@graphit/cli 0.1.0 → 0.1.2

package/skill/references/chart-patterns.md

@@ -1,142 +1,80 @@
 # Chart Patterns
 
-Inline CSS/SVG/canvas implementations for dashboards. No external libraries - the iframe CSP blocks all external resources.
+All chart types are available via `graphit.chart()`. All data comes from `graphit.resolve()` - never embed static data.
 
-## CSS Horizontal Bar
-```js
-var maxVal = Math.max.apply(null, data.map(function(d){return d.value}));
-data.forEach(function(d) {
-  var pct = (d.value / maxVal * 100).toFixed(1);
-  container.innerHTML += '<div style="display:flex;align-items:center;gap:12px;margin-bottom:8px">'
-    + '<span style="width:100px;font-size:13px;font-weight:500;text-align:right">' + d.name + '</span>'
-    + '<div style="flex:1;height:28px;background:var(--graphit-surface-sunken);border-radius:6px;overflow:hidden">'
-    + '<div style="width:' + pct + '%;height:100%;background:var(--graphit-accent);border-radius:6px;min-width:2px"></div></div>'
-    + '<span style="width:70px;font-size:13px;font-weight:600;text-align:right">' + fmt(d.value) + '</span></div>';
-});
-```
+**NEVER use `<canvas>`.** Canvas produces blurry charts inside the sandboxed iframe due to DPI scaling issues.
 
-## CSS Vertical Bar (Column)
-```js
-var maxVal = Math.max.apply(null, data.map(function(d){return d.value}));
-container.style.cssText = 'display:flex;align-items:flex-end;gap:8px;height:200px;padding-top:20px';
-data.forEach(function(d) {
-  var pct = (d.value / maxVal * 100).toFixed(1);
-  container.innerHTML += '<div style="flex:1;height:' + pct + '%;background:var(--graphit-accent);border-radius:4px 4px 0 0;'
-    + 'position:relative;min-width:30px">'
-    + '<span style="position:absolute;top:-20px;left:50%;transform:translateX(-50%);font-size:12px;font-weight:600">'
-    + d.value + '</span>'
-    + '<span style="position:absolute;bottom:-22px;left:50%;transform:translateX(-50%);font-size:11px;color:var(--graphit-fg-subtle);white-space:nowrap">'
-    + d.name + '</span></div>';
-});
-```
+## Runtime chart types
 
-## CSS Stacked Bar
-```js
-var colors = ['var(--graphit-accent)','#80CBC4','#26A69A','#5FA39B'];
-data.forEach(function(row) {
-  var total = row.segments.reduce(function(a,s){return a+s.value},0);
-  var html = '<div style="display:flex;align-items:center;gap:12px;margin-bottom:8px">'
-    + '<span style="width:100px;font-size:13px;font-weight:500;text-align:right">' + row.name + '</span>'
-    + '<div style="flex:1;height:28px;display:flex;border-radius:6px;overflow:hidden">';
-  row.segments.forEach(function(s, i) {
-    html += '<div style="width:' + (s.value/total*100).toFixed(1) + '%;height:100%;background:' + colors[i%colors.length] + '"></div>';
-  });
-  html += '</div><span style="width:70px;font-size:13px;font-weight:600;text-align:right">' + total + '</span></div>';
-  container.innerHTML += html;
-});
-```
+### bar
+SVG vertical bars. Multi-series: grouped side-by-side. Y-axis: 4 grid lines with formatted labels. X-axis: category labels (sampled if >12). Rounded top corners (rx=3). `<title>` tooltips per bar.
 
-## SVG Line/Area Chart
-```js
-var w = 600, h = 200, pad = 20;
-var maxVal = Math.max.apply(null, data.map(function(d){return d.value}));
-var points = data.map(function(d, i) {
-  var x = pad + (i / (data.length - 1)) * (w - 2*pad);
-  var y = h - pad - ((d.value / maxVal) * (h - 2*pad));
-  return x + ',' + y;
-});
-svg.setAttribute('viewBox', '0 0 ' + w + ' ' + h);
-svg.innerHTML =
-  '<path d="M' + points.join(' L') + ' L' + (w-pad) + ',' + (h-pad) + ' L' + pad + ',' + (h-pad) + ' Z" fill="rgba(77,182,172,0.15)"/>'
-  + '<path d="M' + points.join(' L') + '" fill="none" stroke="var(--graphit-accent)" stroke-width="2"/>';
-```
+### line / area
+SVG line with circle dots at each point. Area adds filled path below (opacity 0.18). Multi-series: separate colored paths. Y-axis scaled to data range (min to max). `<title>` tooltips per dot.
 
-## SVG Multi-Series Line
-```js
-var colors = ['var(--graphit-accent)','#FF7043','#7E57C2','#42A5F5'];
-series.forEach(function(s, si) {
-  var pts = s.values.map(function(v, i) {
-    var x = pad + (i / (s.values.length - 1)) * (w - 2*pad);
-    var y = h - pad - ((v / maxAll) * (h - 2*pad));
-    return x + ',' + y;
-  });
-  svg.innerHTML += '<path d="M' + pts.join(' L') + '" fill="none" stroke="' + colors[si] + '" stroke-width="2"/>';
-});
-```
+### donut / pie
+SVG pie slices with center hole (58% of radius). Center shows formatted total. Legend below with color swatches. Each slice is a wedge path from center.
 
-## SVG Sparkline (for KPI cards)
-```js
-var vals = [10,15,12,18,22,19,25];
-var max = Math.max.apply(null,vals), min = Math.min.apply(null,vals);
-var pts = vals.map(function(v,i){
-  return (i/(vals.length-1))*120 + ',' + (30 - ((v-min)/(max-min||1))*26 - 2);
-}).join(' L');
-sparkSvg.innerHTML = '<path d="M' + pts + '" fill="none" stroke="var(--graphit-accent)" stroke-width="1.5"/>';
-```
+### scatter / bubble
+SVG circles positioned by x/y. Size field scales radius (sqrt, 3-40px). Fill opacity 0.6 with solid stroke. 4 horizontal grid lines. Capped at 200 points.
+Config: `x`, `y`, `size` (optional radius), `label` (tooltip), `xFormat`.
 
-## Canvas Donut Chart
-```js
-var ctx = canvas.getContext('2d');
-var slices = [{v:40,c:'var(--graphit-accent)'},{v:25,c:'#80CBC4'},{v:20,c:'#26A69A'},{v:15,c:'#009688'}];
-var total = slices.reduce(function(a,s){return a+s.v},0);
-var cx=150, cy=150, r=120, hole=70, angle = -Math.PI/2;
-slices.forEach(function(s) {
-  var arc = (s.v/total)*Math.PI*2;
-  ctx.beginPath(); ctx.moveTo(cx,cy);
-  ctx.arc(cx,cy,r,angle,angle+arc);
-  ctx.fillStyle=s.c; ctx.fill(); angle+=arc;
-});
-ctx.beginPath(); ctx.arc(cx,cy,hole,0,Math.PI*2);
-ctx.fillStyle='white'; ctx.fill();
-```
+### stacked-bar / stacked
+SVG vertical stacked bars. Segments stacked bottom-to-top per category. Y-axis scaled to max total. Legend shows series names.
+Config: requires `series` field for stacking groups.
 
-## CSS Heatmap Grid
-```js
-var max = Math.max.apply(null, cells.map(function(c){return c.value}));
-container.style.cssText = 'display:grid;grid-template-columns:repeat(' + cols + ',1fr);gap:2px';
-cells.forEach(function(c) {
-  var intensity = c.value / max;
-  var bg = 'rgba(77,182,172,' + (0.1 + intensity*0.9).toFixed(2) + ')';
-  var fg = intensity > 0.6 ? 'white' : 'var(--graphit-fg)';
-  container.innerHTML += '<div style="aspect-ratio:1;border-radius:3px;display:flex;align-items:center;'
-    + 'justify-content:center;font-size:11px;font-weight:600;background:' + bg + ';color:' + fg + '">'
-    + c.value + '</div>';
-});
-```
+### heatmap
+CSS grid. X = columns, Y = rows. Background intensity scales linearly (rgba teal, 0.08-0.98). Text flips white at >55% intensity. Headers auto-generated. Capped at 40x40.
+Config: `x` (column), `y` (row), `value` (intensity, falls back to `y`).
 
-## CSS Funnel
-```js
-var maxVal = data[0].value;
-data.forEach(function(d, i) {
-  var pct = (d.value / maxVal * 100).toFixed(1);
-  var rate = i > 0 ? (d.value / data[i-1].value * 100).toFixed(1) + '%' : '';
-  container.innerHTML += '<div style="display:flex;align-items:center;gap:12px;margin-bottom:6px">'
-    + '<span style="width:120px;font-size:13px;text-align:right">' + d.name + '</span>'
-    + '<div style="width:' + pct + '%;height:36px;background:var(--graphit-accent);border-radius:4px;'
-    + 'display:flex;align-items:center;padding:0 12px;color:white;font-weight:600;font-size:13px">'
-    + d.value.toLocaleString() + '</div>'
-    + '<span style="font-size:12px;color:var(--graphit-fg-subtle)">' + rate + '</span></div>';
-});
-```
+### funnel
+CSS horizontal bars narrowing top-to-bottom. First bar = 100% width, rest proportional. Shows step-over-step conversion rate. Colors cycle through palette.
+
+### gauge
+CSS half-circle via `conic-gradient` + `clip-path`. Auto-colors: green (>=70%), yellow (>=40%), red (<40%). Override with `color` config (must be a valid CSS color token).
+Config: `value`, `min` (default 0), `max` (default 100), `format`, `label`, `color`.
+
+### sparkline
+Inline SVG polyline for KPI cards or table cells. No axes, no grid - just trend shape. Single data point renders as a dot.
+Config: `y`, `width` (default 120), `height` (default 32), `label`, `showValue` (default true), `valueFormat`.
+
+## Color tokens
+
+| Token | Usage |
+|---|---|
+| `var(--graphit-accent)` | Primary brand teal |
+| `var(--graphit-success)` | Positive/good |
+| `var(--graphit-warning)` | Caution |
+| `var(--graphit-error)` | Negative/bad |
+| `var(--graphit-fg)` | Primary text |
+| `var(--graphit-fg-muted)` | Secondary text |
+| `var(--graphit-fg-subtle)` | Labels, placeholders |
+| `var(--graphit-border)` | Borders, grid lines |
+| `var(--graphit-surface-raised)` | Card backgrounds |
+| `var(--graphit-surface-sunken)` | Inset areas |
+
+## Tooltip pattern (for hand-rolled charts)
+
+Runtime charts use `<title>` elements for native browser tooltips. For hand-rolled charts, add ONE shared tooltip div and always escape user data with a manual HTML escape function before passing to `showTooltip()`:
 
-## CSS Gauge / Progress
 ```html
-<div style="position:relative;width:200px;height:100px;overflow:hidden">
-  <div id="gauge-arc" style="width:200px;height:200px;border-radius:50%;
-       background:conic-gradient(var(--graphit-accent) 0% 72%, var(--graphit-surface-sunken) 72% 100%);
-       clip-path:inset(0 0 50% 0)"></div>
-  <div style="position:absolute;bottom:0;left:50%;transform:translateX(-50%);
-       font-size:28px;font-weight:700">72%</div>
-</div>
+<div id="tooltip" style="position:fixed;pointer-events:none;z-index:100;
+  background:var(--graphit-surface-raised);color:var(--graphit-fg);
+  border:1px solid var(--graphit-border);border-radius:8px;
+  padding:10px 14px;font-size:13px;line-height:1.5;
+  box-shadow:0 4px 12px rgba(0,0,0,0.15);opacity:0;transition:opacity 0.15s;
+  max-width:240px"></div>
+```
+
+```js
+var tooltip = document.getElementById('tooltip');
+function showTooltip(e, html) {
+  tooltip.innerHTML = html;
+  tooltip.style.opacity = '1';
+  var tx = Math.min(e.clientX + 12, window.innerWidth - 260);
+  var ty = e.clientY - tooltip.offsetHeight - 8;
+  tooltip.style.left = tx + 'px';
+  tooltip.style.top = (ty < 4 ? e.clientY + 16 : ty) + 'px';
+}
+function hideTooltip() { tooltip.style.opacity = '0'; }
 ```
-Dynamic: set `background: conic-gradient(var(--graphit-accent) 0% ${pct}%, var(--graphit-surface-sunken) ${pct}% 100%)`.

package/dist/api/client.d.ts

@@ -1,16 +0,0 @@
-export interface ApiError {
-    status: number;
-    detail: string;
-    retry_after_seconds?: number;
-}
-declare class ApiClient {
-    request<T>(method: string, path: string, body?: unknown): Promise<T>;
-    postUnauthed<T>(path: string, body: unknown): Promise<T>;
-    get<T>(path: string): Promise<T>;
-    post<T>(path: string, body: unknown): Promise<T>;
-    put<T>(path: string, body: unknown): Promise<T>;
-    delete<T>(path: string): Promise<T>;
-    private _fetch;
-}
-export declare const apiClient: ApiClient;
-export {};

package/dist/api/client.js

@@ -1,67 +0,0 @@
-import { getValidIdToken } from "../auth/token.js";
-const DEFAULT_BASE_URL = "https://api.graphit-app.com";
-const REQUEST_TIMEOUT_MS = 30_000;
-function getBaseUrl() {
-    return process.env.GRAPHIT_API_URL || DEFAULT_BASE_URL;
-}
-class ApiClient {
-    async request(method, path, body) {
-        const { id_token } = await getValidIdToken();
-        return this._fetch(method, path, body, {
-            Authorization: `Bearer ${id_token}`,
-        });
-    }
-    async postUnauthed(path, body) {
-        return this._fetch("POST", path, body);
-    }
-    async get(path) {
-        return this.request("GET", path);
-    }
-    async post(path, body) {
-        return this.request("POST", path, body);
-    }
-    async put(path, body) {
-        return this.request("PUT", path, body);
-    }
-    async delete(path) {
-        return this.request("DELETE", path);
-    }
-    async _fetch(method, path, body, extraHeaders) {
-        const url = `${getBaseUrl()}${path}`;
-        const headers = {
-            "Content-Type": "application/json",
-            "X-Graphit-Source": "cli",
-            ...extraHeaders,
-        };
-        const resp = await fetch(url, {
-            method,
-            headers,
-            body: body ? JSON.stringify(body) : undefined,
-            signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS),
-        });
-        if (!resp.ok) {
-            let detail = `HTTP ${resp.status}`;
-            try {
-                const errBody = (await resp.json());
-                detail = errBody.detail || detail;
-                if (resp.status === 429 && errBody.retry_after_seconds) {
-                    const err = {
-                        status: 429,
-                        detail,
-                        retry_after_seconds: errBody.retry_after_seconds,
-                    };
-                    throw err;
-                }
-            }
-            catch (e) {
-                if (e.status === 429)
-                    throw e;
-            }
-            const err = { status: resp.status, detail };
-            throw err;
-        }
-        return (await resp.json());
-    }
-}
-export const apiClient = new ApiClient();
-//# sourceMappingURL=client.js.map

package/dist/api/client.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"client.js","sourceRoot":"","sources":["../../src/api/client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAEnD,MAAM,gBAAgB,GAAG,6BAA6B,CAAC;AACvD,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAElC,SAAS,UAAU;IACjB,OAAO,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,gBAAgB,CAAC;AACzD,CAAC;AAQD,MAAM,SAAS;IACb,KAAK,CAAC,OAAO,CACX,MAAc,EACd,IAAY,EACZ,IAAc;QAEd,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,eAAe,EAAE,CAAC;QAC7C,OAAO,IAAI,CAAC,MAAM,CAAI,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE;YACxC,aAAa,EAAE,UAAU,QAAQ,EAAE;SACpC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,YAAY,CAChB,IAAY,EACZ,IAAa;QAEb,OAAO,IAAI,CAAC,MAAM,CAAI,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IAC5C,CAAC;IAED,KAAK,CAAC,GAAG,CAAI,IAAY;QACvB,OAAO,IAAI,CAAC,OAAO,CAAI,KAAK,EAAE,IAAI,CAAC,CAAC;IACtC,CAAC;IAED,KAAK,CAAC,IAAI,CAAI,IAAY,EAAE,IAAa;QACvC,OAAO,IAAI,CAAC,OAAO,CAAI,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IAC7C,CAAC;IAED,KAAK,CAAC,GAAG,CAAI,IAAY,EAAE,IAAa;QACtC,OAAO,IAAI,CAAC,OAAO,CAAI,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IAC5C,CAAC;IAED,KAAK,CAAC,MAAM,CAAI,IAAY;QAC1B,OAAO,IAAI,CAAC,OAAO,CAAI,QAAQ,EAAE,IAAI,CAAC,CAAC;IACzC,CAAC;IAEO,KAAK,CAAC,MAAM,CAClB,MAAc,EACd,IAAY,EACZ,IAAc,EACd,YAAqC;QAErC,MAAM,GAAG,GAAG,GAAG,UAAU,EAAE,GAAG,IAAI,EAAE,CAAC;QACrC,MAAM,OAAO,GAA2B;YACtC,cAAc,EAAE,kBAAkB;YAClC,kBAAkB,EAAE,KAAK;YACzB,GAAG,YAAY;SAChB,CAAC;QAEF,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAC5B,MAAM;YACN,OAAO;YACP,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;YAC7C,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,kBAAkB,CAAC;SAChD,CAAC,CAAC;QAEH,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;YACb,IAAI,MAAM,GAAG,QAAQ,IAAI,CAAC,MAAM,EAAE,CAAC;YACnC,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAsD,CAAC;gBACzF,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,MAAM,CAAC;gBAClC,IAAI,IAAI,CAAC,MAAM,KAAK,GAAG,IAAI,OAAO,CAAC,mBAAmB,EAAE,CAAC;oBACvD,MAAM,GAAG,GAAa;wBACpB,MAAM,EAAE,GAAG;wBACX,MAAM;wBACN,mBAAmB,EAAE,OAAO,CAAC,mBAAmB;qBACjD,CAAC;oBACF,MAAM,GAAG,CAAC;gBACZ,CAAC;YACH,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,IAAK,CAAc,CAAC,MAAM,KAAK,GAAG;oBAAE,MAAM,CAAC,CAAC;YAC9C,CAAC;YAED,MAAM,GAAG,GAAa,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC;YACtD,MAAM,GAAG,CAAC;QACZ,CAAC;QAED,OAAO,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAM,CAAC;IAClC,CAAC;CACF;AAED,MAAM,CAAC,MAAM,SAAS,GAAG,IAAI,SAAS,EAAE,CAAC"}

package/dist/auth/credentials.d.ts

@@ -1,15 +0,0 @@
-export interface StoredCredentials {
-    refresh_token: string;
-    user_id: string;
-    email: string;
-    org_id: string;
-    org_name: string;
-    seat_type: string;
-    created_at: string;
-    id_token?: string;
-    id_token_expiry?: number;
-}
-export declare function getCredentialsPath(): string;
-export declare function readCredentials(): Promise<StoredCredentials | null>;
-export declare function writeCredentials(creds: StoredCredentials): Promise<void>;
-export declare function deleteCredentials(): Promise<void>;

package/dist/auth/credentials.js

@@ -1,34 +0,0 @@
-import { readFile, writeFile, unlink, mkdir, chmod } from "node:fs/promises";
-import { homedir } from "node:os";
-import { join, dirname } from "node:path";
-import { existsSync } from "node:fs";
-const CREDENTIALS_PATH = join(homedir(), ".graphit", "credentials.json");
-export function getCredentialsPath() {
-    return CREDENTIALS_PATH;
-}
-export async function readCredentials() {
-    try {
-        const raw = await readFile(CREDENTIALS_PATH, "utf-8");
-        return JSON.parse(raw);
-    }
-    catch {
-        return null;
-    }
-}
-export async function writeCredentials(creds) {
-    const dir = dirname(CREDENTIALS_PATH);
-    if (!existsSync(dir)) {
-        await mkdir(dir, { recursive: true });
-    }
-    await writeFile(CREDENTIALS_PATH, JSON.stringify(creds, null, 2), "utf-8");
-    await chmod(CREDENTIALS_PATH, 0o600);
-}
-export async function deleteCredentials() {
-    try {
-        await unlink(CREDENTIALS_PATH);
-    }
-    catch {
-        // File may not exist
-    }
-}
-//# sourceMappingURL=credentials.js.map

package/dist/auth/credentials.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"credentials.js","sourceRoot":"","sources":["../../src/auth/credentials.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAC7E,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAcrC,MAAM,gBAAgB,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,kBAAkB,CAAC,CAAC;AAEzE,MAAM,UAAU,kBAAkB;IAChC,OAAO,gBAAgB,CAAC;AAC1B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe;IACnC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAC,CAAC;QACtD,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAsB,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,KAAwB;IAC7D,MAAM,GAAG,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACtC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACrB,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACxC,CAAC;IACD,MAAM,SAAS,CAAC,gBAAgB,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IAC3E,MAAM,KAAK,CAAC,gBAAgB,EAAE,KAAK,CAAC,CAAC;AACvC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB;IACrC,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,gBAAgB,CAAC,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,qBAAqB;IACvB,CAAC;AACH,CAAC"}

package/dist/auth/login.d.ts

@@ -1,2 +0,0 @@
-import { type StoredCredentials } from "./credentials.js";
-export declare function performLogin(): Promise<StoredCredentials>;

package/dist/auth/login.js

@@ -1,229 +0,0 @@
-import { createServer } from "node:http";
-import { randomBytes, createHash } from "node:crypto";
-import { writeCredentials } from "./credentials.js";
-import { apiClient } from "../api/client.js";
-import open from "open";
-const AUTH_TIMEOUT_MS = 120_000;
-function escapeHtml(str) {
-    return str
-        .replace(/&/g, "&")
-        .replace(/</g, "&lt;")
-        .replace(/>/g, "&gt;")
-        .replace(/"/g, "&quot;");
-}
-function renderCallbackPage(variant, title, message) {
-    const safeTitle = escapeHtml(title);
-    const safeMessage = escapeHtml(message);
-    const statusIcon = variant === "success"
-        ? `<svg width="56" height="56" viewBox="0 0 56 56" fill="none">
-           <circle cx="28" cy="28" r="28" fill="#4DB6AC"/>
-           <path d="M17 28.5L24 35.5L39 20.5" stroke="#fff" stroke-width="3" stroke-linecap="round" stroke-linejoin="round"/>
-         </svg>`
-        : `<svg width="56" height="56" viewBox="0 0 56 56" fill="none">
-           <circle cx="28" cy="28" r="28" fill="#B91C1C"/>
-           <path d="M20 20L36 36M36 20L20 36" stroke="#fff" stroke-width="3" stroke-linecap="round"/>
-         </svg>`;
-    return `<!DOCTYPE html>
-<html lang="en">
-<head>
-  <meta charset="utf-8">
-  <meta name="viewport" content="width=device-width, initial-scale=1">
-  <title>${safeTitle} - Graphit</title>
-  <link rel="stylesheet" href="https://api.fontshare.com/v2/css?f[]=satoshi@400,500,700&display=swap">
-  <style>
-    * { margin: 0; padding: 0; box-sizing: border-box; }
-
-    body {
-      font-family: 'Satoshi', -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, sans-serif;
-      min-height: 100vh;
-      display: flex;
-      align-items: center;
-      justify-content: center;
-      overflow: hidden;
-      position: relative;
-    }
-
-    /* Mesh gradient background matching AuthLayout */
-    .bg-base {
-      position: fixed; inset: 0;
-      background: linear-gradient(135deg, #1a1a1c 0%, #1c2e2b 40%, #222224 70%, #1a2520 100%);
-    }
-    .bg-orb-bl {
-      position: fixed; inset: 0;
-      background: radial-gradient(ellipse 70% 65% at 15% 85%, rgba(77,182,172,0.45) 0%, rgba(77,182,172,0.15) 40%, transparent 70%);
-    }
-    .bg-orb-tr {
-      position: fixed; inset: 0;
-      background: radial-gradient(ellipse 55% 50% at 85% 15%, rgba(77,182,172,0.35) 0%, rgba(56,142,133,0.10) 45%, transparent 70%);
-    }
-    .bg-wash {
-      position: fixed; inset: 0;
-      background: radial-gradient(ellipse 45% 55% at 75% 55%, rgba(128,203,196,0.20) 0%, transparent 60%);
-    }
-    .bg-pool {
-      position: fixed; inset: 0;
-      background: radial-gradient(ellipse 50% 45% at 30% 40%, rgba(38,120,110,0.30) 0%, transparent 60%);
-    }
-    .bg-vignette {
-      position: fixed; inset: 0;
-      background: radial-gradient(ellipse 75% 75% at 50% 50%, transparent 10%, rgba(16,16,18,0.85) 100%);
-    }
-
-    .content {
-      position: relative;
-      z-index: 10;
-      text-align: center;
-      padding: 48px 40px;
-      max-width: 400px;
-    }
-
-    .card {
-      background: rgba(255,255,255,0.08);
-      backdrop-filter: blur(24px);
-      -webkit-backdrop-filter: blur(24px);
-      border: 1px solid rgba(255,255,255,0.12);
-      border-radius: 16px;
-      padding: 40px 32px;
-    }
-
-    .icon { margin-bottom: 20px; }
-
-    h1 {
-      font-size: 20px;
-      font-weight: 700;
-      color: #fff;
-      letter-spacing: -0.02em;
-      margin-bottom: 8px;
-    }
-
-    p {
-      font-size: 14px;
-      color: rgba(255,255,255,0.5);
-      line-height: 1.6;
-    }
-  </style>
-</head>
-<body>
-  <div class="bg-base"></div>
-  <div class="bg-orb-bl"></div>
-  <div class="bg-orb-tr"></div>
-  <div class="bg-wash"></div>
-  <div class="bg-pool"></div>
-  <div class="bg-vignette"></div>
-
-  <div class="content">
-    <div class="card">
-      <div class="icon">${statusIcon}</div>
-      <h1>${safeTitle}</h1>
-      <p>${safeMessage}</p>
-    </div>
-  </div>
-</body>
-</html>`;
-}
-function generateCodeVerifier() {
-    return randomBytes(32).toString("base64url");
-}
-function computeCodeChallenge(verifier) {
-    return createHash("sha256").update(verifier).digest("base64url");
-}
-function generateState() {
-    return randomBytes(32).toString("hex");
-}
-export async function performLogin() {
-    const state = generateState();
-    const codeVerifier = generateCodeVerifier();
-    const codeChallenge = computeCodeChallenge(codeVerifier);
-    const { port, result } = await startCallbackServer(state, codeVerifier);
-    const callbackUrl = `http://127.0.0.1:${port}/callback`;
-    await apiClient.postUnauthed("/api/v1/cli/auth/init", {
-        state,
-        code_challenge: codeChallenge,
-        callback_url: callbackUrl,
-    });
-    const frontendUrl = process.env.GRAPHIT_FRONTEND_URL || "https://app.graphit-app.com";
-    const authUrl = `${frontendUrl}/auth/cli?state=${state}&callback=${encodeURIComponent(callbackUrl)}`;
-    console.log("\nOpening browser to log in to Graphit...");
-    console.log(`  -> ${authUrl}\n`);
-    await open(authUrl);
-    console.log("Waiting for authentication...\n");
-    return result;
-}
-async function startCallbackServer(expectedState, codeVerifier) {
-    return new Promise((resolveServer) => {
-        let resolveLogin;
-        let rejectLogin;
-        const loginPromise = new Promise((res, rej) => {
-            resolveLogin = res;
-            rejectLogin = rej;
-        });
-        const timeout = setTimeout(() => {
-            server.close();
-            rejectLogin(new Error("Login timed out. Please try again."));
-        }, AUTH_TIMEOUT_MS);
-        const server = createServer(async (req, res) => {
-            const url = new URL(req.url || "/", `http://127.0.0.1`);
-            if (url.pathname !== "/callback") {
-                res.writeHead(404);
-                res.end("Not found");
-                return;
-            }
-            const code = url.searchParams.get("code");
-            const returnedState = url.searchParams.get("state");
-            if (returnedState !== expectedState) {
-                res.writeHead(400, { "Content-Type": "text/html" });
-                res.end(renderCallbackPage("error", "Authentication failed", "State mismatch - possible CSRF attack."));
-                clearTimeout(timeout);
-                server.close();
-                rejectLogin(new Error("State mismatch in callback - possible CSRF."));
-                return;
-            }
-            if (!code) {
-                const error = url.searchParams.get("error") || "No authorization code received";
-                res.writeHead(400, { "Content-Type": "text/html" });
-                res.end(renderCallbackPage("error", "Authentication failed", error));
-                clearTimeout(timeout);
-                server.close();
-                rejectLogin(new Error(error));
-                return;
-            }
-            try {
-                const tokenResp = await apiClient.postUnauthed("/api/v1/cli/auth/token", {
-                    code,
-                    code_verifier: codeVerifier,
-                    state: expectedState,
-                });
-                const creds = {
-                    refresh_token: tokenResp.refresh_token,
-                    user_id: tokenResp.user_id,
-                    email: tokenResp.email,
-                    org_id: tokenResp.org_id,
-                    org_name: tokenResp.org_name,
-                    seat_type: tokenResp.seat_type,
-                    created_at: new Date().toISOString(),
-                };
-                await writeCredentials(creds);
-                res.writeHead(200, { "Content-Type": "text/html" });
-                res.end(renderCallbackPage("success", "Logged in to Graphit", "You can close this tab and return to your terminal."));
-                clearTimeout(timeout);
-                server.close();
-                resolveLogin(creds);
-            }
-            catch (err) {
-                const msg = err instanceof Error ? err.message : String(err);
-                res.writeHead(500, { "Content-Type": "text/html" });
-                res.end(renderCallbackPage("error", "Authentication failed", msg));
-                clearTimeout(timeout);
-                server.close();
-                rejectLogin(err instanceof Error ? err : new Error(msg));
-            }
-        });
-        server.listen(0, "127.0.0.1", () => {
-            const addr = server.address();
-            if (addr && typeof addr === "object") {
-                resolveServer({ port: addr.port, result: loginPromise });
-            }
-        });
-    });
-}
-//# sourceMappingURL=login.js.map

package/dist/auth/login.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"login.js","sourceRoot":"","sources":["../../src/auth/login.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,gBAAgB,EAA0B,MAAM,kBAAkB,CAAC;AAC5E,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,IAAI,MAAM,MAAM,CAAC;AAExB,MAAM,eAAe,GAAG,OAAO,CAAC;AAEhC,SAAS,UAAU,CAAC,GAAW;IAC7B,OAAO,GAAG;SACP,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;SACtB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;AAC7B,CAAC;AAED,SAAS,kBAAkB,CACzB,OAA4B,EAC5B,KAAa,EACb,OAAe;IAEf,MAAM,SAAS,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;IACpC,MAAM,WAAW,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;IAExC,MAAM,UAAU,GACd,OAAO,KAAK,SAAS;QACnB,CAAC,CAAC;;;gBAGQ;QACV,CAAC,CAAC;;;gBAGQ,CAAC;IAEf,OAAO;;;;;WAKE,SAAS;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;0BAqFM,UAAU;YACxB,SAAS;WACV,WAAW;;;;QAId,CAAC;AACT,CAAC;AAED,SAAS,oBAAoB;IAC3B,OAAO,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAC/C,CAAC;AAED,SAAS,oBAAoB,CAAC,QAAgB;IAC5C,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;AACnE,CAAC;AAED,SAAS,aAAa;IACpB,OAAO,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AACzC,CAAC;AAqBD,MAAM,CAAC,KAAK,UAAU,YAAY;IAChC,MAAM,KAAK,GAAG,aAAa,EAAE,CAAC;IAC9B,MAAM,YAAY,GAAG,oBAAoB,EAAE,CAAC;IAC5C,MAAM,aAAa,GAAG,oBAAoB,CAAC,YAAY,CAAC,CAAC;IAEzD,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,MAAM,mBAAmB,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;IACxE,MAAM,WAAW,GAAG,oBAAoB,IAAI,WAAW,CAAC;IAExD,MAAM,SAAS,CAAC,YAAY,CAC1B,uBAAuB,EACvB;QACE,KAAK;QACL,cAAc,EAAE,aAAa;QAC7B,YAAY,EAAE,WAAW;KAC1B,CACF,CAAC;IAEF,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,6BAA6B,CAAC;IACtF,MAAM,OAAO,GAAG,GAAG,WAAW,mBAAmB,KAAK,aAAa,kBAAkB,CAAC,WAAW,CAAC,EAAE,CAAC;IAErG,OAAO,CAAC,GAAG,CAAC,2CAA2C,CAAC,CAAC;IACzD,OAAO,CAAC,GAAG,CAAC,QAAQ,OAAO,IAAI,CAAC,CAAC;IAEjC,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC;IAEpB,OAAO,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC;IAE/C,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,KAAK,UAAU,mBAAmB,CAChC,aAAqB,EACrB,YAAoB;IAEpB,OAAO,IAAI,OAAO,CAAC,CAAC,aAAa,EAAE,EAAE;QACnC,IAAI,YAAgD,CAAC;QACrD,IAAI,WAAiC,CAAC;QAEtC,MAAM,YAAY,GAAG,IAAI,OAAO,CAAoB,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;YAC/D,YAAY,GAAG,GAAG,CAAC;YACnB,WAAW,GAAG,GAAG,CAAC;QACpB,CAAC,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE;YAC9B,MAAM,CAAC,KAAK,EAAE,CAAC;YACf,WAAW,CAAC,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC,CAAC;QAC/D,CAAC,EAAE,eAAe,CAAC,CAAC;QAEpB,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;YAC7C,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,kBAAkB,CAAC,CAAC;YAExD,IAAI,GAAG,CAAC,QAAQ,KAAK,WAAW,EAAE,CAAC;gBACjC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;gBACnB,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;gBACrB,OAAO;YACT,CAAC;YAED,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAC1C,MAAM,aAAa,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAEpD,IAAI,aAAa,KAAK,aAAa,EAAE,CAAC;gBACpC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC,CAAC;gBACpD,GAAG,CAAC,GAAG,CAAC,kBAAkB,CAAC,OAAO,EAAE,uBAAuB,EAAE,wCAAwC,CAAC,CAAC,CAAC;gBACxG,YAAY,CAAC,OAAO,CAAC,CAAC;gBACtB,MAAM,CAAC,KAAK,EAAE,CAAC;gBACf,WAAW,CAAC,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC,CAAC;gBACtE,OAAO;YACT,CAAC;YAED,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,gCAAgC,CAAC;gBAChF,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC,CAAC;gBACpD,GAAG,CAAC,GAAG,CAAC,kBAAkB,CAAC,OAAO,EAAE,uBAAuB,EAAE,KAAK,CAAC,CAAC,CAAC;gBACrE,YAAY,CAAC,OAAO,CAAC,CAAC;gBACtB,MAAM,CAAC,KAAK,EAAE,CAAC;gBACf,WAAW,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;gBAC9B,OAAO;YACT,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,SAAS,GAAG,MAAM,SAAS,CAAC,YAAY,CAC5C,wBAAwB,EACxB;oBACE,IAAI;oBACJ,aAAa,EAAE,YAAY;oBAC3B,KAAK,EAAE,aAAa;iBACrB,CACF,CAAC;gBAEF,MAAM,KAAK,GAAsB;oBAC/B,aAAa,EAAE,SAAS,CAAC,aAAa;oBACtC,OAAO,EAAE,SAAS,CAAC,OAAO;oBAC1B,KAAK,EAAE,SAAS,CAAC,KAAK;oBACtB,MAAM,EAAE,SAAS,CAAC,MAAM;oBACxB,QAAQ,EAAE,SAAS,CAAC,QAAQ;oBAC5B,SAAS,EAAE,SAAS,CAAC,SAAS;oBAC9B,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;iBACrC,CAAC;gBAEF,MAAM,gBAAgB,CAAC,KAAK,CAAC,CAAC;gBAE9B,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC,CAAC;gBACpD,GAAG,CAAC,GAAG,CAAC,kBAAkB,CAAC,SAAS,EAAE,sBAAsB,EAAE,qDAAqD,CAAC,CAAC,CAAC;gBAEtH,YAAY,CAAC,OAAO,CAAC,CAAC;gBACtB,MAAM,CAAC,KAAK,EAAE,CAAC;gBACf,YAAY,CAAC,KAAK,CAAC,CAAC;YACtB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBAC7D,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC,CAAC;gBACpD,GAAG,CAAC,GAAG,CAAC,kBAAkB,CAAC,OAAO,EAAE,uBAAuB,EAAE,GAAG,CAAC,CAAC,CAAC;gBACnE,YAAY,CAAC,OAAO,CAAC,CAAC;gBACtB,MAAM,CAAC,KAAK,EAAE,CAAC;gBACf,WAAW,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;YAC3D,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE;YACjC,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;YAC9B,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACrC,aAAa,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC;YAC3D,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/auth/token.d.ts

@@ -1,5 +0,0 @@
-export interface TokenResult {
-    id_token: string;
-    user_id: string;
-}
-export declare function getValidIdToken(): Promise<TokenResult>;

package/dist/auth/token.js

@@ -1,42 +0,0 @@
-import { readCredentials, writeCredentials } from "./credentials.js";
-const FIREBASE_TOKEN_URL = "https://securetoken.googleapis.com/v1/token";
-const FIREBASE_API_KEY = process.env.GRAPHIT_FIREBASE_API_KEY || "AIzaSyCxahikMb2o0BroW1gqn2aWNad6S6-n-gI";
-const TOKEN_BUFFER_SECONDS = 60;
-export async function getValidIdToken() {
-    const creds = await readCredentials();
-    if (!creds) {
-        throw new Error("Not logged in. Run `graphit auth login` first.");
-    }
-    if (creds.id_token &&
-        creds.id_token_expiry &&
-        creds.id_token_expiry > Date.now() / 1000 + TOKEN_BUFFER_SECONDS) {
-        return { id_token: creds.id_token, user_id: creds.user_id };
-    }
-    const resp = await fetch(`${FIREBASE_TOKEN_URL}?key=${FIREBASE_API_KEY}`, {
-        method: "POST",
-        headers: { "Content-Type": "application/x-www-form-urlencoded" },
-        body: new URLSearchParams({
-            grant_type: "refresh_token",
-            refresh_token: creds.refresh_token,
-        }),
-        signal: AbortSignal.timeout(5000),
-    });
-    if (!resp.ok) {
-        const body = await resp.text();
-        if (body.includes("TOKEN_EXPIRED") || body.includes("INVALID_REFRESH_TOKEN")) {
-            throw new Error("Session expired. Run `graphit auth login` to re-authenticate.");
-        }
-        throw new Error(`Token refresh failed (${resp.status}): ${body}`);
-    }
-    const data = (await resp.json());
-    const expiresIn = parseInt(data.expires_in, 10);
-    const expiry = Date.now() / 1000 + expiresIn;
-    await writeCredentials({
-        ...creds,
-        refresh_token: data.refresh_token || creds.refresh_token,
-        id_token: data.id_token,
-        id_token_expiry: expiry,
-    });
-    return { id_token: data.id_token, user_id: data.user_id };
-}
-//# sourceMappingURL=token.js.map