@enbox/gitd 0.1.0 → 0.3.0

package/dist/esm/cli/agent.js

@@ -6,6 +6,9 @@
  * the existing vault and return a ready-to-use `TypedWeb5` instance for
  * each protocol.
  *
+ * Agent data is stored under the resolved profile path:
+ *   `~/.enbox/profiles/<profile>/DATA/AGENT/`
+ *
  * @module
  */
 var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
@@ -18,6 +21,7 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
     });
 };
 import { Web5 } from '@enbox/api';
+import { Web5UserAgent } from '@enbox/agent';
 import { ForgeCiProtocol } from '../ci.js';
 import { ForgeIssuesProtocol } from '../issues.js';
 import { ForgeNotificationsProtocol } from '../notifications.js';
@@ -35,23 +39,73 @@ import { ForgeWikiProtocol } from '../wiki.js';
 /**
  * Connect to the local Web5 agent, initializing on first launch.
  *
- * The agent's persistent data lives under `dataPath` (default:
- * `~/.gitd/agent`).  Sync is disabled — the CLI operates against
- * the local DWN only.
+ * When `dataPath` is provided, the agent's persistent data lives there.
+ * Otherwise, it falls back to `DATA/AGENT` relative to CWD (legacy).
+ *
+ * Sync is disabled — the CLI operates against the local DWN only.
  */
-export function connectAgent(password) {
+export function connectAgent(options) {
     return __awaiter(this, void 0, void 0, function* () {
-        const { web5, did, recoveryPhrase } = yield Web5.connect({
-            password,
-            sync: 'off',
-        });
-        if (recoveryPhrase) {
+        const { password, dataPath, recoveryPhrase: inputPhrase } = options;
+        let agent;
+        let recoveryPhrase;
+        if (dataPath) {
+            // Profile-based: create agent with explicit data path.
+            agent = yield Web5UserAgent.create({ dataPath });
+            if (yield agent.firstLaunch()) {
+                recoveryPhrase = yield agent.initialize({
+                    password,
+                    recoveryPhrase: inputPhrase,
+                    dwnEndpoints: ['https://enbox-dwn.fly.dev'],
+                });
+            }
+            yield agent.start({ password });
+            // Ensure at least one identity exists.
+            const identities = yield agent.identity.list();
+            let identity = identities[0];
+            if (!identity) {
+                identity = yield agent.identity.create({
+                    didMethod: 'dht',
+                    metadata: { name: 'Default' },
+                    didOptions: {
+                        services: [{
+                                id: 'dwn',
+                                type: 'DecentralizedWebNode',
+                                serviceEndpoint: ['https://enbox-dwn.fly.dev'],
+                                enc: '#enc',
+                                sig: '#sig',
+                            }],
+                        verificationMethods: [
+                            { algorithm: 'Ed25519', id: 'sig', purposes: ['assertionMethod', 'authentication'] },
+                            { algorithm: 'X25519', id: 'enc', purposes: ['keyAgreement'] },
+                        ],
+                    },
+                });
+            }
+            const result = yield Web5.connect({
+                agent,
+                connectedDid: identity.did.uri,
+                sync: 'off',
+            });
+            return bindProtocols(result.web5, result.did, recoveryPhrase);
+        }
+        // Legacy: let Web5.connect() manage the agent (uses CWD-relative path).
+        const result = yield Web5.connect({ password, sync: 'off' });
+        if (result.recoveryPhrase) {
             console.log('');
             console.log('  Recovery phrase (save this — it cannot be shown again):');
-            console.log(`  ${recoveryPhrase}`);
+            console.log(`  ${result.recoveryPhrase}`);
             console.log('');
         }
-        // Bind typed protocol handles.
+        return bindProtocols(result.web5, result.did, result.recoveryPhrase);
+    });
+}
+// ---------------------------------------------------------------------------
+// Internal helpers
+// ---------------------------------------------------------------------------
+/** Bind typed protocol handles and configure all protocols. */
+function bindProtocols(web5, did, recoveryPhrase) {
+    return __awaiter(this, void 0, void 0, function* () {
         const repo = web5.using(ForgeRepoProtocol);
         const refs = web5.using(ForgeRefsProtocol);
         const issues = web5.using(ForgeIssuesProtocol);
@@ -80,6 +134,7 @@ export function connectAgent(password) {
         return {
             did, repo, refs, issues, patches, ci, releases,
             registry, social, notifications, wiki, org, web5,
+            recoveryPhrase,
         };
     });
 }

package/dist/esm/cli/agent.js.map

@@ -1 +1 @@
-{"version":3,"file":"agent.js","sourceRoot":"","sources":["../../../src/cli/agent.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;;;;;;;;;;AAIH,OAAO,EAAE,IAAI,EAAE,MAAM,YAAY,CAAC;AAclC,OAAO,EAAE,eAAe,EAAE,MAAM,UAAU,CAAC;AAC3C,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,EAAE,0BAA0B,EAAE,MAAM,qBAAqB,CAAC;AACjE,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AACrD,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAC/C,OAAO,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AACvD,OAAO,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AACvD,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAC/C,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAuB/C,8EAA8E;AAC9E,kBAAkB;AAClB,8EAA8E;AAE9E;;;;;;GAMG;AACH,MAAM,UAAgB,YAAY,CAAC,QAAgB;;QACjD,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,cAAc,EAAE,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC;YACvD,QAAQ;YACR,IAAI,EAAE,KAAK;SACZ,CAAC,CAAC;QAEH,IAAI,cAAc,EAAE,CAAC;YACnB,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChB,OAAO,CAAC,GAAG,CAAC,2DAA2D,CAAC,CAAC;YACzE,OAAO,CAAC,GAAG,CAAC,KAAK,cAAc,EAAE,CAAC,CAAC;YACnC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAClB,CAAC;QAED,+BAA+B;QAC/B,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;QAC3C,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;QAC3C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;QAC/C,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;QACjD,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;QACvC,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;QACnD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;QACnD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;QAC/C,MAAM,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC;QAC7D,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;QAC3C,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;QAEzC,+CAA+C;QAC/C,2EAA2E;QAC3E,wEAAwE;QACxE,MAAM,IAAI,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3C,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;QACvB,MAAM,MAAM,CAAC,SAAS,EAAE,CAAC;QACzB,MAAM,OAAO,CAAC,SAAS,EAAE,CAAC;QAC1B,MAAM,EAAE,CAAC,SAAS,EAAE,CAAC;QACrB,MAAM,QAAQ,CAAC,SAAS,EAAE,CAAC;QAC3B,MAAM,QAAQ,CAAC,SAAS,EAAE,CAAC;QAC3B,MAAM,MAAM,CAAC,SAAS,EAAE,CAAC;QACzB,MAAM,aAAa,CAAC,SAAS,EAAE,CAAC;QAChC,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;QACvB,MAAM,GAAG,CAAC,SAAS,EAAE,CAAC;QAEtB,OAAO;YACL,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,QAAQ;YAC9C,QAAQ,EAAE,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI;SACjD,CAAC;IACJ,CAAC;CAAA"}
+{"version":3,"file":"agent.js","sourceRoot":"","sources":["../../../src/cli/agent.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;;;;;;;;;;AAIH,OAAO,EAAE,IAAI,EAAE,MAAM,YAAY,CAAC;AAClC,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAc7C,OAAO,EAAE,eAAe,EAAE,MAAM,UAAU,CAAC;AAC3C,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,EAAE,0BAA0B,EAAE,MAAM,qBAAqB,CAAC;AACjE,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AACrD,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAC/C,OAAO,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AACvD,OAAO,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AACvD,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAC/C,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAyC/C,8EAA8E;AAC9E,kBAAkB;AAClB,8EAA8E;AAE9E;;;;;;;GAOG;AACH,MAAM,UAAgB,YAAY,CAAC,OAAuB;;QACxD,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,cAAc,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC;QAEpE,IAAI,KAAoB,CAAC;QACzB,IAAI,cAAkC,CAAC;QAEvC,IAAI,QAAQ,EAAE,CAAC;YACb,uDAAuD;YACvD,KAAK,GAAG,MAAM,aAAa,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;YAEjD,IAAI,MAAM,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;gBAC9B,cAAc,GAAG,MAAM,KAAK,CAAC,UAAU,CAAC;oBACtC,QAAQ;oBACR,cAAc,EAAG,WAAW;oBAC5B,YAAY,EAAK,CAAC,2BAA2B,CAAC;iBAC/C,CAAC,CAAC;YACL,CAAC;YACD,MAAM,KAAK,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;YAEhC,uCAAuC;YACvC,MAAM,UAAU,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;YAC/C,IAAI,QAAQ,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;YAC7B,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,QAAQ,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC;oBACrC,SAAS,EAAI,KAAK;oBAClB,QAAQ,EAAK,EAAE,IAAI,EAAE,SAAS,EAAE;oBAChC,UAAU,EAAG;wBACX,QAAQ,EAAE,CAAC;gCACT,EAAE,EAAgB,KAAK;gCACvB,IAAI,EAAc,sBAAsB;gCACxC,eAAe,EAAG,CAAC,2BAA2B,CAAC;gCAC/C,GAAG,EAAe,MAAM;gCACxB,GAAG,EAAe,MAAM;6BACzB,CAAC;wBACF,mBAAmB,EAAE;4BACnB,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,iBAAiB,EAAE,gBAAgB,CAAC,EAAE;4BACpF,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,cAAc,CAAC,EAAE;yBAC/D;qBACF;iBACF,CAAC,CAAC;YACL,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC;gBAChC,KAAK;gBACL,YAAY,EAAG,QAAQ,CAAC,GAAG,CAAC,GAAG;gBAC/B,IAAI,EAAW,KAAK;aACrB,CAAC,CAAC;YAEH,OAAO,aAAa,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;QAChE,CAAC;QAED,wEAAwE;QACxE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAE7D,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;YAC1B,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChB,OAAO,CAAC,GAAG,CAAC,2DAA2D,CAAC,CAAC;YACzE,OAAO,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC;YAC1C,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAClB,CAAC;QAED,OAAO,aAAa,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,cAAc,CAAC,CAAC;IACvE,CAAC;CAAA;AAED,8EAA8E;AAC9E,mBAAmB;AACnB,8EAA8E;AAE9E,+DAA+D;AAC/D,SAAe,aAAa,CAC1B,IAAU,EACV,GAAW,EACX,cAAuB;;QAEvB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;QAC3C,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;QAC3C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;QAC/C,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;QACjD,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;QACvC,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;QACnD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;QACnD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;QAC/C,MAAM,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC;QAC7D,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;QAC3C,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;QAEzC,+CAA+C;QAC/C,2EAA2E;QAC3E,wEAAwE;QACxE,MAAM,IAAI,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3C,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;QACvB,MAAM,MAAM,CAAC,SAAS,EAAE,CAAC;QACzB,MAAM,OAAO,CAAC,SAAS,EAAE,CAAC;QAC1B,MAAM,EAAE,CAAC,SAAS,EAAE,CAAC;QACrB,MAAM,QAAQ,CAAC,SAAS,EAAE,CAAC;QAC3B,MAAM,QAAQ,CAAC,SAAS,EAAE,CAAC;QAC3B,MAAM,MAAM,CAAC,SAAS,EAAE,CAAC;QACzB,MAAM,aAAa,CAAC,SAAS,EAAE,CAAC;QAChC,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;QACvB,MAAM,GAAG,CAAC,SAAS,EAAE,CAAC;QAEtB,OAAO;YACL,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,QAAQ;YAC9C,QAAQ,EAAE,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI;YAChD,cAAc;SACf,CAAC;IACJ,CAAC;CAAA"}

package/dist/esm/cli/commands/auth.js

@@ -0,0 +1,265 @@
+/**
+ * `gitd auth` — identity and profile management.
+ *
+ * Usage:
+ *   gitd auth                          Show current identity info
+ *   gitd auth login                    Create or import an identity
+ *   gitd auth list                     List all profiles
+ *   gitd auth use <profile>            Set profile for current repo
+ *   gitd auth use <profile> --global   Set default profile
+ *   gitd auth export [profile]         Export portable identity
+ *   gitd auth import                   Import from recovery phrase
+ *   gitd auth logout [profile]         Remove a profile
+ *
+ * @module
+ */
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+import * as p from '@clack/prompts';
+import { connectAgent } from '../agent.js';
+import { enboxHome, listProfiles, profileDataPath, readConfig, resolveProfile, setGitConfigProfile, upsertProfile, writeConfig, } from '../../profiles/config.js';
+// ---------------------------------------------------------------------------
+// Sub-command dispatch
+// ---------------------------------------------------------------------------
+/**
+ * The auth command can run without a pre-existing AgentContext (for `login`,
+ * `list`), but some sub-commands need one (for `export`).  We accept
+ * ctx as optional and connect lazily when needed.
+ */
+export function authCommand(ctx, args) {
+    return __awaiter(this, void 0, void 0, function* () {
+        const sub = args[0];
+        switch (sub) {
+            case 'login': return authLogin();
+            case 'list': return authList();
+            case 'use': return authUse(args.slice(1));
+            case 'logout': return authLogout(args.slice(1));
+            default: return authInfo(ctx);
+        }
+    });
+}
+// ---------------------------------------------------------------------------
+// auth (no subcommand) — show current identity
+// ---------------------------------------------------------------------------
+function authInfo(ctx) {
+    return __awaiter(this, void 0, void 0, function* () {
+        const config = readConfig();
+        const profileName = resolveProfile();
+        if (!profileName || !config.profiles[profileName]) {
+            p.log.warn('No identity configured. Run `gitd auth login` to get started.');
+            return;
+        }
+        const entry = config.profiles[profileName];
+        p.log.info(`Profile:    ${profileName}${config.defaultProfile === profileName ? ' (default)' : ''}`);
+        p.log.info(`DID:        ${entry.did}`);
+        p.log.info(`Created:    ${entry.createdAt}`);
+        p.log.info(`Data:       ${profileDataPath(profileName)}`);
+        if (ctx) {
+            p.log.info(`Connected:  ${ctx.did}`);
+        }
+    });
+}
+// ---------------------------------------------------------------------------
+// auth login — create or import identity
+// ---------------------------------------------------------------------------
+function authLogin() {
+    return __awaiter(this, void 0, void 0, function* () {
+        p.intro('Identity setup');
+        const action = yield p.select({
+            message: 'What would you like to do?',
+            options: [
+                { value: 'create', label: 'Create a new identity' },
+                { value: 'import', label: 'Import from recovery phrase' },
+            ],
+        });
+        if (p.isCancel(action)) {
+            p.cancel('Cancelled.');
+            return;
+        }
+        const name = yield p.text({
+            message: 'Name this profile:',
+            placeholder: 'personal',
+            validate(val) {
+                if (!(val === null || val === void 0 ? void 0 : val.trim())) {
+                    return 'Profile name is required.';
+                }
+                if (!/^[a-zA-Z0-9_-]+$/.test(val)) {
+                    return 'Only letters, numbers, hyphens, and underscores.';
+                }
+                const existing = listProfiles();
+                if (existing.includes(val)) {
+                    return `Profile "${val}" already exists.`;
+                }
+            },
+        });
+        if (p.isCancel(name)) {
+            p.cancel('Cancelled.');
+            return;
+        }
+        const profileName = name.trim();
+        const password = yield p.password({
+            message: 'Choose a password for your vault:',
+            validate(val) {
+                if (!val || val.length < 4) {
+                    return 'Password must be at least 4 characters.';
+                }
+            },
+        });
+        if (p.isCancel(password)) {
+            p.cancel('Cancelled.');
+            return;
+        }
+        let recoveryInput;
+        if (action === 'import') {
+            const phrase = yield p.text({
+                message: 'Enter your 12-word recovery phrase:',
+                placeholder: 'abandon ability able about above absent ...',
+                validate(val) {
+                    if (!val) {
+                        return 'Recovery phrase is required.';
+                    }
+                    const words = val.trim().split(/\s+/);
+                    if (words.length !== 12) {
+                        return 'Recovery phrase must be exactly 12 words.';
+                    }
+                },
+            });
+            if (p.isCancel(phrase)) {
+                p.cancel('Cancelled.');
+                return;
+            }
+            recoveryInput = phrase.trim();
+        }
+        const spin = p.spinner();
+        spin.start('Creating identity...');
+        try {
+            const dataPath = profileDataPath(profileName);
+            const result = yield connectAgent({
+                password: password,
+                dataPath,
+                recoveryPhrase: recoveryInput,
+            });
+            // Save profile metadata.
+            upsertProfile(profileName, {
+                name: profileName,
+                did: result.did,
+                createdAt: new Date().toISOString(),
+            });
+            spin.stop('Identity created!');
+            p.log.success(`DID:     ${result.did}`);
+            p.log.success(`Profile: ${profileName} (${dataPath})`);
+            if (result.recoveryPhrase) {
+                p.log.warn('');
+                p.log.warn('Your recovery phrase (write this down!):');
+                p.log.warn(`  ${result.recoveryPhrase}`);
+                p.log.warn('');
+                p.log.warn('This phrase can recover your identity if you lose your password.');
+                p.log.warn('Store it securely — it will NOT be shown again.');
+            }
+        }
+        catch (err) {
+            spin.stop('Failed.');
+            p.log.error(`Failed to create identity: ${err.message}`);
+            process.exit(1);
+        }
+        p.outro('You\'re all set! Run `gitd whoami` to verify.');
+    });
+}
+// ---------------------------------------------------------------------------
+// auth list — list all profiles
+// ---------------------------------------------------------------------------
+function authList() {
+    const config = readConfig();
+    const names = Object.keys(config.profiles);
+    if (names.length === 0) {
+        p.log.warn('No profiles found. Run `gitd auth login` to create one.');
+        return;
+    }
+    p.log.info(`Profiles (${enboxHome()}):\n`);
+    for (const name of names) {
+        const entry = config.profiles[name];
+        const isDefault = config.defaultProfile === name ? '  (default)' : '';
+        p.log.info(`  ${name}${isDefault}`);
+        p.log.info(`    DID:     ${entry.did}`);
+        p.log.info(`    Created: ${entry.createdAt}`);
+    }
+}
+// ---------------------------------------------------------------------------
+// auth use — set active profile
+// ---------------------------------------------------------------------------
+function authUse(args) {
+    return __awaiter(this, void 0, void 0, function* () {
+        const name = args[0];
+        const isGlobal = args.includes('--global');
+        if (!name) {
+            p.log.error('Usage: gitd auth use <profile> [--global]');
+            process.exit(1);
+        }
+        const config = readConfig();
+        if (!config.profiles[name]) {
+            p.log.error(`Profile "${name}" not found. Run \`gitd auth list\` to see available profiles.`);
+            process.exit(1);
+        }
+        if (isGlobal) {
+            config.defaultProfile = name;
+            writeConfig(config);
+            p.log.success(`Default profile set to "${name}".`);
+        }
+        else {
+            try {
+                setGitConfigProfile(name);
+                p.log.success(`Profile "${name}" set for this repository.`);
+            }
+            catch (_a) {
+                p.log.error('Not in a git repository. Use --global to set the default profile.');
+                process.exit(1);
+            }
+        }
+    });
+}
+// ---------------------------------------------------------------------------
+// auth logout — remove a profile
+// ---------------------------------------------------------------------------
+function authLogout(args) {
+    return __awaiter(this, void 0, void 0, function* () {
+        var _a, _b;
+        let name = args[0];
+        if (!name) {
+            name = (_a = resolveProfile()) !== null && _a !== void 0 ? _a : '';
+        }
+        if (!name) {
+            p.log.error('No profile specified and no default profile found.');
+            process.exit(1);
+        }
+        const config = readConfig();
+        if (!config.profiles[name]) {
+            p.log.error(`Profile "${name}" not found.`);
+            process.exit(1);
+        }
+        const confirm = yield p.confirm({
+            message: `Remove profile "${name}"? This will delete all local data for this identity.`,
+        });
+        if (p.isCancel(confirm) || !confirm) {
+            p.cancel('Cancelled.');
+            return;
+        }
+        // Remove from config (we don't delete the data directory — user can do that).
+        delete config.profiles[name];
+        if (config.defaultProfile === name) {
+            const remaining = Object.keys(config.profiles);
+            config.defaultProfile = (_b = remaining[0]) !== null && _b !== void 0 ? _b : '';
+        }
+        writeConfig(config);
+        p.log.success(`Profile "${name}" removed.`);
+        p.log.info(`Data directory preserved at: ${profileDataPath(name)}`);
+        p.log.info('Delete it manually if you want to free disk space.');
+    });
+}
+//# sourceMappingURL=auth.js.map

package/dist/esm/cli/commands/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../../../src/cli/commands/auth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;;;;;;;;;;AAIH,OAAO,KAAK,CAAC,MAAM,gBAAgB,CAAC;AAEpC,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EACL,SAAS,EACT,YAAY,EACZ,eAAe,EACf,UAAU,EACV,cAAc,EACd,mBAAmB,EACnB,aAAa,EACb,WAAW,GACZ,MAAM,0BAA0B,CAAC;AAElC,8EAA8E;AAC9E,uBAAuB;AACvB,8EAA8E;AAE9E;;;;GAIG;AACH,MAAM,UAAgB,WAAW,CAAC,GAAwB,EAAE,IAAc;;QACxE,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAEpB,QAAQ,GAAG,EAAE,CAAC;YACZ,KAAK,OAAO,CAAC,CAAC,OAAO,SAAS,EAAE,CAAC;YACjC,KAAK,MAAM,CAAC,CAAC,OAAO,QAAQ,EAAE,CAAC;YAC/B,KAAK,KAAK,CAAC,CAAC,OAAO,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YAC1C,KAAK,QAAQ,CAAC,CAAC,OAAO,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YAChD,OAAO,CAAC,CAAC,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;CAAA;AAED,8EAA8E;AAC9E,+CAA+C;AAC/C,8EAA8E;AAE9E,SAAe,QAAQ,CAAC,GAAwB;;QAC9C,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;QAC5B,MAAM,WAAW,GAAG,cAAc,EAAE,CAAC;QAErC,IAAI,CAAC,WAAW,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YAClD,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,+DAA+D,CAAC,CAAC;YAC5E,OAAO;QACT,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAE3C,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,eAAe,WAAW,GAAG,MAAM,CAAC,cAAc,KAAK,WAAW,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACrG,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,eAAe,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;QACvC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,eAAe,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;QAC7C,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,eAAe,eAAe,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QAE1D,IAAI,GAAG,EAAE,CAAC;YACR,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,eAAe,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;CAAA;AAED,8EAA8E;AAC9E,yCAAyC;AACzC,8EAA8E;AAE9E,SAAe,SAAS;;QACtB,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;QAE1B,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,MAAM,CAAC;YAC5B,OAAO,EAAG,4BAA4B;YACtC,OAAO,EAAG;gBACR,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,uBAAuB,EAAE;gBACnD,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,6BAA6B,EAAE;aAC1D;SACF,CAAC,CAAC;QAEH,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACvB,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;YACvB,OAAO;QACT,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC;YACxB,OAAO,EAAO,oBAAoB;YAClC,WAAW,EAAG,UAAU;YACxB,QAAQ,CAAC,GAAG;gBACV,IAAI,CAAC,CAAA,GAAG,aAAH,GAAG,uBAAH,GAAG,CAAE,IAAI,EAAE,CAAA,EAAE,CAAC;oBAAC,OAAO,2BAA2B,CAAC;gBAAC,CAAC;gBACzD,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;oBAAC,OAAO,kDAAkD,CAAC;gBAAC,CAAC;gBACjG,MAAM,QAAQ,GAAG,YAAY,EAAE,CAAC;gBAChC,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;oBAAC,OAAO,YAAY,GAAG,mBAAmB,CAAC;gBAAC,CAAC;YAC5E,CAAC;SACF,CAAC,CAAC;QAEH,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACrB,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;YACvB,OAAO;QACT,CAAC;QAED,MAAM,WAAW,GAAI,IAAe,CAAC,IAAI,EAAE,CAAC;QAE5C,MAAM,QAAQ,GAAG,MAAM,CAAC,CAAC,QAAQ,CAAC;YAChC,OAAO,EAAE,mCAAmC;YAC5C,QAAQ,CAAC,GAAG;gBACV,IAAI,CAAC,GAAG,IAAK,GAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAAC,OAAO,yCAAyC,CAAC;gBAAC,CAAC;YAC/F,CAAC;SACF,CAAC,CAAC;QAEH,IAAI,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YACzB,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;YACvB,OAAO;QACT,CAAC;QAED,IAAI,aAAiC,CAAC;QAEtC,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;YACxB,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC;gBAC1B,OAAO,EAAO,qCAAqC;gBACnD,WAAW,EAAG,6CAA6C;gBAC3D,QAAQ,CAAC,GAAG;oBACV,IAAI,CAAC,GAAG,EAAE,CAAC;wBAAC,OAAO,8BAA8B,CAAC;oBAAC,CAAC;oBACpD,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;oBACtC,IAAI,KAAK,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;wBAAC,OAAO,2CAA2C,CAAC;oBAAC,CAAC;gBAClF,CAAC;aACF,CAAC,CAAC;YAEH,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBACvB,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;gBACvB,OAAO;YACT,CAAC;YAED,aAAa,GAAI,MAAiB,CAAC,IAAI,EAAE,CAAC;QAC5C,CAAC;QAED,MAAM,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,CAAC;QACzB,IAAI,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;QAEnC,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,eAAe,CAAC,WAAW,CAAC,CAAC;YAC9C,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC;gBAChC,QAAQ,EAAS,QAAkB;gBACnC,QAAQ;gBACR,cAAc,EAAG,aAAa;aAC/B,CAAC,CAAC;YAEH,yBAAyB;YACzB,aAAa,CAAC,WAAW,EAAE;gBACzB,IAAI,EAAQ,WAAW;gBACvB,GAAG,EAAS,MAAM,CAAC,GAAG;gBACtB,SAAS,EAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACrC,CAAC,CAAC;YAEH,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;YAE/B,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,YAAY,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC;YACxC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,YAAY,WAAW,KAAK,QAAQ,GAAG,CAAC,CAAC;YAEvD,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;gBAC1B,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBACf,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,0CAA0C,CAAC,CAAC;gBACvD,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC;gBACzC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBACf,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,kEAAkE,CAAC,CAAC;gBAC/E,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,iDAAiD,CAAC,CAAC;YAChE,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACrB,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,8BAA+B,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;YACpE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,CAAC,CAAC,KAAK,CAAC,+CAA+C,CAAC,CAAC;IAC3D,CAAC;CAAA;AAED,8EAA8E;AAC9E,gCAAgC;AAChC,8EAA8E;AAE9E,SAAS,QAAQ;IACf,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAE3C,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,yDAAyD,CAAC,CAAC;QACtE,OAAO;IACT,CAAC;IAED,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,aAAa,SAAS,EAAE,MAAM,CAAC,CAAC;IAE3C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACpC,MAAM,SAAS,GAAG,MAAM,CAAC,cAAc,KAAK,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC;QACtE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,IAAI,GAAG,SAAS,EAAE,CAAC,CAAC;QACpC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,gBAAgB,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;QACxC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,gBAAgB,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;IAChD,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,gCAAgC;AAChC,8EAA8E;AAE9E,SAAe,OAAO,CAAC,IAAc;;QACnC,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACrB,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QAE3C,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,2CAA2C,CAAC,CAAC;YACzD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;QAC5B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3B,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,YAAY,IAAI,gEAAgE,CAAC,CAAC;YAC9F,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,CAAC,cAAc,GAAG,IAAI,CAAC;YAC7B,WAAW,CAAC,MAAM,CAAC,CAAC;YACpB,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,2BAA2B,IAAI,IAAI,CAAC,CAAC;QACrD,CAAC;aAAM,CAAC;YACN,IAAI,CAAC;gBACH,mBAAmB,CAAC,IAAI,CAAC,CAAC;gBAC1B,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,YAAY,IAAI,4BAA4B,CAAC,CAAC;YAC9D,CAAC;YAAC,WAAM,CAAC;gBACP,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,mEAAmE,CAAC,CAAC;gBACjF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;QACH,CAAC;IACH,CAAC;CAAA;AAED,8EAA8E;AAC9E,iCAAiC;AACjC,8EAA8E;AAE9E,SAAe,UAAU,CAAC,IAAc;;;QACtC,IAAI,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAEnB,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,IAAI,GAAG,MAAA,cAAc,EAAE,mCAAI,EAAE,CAAC;QAChC,CAAC;QAED,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,oDAAoD,CAAC,CAAC;YAClE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;QAC5B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3B,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,YAAY,IAAI,cAAc,CAAC,CAAC;YAC5C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,OAAO,CAAC;YAC9B,OAAO,EAAE,mBAAmB,IAAI,uDAAuD;SACxF,CAAC,CAAC;QAEH,IAAI,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YACpC,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;YACvB,OAAO;QACT,CAAC;QAED,8EAA8E;QAC9E,OAAO,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAI,MAAM,CAAC,cAAc,KAAK,IAAI,EAAE,CAAC;YACnC,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC/C,MAAM,CAAC,cAAc,GAAG,MAAA,SAAS,CAAC,CAAC,CAAC,mCAAI,EAAE,CAAC;QAC7C,CAAC;QACD,WAAW,CAAC,MAAM,CAAC,CAAC;QAEpB,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,YAAY,IAAI,YAAY,CAAC,CAAC;QAC5C,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,gCAAgC,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACpE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,oDAAoD,CAAC,CAAC;IACnE,CAAC;CAAA"}

package/dist/esm/cli/commands/migrate.js

@@ -29,8 +29,14 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
         step((generator = generator.apply(thisArg, _arguments || [])).next());
     });
 };
+import { createFullBundle } from '../../git-server/bundle-sync.js';
+import { flagValue } from '../flags.js';
+import { getRepoContext } from '../repo-context.js';
 import { getRepoContextId } from '../repo-context.js';
-import { spawnSync } from 'node:child_process';
+import { GitBackend } from '../../git-server/git-backend.js';
+import { readGitRefs } from '../../git-server/ref-sync.js';
+import { readFile, unlink } from 'node:fs/promises';
+import { spawn, spawnSync } from 'node:child_process';
 // ---------------------------------------------------------------------------
 // GitHub auth — resolve a token from env or the gh CLI
 // ---------------------------------------------------------------------------
@@ -65,7 +71,7 @@ export function resolveGitHubToken() {
     try {
         const result = spawnSync('gh', ['auth', 'token'], {
             stdio: ['pipe', 'pipe', 'pipe'],
-            timeout: 5000,
+            timeout: 2000,
         });
         const token = (_a = result.stdout) === null || _a === void 0 ? void 0 : _a.toString().trim();
         if (result.status === 0 && token) {
@@ -163,7 +169,7 @@ export function migrateCommand(ctx, args) {
             case 'pulls': return migratePulls(ctx, rest);
             case 'releases': return migrateReleases(ctx, rest);
             default:
-                console.error('Usage: gitd migrate <all|repo|issues|pulls|releases> <owner/repo>');
+                console.error('Usage: gitd migrate <all|repo|issues|pulls|releases> [owner/repo] [--repos <path>]');
                 process.exit(1);
         }
     });
@@ -256,9 +262,19 @@ function prependAuthor(body, ghLogin) {
 // ---------------------------------------------------------------------------
 // migrate all
 // ---------------------------------------------------------------------------
+/**
+ * Resolve the repos base path from CLI flags or environment.
+ * Returns `null` when no explicit path was provided, so callers can
+ * decide whether to skip git content migration.
+ */
+function resolveReposPath(args) {
+    var _a, _b;
+    return (_b = (_a = flagValue(args, '--repos')) !== null && _a !== void 0 ? _a : process.env.GITD_REPOS) !== null && _b !== void 0 ? _b : null;
+}
 function migrateAll(ctx, args) {
     return __awaiter(this, void 0, void 0, function* () {
         const { owner, repo } = resolveGhRepo(args);
+        const reposPath = resolveReposPath(args);
         const slug = `${owner}/${repo}`;
         const token = resolveGitHubToken();
         if (!token) {
@@ -269,11 +285,25 @@ function migrateAll(ctx, args) {
         try {
             // Step 1: repo metadata.
             yield migrateRepoInner(ctx, owner, repo);
-            // Step 2: issues + comments.
+            // Step 2: git content (clone, bundle, refs).
+            if (reposPath) {
+                try {
+                    yield migrateGitContent(ctx, owner, repo, reposPath);
+                }
+                catch (err) {
+                    console.error(`  Warning: git content migration failed: ${err.message}`);
+                    console.error('  Metadata, issues, PRs, and releases will still be imported.');
+                    console.error('  Re-run with a valid --repos path to retry git content migration.\n');
+                }
+            }
+            else {
+                console.log('  Skipping git content — pass --repos <path> or set GITD_REPOS to include git data.');
+            }
+            // Step 3: issues + comments.
             const issueCount = yield migrateIssuesInner(ctx, owner, repo);
-            // Step 3: pull requests + reviews.
+            // Step 4: pull requests + reviews.
             const pullCount = yield migratePullsInner(ctx, owner, repo);
-            // Step 4: releases.
+            // Step 5: releases.
             const releaseCount = yield migrateReleasesInner(ctx, owner, repo);
             console.log(`\nMigration complete: ${slug}`);
             console.log(`  Issues:   ${issueCount}`);
@@ -292,8 +322,15 @@ function migrateAll(ctx, args) {
 function migrateRepo(ctx, args) {
     return __awaiter(this, void 0, void 0, function* () {
         const { owner, repo } = resolveGhRepo(args);
+        const reposPath = resolveReposPath(args);
         try {
             yield migrateRepoInner(ctx, owner, repo);
+            if (reposPath) {
+                yield migrateGitContent(ctx, owner, repo, reposPath);
+            }
+            else {
+                console.log('  Skipping git content — pass --repos <path> or set GITD_REPOS to include git data.');
+            }
         }
         catch (err) {
             console.error(`Failed to migrate repo: ${err.message}`);
@@ -336,6 +373,114 @@ function migrateRepoInner(ctx, owner, repo) {
     });
 }
 // ---------------------------------------------------------------------------
+// migrate git content (clone + bundle + refs)
+// ---------------------------------------------------------------------------
+/**
+ * Clone the GitHub repository as a bare repo, create a full git bundle,
+ * upload it to DWN, and sync all refs to DWN records.
+ *
+ * This is the "git content" migration step that turns the metadata-only
+ * repo record into a fully cloneable repo.
+ */
+function migrateGitContent(ctx, owner, repo, reposPath) {
+    return __awaiter(this, void 0, void 0, function* () {
+        const slug = `${owner}/${repo}`;
+        console.log(`Importing git content from ${slug}...`);
+        const backend = new GitBackend({ basePath: reposPath });
+        const repoPath = backend.repoPath(ctx.did, repo);
+        // Step 1: Clone bare repo from GitHub (or skip if already on disk).
+        if (backend.exists(ctx.did, repo)) {
+            console.log(`  Bare repo already exists at ${repoPath} — skipping clone.`);
+        }
+        else {
+            const cloneUrl = buildCloneUrl(owner, repo);
+            console.log(`  Cloning ${cloneUrl} → ${repoPath}`);
+            yield cloneBare(cloneUrl, repoPath);
+            console.log('  Clone complete.');
+        }
+        // Step 2: Create full git bundle.
+        console.log('  Creating git bundle...');
+        const bundleInfo = yield createFullBundle(repoPath);
+        console.log(`  Bundle: ${bundleInfo.size} bytes, ${bundleInfo.refCount} ref(s), tip: ${bundleInfo.tipCommit.slice(0, 8)}`);
+        // Step 3: Upload bundle to DWN.
+        const { contextId: repoContextId, visibility } = yield getRepoContext(ctx);
+        const encrypt = visibility === 'private';
+        try {
+            const bundleData = new Uint8Array(yield readFile(bundleInfo.path));
+            const { status } = yield ctx.repo.records.create('repo/bundle', {
+                data: bundleData,
+                dataFormat: 'application/x-git-bundle',
+                tags: {
+                    tipCommit: bundleInfo.tipCommit,
+                    isFull: true,
+                    refCount: bundleInfo.refCount,
+                    size: bundleInfo.size,
+                },
+                parentContextId: repoContextId,
+                encryption: encrypt,
+            });
+            if (status.code >= 300) {
+                throw new Error(`Failed to create bundle record: ${status.code} ${status.detail}`);
+            }
+            console.log('  Bundle uploaded to DWN.');
+        }
+        finally {
+            yield unlink(bundleInfo.path).catch(() => { });
+        }
+        // Step 4: Sync git refs to DWN.
+        console.log('  Syncing refs to DWN...');
+        const gitRefs = yield readGitRefs(repoPath);
+        let refCount = 0;
+        for (const ref of gitRefs) {
+            const { status } = yield ctx.refs.records.create('repo/ref', {
+                data: { name: ref.name, target: ref.target, type: ref.type },
+                tags: { name: ref.name, type: ref.type, target: ref.target },
+                parentContextId: repoContextId,
+            });
+            if (status.code >= 300) {
+                console.error(`  Failed to sync ref ${ref.name}: ${status.code} ${status.detail}`);
+                continue;
+            }
+            refCount++;
+        }
+        console.log(`  Synced ${refCount} ref(s) to DWN.`);
+        console.log(`  Git content migration complete.`);
+    });
+}
+/**
+ * Build the clone URL for a GitHub repository.
+ * Uses the token (if available) for authenticated HTTPS clone.
+ */
+function buildCloneUrl(owner, repo) {
+    const token = resolveGitHubToken();
+    if (token) {
+        return `https://${token}@github.com/${owner}/${repo}.git`;
+    }
+    return `https://github.com/${owner}/${repo}.git`;
+}
+/**
+ * Clone a git repository as a bare repo using `git clone --bare`.
+ */
+function cloneBare(url, destPath) {
+    return new Promise((resolve, reject) => {
+        const child = spawn('git', ['clone', '--bare', url, destPath], {
+            stdio: ['pipe', 'pipe', 'pipe'],
+        });
+        const stderrChunks = [];
+        child.stderr.on('data', (chunk) => stderrChunks.push(chunk));
+        child.on('error', reject);
+        child.on('exit', (code) => {
+            if (code !== 0) {
+                const stderr = Buffer.concat(stderrChunks).toString('utf-8');
+                reject(new Error(`git clone --bare failed (exit ${code}): ${stderr}`));
+            }
+            else {
+                resolve();
+            }
+        });
+    });
+}
+// ---------------------------------------------------------------------------
 // migrate issues
 // ---------------------------------------------------------------------------
 function migrateIssues(ctx, args) {