@halyard/cli 0.1.1 → 0.2.0

package/dist/commands/users.js

@@ -0,0 +1,205 @@
+import { Command } from 'commander';
+import { apiFetch, ApiError } from '../lib/http.js';
+import { printTable, printJson, formatDate, confirm, fail } from '../lib/output.js';
+const ACCESS_ROLES = ['ADMIN', 'MEMBER'];
+const AVAILABILITIES = ['ONLINE', 'AWAY', 'DND'];
+/** Split a comma-separated flag value; empty string clears the list. */
+function splitList(value) {
+    if (value.trim() === '')
+        return [];
+    return value
+        .split(',')
+        .map((item) => item.trim())
+        .filter((item) => item.length > 0);
+}
+/** Build the PATCH body from provided flags only (server treats undefined as no-change). */
+export function buildUserUpdateBody(opts) {
+    const body = {};
+    if (opts.name !== undefined)
+        body['name'] = opts.name;
+    if (opts.accessRole !== undefined)
+        body['accessRole'] = opts.accessRole;
+    if (opts.roles !== undefined)
+        body['roles'] = splitList(opts.roles);
+    if (opts.skills !== undefined)
+        body['skills'] = splitList(opts.skills);
+    if (opts.availability !== undefined)
+        body['availability'] = opts.availability;
+    if (opts.routable !== undefined)
+        body['routable'] = opts.routable === 'true';
+    return body;
+}
+export function usersCommand() {
+    const users = new Command('users').description('Manage users in the current organization');
+    users
+        .command('list')
+        .description('List users in the organization')
+        .action(async function () {
+        const globalOpts = this.optsWithGlobals();
+        const apiUrl = globalOpts.apiUrl;
+        let response;
+        try {
+            response = await apiFetch(apiUrl, '/api/v1/users');
+        }
+        catch (err) {
+            fail(err instanceof Error ? err.message : String(err));
+        }
+        if (globalOpts.json) {
+            printJson(response);
+            return;
+        }
+        printTable(response.users, [
+            { key: 'id', header: 'ID' },
+            { key: 'name', header: 'NAME' },
+            { key: 'email', header: 'EMAIL' },
+            { key: 'accessRole', header: 'ACCESS' },
+            {
+                key: 'roles',
+                header: 'ROLES',
+                format: (v) => {
+                    const joined = Array.isArray(v) ? v.join(',') : '';
+                    if (joined === '')
+                        return '-';
+                    return joined.length > 30 ? `${joined.slice(0, 27)}...` : joined;
+                },
+            },
+            { key: 'availability', header: 'AVAILABILITY' },
+            { key: 'lastLoginAt', header: 'LAST LOGIN', format: formatDate },
+        ]);
+    });
+    users
+        .command('describe')
+        .description('Show details for a user')
+        .argument('<id>', 'User ID (from `halyard users list`)')
+        .action(async function (id) {
+        const globalOpts = this.optsWithGlobals();
+        const apiUrl = globalOpts.apiUrl;
+        let response;
+        try {
+            response = await apiFetch(apiUrl, `/api/v1/users/${id}`);
+        }
+        catch (err) {
+            fail(err instanceof Error ? err.message : String(err));
+        }
+        if (globalOpts.json) {
+            printJson(response);
+            return;
+        }
+        const user = response.user;
+        const counts = user['_count'];
+        const row = (label, value) => {
+            const rendered = value === null || value === undefined || value === ''
+                ? '-'
+                : Array.isArray(value)
+                    ? value.length > 0
+                        ? value.join(', ')
+                        : '-'
+                    : String(value);
+            console.log(`${label.padEnd(14)}${rendered}`);
+        };
+        row('ID:', user['id']);
+        row('Name:', user['name']);
+        row('Email:', user['email']);
+        row('Access role:', user['accessRole']);
+        row('Roles:', user['roles']);
+        row('Skills:', user['skills']);
+        row('Availability:', user['availability']);
+        row('Last login:', formatDate(user['lastLoginAt']));
+        row('Created:', formatDate(user['createdAt']));
+        if (counts) {
+            row('Sessions:', counts.sessions ?? 0);
+            row('Messages:', counts.messages ?? 0);
+        }
+    });
+    users
+        .command('update')
+        .description('Update a user (self, or others as admin)')
+        .argument('<id>', 'User ID')
+        .option('--name <name>', 'Display name')
+        .option('--access-role <role>', `Org access role (${ACCESS_ROLES.join('|')})`)
+        .option('--roles <roles>', 'Comma-separated role list; "" clears')
+        .option('--skills <skills>', 'Comma-separated skill list; "" clears')
+        .option('--availability <availability>', `Availability (${AVAILABILITIES.join('|')})`)
+        .option('--routable <true|false>', 'Whether teammate questions are routed to this user')
+        .action(async function (id) {
+        const globalOpts = this.optsWithGlobals();
+        const apiUrl = globalOpts.apiUrl;
+        const opts = this.opts();
+        const body = buildUserUpdateBody(opts);
+        if (Object.keys(body).length === 0) {
+            fail('Nothing to update; pass at least one of --name/--access-role/--roles/--skills/--availability/--routable');
+        }
+        if (opts.accessRole !== undefined &&
+            !ACCESS_ROLES.includes(opts.accessRole)) {
+            fail(`--access-role must be one of: ${ACCESS_ROLES.join(', ')}`);
+        }
+        if (opts.availability !== undefined &&
+            !AVAILABILITIES.includes(opts.availability)) {
+            fail(`--availability must be one of: ${AVAILABILITIES.join(', ')}`);
+        }
+        if (opts.routable !== undefined && !['true', 'false'].includes(opts.routable)) {
+            fail('--routable must be true or false');
+        }
+        let response;
+        try {
+            response = await apiFetch(apiUrl, `/api/v1/users/${id}`, {
+                method: 'PATCH',
+                body,
+            });
+        }
+        catch (err) {
+            fail(err instanceof Error ? err.message : String(err));
+        }
+        if (globalOpts.json) {
+            printJson(response);
+            return;
+        }
+        console.log(`Updated user ${response.user.name ?? response.user.id}.`);
+    });
+    users
+        .command('invite')
+        .description('Invite a person by email. Invites are email-only and not tracked - there is no list or cancel.')
+        .argument('<email>', 'Email address to invite')
+        .action(async function (email) {
+        const globalOpts = this.optsWithGlobals();
+        const apiUrl = globalOpts.apiUrl;
+        try {
+            await apiFetch(apiUrl, '/api/v1/users/invite', { method: 'POST', body: { email } });
+        }
+        catch (err) {
+            fail(err instanceof Error ? err.message : String(err));
+        }
+        if (globalOpts.json) {
+            printJson({ success: true, email });
+            return;
+        }
+        console.log(`Invite sent to ${email}.`);
+        console.log('Note: pending invites cannot be listed or canceled.');
+    });
+    users
+        .command('remove')
+        .description('Remove a user from the organization (admin only)')
+        .argument('<id>', 'User ID')
+        .option('-f, --force', 'Skip the confirmation prompt')
+        .action(async function (id) {
+        const globalOpts = this.optsWithGlobals();
+        const apiUrl = globalOpts.apiUrl;
+        const force = !!this.opts().force;
+        const confirmed = await confirm(`Remove user ${id}? This permanently deletes the user and their knowledge grants.`, { force });
+        if (!confirmed) {
+            fail('Aborted.');
+        }
+        try {
+            await apiFetch(apiUrl, `/api/v1/users/${id}`, { method: 'DELETE' });
+        }
+        catch (err) {
+            if (err instanceof ApiError && err.status === 404) {
+                fail('User not found in this organization.');
+            }
+            fail(err instanceof Error ? err.message : String(err));
+        }
+        console.log('User removed.');
+    });
+    return users;
+}
+//# sourceMappingURL=users.js.map

package/dist/commands/users.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"users.js","sourceRoot":"","sources":["../../src/commands/users.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AACnC,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAA;AACnD,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAA;AAEnF,MAAM,YAAY,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAU,CAAA;AACjD,MAAM,cAAc,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAU,CAAA;AAuBzD,wEAAwE;AACxE,SAAS,SAAS,CAAC,KAAa;IAC9B,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,EAAE,CAAA;IAClC,OAAO,KAAK;SACT,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;SAC1B,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;AACtC,CAAC;AAED,4FAA4F;AAC5F,MAAM,UAAU,mBAAmB,CAAC,IAAoB;IACtD,MAAM,IAAI,GAA4B,EAAE,CAAA;IACxC,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS;QAAE,IAAI,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAA;IACrD,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS;QAAE,IAAI,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,UAAU,CAAA;IACvE,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS;QAAE,IAAI,CAAC,OAAO,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACnE,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;QAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IACtE,IAAI,IAAI,CAAC,YAAY,KAAK,SAAS;QAAE,IAAI,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC,YAAY,CAAA;IAC7E,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS;QAAE,IAAI,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,QAAQ,KAAK,MAAM,CAAA;IAC5E,OAAO,IAAI,CAAA;AACb,CAAC;AAED,MAAM,UAAU,YAAY;IAC1B,MAAM,KAAK,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC,WAAW,CAAC,0CAA0C,CAAC,CAAA;IAE1F,KAAK;SACF,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,gCAAgC,CAAC;SAC7C,MAAM,CAAC,KAAK;QACX,MAAM,UAAU,GAAG,IAAI,CAAC,eAAe,EAAE,CAAA;QACzC,MAAM,MAAM,GAAG,UAAU,CAAC,MAAgB,CAAA;QAE1C,IAAI,QAAkC,CAAA;QACtC,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,QAAQ,CAA2B,MAAM,EAAE,eAAe,CAAC,CAAA;QAC9E,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAA;QACxD,CAAC;QAED,IAAI,UAAU,CAAC,IAAI,EAAE,CAAC;YACpB,SAAS,CAAC,QAAQ,CAAC,CAAA;YACnB,OAAM;QACR,CAAC;QAED,UAAU,CAAC,QAAQ,CAAC,KAA6C,EAAE;YACjE,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE;YAC3B,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE;YAC/B,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE;YACjC,EAAE,GAAG,EAAE,YAAY,EAAE,MAAM,EAAE,QAAQ,EAAE;YACvC;gBACE,GAAG,EAAE,OAAO;gBACZ,MAAM,EAAE,OAAO;gBACf,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE;oBACZ,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;oBAClD,IAAI,MAAM,KAAK,EAAE;wBAAE,OAAO,GAAG,CAAA;oBAC7B,OAAO,MAAM,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAA;gBAClE,CAAC;aACF;YACD,EAAE,GAAG,EAAE,cAAc,EAAE,MAAM,EAAE,cAAc,EAAE;YAC/C,EAAE,GAAG,EAAE,aAAa,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,UAAU,EAAE;SACjE,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEJ,KAAK;SACF,OAAO,CAAC,UAAU,CAAC;SACnB,WAAW,CAAC,yBAAyB,CAAC;SACtC,QAAQ,CAAC,MAAM,EAAE,qCAAqC,CAAC;SACvD,MAAM,CAAC,KAAK,WAA0B,EAAU;QAC/C,MAAM,UAAU,GAAG,IAAI,CAAC,eAAe,EAAE,CAAA;QACzC,MAAM,MAAM,GAAG,UAAU,CAAC,MAAgB,CAAA;QAE1C,IAAI,QAA2C,CAAA;QAC/C,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,QAAQ,CAAoC,MAAM,EAAE,iBAAiB,EAAE,EAAE,CAAC,CAAA;QAC7F,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAA;QACxD,CAAC;QAED,IAAI,UAAU,CAAC,IAAI,EAAE,CAAC;YACpB,SAAS,CAAC,QAAQ,CAAC,CAAA;YACnB,OAAM;QACR,CAAC;QAED,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAA;QAC1B,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAyD,CAAA;QACrF,MAAM,GAAG,GAAG,CAAC,KAAa,EAAE,KAAc,EAAE,EAAE;YAC5C,MAAM,QAAQ,GACZ,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE;gBACnD,CAAC,CAAC,GAAG;gBACL,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;oBACpB,CAAC,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC;wBAChB,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC;wBAClB,CAAC,CAAC,GAAG;oBACP,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;YACrB,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,QAAQ,EAAE,CAAC,CAAA;QAC/C,CAAC,CAAA;QACD,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA;QACtB,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAA;QAC1B,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAA;QAC5B,GAAG,CAAC,cAAc,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,CAAA;QACvC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAA;QAC5B,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAA;QAC9B,GAAG,CAAC,eAAe,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC,CAAA;QAC1C,GAAG,CAAC,aAAa,EAAE,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,CAAA;QACnD,GAAG,CAAC,UAAU,EAAE,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAA;QAC9C,IAAI,MAAM,EAAE,CAAC;YACX,GAAG,CAAC,WAAW,EAAE,MAAM,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAA;YACtC,GAAG,CAAC,WAAW,EAAE,MAAM,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAA;QACxC,CAAC;IACH,CAAC,CAAC,CAAA;IAEJ,KAAK;SACF,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,0CAA0C,CAAC;SACvD,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;SAC3B,MAAM,CAAC,eAAe,EAAE,cAAc,CAAC;SACvC,MAAM,CAAC,sBAAsB,EAAE,oBAAoB,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;SAC7E,MAAM,CAAC,iBAAiB,EAAE,sCAAsC,CAAC;SACjE,MAAM,CAAC,mBAAmB,EAAE,uCAAuC,CAAC;SACpE,MAAM,CAAC,+BAA+B,EAAE,iBAAiB,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;SACrF,MAAM,CAAC,yBAAyB,EAAE,oDAAoD,CAAC;SACvF,MAAM,CAAC,KAAK,WAA0B,EAAU;QAC/C,MAAM,UAAU,GAAG,IAAI,CAAC,eAAe,EAAE,CAAA;QACzC,MAAM,MAAM,GAAG,UAAU,CAAC,MAAgB,CAAA;QAC1C,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAoB,CAAA;QAE1C,MAAM,IAAI,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAA;QACtC,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACnC,IAAI,CACF,yGAAyG,CAC1G,CAAA;QACH,CAAC;QACD,IACE,IAAI,CAAC,UAAU,KAAK,SAAS;YAC7B,CAAC,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,UAA2C,CAAC,EACxE,CAAC;YACD,IAAI,CAAC,iCAAiC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QAClE,CAAC;QACD,IACE,IAAI,CAAC,YAAY,KAAK,SAAS;YAC/B,CAAC,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC,YAA+C,CAAC,EAC9E,CAAC;YACD,IAAI,CAAC,kCAAkC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QACrE,CAAC;QACD,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC9E,IAAI,CAAC,kCAAkC,CAAC,CAAA;QAC1C,CAAC;QAED,IAAI,QAA+B,CAAA;QACnC,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,QAAQ,CAAwB,MAAM,EAAE,iBAAiB,EAAE,EAAE,EAAE;gBAC9E,MAAM,EAAE,OAAO;gBACf,IAAI;aACL,CAAC,CAAA;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAA;QACxD,CAAC;QAED,IAAI,UAAU,CAAC,IAAI,EAAE,CAAC;YACpB,SAAS,CAAC,QAAQ,CAAC,CAAA;YACnB,OAAM;QACR,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,gBAAgB,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,QAAQ,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAA;IACxE,CAAC,CAAC,CAAA;IAEJ,KAAK;SACF,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CACV,gGAAgG,CACjG;SACA,QAAQ,CAAC,SAAS,EAAE,yBAAyB,CAAC;SAC9C,MAAM,CAAC,KAAK,WAA0B,KAAa;QAClD,MAAM,UAAU,GAAG,IAAI,CAAC,eAAe,EAAE,CAAA;QACzC,MAAM,MAAM,GAAG,UAAU,CAAC,MAAgB,CAAA;QAE1C,IAAI,CAAC;YACH,MAAM,QAAQ,CAAC,MAAM,EAAE,sBAAsB,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,CAAA;QACrF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAA;QACxD,CAAC;QAED,IAAI,UAAU,CAAC,IAAI,EAAE,CAAC;YACpB,SAAS,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;YACnC,OAAM;QACR,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,kBAAkB,KAAK,GAAG,CAAC,CAAA;QACvC,OAAO,CAAC,GAAG,CAAC,qDAAqD,CAAC,CAAA;IACpE,CAAC,CAAC,CAAA;IAEJ,KAAK;SACF,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,kDAAkD,CAAC;SAC/D,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;SAC3B,MAAM,CAAC,aAAa,EAAE,8BAA8B,CAAC;SACrD,MAAM,CAAC,KAAK,WAA0B,EAAU;QAC/C,MAAM,UAAU,GAAG,IAAI,CAAC,eAAe,EAAE,CAAA;QACzC,MAAM,MAAM,GAAG,UAAU,CAAC,MAAgB,CAAA;QAC1C,MAAM,KAAK,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAA;QAEjC,MAAM,SAAS,GAAG,MAAM,OAAO,CAC7B,eAAe,EAAE,iEAAiE,EAClF,EAAE,KAAK,EAAE,CACV,CAAA;QACD,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,IAAI,CAAC,UAAU,CAAC,CAAA;QAClB,CAAC;QAED,IAAI,CAAC;YACH,MAAM,QAAQ,CAAC,MAAM,EAAE,iBAAiB,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAA;QACrE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,QAAQ,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBAClD,IAAI,CAAC,sCAAsC,CAAC,CAAA;YAC9C,CAAC;YACD,IAAI,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAA;QACxD,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAA;IAC9B,CAAC,CAAC,CAAA;IAEJ,OAAO,KAAK,CAAA;AACd,CAAC"}

package/dist/commands/whoami.d.ts

@@ -0,0 +1,21 @@
+import { Command } from 'commander';
+export interface MeResponse {
+    user: {
+        id: string;
+        email: string | null;
+        name: string | null;
+        accessRole: string;
+        isAdmin: boolean;
+    };
+    organization: {
+        id: string;
+        name: string;
+        slug: string;
+    } | null;
+    authenticatedVia?: {
+        type: string;
+        clientName: string | null;
+    };
+}
+export declare function whoamiCommand(): Command;
+//# sourceMappingURL=whoami.d.ts.map

package/dist/commands/whoami.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"whoami.d.ts","sourceRoot":"","sources":["../../src/commands/whoami.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAMnC,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE;QACJ,EAAE,EAAE,MAAM,CAAA;QACV,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;QACpB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;QACnB,UAAU,EAAE,MAAM,CAAA;QAClB,OAAO,EAAE,OAAO,CAAA;KACjB,CAAA;IACD,YAAY,EAAE;QACZ,EAAE,EAAE,MAAM,CAAA;QACV,IAAI,EAAE,MAAM,CAAA;QACZ,IAAI,EAAE,MAAM,CAAA;KACb,GAAG,IAAI,CAAA;IACR,gBAAgB,CAAC,EAAE;QACjB,IAAI,EAAE,MAAM,CAAA;QACZ,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;KAC1B,CAAA;CACF;AA4BD,wBAAgB,aAAa,IAAI,OAAO,CAuDvC"}

package/dist/commands/whoami.js

@@ -0,0 +1,77 @@
+import { Command } from 'commander';
+import { apiFetch } from '../lib/http.js';
+import { getCredentials } from '../lib/auth.js';
+import { findRepoBinding } from '../lib/repo-binding.js';
+import { printJson, fail } from '../lib/output.js';
+function describeAuthMode(me) {
+    if (process.env['HALYARD_TOKEN']) {
+        return process.env['HALYARD_TOKEN'].startsWith('sk_halyard_')
+            ? 'API key (HALYARD_TOKEN)'
+            : 'Token (HALYARD_TOKEN)';
+    }
+    const creds = getCredentials();
+    if (creds?.accessToken.startsWith('sk_halyard_'))
+        return 'API key';
+    if (me?.authenticatedVia?.type === 'oauth') {
+        return me.authenticatedVia.clientName ? `OAuth (${me.authenticatedVia.clientName})` : 'OAuth';
+    }
+    return 'OAuth';
+}
+function printBindingLine() {
+    const binding = findRepoBinding();
+    if (binding) {
+        console.log(`Repo binding:  ${binding.org} (${binding.rootDir})`);
+    }
+}
+export function whoamiCommand() {
+    return new Command('whoami')
+        .description('Show the authenticated user and organization')
+        .action(async function () {
+        const globalOpts = this.optsWithGlobals();
+        const apiUrl = globalOpts.apiUrl;
+        // sk_ API keys can't call the OAuth-only /api/v1/me (401); identify
+        // them via the API-key bootstrap route instead.
+        const creds = getCredentials();
+        if (creds?.accessToken.startsWith('sk_halyard_')) {
+            let key;
+            try {
+                key = await apiFetch(apiUrl, '/api/v1/api-keys/me');
+            }
+            catch (err) {
+                fail(err instanceof Error ? err.message : String(err));
+            }
+            if (globalOpts.json) {
+                printJson(key);
+                return;
+            }
+            console.log(`API key:       ${key.id}`);
+            console.log(`API URL:       ${key.apiUrl}`);
+            console.log('Organization:  bound to the API key (not exposed by the API)');
+            console.log(`Auth:          ${describeAuthMode(null)}`);
+            printBindingLine();
+            return;
+        }
+        let me;
+        try {
+            me = await apiFetch(apiUrl, '/api/v1/me');
+        }
+        catch (err) {
+            fail(err instanceof Error ? err.message : String(err));
+        }
+        if (globalOpts.json) {
+            printJson(me);
+            return;
+        }
+        const email = me.user.email ? ` <${me.user.email}>` : '';
+        console.log(`User:          ${me.user.name ?? me.user.id}${email}  (${me.user.accessRole})`);
+        if (me.organization) {
+            console.log(`Organization:  ${me.organization.name} (${me.organization.slug})  [${me.organization.id}]`);
+        }
+        else {
+            console.log('Organization:  -');
+        }
+        console.log(`Auth:          ${describeAuthMode(me)}`);
+        printBindingLine();
+    });
+}
+//# sourceMappingURL=whoami.js.map

package/dist/commands/whoami.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"whoami.js","sourceRoot":"","sources":["../../src/commands/whoami.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AACnC,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAA;AACzC,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAA;AAC/C,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAA;AACxD,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAA;AA0BlD,SAAS,gBAAgB,CAAC,EAAqB;IAC7C,IAAI,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,CAAC;QACjC,OAAO,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,UAAU,CAAC,aAAa,CAAC;YAC3D,CAAC,CAAC,yBAAyB;YAC3B,CAAC,CAAC,uBAAuB,CAAA;IAC7B,CAAC;IACD,MAAM,KAAK,GAAG,cAAc,EAAE,CAAA;IAC9B,IAAI,KAAK,EAAE,WAAW,CAAC,UAAU,CAAC,aAAa,CAAC;QAAE,OAAO,SAAS,CAAA;IAClE,IAAI,EAAE,EAAE,gBAAgB,EAAE,IAAI,KAAK,OAAO,EAAE,CAAC;QAC3C,OAAO,EAAE,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,gBAAgB,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,OAAO,CAAA;IAC/F,CAAC;IACD,OAAO,OAAO,CAAA;AAChB,CAAC;AAED,SAAS,gBAAgB;IACvB,MAAM,OAAO,GAAG,eAAe,EAAE,CAAA;IACjC,IAAI,OAAO,EAAE,CAAC;QACZ,OAAO,CAAC,GAAG,CAAC,kBAAkB,OAAO,CAAC,GAAG,KAAK,OAAO,CAAC,OAAO,GAAG,CAAC,CAAA;IACnE,CAAC;AACH,CAAC;AAED,MAAM,UAAU,aAAa;IAC3B,OAAO,IAAI,OAAO,CAAC,QAAQ,CAAC;SACzB,WAAW,CAAC,8CAA8C,CAAC;SAC3D,MAAM,CAAC,KAAK;QACX,MAAM,UAAU,GAAG,IAAI,CAAC,eAAe,EAAE,CAAA;QACzC,MAAM,MAAM,GAAG,UAAU,CAAC,MAAgB,CAAA;QAE1C,oEAAoE;QACpE,gDAAgD;QAChD,MAAM,KAAK,GAAG,cAAc,EAAE,CAAA;QAC9B,IAAI,KAAK,EAAE,WAAW,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;YACjD,IAAI,GAAqB,CAAA;YACzB,IAAI,CAAC;gBACH,GAAG,GAAG,MAAM,QAAQ,CAAmB,MAAM,EAAE,qBAAqB,CAAC,CAAA;YACvE,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAA;YACxD,CAAC;YAED,IAAI,UAAU,CAAC,IAAI,EAAE,CAAC;gBACpB,SAAS,CAAC,GAAG,CAAC,CAAA;gBACd,OAAM;YACR,CAAC;YAED,OAAO,CAAC,GAAG,CAAC,kBAAkB,GAAG,CAAC,EAAE,EAAE,CAAC,CAAA;YACvC,OAAO,CAAC,GAAG,CAAC,kBAAkB,GAAG,CAAC,MAAM,EAAE,CAAC,CAAA;YAC3C,OAAO,CAAC,GAAG,CAAC,8DAA8D,CAAC,CAAA;YAC3E,OAAO,CAAC,GAAG,CAAC,kBAAkB,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;YACvD,gBAAgB,EAAE,CAAA;YAClB,OAAM;QACR,CAAC;QAED,IAAI,EAAc,CAAA;QAClB,IAAI,CAAC;YACH,EAAE,GAAG,MAAM,QAAQ,CAAa,MAAM,EAAE,YAAY,CAAC,CAAA;QACvD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAA;QACxD,CAAC;QAED,IAAI,UAAU,CAAC,IAAI,EAAE,CAAC;YACpB,SAAS,CAAC,EAAE,CAAC,CAAA;YACb,OAAM;QACR,CAAC;QAED,MAAM,KAAK,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,CAAA;QACxD,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,IAAI,CAAC,EAAE,GAAG,KAAK,MAAM,EAAE,CAAC,IAAI,CAAC,UAAU,GAAG,CAAC,CAAA;QAC5F,IAAI,EAAE,CAAC,YAAY,EAAE,CAAC;YACpB,OAAO,CAAC,GAAG,CACT,kBAAkB,EAAE,CAAC,YAAY,CAAC,IAAI,KAAK,EAAE,CAAC,YAAY,CAAC,IAAI,OAAO,EAAE,CAAC,YAAY,CAAC,EAAE,GAAG,CAC5F,CAAA;QACH,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAA;QACjC,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,kBAAkB,gBAAgB,CAAC,EAAE,CAAC,EAAE,CAAC,CAAA;QACrD,gBAAgB,EAAE,CAAA;IACpB,CAAC,CAAC,CAAA;AACN,CAAC"}

package/dist/lib/api-client.d.ts

@@ -3,7 +3,69 @@ export interface UploadResult {
     sessionId: string;
 }
 /**
- * Upload a session log file to the Halyard ingest endpoint.
+ * Upload session log content to the Halyard ingest endpoint.
+ *
+ * Callers pass the bytes rather than a path because not every provider is
+ * file-backed — OpenCode and Copilot sessions are exported from local
+ * stores at upload time (see lib/discovery.ts `loadSessionContent`).
  */
-export declare function uploadSession(filePath: string, provider: string, sessionId: string, authHeaders: Record<string, string>, apiUrl: string): Promise<UploadResult>;
+export declare function uploadSession(content: Buffer, fileName: string, provider: string, sessionId: string, authHeaders: Record<string, string>, apiUrl: string): Promise<UploadResult>;
+/**
+ * One manifest row of a skill upload. `content` carries the file verbatim —
+ * UTF-8 text as-is, anything else base64 — except for SKILL.md, whose bytes
+ * already travel as `frontmatterRaw` + `body` and are never sent twice.
+ */
+export interface SkillFileUpload {
+    path: string;
+    size: number;
+    sha256: string;
+    content?: string;
+    encoding?: 'utf8' | 'base64';
+}
+/** One locally discovered skill, as sent to `POST /api/v1/skills/sync`. */
+export interface SkillUpload {
+    /** Front-matter `name`, else the folder name. */
+    name: string;
+    description?: string;
+    /** Top-level front-matter fields as written. */
+    frontmatter: Record<string, string>;
+    /** Verbatim front-matter block, at most 64 KiB; the server parses it losslessly. */
+    frontmatterRaw?: string;
+    /** SKILL.md without its front-matter block. */
+    body: string;
+    scope: 'user' | 'project';
+    /** Repo identity for project skills; empty for user skills (the server keys those by user). */
+    scopeKey: string;
+    /** Skill directory relative to the home dir or repo root, posix separators. */
+    relativePath: string;
+    harnesses: string[];
+    /** Every relative path the skill was found at (symlink aliases). */
+    locations: string[];
+    /** sha256 over the sorted file manifest. */
+    treeHash: string;
+    /** Manifest (first 500 files); `fileCount` says how many the hash actually covers. */
+    files: SkillFileUpload[];
+    fileCount: number;
+    /** Newest mtime in the tree, ISO 8601. */
+    modifiedAt: string;
+}
+export interface SkillSyncResult {
+    scope: 'user' | 'project';
+    relativePath: string;
+    status: 'created' | 'updated' | 'unchanged';
+    knowledgeEntryId: string;
+    /** Manifest files whose bytes the server now holds (absent from older servers). */
+    storedFiles?: number;
+    /** Non-fatal server-side problems, e.g. front-matter that is not valid YAML. */
+    warnings?: string[];
+}
+export interface SkillSyncResponse {
+    results: SkillSyncResult[];
+}
+/**
+ * Upload a batch of skills. The server upserts each one by
+ * (org, provider, externalId) and compares `treeHash`, so re-sending an
+ * unchanged skill is a cheap `unchanged` rather than a duplicate.
+ */
+export declare function syncSkills(skills: SkillUpload[], authHeaders: Record<string, string>, apiUrl: string, fetchImpl?: typeof fetch): Promise<SkillSyncResponse>;
 //# sourceMappingURL=api-client.d.ts.map

package/dist/lib/api-client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"api-client.d.ts","sourceRoot":"","sources":["../../src/lib/api-client.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,SAAS,GAAG,WAAW,CAAA;IAC/B,SAAS,EAAE,MAAM,CAAA;CAClB;AAED;;GAEG;AACH,wBAAsB,aAAa,CACjC,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EACnC,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,YAAY,CAAC,CA6BvB"}
+{"version":3,"file":"api-client.d.ts","sourceRoot":"","sources":["../../src/lib/api-client.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,SAAS,GAAG,WAAW,CAAA;IAC/B,SAAS,EAAE,MAAM,CAAA;CAClB;AAED;;;;;;GAMG;AACH,wBAAsB,aAAa,CACjC,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EACnC,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,YAAY,CAAC,CA0BvB;AAED;;;;GAIG;AACH,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,EAAE,MAAM,CAAA;IACd,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,QAAQ,CAAC,EAAE,MAAM,GAAG,QAAQ,CAAA;CAC7B;AAED,2EAA2E;AAC3E,MAAM,WAAW,WAAW;IAC1B,iDAAiD;IACjD,IAAI,EAAE,MAAM,CAAA;IACZ,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,gDAAgD;IAChD,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IACnC,oFAAoF;IACpF,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,+CAA+C;IAC/C,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,MAAM,GAAG,SAAS,CAAA;IACzB,+FAA+F;IAC/F,QAAQ,EAAE,MAAM,CAAA;IAChB,+EAA+E;IAC/E,YAAY,EAAE,MAAM,CAAA;IACpB,SAAS,EAAE,MAAM,EAAE,CAAA;IACnB,oEAAoE;IACpE,SAAS,EAAE,MAAM,EAAE,CAAA;IACnB,4CAA4C;IAC5C,QAAQ,EAAE,MAAM,CAAA;IAChB,sFAAsF;IACtF,KAAK,EAAE,eAAe,EAAE,CAAA;IACxB,SAAS,EAAE,MAAM,CAAA;IACjB,0CAA0C;IAC1C,UAAU,EAAE,MAAM,CAAA;CACnB;AAED,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,GAAG,SAAS,CAAA;IACzB,YAAY,EAAE,MAAM,CAAA;IACpB,MAAM,EAAE,SAAS,GAAG,SAAS,GAAG,WAAW,CAAA;IAC3C,gBAAgB,EAAE,MAAM,CAAA;IACxB,mFAAmF;IACnF,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,gFAAgF;IAChF,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAA;CACpB;AAED,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,eAAe,EAAE,CAAA;CAC3B;AAED;;;;GAIG;AACH,wBAAsB,UAAU,CAC9B,MAAM,EAAE,WAAW,EAAE,EACrB,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EACnC,MAAM,EAAE,MAAM,EACd,SAAS,GAAE,OAAO,KAAa,GAC9B,OAAO,CAAC,iBAAiB,CAAC,CAuB5B"}

package/dist/lib/api-client.js

@@ -1,16 +1,17 @@
-import { readFileSync } from 'node:fs';
-import { basename } from 'node:path';
+import { ApiError } from './http.js';
 /**
- * Upload a session log file to the Halyard ingest endpoint.
+ * Upload session log content to the Halyard ingest endpoint.
+ *
+ * Callers pass the bytes rather than a path because not every provider is
+ * file-backed — OpenCode and Copilot sessions are exported from local
+ * stores at upload time (see lib/discovery.ts `loadSessionContent`).
  */
-export async function uploadSession(filePath, provider, sessionId, authHeaders, apiUrl) {
-    const fileContent = readFileSync(filePath);
-    const fileName = basename(filePath);
+export async function uploadSession(content, fileName, provider, sessionId, authHeaders, apiUrl) {
     // Build multipart form data
     const formData = new FormData();
     formData.append('provider', provider);
     formData.append('sessionId', sessionId);
-    formData.append('file', new Blob([fileContent]), fileName);
+    formData.append('file', new Blob([content]), fileName);
     const res = await fetch(`${apiUrl}/api/v1/sessions/ingest`, {
         method: 'POST',
         headers: {
@@ -28,4 +29,28 @@ export async function uploadSession(filePath, provider, sessionId, authHeaders,
     }
     return (await res.json());
 }
+/**
+ * Upload a batch of skills. The server upserts each one by
+ * (org, provider, externalId) and compares `treeHash`, so re-sending an
+ * unchanged skill is a cheap `unchanged` rather than a duplicate.
+ */
+export async function syncSkills(skills, authHeaders, apiUrl, fetchImpl = fetch) {
+    const res = await fetchImpl(`${apiUrl}/api/v1/skills/sync`, {
+        method: 'POST',
+        headers: { ...authHeaders, 'Content-Type': 'application/json' },
+        body: JSON.stringify({ skills }),
+    });
+    if (res.status === 401) {
+        throw new ApiError('Authentication failed. Run `halyard login` or check your HALYARD_TOKEN.', res.status, await res.text());
+    }
+    if (!res.ok) {
+        const body = await res.text();
+        throw new ApiError(`Skills sync failed (${res.status}): ${body}`, res.status, body);
+    }
+    const parsed = (await res.json());
+    if (!parsed || !Array.isArray(parsed.results)) {
+        throw new Error('Skills sync failed: unexpected response (no results array)');
+    }
+    return { results: parsed.results };
+}
 //# sourceMappingURL=api-client.js.map

package/dist/lib/api-client.js.map

@@ -1 +1 @@
-{"version":3,"file":"api-client.js","sourceRoot":"","sources":["../../src/lib/api-client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AACtC,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAA;AAOpC;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,QAAgB,EAChB,QAAgB,EAChB,SAAiB,EACjB,WAAmC,EACnC,MAAc;IAEd,MAAM,WAAW,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAA;IAC1C,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAA;IAEnC,4BAA4B;IAC5B,MAAM,QAAQ,GAAG,IAAI,QAAQ,EAAE,CAAA;IAC/B,QAAQ,CAAC,MAAM,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAA;IACrC,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE,SAAS,CAAC,CAAA;IACvC,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,CAAC,WAAW,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAA;IAE1D,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,MAAM,yBAAyB,EAAE;QAC1D,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,GAAG,WAAW;YACd,0EAA0E;SAC3E;QACD,IAAI,EAAE,QAAQ;KACf,CAAC,CAAA;IAEF,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,yEAAyE,CAAC,CAAA;IAC5F,CAAC;IAED,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAA;QAC7B,MAAM,IAAI,KAAK,CAAC,kBAAkB,GAAG,CAAC,MAAM,MAAM,IAAI,EAAE,CAAC,CAAA;IAC3D,CAAC;IAED,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAiB,CAAA;AAC3C,CAAC"}
+{"version":3,"file":"api-client.js","sourceRoot":"","sources":["../../src/lib/api-client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAA;AAOpC;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,OAAe,EACf,QAAgB,EAChB,QAAgB,EAChB,SAAiB,EACjB,WAAmC,EACnC,MAAc;IAEd,4BAA4B;IAC5B,MAAM,QAAQ,GAAG,IAAI,QAAQ,EAAE,CAAA;IAC/B,QAAQ,CAAC,MAAM,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAA;IACrC,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE,SAAS,CAAC,CAAA;IACvC,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAA;IAEtD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,MAAM,yBAAyB,EAAE;QAC1D,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,GAAG,WAAW;YACd,0EAA0E;SAC3E;QACD,IAAI,EAAE,QAAQ;KACf,CAAC,CAAA;IAEF,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,yEAAyE,CAAC,CAAA;IAC5F,CAAC;IAED,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAA;QAC7B,MAAM,IAAI,KAAK,CAAC,kBAAkB,GAAG,CAAC,MAAM,MAAM,IAAI,EAAE,CAAC,CAAA;IAC3D,CAAC;IAED,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAiB,CAAA;AAC3C,CAAC;AA0DD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,MAAqB,EACrB,WAAmC,EACnC,MAAc,EACd,YAA0B,KAAK;IAE/B,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,GAAG,MAAM,qBAAqB,EAAE;QAC1D,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,GAAG,WAAW,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/D,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;KACjC,CAAC,CAAA;IAEF,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACvB,MAAM,IAAI,QAAQ,CAChB,yEAAyE,EACzE,GAAG,CAAC,MAAM,EACV,MAAM,GAAG,CAAC,IAAI,EAAE,CACjB,CAAA;IACH,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAA;QAC7B,MAAM,IAAI,QAAQ,CAAC,uBAAuB,GAAG,CAAC,MAAM,MAAM,IAAI,EAAE,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;IACrF,CAAC;IACD,MAAM,MAAM,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAsC,CAAA;IACtE,IAAI,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAA;IAC/E,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAA;AACpC,CAAC"}

package/dist/lib/auth.d.ts

@@ -1,25 +1,62 @@
+import { type RepoBinding } from './repo-binding.js';
 export interface Credentials {
     accessToken: string;
     refreshToken: string;
+    clientId: string;
     expiresAt: number;
     apiUrl: string;
+    /** Set for per-org credential files (~/.halyard/credentials/<orgId>.json) */
+    orgId?: string;
+    orgSlug?: string;
 }
+export interface CredentialsWithSource {
+    creds: Credentials;
+    /** File the credentials were read from; null when from the HALYARD_TOKEN env var. */
+    filePath: string | null;
+}
+/** Path of the per-org credential file for an org. */
+export declare function perOrgCredentialsPath(orgId: string): string;
+/**
+ * Get stored credentials plus the file they came from, so token refresh can
+ * write back to the same chain it read.
+ *
+ * Resolution order:
+ *   1. HALYARD_TOKEN env var (headless/CI override; no backing file)
+ *   2. Per-org file in ~/.halyard/credentials/ whose orgSlug matches the
+ *      repo binding (when invoked inside a bound repo)
+ *   3. Legacy ~/.halyard/credentials.json (default chain)
+ */
+export declare function getCredentialsWithSource(binding?: RepoBinding | null): CredentialsWithSource | null;
 /**
  * Get stored credentials, or fall back to HALYARD_TOKEN env var.
  * Returns null if no credentials are available.
  */
-export declare function getCredentials(): Credentials | null;
+export declare function getCredentials(binding?: RepoBinding | null): Credentials | null;
 /**
  * Get authorization headers for API requests.
- * Auto-refreshes expired OAuth tokens.
+ * Auto-refreshes expired OAuth tokens, writing the rotated tokens back to the
+ * same file the credentials were read from (per-org or legacy).
  */
-export declare function getAuthHeaders(apiUrl: string): Promise<Record<string, string>>;
+export declare function getAuthHeaders(apiUrl: string, binding?: RepoBinding | null): Promise<Record<string, string>>;
+/** Where refreshed credentials should be persisted. */
+export interface PersistTarget {
+    filePath: string;
+    orgId?: string;
+    orgSlug?: string;
+}
 /**
  * Refresh an expired OAuth access token.
+ * Persists to `persist.filePath` when given (per-org chains keep refreshing
+ * their own file); defaults to the legacy credentials file.
  */
-export declare function refreshToken(refreshTokenValue: string, apiUrl: string): Promise<Credentials>;
+export declare function refreshToken(refreshTokenValue: string, clientId: string, apiUrl: string, orgId?: string, persist?: PersistTarget): Promise<Credentials>;
 /**
- * Save credentials to disk.
+ * Save credentials to disk (legacy file by default, or an explicit per-org
+ * file). Directories are created 0700, files written 0600.
  */
-export declare function saveCredentials(creds: Credentials): void;
+export declare function saveCredentials(creds: Credentials, filePath?: string): void;
+/** Save credentials to the per-org store (requires orgId to be set). */
+export declare function savePerOrgCredentials(creds: Credentials & {
+    orgId: string;
+}): void;
 //# sourceMappingURL=auth.d.ts.map

package/dist/lib/auth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/lib/auth.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,WAAW;IAC1B,WAAW,EAAE,MAAM,CAAA;IACnB,YAAY,EAAE,MAAM,CAAA;IACpB,SAAS,EAAE,MAAM,CAAA;IACjB,MAAM,EAAE,MAAM,CAAA;CACf;AAED;;;GAGG;AACH,wBAAgB,cAAc,IAAI,WAAW,GAAG,IAAI,CAkBnD;AAED;;;GAGG;AACH,wBAAsB,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CA0BpF;AAED;;GAEG;AACH,wBAAsB,YAAY,CAChC,iBAAiB,EAAE,MAAM,EACzB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,WAAW,CAAC,CA8BtB;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,WAAW,GAAG,IAAI,CAGxD"}
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/lib/auth.ts"],"names":[],"mappings":"AAGA,OAAO,EAAmB,KAAK,WAAW,EAAE,MAAM,mBAAmB,CAAA;AAErE,MAAM,WAAW,WAAW;IAC1B,WAAW,EAAE,MAAM,CAAA;IACnB,YAAY,EAAE,MAAM,CAAA;IACpB,QAAQ,EAAE,MAAM,CAAA;IAChB,SAAS,EAAE,MAAM,CAAA;IACjB,MAAM,EAAE,MAAM,CAAA;IACd,6EAA6E;IAC7E,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB;AAED,MAAM,WAAW,qBAAqB;IACpC,KAAK,EAAE,WAAW,CAAA;IAClB,qFAAqF;IACrF,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;CACxB;AAED,sDAAsD;AACtD,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAE3D;AAED;;;;;;;;;GASG;AACH,wBAAgB,wBAAwB,CACtC,OAAO,GAAE,WAAW,GAAG,IAAwB,GAC9C,qBAAqB,GAAG,IAAI,CA4B9B;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAC5B,OAAO,GAAE,WAAW,GAAG,IAAwB,GAC9C,WAAW,GAAG,IAAI,CAEpB;AAwBD;;;;GAIG;AACH,wBAAsB,cAAc,CAClC,MAAM,EAAE,MAAM,EACd,OAAO,GAAE,WAAW,GAAG,IAAwB,GAC9C,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAqCjC;AAED,uDAAuD;AACvD,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,MAAM,CAAA;IAChB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB;AAED;;;;GAIG;AACH,wBAAsB,YAAY,CAChC,iBAAiB,EAAE,MAAM,EACzB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,EACd,KAAK,CAAC,EAAE,MAAM,EACd,OAAO,CAAC,EAAE,aAAa,GACtB,OAAO,CAAC,WAAW,CAAC,CAwCtB;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,WAAW,EAAE,QAAQ,GAAE,MAA0B,GAAG,IAAI,CAI9F;AAED,wEAAwE;AACxE,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,WAAW,GAAG;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAElF"}