@companyhelm/cli 0.4.2 → 0.4.3

package/dist/cli_io_interface.d.ts

@@ -3,6 +3,8 @@
  * coupling business behavior to process globals or a specific terminal stream.
  */
 export interface CliIo {
+    /** Reads a single input line from the CLI user. */
+    readLine(prompt: string): Promise<string>;
     /** Writes a normal output line to the CLI user. */
     writeLine(message: string): void;
     /** Writes an error output line to the CLI user. */

package/dist/companyhelm_cli.d.ts

@@ -13,6 +13,7 @@ export declare class CompanyHelmCli {
     private createStatusCommand;
     private createServerCommand;
     private createRunnerCommand;
+    private createProviderCommand;
     private printStatus;
     private printServerCommand;
     private printRunnerCommand;

package/dist/companyhelm_cli.js

@@ -1,6 +1,7 @@
 import { readFileSync } from "node:fs";
 import { Command } from "commander";
 import { ConsoleIo } from "./console_io.js";
+import { ProviderLoginCommand } from "./provider/login_command.js";
 /**
  * Defines the public `companyhelm` command that npm users install. The initial
  * command surface intentionally focuses on package discovery and local stack
@@ -29,6 +30,7 @@ export class CompanyHelmCli {
         program.addCommand(this.createStatusCommand());
         program.addCommand(this.createServerCommand());
         program.addCommand(this.createRunnerCommand());
+        program.addCommand(this.createProviderCommand());
         return program;
     }
     createStatusCommand() {
@@ -48,6 +50,21 @@ export class CompanyHelmCli {
             .argument("[command]", "Runner command to prepare for.", "start")
             .action((command) => this.printRunnerCommand(command));
     }
+    createProviderCommand() {
+        const providerCommand = new Command("provider")
+            .description("Work with CompanyHelm model provider credentials.");
+        providerCommand.addCommand(new Command("login")
+            .description("Complete a provider subscription credential login request.")
+            .requiredOption("--code <code>", "Provider login code from CompanyHelm.")
+            .option("--api-url <url>", "CompanyHelm API URL.", ProviderLoginCommand.DEFAULT_API_URL)
+            .action(async (options) => {
+            await new ProviderLoginCommand(this.io).run({
+                apiUrl: options.apiUrl,
+                code: options.code,
+            });
+        }));
+        return providerCommand;
+    }
     printStatus() {
         this.io.writeLine("CompanyHelm CLI is installed.");
         this.io.writeLine("Main CLI package: @companyhelm/cli");

package/dist/companyhelm_cli.js.map

@@ -1 +1 @@
-{"version":3,"file":"companyhelm_cli.js","sourceRoot":"","sources":["../src/companyhelm_cli.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAM5C;;;;GAIG;AACH,MAAM,OAAO,cAAc;IACR,EAAE,CAAQ;IAE3B,YAAY,KAAY,IAAI,SAAS,EAAE;QACrC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC;IACf,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,IAAc;QACtB,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE;YAC1C,IAAI,EAAE,MAAM;SACb,CAAC,CAAC;IACL,CAAC;IAED,aAAa;QACX,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE;aAC1B,IAAI,CAAC,aAAa,CAAC;aACnB,WAAW,CAAC,+BAA+B,CAAC;aAC5C,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;aAC3B,kBAAkB,EAAE;aACpB,eAAe,CAAC;YACf,QAAQ,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;YAC5D,QAAQ,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;SAC5D,CAAC,CAAC;QAEL,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,mBAAmB,EAAE,CAAC,CAAC;QAC/C,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,mBAAmB,EAAE,CAAC,CAAC;QAC/C,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,mBAAmB,EAAE,CAAC,CAAC;QAC/C,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,mBAAmB;QACzB,OAAO,IAAI,OAAO,CAAC,QAAQ,CAAC;aACzB,WAAW,CAAC,oDAAoD,CAAC;aACjE,MAAM,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;IACtC,CAAC;IAEO,mBAAmB;QACzB,OAAO,IAAI,OAAO,CAAC,QAAQ,CAAC;aACzB,WAAW,CAAC,uDAAuD,CAAC;aACpE,QAAQ,CAAC,WAAW,EAAE,gCAAgC,EAAE,OAAO,CAAC;aAChE,MAAM,CAAC,CAAC,OAAe,EAAE,EAAE,CAAC,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC;IACnE,CAAC;IAEO,mBAAmB;QACzB,OAAO,IAAI,OAAO,CAAC,QAAQ,CAAC;aACzB,WAAW,CAAC,uDAAuD,CAAC;aACpE,QAAQ,CAAC,WAAW,EAAE,gCAAgC,EAAE,OAAO,CAAC;aAChE,MAAM,CAAC,CAAC,OAAe,EAAE,EAAE,CAAC,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC;IACnE,CAAC;IAEO,WAAW;QACjB,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,+BAA+B,CAAC,CAAC;QACnD,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,oCAAoC,CAAC,CAAC;QACxD,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,qCAAqC,CAAC,CAAC;QACzD,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,+CAA+C,CAAC,CAAC;IACrE,CAAC;IAEO,kBAAkB,CAAC,OAAe;QACxC,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,6BAA6B,OAAO,EAAE,CAAC,CAAC;QAC1D,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,0HAA0H,CAAC,CAAC;IAChJ,CAAC;IAEO,kBAAkB,CAAC,OAAe;QACxC,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,6BAA6B,OAAO,EAAE,CAAC,CAAC;QAC1D,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,4IAA4I,CAAC,CAAC;IAClK,CAAC;IAEO,WAAW;QACjB,MAAM,eAAe,GAAG,IAAI,CAAC,KAAK,CAChC,YAAY,CAAC,IAAI,GAAG,CAAC,iBAAiB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAC/C,CAAC;QAErB,IAAI,OAAO,eAAe,CAAC,OAAO,KAAK,QAAQ,IAAI,eAAe,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxF,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,OAAO,eAAe,CAAC,OAAO,CAAC;IACjC,CAAC;CACF"}
+{"version":3,"file":"companyhelm_cli.js","sourceRoot":"","sources":["../src/companyhelm_cli.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AAMnE;;;;GAIG;AACH,MAAM,OAAO,cAAc;IACR,EAAE,CAAQ;IAE3B,YAAY,KAAY,IAAI,SAAS,EAAE;QACrC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC;IACf,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,IAAc;QACtB,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE;YAC1C,IAAI,EAAE,MAAM;SACb,CAAC,CAAC;IACL,CAAC;IAED,aAAa;QACX,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE;aAC1B,IAAI,CAAC,aAAa,CAAC;aACnB,WAAW,CAAC,+BAA+B,CAAC;aAC5C,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;aAC3B,kBAAkB,EAAE;aACpB,eAAe,CAAC;YACf,QAAQ,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;YAC5D,QAAQ,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;SAC5D,CAAC,CAAC;QAEL,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,mBAAmB,EAAE,CAAC,CAAC;QAC/C,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,mBAAmB,EAAE,CAAC,CAAC;QAC/C,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,mBAAmB,EAAE,CAAC,CAAC;QAC/C,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,qBAAqB,EAAE,CAAC,CAAC;QACjD,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,mBAAmB;QACzB,OAAO,IAAI,OAAO,CAAC,QAAQ,CAAC;aACzB,WAAW,CAAC,oDAAoD,CAAC;aACjE,MAAM,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;IACtC,CAAC;IAEO,mBAAmB;QACzB,OAAO,IAAI,OAAO,CAAC,QAAQ,CAAC;aACzB,WAAW,CAAC,uDAAuD,CAAC;aACpE,QAAQ,CAAC,WAAW,EAAE,gCAAgC,EAAE,OAAO,CAAC;aAChE,MAAM,CAAC,CAAC,OAAe,EAAE,EAAE,CAAC,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC;IACnE,CAAC;IAEO,mBAAmB;QACzB,OAAO,IAAI,OAAO,CAAC,QAAQ,CAAC;aACzB,WAAW,CAAC,uDAAuD,CAAC;aACpE,QAAQ,CAAC,WAAW,EAAE,gCAAgC,EAAE,OAAO,CAAC;aAChE,MAAM,CAAC,CAAC,OAAe,EAAE,EAAE,CAAC,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC;IACnE,CAAC;IAGO,qBAAqB;QAC3B,MAAM,eAAe,GAAG,IAAI,OAAO,CAAC,UAAU,CAAC;aAC5C,WAAW,CAAC,mDAAmD,CAAC,CAAC;QAEpE,eAAe,CAAC,UAAU,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC;aAC5C,WAAW,CAAC,4DAA4D,CAAC;aACzE,cAAc,CAAC,eAAe,EAAE,uCAAuC,CAAC;aACxE,MAAM,CAAC,iBAAiB,EAAE,sBAAsB,EAAE,oBAAoB,CAAC,eAAe,CAAC;aACvF,MAAM,CAAC,KAAK,EAAE,OAAyC,EAAE,EAAE;YAC1D,MAAM,IAAI,oBAAoB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC;gBAC1C,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,IAAI,EAAE,OAAO,CAAC,IAAI;aACnB,CAAC,CAAC;QACL,CAAC,CAAC,CAAC,CAAC;QAEN,OAAO,eAAe,CAAC;IACzB,CAAC;IAEO,WAAW;QACjB,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,+BAA+B,CAAC,CAAC;QACnD,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,oCAAoC,CAAC,CAAC;QACxD,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,qCAAqC,CAAC,CAAC;QACzD,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,+CAA+C,CAAC,CAAC;IACrE,CAAC;IAEO,kBAAkB,CAAC,OAAe;QACxC,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,6BAA6B,OAAO,EAAE,CAAC,CAAC;QAC1D,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,0HAA0H,CAAC,CAAC;IAChJ,CAAC;IAEO,kBAAkB,CAAC,OAAe;QACxC,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,6BAA6B,OAAO,EAAE,CAAC,CAAC;QAC1D,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,4IAA4I,CAAC,CAAC;IAClK,CAAC;IAEO,WAAW;QACjB,MAAM,eAAe,GAAG,IAAI,CAAC,KAAK,CAChC,YAAY,CAAC,IAAI,GAAG,CAAC,iBAAiB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAC/C,CAAC;QAErB,IAAI,OAAO,eAAe,CAAC,OAAO,KAAK,QAAQ,IAAI,eAAe,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxF,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,OAAO,eAAe,CAAC,OAAO,CAAC;IACjC,CAAC;CACF"}

package/dist/console_io.d.ts

@@ -4,6 +4,7 @@ import type { CliIo } from "./cli_io_interface.js";
  * binaries while keeping command handlers independent from global console APIs.
  */
 export declare class ConsoleIo implements CliIo {
+    readLine(prompt: string): Promise<string>;
     writeLine(message: string): void;
     writeError(message: string): void;
 }

package/dist/console_io.js

@@ -1,8 +1,19 @@
+import { createInterface } from "node:readline/promises";
+import { stdin as input, stdout as output } from "node:process";
 /**
  * Bridges the CLI output interface to the process streams used by npm-created
  * binaries while keeping command handlers independent from global console APIs.
  */
 export class ConsoleIo {
+    async readLine(prompt) {
+        const readline = createInterface({ input, output });
+        try {
+            return await readline.question(prompt);
+        }
+        finally {
+            readline.close();
+        }
+    }
     writeLine(message) {
         process.stdout.write(`${message}\n`);
     }

package/dist/console_io.js.map

@@ -1 +1 @@
-{"version":3,"file":"console_io.js","sourceRoot":"","sources":["../src/console_io.ts"],"names":[],"mappings":"AAEA;;;GAGG;AACH,MAAM,OAAO,SAAS;IACpB,SAAS,CAAC,OAAe;QACvB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,OAAO,IAAI,CAAC,CAAC;IACvC,CAAC;IAED,UAAU,CAAC,OAAe;QACxB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,OAAO,IAAI,CAAC,CAAC;IACvC,CAAC;CACF"}
+{"version":3,"file":"console_io.js","sourceRoot":"","sources":["../src/console_io.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,KAAK,IAAI,KAAK,EAAE,MAAM,IAAI,MAAM,EAAE,MAAM,cAAc,CAAC;AAGhE;;;GAGG;AACH,MAAM,OAAO,SAAS;IACpB,KAAK,CAAC,QAAQ,CAAC,MAAc;QAC3B,MAAM,QAAQ,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;QACpD,IAAI,CAAC;YACH,OAAO,MAAM,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACzC,CAAC;gBAAS,CAAC;YACT,QAAQ,CAAC,KAAK,EAAE,CAAC;QACnB,CAAC;IACH,CAAC;IAED,SAAS,CAAC,OAAe;QACvB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,OAAO,IAAI,CAAC,CAAC;IACvC,CAAC;IAED,UAAU,CAAC,OAAe;QACxB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,OAAO,IAAI,CAAC,CAAC;IACvC,CAAC;CACF"}

package/dist/provider/login_client.d.ts

@@ -0,0 +1,34 @@
+export type ProviderLoginResolvedRequest = {
+    companyName: string;
+    credentialName: string;
+    expiresAt: string;
+    modelProvider: string;
+    piOauthProviderId: string;
+    providerName: string;
+    requestId: string;
+    requestedBy: string;
+};
+export type ProviderLoginCredentials = {
+    access: string;
+    expires: number;
+    refresh: string;
+    [key: string]: unknown;
+};
+/**
+ * Calls the CompanyHelm provider credential login endpoints using only the short-lived code as the
+ * bearer capability. The CLI intentionally does not need a browser session or a long-lived API key.
+ */
+export declare class ProviderLoginClient {
+    private readonly apiUrl;
+    constructor(apiUrl: string);
+    resolve(code: string): Promise<ProviderLoginResolvedRequest>;
+    complete(input: {
+        code: string;
+        credentials: ProviderLoginCredentials;
+    }): Promise<{
+        credentialId: string;
+        status: string;
+    }>;
+    private parseResponse;
+    private static normalizeApiUrl;
+}

package/dist/provider/login_client.js

@@ -0,0 +1,41 @@
+/**
+ * Calls the CompanyHelm provider credential login endpoints using only the short-lived code as the
+ * bearer capability. The CLI intentionally does not need a browser session or a long-lived API key.
+ */
+export class ProviderLoginClient {
+    apiUrl;
+    constructor(apiUrl) {
+        this.apiUrl = ProviderLoginClient.normalizeApiUrl(apiUrl);
+    }
+    async resolve(code) {
+        const url = new URL("/model-provider-credential-login/resolve", this.apiUrl);
+        url.searchParams.set("code", code);
+        const response = await fetch(url);
+        return this.parseResponse(response);
+    }
+    async complete(input) {
+        const response = await fetch(new URL("/model-provider-credential-login/complete", this.apiUrl), {
+            body: JSON.stringify(input),
+            headers: {
+                "content-type": "application/json",
+            },
+            method: "POST",
+        });
+        return this.parseResponse(response);
+    }
+    async parseResponse(response) {
+        const payload = await response.json().catch(() => null);
+        if (!response.ok) {
+            throw new Error(payload?.error || `CompanyHelm API request failed with status ${response.status}.`);
+        }
+        return payload;
+    }
+    static normalizeApiUrl(apiUrl) {
+        const parsedUrl = new URL(apiUrl);
+        parsedUrl.pathname = parsedUrl.pathname.replace(/\/$/u, "");
+        parsedUrl.search = "";
+        parsedUrl.hash = "";
+        return parsedUrl.toString();
+    }
+}
+//# sourceMappingURL=login_client.js.map

package/dist/provider/login_client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"login_client.js","sourceRoot":"","sources":["../../src/provider/login_client.ts"],"names":[],"mappings":"AAkBA;;;GAGG;AACH,MAAM,OAAO,mBAAmB;IACb,MAAM,CAAS;IAEhC,YAAY,MAAc;QACxB,IAAI,CAAC,MAAM,GAAG,mBAAmB,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;IAC5D,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,IAAY;QACxB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,0CAA0C,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAC7E,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACnC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;QAClC,OAAO,IAAI,CAAC,aAAa,CAA+B,QAAQ,CAAC,CAAC;IACpE,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,KAGd;QACC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,GAAG,CAAC,2CAA2C,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE;YAC9F,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;YAC3B,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;aACnC;YACD,MAAM,EAAE,MAAM;SACf,CAAC,CAAC;QAEH,OAAO,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;IACtC,CAAC;IAEO,KAAK,CAAC,aAAa,CAAI,QAAkB;QAC/C,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAA8B,CAAC;QACrF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,OAAO,EAAE,KAAK,IAAI,8CAA8C,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;QACtG,CAAC;QAED,OAAO,OAAY,CAAC;IACtB,CAAC;IAEO,MAAM,CAAC,eAAe,CAAC,MAAc;QAC3C,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;QAClC,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAC5D,SAAS,CAAC,MAAM,GAAG,EAAE,CAAC;QACtB,SAAS,CAAC,IAAI,GAAG,EAAE,CAAC;QACpB,OAAO,SAAS,CAAC,QAAQ,EAAE,CAAC;IAC9B,CAAC;CACF"}

package/dist/provider/login_command.d.ts

@@ -0,0 +1,19 @@
+import type { CliIo } from "../cli_io_interface.js";
+import { ProviderLoginClient } from "./login_client.js";
+import { ProviderOauthLoginRunner } from "./oauth_login_runner.js";
+export type ProviderLoginCommandOptions = {
+    apiUrl: string;
+    code: string;
+};
+/**
+ * Implements `companyhelm provider login` by resolving the web-generated code, running the matching
+ * local OAuth flow, and atomically completing the CompanyHelm credential request.
+ */
+export declare class ProviderLoginCommand {
+    static readonly DEFAULT_API_URL = "https://api.companyhelm.com";
+    private readonly clientFactory;
+    private readonly io;
+    private readonly oauthLoginRunner;
+    constructor(io: CliIo, clientFactory?: (apiUrl: string) => ProviderLoginClient, oauthLoginRunner?: ProviderOauthLoginRunner);
+    run(options: ProviderLoginCommandOptions): Promise<void>;
+}

package/dist/provider/login_command.js

@@ -0,0 +1,35 @@
+import { ProviderLoginClient } from "./login_client.js";
+import { ProviderOauthLoginRunner } from "./oauth_login_runner.js";
+/**
+ * Implements `companyhelm provider login` by resolving the web-generated code, running the matching
+ * local OAuth flow, and atomically completing the CompanyHelm credential request.
+ */
+export class ProviderLoginCommand {
+    static DEFAULT_API_URL = "https://api.companyhelm.com";
+    clientFactory;
+    io;
+    oauthLoginRunner;
+    constructor(io, clientFactory = (apiUrl) => new ProviderLoginClient(apiUrl), oauthLoginRunner = new ProviderOauthLoginRunner(io)) {
+        this.clientFactory = clientFactory;
+        this.io = io;
+        this.oauthLoginRunner = oauthLoginRunner;
+    }
+    async run(options) {
+        const client = this.clientFactory(options.apiUrl);
+        const request = await client.resolve(options.code);
+        this.io.writeLine(`Adding ${request.providerName} credential "${request.credentialName}" to ${request.companyName}.`);
+        this.io.writeLine(`Requested by ${request.requestedBy}. Expires at ${request.expiresAt}.`);
+        const credentials = await this.oauthLoginRunner.login(request.piOauthProviderId);
+        const result = await client.complete({
+            code: options.code,
+            credentials: {
+                ...credentials,
+                access: credentials.access,
+                expires: credentials.expires,
+                refresh: credentials.refresh,
+            },
+        });
+        this.io.writeLine(`Credential added successfully: ${result.credentialId}`);
+    }
+}
+//# sourceMappingURL=login_command.js.map

package/dist/provider/login_command.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"login_command.js","sourceRoot":"","sources":["../../src/provider/login_command.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AAOnE;;;GAGG;AACH,MAAM,OAAO,oBAAoB;IAC/B,MAAM,CAAU,eAAe,GAAG,6BAA6B,CAAC;IAE/C,aAAa,CAA0C;IACvD,EAAE,CAAQ;IACV,gBAAgB,CAA2B;IAE5D,YACE,EAAS,EACT,gBAAyD,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,mBAAmB,CAAC,MAAM,CAAC,EACpG,mBAA6C,IAAI,wBAAwB,CAAC,EAAE,CAAC;QAE7E,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC;QACnC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,gBAAgB,GAAG,gBAAgB,CAAC;IAC3C,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,OAAoC;QAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAClD,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACnD,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,UAAU,OAAO,CAAC,YAAY,gBAAgB,OAAO,CAAC,cAAc,QAAQ,OAAO,CAAC,WAAW,GAAG,CAAC,CAAC;QACtH,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,gBAAgB,OAAO,CAAC,WAAW,gBAAgB,OAAO,CAAC,SAAS,GAAG,CAAC,CAAC;QAC3F,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;QACjF,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC;YACnC,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,WAAW,EAAE;gBACX,GAAG,WAAW;gBACd,MAAM,EAAE,WAAW,CAAC,MAAM;gBAC1B,OAAO,EAAE,WAAW,CAAC,OAAO;gBAC5B,OAAO,EAAE,WAAW,CAAC,OAAO;aAC7B;SACF,CAAC,CAAC;QACH,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,kCAAkC,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC;IAC7E,CAAC"}

package/dist/provider/oauth_login_runner.d.ts

@@ -0,0 +1,12 @@
+import { type OAuthCredentials } from "@mariozechner/pi-ai/oauth";
+import type { CliIo } from "../cli_io_interface.js";
+/**
+ * Runs the provider OAuth flow supplied by Pi Mono and adapts its terminal callbacks to CompanyHelm's
+ * small CLI IO interface. This keeps provider-specific login mechanics outside command parsing.
+ */
+export declare class ProviderOauthLoginRunner {
+    private readonly io;
+    constructor(io: CliIo);
+    login(providerId: string): Promise<OAuthCredentials>;
+    private static promptLabel;
+}

package/dist/provider/oauth_login_runner.js

@@ -0,0 +1,37 @@
+import { getOAuthProvider } from "@mariozechner/pi-ai/oauth";
+/**
+ * Runs the provider OAuth flow supplied by Pi Mono and adapts its terminal callbacks to CompanyHelm's
+ * small CLI IO interface. This keeps provider-specific login mechanics outside command parsing.
+ */
+export class ProviderOauthLoginRunner {
+    io;
+    constructor(io) {
+        this.io = io;
+    }
+    async login(providerId) {
+        const provider = getOAuthProvider(providerId);
+        if (!provider) {
+            throw new Error(`Pi OAuth provider is not registered: ${providerId}`);
+        }
+        return provider.login({
+            onAuth: (info) => {
+                if (info.instructions) {
+                    this.io.writeLine(info.instructions);
+                }
+                this.io.writeLine(info.url);
+            },
+            onManualCodeInput: async () => this.io.readLine("Paste the authorization code or redirect URL: "),
+            onProgress: (message) => {
+                this.io.writeLine(message);
+            },
+            onPrompt: async (prompt) => this.io.readLine(ProviderOauthLoginRunner.promptLabel(prompt)),
+        });
+    }
+    static promptLabel(prompt) {
+        if (prompt.placeholder) {
+            return `${prompt.message} (${prompt.placeholder}): `;
+        }
+        return `${prompt.message}: `;
+    }
+}
+//# sourceMappingURL=oauth_login_runner.js.map

package/dist/provider/oauth_login_runner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth_login_runner.js","sourceRoot":"","sources":["../../src/provider/oauth_login_runner.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAA2C,MAAM,2BAA2B,CAAC;AAGtG;;;GAGG;AACH,MAAM,OAAO,wBAAwB;IAClB,EAAE,CAAQ;IAE3B,YAAY,EAAS;QACnB,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC;IACf,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,UAAkB;QAC5B,MAAM,QAAQ,GAAG,gBAAgB,CAAC,UAAU,CAAC,CAAC;QAC9C,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CAAC,wCAAwC,UAAU,EAAE,CAAC,CAAC;QACxE,CAAC;QAED,OAAO,QAAQ,CAAC,KAAK,CAAC;YACpB,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;gBACf,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;oBACtB,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;gBACvC,CAAC;gBACD,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC9B,CAAC;YACD,iBAAiB,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,gDAAgD,CAAC;YACjG,UAAU,EAAE,CAAC,OAAO,EAAE,EAAE;gBACtB,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YAC7B,CAAC;YACD,QAAQ,EAAE,KAAK,EAAE,MAAmB,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,wBAAwB,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;SACxG,CAAC,CAAC;IACL,CAAC;IAEO,MAAM,CAAC,WAAW,CAAC,MAAmB;QAC5C,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;YACvB,OAAO,GAAG,MAAM,CAAC,OAAO,KAAK,MAAM,CAAC,WAAW,KAAK,CAAC;QACvD,CAAC;QAED,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,CAAC;IAC/B,CAAC;CACF"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@companyhelm/cli",
-  "version": "0.4.2",
+  "version": "0.4.3",
   "description": "CompanyHelm self-hosting command-line interface.",
   "repository": {
     "type": "git",
@@ -24,7 +24,8 @@
     "test": "npm run check && node --import tsx --test tests/*.test.ts"
   },
   "dependencies": {
-    "commander": "^14.0.3"
+    "commander": "^14.0.3",
+    "@mariozechner/pi-ai": "0.70.6"
   },
   "devDependencies": {
     "@types/node": "^20.19.41",