@companyhelm/cli 0.4.2 → 0.4.5

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 CompanyHelm
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,55 @@
+# CompanyHelm CLI
+
+Standalone source repository for the public `@companyhelm/cli` npm package.
+
+## Install or run
+
+Run the latest CLI without a global install:
+
+```bash
+npx -y @companyhelm/cli@latest --help
+```
+
+Complete a CompanyHelm provider subscription login command generated by the CompanyHelm web app:
+
+```bash
+npx -y @companyhelm/cli@latest provider login --code <code>
+```
+
+For non-production CompanyHelm API URLs, pass the generated API URL:
+
+```bash
+npx -y @companyhelm/cli@latest provider login --code <code> --api-url https://api.example.test
+```
+
+## Development
+
+```bash
+npm ci
+npm run check
+npm run test
+npm run build
+```
+
+Local development entrypoint:
+
+```bash
+npm run dev -- provider --help
+```
+
+## Publishing
+
+This repository publishes `@companyhelm/cli` with npm trusted publishing from GitHub Actions.
+
+Trusted publisher configuration on npm must match:
+
+- Repository: `CompanyHelm/companyhelm-cli`
+- Workflow filename: `npm-publish.yml`
+- Environment: blank / no environment
+
+Publish options:
+
+1. Create and push a semver tag such as `v0.4.5` on a commit contained in `main`.
+2. Or manually run the **Publish npm package** workflow from `main`.
+
+The workflow verifies the package, packs it, skips if the exact version is already on npm, and publishes with provenance using OIDC.

package/dist/cli_io_interface.d.ts

@@ -3,6 +3,8 @@
  * coupling business behavior to process globals or a specific terminal stream.
  */
 export interface CliIo {
+    /** Reads a single input line from the CLI user. */
+    readLine(prompt: string): Promise<string>;
     /** Writes a normal output line to the CLI user. */
     writeLine(message: string): void;
     /** Writes an error output line to the CLI user. */

package/dist/companyhelm_cli.d.ts

@@ -8,11 +8,13 @@ import type { CliIo } from "./cli_io_interface.js";
 export declare class CompanyHelmCli {
     private readonly io;
     constructor(io?: CliIo);
-    run(argv: string[]): Promise<void>;
+    run(argv: string[]): Promise<number>;
     createProgram(): Command;
     private createStatusCommand;
     private createServerCommand;
     private createRunnerCommand;
+    private createProviderCommand;
+    private static errorMessage;
     private printStatus;
     private printServerCommand;
     private printRunnerCommand;

package/dist/companyhelm_cli.js

@@ -1,6 +1,8 @@
 import { readFileSync } from "node:fs";
 import { Command } from "commander";
 import { ConsoleIo } from "./console_io.js";
+import { ProviderLoginCommand } from "./provider/login_command.js";
+import { TerminalStyle } from "./terminal_style.js";
 /**
  * Defines the public `companyhelm` command that npm users install. The initial
  * command surface intentionally focuses on package discovery and local stack
@@ -12,9 +14,16 @@ export class CompanyHelmCli {
         this.io = io;
     }
     async run(argv) {
-        await this.createProgram().parseAsync(argv, {
-            from: "node",
-        });
+        try {
+            await this.createProgram().parseAsync(argv, {
+                from: "node",
+            });
+            return 0;
+        }
+        catch (error) {
+            this.io.writeError(TerminalStyle.error(CompanyHelmCli.errorMessage(error)));
+            return 1;
+        }
     }
     createProgram() {
         const program = new Command()
@@ -29,6 +38,7 @@ export class CompanyHelmCli {
         program.addCommand(this.createStatusCommand());
         program.addCommand(this.createServerCommand());
         program.addCommand(this.createRunnerCommand());
+        program.addCommand(this.createProviderCommand());
         return program;
     }
     createStatusCommand() {
@@ -48,6 +58,30 @@ export class CompanyHelmCli {
             .argument("[command]", "Runner command to prepare for.", "start")
             .action((command) => this.printRunnerCommand(command));
     }
+    createProviderCommand() {
+        const providerCommand = new Command("provider")
+            .description("Work with CompanyHelm model provider credentials.");
+        providerCommand.addCommand(new Command("login")
+            .description("Complete a provider subscription credential login request.")
+            .requiredOption("--code <code>", "Provider login code from CompanyHelm.")
+            .option("--api-url <url>", "CompanyHelm API URL.", ProviderLoginCommand.DEFAULT_API_URL)
+            .action(async (options) => {
+            await new ProviderLoginCommand(this.io).run({
+                apiUrl: options.apiUrl,
+                code: options.code,
+            });
+        }));
+        return providerCommand;
+    }
+    static errorMessage(error) {
+        if (error instanceof Error && error.message.length > 0) {
+            if (error.message === "This login code is invalid or expired.") {
+                return "This login code is invalid or expired. Create a new provider login command in CompanyHelm and run it again.";
+            }
+            return error.message;
+        }
+        return "CompanyHelm CLI failed. Try again, or contact support if the issue continues.";
+    }
     printStatus() {
         this.io.writeLine("CompanyHelm CLI is installed.");
         this.io.writeLine("Main CLI package: @companyhelm/cli");

package/dist/companyhelm_cli.js.map

@@ -1 +1 @@
-{"version":3,"file":"companyhelm_cli.js","sourceRoot":"","sources":["../src/companyhelm_cli.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAM5C;;;;GAIG;AACH,MAAM,OAAO,cAAc;IACR,EAAE,CAAQ;IAE3B,YAAY,KAAY,IAAI,SAAS,EAAE;QACrC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC;IACf,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,IAAc;QACtB,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE;YAC1C,IAAI,EAAE,MAAM;SACb,CAAC,CAAC;IACL,CAAC;IAED,aAAa;QACX,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE;aAC1B,IAAI,CAAC,aAAa,CAAC;aACnB,WAAW,CAAC,+BAA+B,CAAC;aAC5C,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;aAC3B,kBAAkB,EAAE;aACpB,eAAe,CAAC;YACf,QAAQ,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;YAC5D,QAAQ,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;SAC5D,CAAC,CAAC;QAEL,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,mBAAmB,EAAE,CAAC,CAAC;QAC/C,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,mBAAmB,EAAE,CAAC,CAAC;QAC/C,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,mBAAmB,EAAE,CAAC,CAAC;QAC/C,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,mBAAmB;QACzB,OAAO,IAAI,OAAO,CAAC,QAAQ,CAAC;aACzB,WAAW,CAAC,oDAAoD,CAAC;aACjE,MAAM,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;IACtC,CAAC;IAEO,mBAAmB;QACzB,OAAO,IAAI,OAAO,CAAC,QAAQ,CAAC;aACzB,WAAW,CAAC,uDAAuD,CAAC;aACpE,QAAQ,CAAC,WAAW,EAAE,gCAAgC,EAAE,OAAO,CAAC;aAChE,MAAM,CAAC,CAAC,OAAe,EAAE,EAAE,CAAC,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC;IACnE,CAAC;IAEO,mBAAmB;QACzB,OAAO,IAAI,OAAO,CAAC,QAAQ,CAAC;aACzB,WAAW,CAAC,uDAAuD,CAAC;aACpE,QAAQ,CAAC,WAAW,EAAE,gCAAgC,EAAE,OAAO,CAAC;aAChE,MAAM,CAAC,CAAC,OAAe,EAAE,EAAE,CAAC,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC;IACnE,CAAC;IAEO,WAAW;QACjB,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,+BAA+B,CAAC,CAAC;QACnD,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,oCAAoC,CAAC,CAAC;QACxD,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,qCAAqC,CAAC,CAAC;QACzD,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,+CAA+C,CAAC,CAAC;IACrE,CAAC;IAEO,kBAAkB,CAAC,OAAe;QACxC,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,6BAA6B,OAAO,EAAE,CAAC,CAAC;QAC1D,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,0HAA0H,CAAC,CAAC;IAChJ,CAAC;IAEO,kBAAkB,CAAC,OAAe;QACxC,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,6BAA6B,OAAO,EAAE,CAAC,CAAC;QAC1D,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,4IAA4I,CAAC,CAAC;IAClK,CAAC;IAEO,WAAW;QACjB,MAAM,eAAe,GAAG,IAAI,CAAC,KAAK,CAChC,YAAY,CAAC,IAAI,GAAG,CAAC,iBAAiB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAC/C,CAAC;QAErB,IAAI,OAAO,eAAe,CAAC,OAAO,KAAK,QAAQ,IAAI,eAAe,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxF,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,OAAO,eAAe,CAAC,OAAO,CAAC;IACjC,CAAC;CACF"}
+{"version":3,"file":"companyhelm_cli.js","sourceRoot":"","sources":["../src/companyhelm_cli.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACnE,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAMpD;;;;GAIG;AACH,MAAM,OAAO,cAAc;IACR,EAAE,CAAQ;IAE3B,YAAY,KAAY,IAAI,SAAS,EAAE;QACrC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC;IACf,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,IAAc;QACtB,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE;gBAC1C,IAAI,EAAE,MAAM;aACb,CAAC,CAAC;YACH,OAAO,CAAC,CAAC;QACX,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC,KAAK,CAAC,cAAc,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAC5E,OAAO,CAAC,CAAC;QACX,CAAC;IACH,CAAC;IAED,aAAa;QACX,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE;aAC1B,IAAI,CAAC,aAAa,CAAC;aACnB,WAAW,CAAC,+BAA+B,CAAC;aAC5C,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;aAC3B,kBAAkB,EAAE;aACpB,eAAe,CAAC;YACf,QAAQ,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;YAC5D,QAAQ,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;SAC5D,CAAC,CAAC;QAEL,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,mBAAmB,EAAE,CAAC,CAAC;QAC/C,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,mBAAmB,EAAE,CAAC,CAAC;QAC/C,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,mBAAmB,EAAE,CAAC,CAAC;QAC/C,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,qBAAqB,EAAE,CAAC,CAAC;QACjD,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,mBAAmB;QACzB,OAAO,IAAI,OAAO,CAAC,QAAQ,CAAC;aACzB,WAAW,CAAC,oDAAoD,CAAC;aACjE,MAAM,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;IACtC,CAAC;IAEO,mBAAmB;QACzB,OAAO,IAAI,OAAO,CAAC,QAAQ,CAAC;aACzB,WAAW,CAAC,uDAAuD,CAAC;aACpE,QAAQ,CAAC,WAAW,EAAE,gCAAgC,EAAE,OAAO,CAAC;aAChE,MAAM,CAAC,CAAC,OAAe,EAAE,EAAE,CAAC,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC;IACnE,CAAC;IAEO,mBAAmB;QACzB,OAAO,IAAI,OAAO,CAAC,QAAQ,CAAC;aACzB,WAAW,CAAC,uDAAuD,CAAC;aACpE,QAAQ,CAAC,WAAW,EAAE,gCAAgC,EAAE,OAAO,CAAC;aAChE,MAAM,CAAC,CAAC,OAAe,EAAE,EAAE,CAAC,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC;IACnE,CAAC;IAGO,qBAAqB;QAC3B,MAAM,eAAe,GAAG,IAAI,OAAO,CAAC,UAAU,CAAC;aAC5C,WAAW,CAAC,mDAAmD,CAAC,CAAC;QAEpE,eAAe,CAAC,UAAU,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC;aAC5C,WAAW,CAAC,4DAA4D,CAAC;aACzE,cAAc,CAAC,eAAe,EAAE,uCAAuC,CAAC;aACxE,MAAM,CAAC,iBAAiB,EAAE,sBAAsB,EAAE,oBAAoB,CAAC,eAAe,CAAC;aACvF,MAAM,CAAC,KAAK,EAAE,OAAyC,EAAE,EAAE;YAC1D,MAAM,IAAI,oBAAoB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC;gBAC1C,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,IAAI,EAAE,OAAO,CAAC,IAAI;aACnB,CAAC,CAAC;QACL,CAAC,CAAC,CAAC,CAAC;QAEN,OAAO,eAAe,CAAC;IACzB,CAAC;IAEO,MAAM,CAAC,YAAY,CAAC,KAAc;QACxC,IAAI,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvD,IAAI,KAAK,CAAC,OAAO,KAAK,wCAAwC,EAAE,CAAC;gBAC/D,OAAO,6GAA6G,CAAC;YACvH,CAAC;YAED,OAAO,KAAK,CAAC,OAAO,CAAC;QACvB,CAAC;QAED,OAAO,+EAA+E,CAAC;IACzF,CAAC;IAEO,WAAW;QACjB,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,+BAA+B,CAAC,CAAC;QACnD,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,oCAAoC,CAAC,CAAC;QACxD,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,qCAAqC,CAAC,CAAC;QACzD,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,+CAA+C,CAAC,CAAC;IACrE,CAAC;IAEO,kBAAkB,CAAC,OAAe;QACxC,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,6BAA6B,OAAO,EAAE,CAAC,CAAC;QAC1D,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,0HAA0H,CAAC,CAAC;IAChJ,CAAC;IAEO,kBAAkB,CAAC,OAAe;QACxC,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,6BAA6B,OAAO,EAAE,CAAC,CAAC;QAC1D,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,4IAA4I,CAAC,CAAC;IAClK,CAAC;IAEO,WAAW;QACjB,MAAM,eAAe,GAAG,IAAI,CAAC,KAAK,CAChC,YAAY,CAAC,IAAI,GAAG,CAAC,iBAAiB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAC/C,CAAC;QAErB,IAAI,OAAO,eAAe,CAAC,OAAO,KAAK,QAAQ,IAAI,eAAe,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxF,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,OAAO,eAAe,CAAC,OAAO,CAAC;IACjC,CAAC;CACF"}

package/dist/console_io.d.ts

@@ -4,6 +4,7 @@ import type { CliIo } from "./cli_io_interface.js";
  * binaries while keeping command handlers independent from global console APIs.
  */
 export declare class ConsoleIo implements CliIo {
+    readLine(prompt: string): Promise<string>;
     writeLine(message: string): void;
     writeError(message: string): void;
 }

package/dist/console_io.js

@@ -1,8 +1,19 @@
+import { createInterface } from "node:readline/promises";
+import { stdin as input, stdout as output } from "node:process";
 /**
  * Bridges the CLI output interface to the process streams used by npm-created
  * binaries while keeping command handlers independent from global console APIs.
  */
 export class ConsoleIo {
+    async readLine(prompt) {
+        const readline = createInterface({ input, output });
+        try {
+            return await readline.question(prompt);
+        }
+        finally {
+            readline.close();
+        }
+    }
     writeLine(message) {
         process.stdout.write(`${message}\n`);
     }

package/dist/console_io.js.map

@@ -1 +1 @@
-{"version":3,"file":"console_io.js","sourceRoot":"","sources":["../src/console_io.ts"],"names":[],"mappings":"AAEA;;;GAGG;AACH,MAAM,OAAO,SAAS;IACpB,SAAS,CAAC,OAAe;QACvB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,OAAO,IAAI,CAAC,CAAC;IACvC,CAAC;IAED,UAAU,CAAC,OAAe;QACxB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,OAAO,IAAI,CAAC,CAAC;IACvC,CAAC;CACF"}
+{"version":3,"file":"console_io.js","sourceRoot":"","sources":["../src/console_io.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,KAAK,IAAI,KAAK,EAAE,MAAM,IAAI,MAAM,EAAE,MAAM,cAAc,CAAC;AAGhE;;;GAGG;AACH,MAAM,OAAO,SAAS;IACpB,KAAK,CAAC,QAAQ,CAAC,MAAc;QAC3B,MAAM,QAAQ,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;QACpD,IAAI,CAAC;YACH,OAAO,MAAM,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACzC,CAAC;gBAAS,CAAC;YACT,QAAQ,CAAC,KAAK,EAAE,CAAC;QACnB,CAAC;IACH,CAAC;IAED,SAAS,CAAC,OAAe;QACvB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,OAAO,IAAI,CAAC,CAAC;IACvC,CAAC;IAED,UAAU,CAAC,OAAe;QACxB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,OAAO,IAAI,CAAC,CAAC;IACvC,CAAC;CACF"}

package/dist/index.js

@@ -1,4 +1,4 @@
 #!/usr/bin/env node
 import { CompanyHelmCli } from "./companyhelm_cli.js";
-await new CompanyHelmCli().run(process.argv);
+process.exitCode = await new CompanyHelmCli().run(process.argv);
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAEtD,MAAM,IAAI,cAAc,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAEtD,OAAO,CAAC,QAAQ,GAAG,MAAM,IAAI,cAAc,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC"}

package/dist/provider/login_client.d.ts

@@ -0,0 +1,34 @@
+export type ProviderLoginResolvedRequest = {
+    companyName: string;
+    credentialName: string;
+    expiresAt: string;
+    modelProvider: string;
+    piOauthProviderId: string;
+    providerName: string;
+    requestId: string;
+    requestedBy: string;
+};
+export type ProviderLoginCredentials = {
+    access: string;
+    expires: number;
+    refresh: string;
+    [key: string]: unknown;
+};
+/**
+ * Calls the CompanyHelm provider credential login endpoints using only the short-lived code as the
+ * bearer capability. The CLI intentionally does not need a browser session or a long-lived API key.
+ */
+export declare class ProviderLoginClient {
+    private readonly apiUrl;
+    constructor(apiUrl: string);
+    resolve(code: string): Promise<ProviderLoginResolvedRequest>;
+    complete(input: {
+        code: string;
+        credentials: ProviderLoginCredentials;
+    }): Promise<{
+        credentialId: string;
+        status: string;
+    }>;
+    private parseResponse;
+    private static normalizeApiUrl;
+}

package/dist/provider/login_client.js

@@ -0,0 +1,41 @@
+/**
+ * Calls the CompanyHelm provider credential login endpoints using only the short-lived code as the
+ * bearer capability. The CLI intentionally does not need a browser session or a long-lived API key.
+ */
+export class ProviderLoginClient {
+    apiUrl;
+    constructor(apiUrl) {
+        this.apiUrl = ProviderLoginClient.normalizeApiUrl(apiUrl);
+    }
+    async resolve(code) {
+        const url = new URL("/model-provider-credential-login/resolve", this.apiUrl);
+        url.searchParams.set("code", code);
+        const response = await fetch(url);
+        return this.parseResponse(response);
+    }
+    async complete(input) {
+        const response = await fetch(new URL("/model-provider-credential-login/complete", this.apiUrl), {
+            body: JSON.stringify(input),
+            headers: {
+                "content-type": "application/json",
+            },
+            method: "POST",
+        });
+        return this.parseResponse(response);
+    }
+    async parseResponse(response) {
+        const payload = await response.json().catch(() => null);
+        if (!response.ok) {
+            throw new Error(payload?.error || `CompanyHelm API request failed with status ${response.status}.`);
+        }
+        return payload;
+    }
+    static normalizeApiUrl(apiUrl) {
+        const parsedUrl = new URL(apiUrl);
+        parsedUrl.pathname = parsedUrl.pathname.replace(/\/$/u, "");
+        parsedUrl.search = "";
+        parsedUrl.hash = "";
+        return parsedUrl.toString();
+    }
+}
+//# sourceMappingURL=login_client.js.map

package/dist/provider/login_client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"login_client.js","sourceRoot":"","sources":["../../src/provider/login_client.ts"],"names":[],"mappings":"AAkBA;;;GAGG;AACH,MAAM,OAAO,mBAAmB;IACb,MAAM,CAAS;IAEhC,YAAY,MAAc;QACxB,IAAI,CAAC,MAAM,GAAG,mBAAmB,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;IAC5D,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,IAAY;QACxB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,0CAA0C,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAC7E,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACnC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;QAClC,OAAO,IAAI,CAAC,aAAa,CAA+B,QAAQ,CAAC,CAAC;IACpE,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,KAGd;QACC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,GAAG,CAAC,2CAA2C,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE;YAC9F,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;YAC3B,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;aACnC;YACD,MAAM,EAAE,MAAM;SACf,CAAC,CAAC;QAEH,OAAO,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;IACtC,CAAC;IAEO,KAAK,CAAC,aAAa,CAAI,QAAkB;QAC/C,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAA8B,CAAC;QACrF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,OAAO,EAAE,KAAK,IAAI,8CAA8C,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;QACtG,CAAC;QAED,OAAO,OAAY,CAAC;IACtB,CAAC;IAEO,MAAM,CAAC,eAAe,CAAC,MAAc;QAC3C,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;QAClC,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAC5D,SAAS,CAAC,MAAM,GAAG,EAAE,CAAC;QACtB,SAAS,CAAC,IAAI,GAAG,EAAE,CAAC;QACpB,OAAO,SAAS,CAAC,QAAQ,EAAE,CAAC;IAC9B,CAAC;CACF"}

package/dist/provider/login_command.d.ts

@@ -0,0 +1,19 @@
+import type { CliIo } from "../cli_io_interface.js";
+import { ProviderLoginClient } from "./login_client.js";
+import { ProviderOauthLoginRunner } from "./oauth_login_runner.js";
+export type ProviderLoginCommandOptions = {
+    apiUrl: string;
+    code: string;
+};
+/**
+ * Implements `companyhelm provider login` by resolving the web-generated code, running the matching
+ * local OAuth flow, and atomically completing the CompanyHelm credential request.
+ */
+export declare class ProviderLoginCommand {
+    static readonly DEFAULT_API_URL = "https://api.companyhelm.com";
+    private readonly clientFactory;
+    private readonly io;
+    private readonly oauthLoginRunner;
+    constructor(io: CliIo, clientFactory?: (apiUrl: string) => ProviderLoginClient, oauthLoginRunner?: ProviderOauthLoginRunner);
+    run(options: ProviderLoginCommandOptions): Promise<void>;
+}

package/dist/provider/login_command.js

@@ -0,0 +1,40 @@
+import { TerminalStyle } from "../terminal_style.js";
+import { ProviderLoginClient } from "./login_client.js";
+import { ProviderOauthLoginRunner } from "./oauth_login_runner.js";
+/**
+ * Implements `companyhelm provider login` by resolving the web-generated code, running the matching
+ * local OAuth flow, and atomically completing the CompanyHelm credential request.
+ */
+export class ProviderLoginCommand {
+    static DEFAULT_API_URL = "https://api.companyhelm.com";
+    clientFactory;
+    io;
+    oauthLoginRunner;
+    constructor(io, clientFactory = (apiUrl) => new ProviderLoginClient(apiUrl), oauthLoginRunner = new ProviderOauthLoginRunner(io)) {
+        this.clientFactory = clientFactory;
+        this.io = io;
+        this.oauthLoginRunner = oauthLoginRunner;
+    }
+    async run(options) {
+        const client = this.clientFactory(options.apiUrl);
+        const request = await client.resolve(options.code);
+        this.io.writeLine(TerminalStyle.info(`Adding ${request.providerName} credential to CompanyHelm.`));
+        this.io.writeLine(TerminalStyle.detail("Credential", request.credentialName));
+        this.io.writeLine(TerminalStyle.detail("Company", request.companyName));
+        this.io.writeLine(TerminalStyle.detail("Requested by", request.requestedBy));
+        this.io.writeLine(TerminalStyle.detail("Expires", request.expiresAt));
+        const credentials = await this.oauthLoginRunner.login(request.piOauthProviderId);
+        this.io.writeLine(TerminalStyle.progress("Saving credential in CompanyHelm..."));
+        await client.complete({
+            code: options.code,
+            credentials: {
+                ...credentials,
+                access: credentials.access,
+                expires: credentials.expires,
+                refresh: credentials.refresh,
+            },
+        });
+        this.io.writeLine(TerminalStyle.success(`Credential "${request.credentialName}" added to ${request.companyName}.`));
+    }
+}
+//# sourceMappingURL=login_command.js.map

package/dist/provider/login_command.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"login_command.js","sourceRoot":"","sources":["../../src/provider/login_command.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AAOnE;;;GAGG;AACH,MAAM,OAAO,oBAAoB;IAC/B,MAAM,CAAU,eAAe,GAAG,6BAA6B,CAAC;IAE/C,aAAa,CAA0C;IACvD,EAAE,CAAQ;IACV,gBAAgB,CAA2B;IAE5D,YACE,EAAS,EACT,gBAAyD,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,mBAAmB,CAAC,MAAM,CAAC,EACpG,mBAA6C,IAAI,wBAAwB,CAAC,EAAE,CAAC;QAE7E,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC;QACnC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,gBAAgB,GAAG,gBAAgB,CAAC;IAC3C,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,OAAoC;QAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAClD,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACnD,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,aAAa,CAAC,IAAI,CAAC,UAAU,OAAO,CAAC,YAAY,6BAA6B,CAAC,CAAC,CAAC;QACnG,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,aAAa,CAAC,MAAM,CAAC,YAAY,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC;QAC9E,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,aAAa,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC;QACxE,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,aAAa,CAAC,MAAM,CAAC,cAAc,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC;QAC7E,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,aAAa,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;QACtE,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;QACjF,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,aAAa,CAAC,QAAQ,CAAC,qCAAqC,CAAC,CAAC,CAAC;QACjF,MAAM,MAAM,CAAC,QAAQ,CAAC;YACpB,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,WAAW,EAAE;gBACX,GAAG,WAAW;gBACd,MAAM,EAAE,WAAW,CAAC,MAAM;gBAC1B,OAAO,EAAE,WAAW,CAAC,OAAO;gBAC5B,OAAO,EAAE,WAAW,CAAC,OAAO;aAC7B;SACF,CAAC,CAAC;QACH,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,aAAa,CAAC,OAAO,CAAC,eAAe,OAAO,CAAC,cAAc,cAAc,OAAO,CAAC,WAAW,GAAG,CAAC,CAAC,CAAC;IACtH,CAAC"}

package/dist/provider/oauth_login_runner.d.ts

@@ -0,0 +1,11 @@
+import { type OAuthCredentials } from "@mariozechner/pi-ai/oauth";
+import type { CliIo } from "../cli_io_interface.js";
+/**
+ * Runs the provider OAuth flow supplied by Pi Mono and adapts its terminal callbacks to CompanyHelm's
+ * small CLI IO interface. This keeps provider-specific login mechanics outside command parsing.
+ */
+export declare class ProviderOauthLoginRunner {
+    private readonly io;
+    constructor(io: CliIo);
+    login(providerId: string): Promise<OAuthCredentials>;
+}

package/dist/provider/oauth_login_runner.js

@@ -0,0 +1,31 @@
+import { getOAuthProvider } from "@mariozechner/pi-ai/oauth";
+import { TerminalStyle } from "../terminal_style.js";
+/**
+ * Runs the provider OAuth flow supplied by Pi Mono and adapts its terminal callbacks to CompanyHelm's
+ * small CLI IO interface. This keeps provider-specific login mechanics outside command parsing.
+ */
+export class ProviderOauthLoginRunner {
+    io;
+    constructor(io) {
+        this.io = io;
+    }
+    async login(providerId) {
+        const provider = getOAuthProvider(providerId);
+        if (!provider) {
+            throw new Error(`Pi OAuth provider is not registered: ${providerId}`);
+        }
+        return provider.login({
+            onAuth: (info) => {
+                this.io.writeLine(TerminalStyle.info("Complete the provider login in your browser."));
+                this.io.writeLine(TerminalStyle.detail("Login URL", info.url));
+            },
+            onProgress: (message) => {
+                this.io.writeLine(TerminalStyle.progress(message));
+            },
+            onPrompt: async () => {
+                throw new Error("CompanyHelm CLI did not receive the provider browser callback. Open the login URL on this machine and try again.");
+            },
+        });
+    }
+}
+//# sourceMappingURL=oauth_login_runner.js.map

package/dist/provider/oauth_login_runner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth_login_runner.js","sourceRoot":"","sources":["../../src/provider/oauth_login_runner.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAyB,MAAM,2BAA2B,CAAC;AAEpF,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAErD;;;GAGG;AACH,MAAM,OAAO,wBAAwB;IAClB,EAAE,CAAQ;IAE3B,YAAY,EAAS;QACnB,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC;IACf,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,UAAkB;QAC5B,MAAM,QAAQ,GAAG,gBAAgB,CAAC,UAAU,CAAC,CAAC;QAC9C,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CAAC,wCAAwC,UAAU,EAAE,CAAC,CAAC;QACxE,CAAC;QAED,OAAO,QAAQ,CAAC,KAAK,CAAC;YACpB,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;gBACf,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,aAAa,CAAC,IAAI,CAAC,8CAA8C,CAAC,CAAC,CAAC;gBACtF,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,aAAa,CAAC,MAAM,CAAC,WAAW,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;YACjE,CAAC;YACD,UAAU,EAAE,CAAC,OAAO,EAAE,EAAE;gBACtB,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,aAAa,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;YACrD,CAAC;YACD,QAAQ,EAAE,KAAK,IAAI,EAAE;gBACnB,MAAM,IAAI,KAAK,CACb,kHAAkH,CACnH,CAAC;YACJ,CAAC;SACF,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/terminal_style.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Formats concise terminal status lines with ANSI color while keeping the command handlers focused on
+ * provider login behavior. The output intentionally stays readable when colors are not interpreted.
+ */
+export declare class TerminalStyle {
+    static readonly blue = "\u001B[34m";
+    static readonly green = "\u001B[32m";
+    static readonly gray = "\u001B[90m";
+    static readonly red = "\u001B[31m";
+    static readonly reset = "\u001B[0m";
+    static readonly yellow = "\u001B[33m";
+    static detail(label: string, value: string): string;
+    static error(message: string): string;
+    static info(message: string): string;
+    static progress(message: string): string;
+    static success(message: string): string;
+}

package/dist/terminal_style.js

@@ -0,0 +1,28 @@
+/**
+ * Formats concise terminal status lines with ANSI color while keeping the command handlers focused on
+ * provider login behavior. The output intentionally stays readable when colors are not interpreted.
+ */
+export class TerminalStyle {
+    static blue = "\u001B[34m";
+    static green = "\u001B[32m";
+    static gray = "\u001B[90m";
+    static red = "\u001B[31m";
+    static reset = "\u001B[0m";
+    static yellow = "\u001B[33m";
+    static detail(label, value) {
+        return `${TerminalStyle.gray}•${TerminalStyle.reset} ${label}: ${value}`;
+    }
+    static error(message) {
+        return `${TerminalStyle.red}❌${TerminalStyle.reset} ${message}`;
+    }
+    static info(message) {
+        return `${TerminalStyle.blue}ℹ${TerminalStyle.reset} ${message}`;
+    }
+    static progress(message) {
+        return `${TerminalStyle.yellow}⏳${TerminalStyle.reset} ${message}`;
+    }
+    static success(message) {
+        return `${TerminalStyle.green}✅${TerminalStyle.reset} ${message}`;
+    }
+}
+//# sourceMappingURL=terminal_style.js.map

package/dist/terminal_style.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"terminal_style.js","sourceRoot":"","sources":["../src/terminal_style.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,MAAM,OAAO,aAAa;IACxB,MAAM,CAAU,IAAI,GAAG,YAAY,CAAC;IACpC,MAAM,CAAU,KAAK,GAAG,YAAY,CAAC;IACrC,MAAM,CAAU,IAAI,GAAG,YAAY,CAAC;IACpC,MAAM,CAAU,GAAG,GAAG,YAAY,CAAC;IACnC,MAAM,CAAU,KAAK,GAAG,WAAW,CAAC;IACpC,MAAM,CAAU,MAAM,GAAG,YAAY,CAAC;IAEtC,MAAM,CAAC,MAAM,CAAC,KAAa,EAAE,KAAa;QACxC,OAAO,GAAG,aAAa,CAAC,IAAI,IAAI,aAAa,CAAC,KAAK,IAAI,KAAK,KAAK,KAAK,EAAE,CAAC;IAC3E,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,OAAe;QAC1B,OAAO,GAAG,aAAa,CAAC,GAAG,IAAI,aAAa,CAAC,KAAK,IAAI,OAAO,EAAE,CAAC;IAClE,CAAC;IAED,MAAM,CAAC,IAAI,CAAC,OAAe;QACzB,OAAO,GAAG,aAAa,CAAC,IAAI,IAAI,aAAa,CAAC,KAAK,IAAI,OAAO,EAAE,CAAC;IACnE,CAAC;IAED,MAAM,CAAC,QAAQ,CAAC,OAAe;QAC7B,OAAO,GAAG,aAAa,CAAC,MAAM,IAAI,aAAa,CAAC,KAAK,IAAI,OAAO,EAAE,CAAC;IACrE,CAAC;IAED,MAAM,CAAC,OAAO,CAAC,OAAe;QAC5B,OAAO,GAAG,aAAa,CAAC,KAAK,IAAI,aAAa,CAAC,KAAK,IAAI,OAAO,EAAE,CAAC;IACpE,CAAC"}

package/package.json

@@ -1,12 +1,16 @@
 {
   "name": "@companyhelm/cli",
-  "version": "0.4.2",
-  "description": "CompanyHelm self-hosting command-line interface.",
+  "version": "0.4.5",
+  "description": "CompanyHelm command-line interface.",
   "repository": {
     "type": "git",
-    "url": "git+https://github.com/CompanyHelm/companyhelm.git",
-    "directory": "packages/cli"
+    "url": "git+https://github.com/CompanyHelm/companyhelm-cli.git"
   },
+  "homepage": "https://github.com/CompanyHelm/companyhelm-cli#readme",
+  "bugs": {
+    "url": "https://github.com/CompanyHelm/companyhelm-cli/issues"
+  },
+  "license": "MIT",
   "type": "module",
   "bin": {
     "companyhelm": "dist/index.js"
@@ -24,13 +28,20 @@
     "test": "npm run check && node --import tsx --test tests/*.test.ts"
   },
   "dependencies": {
+    "@mariozechner/pi-ai": "0.70.6",
     "commander": "^14.0.3"
   },
   "devDependencies": {
+    "@eslint/js": "^10.0.1",
     "@types/node": "^20.19.41",
-    "typescript": "^5.9.3"
+    "eslint": "^10.1.0",
+    "globals": "^17.4.0",
+    "tsx": "^4.21.0",
+    "typescript": "^5.9.3",
+    "typescript-eslint": "^8.57.1"
   },
   "engines": {
     "node": ">=20.20.0"
-  }
+  },
+  "packageManager": "npm@11.6.2"
 }