@creator-notes/cnotes 0.16.11

package/dist/commands/workspace.js

@@ -0,0 +1,176 @@
+import { select } from "@inquirer/prompts";
+import { ApiClient } from "../lib/api-client.js";
+import { resolveBaseConfig } from "../lib/config.js";
+import { loadConfig, setWorkspaceId } from "../lib/auth-store.js";
+import { handleError, AuthError } from "../lib/errors.js";
+import { outputJson, outputTable } from "../lib/output.js";
+/**
+ * Select a workspace from a pre-fetched list, or fetch from the API if not provided.
+ * Auto-selects if only one workspace exists.
+ * Returns null if no workspaces are available.
+ */
+export async function fetchAndSelectWorkspace(serverUrl, token, currentWorkspaceId, prefetchedWorkspaces) {
+    let list;
+    if (prefetchedWorkspaces) {
+        list = prefetchedWorkspaces;
+    }
+    else {
+        const api = new ApiClient(serverUrl, token);
+        const data = await api.get("/api/workspaces");
+        const workspaces = data.workspaces || data;
+        list = Array.isArray(workspaces) ? workspaces : [];
+    }
+    if (list.length === 0)
+        return null;
+    let chosenId;
+    let chosenName;
+    if (list.length === 1) {
+        chosenId = String(list[0]._id || list[0].id || "");
+        chosenName = String(list[0].name || "(unnamed)");
+    }
+    else {
+        chosenId = await select({
+            message: "Select a workspace to activate:",
+            choices: list.map((w) => ({
+                name: `${String(w.name || "(unnamed)")}${(w._id || w.id) === currentWorkspaceId ? "  (active)" : ""}`,
+                value: String(w._id || w.id || ""),
+            })),
+        });
+        chosenName = String(list.find((w) => String(w._id || w.id) === chosenId)?.name || "(unnamed)");
+    }
+    const config = loadConfig();
+    setWorkspaceId(config, serverUrl, chosenId);
+    return { id: chosenId, name: chosenName };
+}
+export function registerWorkspaceCommands(program) {
+    const ws = program
+        .command("workspace")
+        .alias("ws")
+        .description("Manage workspaces");
+    ws
+        .command("list")
+        .description("List your workspaces")
+        .addHelpText("after", `
+Examples:
+  $ cnotes workspace list --json
+`)
+        .action(async () => {
+        const opts = program.opts();
+        const cfg = resolveBaseConfig(opts);
+        if (!cfg.token)
+            throw new AuthError();
+        const api = new ApiClient(cfg.serverUrl, cfg.token);
+        try {
+            const data = await api.get("/api/workspaces");
+            const workspaces = data.workspaces || data;
+            if (cfg.json) {
+                outputJson(workspaces);
+            }
+            else if (process.stdout.isTTY) {
+                const list = Array.isArray(workspaces) ? workspaces : [];
+                const result = await fetchAndSelectWorkspace(cfg.serverUrl, cfg.token, cfg.workspaceId, list);
+                if (!result) {
+                    console.log("No workspaces found.");
+                }
+                else {
+                    console.log(`Active workspace set to ${result.name}`);
+                }
+            }
+            else {
+                const rows = (Array.isArray(workspaces) ? workspaces : []).map((w) => [
+                    String(w._id || w.id || ""),
+                    String(w.name || ""),
+                    (w._id || w.id) === cfg.workspaceId ? "(active)" : "",
+                ]);
+                outputTable(["ID", "NAME", ""], rows);
+            }
+        }
+        catch (error) {
+            handleError(error, cfg.json);
+        }
+    });
+    ws
+        .command("select")
+        .description("Set the active workspace")
+        .argument("<id>", "Workspace ID")
+        .action(async (id) => {
+        const opts = program.opts();
+        const cfg = resolveBaseConfig(opts);
+        try {
+            const config = loadConfig();
+            setWorkspaceId(config, cfg.serverUrl, id);
+            if (cfg.json) {
+                outputJson({ workspaceId: id });
+            }
+            else {
+                console.log(`Active workspace set to ${id}`);
+            }
+        }
+        catch (error) {
+            handleError(error, cfg.json);
+        }
+    });
+    ws
+        .command("current")
+        .description("Show the active workspace")
+        .addHelpText("after", `
+Examples:
+  $ cnotes workspace current --json
+`)
+        .action(async () => {
+        const opts = program.opts();
+        const cfg = resolveBaseConfig(opts);
+        try {
+            if (!cfg.workspaceId) {
+                if (cfg.json) {
+                    outputJson({ workspaceId: null });
+                }
+                else {
+                    console.log("No workspace selected. Run `cnotes workspace select <id>`");
+                }
+                return;
+            }
+            if (!cfg.token)
+                throw new AuthError();
+            const api = new ApiClient(cfg.serverUrl, cfg.token);
+            const data = await api.get(`/api/workspaces/${cfg.workspaceId}`);
+            const workspace = data.workspace || data;
+            // Surface the workspace's relationship types alongside its identity so
+            // agents reuse existing labels instead of coining near-duplicates.
+            // Best-effort: a failure here must not break `workspace current`.
+            let relTypes = [];
+            try {
+                const relData = await api.get("/api/relationship-types", { workspaceId: cfg.workspaceId });
+                relTypes = relData.relationshipTypes || [];
+            }
+            catch {
+                // Advisory section — leave it off if the fetch fails.
+            }
+            if (cfg.json) {
+                outputJson({ ...data, relationshipTypes: relTypes });
+            }
+            else {
+                console.log(`Workspace: ${workspace.name || "Unknown"}`);
+                console.log(`ID:        ${cfg.workspaceId}`);
+                if (workspace.userPermission) {
+                    console.log(`Role:      ${workspace.userPermission}`);
+                }
+                if (relTypes.length > 0) {
+                    const builtIn = relTypes.filter((t) => !t.isCustom).map((t) => t.value);
+                    const custom = relTypes.filter((t) => t.isCustom).map((t) => t.value);
+                    console.log("");
+                    console.log("Relationship types (reuse these before inventing new ones):");
+                    if (builtIn.length)
+                        console.log(`  built-in: ${builtIn.join(", ")}`);
+                    if (custom.length)
+                        console.log(`  custom:   ${custom.join(", ")}`);
+                    console.log("  See all:  cnotes rel types");
+                }
+            }
+        }
+        catch (error) {
+            handleError(error, cfg.json);
+        }
+    });
+}
+//# sourceMappingURL=workspace.js.map

package/dist/commands/workspace.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace.js","sourceRoot":"","sources":["../../src/commands/workspace.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAC3C,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,cAAc,EAAc,MAAM,sBAAsB,CAAC;AAC9E,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC1D,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAO3D;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,SAAiB,EACjB,KAAa,EACb,kBAA2B,EAC3B,oBAAqD;IAErD,IAAI,IAAoC,CAAC;IACzC,IAAI,oBAAoB,EAAE,CAAC;QACzB,IAAI,GAAG,oBAAoB,CAAC;IAC9B,CAAC;SAAM,CAAC;QACN,MAAM,GAAG,GAAG,IAAI,SAAS,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QAC5C,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,GAAG,CAAiD,iBAAiB,CAAC,CAAC;QAC9F,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC;QAC3C,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;IACrD,CAAC;IAED,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAEnC,IAAI,QAAgB,CAAC;IACrB,IAAI,UAAkB,CAAC;IAEvB,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;QACnD,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,WAAW,CAAC,CAAC;IACnD,CAAC;SAAM,CAAC;QACN,QAAQ,GAAG,MAAM,MAAM,CAAC;YACtB,OAAO,EAAE,iCAAiC;YAC1C,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAA0B,EAAE,EAAE,CAAC,CAAC;gBACjD,IAAI,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,IAAI,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,EAAE,CAAC,KAAK,kBAAkB,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,EAAE;gBACrG,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;aACnC,CAAC,CAAC;SACJ,CAAC,CAAC;QACH,UAAU,GAAG,MAAM,CACjB,IAAI,CAAC,IAAI,CAAC,CAAC,CAA0B,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,EAAE,CAAC,KAAK,QAAQ,CAAC,EAAE,IAAI,IAAI,WAAW,CACnG,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,cAAc,CAAC,MAAM,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;IAE5C,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;AAC5C,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,OAAgB;IACxD,MAAM,EAAE,GAAG,OAAO;SACf,OAAO,CAAC,WAAW,CAAC;SACpB,KAAK,CAAC,IAAI,CAAC;SACX,WAAW,CAAC,mBAAmB,CAAC,CAAC;IAEpC,EAAE;SACC,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,sBAAsB,CAAC;SACnC,WAAW,CAAC,OAAO,EAAE;;;CAGzB,CAAC;SACG,MAAM,CAAC,KAAK,IAAI,EAAE;QACjB,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;QAC5B,MAAM,GAAG,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,CAAC,GAAG,CAAC,KAAK;YAAE,MAAM,IAAI,SAAS,EAAE,CAAC;QACtC,MAAM,GAAG,GAAG,IAAI,SAAS,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;QAEpD,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,GAAG,CAAiD,iBAAiB,CAAC,CAAC;YAC9F,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC;YAE3C,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;gBACb,UAAU,CAAC,UAAU,CAAC,CAAC;YACzB,CAAC;iBAAM,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;gBAChC,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;gBACzD,MAAM,MAAM,GAAG,MAAM,uBAAuB,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;gBAC9F,IAAI,CAAC,MAAM,EAAE,CAAC;oBACZ,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;gBACtC,CAAC;qBAAM,CAAC;oBACN,OAAO,CAAC,GAAG,CAAC,2BAA2B,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;gBACxD,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAA0B,EAAE,EAAE,CAAC;oBAC7F,MAAM,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;oBAC3B,MAAM,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC;oBACpB,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,EAAE,CAAC,KAAK,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE;iBACtD,CAAC,CAAC;gBACH,WAAW,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;YACxC,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,WAAW,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,EAAE;SACC,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,0BAA0B,CAAC;SACvC,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;SAChC,MAAM,CAAC,KAAK,EAAE,EAAU,EAAE,EAAE;QAC3B,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;QAC5B,MAAM,GAAG,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;QAEpC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;YAC5B,cAAc,CAAC,MAAM,EAAE,GAAG,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;YAE1C,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;gBACb,UAAU,CAAC,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC;YAClC,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,CAAC,2BAA2B,EAAE,EAAE,CAAC,CAAC;YAC/C,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,WAAW,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,EAAE;SACC,OAAO,CAAC,SAAS,CAAC;SAClB,WAAW,CAAC,2BAA2B,CAAC;SACxC,WAAW,CAAC,OAAO,EAAE;;;CAGzB,CAAC;SACG,MAAM,CAAC,KAAK,IAAI,EAAE;QACjB,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;QAC5B,MAAM,GAAG,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;QAEpC,IAAI,CAAC;YACH,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;gBACrB,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;oBACb,UAAU,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;gBACpC,CAAC;qBAAM,CAAC;oBACN,OAAO,CAAC,GAAG,CAAC,2DAA2D,CAAC,CAAC;gBAC3E,CAAC;gBACD,OAAO;YACT,CAAC;YAED,IAAI,CAAC,GAAG,CAAC,KAAK;gBAAE,MAAM,IAAI,SAAS,EAAE,CAAC;YACtC,MAAM,GAAG,GAAG,IAAI,SAAS,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;YACpD,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,GAAG,CAAyC,mBAAmB,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC;YACzG,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC;YAEzC,uEAAuE;YACvE,mEAAmE;YACnE,kEAAkE;YAClE,IAAI,QAAQ,GAAgD,EAAE,CAAC;YAC/D,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,GAAG,CAE1B,yBAAyB,EAAE,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC;gBAChE,QAAQ,GAAG,OAAO,CAAC,iBAAiB,IAAI,EAAE,CAAC;YAC7C,CAAC;YAAC,MAAM,CAAC;gBACP,sDAAsD;YACxD,CAAC;YAED,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;gBACb,UAAU,CAAC,EAAE,GAAG,IAAI,EAAE,iBAAiB,EAAE,QAAQ,EAAE,CAAC,CAAC;YACvD,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,CAAC,cAAe,SAAiB,CAAC,IAAI,IAAI,SAAS,EAAE,CAAC,CAAC;gBAClE,OAAO,CAAC,GAAG,CAAC,cAAc,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC;gBAC7C,IAAK,SAAiB,CAAC,cAAc,EAAE,CAAC;oBACtC,OAAO,CAAC,GAAG,CAAC,cAAe,SAAiB,CAAC,cAAc,EAAE,CAAC,CAAC;gBACjE,CAAC;gBACD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACxB,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;oBACxE,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;oBACtE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;oBAChB,OAAO,CAAC,GAAG,CAAC,6DAA6D,CAAC,CAAC;oBAC3E,IAAI,OAAO,CAAC,MAAM;wBAAE,OAAO,CAAC,GAAG,CAAC,eAAe,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;oBACrE,IAAI,MAAM,CAAC,MAAM;wBAAE,OAAO,CAAC,GAAG,CAAC,eAAe,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;oBACnE,OAAO,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAC;gBAC9C,CAAC;YACH,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,WAAW,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/lib/api-client.d.ts

@@ -0,0 +1,45 @@
+export declare class ApiClient {
+    private serverUrl;
+    private token;
+    constructor(serverUrl: string, token: string);
+    /**
+     * Build request headers, attaching the active agent-run when one is
+     * open. Resolution order:
+     *
+     *   1. `CN_AGENT_RUN_ID` env var (explicit override, wins everything).
+     *   2. The `activeAgentRunId` persisted on the current server's config
+     *      (written by `cnotes operations begin`, cleared by `cnotes operations
+     *      end`).
+     *
+     * The config fallback exists because env vars don't survive across
+     * separate shell processes (or stateless tool calls — e.g. an agent
+     * running `cnotes` from disjoint Bash invocations). Persisting the active
+     * run on disk lets every subsequent cnotes write auto-attach, no matter
+     * which shell it runs in, until the run is explicitly ended.
+     *
+     * X-Agent-Before-Snapshot-Id carries the begin-checkpoint's snapshot
+     * ID so the first mutation under the run can back-link
+     * operation.checkpointBeforeId at open time. The server validates the
+     * snapshot belongs to the target canvas before stamping it.
+     *
+     * Prompt + rationale are deliberately NOT carried per-request — they
+     * were already persisted on the operation row at begin time, and
+     * resending them on every mutation would create a spoofing surface (a
+     * leaked runId could overwrite stored intent metadata).
+     */
+    private headers;
+    /**
+     * Execute a fetch with retry for 5xx and 429 errors.
+     * Retries up to 3 times with exponential backoff (1s, 2s, 4s).
+     * Never retries 4xx client errors (except 429).
+     */
+    private fetchWithRetry;
+    get<T = unknown>(path: string, params?: Record<string, string | undefined>): Promise<T>;
+    post<T = unknown>(path: string, body?: Record<string, unknown>): Promise<T>;
+    postFormData<T = unknown>(path: string, buildFormData: () => FormData): Promise<T>;
+    put<T = unknown>(path: string, body?: Record<string, unknown>): Promise<T>;
+    patch<T = unknown>(path: string, body?: Record<string, unknown>, params?: Record<string, string | undefined>): Promise<T>;
+    delete<T = unknown>(path: string): Promise<T>;
+    private parseJsonSafe;
+}
+//# sourceMappingURL=api-client.d.ts.map

package/dist/lib/api-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-client.d.ts","sourceRoot":"","sources":["../../src/lib/api-client.ts"],"names":[],"mappings":"AAeA,qBAAa,SAAS;IAElB,OAAO,CAAC,SAAS;IACjB,OAAO,CAAC,KAAK;gBADL,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM;IAGvB;;;;;;;;;;;;;;;;;;;;;;;;OAwBG;IACH,OAAO,CAAC,OAAO;IAef;;;;OAIG;YACW,cAAc;IA4CtB,GAAG,CAAC,CAAC,GAAG,OAAO,EACnB,IAAI,EAAE,MAAM,EACZ,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,GAC1C,OAAO,CAAC,CAAC,CAAC;IAqBP,IAAI,CAAC,CAAC,GAAG,OAAO,EACpB,IAAI,EAAE,MAAM,EACZ,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC7B,OAAO,CAAC,CAAC,CAAC;IAgBP,YAAY,CAAC,CAAC,GAAG,OAAO,EAC5B,IAAI,EAAE,MAAM,EACZ,aAAa,EAAE,MAAM,QAAQ,GAC5B,OAAO,CAAC,CAAC,CAAC;IAuBP,GAAG,CAAC,CAAC,GAAG,OAAO,EACnB,IAAI,EAAE,MAAM,EACZ,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC7B,OAAO,CAAC,CAAC,CAAC;IAgBP,KAAK,CAAC,CAAC,GAAG,OAAO,EACrB,IAAI,EAAE,MAAM,EACZ,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,GAC1C,OAAO,CAAC,CAAC,CAAC;IAqBP,MAAM,CAAC,CAAC,GAAG,OAAO,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC;YAerC,aAAa;CAI5B"}

package/dist/lib/api-client.js

@@ -0,0 +1,198 @@
+import { ApiError } from "./errors.js";
+import { loadConfig, getActiveAgentRunId } from "./auth-store.js";
+import { cnotesEnv } from "./env.js";
+const MAX_RETRIES = 3;
+const RETRY_BASE_MS = 1000;
+function isRetryable(status) {
+    return status >= 500 || status === 429;
+}
+function sleep(ms) {
+    return new Promise((resolve) => setTimeout(resolve, ms));
+}
+export class ApiClient {
+    serverUrl;
+    token;
+    constructor(serverUrl, token) {
+        this.serverUrl = serverUrl;
+        this.token = token;
+    }
+    /**
+     * Build request headers, attaching the active agent-run when one is
+     * open. Resolution order:
+     *
+     *   1. `CN_AGENT_RUN_ID` env var (explicit override, wins everything).
+     *   2. The `activeAgentRunId` persisted on the current server's config
+     *      (written by `cnotes operations begin`, cleared by `cnotes operations
+     *      end`).
+     *
+     * The config fallback exists because env vars don't survive across
+     * separate shell processes (or stateless tool calls — e.g. an agent
+     * running `cnotes` from disjoint Bash invocations). Persisting the active
+     * run on disk lets every subsequent cnotes write auto-attach, no matter
+     * which shell it runs in, until the run is explicitly ended.
+     *
+     * X-Agent-Before-Snapshot-Id carries the begin-checkpoint's snapshot
+     * ID so the first mutation under the run can back-link
+     * operation.checkpointBeforeId at open time. The server validates the
+     * snapshot belongs to the target canvas before stamping it.
+     *
+     * Prompt + rationale are deliberately NOT carried per-request — they
+     * were already persisted on the operation row at begin time, and
+     * resending them on every mutation would create a spoofing surface (a
+     * leaked runId could overwrite stored intent metadata).
+     */
+    headers() {
+        const base = {
+            Authorization: `Bearer ${this.token}`,
+            "Content-Type": "application/json",
+            "X-Source": "cli",
+        };
+        const agentRunId = cnotesEnv("AGENT_RUN_ID") ??
+            getActiveAgentRunId(loadConfig(), this.serverUrl)?.agentRunId;
+        if (agentRunId)
+            base["X-Agent-Run-Id"] = agentRunId;
+        const beforeId = cnotesEnv("AGENT_BEFORE_SNAPSHOT_ID");
+        if (beforeId)
+            base["X-Agent-Before-Snapshot-Id"] = beforeId;
+        return base;
+    }
+    /**
+     * Execute a fetch with retry for 5xx and 429 errors.
+     * Retries up to 3 times with exponential backoff (1s, 2s, 4s).
+     * Never retries 4xx client errors (except 429).
+     */
+    async fetchWithRetry(url, init, rebuildBody) {
+        let lastError;
+        for (let attempt = 0; attempt < MAX_RETRIES; attempt++) {
+            try {
+                // Rebuild body on retries to avoid sending a consumed stream
+                if (attempt > 0 && rebuildBody) {
+                    init = { ...init, body: rebuildBody() };
+                }
+                const res = await fetch(url, init);
+                if (res.ok || !isRetryable(res.status)) {
+                    return res;
+                }
+                // Retryable server error — wait and retry
+                if (attempt < MAX_RETRIES - 1) {
+                    const retryAfter = res.headers.get("Retry-After");
+                    const delayMs = retryAfter
+                        ? Math.min(parseInt(retryAfter, 10) * 1000, 30_000)
+                        : RETRY_BASE_MS * Math.pow(2, attempt);
+                    await sleep(delayMs || RETRY_BASE_MS);
+                    continue;
+                }
+                return res; // Final attempt, return as-is
+            }
+            catch (error) {
+                // Network error (ECONNREFUSED, DNS failure, timeout, etc.)
+                lastError = error instanceof Error ? error : new Error(String(error));
+                if (attempt < MAX_RETRIES - 1) {
+                    const delayMs = RETRY_BASE_MS * Math.pow(2, attempt);
+                    await sleep(delayMs);
+                    continue;
+                }
+            }
+        }
+        throw lastError || new Error("Request failed after retries");
+    }
+    async get(path, params) {
+        const url = new URL(path, this.serverUrl);
+        if (params) {
+            for (const [k, v] of Object.entries(params)) {
+                if (v !== undefined)
+                    url.searchParams.set(k, v);
+            }
+        }
+        const res = await this.fetchWithRetry(url.toString(), {
+            method: "GET",
+            headers: this.headers(),
+        });
+        if (!res.ok) {
+            const body = await res.json().catch(() => ({}));
+            throw new ApiError(res.status, body);
+        }
+        return this.parseJsonSafe(res);
+    }
+    async post(path, body) {
+        const url = new URL(path, this.serverUrl);
+        const res = await this.fetchWithRetry(url.toString(), {
+            method: "POST",
+            headers: this.headers(),
+            body: body ? JSON.stringify(body) : undefined,
+        });
+        if (!res.ok) {
+            const respBody = await res.json().catch(() => ({}));
+            throw new ApiError(res.status, respBody);
+        }
+        return this.parseJsonSafe(res);
+    }
+    async postFormData(path, buildFormData) {
+        const url = new URL(path, this.serverUrl);
+        const headers = {
+            Authorization: `Bearer ${this.token}`,
+            "X-Source": "cli",
+            // Do NOT set Content-Type — fetch auto-sets multipart boundary
+        };
+        // Build fresh FormData per attempt so retries don't send a consumed body
+        const res = await this.fetchWithRetry(url.toString(), {
+            method: "POST",
+            headers,
+            body: buildFormData(),
+        }, buildFormData);
+        if (!res.ok) {
+            const respBody = await res.json().catch(() => ({}));
+            throw new ApiError(res.status, respBody);
+        }
+        return res.json();
+    }
+    async put(path, body) {
+        const url = new URL(path, this.serverUrl);
+        const res = await this.fetchWithRetry(url.toString(), {
+            method: "PUT",
+            headers: this.headers(),
+            body: body ? JSON.stringify(body) : undefined,
+        });
+        if (!res.ok) {
+            const respBody = await res.json().catch(() => ({}));
+            throw new ApiError(res.status, respBody);
+        }
+        return this.parseJsonSafe(res);
+    }
+    async patch(path, body, params) {
+        const url = new URL(path, this.serverUrl);
+        if (params) {
+            for (const [k, v] of Object.entries(params)) {
+                if (v !== undefined)
+                    url.searchParams.set(k, v);
+            }
+        }
+        const res = await this.fetchWithRetry(url.toString(), {
+            method: "PATCH",
+            headers: this.headers(),
+            body: body ? JSON.stringify(body) : undefined,
+        });
+        if (!res.ok) {
+            const respBody = await res.json().catch(() => ({}));
+            throw new ApiError(res.status, respBody);
+        }
+        return this.parseJsonSafe(res);
+    }
+    async delete(path) {
+        const url = new URL(path, this.serverUrl);
+        const res = await this.fetchWithRetry(url.toString(), {
+            method: "DELETE",
+            headers: this.headers(),
+        });
+        if (!res.ok) {
+            const body = await res.json().catch(() => ({}));
+            throw new ApiError(res.status, body);
+        }
+        return this.parseJsonSafe(res);
+    }
+    async parseJsonSafe(res) {
+        const text = await res.text();
+        return (text ? JSON.parse(text) : {});
+    }
+}
+//# sourceMappingURL=api-client.js.map

package/dist/lib/api-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-client.js","sourceRoot":"","sources":["../../src/lib/api-client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACvC,OAAO,EAAE,UAAU,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAClE,OAAO,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAErC,MAAM,WAAW,GAAG,CAAC,CAAC;AACtB,MAAM,aAAa,GAAG,IAAI,CAAC;AAE3B,SAAS,WAAW,CAAC,MAAc;IACjC,OAAO,MAAM,IAAI,GAAG,IAAI,MAAM,KAAK,GAAG,CAAC;AACzC,CAAC;AAED,SAAS,KAAK,CAAC,EAAU;IACvB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED,MAAM,OAAO,SAAS;IAEV;IACA;IAFV,YACU,SAAiB,EACjB,KAAa;QADb,cAAS,GAAT,SAAS,CAAQ;QACjB,UAAK,GAAL,KAAK,CAAQ;IACpB,CAAC;IAEJ;;;;;;;;;;;;;;;;;;;;;;;;OAwBG;IACK,OAAO;QACb,MAAM,IAAI,GAA2B;YACnC,aAAa,EAAE,UAAU,IAAI,CAAC,KAAK,EAAE;YACrC,cAAc,EAAE,kBAAkB;YAClC,UAAU,EAAE,KAAK;SAClB,CAAC;QACF,MAAM,UAAU,GACd,SAAS,CAAC,cAAc,CAAC;YACzB,mBAAmB,CAAC,UAAU,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,UAAU,CAAC;QAChE,IAAI,UAAU;YAAE,IAAI,CAAC,gBAAgB,CAAC,GAAG,UAAU,CAAC;QACpD,MAAM,QAAQ,GAAG,SAAS,CAAC,0BAA0B,CAAC,CAAC;QACvD,IAAI,QAAQ;YAAE,IAAI,CAAC,4BAA4B,CAAC,GAAG,QAAQ,CAAC;QAC5D,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;OAIG;IACK,KAAK,CAAC,cAAc,CAC1B,GAAW,EACX,IAAiB,EACjB,WAA4B;QAE5B,IAAI,SAA4B,CAAC;QAEjC,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,WAAW,EAAE,OAAO,EAAE,EAAE,CAAC;YACvD,IAAI,CAAC;gBACH,6DAA6D;gBAC7D,IAAI,OAAO,GAAG,CAAC,IAAI,WAAW,EAAE,CAAC;oBAC/B,IAAI,GAAG,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,CAAC;gBAC1C,CAAC;gBACD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;gBAEnC,IAAI,GAAG,CAAC,EAAE,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;oBACvC,OAAO,GAAG,CAAC;gBACb,CAAC;gBAED,0CAA0C;gBAC1C,IAAI,OAAO,GAAG,WAAW,GAAG,CAAC,EAAE,CAAC;oBAC9B,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;oBAClD,MAAM,OAAO,GAAG,UAAU;wBACxB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,EAAE,EAAE,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC;wBACnD,CAAC,CAAC,aAAa,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;oBACzC,MAAM,KAAK,CAAC,OAAO,IAAI,aAAa,CAAC,CAAC;oBACtC,SAAS;gBACX,CAAC;gBAED,OAAO,GAAG,CAAC,CAAC,8BAA8B;YAC5C,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,2DAA2D;gBAC3D,SAAS,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;gBACtE,IAAI,OAAO,GAAG,WAAW,GAAG,CAAC,EAAE,CAAC;oBAC9B,MAAM,OAAO,GAAG,aAAa,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;oBACrD,MAAM,KAAK,CAAC,OAAO,CAAC,CAAC;oBACrB,SAAS;gBACX,CAAC;YACH,CAAC;QACH,CAAC;QAED,MAAM,SAAS,IAAI,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAC/D,CAAC;IAED,KAAK,CAAC,GAAG,CACP,IAAY,EACZ,MAA2C;QAE3C,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QAC1C,IAAI,MAAM,EAAE,CAAC;YACX,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC5C,IAAI,CAAC,KAAK,SAAS;oBAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAClD,CAAC;QACH,CAAC;QAED,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE;YACpD,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE;SACxB,CAAC,CAAC;QAEH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAChD,MAAM,IAAI,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACvC,CAAC;QAED,OAAO,IAAI,CAAC,aAAa,CAAI,GAAG,CAAC,CAAC;IACpC,CAAC;IAED,KAAK,CAAC,IAAI,CACR,IAAY,EACZ,IAA8B;QAE9B,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QAC1C,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE;YACpD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE;YACvB,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;SAC9C,CAAC,CAAC;QAEH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YACpD,MAAM,IAAI,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAC3C,CAAC;QAED,OAAO,IAAI,CAAC,aAAa,CAAI,GAAG,CAAC,CAAC;IACpC,CAAC;IAED,KAAK,CAAC,YAAY,CAChB,IAAY,EACZ,aAA6B;QAE7B,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QAC1C,MAAM,OAAO,GAAG;YACd,aAAa,EAAE,UAAU,IAAI,CAAC,KAAK,EAAE;YACrC,UAAU,EAAE,KAAK;YACjB,+DAA+D;SAChE,CAAC;QAEF,yEAAyE;QACzE,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE;YACpD,MAAM,EAAE,MAAM;YACd,OAAO;YACP,IAAI,EAAE,aAAa,EAAE;SACtB,EAAE,aAAa,CAAC,CAAC;QAElB,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YACpD,MAAM,IAAI,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAC3C,CAAC;QAED,OAAO,GAAG,CAAC,IAAI,EAAgB,CAAC;IAClC,CAAC;IAED,KAAK,CAAC,GAAG,CACP,IAAY,EACZ,IAA8B;QAE9B,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QAC1C,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE;YACpD,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE;YACvB,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;SAC9C,CAAC,CAAC;QAEH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YACpD,MAAM,IAAI,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAC3C,CAAC;QAED,OAAO,IAAI,CAAC,aAAa,CAAI,GAAG,CAAC,CAAC;IACpC,CAAC;IAED,KAAK,CAAC,KAAK,CACT,IAAY,EACZ,IAA8B,EAC9B,MAA2C;QAE3C,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QAC1C,IAAI,MAAM,EAAE,CAAC;YACX,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC5C,IAAI,CAAC,KAAK,SAAS;oBAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAClD,CAAC;QACH,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE;YACpD,MAAM,EAAE,OAAO;YACf,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE;YACvB,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;SAC9C,CAAC,CAAC;QAEH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YACpD,MAAM,IAAI,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAC3C,CAAC;QAED,OAAO,IAAI,CAAC,aAAa,CAAI,GAAG,CAAC,CAAC;IACpC,CAAC;IAED,KAAK,CAAC,MAAM,CAAc,IAAY;QACpC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QAC1C,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE;YACpD,MAAM,EAAE,QAAQ;YAChB,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE;SACxB,CAAC,CAAC;QAEH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAChD,MAAM,IAAI,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACvC,CAAC;QAED,OAAO,IAAI,CAAC,aAAa,CAAI,GAAG,CAAC,CAAC;IACpC,CAAC;IAEO,KAAK,CAAC,aAAa,CAAI,GAAa;QAC1C,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC9B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAM,CAAC;IAC7C,CAAC;CACF"}

package/dist/lib/auth-store.d.ts

@@ -0,0 +1,47 @@
+export interface ServerConfig {
+    token: string;
+    email: string;
+    workspaceId?: string;
+    /**
+     * Currently-open agent-run on this server, written by `cnotes operations
+     * begin` and cleared by `cnotes operations end`. The api-client falls back
+     * to this when CNOTES_AGENT_RUN_ID env is unset, so cnotes writes across
+     * separate shell processes (or stateless tool calls) auto-attach to the
+     * active run. Env wins when set, for explicit overrides.
+     */
+    activeAgentRunId?: string;
+    /** When activeAgentRunId was opened — used to surface helpful "started
+     *  Xm ago" context on the "already-active" warning at begin time. */
+    activeAgentRunStartedAt?: number;
+}
+export interface CliConfig {
+    version: 1;
+    servers: Record<string, ServerConfig>;
+    currentServer: string;
+}
+export declare function loadConfig(): CliConfig;
+export declare function saveConfig(config: CliConfig): void;
+export declare function getServerConfig(config: CliConfig, server?: string): ServerConfig | null;
+export declare function setServerConfig(config: CliConfig, serverUrl: string, serverConfig: ServerConfig): void;
+export declare function removeServerConfig(config: CliConfig, serverUrl: string): void;
+export declare function setCurrentServer(config: CliConfig, serverUrl: string): void;
+export declare function setWorkspaceId(config: CliConfig, serverUrl: string, workspaceId: string): void;
+/**
+ * Mark a given agent-run as the active one for a server. Subsequent cnotes
+ * writes against this server will carry X-Agent-Run-Id automatically.
+ */
+export declare function setActiveAgentRunId(config: CliConfig, serverUrl: string, agentRunId: string, startedAt: number): void;
+/**
+ * Clear the active agent-run for a server. Called by `cnotes operations end`
+ * after a successful close, so the next cnotes write reverts to "unattached"
+ * unless the user opens a new run.
+ */
+export declare function clearActiveAgentRunId(config: CliConfig, serverUrl: string): void;
+/**
+ * Read the active agent-run for a server (if any).
+ */
+export declare function getActiveAgentRunId(config: CliConfig, serverUrl: string): {
+    agentRunId: string;
+    startedAt: number;
+} | null;
+//# sourceMappingURL=auth-store.d.ts.map

package/dist/lib/auth-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-store.d.ts","sourceRoot":"","sources":["../../src/lib/auth-store.ts"],"names":[],"mappings":"AAMA,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;;OAMG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B;yEACqE;IACrE,uBAAuB,CAAC,EAAE,MAAM,CAAC;CAClC;AAED,MAAM,WAAW,SAAS;IACxB,OAAO,EAAE,CAAC,CAAC;IACX,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IACtC,aAAa,EAAE,MAAM,CAAC;CACvB;AAuCD,wBAAgB,UAAU,IAAI,SAAS,CAOtC;AAED,wBAAgB,UAAU,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI,CAQlD;AAED,wBAAgB,eAAe,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,YAAY,GAAG,IAAI,CAGvF;AAED,wBAAgB,eAAe,CAC7B,MAAM,EAAE,SAAS,EACjB,SAAS,EAAE,MAAM,EACjB,YAAY,EAAE,YAAY,GACzB,IAAI,CAGN;AAED,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI,CAG7E;AAED,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI,CAG3E;AAED,wBAAgB,cAAc,CAC5B,MAAM,EAAE,SAAS,EACjB,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,GAClB,IAAI,CAMN;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,SAAS,EACjB,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,MAAM,GAChB,IAAI,CAON;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,SAAS,EACjB,SAAS,EAAE,MAAM,GAChB,IAAI,CAON;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,SAAS,EACjB,SAAS,EAAE,MAAM,GAChB;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CASlD"}

package/dist/lib/auth-store.js

@@ -0,0 +1,116 @@
+import { readFileSync, writeFileSync, mkdirSync, chmodSync, existsSync, renameSync } from "node:fs";
+import { join } from "node:path";
+import { homedir } from "node:os";
+import { BRAND } from "./brand.js";
+import { cnotesEnv } from "./env.js";
+const CONFIG_DIR = join(homedir(), BRAND.configDir);
+const CONFIG_FILE = join(CONFIG_DIR, "config.json");
+/**
+ * One-time migration of the pre-rename config dir (`~/.creatornotes`) to the
+ * current one (`~/.cnotes`). Best-effort and idempotent: it only acts when the
+ * old dir exists and the new one does not, and any error is swallowed so a
+ * permissions hiccup never blocks a command (re-auth into the new dir still
+ * works). Runs once at module load, before any config read/write.
+ */
+const LEGACY_CONFIG_DIR = join(homedir(), ".creatornotes");
+function migrateLegacyConfigDir() {
+    try {
+        if (CONFIG_DIR !== LEGACY_CONFIG_DIR &&
+            existsSync(LEGACY_CONFIG_DIR) &&
+            !existsSync(CONFIG_DIR)) {
+            renameSync(LEGACY_CONFIG_DIR, CONFIG_DIR);
+        }
+    }
+    catch {
+        /* ignore — re-auth into the new dir still works */
+    }
+}
+migrateLegacyConfigDir();
+const DEFAULT_SERVER = cnotesEnv("SERVER_URL") || BRAND.url;
+function defaultConfig() {
+    return {
+        version: 1,
+        servers: {},
+        currentServer: DEFAULT_SERVER,
+    };
+}
+export function loadConfig() {
+    try {
+        const raw = readFileSync(CONFIG_FILE, "utf-8");
+        return JSON.parse(raw);
+    }
+    catch {
+        return defaultConfig();
+    }
+}
+export function saveConfig(config) {
+    mkdirSync(CONFIG_DIR, { recursive: true, mode: 0o700 });
+    writeFileSync(CONFIG_FILE, JSON.stringify(config, null, 2) + "\n", {
+        encoding: "utf-8",
+        mode: 0o600,
+    });
+    // Ensure permissions even if file already existed
+    chmodSync(CONFIG_FILE, 0o600);
+}
+export function getServerConfig(config, server) {
+    const serverUrl = server || config.currentServer;
+    return config.servers[serverUrl] || null;
+}
+export function setServerConfig(config, serverUrl, serverConfig) {
+    config.servers[serverUrl] = serverConfig;
+    saveConfig(config);
+}
+export function removeServerConfig(config, serverUrl) {
+    delete config.servers[serverUrl];
+    saveConfig(config);
+}
+export function setCurrentServer(config, serverUrl) {
+    config.currentServer = serverUrl;
+    saveConfig(config);
+}
+export function setWorkspaceId(config, serverUrl, workspaceId) {
+    const sc = config.servers[serverUrl];
+    if (sc) {
+        sc.workspaceId = workspaceId;
+        saveConfig(config);
+    }
+}
+/**
+ * Mark a given agent-run as the active one for a server. Subsequent cnotes
+ * writes against this server will carry X-Agent-Run-Id automatically.
+ */
+export function setActiveAgentRunId(config, serverUrl, agentRunId, startedAt) {
+    const sc = config.servers[serverUrl];
+    if (sc) {
+        sc.activeAgentRunId = agentRunId;
+        sc.activeAgentRunStartedAt = startedAt;
+        saveConfig(config);
+    }
+}
+/**
+ * Clear the active agent-run for a server. Called by `cnotes operations end`
+ * after a successful close, so the next cnotes write reverts to "unattached"
+ * unless the user opens a new run.
+ */
+export function clearActiveAgentRunId(config, serverUrl) {
+    const sc = config.servers[serverUrl];
+    if (sc && (sc.activeAgentRunId || sc.activeAgentRunStartedAt)) {
+        delete sc.activeAgentRunId;
+        delete sc.activeAgentRunStartedAt;
+        saveConfig(config);
+    }
+}
+/**
+ * Read the active agent-run for a server (if any).
+ */
+export function getActiveAgentRunId(config, serverUrl) {
+    const sc = config.servers[serverUrl];
+    if (sc?.activeAgentRunId && sc.activeAgentRunStartedAt) {
+        return {
+            agentRunId: sc.activeAgentRunId,
+            startedAt: sc.activeAgentRunStartedAt,
+        };
+    }
+    return null;
+}
+//# sourceMappingURL=auth-store.js.map

package/dist/lib/auth-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-store.js","sourceRoot":"","sources":["../../src/lib/auth-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACpG,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AACnC,OAAO,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAyBrC,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;AACpD,MAAM,WAAW,GAAG,IAAI,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;AAEpD;;;;;;GAMG;AACH,MAAM,iBAAiB,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,eAAe,CAAC,CAAC;AAC3D,SAAS,sBAAsB;IAC7B,IAAI,CAAC;QACH,IACE,UAAU,KAAK,iBAAiB;YAChC,UAAU,CAAC,iBAAiB,CAAC;YAC7B,CAAC,UAAU,CAAC,UAAU,CAAC,EACvB,CAAC;YACD,UAAU,CAAC,iBAAiB,EAAE,UAAU,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,mDAAmD;IACrD,CAAC;AACH,CAAC;AACD,sBAAsB,EAAE,CAAC;AAEzB,MAAM,cAAc,GAClB,SAAS,CAAC,YAAY,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC;AAEvC,SAAS,aAAa;IACpB,OAAO;QACL,OAAO,EAAE,CAAC;QACV,OAAO,EAAE,EAAE;QACX,aAAa,EAAE,cAAc;KAC9B,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,UAAU;IACxB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QAC/C,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAc,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,aAAa,EAAE,CAAC;IACzB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,MAAiB;IAC1C,SAAS,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACxD,aAAa,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE;QACjE,QAAQ,EAAE,OAAO;QACjB,IAAI,EAAE,KAAK;KACZ,CAAC,CAAC;IACH,kDAAkD;IAClD,SAAS,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;AAChC,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,MAAiB,EAAE,MAAe;IAChE,MAAM,SAAS,GAAG,MAAM,IAAI,MAAM,CAAC,aAAa,CAAC;IACjD,OAAO,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC;AAC3C,CAAC;AAED,MAAM,UAAU,eAAe,CAC7B,MAAiB,EACjB,SAAiB,EACjB,YAA0B;IAE1B,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,GAAG,YAAY,CAAC;IACzC,UAAU,CAAC,MAAM,CAAC,CAAC;AACrB,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,MAAiB,EAAE,SAAiB;IACrE,OAAO,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACjC,UAAU,CAAC,MAAM,CAAC,CAAC;AACrB,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,MAAiB,EAAE,SAAiB;IACnE,MAAM,CAAC,aAAa,GAAG,SAAS,CAAC;IACjC,UAAU,CAAC,MAAM,CAAC,CAAC;AACrB,CAAC;AAED,MAAM,UAAU,cAAc,CAC5B,MAAiB,EACjB,SAAiB,EACjB,WAAmB;IAEnB,MAAM,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACrC,IAAI,EAAE,EAAE,CAAC;QACP,EAAE,CAAC,WAAW,GAAG,WAAW,CAAC;QAC7B,UAAU,CAAC,MAAM,CAAC,CAAC;IACrB,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CACjC,MAAiB,EACjB,SAAiB,EACjB,UAAkB,EAClB,SAAiB;IAEjB,MAAM,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACrC,IAAI,EAAE,EAAE,CAAC;QACP,EAAE,CAAC,gBAAgB,GAAG,UAAU,CAAC;QACjC,EAAE,CAAC,uBAAuB,GAAG,SAAS,CAAC;QACvC,UAAU,CAAC,MAAM,CAAC,CAAC;IACrB,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CACnC,MAAiB,EACjB,SAAiB;IAEjB,MAAM,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACrC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,gBAAgB,IAAI,EAAE,CAAC,uBAAuB,CAAC,EAAE,CAAC;QAC9D,OAAO,EAAE,CAAC,gBAAgB,CAAC;QAC3B,OAAO,EAAE,CAAC,uBAAuB,CAAC;QAClC,UAAU,CAAC,MAAM,CAAC,CAAC;IACrB,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB,CACjC,MAAiB,EACjB,SAAiB;IAEjB,MAAM,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACrC,IAAI,EAAE,EAAE,gBAAgB,IAAI,EAAE,CAAC,uBAAuB,EAAE,CAAC;QACvD,OAAO;YACL,UAAU,EAAE,EAAE,CAAC,gBAAgB;YAC/B,SAAS,EAAE,EAAE,CAAC,uBAAuB;SACtC,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/lib/brand.d.ts

@@ -0,0 +1,32 @@
+/**
+ * Brand single source of truth for the CLI.
+ *
+ * This is the CLI-side MIRROR of the app's `lib/brand.ts`. The CLI ships as a
+ * separate npm package and cannot import from the Next.js app, so the shared
+ * identity is duplicated here. A drift guard in the app
+ * (`__tests__/brand.test.ts`) asserts the shared fields below stay in sync with
+ * `lib/brand.ts` — update both together.
+ *
+ * On a rename, changing `configDir` orphans existing logins and changing
+ * `packageName` breaks `npx`/global-install updates — so when either moves, ship
+ * a migration. `configDir` carries a one-time rename of the old directory on
+ * load (see `auth-store.ts`); the old npm package should be deprecated to point
+ * at the new one.
+ */
+export declare const BRAND: {
+    /** Display name, used in CLI help/banner text. */
+    readonly name: "Creator Notes";
+    /** Canonical production origin (the published default server). */
+    readonly url: "https://creatornotes.app";
+    /** Bare domain. */
+    readonly domain: "creatornotes.app";
+    /** The installed command. */
+    readonly command: "cnotes";
+    /** Published package name. */
+    readonly packageName: "@creator-notes/cnotes";
+    /** Config dir under $HOME (holds login tokens). Migrated from the old name on load. */
+    readonly configDir: ".cnotes";
+    /** Source repo, owner/name form. */
+    readonly repo: "creatornotes/pm-notes";
+};
+//# sourceMappingURL=brand.d.ts.map

package/dist/lib/brand.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"brand.d.ts","sourceRoot":"","sources":["../../src/lib/brand.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,KAAK;IAChB,kDAAkD;;IAElD,kEAAkE;;IAElE,mBAAmB;;IAEnB,6BAA6B;;IAE7B,8BAA8B;;IAE9B,uFAAuF;;IAEvF,oCAAoC;;CAE5B,CAAC"}