@cleanslop/cli 0.0.0-stage → 0.1.0-beta.1.2

package/dist/commands/credits.js

@@ -0,0 +1,267 @@
+import { writeAction } from "../action.js";
+import { asRecord, httpRequest, requireOk } from "../http.js";
+import { createLinkSpendRequest, ensureLinkPaymentScope, retrieveLinkSpendRequest, retrieveSharedPaymentToken, } from "../link.js";
+import { deletePendingSpend, readPendingSpend, requireToken, resolveOrigin, writePendingSpend, } from "../credentials.js";
+import { actionError, CliError, EXIT_OK, EXIT_PAYMENT, usageError, } from "../exit.js";
+const CREDIT_PACKS = {
+    p5: 5,
+    p15: 15,
+    p40: 40,
+};
+function isCreditPackId(value) {
+    return value === "p5" || value === "p15" || value === "p40";
+}
+function spendRequestContext(pack, scans) {
+    const text = `CleanSlop ${scans} scan credits (pack ${pack}). Approve this Shared Payment Token so your coding agent can add credits to this CleanSlop account. This is a one-time charge for scan credits only.`;
+    return text.length >= 100 ? text : text.padEnd(100, ".");
+}
+/** Fixed Link approval budget. Auto-buy ignores `scan --wait`. */
+export const LINK_APPROVAL_WAIT_MS = 10 * 60 * 1000;
+export function linkApprovalWaitMs(args, opts = {}) {
+    if (opts.autoBuy)
+        return LINK_APPROVAL_WAIT_MS;
+    return args.wait ? args.waitMs : LINK_APPROVAL_WAIT_MS;
+}
+function purchaseUrlFor(origin) {
+    return `${origin}/api/agent/v1/credits/purchases`;
+}
+function asStripeSptOffer(value) {
+    const rec = asRecord(value);
+    if (!rec || rec.kind !== "stripe_spt")
+        return null;
+    const pack = typeof rec.pack === "string" ? rec.pack : "";
+    if (!isCreditPackId(pack))
+        return null;
+    const amount = typeof rec.amount === "number" ? rec.amount : Number(rec.amount);
+    if (!Number.isInteger(amount) || amount < 1)
+        return null;
+    const networkId = typeof rec.networkId === "string" ? rec.networkId.trim() : "";
+    const purchaseUrl = typeof rec.purchaseUrl === "string" ? rec.purchaseUrl.trim() : "";
+    if (!networkId || !purchaseUrl)
+        return null;
+    return {
+        pack,
+        amount,
+        currency: typeof rec.currency === "string" && rec.currency.trim()
+            ? rec.currency.trim()
+            : "usd",
+        networkId,
+        purchaseUrl,
+    };
+}
+/** Read a matching `stripe_spt` offer from a 402 `out_of_scans` body. */
+export function stripeSptOfferFromErrorBody(json, packHint) {
+    const payment = asRecord(asRecord(json)?.payment);
+    const methods = Array.isArray(payment?.methods) ? payment.methods : [];
+    const offers = methods
+        .map(asStripeSptOffer)
+        .filter((offer) => offer != null);
+    if (offers.length === 0)
+        return null;
+    const wanted = packHint && isCreditPackId(packHint) ? packHint : "p5";
+    return offers.find((offer) => offer.pack === wanted) ?? offers[0] ?? null;
+}
+function tokenMissingAction(spendRequestId) {
+    throw actionError("The Link payment token is not ready yet. Retry the same spend request.", {
+        kind: "wait",
+        humanPrompt: "The person already approved this payment in Link, but the token is not ready. Run `cleanslop credits buy --link --resume` — do not create a new spend request.",
+        code: spendRequestId,
+    });
+}
+async function persistPending(deps, pending) {
+    await writePendingSpend(deps, pending);
+}
+async function pollUntilApproved(deps, pending, waitMs) {
+    const deadline = deps.clock.now() + waitMs;
+    while (deps.clock.now() < deadline) {
+        const snap = await retrieveLinkSpendRequest(deps, pending.spendRequestId);
+        switch (snap.status) {
+            case "approved":
+                return;
+            case "denied":
+            case "expired":
+            case "canceled":
+                deletePendingSpend(deps);
+                throw actionError(`The Link spend request was ${snap.status}.`, {
+                    kind: "ask_human",
+                    humanPrompt: `The Link payment was ${snap.status}. Ask the person to approve a new spend request, then retry.`,
+                });
+            case "requires_action":
+                if (snap.resolution === "auto_resume") {
+                    await deps.clock.sleep(2000);
+                    break;
+                }
+                deletePendingSpend(deps);
+                throw actionError(snap.displayMessage ?? "This spend request needs another approval step.", {
+                    kind: "ask_human",
+                    humanPrompt: snap.displayMessage ??
+                        "Link asked for an extra approval step that CleanSlop cannot resume. Start a new spend request.",
+                });
+            case "pending":
+            case "unknown":
+                await deps.clock.sleep(2000);
+                break;
+            default: {
+                const _exhaustive = snap.status;
+                throw _exhaustive;
+            }
+        }
+    }
+    throw actionError("Timed out waiting for Link payment approval.", {
+        kind: "ask_human",
+        humanPrompt: "The person has not approved the Link payment yet. Run `cleanslop credits buy --link --resume` after they approve it.",
+        code: pending.spendRequestId,
+    });
+}
+async function postPurchase(deps, origin, pending, token, sharedPaymentToken) {
+    const result = await httpRequest(deps, origin, "POST", "/api/agent/v1/credits/purchases", {
+        token,
+        body: {
+            pack: pending.pack,
+            sharedPaymentToken,
+            spendRequestId: pending.spendRequestId,
+        },
+    });
+    try {
+        requireOk(result);
+    }
+    catch (err) {
+        if (err instanceof CliError && err.exitCode === EXIT_PAYMENT) {
+            deletePendingSpend(deps);
+        }
+        throw err;
+    }
+    const rec = asRecord(result.json);
+    const credits = typeof rec?.credits === "number" ? rec.credits : 0;
+    const pack = typeof rec?.pack === "string" ? rec.pack : pending.pack;
+    const paymentIntentId = typeof rec?.paymentIntentId === "string" ? rec.paymentIntentId : null;
+    return { credits, pack, paymentIntentId };
+}
+export async function buyLinkCredits(deps, args, offer = null, opts = {}) {
+    const origin = resolveOrigin(deps);
+    const stored = requireToken(deps, origin);
+    const storedPending = readPendingSpend(deps);
+    const existing = storedPending && storedPending.origin === origin ? storedPending : null;
+    if (args.resume && storedPending && !existing && !args.spendRequestId?.trim()) {
+        throw actionError("Pending Link spend request is for another origin.", {
+            kind: "ask_human",
+            humanPrompt: `A pending Link spend request is for ${storedPending.origin}, but this CLI is using ${origin}. Drop --resume to start a new spend request, or set CLEANSLOP_ORIGIN back to ${storedPending.origin}.`,
+        });
+    }
+    const resumeId = args.spendRequestId?.trim() || existing?.spendRequestId || null;
+    if (args.resume && !resumeId) {
+        throw actionError("No pending Link spend request to resume.", {
+            kind: "ask_human",
+            humanPrompt: "There is no pending spend request. Run `cleanslop credits buy --link --pack p5` after a scan 402, or resume the saved spend request.",
+        });
+    }
+    let pending;
+    if (resumeId) {
+        const fromStore = existing && existing.spendRequestId === resumeId ? existing : null;
+        pending = {
+            version: 1,
+            origin,
+            spendRequestId: resumeId,
+            pack: isCreditPackId(args.pack)
+                ? args.pack
+                : fromStore?.pack ?? offer?.pack ?? "p5",
+            amount: args.amount ?? fromStore?.amount ?? offer?.amount ?? 0,
+            currency: fromStore?.currency ?? offer?.currency ?? "usd",
+            networkId: args.networkId?.trim() ||
+                fromStore?.networkId ||
+                deps.env.get("CLEANSLOP_STRIPE_PROFILE_ID")?.trim() ||
+                offer?.networkId ||
+                "",
+            purchaseUrl: purchaseUrlFor(origin),
+            createdAt: fromStore?.createdAt ?? deps.clock.now(),
+        };
+        if (!pending.amount || !pending.networkId) {
+            throw usageError("Resuming a spend request still needs the saved pack price and network id.");
+        }
+        await persistPending(deps, pending);
+    }
+    else {
+        const pack = isCreditPackId(args.pack)
+            ? args.pack
+            : offer?.pack ?? "p5";
+        const amount = args.amount ?? offer?.amount ?? null;
+        const networkId = args.networkId?.trim() ||
+            deps.env.get("CLEANSLOP_STRIPE_PROFILE_ID")?.trim() ||
+            offer?.networkId ||
+            "";
+        if (!amount) {
+            throw usageError("credits buy --link needs a 402 stripe_spt offer (from scan) or a test --amount");
+        }
+        if (!networkId) {
+            throw usageError("credits buy --link needs a 402 stripe_spt networkId or CLEANSLOP_STRIPE_PROFILE_ID");
+        }
+        const scans = CREDIT_PACKS[pack];
+        const currency = offer?.currency ?? "usd";
+        await ensureLinkPaymentScope(deps);
+        const created = await createLinkSpendRequest(deps, {
+            networkId,
+            amount,
+            currency,
+            context: spendRequestContext(pack, scans),
+            lineItem: `name:CleanSlop ${scans} scan credits,unit_amount:${amount},quantity:1`,
+            total: `type:total,display_text:Total,amount:${amount}`,
+            idempotencyKey: deps.randomId(),
+        });
+        pending = {
+            version: 1,
+            origin,
+            spendRequestId: created.id,
+            pack,
+            amount,
+            currency,
+            networkId,
+            purchaseUrl: purchaseUrlFor(origin),
+            createdAt: deps.clock.now(),
+        };
+        await persistPending(deps, pending);
+        const packLine = `Approve this CleanSlop credit pack in your Link app (${pack}, ${amount} usd).`;
+        if (created.approvalUrl) {
+            writeAction(deps, {
+                kind: "approve",
+                humanPrompt: `Ask the human to open this link and approve this CleanSlop credit pack (${pack}, ${amount} usd). Link may also send a notification.`,
+                url: created.approvalUrl,
+            });
+        }
+        else {
+            deps.io.stderr(`${packLine}\n`);
+        }
+    }
+    const waitMs = linkApprovalWaitMs(args, opts);
+    await pollUntilApproved(deps, pending, waitMs);
+    const sharedPaymentToken = await retrieveSharedPaymentToken(deps, pending.spendRequestId);
+    if (!sharedPaymentToken) {
+        tokenMissingAction(pending.spendRequestId);
+    }
+    const paid = await postPurchase(deps, origin, pending, stored.token, sharedPaymentToken);
+    deletePendingSpend(deps);
+    deps.io.stdout(`Added ${paid.pack} scan credits. Balance: ${paid.credits}.\n`);
+    return EXIT_OK;
+}
+export async function runCredits(deps, args) {
+    if (args.id && args.id !== "buy") {
+        throw usageError("Usage: cleanslop credits buy --link");
+    }
+    if (args.id !== "buy") {
+        throw usageError("Usage: cleanslop credits buy --link");
+    }
+    if (!args.link) {
+        throw usageError("credits buy requires --link");
+    }
+    return buyLinkCredits(deps, args);
+}
+/** If a scan 402 offers `stripe_spt`, buy that pack and retry the scan once. */
+export async function recoverOutOfScansIfOffered(deps, args, result, retry) {
+    if (result.status !== 402)
+        return result;
+    const offer = stripeSptOfferFromErrorBody(result.json, args.pack);
+    if (!offer)
+        return result;
+    await buyLinkCredits(deps, args, offer, { autoBuy: true });
+    return retry();
+}
+//# sourceMappingURL=credits.js.map

package/dist/commands/credits.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credits.js","sourceRoot":"","sources":["../../src/commands/credits.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAE3C,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAC9D,OAAO,EACL,sBAAsB,EACtB,sBAAsB,EACtB,wBAAwB,EACxB,0BAA0B,GAC3B,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,kBAAkB,EAClB,gBAAgB,EAChB,YAAY,EACZ,aAAa,EACb,iBAAiB,GAElB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,WAAW,EACX,QAAQ,EACR,OAAO,EACP,YAAY,EACZ,UAAU,GACX,MAAM,YAAY,CAAC;AAGpB,MAAM,YAAY,GAAG;IACnB,EAAE,EAAE,CAAC;IACL,GAAG,EAAE,EAAE;IACP,GAAG,EAAE,EAAE;CACC,CAAC;AAIX,SAAS,cAAc,CAAC,KAAoB;IAC1C,OAAO,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,KAAK,IAAI,KAAK,KAAK,KAAK,CAAC;AAC9D,CAAC;AAED,SAAS,mBAAmB,CAAC,IAAkB,EAAE,KAAa;IAC5D,MAAM,IAAI,GAAG,aAAa,KAAK,uBAAuB,IAAI,uJAAuJ,CAAC;IAClN,OAAO,IAAI,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;AAC3D,CAAC;AAUD,kEAAkE;AAClE,MAAM,CAAC,MAAM,qBAAqB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAEpD,MAAM,UAAU,kBAAkB,CAChC,IAAgB,EAChB,OAA8B,EAAE;IAEhC,IAAI,IAAI,CAAC,OAAO;QAAE,OAAO,qBAAqB,CAAC;IAC/C,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,qBAAqB,CAAC;AACzD,CAAC;AAED,SAAS,cAAc,CAAC,MAAc;IACpC,OAAO,GAAG,MAAM,iCAAiC,CAAC;AACpD,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACtC,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC5B,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY;QAAE,OAAO,IAAI,CAAC;IACnD,MAAM,IAAI,GAAG,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1D,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACvC,MAAM,MAAM,GAAG,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAChF,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACzD,MAAM,SAAS,GAAG,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAChF,MAAM,WAAW,GAAG,OAAO,GAAG,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACtF,IAAI,CAAC,SAAS,IAAI,CAAC,WAAW;QAAE,OAAO,IAAI,CAAC;IAC5C,OAAO;QACL,IAAI;QACJ,MAAM;QACN,QAAQ,EACN,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE;YACrD,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE;YACrB,CAAC,CAAC,KAAK;QACX,SAAS;QACT,WAAW;KACZ,CAAC;AACJ,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,2BAA2B,CACzC,IAAa,EACb,QAAuB;IAEvB,MAAM,OAAO,GAAG,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;IAClD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;IACvE,MAAM,MAAM,GAAG,OAAO;SACnB,GAAG,CAAC,gBAAgB,CAAC;SACrB,MAAM,CAAC,CAAC,KAAK,EAA2B,EAAE,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC;IAC7D,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACrC,MAAM,MAAM,GAAG,QAAQ,IAAI,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;IACtE,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;AAC5E,CAAC;AAED,SAAS,kBAAkB,CAAC,cAAsB;IAChD,MAAM,WAAW,CACf,wEAAwE,EACxE;QACE,IAAI,EAAE,MAAM;QACZ,WAAW,EACT,gKAAgK;QAClK,IAAI,EAAE,cAAc;KACrB,CACF,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,cAAc,CAC3B,IAAa,EACb,OAA4B;IAE5B,MAAM,iBAAiB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AACzC,CAAC;AAED,KAAK,UAAU,iBAAiB,CAC9B,IAAa,EACb,OAA4B,EAC5B,MAAc;IAEd,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC;IAC3C,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;QACnC,MAAM,IAAI,GAAG,MAAM,wBAAwB,CAAC,IAAI,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;QAC1E,QAAQ,IAAI,CAAC,MAAM,EAAE,CAAC;YACpB,KAAK,UAAU;gBACb,OAAO;YACT,KAAK,QAAQ,CAAC;YACd,KAAK,SAAS,CAAC;YACf,KAAK,UAAU;gBACb,kBAAkB,CAAC,IAAI,CAAC,CAAC;gBACzB,MAAM,WAAW,CAAC,8BAA8B,IAAI,CAAC,MAAM,GAAG,EAAE;oBAC9D,IAAI,EAAE,WAAW;oBACjB,WAAW,EAAE,wBAAwB,IAAI,CAAC,MAAM,8DAA8D;iBAC/G,CAAC,CAAC;YACL,KAAK,iBAAiB;gBACpB,IAAI,IAAI,CAAC,UAAU,KAAK,aAAa,EAAE,CAAC;oBACtC,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;oBAC7B,MAAM;gBACR,CAAC;gBACD,kBAAkB,CAAC,IAAI,CAAC,CAAC;gBACzB,MAAM,WAAW,CACf,IAAI,CAAC,cAAc,IAAI,iDAAiD,EACxE;oBACE,IAAI,EAAE,WAAW;oBACjB,WAAW,EACT,IAAI,CAAC,cAAc;wBACnB,gGAAgG;iBACnG,CACF,CAAC;YACJ,KAAK,SAAS,CAAC;YACf,KAAK,SAAS;gBACZ,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAC7B,MAAM;YACR,OAAO,CAAC,CAAC,CAAC;gBACR,MAAM,WAAW,GAAU,IAAI,CAAC,MAAM,CAAC;gBACvC,MAAM,WAAW,CAAC;YACpB,CAAC;QACH,CAAC;IACH,CAAC;IACD,MAAM,WAAW,CAAC,8CAA8C,EAAE;QAChE,IAAI,EAAE,WAAW;QACjB,WAAW,EACT,sHAAsH;QACxH,IAAI,EAAE,OAAO,CAAC,cAAc;KAC7B,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,YAAY,CACzB,IAAa,EACb,MAAc,EACd,OAA4B,EAC5B,KAAa,EACb,kBAA0B;IAE1B,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,iCAAiC,EAAE;QACxF,KAAK;QACL,IAAI,EAAE;YACJ,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,kBAAkB;YAClB,cAAc,EAAE,OAAO,CAAC,cAAc;SACvC;KACF,CAAC,CAAC;IACH,IAAI,CAAC;QACH,SAAS,CAAC,MAAM,CAAC,CAAC;IACpB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,QAAQ,IAAI,GAAG,CAAC,QAAQ,KAAK,YAAY,EAAE,CAAC;YAC7D,kBAAkB,CAAC,IAAI,CAAC,CAAC;QAC3B,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;IACD,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,OAAO,GAAG,OAAO,GAAG,EAAE,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;IACnE,MAAM,IAAI,GAAG,OAAO,GAAG,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;IACrE,MAAM,eAAe,GACnB,OAAO,GAAG,EAAE,eAAe,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC;IACxE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC;AAC5C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,IAAa,EACb,IAAgB,EAChB,QAA+B,IAAI,EACnC,OAA8B,EAAE;IAEhC,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IACnC,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC1C,MAAM,aAAa,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;IAC7C,MAAM,QAAQ,GACZ,aAAa,IAAI,aAAa,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC;IAC1E,IAAI,IAAI,CAAC,MAAM,IAAI,aAAa,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,EAAE,EAAE,CAAC;QAC9E,MAAM,WAAW,CAAC,mDAAmD,EAAE;YACrE,IAAI,EAAE,WAAW;YACjB,WAAW,EAAE,uCAAuC,aAAa,CAAC,MAAM,2BAA2B,MAAM,iFAAiF,aAAa,CAAC,MAAM,GAAG;SAClN,CAAC,CAAC;IACL,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,CAAC,cAAc,EAAE,IAAI,EAAE,IAAI,QAAQ,EAAE,cAAc,IAAI,IAAI,CAAC;IAEjF,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC7B,MAAM,WAAW,CAAC,0CAA0C,EAAE;YAC5D,IAAI,EAAE,WAAW;YACjB,WAAW,EACT,sIAAsI;SACzI,CAAC,CAAC;IACL,CAAC;IAED,IAAI,OAA4B,CAAC;IACjC,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,SAAS,GAAG,QAAQ,IAAI,QAAQ,CAAC,cAAc,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;QACrF,OAAO,GAAG;YACR,OAAO,EAAE,CAAC;YACV,MAAM;YACN,cAAc,EAAE,QAAQ;YACxB,IAAI,EAAE,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC;gBAC7B,CAAC,CAAC,IAAI,CAAC,IAAI;gBACX,CAAC,CAAC,SAAS,EAAE,IAAI,IAAI,KAAK,EAAE,IAAI,IAAI,IAAI;YAC1C,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,SAAS,EAAE,MAAM,IAAI,KAAK,EAAE,MAAM,IAAI,CAAC;YAC9D,QAAQ,EAAE,SAAS,EAAE,QAAQ,IAAI,KAAK,EAAE,QAAQ,IAAI,KAAK;YACzD,SAAS,EACP,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE;gBACtB,SAAS,EAAE,SAAS;gBACpB,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,6BAA6B,CAAC,EAAE,IAAI,EAAE;gBACnD,KAAK,EAAE,SAAS;gBAChB,EAAE;YACJ,WAAW,EAAE,cAAc,CAAC,MAAM,CAAC;YACnC,SAAS,EAAE,SAAS,EAAE,SAAS,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE;SACpD,CAAC;QACF,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;YAC1C,MAAM,UAAU,CACd,2EAA2E,CAC5E,CAAC;QACJ,CAAC;QACD,MAAM,cAAc,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACtC,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,GAAiB,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC;YAClD,CAAC,CAAC,IAAI,CAAC,IAAI;YACX,CAAC,CAAC,KAAK,EAAE,IAAI,IAAI,IAAI,CAAC;QACxB,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,KAAK,EAAE,MAAM,IAAI,IAAI,CAAC;QACpD,MAAM,SAAS,GACb,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE;YACtB,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,6BAA6B,CAAC,EAAE,IAAI,EAAE;YACnD,KAAK,EAAE,SAAS;YAChB,EAAE,CAAC;QACL,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,UAAU,CACd,gFAAgF,CACjF,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,UAAU,CACd,oFAAoF,CACrF,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;QACjC,MAAM,QAAQ,GAAG,KAAK,EAAE,QAAQ,IAAI,KAAK,CAAC;QAC1C,MAAM,sBAAsB,CAAC,IAAI,CAAC,CAAC;QACnC,MAAM,OAAO,GAAG,MAAM,sBAAsB,CAAC,IAAI,EAAE;YACjD,SAAS;YACT,MAAM;YACN,QAAQ;YACR,OAAO,EAAE,mBAAmB,CAAC,IAAI,EAAE,KAAK,CAAC;YACzC,QAAQ,EAAE,kBAAkB,KAAK,6BAA6B,MAAM,aAAa;YACjF,KAAK,EAAE,wCAAwC,MAAM,EAAE;YACvD,cAAc,EAAE,IAAI,CAAC,QAAQ,EAAE;SAChC,CAAC,CAAC;QACH,OAAO,GAAG;YACR,OAAO,EAAE,CAAC;YACV,MAAM;YACN,cAAc,EAAE,OAAO,CAAC,EAAE;YAC1B,IAAI;YACJ,MAAM;YACN,QAAQ;YACR,SAAS;YACT,WAAW,EAAE,cAAc,CAAC,MAAM,CAAC;YACnC,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE;SAC5B,CAAC;QACF,MAAM,cAAc,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACpC,MAAM,QAAQ,GAAG,wDAAwD,IAAI,KAAK,MAAM,QAAQ,CAAC;QACjG,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;YACxB,WAAW,CAAC,IAAI,EAAE;gBAChB,IAAI,EAAE,SAAS;gBACf,WAAW,EAAE,2EAA2E,IAAI,KAAK,MAAM,2CAA2C;gBAClJ,GAAG,EAAE,OAAO,CAAC,WAAW;aACzB,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,QAAQ,IAAI,CAAC,CAAC;QAClC,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,kBAAkB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC9C,MAAM,iBAAiB,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IAC/C,MAAM,kBAAkB,GAAG,MAAM,0BAA0B,CACzD,IAAI,EACJ,OAAO,CAAC,cAAc,CACvB,CAAC;IACF,IAAI,CAAC,kBAAkB,EAAE,CAAC;QACxB,kBAAkB,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;IAC7C,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,YAAY,CAC7B,IAAI,EACJ,MAAM,EACN,OAAO,EACP,MAAM,CAAC,KAAK,EACZ,kBAAkB,CACnB,CAAC;IACF,kBAAkB,CAAC,IAAI,CAAC,CAAC;IACzB,IAAI,CAAC,EAAE,CAAC,MAAM,CACZ,SAAS,IAAI,CAAC,IAAI,2BAA2B,IAAI,CAAC,OAAO,KAAK,CAC/D,CAAC;IACF,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,IAAa,EACb,IAAgB;IAEhB,IAAI,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,EAAE,KAAK,KAAK,EAAE,CAAC;QACjC,MAAM,UAAU,CAAC,qCAAqC,CAAC,CAAC;IAC1D,CAAC;IACD,IAAI,IAAI,CAAC,EAAE,KAAK,KAAK,EAAE,CAAC;QACtB,MAAM,UAAU,CAAC,qCAAqC,CAAC,CAAC;IAC1D,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QACf,MAAM,UAAU,CAAC,6BAA6B,CAAC,CAAC;IAClD,CAAC;IACD,OAAO,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AACpC,CAAC;AAED,gFAAgF;AAChF,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,IAAa,EACb,IAAgB,EAChB,MAAkB,EAClB,KAAgC;IAEhC,IAAI,MAAM,CAAC,MAAM,KAAK,GAAG;QAAE,OAAO,MAAM,CAAC;IACzC,MAAM,KAAK,GAAG,2BAA2B,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IAClE,IAAI,CAAC,KAAK;QAAE,OAAO,MAAM,CAAC;IAC1B,MAAM,cAAc,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3D,OAAO,KAAK,EAAE,CAAC;AACjB,CAAC"}

package/dist/commands/email.d.ts

@@ -0,0 +1,3 @@
+import type { CliDeps } from "../deps.js";
+import type { ParsedArgs } from "../types.js";
+export declare function runEmail(deps: CliDeps, args: ParsedArgs): Promise<number>;

package/dist/commands/email.js

@@ -0,0 +1,51 @@
+import { requireToken, resolveOrigin, peekStoredCreds } from "../credentials.js";
+import { CliError, EXIT_ACTION, EXIT_OK, usageError } from "../exit.js";
+import { httpRequest, requireOk } from "../http.js";
+import { writeJson } from "../output.js";
+function resolveScanId(deps, origin, id) {
+    if (id)
+        return id;
+    const stored = peekStoredCreds(deps, origin);
+    if (stored?.lastScanId)
+        return stored.lastScanId;
+    throw usageError("Pass a scan id or run a scan first.");
+}
+export async function runEmail(deps, args) {
+    const origin = resolveOrigin(deps);
+    const creds = requireToken(deps, origin);
+    const scanId = resolveScanId(deps, origin, args.id);
+    if (!args.consent) {
+        const preview = await httpRequest(deps, origin, "GET", `/api/agent/v1/scans/${encodeURIComponent(scanId)}/email`, { token: creds.token });
+        requireOk(preview);
+        const body = (preview.json ?? {});
+        if (args.json) {
+            writeJson(deps, body);
+            return EXIT_OK;
+        }
+        const prompt = body.prompt ?? "Ask the human the exact masked-recipient question.";
+        deps.io.stdout(`${prompt}\n`);
+        throw new CliError("Ask the human the exact question above. If they agree, rerun with --consent quoting it.", EXIT_ACTION, {
+            kind: "ask_human",
+            humanPrompt: prompt,
+        });
+    }
+    const result = await httpRequest(deps, origin, "POST", `/api/agent/v1/scans/${encodeURIComponent(scanId)}/email`, {
+        token: creds.token,
+        body: {
+            decision: "granted",
+            promptText: args.consent,
+            ...(args.reply ? { humanReply: args.reply } : {}),
+        },
+    });
+    requireOk(result);
+    if (args.json) {
+        writeJson(deps, result.json);
+        return EXIT_OK;
+    }
+    const body = (result.json ?? {});
+    const masked = body.recipientMasked ?? "the verified address";
+    const when = body.sends === "now" ? "now" : "when the scan finishes";
+    deps.io.stdout(`Email consent recorded for ${masked}. CleanSlop will send ${when}.\n`);
+    return EXIT_OK;
+}
+//# sourceMappingURL=email.js.map

package/dist/commands/email.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"email.js","sourceRoot":"","sources":["../../src/commands/email.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAEjF,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AACxE,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACpD,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAGzC,SAAS,aAAa,CACpB,IAAa,EACb,MAAc,EACd,EAAiB;IAEjB,IAAI,EAAE;QAAE,OAAO,EAAE,CAAC;IAClB,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC7C,IAAI,MAAM,EAAE,UAAU;QAAE,OAAO,MAAM,CAAC,UAAU,CAAC;IACjD,MAAM,UAAU,CAAC,qCAAqC,CAAC,CAAC;AAC1D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,IAAa,EACb,IAAgB;IAEhB,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IACnC,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACzC,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;IAEpD,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QAClB,MAAM,OAAO,GAAG,MAAM,WAAW,CAC/B,IAAI,EACJ,MAAM,EACN,KAAK,EACL,uBAAuB,kBAAkB,CAAC,MAAM,CAAC,QAAQ,EACzD,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CACvB,CAAC;QACF,SAAS,CAAC,OAAO,CAAC,CAAC;QACnB,MAAM,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAK/B,CAAC;QACF,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YACtB,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,oDAAoD,CAAC;QACnF,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,CAAC;QAC9B,MAAM,IAAI,QAAQ,CAChB,yFAAyF,EACzF,WAAW,EACX;YACE,IAAI,EAAE,WAAW;YACjB,WAAW,EAAE,MAAM;SACpB,CACF,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,WAAW,CAC9B,IAAI,EACJ,MAAM,EACN,MAAM,EACN,uBAAuB,kBAAkB,CAAC,MAAM,CAAC,QAAQ,EACzD;QACE,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,IAAI,EAAE;YACJ,QAAQ,EAAE,SAAS;YACnB,UAAU,EAAE,IAAI,CAAC,OAAO;YACxB,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAClD;KACF,CACF,CAAC;IACF,SAAS,CAAC,MAAM,CAAC,CAAC;IAClB,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACd,SAAS,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;QAC7B,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAI9B,CAAC;IACF,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,IAAI,sBAAsB,CAAC;IAC9D,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,wBAAwB,CAAC;IACrE,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,8BAA8B,MAAM,yBAAyB,IAAI,KAAK,CAAC,CAAC;IACvF,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/commands/link-identity.d.ts

@@ -0,0 +1,3 @@
+import type { CliDeps } from "../deps.js";
+import type { ParsedArgs } from "../types.js";
+export declare function runLinkIdentity(deps: CliDeps, args: ParsedArgs): Promise<number>;

package/dist/commands/link-identity.js

@@ -0,0 +1,37 @@
+import { requireToken, resolveOrigin } from "../credentials.js";
+import { CliError, EXIT_OK, EXIT_UNEXPECTED } from "../exit.js";
+import { asRecord, hasIdentityPresentationChallenge, httpRequest, requireOk, } from "../http.js";
+import { ensureLinkAuth, linkAuthMode, presentLinkIdentity, readLinkClaimsChallenge, requireLinkBridgeConsent, } from "../link.js";
+export async function runLinkIdentity(deps, args) {
+    const authMode = linkAuthMode(args);
+    const origin = resolveOrigin(deps);
+    const creds = requireToken(deps, origin);
+    const consentSource = await requireLinkBridgeConsent(deps, args, origin);
+    await ensureLinkAuth(deps, {
+        mode: authMode,
+        command: "cleanslop link-identity",
+    });
+    const started = await httpRequest(deps, origin, "POST", "/api/agent/v1/identity/link", { token: creds.token, body: { consentSource } });
+    if (!hasIdentityPresentationChallenge(started)) {
+        requireOk(started);
+        throw new CliError("Link bridge did not return a claims challenge.", EXIT_UNEXPECTED);
+    }
+    const challenge = readLinkClaimsChallenge(started.json, origin);
+    const presented = await presentLinkIdentity(deps, {
+        aud: challenge.aud,
+        nonce: challenge.nonce,
+    });
+    const completed = await httpRequest(deps, origin, "POST", "/api/agent/v1/identity/link", {
+        token: creds.token,
+        headers: {
+            "Identity-Presentation": presented.presentation,
+            "CleanSlop-Interaction": challenge.interactionId,
+        },
+    });
+    requireOk(completed);
+    const rec = asRecord(completed.json);
+    const emailMasked = rec && typeof rec.emailMasked === "string" ? rec.emailMasked : "your Link email";
+    deps.io.stdout(`Linked ${emailMasked} to this account.\n`);
+    return EXIT_OK;
+}
+//# sourceMappingURL=link-identity.js.map

package/dist/commands/link-identity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"link-identity.js","sourceRoot":"","sources":["../../src/commands/link-identity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAEhE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAChE,OAAO,EACL,QAAQ,EACR,gCAAgC,EAChC,WAAW,EACX,SAAS,GACV,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,cAAc,EACd,YAAY,EACZ,mBAAmB,EACnB,uBAAuB,EACvB,wBAAwB,GACzB,MAAM,YAAY,CAAC;AAGpB,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,IAAa,EACb,IAAgB;IAEhB,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IACpC,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IACnC,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACzC,MAAM,aAAa,GAAG,MAAM,wBAAwB,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IACzE,MAAM,cAAc,CAAC,IAAI,EAAE;QACzB,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,yBAAyB;KACnC,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,MAAM,WAAW,CAC/B,IAAI,EACJ,MAAM,EACN,MAAM,EACN,6BAA6B,EAC7B,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,aAAa,EAAE,EAAE,CAChD,CAAC;IACF,IAAI,CAAC,gCAAgC,CAAC,OAAO,CAAC,EAAE,CAAC;QAC/C,SAAS,CAAC,OAAO,CAAC,CAAC;QACnB,MAAM,IAAI,QAAQ,CAAC,gDAAgD,EAAE,eAAe,CAAC,CAAC;IACxF,CAAC;IACD,MAAM,SAAS,GAAG,uBAAuB,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAChE,MAAM,SAAS,GAAG,MAAM,mBAAmB,CAAC,IAAI,EAAE;QAChD,GAAG,EAAE,SAAS,CAAC,GAAG;QAClB,KAAK,EAAE,SAAS,CAAC,KAAK;KACvB,CAAC,CAAC;IACH,MAAM,SAAS,GAAG,MAAM,WAAW,CACjC,IAAI,EACJ,MAAM,EACN,MAAM,EACN,6BAA6B,EAC7B;QACE,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,OAAO,EAAE;YACP,uBAAuB,EAAE,SAAS,CAAC,YAAY;YAC/C,uBAAuB,EAAE,SAAS,CAAC,aAAa;SACjD;KACF,CACF,CAAC;IACF,SAAS,CAAC,SAAS,CAAC,CAAC;IACrB,MAAM,GAAG,GAAG,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACrC,MAAM,WAAW,GACf,GAAG,IAAI,OAAO,GAAG,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,iBAAiB,CAAC;IACnF,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,UAAU,WAAW,qBAAqB,CAAC,CAAC;IAC3D,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/commands/link-login.d.ts

@@ -0,0 +1,3 @@
+import type { CliDeps } from "../deps.js";
+import type { ParsedArgs } from "../types.js";
+export declare function runLinkLogin(deps: CliDeps, args: ParsedArgs): Promise<number>;

package/dist/commands/link-login.js

@@ -0,0 +1,63 @@
+import { CLIENT_ID, TERMS_UPDATED_ON } from "../config.js";
+import { resolveOrigin, storeToken } from "../credentials.js";
+import { CliError, EXIT_OK, EXIT_POLICY, EXIT_UNEXPECTED } from "../exit.js";
+import { asErrorBody, hasIdentityPresentationChallenge, httpRequest, throwHttpError, } from "../http.js";
+import { ensureLinkAuth, linkAuthMode, linkSignupBody, popAttestation, presentLinkIdentity, readLinkClaimsChallenge, requireLinkSignupConsent, } from "../link.js";
+export async function runLinkLogin(deps, args) {
+    const authMode = linkAuthMode(args);
+    const origin = resolveOrigin(deps);
+    const consentSource = await requireLinkSignupConsent(deps, args, origin);
+    await ensureLinkAuth(deps, { mode: authMode });
+    const attestation = await popAttestation(deps);
+    const started = await httpRequest(deps, origin, "POST", "/oauth/link", {
+        headers: { Authorization: attestation.authorization },
+        body: linkSignupBody(deps, TERMS_UPDATED_ON, consentSource),
+    });
+    if (!hasIdentityPresentationChallenge(started)) {
+        throwHttpError(started);
+    }
+    const challenge = readLinkClaimsChallenge(started.json, origin);
+    const presented = await presentLinkIdentity(deps, {
+        aud: challenge.aud,
+        nonce: challenge.nonce,
+    });
+    const completed = await httpRequest(deps, origin, "POST", "/oauth/link", {
+        headers: {
+            Authorization: attestation.authorization,
+            "Identity-Presentation": presented.presentation,
+            "CleanSlop-Interaction": challenge.interactionId,
+        },
+        body: {
+            client: CLIENT_ID,
+            acceptTerms: TERMS_UPDATED_ON,
+            consentSource,
+        },
+    });
+    const body = asErrorBody(completed.json);
+    if (completed.status >= 400) {
+        if (body.error === "link_pilot_required") {
+            throw new CliError("Link pilot access required.", EXIT_POLICY, {
+                kind: "beta",
+                humanPrompt: "This Link email is not in the CleanSlop Link pilot yet. Ask the CleanSlop team for access, then run `cleanslop login --link` again.",
+            });
+        }
+        throwHttpError(completed);
+    }
+    const issued = completed.json;
+    if (!issued || typeof issued.access_token !== "string") {
+        throw new CliError("Link login response was missing access_token.", EXIT_UNEXPECTED);
+    }
+    const account = issued.account;
+    const emailMasked = (typeof account?.emailMasked === "string" && account.emailMasked) ||
+        (typeof account?.email_masked === "string" && account.email_masked) ||
+        null;
+    await storeToken(deps, origin, {
+        token: issued.access_token,
+        githubLogin: issued.account?.github_login ?? null,
+        grantId: issued.grant_id ?? null,
+    });
+    const label = emailMasked || "your Link email";
+    deps.io.stdout(`Connected as ${label} (Link)\n`);
+    return EXIT_OK;
+}
+//# sourceMappingURL=link-login.js.map

package/dist/commands/link-login.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"link-login.js","sourceRoot":"","sources":["../../src/commands/link-login.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAC3D,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAE9D,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAC7E,OAAO,EACL,WAAW,EACX,gCAAgC,EAChC,WAAW,EACX,cAAc,GACf,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,cAAc,EACd,YAAY,EACZ,cAAc,EACd,cAAc,EACd,mBAAmB,EACnB,uBAAuB,EACvB,wBAAwB,GACzB,MAAM,YAAY,CAAC;AAGpB,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,IAAa,EACb,IAAgB;IAEhB,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IACpC,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IACnC,MAAM,aAAa,GAAG,MAAM,wBAAwB,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IACzE,MAAM,cAAc,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC/C,MAAM,WAAW,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,CAAC;IAE/C,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE;QACrE,OAAO,EAAE,EAAE,aAAa,EAAE,WAAW,CAAC,aAAa,EAAE;QACrD,IAAI,EAAE,cAAc,CAAC,IAAI,EAAE,gBAAgB,EAAE,aAAa,CAAC;KAC5D,CAAC,CAAC;IACH,IAAI,CAAC,gCAAgC,CAAC,OAAO,CAAC,EAAE,CAAC;QAC/C,cAAc,CAAC,OAAO,CAAC,CAAC;IAC1B,CAAC;IACD,MAAM,SAAS,GAAG,uBAAuB,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAChE,MAAM,SAAS,GAAG,MAAM,mBAAmB,CAAC,IAAI,EAAE;QAChD,GAAG,EAAE,SAAS,CAAC,GAAG;QAClB,KAAK,EAAE,SAAS,CAAC,KAAK;KACvB,CAAC,CAAC;IACH,MAAM,SAAS,GAAG,MAAM,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE;QACvE,OAAO,EAAE;YACP,aAAa,EAAE,WAAW,CAAC,aAAa;YACxC,uBAAuB,EAAE,SAAS,CAAC,YAAY;YAC/C,uBAAuB,EAAE,SAAS,CAAC,aAAa;SACjD;QACD,IAAI,EAAE;YACJ,MAAM,EAAE,SAAS;YACjB,WAAW,EAAE,gBAAgB;YAC7B,aAAa;SACd;KACF,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,WAAW,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACzC,IAAI,SAAS,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;QAC5B,IAAI,IAAI,CAAC,KAAK,KAAK,qBAAqB,EAAE,CAAC;YACzC,MAAM,IAAI,QAAQ,CAAC,6BAA6B,EAAE,WAAW,EAAE;gBAC7D,IAAI,EAAE,MAAM;gBACZ,WAAW,EACT,qIAAqI;aACxI,CAAC,CAAC;QACL,CAAC;QACD,cAAc,CAAC,SAAS,CAAC,CAAC;IAC5B,CAAC;IACD,MAAM,MAAM,GAAG,SAAS,CAAC,IAAkC,CAAC;IAC5D,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,CAAC,YAAY,KAAK,QAAQ,EAAE,CAAC;QACvD,MAAM,IAAI,QAAQ,CAAC,+CAA+C,EAAE,eAAe,CAAC,CAAC;IACvF,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,OAEV,CAAC;IACd,MAAM,WAAW,GACf,CAAC,OAAO,OAAO,EAAE,WAAW,KAAK,QAAQ,IAAI,OAAO,CAAC,WAAW,CAAC;QACjE,CAAC,OAAO,OAAO,EAAE,YAAY,KAAK,QAAQ,IAAI,OAAO,CAAC,YAAY,CAAC;QACnE,IAAI,CAAC;IACP,MAAM,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE;QAC7B,KAAK,EAAE,MAAM,CAAC,YAAY;QAC1B,WAAW,EAAE,MAAM,CAAC,OAAO,EAAE,YAAY,IAAI,IAAI;QACjD,OAAO,EAAE,MAAM,CAAC,QAAQ,IAAI,IAAI;KACjC,CAAC,CAAC;IACH,MAAM,KAAK,GAAG,WAAW,IAAI,iBAAiB,CAAC;IAC/C,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,gBAAgB,KAAK,WAAW,CAAC,CAAC;IACjD,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/commands/login.d.ts

@@ -0,0 +1,6 @@
+import type { CliDeps } from "../deps.js";
+import type { ParsedArgs } from "../types.js";
+/** Matches server DEVICE_EXTEND_TTL_MS — first /connect view extends the code. */
+export declare const DEVICE_POLL_GRACE_MS: number;
+export declare function devicePollDeadline(expiresAt: number): number;
+export declare function runLogin(deps: CliDeps, args: ParsedArgs): Promise<number>;