) {
+    return NATIVE_LOGIN_DEFINITIONS[harness]?.displayCommand ?? null;
+}
+/**
+ * Terminal opens a setup script in the GUI app's login environment rather than
+ * the daemon's. Restore only non-secret paths that select the same native store
+ * post-login verification will probe; provider credentials stay excluded.
+ */
+export function nativeLoginTerminalExports(harness, source = process.env) {
+    const keys = [
+        "HOME",
+        "TMPDIR",
+        ...(harness === "codex" ? ["CLAUDEXOR_CODEX_NATIVE_HOME"] : []),
+        ...(harness === "claude" ? ["CLAUDEXOR_CLAUDE_NATIVE_DIR"] : []),
+    ];
+    return keys
+        .map((key) => [key, source[key]])
+        .filter((entry) => typeof entry[1] === "string" && entry[1].length > 0)
+        .map(([key, value]) => `export ${key}='${value.replaceAll("'", `'"'"'`)}'\n`)
+        .join("");
+}
+/** Native login must never inherit a provider key or endpoint override. */
+export function nativeLoginEnv(harness, source = process.env, configDirOverride) {
+    const runtime = harnessRuntimeEnv(source);
+    const env = {};
+    const allowed = [
+        "PATH",
+        "HOME",
+        "TMPDIR",
+        "LANG",
+        "LC_ALL",
+        "LC_CTYPE",
+        "TERM",
+        "COLORTERM",
+        "NO_COLOR",
+        "USER",
+        "LOGNAME",
+        "SHELL",
+        "HTTP_PROXY",
+        "HTTPS_PROXY",
+        "NO_PROXY",
+        "ALL_PROXY",
+        "http_proxy",
+        "https_proxy",
+        "no_proxy",
+        "all_proxy",
+        "SSL_CERT_FILE",
+        "SSL_CERT_DIR",
+        "NODE_EXTRA_CA_CERTS",
+    ];
+    for (const key of allowed) {
+        const value = runtime[key];
+        if (value !== undefined)
+            env[key] = value;
+    }
+    // Login and post-exit verification must address the SAME vendor-owned store.
+    // These are paths only; Claudexor never reads or copies credential contents.
+    if (harness === "codex") {
+        env.CODEX_HOME = configDirOverride ?? defaultNativeCodexHome();
+        ensureDir(env.CODEX_HOME);
+    }
+    else if (harness === "claude") {
+        env.CLAUDE_CONFIG_DIR = configDirOverride ?? defaultNativeClaudeConfigDir();
+        // Default and profile Claude stores are both Claudexor-owned (INV-067 /
+        // INV-135); ordinary ~/.claude is never created, read, or mutated here.
+        ensureDir(env.CLAUDE_CONFIG_DIR);
+    }
+    return env;
+}
+//# sourceMappingURL=native-login.js.map

package/dist/native-login.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"native-login.js","sourceRoot":"","sources":["../src/native-login.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AAC1E,OAAO,EAAE,4BAA4B,EAAE,MAAM,2BAA2B,CAAC;AACzE,OAAO,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AACxF,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAUvC,MAAM,wBAAwB,GAAoC;IAChE,KAAK,EAAE;QACL,UAAU,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,OAAO;QAC5D,IAAI,EAAE,CAAC,GAAG,oBAAoB,EAAE,OAAO,CAAC;QACxC,cAAc,EAAE,0CAA0C;KAC3D;IACD,MAAM,EAAE;QACN,UAAU,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,QAAQ;QAC9D,IAAI,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,YAAY,CAAC;QACrC,cAAc,EAAE,8BAA8B;KAC/C;IACD,MAAM,EAAE;QACN,UAAU,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,cAAc;QACpE,IAAI,EAAE,CAAC,OAAO,CAAC;QACf,cAAc,EAAE,oBAAoB;KACrC;CACF,CAAC;AAEF;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAC7B,OAAe,EACf,WAA8C,oBAAoB;IAElE,MAAM,UAAU,GAAG,wBAAwB,CAAC,OAAO,CAAC,CAAC;IACrD,IAAI,CAAC,UAAU;QAAE,OAAO,IAAI,CAAC;IAC7B,MAAM,QAAQ,GAAG,QAAQ,CAAC,UAAU,CAAC,UAAU,EAAE,CAAC,CAAC;IACnD,IAAI,CAAC,QAAQ,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IACpD,OAAO;QACL,MAAM,EAAE,QAAQ;QAChB,IAAI,EAAE,CAAC,GAAG,UAAU,CAAC,IAAI,CAAC;QAC1B,cAAc,EAAE,UAAU,CAAC,cAAc;KAC1C,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,OAAe;IACvD,OAAO,wBAAwB,CAAC,OAAO,CAAC,EAAE,cAAc,IAAI,IAAI,CAAC;AACnE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,0BAA0B,CACxC,OAAe,EACf,SAA4B,OAAO,CAAC,GAAG;IAEvC,MAAM,IAAI,GAAG;QACX,MAAM;QACN,QAAQ;QACR,GAAG,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,6BAA6B,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/D,GAAG,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,6BAA6B,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;KACjE,CAAC;IACF,OAAO,IAAI;SACR,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,CAAU,CAAC;SACzC,MAAM,CACL,CAAC,KAAK,EAAsC,EAAE,CAC5C,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CACtD;SACA,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,UAAU,GAAG,KAAK,KAAK,CAAC,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,KAAK,CAAC;SAC5E,IAAI,CAAC,EAAE,CAAC,CAAC;AACd,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,cAAc,CAC5B,OAAe,EACf,SAA4B,OAAO,CAAC,GAAG,EACvC,iBAA0B;IAE1B,MAAM,OAAO,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAC1C,MAAM,GAAG,GAAsB,EAAE,CAAC;IAClC,MAAM,OAAO,GAAG;QACd,MAAM;QACN,MAAM;QACN,QAAQ;QACR,MAAM;QACN,QAAQ;QACR,UAAU;QACV,MAAM;QACN,WAAW;QACX,UAAU;QACV,MAAM;QACN,SAAS;QACT,OAAO;QACP,YAAY;QACZ,aAAa;QACb,UAAU;QACV,WAAW;QACX,YAAY;QACZ,aAAa;QACb,UAAU;QACV,WAAW;QACX,eAAe;QACf,cAAc;QACd,qBAAqB;KACb,CAAC;IACX,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;QAC1B,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;QAC3B,IAAI,KAAK,KAAK,SAAS;YAAE,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IAC5C,CAAC;IACD,6EAA6E;IAC7E,6EAA6E;IAC7E,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;QACxB,GAAG,CAAC,UAAU,GAAG,iBAAiB,IAAI,sBAAsB,EAAE,CAAC;QAC/D,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAC5B,CAAC;SAAM,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;QAChC,GAAG,CAAC,iBAAiB,GAAG,iBAAiB,IAAI,4BAA4B,EAAE,CAAC;QAC5E,wEAAwE;QACxE,wEAAwE;QACxE,SAAS,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;IACnC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/ops-commands.d.ts

@@ -1,11 +1,13 @@
 import { type ParsedArgs } from "./args.js";
+export declare function dispatchOpsCommand(command: string, args: ParsedArgs, json: boolean): Promise<number> | undefined;
 export declare function daemonCommand(args: ParsedArgs, json: boolean): Promise<number>;
-/**
- * The real CONSUMER (ADP4) of the adapter models() producer: list a harness's
- * enumerable models. With --harness it queries that one; otherwise it tries
- * every non-unavailable harness and shows which can honestly enumerate.
- */
+export declare function daemonGet(path: string): Promise<unknown>;
+export declare function doctorCommand(args: ParsedArgs, json: boolean): Promise<number>;
+/** List the daemon's live model truth for each requested/available harness. */
 export declare function modelsCommand(args: ParsedArgs, json: boolean): Promise<number>;
 export declare function authCommand(args: ParsedArgs, json: boolean): Promise<number>;
-export declare function secretsCommand(args: ParsedArgs, json: boolean): Promise<number>;
+export declare function isKnownAuthLoginHarness(harness: string): boolean;
+/** Thin client of the daemon-owned retention service (W3.6). */
+export declare function gcCommand(args: ParsedArgs, json: boolean): Promise<number>;
+export declare function recoveryCommand(args: ParsedArgs, json: boolean): Promise<number>;
 //# sourceMappingURL=ops-commands.d.ts.map

package/dist/ops-commands.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ops-commands.d.ts","sourceRoot":"","sources":["../src/ops-commands.ts"],"names":[],"mappings":"AAYA,OAAO,EAAE,KAAK,UAAU,EAAqB,MAAM,WAAW,CAAC;AAM/D,wBAAsB,aAAa,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAyHpF;AAGD;;;;GAIG;AACH,wBAAsB,aAAa,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CA8CpF;AAED,wBAAsB,WAAW,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAkElF;AAQD,wBAAsB,cAAc,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAyErF"}
+{"version":3,"file":"ops-commands.d.ts","sourceRoot":"","sources":["../src/ops-commands.ts"],"names":[],"mappings":"AA+BA,OAAO,EAAE,KAAK,UAAU,EAAqB,MAAM,WAAW,CAAC;AAa/D,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,UAAU,EAChB,IAAI,EAAE,OAAO,GACZ,OAAO,CAAC,MAAM,CAAC,GAAG,SAAS,CAqB7B;AAED,wBAAsB,aAAa,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAkJpF;AAED,wBAAsB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAS9D;AA2BD,wBAAsB,aAAa,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAmCpF;AAED,+EAA+E;AAC/E,wBAAsB,aAAa,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CA8CpF;AAED,wBAAsB,WAAW,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAkElF;AAED,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAEhE;AAED,gEAAgE;AAChE,wBAAsB,SAAS,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAuBhF;AAED,wBAAsB,eAAe,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CA+CtF"}