@harborppm/cli 0.1.0 → 0.2.0

package/lib/app.mjs

@@ -0,0 +1,41 @@
+/**
+ * `harbor` on its own: the full-screen app (src/tui, bundled into
+ * dist/app.mjs by build.mjs). It needs full access, which `harbor login`
+ * asks for; an older sign-in without it is asked again first.
+ */
+import { refresh } from "./auth.mjs";
+import { HarborError } from "./mcp.mjs";
+
+export const APP_SCOPE = "harbor:app";
+const SKEW_MS = 60_000;
+
+export const hasFullAccess = (creds) => Boolean(creds?.scope?.split(" ").includes(APP_SCOPE));
+
+/** The app's token source: the saved tokens, renewed (and saved again) when they run out. */
+export function tokenSource({ creds, save, fetcher = fetch, now = Date.now }) {
+  let current = creds;
+  const renew = async () => {
+    current = await refresh(current, { fetcher, now });
+    await save(current);
+  };
+  return {
+    server: current.server,
+    async token() {
+      if (current.expiresAt - SKEW_MS < now()) await renew();
+      return current.accessToken;
+    },
+    renew,
+  };
+}
+
+/** Load the bundled app; a checkout that hasn't built it says how. */
+export async function loadApp() {
+  try {
+    return await import("../dist/app.mjs");
+  } catch (error) {
+    if (error?.code === "ERR_MODULE_NOT_FOUND" && /dist\/app\.mjs/.test(error.message)) {
+      throw new HarborError("The full-screen app isn't built here. Run: node cli/build.mjs");
+    }
+    throw error;
+  }
+}

package/lib/auth.mjs

@@ -8,6 +8,8 @@ import { createServer } from "node:http";
 
 export const CLIENT_NAME = "Harbor CLI";
 export const WRITE_SCOPE = "harbor:write";
+/** Full access, as on the website: what the full-screen app needs (/api/app). */
+export const APP_SCOPE = "harbor:app";
 
 const b64url = (buf) => Buffer.from(buf).toString("base64url");
 
@@ -118,7 +120,9 @@ export async function login({ server, readOnly = false, open, fetcher = fetch, n
     state,
     code_challenge: challenge,
     code_challenge_method: "S256",
-    scope: readOnly ? "openid offline_access" : `openid offline_access ${WRITE_SCOPE}`,
+    scope: readOnly
+      ? "openid offline_access"
+      : `openid offline_access ${WRITE_SCOPE} ${APP_SCOPE}`,
   }).toString();
   await open(authorize.toString());
 

package/lib/cli.mjs

@@ -5,6 +5,7 @@
  */
 import { spawn } from "node:child_process";
 import { parseArgs } from "./args.mjs";
+import { hasFullAccess, loadApp, tokenSource } from "./app.mjs";
 import { login } from "./auth.mjs";
 import { DEFAULT_SERVER, forgetCredentials, readCredentials, writeCredentials } from "./config.mjs";
 import { harbors, myWork, taskLine, taskList, todayLocal } from "./format.mjs";
@@ -12,6 +13,7 @@ import { HarborError, createClient } from "./mcp.mjs";
 
 export const HELP = `harbor: Harbor from the terminal
 
+  harbor                                      the full-screen app: everything, with the keyboard
   harbor login [--server URL] [--read-only]   sign in (opens your browser once)
   harbor logout                               forget the sign-in on this machine
   harbor harbors                              the harbors you belong to
@@ -32,7 +34,8 @@ export const HELP = `harbor: Harbor from the terminal
 
   Every command takes --harbor NAME (when you're in more than one) and --json.
   Statuses: backlog, todo, doing, review, done.
-  Changes show in Harbor's History as yours, "via Harbor CLI". Nothing here deletes.
+  Changes show in Harbor's History as yours, "via Harbor CLI". These commands never
+  delete; the full-screen app can, as the website can, and asks first.
 `;
 
 const COMMON = { flags: ["json", "help"], options: ["harbor"] };
@@ -90,11 +93,55 @@ export async function run(argv, io = {}) {
   const fetcher = io.fetch ?? fetch;
   const [command, ...rest] = argv;
 
-  if (!command || command === "help" || command === "--help" || command === "-h") {
+  if (command === "help" || command === "--help" || command === "-h") {
     out(HELP);
     return 0;
   }
 
+  // On its own in a terminal: the full-screen app. Piped or scripted: the help.
+  if (!command || command === "app") {
+    const terminal = io.terminal ?? Boolean(process.stdout.isTTY && process.stdin.isTTY);
+    if (!command && !terminal) {
+      out(HELP);
+      return 0;
+    }
+    if (!terminal) throw new HarborError("The full-screen app needs a terminal.");
+    const { values } = parseArgs(rest, { flags: [], options: ["harbor", "server"] });
+    let creds = await readCredentials(env);
+    if (!hasFullAccess(creds)) {
+      out(
+        creds
+          ? "The full-screen app needs full access, as on the website. Signing in again…"
+          : "Signing in first…",
+      );
+      const code = await run(
+        [
+          "login",
+          ...(values.server
+            ? ["--server", values.server]
+            : creds
+              ? ["--server", creds.server]
+              : []),
+        ],
+        io,
+      );
+      if (code !== 0) return code;
+      creds = await readCredentials(env);
+      if (!hasFullAccess(creds)) {
+        throw new HarborError(
+          "That sign-in allowed reading only, so the app can't open. The commands still work.",
+        );
+      }
+    }
+    const { runApp } = await loadApp();
+    await runApp({
+      source: tokenSource({ creds, save: (c) => writeCredentials(c, env), fetcher }),
+      fetcher,
+      harbor: values.harbor,
+    });
+    return 0;
+  }
+
   if (command === "login") {
     const { values } = parseArgs(rest, { flags: ["read-only"], options: ["server"] });
     const server = (values.server ?? env.HARBOR_SERVER ?? DEFAULT_SERVER).replace(/\/$/, "");

package/lib/format.mjs

@@ -8,13 +8,14 @@ const STATUS = {
   done: "done",
 };
 
-export function taskLine(t, { today } = {}) {
+/** `mine` leaves out whose each task is: every one is yours. */
+export function taskLine(t, { today, mine = false } = {}) {
   const late = t.due && today && t.due < today && t.status !== "done";
   const bits = [
     STATUS[t.status] ?? t.status,
     t.due ? (late ? `late, due ${t.due}` : `due ${t.due}`) : null,
     t.priority && t.priority !== "medium" ? t.priority : null,
-    t.assignee ?? null,
+    mine ? null : (t.assignee ?? null),
     t.project ?? null,
     t.waitingOn ? `waits on ${t.waitingOn}` : null,
   ].filter(Boolean);
@@ -24,7 +25,7 @@ export function taskLine(t, { today } = {}) {
 export function myWork(w, opts) {
   if (!w.you) return w.note ?? "Nothing is yours in this harbor yet.";
   const out = [`${w.you}: ${w.openTasks} open${w.late ? `, ${w.late} late` : ""}`];
-  if (w.tasks?.length) out.push("", ...w.tasks.map((t) => taskLine(t, opts)));
+  if (w.tasks?.length) out.push("", ...w.tasks.map((t) => taskLine(t, { ...opts, mine: true })));
   if (w.waitingOnYou?.length) {
     out.push("", "Waiting on you:");
     for (const x of w.waitingOnYou)

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@harborppm/cli",
-  "version": "0.1.0",
-  "description": "Harbor from the terminal: what's on you, add and finish tasks, comment, check in, log risks.",
+  "version": "0.2.0",
+  "description": "Harbor from the terminal: a full-screen app with everything, plus commands for scripts and agents.",
   "type": "module",
   "bin": {
     "harbor": "bin/harbor.mjs"
@@ -9,15 +9,21 @@
   "files": [
     "bin",
     "lib",
+    "dist",
     "README.md",
     "LICENSE"
   ],
   "engines": {
-    "node": ">=20"
+    "node": ">=22"
   },
   "scripts": {
-    "test": "node --test test/*.test.mjs"
+    "test": "node --test test/*.test.mjs",
+    "build": "node build.mjs"
   },
   "homepage": "https://harborppm.com/ai",
-  "license": "MIT"
+  "license": "MIT",
+  "dependencies": {
+    "ink": "^7.1.1",
+    "react": "^19.2.0"
+  }
 }