@halyard/cli 0.1.1 → 0.2.0

package/dist/lib/auth.js

@@ -1,45 +1,108 @@
-import { readFileSync, writeFileSync } from 'node:fs';
-import { CREDENTIALS_PATH, ensureHalyardDir } from './config.js';
+import { mkdirSync, readFileSync, readdirSync, writeFileSync } from 'node:fs';
+import { dirname, join } from 'node:path';
+import { credentialsDir, credentialsPath, ensureHalyardDir } from './config.js';
+import { findRepoBinding } from './repo-binding.js';
+/** Path of the per-org credential file for an org. */
+export function perOrgCredentialsPath(orgId) {
+    return join(credentialsDir(), `${orgId}.json`);
+}
 /**
- * Get stored credentials, or fall back to HALYARD_TOKEN env var.
- * Returns null if no credentials are available.
+ * Get stored credentials plus the file they came from, so token refresh can
+ * write back to the same chain it read.
+ *
+ * Resolution order:
+ *   1. HALYARD_TOKEN env var (headless/CI override; no backing file)
+ *   2. Per-org file in ~/.halyard/credentials/ whose orgSlug matches the
+ *      repo binding (when invoked inside a bound repo)
+ *   3. Legacy ~/.halyard/credentials.json (default chain)
  */
-export function getCredentials() {
+export function getCredentialsWithSource(binding = findRepoBinding()) {
     // Check env var first (headless/CI use case)
     const envToken = process.env['HALYARD_TOKEN'];
     if (envToken) {
         return {
-            accessToken: envToken,
-            refreshToken: '',
-            expiresAt: Date.now() + 365 * 24 * 60 * 60 * 1000, // Never expires for API keys
-            apiUrl: '', // Will use global --api-url option
+            creds: {
+                accessToken: envToken,
+                refreshToken: '',
+                clientId: '',
+                expiresAt: Date.now() + 365 * 24 * 60 * 60 * 1000, // Never expires for API keys
+                apiUrl: '', // Will use global --api-url option
+            },
+            filePath: null,
         };
     }
+    if (binding) {
+        const orgCreds = findOrgCredentials(binding.org);
+        if (orgCreds)
+            return orgCreds;
+    }
+    try {
+        const filePath = credentialsPath();
+        const raw = readFileSync(filePath, 'utf-8');
+        return { creds: JSON.parse(raw), filePath };
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Get stored credentials, or fall back to HALYARD_TOKEN env var.
+ * Returns null if no credentials are available.
+ */
+export function getCredentials(binding = findRepoBinding()) {
+    return getCredentialsWithSource(binding)?.creds ?? null;
+}
+/** Scan the (small) per-org credentials dir for a chain matching an org slug. */
+function findOrgCredentials(orgSlug) {
+    let entries;
     try {
-        const raw = readFileSync(CREDENTIALS_PATH, 'utf-8');
-        return JSON.parse(raw);
+        entries = readdirSync(credentialsDir());
     }
     catch {
         return null;
     }
+    for (const entry of entries) {
+        if (!entry.endsWith('.json'))
+            continue;
+        const filePath = join(credentialsDir(), entry);
+        try {
+            const creds = JSON.parse(readFileSync(filePath, 'utf-8'));
+            if (creds.orgSlug === orgSlug)
+                return { creds, filePath };
+        }
+        catch {
+            // Skip unreadable/corrupt files
+        }
+    }
+    return null;
 }
 /**
  * Get authorization headers for API requests.
- * Auto-refreshes expired OAuth tokens.
+ * Auto-refreshes expired OAuth tokens, writing the rotated tokens back to the
+ * same file the credentials were read from (per-org or legacy).
  */
-export async function getAuthHeaders(apiUrl) {
-    const creds = getCredentials();
-    if (!creds) {
+export async function getAuthHeaders(apiUrl, binding = findRepoBinding()) {
+    const source = getCredentialsWithSource(binding);
+    if (!source) {
         throw new Error('Not authenticated. Run `halyard login` or set the HALYARD_TOKEN environment variable.');
     }
+    const { creds } = source;
     // API keys don't expire
     if (creds.accessToken.startsWith('sk_halyard_')) {
         return { Authorization: `Bearer ${creds.accessToken}` };
     }
     // Refresh if token is expired or about to expire (30s buffer)
     if (creds.expiresAt < Date.now() + 30_000 && creds.refreshToken) {
+        // Credentials saved before clientId was persisted can't be refreshed.
+        if (!creds.clientId) {
+            throw new Error('Stored credentials are missing the OAuth client ID. Run `halyard login` to re-authenticate.');
+        }
         try {
-            const refreshed = await refreshToken(creds.refreshToken, apiUrl);
+            const refreshed = await refreshToken(creds.refreshToken, creds.clientId, apiUrl, undefined, {
+                filePath: source.filePath ?? credentialsPath(),
+                orgId: creds.orgId,
+                orgSlug: creds.orgSlug,
+            });
             return { Authorization: `Bearer ${refreshed.accessToken}` };
         }
         catch (err) {
@@ -50,15 +113,24 @@ export async function getAuthHeaders(apiUrl) {
 }
 /**
  * Refresh an expired OAuth access token.
+ * Persists to `persist.filePath` when given (per-org chains keep refreshing
+ * their own file); defaults to the legacy credentials file.
  */
-export async function refreshToken(refreshTokenValue, apiUrl) {
+export async function refreshToken(refreshTokenValue, clientId, apiUrl, orgId, persist) {
+    const params = new URLSearchParams({
+        grant_type: 'refresh_token',
+        refresh_token: refreshTokenValue,
+        client_id: clientId,
+    });
+    // Workspace-scoped reissue: the server re-binds the token to the caller's
+    // linked member row in this org (fails closed before rotating the refresh
+    // token, so a rejected switch leaves stored credentials valid).
+    if (orgId)
+        params.set('org_id', orgId);
     const res = await fetch(`${apiUrl}/oauth/token`, {
         method: 'POST',
         headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
-        body: new URLSearchParams({
-            grant_type: 'refresh_token',
-            refresh_token: refreshTokenValue,
-        }),
+        body: params,
     });
     if (!res.ok) {
         const body = await res.text();
@@ -68,17 +140,26 @@ export async function refreshToken(refreshTokenValue, apiUrl) {
     const creds = {
         accessToken: data.access_token,
         refreshToken: data.refresh_token,
+        clientId,
         expiresAt: Date.now() + data.expires_in * 1000,
         apiUrl,
+        ...(persist?.orgId ? { orgId: persist.orgId } : {}),
+        ...(persist?.orgSlug ? { orgSlug: persist.orgSlug } : {}),
     };
-    saveCredentials(creds);
+    saveCredentials(creds, persist?.filePath);
     return creds;
 }
 /**
- * Save credentials to disk.
+ * Save credentials to disk (legacy file by default, or an explicit per-org
+ * file). Directories are created 0700, files written 0600.
  */
-export function saveCredentials(creds) {
+export function saveCredentials(creds, filePath = credentialsPath()) {
     ensureHalyardDir();
-    writeFileSync(CREDENTIALS_PATH, JSON.stringify(creds, null, 2), { mode: 0o600 });
+    mkdirSync(dirname(filePath), { recursive: true, mode: 0o700 });
+    writeFileSync(filePath, JSON.stringify(creds, null, 2), { mode: 0o600 });
+}
+/** Save credentials to the per-org store (requires orgId to be set). */
+export function savePerOrgCredentials(creds) {
+    saveCredentials(creds, perOrgCredentialsPath(creds.orgId));
 }
 //# sourceMappingURL=auth.js.map

package/dist/lib/auth.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../src/lib/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAA;AACrD,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAA;AAShE;;;GAGG;AACH,MAAM,UAAU,cAAc;IAC5B,6CAA6C;IAC7C,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAA;IAC7C,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO;YACL,WAAW,EAAE,QAAQ;YACrB,YAAY,EAAE,EAAE;YAChB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,EAAE,6BAA6B;YAChF,MAAM,EAAE,EAAE,EAAE,mCAAmC;SAChD,CAAA;IACH,CAAC;IAED,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,gBAAgB,EAAE,OAAO,CAAC,CAAA;QACnD,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAgB,CAAA;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,MAAc;IACjD,MAAM,KAAK,GAAG,cAAc,EAAE,CAAA;IAC9B,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CACb,uFAAuF,CACxF,CAAA;IACH,CAAC;IAED,wBAAwB;IACxB,IAAI,KAAK,CAAC,WAAW,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;QAChD,OAAO,EAAE,aAAa,EAAE,UAAU,KAAK,CAAC,WAAW,EAAE,EAAE,CAAA;IACzD,CAAC;IAED,8DAA8D;IAC9D,IAAI,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC;QAChE,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,MAAM,YAAY,CAAC,KAAK,CAAC,YAAY,EAAE,MAAM,CAAC,CAAA;YAChE,OAAO,EAAE,aAAa,EAAE,UAAU,SAAS,CAAC,WAAW,EAAE,EAAE,CAAA;QAC7D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CACb,qCAAqC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,6CAA6C,CACnI,CAAA;QACH,CAAC;IACH,CAAC;IAED,OAAO,EAAE,aAAa,EAAE,UAAU,KAAK,CAAC,WAAW,EAAE,EAAE,CAAA;AACzD,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,iBAAyB,EACzB,MAAc;IAEd,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,MAAM,cAAc,EAAE;QAC/C,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;QAChE,IAAI,EAAE,IAAI,eAAe,CAAC;YACxB,UAAU,EAAE,eAAe;YAC3B,aAAa,EAAE,iBAAiB;SACjC,CAAC;KACH,CAAC,CAAA;IAEF,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAA;QAC7B,MAAM,IAAI,KAAK,CAAC,yBAAyB,GAAG,CAAC,MAAM,MAAM,IAAI,EAAE,CAAC,CAAA;IAClE,CAAC;IAED,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAI7B,CAAA;IAED,MAAM,KAAK,GAAgB;QACzB,WAAW,EAAE,IAAI,CAAC,YAAY;QAC9B,YAAY,EAAE,IAAI,CAAC,aAAa;QAChC,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,UAAU,GAAG,IAAI;QAC9C,MAAM;KACP,CAAA;IAED,eAAe,CAAC,KAAK,CAAC,CAAA;IACtB,OAAO,KAAK,CAAA;AACd,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,KAAkB;IAChD,gBAAgB,EAAE,CAAA;IAClB,aAAa,CAAC,gBAAgB,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;AAClF,CAAC"}
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../src/lib/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,SAAS,CAAA;AAC7E,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AACzC,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAA;AAC/E,OAAO,EAAE,eAAe,EAAoB,MAAM,mBAAmB,CAAA;AAmBrE,sDAAsD;AACtD,MAAM,UAAU,qBAAqB,CAAC,KAAa;IACjD,OAAO,IAAI,CAAC,cAAc,EAAE,EAAE,GAAG,KAAK,OAAO,CAAC,CAAA;AAChD,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,wBAAwB,CACtC,UAA8B,eAAe,EAAE;IAE/C,6CAA6C;IAC7C,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAA;IAC7C,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO;YACL,KAAK,EAAE;gBACL,WAAW,EAAE,QAAQ;gBACrB,YAAY,EAAE,EAAE;gBAChB,QAAQ,EAAE,EAAE;gBACZ,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,EAAE,6BAA6B;gBAChF,MAAM,EAAE,EAAE,EAAE,mCAAmC;aAChD;YACD,QAAQ,EAAE,IAAI;SACf,CAAA;IACH,CAAC;IAED,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,QAAQ,GAAG,kBAAkB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;QAChD,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAA;IAC/B,CAAC;IAED,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,eAAe,EAAE,CAAA;QAClC,MAAM,GAAG,GAAG,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAA;QAC3C,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAgB,EAAE,QAAQ,EAAE,CAAA;IAC5D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAC5B,UAA8B,eAAe,EAAE;IAE/C,OAAO,wBAAwB,CAAC,OAAO,CAAC,EAAE,KAAK,IAAI,IAAI,CAAA;AACzD,CAAC;AAED,iFAAiF;AACjF,SAAS,kBAAkB,CAAC,OAAe;IACzC,IAAI,OAAiB,CAAA;IACrB,IAAI,CAAC;QACH,OAAO,GAAG,WAAW,CAAC,cAAc,EAAE,CAAC,CAAA;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC;YAAE,SAAQ;QACtC,MAAM,QAAQ,GAAG,IAAI,CAAC,cAAc,EAAE,EAAE,KAAK,CAAC,CAAA;QAC9C,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAgB,CAAA;YACxE,IAAI,KAAK,CAAC,OAAO,KAAK,OAAO;gBAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAA;QAC3D,CAAC;QAAC,MAAM,CAAC;YACP,gCAAgC;QAClC,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,MAAc,EACd,UAA8B,eAAe,EAAE;IAE/C,MAAM,MAAM,GAAG,wBAAwB,CAAC,OAAO,CAAC,CAAA;IAChD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CACb,uFAAuF,CACxF,CAAA;IACH,CAAC;IACD,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,CAAA;IAExB,wBAAwB;IACxB,IAAI,KAAK,CAAC,WAAW,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;QAChD,OAAO,EAAE,aAAa,EAAE,UAAU,KAAK,CAAC,WAAW,EAAE,EAAE,CAAA;IACzD,CAAC;IAED,8DAA8D;IAC9D,IAAI,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC;QAChE,sEAAsE;QACtE,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CACb,6FAA6F,CAC9F,CAAA;QACH,CAAC;QACD,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,MAAM,YAAY,CAAC,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE;gBAC1F,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,eAAe,EAAE;gBAC9C,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,OAAO,EAAE,KAAK,CAAC,OAAO;aACvB,CAAC,CAAA;YACF,OAAO,EAAE,aAAa,EAAE,UAAU,SAAS,CAAC,WAAW,EAAE,EAAE,CAAA;QAC7D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CACb,qCAAqC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,6CAA6C,CACnI,CAAA;QACH,CAAC;IACH,CAAC;IAED,OAAO,EAAE,aAAa,EAAE,UAAU,KAAK,CAAC,WAAW,EAAE,EAAE,CAAA;AACzD,CAAC;AASD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,iBAAyB,EACzB,QAAgB,EAChB,MAAc,EACd,KAAc,EACd,OAAuB;IAEvB,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;QACjC,UAAU,EAAE,eAAe;QAC3B,aAAa,EAAE,iBAAiB;QAChC,SAAS,EAAE,QAAQ;KACpB,CAAC,CAAA;IACF,0EAA0E;IAC1E,0EAA0E;IAC1E,gEAAgE;IAChE,IAAI,KAAK;QAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAA;IAEtC,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,MAAM,cAAc,EAAE;QAC/C,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;QAChE,IAAI,EAAE,MAAM;KACb,CAAC,CAAA;IAEF,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAA;QAC7B,MAAM,IAAI,KAAK,CAAC,yBAAyB,GAAG,CAAC,MAAM,MAAM,IAAI,EAAE,CAAC,CAAA;IAClE,CAAC;IAED,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAI7B,CAAA;IAED,MAAM,KAAK,GAAgB;QACzB,WAAW,EAAE,IAAI,CAAC,YAAY;QAC9B,YAAY,EAAE,IAAI,CAAC,aAAa;QAChC,QAAQ;QACR,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,UAAU,GAAG,IAAI;QAC9C,MAAM;QACN,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnD,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1D,CAAA;IAED,eAAe,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAA;IACzC,OAAO,KAAK,CAAA;AACd,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,KAAkB,EAAE,WAAmB,eAAe,EAAE;IACtF,gBAAgB,EAAE,CAAA;IAClB,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;IAC9D,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;AAC1E,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,qBAAqB,CAAC,KAAsC;IAC1E,eAAe,CAAC,KAAK,EAAE,qBAAqB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAA;AAC5D,CAAC"}

package/dist/lib/config-files.d.ts

@@ -0,0 +1,6 @@
+/** Small helpers shared by the scaffolders that read and rewrite client config files. */
+export declare function asObject(value: unknown): Record<string, unknown>;
+export declare function formatError(error: unknown): string;
+export declare function readJsonFile(filePath: string): unknown | Error;
+export declare function writeJsonFile(filePath: string, value: unknown): void;
+//# sourceMappingURL=config-files.d.ts.map

package/dist/lib/config-files.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-files.d.ts","sourceRoot":"","sources":["../../src/lib/config-files.ts"],"names":[],"mappings":"AAGA,yFAAyF;AAEzF,wBAAgB,QAAQ,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAMhE;AAED,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAElD;AAED,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,GAAG,KAAK,CAQ9D;AAED,wBAAgB,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,IAAI,CAGpE"}

package/dist/lib/config-files.js

@@ -0,0 +1,27 @@
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';
+import { dirname } from 'node:path';
+/** Small helpers shared by the scaffolders that read and rewrite client config files. */
+export function asObject(value) {
+    if (value && typeof value === 'object' && !Array.isArray(value)) {
+        return { ...value };
+    }
+    return {};
+}
+export function formatError(error) {
+    return error instanceof Error ? error.message : String(error);
+}
+export function readJsonFile(filePath) {
+    if (!existsSync(filePath))
+        return {};
+    try {
+        return JSON.parse(readFileSync(filePath, 'utf8'));
+    }
+    catch (error) {
+        return new Error(`Could not parse JSON at ${filePath}: ${formatError(error)}`);
+    }
+}
+export function writeJsonFile(filePath, value) {
+    mkdirSync(dirname(filePath), { recursive: true });
+    writeFileSync(filePath, `${JSON.stringify(value, null, 2)}\n`);
+}
+//# sourceMappingURL=config-files.js.map

package/dist/lib/config-files.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-files.js","sourceRoot":"","sources":["../../src/lib/config-files.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAA;AAC5E,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAEnC,yFAAyF;AAEzF,MAAM,UAAU,QAAQ,CAAC,KAAc;IACrC,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAChE,OAAO,EAAE,GAAG,KAAK,EAAE,CAAA;IACrB,CAAC;IAED,OAAO,EAAE,CAAA;AACX,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,KAAc;IACxC,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AAC/D,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,QAAgB;IAC3C,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,EAAE,CAAA;IAEpC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAY,CAAA;IAC9D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,IAAI,KAAK,CAAC,2BAA2B,QAAQ,KAAK,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;IAChF,CAAC;AACH,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,QAAgB,EAAE,KAAc;IAC5D,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IACjD,aAAa,CAAC,QAAQ,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAA;AAChE,CAAC"}

package/dist/lib/config.d.ts

@@ -1,11 +1,17 @@
-/** Root directory for Halyard CLI config and state */
-export declare const HALYARD_DIR: string;
-/** Path to stored OAuth credentials */
-export declare const CREDENTIALS_PATH: string;
-/** Path to sync state (tracks uploaded files) */
-export declare const SYNC_STATE_PATH: string;
 /** Default API URL */
 export declare const DEFAULT_API_URL = "https://api.usehalyard.ai";
-/** Ensure the ~/.halyard directory exists */
+/**
+ * Root directory for Halyard CLI config and state.
+ * Defaults to ~/.halyard; overridable via HALYARD_HOME (tests, sandboxes).
+ * Computed per call so tests can point it at a tmpdir without re-importing.
+ */
+export declare function halyardDir(): string;
+/** Path to the legacy (default-org) OAuth credentials file */
+export declare function credentialsPath(): string;
+/** Directory holding per-org OAuth credential files (<orgId>.json) */
+export declare function credentialsDir(): string;
+/** Path to sync state (tracks uploaded files) */
+export declare function syncStatePath(): string;
+/** Ensure the Halyard config directory exists */
 export declare function ensureHalyardDir(): void;
 //# sourceMappingURL=config.d.ts.map

package/dist/lib/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/lib/config.ts"],"names":[],"mappings":"AAIA,sDAAsD;AACtD,eAAO,MAAM,WAAW,QAA8B,CAAA;AAEtD,uCAAuC;AACvC,eAAO,MAAM,gBAAgB,QAAwC,CAAA;AAErE,iDAAiD;AACjD,eAAO,MAAM,eAAe,QAAuC,CAAA;AAEnE,sBAAsB;AACtB,eAAO,MAAM,eAAe,8BAA8B,CAAA;AAE1D,6CAA6C;AAC7C,wBAAgB,gBAAgB,IAAI,IAAI,CAEvC"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/lib/config.ts"],"names":[],"mappings":"AAIA,sBAAsB;AACtB,eAAO,MAAM,eAAe,8BAA8B,CAAA;AAE1D;;;;GAIG;AACH,wBAAgB,UAAU,IAAI,MAAM,CAEnC;AAED,8DAA8D;AAC9D,wBAAgB,eAAe,IAAI,MAAM,CAExC;AAED,sEAAsE;AACtE,wBAAgB,cAAc,IAAI,MAAM,CAEvC;AAED,iDAAiD;AACjD,wBAAgB,aAAa,IAAI,MAAM,CAEtC;AAED,iDAAiD;AACjD,wBAAgB,gBAAgB,IAAI,IAAI,CAEvC"}

package/dist/lib/config.js

@@ -1,16 +1,30 @@
 import { homedir } from 'node:os';
 import { join } from 'node:path';
 import { mkdirSync } from 'node:fs';
-/** Root directory for Halyard CLI config and state */
-export const HALYARD_DIR = join(homedir(), '.halyard');
-/** Path to stored OAuth credentials */
-export const CREDENTIALS_PATH = join(HALYARD_DIR, 'credentials.json');
-/** Path to sync state (tracks uploaded files) */
-export const SYNC_STATE_PATH = join(HALYARD_DIR, 'sync-state.json');
 /** Default API URL */
 export const DEFAULT_API_URL = 'https://api.usehalyard.ai';
-/** Ensure the ~/.halyard directory exists */
+/**
+ * Root directory for Halyard CLI config and state.
+ * Defaults to ~/.halyard; overridable via HALYARD_HOME (tests, sandboxes).
+ * Computed per call so tests can point it at a tmpdir without re-importing.
+ */
+export function halyardDir() {
+    return process.env['HALYARD_HOME'] ?? join(homedir(), '.halyard');
+}
+/** Path to the legacy (default-org) OAuth credentials file */
+export function credentialsPath() {
+    return join(halyardDir(), 'credentials.json');
+}
+/** Directory holding per-org OAuth credential files (<orgId>.json) */
+export function credentialsDir() {
+    return join(halyardDir(), 'credentials');
+}
+/** Path to sync state (tracks uploaded files) */
+export function syncStatePath() {
+    return join(halyardDir(), 'sync-state.json');
+}
+/** Ensure the Halyard config directory exists */
 export function ensureHalyardDir() {
-    mkdirSync(HALYARD_DIR, { recursive: true, mode: 0o700 });
+    mkdirSync(halyardDir(), { recursive: true, mode: 0o700 });
 }
 //# sourceMappingURL=config.js.map

package/dist/lib/config.js.map

@@ -1 +1 @@
-{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/lib/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAA;AAEnC,sDAAsD;AACtD,MAAM,CAAC,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,UAAU,CAAC,CAAA;AAEtD,uCAAuC;AACvC,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,CAAC,WAAW,EAAE,kBAAkB,CAAC,CAAA;AAErE,iDAAiD;AACjD,MAAM,CAAC,MAAM,eAAe,GAAG,IAAI,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAAA;AAEnE,sBAAsB;AACtB,MAAM,CAAC,MAAM,eAAe,GAAG,2BAA2B,CAAA;AAE1D,6CAA6C;AAC7C,MAAM,UAAU,gBAAgB;IAC9B,SAAS,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;AAC1D,CAAC"}
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/lib/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAA;AAEnC,sBAAsB;AACtB,MAAM,CAAC,MAAM,eAAe,GAAG,2BAA2B,CAAA;AAE1D;;;;GAIG;AACH,MAAM,UAAU,UAAU;IACxB,OAAO,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,UAAU,CAAC,CAAA;AACnE,CAAC;AAED,8DAA8D;AAC9D,MAAM,UAAU,eAAe;IAC7B,OAAO,IAAI,CAAC,UAAU,EAAE,EAAE,kBAAkB,CAAC,CAAA;AAC/C,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,cAAc;IAC5B,OAAO,IAAI,CAAC,UAAU,EAAE,EAAE,aAAa,CAAC,CAAA;AAC1C,CAAC;AAED,iDAAiD;AACjD,MAAM,UAAU,aAAa;IAC3B,OAAO,IAAI,CAAC,UAAU,EAAE,EAAE,iBAAiB,CAAC,CAAA;AAC9C,CAAC;AAED,iDAAiD;AACjD,MAAM,UAAU,gBAAgB;IAC9B,SAAS,CAAC,UAAU,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;AAC3D,CAAC"}

package/dist/lib/copilot-export.d.ts

@@ -0,0 +1,31 @@
+/**
+ * GitHub Copilot CLI integration.
+ *
+ * Copilot CLI (verified against v1.0.82) keeps all sessions in one shared
+ * SQLite store, `~/.copilot/session-store.db`:
+ *
+ * - `sessions`                (id, cwd, repository, branch, created_at, updated_at)
+ * - `turns`                   (session_id, turn_index, user_message, assistant_response, timestamp)
+ * - `assistant_usage_events`  (session_id, model, input_tokens, output_tokens,
+ *                              cache_read_tokens, cache_write_tokens, reasoning_tokens, ...)
+ * - `forge_trajectory_events` (session_id, event_type, command, exit_code, ...)
+ *
+ * Since there is no per-session file to upload, each session is exported as
+ * a versioned JSONL bundle the server-side parser understands
+ * (`packages/queue/src/lib/session-parsers/copilot.ts`): one
+ * `halyard_copilot_session` meta line, then `turn` / `usage` / `trajectory`
+ * records.
+ *
+ * The store is read via the built-in `node:sqlite` module (Node ≥ 22.13,
+ * read-only — no native dependency). On older Nodes, or when anything about
+ * the store is unreadable, discovery degrades to "no sessions" rather than
+ * breaking `halyard sync` for other providers.
+ */
+export declare const COPILOT_BUNDLE_VERSION = 1;
+export interface CopilotSessionRef {
+    id: string;
+    updatedAt: string;
+}
+export declare function listCopilotSessions(): CopilotSessionRef[];
+export declare function buildCopilotBundle(sessionId: string): Buffer;
+//# sourceMappingURL=copilot-export.d.ts.map

package/dist/lib/copilot-export.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"copilot-export.d.ts","sourceRoot":"","sources":["../../src/lib/copilot-export.ts"],"names":[],"mappings":"AAIA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,eAAO,MAAM,sBAAsB,IAAI,CAAA;AAEvC,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAA;IACV,SAAS,EAAE,MAAM,CAAA;CAClB;AA2BD,wBAAgB,mBAAmB,IAAI,iBAAiB,EAAE,CAqBzD;AAED,wBAAgB,kBAAkB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAmD5D"}

package/dist/lib/copilot-export.js

@@ -0,0 +1,129 @@
+import { homedir } from 'node:os';
+import { join } from 'node:path';
+import { existsSync, readFileSync } from 'node:fs';
+/**
+ * GitHub Copilot CLI integration.
+ *
+ * Copilot CLI (verified against v1.0.82) keeps all sessions in one shared
+ * SQLite store, `~/.copilot/session-store.db`:
+ *
+ * - `sessions`                (id, cwd, repository, branch, created_at, updated_at)
+ * - `turns`                   (session_id, turn_index, user_message, assistant_response, timestamp)
+ * - `assistant_usage_events`  (session_id, model, input_tokens, output_tokens,
+ *                              cache_read_tokens, cache_write_tokens, reasoning_tokens, ...)
+ * - `forge_trajectory_events` (session_id, event_type, command, exit_code, ...)
+ *
+ * Since there is no per-session file to upload, each session is exported as
+ * a versioned JSONL bundle the server-side parser understands
+ * (`packages/queue/src/lib/session-parsers/copilot.ts`): one
+ * `halyard_copilot_session` meta line, then `turn` / `usage` / `trajectory`
+ * records.
+ *
+ * The store is read via the built-in `node:sqlite` module (Node ≥ 22.13,
+ * read-only — no native dependency). On older Nodes, or when anything about
+ * the store is unreadable, discovery degrades to "no sessions" rather than
+ * breaking `halyard sync` for other providers.
+ */
+export const COPILOT_BUNDLE_VERSION = 1;
+function copilotDir() {
+    return process.env.COPILOT_DIR ?? join(homedir(), '.copilot');
+}
+function openStore() {
+    const dbPath = join(copilotDir(), 'session-store.db');
+    if (!existsSync(dbPath))
+        return null;
+    try {
+        // node:sqlite is unflagged from Node 22.13; getBuiltinModule avoids a
+        // hard import so older runtimes degrade gracefully.
+        const sqlite = process.getBuiltinModule?.('node:sqlite');
+        if (!sqlite?.DatabaseSync)
+            return null;
+        return new sqlite.DatabaseSync(dbPath, { readOnly: true });
+    }
+    catch {
+        return null;
+    }
+}
+export function listCopilotSessions() {
+    const db = openStore();
+    if (!db)
+        return [];
+    try {
+        // Only sessions with actual conversation or usage activity — Copilot
+        // creates empty session rows for launches that never reach a turn.
+        const rows = db
+            .prepare(`SELECT s.id AS id, s.updated_at AS updated_at FROM sessions s
+         WHERE EXISTS (SELECT 1 FROM turns t WHERE t.session_id = s.id)
+            OR EXISTS (SELECT 1 FROM assistant_usage_events u WHERE u.session_id = s.id)`)
+            .all();
+        return rows
+            .filter((r) => typeof r.id === 'string')
+            .map((r) => ({ id: r.id, updatedAt: String(r.updated_at ?? '') }));
+    }
+    catch {
+        return [];
+    }
+    finally {
+        db.close();
+    }
+}
+export function buildCopilotBundle(sessionId) {
+    const db = openStore();
+    if (!db) {
+        throw new Error('Copilot session store is not readable (requires Node >= 22.13)');
+    }
+    try {
+        const session = db.prepare('SELECT * FROM sessions WHERE id = ?').all(sessionId)[0];
+        if (!session)
+            throw new Error(`Copilot session not found: ${sessionId}`);
+        const lines = [
+            JSON.stringify({
+                type: 'halyard_copilot_session',
+                bundleVersion: COPILOT_BUNDLE_VERSION,
+                session,
+                workspace: readWorkspaceYaml(sessionId),
+            }),
+        ];
+        const push = (type, rows) => {
+            for (const row of rows)
+                lines.push(JSON.stringify({ type, ...row }));
+        };
+        push('turn', db
+            .prepare('SELECT turn_index, user_message, assistant_response, timestamp FROM turns WHERE session_id = ? ORDER BY turn_index')
+            .all(sessionId));
+        push('usage', db
+            .prepare(`SELECT turn_index, model, input_tokens, output_tokens, cache_read_tokens,
+                  cache_write_tokens, reasoning_tokens, duration_ms, created_at
+           FROM assistant_usage_events WHERE session_id = ? ORDER BY id`)
+            .all(sessionId));
+        push('trajectory', db
+            .prepare(`SELECT tool_call_id, turn_index, event_type, command, exit_code, created_at
+           FROM forge_trajectory_events WHERE session_id = ? ORDER BY id`)
+            .all(sessionId));
+        return Buffer.from(`${lines.join('\n')}\n`);
+    }
+    finally {
+        db.close();
+    }
+}
+/**
+ * Best-effort read of the per-session workspace.yaml (flat `key: value`
+ * lines only — no YAML dependency needed for this shape).
+ */
+function readWorkspaceYaml(sessionId) {
+    const path = join(copilotDir(), 'session-state', sessionId, 'workspace.yaml');
+    try {
+        const parsed = {};
+        for (const line of readFileSync(path, 'utf-8').split('\n')) {
+            const idx = line.indexOf(': ');
+            if (idx <= 0)
+                continue;
+            parsed[line.slice(0, idx).trim()] = line.slice(idx + 2).trim();
+        }
+        return parsed;
+    }
+    catch {
+        return null;
+    }
+}
+//# sourceMappingURL=copilot-export.js.map

package/dist/lib/copilot-export.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"copilot-export.js","sourceRoot":"","sources":["../../src/lib/copilot-export.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AAElD;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAA;AAYvC,SAAS,UAAU;IACjB,OAAO,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,UAAU,CAAC,CAAA;AAC/D,CAAC;AAED,SAAS,SAAS;IAChB,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,EAAE,EAAE,kBAAkB,CAAC,CAAA;IACrD,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAA;IACpC,IAAI,CAAC;QACH,sEAAsE;QACtE,oDAAoD;QACpD,MAAM,MAAM,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC,aAAa,CAE1C,CAAA;QACb,IAAI,CAAC,MAAM,EAAE,YAAY;YAAE,OAAO,IAAI,CAAA;QACtC,OAAO,IAAI,MAAM,CAAC,YAAY,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAA;IAC5D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC;AAED,MAAM,UAAU,mBAAmB;IACjC,MAAM,EAAE,GAAG,SAAS,EAAE,CAAA;IACtB,IAAI,CAAC,EAAE;QAAE,OAAO,EAAE,CAAA;IAClB,IAAI,CAAC;QACH,qEAAqE;QACrE,mEAAmE;QACnE,MAAM,IAAI,GAAG,EAAE;aACZ,OAAO,CACN;;yFAEiF,CAClF;aACA,GAAG,EAAE,CAAA;QACR,OAAO,IAAI;aACR,MAAM,CAAC,CAAC,CAAC,EAA2C,EAAE,CAAC,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ,CAAC;aAChF,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,UAAU,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAA;IACtE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAA;IACX,CAAC;YAAS,CAAC;QACT,EAAE,CAAC,KAAK,EAAE,CAAA;IACZ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,SAAiB;IAClD,MAAM,EAAE,GAAG,SAAS,EAAE,CAAA;IACtB,IAAI,CAAC,EAAE,EAAE,CAAC;QACR,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAA;IACnF,CAAC;IACD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,EAAE,CAAC,OAAO,CAAC,qCAAqC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAA;QACnF,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,SAAS,EAAE,CAAC,CAAA;QAExE,MAAM,KAAK,GAAa;YACtB,IAAI,CAAC,SAAS,CAAC;gBACb,IAAI,EAAE,yBAAyB;gBAC/B,aAAa,EAAE,sBAAsB;gBACrC,OAAO;gBACP,SAAS,EAAE,iBAAiB,CAAC,SAAS,CAAC;aACxC,CAAC;SACH,CAAA;QACD,MAAM,IAAI,GAAG,CAAC,IAAY,EAAE,IAA+B,EAAQ,EAAE;YACnE,KAAK,MAAM,GAAG,IAAI,IAAI;gBAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,GAAG,GAAG,EAAE,CAAC,CAAC,CAAA;QACtE,CAAC,CAAA;QACD,IAAI,CACF,MAAM,EACN,EAAE;aACC,OAAO,CACN,oHAAoH,CACrH;aACA,GAAG,CAAC,SAAS,CAAC,CAClB,CAAA;QACD,IAAI,CACF,OAAO,EACP,EAAE;aACC,OAAO,CACN;;wEAE8D,CAC/D;aACA,GAAG,CAAC,SAAS,CAAC,CAClB,CAAA;QACD,IAAI,CACF,YAAY,EACZ,EAAE;aACC,OAAO,CACN;yEAC+D,CAChE;aACA,GAAG,CAAC,SAAS,CAAC,CAClB,CAAA;QACD,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC7C,CAAC;YAAS,CAAC;QACT,EAAE,CAAC,KAAK,EAAE,CAAA;IACZ,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,iBAAiB,CAAC,SAAiB;IAC1C,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,EAAE,EAAE,eAAe,EAAE,SAAS,EAAE,gBAAgB,CAAC,CAAA;IAC7E,IAAI,CAAC;QACH,MAAM,MAAM,GAA2B,EAAE,CAAA;QACzC,KAAK,MAAM,IAAI,IAAI,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3D,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;YAC9B,IAAI,GAAG,IAAI,CAAC;gBAAE,SAAQ;YACtB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;QAChE,CAAC;QACD,OAAO,MAAM,CAAA;IACf,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC"}

package/dist/lib/discovery.d.ts

@@ -1,12 +1,32 @@
+export type SessionProvider = 'claude' | 'codex' | 'gemini' | 'opencode' | 'copilot';
+export declare const SESSION_PROVIDERS: SessionProvider[];
 export interface DiscoveredSession {
-    provider: 'claude' | 'codex';
+    provider: SessionProvider;
+    /**
+     * Stable sync-state key. A real file path for file-backed providers
+     * (claude/codex/gemini); a `provider://sessionId` pseudo-path for
+     * store-backed providers (opencode/copilot) whose sessions live in a
+     * shared database rather than one file.
+     */
     filePath: string;
     sessionId: string;
     sizeBytes: number;
+    /**
+     * Working directory the session ran in, extracted from the log head.
+     * Only populated for providers whose log format is known to carry it
+     * (claude, codex); absent sessions count as unresolved in scoped sync.
+     */
+    cwd?: string;
+    /**
+     * Change marker for store-backed sessions — hashed in place of file
+     * contents so sync can skip unchanged sessions without exporting them.
+     * Absent for file-backed sessions (their bytes are hashed directly).
+     */
+    freshness?: string;
 }
 /**
  * Discover Claude Code session log files.
- * Claude Code stores sessions in ~/.claude/projects/<project-hash>/sessions/
+ * Claude Code stores sessions in ~/.claude/projects/<project-hash>/
  * Session files are JSONL format.
  */
 export declare function discoverClaudeSessions(): DiscoveredSession[];
@@ -15,8 +35,46 @@ export declare function discoverClaudeSessions(): DiscoveredSession[];
  * Codex stores sessions in ~/.codex/sessions/<yyyy>/<mm>/<dd>/rollout-*.jsonl
  */
 export declare function discoverCodexSessions(): DiscoveredSession[];
+/**
+ * Discover Gemini CLI chat session files.
+ * Gemini CLI stores sessions in ~/.gemini/tmp/<project>/chats/session-*.jsonl
+ * (legacy sessions are single-JSON `.json` files; subagent sessions live in
+ * chats/<parent-session-id>/ subdirectories).
+ */
+export declare function discoverGeminiSessions(): DiscoveredSession[];
+/**
+ * Discover OpenCode sessions. OpenCode keeps everything in a SQLite
+ * database; sessions are listed via the `opencode` CLI itself and exported
+ * one at a time at upload time (see loadSessionContent).
+ */
+export declare function discoverOpencodeSessions(): DiscoveredSession[];
+/**
+ * Discover GitHub Copilot CLI sessions. Copilot CLI keeps all sessions in
+ * one shared SQLite store (~/.copilot/session-store.db); each session is
+ * exported as a JSONL bundle at upload time (see loadSessionContent).
+ */
+export declare function discoverCopilotSessions(): DiscoveredSession[];
 /**
  * Auto-detect which providers have session files available.
  */
 export declare function discoverAllSessions(providerFilter?: string): DiscoveredSession[];
+/**
+ * Materialize the bytes to upload for a discovered session: the file itself
+ * for file-backed providers, or a synthesized export for store-backed ones.
+ */
+export declare function loadSessionContent(session: DiscoveredSession): Promise<Buffer>;
+/** The name the ingest endpoint stores for the uploaded blob. */
+export declare function uploadFileName(session: DiscoveredSession): string;
+/**
+ * Claude session logs: the first records are often non-cwd entries
+ * (type:"queue-operation", "last-prompt", ...); a record carrying a `cwd`
+ * string reliably appears within the first few lines. Scan up to
+ * MAX_HEAD_LINES JSON lines and take the first `cwd` found.
+ */
+export declare function extractClaudeCwd(head: string): string | undefined;
+/**
+ * Codex session logs: the first line is a session_meta record with the cwd at
+ * `payload.cwd` (older formats used a top-level `cwd`).
+ */
+export declare function extractCodexCwd(firstLine: string): string | undefined;
 //# sourceMappingURL=discovery.d.ts.map

package/dist/lib/discovery.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"discovery.d.ts","sourceRoot":"","sources":["../../src/lib/discovery.ts"],"names":[],"mappings":"AAIA,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAA;IAC5B,QAAQ,EAAE,MAAM,CAAA;IAChB,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;CAClB;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,IAAI,iBAAiB,EAAE,CAoB5D;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,IAAI,iBAAiB,EAAE,CAO3D;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,cAAc,CAAC,EAAE,MAAM,GAAG,iBAAiB,EAAE,CAYhF"}
+{"version":3,"file":"discovery.d.ts","sourceRoot":"","sources":["../../src/lib/discovery.ts"],"names":[],"mappings":"AAeA,MAAM,MAAM,eAAe,GAAG,QAAQ,GAAG,OAAO,GAAG,QAAQ,GAAG,UAAU,GAAG,SAAS,CAAA;AAEpF,eAAO,MAAM,iBAAiB,EAAE,eAAe,EAM9C,CAAA;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,eAAe,CAAA;IACzB;;;;;OAKG;IACH,QAAQ,EAAE,MAAM,CAAA;IAChB,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;IACjB;;;;OAIG;IACH,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAOD;;;;GAIG;AACH,wBAAgB,sBAAsB,IAAI,iBAAiB,EAAE,CAoB5D;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,IAAI,iBAAiB,EAAE,CAO3D;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,IAAI,iBAAiB,EAAE,CAmB5D;AAED;;;;GAIG;AACH,wBAAgB,wBAAwB,IAAI,iBAAiB,EAAE,CAQ9D;AAED;;;;GAIG;AACH,wBAAgB,uBAAuB,IAAI,iBAAiB,EAAE,CAQ7D;AAUD;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,cAAc,CAAC,EAAE,MAAM,GAAG,iBAAiB,EAAE,CAOhF;AAED;;;GAGG;AACH,wBAAsB,kBAAkB,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,MAAM,CAAC,CAQpF;AAED,iEAAiE;AACjE,wBAAgB,cAAc,CAAC,OAAO,EAAE,iBAAiB,GAAG,MAAM,CAIjE;AAsDD;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAYjE;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAWrE"}