@impulselab/cli 0.1.3 → 0.1.5

package/dist/index.js

@@ -211,7 +211,11 @@ import { z as z5 } from "zod";
 import { z as z2 } from "zod";
 var ModuleFileSchema = z2.object({
   src: z2.string(),
-  dest: z2.string()
+  dest: z2.string(),
+  /** If set, this file is only installed when the named module is already installed. */
+  when: z2.object({
+    moduleInstalled: z2.string()
+  }).optional()
 });
 
 // src/schemas/module-dependency.ts
@@ -242,24 +246,40 @@ var ModuleManifestSchema = z5.object({
   /** Names of sub-modules available under this parent module (e.g. ["quote-to-cash", "gocardless"]). */
   subModules: z5.array(z5.string()).default([]),
   dependencies: z5.array(ModuleDependencySchema).default([]),
-  moduleDependencies: z5.array(z5.string()).default([]),
+  moduleDependencies: z5.array(ModuleDependencySchema).default([]),
+  /** Optional module dependencies that enhance this module but are not required. */
+  optionalModuleDependencies: z5.array(ModuleDependencySchema).default([]),
   files: z5.array(ModuleFileSchema).default([]),
   transforms: z5.array(ModuleTransformSchema).default([]),
   /** Documentation metadata listing env vars this module requires (displayed in install summary). */
   envVars: z5.array(z5.string()).default([]),
-  postInstall: z5.array(z5.string()).optional()
+  postInstall: z5.array(z5.string()).optional(),
+  /** Logical category for grouping in `impulse list`. */
+  category: z5.enum(["core", "feature", "integration", "dx"]).optional(),
+  /** Module names that cannot be installed alongside this module. */
+  incompatibleWith: z5.array(z5.string()).default([]),
+  /** Capability tokens this module provides (for future dependency resolution). */
+  provides: z5.array(z5.string()).default([]),
+  /** Which package in a monorepo this module targets. */
+  targetPackage: z5.enum(["database", "server", "web", "root"]).default("root")
 });
 
+// src/registry/constants.ts
+var registryConstants = {
+  githubOrg: "impulse-studio",
+  githubRepo: "impulse-modules",
+  githubBranch: "main",
+  modulesDir: "modules",
+  subModulesDirName: "sub-modules",
+  manifestFileName: "module.json"
+};
+
 // src/registry/github-urls.ts
 import { execSync } from "child_process";
-var GITHUB_ORG = "impulse-studio";
-var GITHUB_REPO = "impulse-modules";
-var GITHUB_BRANCH = "main";
-var MODULES_DIR = "modules";
 var githubUrls = {
-  rawFile: (registryPath, file) => `https://raw.githubusercontent.com/${GITHUB_ORG}/${GITHUB_REPO}/${GITHUB_BRANCH}/${MODULES_DIR}/${registryPath}/${file}`,
-  moduleList: () => `https://api.github.com/repos/${GITHUB_ORG}/${GITHUB_REPO}/contents/${MODULES_DIR}`,
-  subModulesList: (parentModule) => `https://api.github.com/repos/${GITHUB_ORG}/${GITHUB_REPO}/contents/${MODULES_DIR}/${parentModule}/sub-modules`
+  rawFile: (registryPath, file) => `https://raw.githubusercontent.com/${registryConstants.githubOrg}/${registryConstants.githubRepo}/${registryConstants.githubBranch}/${registryConstants.modulesDir}/${registryPath}/${file}`,
+  moduleList: () => `https://api.github.com/repos/${registryConstants.githubOrg}/${registryConstants.githubRepo}/contents/${registryConstants.modulesDir}`,
+  subModulesList: (parentModule) => `https://api.github.com/repos/${registryConstants.githubOrg}/${registryConstants.githubRepo}/contents/${registryConstants.modulesDir}/${parentModule}/${registryConstants.subModulesDirName}`
 };
 var _cachedToken;
 function getGitHubToken() {
@@ -301,7 +321,7 @@ function parseModuleId(moduleId) {
 function moduleRegistryPath(moduleId) {
   const { parent, child } = parseModuleId(moduleId);
   if (child === null) return parent;
-  return `${parent}/sub-modules/${child}`;
+  return `${parent}/${registryConstants.subModulesDirName}/${child}`;
 }
 
 // src/registry/fetch-module-manifest.ts
@@ -309,7 +329,7 @@ var { readJson: readJson3, pathExists: pathExists4 } = fsExtra5;
 async function fetchModuleManifest(moduleId, localPath) {
   const registryPath = moduleRegistryPath(moduleId);
   if (localPath) {
-    const file = path3.join(localPath, registryPath, "module.json");
+    const file = path3.join(localPath, registryPath, registryConstants.manifestFileName);
     if (!await pathExists4(file)) {
       throw new Error(`Local module not found: ${file}`);
     }
@@ -320,7 +340,7 @@ async function fetchModuleManifest(moduleId, localPath) {
     }
     return parsed2.data;
   }
-  const url = githubUrls.rawFile(registryPath, "module.json");
+  const url = githubUrls.rawFile(registryPath, registryConstants.manifestFileName);
   const res = await fetch(url, { headers: getGitHubHeaders() });
   if (!res.ok) {
     if (res.status === 404) {
@@ -348,14 +368,22 @@ async function listAvailableModules(localPath) {
     const result = [];
     for (const entry of entries2) {
       if (!entry.isDirectory()) continue;
-      const manifestFile = path4.join(localPath, entry.name, "module.json");
+      const manifestFile = path4.join(
+        localPath,
+        entry.name,
+        registryConstants.manifestFileName
+      );
       if (!await pathExists5(manifestFile)) continue;
       try {
         const raw = await readJson4(manifestFile);
         const parsed = ModuleManifestSchema.safeParse(raw);
         if (!parsed.success) continue;
         let subModules;
-        const subModulesDir = path4.join(localPath, entry.name, "sub-modules");
+        const subModulesDir = path4.join(
+          localPath,
+          entry.name,
+          registryConstants.subModulesDirName
+        );
         if (await pathExists5(subModulesDir)) {
           const subEntries = await readdir(subModulesDir, { withFileTypes: true });
           subModules = subEntries.filter((e) => e.isDirectory()).map((e) => e.name);
@@ -364,7 +392,8 @@ async function listAvailableModules(localPath) {
         result.push({
           name: parsed.data.name,
           description: parsed.data.description,
-          ...subModules ? { subModules } : {}
+          ...subModules ? { subModules } : {},
+          ...parsed.data.category ? { category: parsed.data.category } : {}
         });
       } catch {
       }
@@ -413,10 +442,10 @@ async function listAvailableModules(localPath) {
 // src/registry/fetch-module-file.ts
 async function fetchModuleFile(moduleName, fileSrc, localPath) {
   if (localPath) {
-    const { readFile: readFile6 } = await import("fs/promises");
+    const { readFile: readFile7 } = await import("fs/promises");
     const { join } = await import("path");
     const file = join(localPath, moduleName, fileSrc);
-    return readFile6(file, "utf-8");
+    return readFile7(file, "utf-8");
   }
   const url = githubUrls.rawFile(moduleName, fileSrc);
   const res = await fetch(url, { headers: getGitHubHeaders() });
@@ -428,28 +457,35 @@ async function fetchModuleFile(moduleName, fileSrc, localPath) {
 
 // src/installer.ts
 import fsExtra7 from "fs-extra";
+import { readFile } from "fs/promises";
 import path5 from "path";
 import * as p2 from "@clack/prompts";
 var { outputFile, pathExists: pathExists6 } = fsExtra7;
 async function installFiles(options) {
-  const { moduleName, files, cwd, dryRun, localPath } = options;
+  const { moduleName, files, cwd, dryRun, localPath, installedModules = /* @__PURE__ */ new Set() } = options;
   const results = [];
   for (const file of files) {
+    if (file.when?.moduleInstalled !== void 0 && !installedModules.has(file.when.moduleInstalled)) {
+      results.push({
+        dest: file.dest,
+        action: "conditional-skip",
+        reason: `requires ${file.when.moduleInstalled}`
+      });
+      continue;
+    }
     const destAbs = path5.join(cwd, file.dest);
     const exists = await pathExists6(destAbs);
     if (exists) {
+      if (dryRun) {
+        results.push({ dest: file.dest, action: "would-overwrite" });
+        continue;
+      }
       const content = await fetchModuleFile(moduleName, file.src, localPath);
-      const existing = await import("fs/promises").then(
-        (fs) => fs.readFile(destAbs, "utf-8")
-      );
+      const existing = await readFile(destAbs, "utf-8");
       if (existing === content) {
         results.push({ dest: file.dest, action: "skipped" });
         continue;
       }
-      if (dryRun) {
-        results.push({ dest: file.dest, action: "would-overwrite" });
-        continue;
-      }
       const answer = await p2.confirm({
         message: `File already exists: ${file.dest} \u2014 overwrite?`,
         initialValue: false
@@ -476,7 +512,7 @@ async function installFiles(options) {
 // src/transforms/append-export.ts
 import fsExtra8 from "fs-extra";
 import path6 from "path";
-var { readFile, outputFile: outputFile2, pathExists: pathExists7 } = fsExtra8;
+var { readFile: readFile2, outputFile: outputFile2, pathExists: pathExists7 } = fsExtra8;
 async function appendExport(target, value, cwd, dryRun) {
   const file = path6.join(cwd, target);
   if (!await pathExists7(file)) {
@@ -486,7 +522,7 @@ async function appendExport(target, value, cwd, dryRun) {
     }
     return;
   }
-  const content = await readFile(file, "utf-8");
+  const content = await readFile2(file, "utf-8");
   if (content.includes(value)) return;
   if (!dryRun) {
     const newContent = content.endsWith("\n") ? `${content}${value}
@@ -500,7 +536,7 @@ ${value}
 // src/transforms/register-route.ts
 import fsExtra9 from "fs-extra";
 import path7 from "path";
-var { readFile: readFile2, outputFile: outputFile3, pathExists: pathExists8 } = fsExtra9;
+var { readFile: readFile3, outputFile: outputFile3, pathExists: pathExists8 } = fsExtra9;
 async function registerRoute(target, value, cwd, dryRun) {
   const file = path7.join(cwd, target);
   if (!await pathExists8(file)) {
@@ -508,7 +544,7 @@ async function registerRoute(target, value, cwd, dryRun) {
       `register-route: target file not found: ${target}. Please ensure your router file exists.`
     );
   }
-  const content = await readFile2(file, "utf-8");
+  const content = await readFile3(file, "utf-8");
   if (content.includes(value)) return;
   const routerPattern = /^([ \t]*\})[ \t]*(?:satisfies|as)\s/m;
   const match = routerPattern.exec(content);
@@ -528,7 +564,7 @@ async function registerRoute(target, value, cwd, dryRun) {
 // src/transforms/add-nav-item.ts
 import fsExtra10 from "fs-extra";
 import path8 from "path";
-var { readFile: readFile3, outputFile: outputFile4, pathExists: pathExists9 } = fsExtra10;
+var { readFile: readFile4, outputFile: outputFile4, pathExists: pathExists9 } = fsExtra10;
 async function addNavItem(target, value, cwd, dryRun) {
   const file = path8.join(cwd, target);
   if (!await pathExists9(file)) {
@@ -536,7 +572,7 @@ async function addNavItem(target, value, cwd, dryRun) {
       `add-nav-item: target file not found: ${target}`
     );
   }
-  const content = await readFile3(file, "utf-8");
+  const content = await readFile4(file, "utf-8");
   if (content.includes(value)) return;
   const openPattern = /(?:const\s+\w+(?:\s*:\s*[\w<>\[\], ]+)?\s*=\s*\[|items\s*:\s*\[)/;
   const openMatch = openPattern.exec(content);
@@ -573,7 +609,7 @@ async function addNavItem(target, value, cwd, dryRun) {
 // src/transforms/merge-schema.ts
 import fsExtra11 from "fs-extra";
 import path9 from "path";
-var { readFile: readFile4, outputFile: outputFile5, pathExists: pathExists10 } = fsExtra11;
+var { readFile: readFile5, outputFile: outputFile5, pathExists: pathExists10 } = fsExtra11;
 async function mergeSchema(target, value, cwd, dryRun) {
   const file = path9.join(cwd, target);
   if (!await pathExists10(file)) {
@@ -583,7 +619,7 @@ async function mergeSchema(target, value, cwd, dryRun) {
     }
     return;
   }
-  const content = await readFile4(file, "utf-8");
+  const content = await readFile5(file, "utf-8");
   if (content.includes(value)) return;
   if (!dryRun) {
     const newContent = content.endsWith("\n") ? `${content}${value}
@@ -598,12 +634,12 @@ ${value}
 import fsExtra12 from "fs-extra";
 import path10 from "path";
 import * as p3 from "@clack/prompts";
-var { readFile: readFile5, outputFile: outputFile6, pathExists: pathExists11 } = fsExtra12;
+var { readFile: readFile6, outputFile: outputFile6, pathExists: pathExists11 } = fsExtra12;
 async function addEnv(target, value, cwd, dryRun) {
   const file = path10.join(cwd, target);
   let content = "";
   if (await pathExists11(file)) {
-    content = await readFile5(file, "utf-8");
+    content = await readFile6(file, "utf-8");
     const escaped = value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
     const keyPattern = new RegExp(`^${escaped}=`, "m");
     if (keyPattern.test(content)) return;
@@ -669,9 +705,8 @@ function authPath() {
 import { z as z6 } from "zod";
 var AuthCredentialsSchema = z6.object({
   token: z6.string(),
-  refreshToken: z6.string().optional(),
   expiresAt: z6.string().optional(),
-  email: z6.string()
+  email: z6.string().optional()
 });
 
 // src/auth/read-auth.ts
@@ -701,21 +736,28 @@ async function requireAuth() {
 }
 
 // src/commands/add.ts
-async function resolveModuleDeps(moduleId, localPath, resolved, orderedModules) {
+async function getManifest(moduleId, localPath, manifests) {
+  const cached = manifests.get(moduleId);
+  if (cached) return cached;
+  const manifest = await fetchModuleManifest(moduleId, localPath);
+  manifests.set(moduleId, manifest);
+  return manifest;
+}
+async function resolveModuleDeps(moduleId, localPath, manifests, resolved, orderedModules) {
   if (resolved.has(moduleId)) return;
   resolved.add(moduleId);
-  const manifest = await fetchModuleManifest(moduleId, localPath);
+  const manifest = await getManifest(moduleId, localPath, manifests);
   for (const dep of manifest.moduleDependencies) {
-    await resolveModuleDeps(dep, localPath, resolved, orderedModules);
+    await resolveModuleDeps(dep, localPath, manifests, resolved, orderedModules);
   }
   orderedModules.push(moduleId);
 }
-async function resolveWithParent(moduleId, localPath, installedNames, resolved, orderedModules) {
+async function resolveWithParent(moduleId, localPath, installedNames, manifests, resolved, orderedModules) {
   const { parent, child } = parseModuleId(moduleId);
   if (child !== null && !installedNames.has(parent)) {
-    await resolveModuleDeps(parent, localPath, resolved, orderedModules);
+    await resolveModuleDeps(parent, localPath, manifests, resolved, orderedModules);
   }
-  await resolveModuleDeps(moduleId, localPath, resolved, orderedModules);
+  await resolveModuleDeps(moduleId, localPath, manifests, resolved, orderedModules);
 }
 function detectPackageManager(cwd) {
   if (existsSync(path12.join(cwd, "pnpm-lock.yaml"))) return "pnpm";
@@ -737,17 +779,24 @@ function installNpmDeps(deps, cwd, dryRun) {
   p5.log.step(`Installing dependencies: ${deps.join(", ")}`);
   execFileSync(pm, args, { cwd, stdio: "inherit" });
 }
-async function installModule(moduleId, manifest, cwd, dryRun, localPath) {
+async function installModule(moduleId, manifest, cwd, dryRun, installedModules, localPath) {
   p5.log.step(`Installing ${moduleId}@${manifest.version}...`);
+  const installedDests = [];
   if (manifest.files.length > 0) {
     const installed = await installFiles({
       moduleName: moduleId,
       files: manifest.files,
       cwd,
       dryRun,
-      localPath
+      localPath,
+      installedModules
     });
     for (const f of installed) {
+      if (f.action === "conditional-skip") {
+        p5.log.message(`  \u25CB ${f.dest} [skipped: ${f.reason}]`);
+        continue;
+      }
+      installedDests.push(f.dest);
       const icon = f.action === "created" || f.action === "would-create" ? "+" : f.action === "overwritten" || f.action === "would-overwrite" ? "~" : "=";
       p5.log.message(`  ${icon} ${f.dest}`);
     }
@@ -756,14 +805,15 @@ async function installModule(moduleId, manifest, cwd, dryRun, localPath) {
     p5.log.step(`  transform: ${transform.type} \u2192 ${transform.target}`);
     await runTransform(transform, cwd, dryRun);
   }
+  return installedDests;
 }
-function recordModule(config, moduleId, manifest, now) {
+function recordModule(config, moduleId, manifest, installedFiles, now) {
   const existing = config.installedModules.findIndex((m) => m.name === moduleId);
   const record = {
     name: moduleId,
     version: manifest.version,
     installedAt: now,
-    files: manifest.files.map((f) => f.dest)
+    files: installedFiles
   };
   if (existing >= 0) {
     config.installedModules[existing] = record;
@@ -820,7 +870,7 @@ async function pickModulesInteractively(localPath) {
   return [...result];
 }
 async function runAdd(options) {
-  let { moduleNames, cwd, dryRun, localPath, withSubModules = [] } = options;
+  let { moduleNames, cwd, dryRun, localPath, withSubModules = [], allowScripts = false } = options;
   let allTargets;
   if (moduleNames.length === 0) {
     p5.intro(`impulse add${dryRun ? " [dry-run]" : ""}`);
@@ -852,6 +902,7 @@ async function runAdd(options) {
     process.exit(1);
   }
   const installedNames = new Set(config.installedModules.map((m) => m.name));
+  const manifests = /* @__PURE__ */ new Map();
   if (withSubModules.length === 0) {
     const alreadyInstalled = allTargets.filter((id) => {
       const { child } = parseModuleId(id);
@@ -873,7 +924,7 @@ async function runAdd(options) {
     }
   }
   if (moduleNames.length === 1 && withSubModules.length > 0) {
-    const parentManifest = await fetchModuleManifest(moduleNames[0], localPath).catch(() => null);
+    const parentManifest = await getManifest(moduleNames[0], localPath, manifests).catch(() => null);
     if (parentManifest) {
       if (parentManifest.subModules.length === 0) {
         p5.cancel(`"${moduleNames[0]}" has no declared sub-modules.`);
@@ -895,7 +946,7 @@ Available: ${parentManifest.subModules.join(", ")}`
   const orderedModules = [];
   try {
     for (const target of allTargets) {
-      await resolveWithParent(target, localPath, installedNames, resolved, orderedModules);
+      await resolveWithParent(target, localPath, installedNames, manifests, resolved, orderedModules);
     }
   } catch (err) {
     s.stop("Dependency resolution failed.");
@@ -903,18 +954,34 @@ Available: ${parentManifest.subModules.join(", ")}`
     process.exit(1);
   }
   s.stop(`Resolved: ${orderedModules.join(" \u2192 ")}`);
-  const manifests = /* @__PURE__ */ new Map();
-  for (const id of orderedModules) {
-    manifests.set(id, await fetchModuleManifest(id, localPath));
+  const orderedManifests = orderedModules.map((id) => {
+    const manifest = manifests.get(id);
+    if (!manifest) {
+      throw new Error(`Missing manifest for resolved module "${id}".`);
+    }
+    return [id, manifest];
+  });
+  for (const [id, manifest] of orderedManifests) {
+    if (installedNames.has(id)) continue;
+    for (const incompatible of manifest.incompatibleWith) {
+      if (installedNames.has(incompatible)) {
+        p5.cancel(`Module "${id}" is incompatible with installed module "${incompatible}".`);
+        process.exit(1);
+      }
+      if (manifests.has(incompatible) && !installedNames.has(incompatible)) {
+        p5.cancel(`Module "${id}" is incompatible with module "${incompatible}" (also being installed).`);
+        process.exit(1);
+      }
+    }
   }
   const allDeps = /* @__PURE__ */ new Set();
-  for (const manifest of manifests.values()) {
+  for (const [, manifest] of orderedManifests) {
     for (const dep of manifest.dependencies) {
       allDeps.add(dep);
     }
   }
   p5.log.message("\nSummary of changes:");
-  for (const [id, manifest] of manifests) {
+  for (const [id, manifest] of orderedManifests) {
     p5.log.message(`
   Module: ${id}@${manifest.version}`);
     for (const file of manifest.files) {
@@ -925,7 +992,7 @@ Available: ${parentManifest.subModules.join(", ")}`
     }
   }
   const allEnvVars = /* @__PURE__ */ new Set();
-  for (const manifest of manifests.values()) {
+  for (const [, manifest] of orderedManifests) {
     for (const envVar of manifest.envVars) {
       allEnvVars.add(envVar);
     }
@@ -951,13 +1018,16 @@ Available: ${parentManifest.subModules.join(", ")}`
   const primaryTargetSet = new Set(allTargets);
   const depModules = orderedModules.filter((id) => !primaryTargetSet.has(id) && !installedNames.has(id));
   const targetModules = orderedModules.filter((id) => primaryTargetSet.has(id));
+  const installedFilesMap = /* @__PURE__ */ new Map();
   const depPostInstallHooks = [];
   if (depModules.length > 0) {
     p5.log.step(`Installing module dependencies: ${depModules.join(", ")}`);
     for (const dep of depModules) {
       const depManifest = manifests.get(dep);
       if (!depManifest) continue;
-      await installModule(dep, depManifest, cwd, dryRun, localPath);
+      const dests = await installModule(dep, depManifest, cwd, dryRun, installedNames, localPath);
+      installedFilesMap.set(dep, dests);
+      installedNames.add(dep);
       if (depManifest.postInstall && depManifest.postInstall.length > 0) {
         depPostInstallHooks.push({ name: dep, hooks: depManifest.postInstall });
       }
@@ -966,26 +1036,69 @@ Available: ${parentManifest.subModules.join(", ")}`
   for (const targetId of targetModules) {
     const targetManifest = manifests.get(targetId);
     if (!targetManifest) continue;
-    await installModule(targetId, targetManifest, cwd, dryRun, localPath);
+    const dests = await installModule(targetId, targetManifest, cwd, dryRun, installedNames, localPath);
+    installedFilesMap.set(targetId, dests);
+    installedNames.add(targetId);
   }
   installNpmDeps([...allDeps], cwd, dryRun);
-  if (!dryRun) {
-    for (const { name, hooks } of depPostInstallHooks) {
-      p5.log.step(`Running post-install hooks for ${name}...`);
+  const allPostInstallHooks = [];
+  for (const { name, hooks } of depPostInstallHooks) {
+    if (hooks.length > 0) allPostInstallHooks.push({ name, hooks });
+  }
+  for (const targetId of targetModules) {
+    const targetManifest = manifests.get(targetId);
+    if (targetManifest?.postInstall?.length) {
+      allPostInstallHooks.push({ name: targetId, hooks: targetManifest.postInstall });
+    }
+  }
+  if (allPostInstallHooks.length > 0) {
+    const allHookLines = [];
+    for (const { name, hooks } of allPostInstallHooks) {
       for (const hook of hooks) {
-        p5.log.message(`  $ ${hook}`);
-        execSync2(hook, { cwd, stdio: "inherit" });
+        allHookLines.push(`  [${name}] $ ${hook}`);
       }
     }
-  }
-  if (!dryRun) {
-    for (const targetId of targetModules) {
-      const targetManifest = manifests.get(targetId);
-      if (!targetManifest?.postInstall?.length) continue;
-      p5.log.step(`Running post-install hooks for ${targetId}...`);
-      for (const hook of targetManifest.postInstall) {
-        p5.log.message(`  $ ${hook}`);
-        execSync2(hook, { cwd, stdio: "inherit" });
+    if (dryRun) {
+      p5.log.message("\nPost-install hooks that would run:");
+      for (const line of allHookLines) {
+        p5.log.message(line);
+      }
+    } else if (!allowScripts && process.stdin.isTTY === false) {
+      p5.log.warn(
+        `Skipping ${allHookLines.length} post-install hook(s) \u2014 non-interactive mode detected. Pass --allow-scripts to run them.`
+      );
+      for (const line of allHookLines) {
+        p5.log.message(line);
+      }
+    } else {
+      p5.log.message("\nPost-install hooks to run:");
+      for (const line of allHookLines) {
+        p5.log.message(line);
+      }
+      let runHooks;
+      if (allowScripts) {
+        runHooks = true;
+      } else {
+        const confirmed = await p5.confirm({
+          message: "Run post-install hooks?",
+          initialValue: true
+        });
+        if (p5.isCancel(confirmed)) {
+          p5.outro("Cancelled.");
+          return;
+        }
+        runHooks = confirmed;
+      }
+      if (runHooks) {
+        for (const { name, hooks } of allPostInstallHooks) {
+          p5.log.step(`Running post-install hooks for ${name}...`);
+          for (const hook of hooks) {
+            p5.log.message(`  $ ${hook}`);
+            execSync2(hook, { cwd, stdio: "inherit" });
+          }
+        }
+      } else {
+        p5.log.warn("Post-install hooks skipped.");
       }
     }
   }
@@ -993,11 +1106,13 @@ Available: ${parentManifest.subModules.join(", ")}`
     const now = (/* @__PURE__ */ new Date()).toISOString();
     for (const dep of depModules) {
       const depManifest = manifests.get(dep);
-      if (depManifest) recordModule(config, dep, depManifest, now);
+      const dests = installedFilesMap.get(dep) ?? [];
+      if (depManifest) recordModule(config, dep, depManifest, dests, now);
     }
     for (const targetId of targetModules) {
       const targetManifest = manifests.get(targetId);
-      if (targetManifest) recordModule(config, targetId, targetManifest, now);
+      const dests = installedFilesMap.get(targetId) ?? [];
+      if (targetManifest) recordModule(config, targetId, targetManifest, dests, now);
     }
     await writeConfig(config, cwd);
   }
@@ -1009,6 +1124,24 @@ Available: ${parentManifest.subModules.join(", ")}`
 
 // src/commands/list.ts
 import * as p6 from "@clack/prompts";
+function printModule(mod, installedNames, installedModules) {
+  const installed = installedNames.has(mod.name);
+  const installedInfo = installed ? installedModules?.find((m) => m.name === mod.name) : null;
+  const status = installed ? `[installed v${installedInfo?.version ?? "?"}]` : "[available]";
+  const desc = mod.description ? ` \u2014 ${mod.description}` : "";
+  p6.log.message(`  ${installed ? "\u2713" : "\u25CB"} ${mod.name} ${status}${desc}`);
+  if (mod.subModules && mod.subModules.length > 0) {
+    const last = mod.subModules.length - 1;
+    mod.subModules.forEach((sub, i) => {
+      const subId = `${mod.name}/${sub}`;
+      const subInstalled = installedNames.has(subId);
+      const subInfo = subInstalled ? installedModules?.find((m) => m.name === subId) : null;
+      const subStatus = subInstalled ? `[installed v${subInfo?.version ?? "?"}]` : "[not installed]";
+      const connector = i === last ? "\u2514\u2500" : "\u251C\u2500";
+      p6.log.message(`    ${connector} ${sub} ${subStatus}`);
+    });
+  }
+}
 async function runList(options) {
   const { cwd, localPath } = options;
   p6.intro("impulse list");
@@ -1034,22 +1167,33 @@ async function runList(options) {
     return;
   }
   p6.log.message("\nAvailable modules:\n");
-  for (const mod of available) {
-    const installed = installedNames.has(mod.name);
-    const installedInfo = installed ? config?.installedModules.find((m) => m.name === mod.name) : null;
-    const status = installed ? `[installed v${installedInfo?.version ?? "?"}]` : "[available]";
-    const desc = mod.description ? ` \u2014 ${mod.description}` : "";
-    p6.log.message(`  ${installed ? "\u2713" : "\u25CB"} ${mod.name} ${status}${desc}`);
-    if (mod.subModules && mod.subModules.length > 0) {
-      const last = mod.subModules.length - 1;
-      mod.subModules.forEach((sub, i) => {
-        const subId = `${mod.name}/${sub}`;
-        const subInstalled = installedNames.has(subId);
-        const subInfo = subInstalled ? config?.installedModules.find((m) => m.name === subId) : null;
-        const subStatus = subInstalled ? `[installed v${subInfo?.version ?? "?"}]` : "[not installed]";
-        const connector = i === last ? "\u2514\u2500" : "\u251C\u2500";
-        p6.log.message(`    ${connector} ${sub} ${subStatus}`);
-      });
+  const hasCategories = available.some((m) => m.category !== void 0);
+  if (hasCategories) {
+    const groups = /* @__PURE__ */ new Map();
+    for (const mod of available) {
+      const key = mod.category ?? "other";
+      const existing = groups.get(key);
+      if (existing) {
+        existing.push(mod);
+      } else {
+        groups.set(key, [mod]);
+      }
+    }
+    const categoryOrder = ["core", "feature", "integration", "dx", "other"];
+    const sortedKeys = [
+      ...categoryOrder.filter((k) => groups.has(k)),
+      ...[...groups.keys()].filter((k) => !categoryOrder.includes(k))
+    ];
+    for (const key of sortedKeys) {
+      p6.log.message(`${key.toUpperCase()}`);
+      for (const mod of groups.get(key)) {
+        printModule(mod, installedNames, config?.installedModules);
+      }
+      p6.log.message("");
+    }
+  } else {
+    for (const mod of available) {
+      printModule(mod, installedNames, config?.installedModules);
     }
   }
   p6.log.message(
@@ -1067,19 +1211,20 @@ import * as p7 from "@clack/prompts";
 
 // src/auth/device-flow.ts
 import { execFileSync as execFileSync2 } from "child_process";
-var IMPULSE_BASE_URL = process.env.IMPULSE_BASE_URL ?? "https://impulse.studio";
+var IMPULSE_BASE_URL = process.env.IMPULSE_BASE_URL ?? "https://impulselab.ai";
+var CLIENT_ID = "impulse-cli";
 async function requestDeviceCode() {
   const res = await fetch(`${IMPULSE_BASE_URL}/api/auth/device/code`, {
     method: "POST",
     headers: { "Content-Type": "application/json" },
-    body: JSON.stringify({ client: "impulse-cli" })
+    body: JSON.stringify({ client_id: CLIENT_ID })
   });
   if (!res.ok) {
     throw new Error(`Failed to initiate device flow: ${res.status} ${res.statusText}`);
   }
   const data = await res.json();
   assertDeviceCodeResponse(data);
-  return data;
+  return mapDeviceCodeResponse(data);
 }
 async function pollDeviceToken(deviceCode) {
   let res;
@@ -1087,7 +1232,11 @@ async function pollDeviceToken(deviceCode) {
     res = await fetch(`${IMPULSE_BASE_URL}/api/auth/device/token`, {
       method: "POST",
       headers: { "Content-Type": "application/json" },
-      body: JSON.stringify({ deviceCode })
+      body: JSON.stringify({
+        grant_type: "urn:ietf:params:oauth:grant-type:device_code",
+        device_code: deviceCode,
+        client_id: CLIENT_ID
+      })
     });
   } catch {
     return { status: "error", message: "Network error while polling for token" };
@@ -1095,10 +1244,7 @@ async function pollDeviceToken(deviceCode) {
   if (res.status === 200) {
     const data = await res.json();
     assertDeviceTokenResponse(data);
-    return { status: "authorized", data };
-  }
-  if (res.status === 202) {
-    return { status: "pending" };
+    return { status: "authorized", data: mapDeviceTokenResponse(data) };
   }
   if (res.status === 400) {
     let body;
@@ -1108,8 +1254,10 @@ async function pollDeviceToken(deviceCode) {
       body = {};
     }
     const error = typeof body === "object" && body !== null && "error" in body ? String(body.error) : "";
+    if (error === "authorization_pending") return { status: "pending" };
     if (error === "slow_down") return { status: "slow_down" };
-    if (error === "expired" || error === "authorization_expired") return { status: "expired" };
+    if (error === "expired_token") return { status: "expired" };
+    if (error === "access_denied") return { status: "denied" };
     return { status: "error", message: error || "Device code error" };
   }
   return { status: "error", message: `Unexpected response: ${res.status}` };
@@ -1128,15 +1276,32 @@ function openBrowser(url) {
   }
 }
 function assertDeviceCodeResponse(data) {
-  if (typeof data !== "object" || data === null || typeof data.deviceCode !== "string" || typeof data.userCode !== "string" || typeof data.verificationUri !== "string") {
+  if (typeof data !== "object" || data === null || typeof data.device_code !== "string" || typeof data.user_code !== "string" || typeof data.verification_uri !== "string") {
     throw new Error("Invalid device code response from server");
   }
 }
 function assertDeviceTokenResponse(data) {
-  if (typeof data !== "object" || data === null || typeof data.token !== "string" || typeof data.email !== "string") {
+  if (typeof data !== "object" || data === null || typeof data.access_token !== "string") {
     throw new Error("Invalid token response from server");
   }
 }
+function mapDeviceCodeResponse(raw) {
+  return {
+    deviceCode: raw.device_code,
+    userCode: raw.user_code,
+    verificationUri: raw.verification_uri,
+    ...raw.verification_uri_complete !== void 0 ? { verificationUriComplete: raw.verification_uri_complete } : {},
+    expiresIn: raw.expires_in,
+    interval: raw.interval
+  };
+}
+function mapDeviceTokenResponse(raw) {
+  return {
+    token: raw.access_token,
+    ...raw.expires_in !== void 0 ? { expiresIn: raw.expires_in } : {},
+    ...raw.email !== void 0 ? { email: raw.email } : {}
+  };
+}
 
 // src/auth/write-auth.ts
 import fsExtra14 from "fs-extra";
@@ -1156,7 +1321,7 @@ async function runLogin() {
   const existing = await readAuth();
   if (existing) {
     const reauth = await p7.confirm({
-      message: `Already logged in as ${existing.email}. Log in again?`,
+      message: `Already logged in as ${existing.email ?? "current session"}. Log in again?`,
       initialValue: false
     });
     if (p7.isCancel(reauth) || !reauth) {
@@ -1199,13 +1364,14 @@ Base URL: ${IMPULSE_BASE_URL}`);
     const result = await pollDeviceToken(deviceCode.deviceCode);
     if (result.status === "authorized") {
       pollSpinner.stop("Authentication successful!");
+      const expiresAt2 = result.data.expiresIn !== void 0 ? new Date(Date.now() + result.data.expiresIn * 1e3).toISOString() : void 0;
       await writeAuth({
         token: result.data.token,
-        refreshToken: result.data.refreshToken,
-        expiresAt: result.data.expiresAt,
+        expiresAt: expiresAt2,
         email: result.data.email
       });
-      p7.outro(`Logged in as ${result.data.email}`);
+      const identity = result.data.email ?? "your account";
+      p7.outro(`Logged in as ${identity}`);
       return;
     }
     if (result.status === "slow_down") {
@@ -1217,6 +1383,11 @@ Base URL: ${IMPULSE_BASE_URL}`);
       p7.cancel("Authentication timed out. Run `impulse login` again.");
       process.exit(1);
     }
+    if (result.status === "denied") {
+      pollSpinner.stop("Access denied.");
+      p7.cancel("You denied the authorization request.");
+      process.exit(1);
+    }
     if (result.status === "error") {
       pollSpinner.stop("Authentication failed.");
       p7.cancel(result.message);
@@ -1253,7 +1424,7 @@ async function runLogout() {
     return;
   }
   const confirm6 = await p8.confirm({
-    message: `Log out ${credentials.email}?`,
+    message: `Log out ${credentials.email ?? "current session"}?`,
     initialValue: true
   });
   if (p8.isCancel(confirm6) || !confirm6) {
@@ -1273,7 +1444,7 @@ async function runWhoami() {
     p9.cancel("Not authenticated. Run `impulse login` first.");
     process.exit(1);
   }
-  p9.log.message(`Logged in as: ${credentials.email}`);
+  p9.log.message(`Logged in as: ${credentials.email ?? "(unknown)"}`);
   if (credentials.expiresAt) {
     const expires = new Date(credentials.expiresAt);
     const now = /* @__PURE__ */ new Date();
@@ -1305,11 +1476,16 @@ program.command("add [modules...]").description(
 ).option(
   "--with <submodules>",
   "Comma-separated sub-modules to install alongside the parent (e.g. --with quote-to-cash,gocardless)"
+).option(
+  "--allow-scripts",
+  "Run post-install hooks without prompting for confirmation (required in non-interactive environments)",
+  false
 ).action(async (modules, options) => {
   const addOpts = {
     moduleNames: modules ?? [],
     cwd: process.cwd(),
-    dryRun: options.dryRun
+    dryRun: options.dryRun,
+    allowScripts: options.allowScripts
   };
   if (options.local !== void 0) addOpts.localPath = options.local;
   if (options.with !== void 0) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@impulselab/cli",
-  "version": "0.1.3",
+  "version": "0.1.5",
   "description": "ImpulseLab CLI — install and manage modules for your projects",
   "private": false,
   "type": "module",