@impulselab/cli 0.1.4 → 0.1.5

package/dist/index.js

@@ -246,9 +246,9 @@ var ModuleManifestSchema = z5.object({
   /** Names of sub-modules available under this parent module (e.g. ["quote-to-cash", "gocardless"]). */
   subModules: z5.array(z5.string()).default([]),
   dependencies: z5.array(ModuleDependencySchema).default([]),
-  moduleDependencies: z5.array(z5.string()).default([]),
+  moduleDependencies: z5.array(ModuleDependencySchema).default([]),
   /** Optional module dependencies that enhance this module but are not required. */
-  optionalModuleDependencies: z5.array(z5.string()).default([]),
+  optionalModuleDependencies: z5.array(ModuleDependencySchema).default([]),
   files: z5.array(ModuleFileSchema).default([]),
   transforms: z5.array(ModuleTransformSchema).default([]),
   /** Documentation metadata listing env vars this module requires (displayed in install summary). */
@@ -264,16 +264,22 @@ var ModuleManifestSchema = z5.object({
   targetPackage: z5.enum(["database", "server", "web", "root"]).default("root")
 });
 
+// src/registry/constants.ts
+var registryConstants = {
+  githubOrg: "impulse-studio",
+  githubRepo: "impulse-modules",
+  githubBranch: "main",
+  modulesDir: "modules",
+  subModulesDirName: "sub-modules",
+  manifestFileName: "module.json"
+};
+
 // src/registry/github-urls.ts
 import { execSync } from "child_process";
-var GITHUB_ORG = "impulse-studio";
-var GITHUB_REPO = "impulse-modules";
-var GITHUB_BRANCH = "main";
-var MODULES_DIR = "modules";
 var githubUrls = {
-  rawFile: (registryPath, file) => `https://raw.githubusercontent.com/${GITHUB_ORG}/${GITHUB_REPO}/${GITHUB_BRANCH}/${MODULES_DIR}/${registryPath}/${file}`,
-  moduleList: () => `https://api.github.com/repos/${GITHUB_ORG}/${GITHUB_REPO}/contents/${MODULES_DIR}`,
-  subModulesList: (parentModule) => `https://api.github.com/repos/${GITHUB_ORG}/${GITHUB_REPO}/contents/${MODULES_DIR}/${parentModule}/sub-modules`
+  rawFile: (registryPath, file) => `https://raw.githubusercontent.com/${registryConstants.githubOrg}/${registryConstants.githubRepo}/${registryConstants.githubBranch}/${registryConstants.modulesDir}/${registryPath}/${file}`,
+  moduleList: () => `https://api.github.com/repos/${registryConstants.githubOrg}/${registryConstants.githubRepo}/contents/${registryConstants.modulesDir}`,
+  subModulesList: (parentModule) => `https://api.github.com/repos/${registryConstants.githubOrg}/${registryConstants.githubRepo}/contents/${registryConstants.modulesDir}/${parentModule}/${registryConstants.subModulesDirName}`
 };
 var _cachedToken;
 function getGitHubToken() {
@@ -315,7 +321,7 @@ function parseModuleId(moduleId) {
 function moduleRegistryPath(moduleId) {
   const { parent, child } = parseModuleId(moduleId);
   if (child === null) return parent;
-  return `${parent}/sub-modules/${child}`;
+  return `${parent}/${registryConstants.subModulesDirName}/${child}`;
 }
 
 // src/registry/fetch-module-manifest.ts
@@ -323,7 +329,7 @@ var { readJson: readJson3, pathExists: pathExists4 } = fsExtra5;
 async function fetchModuleManifest(moduleId, localPath) {
   const registryPath = moduleRegistryPath(moduleId);
   if (localPath) {
-    const file = path3.join(localPath, registryPath, "module.json");
+    const file = path3.join(localPath, registryPath, registryConstants.manifestFileName);
     if (!await pathExists4(file)) {
       throw new Error(`Local module not found: ${file}`);
     }
@@ -334,7 +340,7 @@ async function fetchModuleManifest(moduleId, localPath) {
     }
     return parsed2.data;
   }
-  const url = githubUrls.rawFile(registryPath, "module.json");
+  const url = githubUrls.rawFile(registryPath, registryConstants.manifestFileName);
   const res = await fetch(url, { headers: getGitHubHeaders() });
   if (!res.ok) {
     if (res.status === 404) {
@@ -362,14 +368,22 @@ async function listAvailableModules(localPath) {
     const result = [];
     for (const entry of entries2) {
       if (!entry.isDirectory()) continue;
-      const manifestFile = path4.join(localPath, entry.name, "module.json");
+      const manifestFile = path4.join(
+        localPath,
+        entry.name,
+        registryConstants.manifestFileName
+      );
       if (!await pathExists5(manifestFile)) continue;
       try {
         const raw = await readJson4(manifestFile);
         const parsed = ModuleManifestSchema.safeParse(raw);
         if (!parsed.success) continue;
         let subModules;
-        const subModulesDir = path4.join(localPath, entry.name, "sub-modules");
+        const subModulesDir = path4.join(
+          localPath,
+          entry.name,
+          registryConstants.subModulesDirName
+        );
         if (await pathExists5(subModulesDir)) {
           const subEntries = await readdir(subModulesDir, { withFileTypes: true });
           subModules = subEntries.filter((e) => e.isDirectory()).map((e) => e.name);
@@ -428,10 +442,10 @@ async function listAvailableModules(localPath) {
 // src/registry/fetch-module-file.ts
 async function fetchModuleFile(moduleName, fileSrc, localPath) {
   if (localPath) {
-    const { readFile: readFile6 } = await import("fs/promises");
+    const { readFile: readFile7 } = await import("fs/promises");
     const { join } = await import("path");
     const file = join(localPath, moduleName, fileSrc);
-    return readFile6(file, "utf-8");
+    return readFile7(file, "utf-8");
   }
   const url = githubUrls.rawFile(moduleName, fileSrc);
   const res = await fetch(url, { headers: getGitHubHeaders() });
@@ -443,6 +457,7 @@ async function fetchModuleFile(moduleName, fileSrc, localPath) {
 
 // src/installer.ts
 import fsExtra7 from "fs-extra";
+import { readFile } from "fs/promises";
 import path5 from "path";
 import * as p2 from "@clack/prompts";
 var { outputFile, pathExists: pathExists6 } = fsExtra7;
@@ -461,18 +476,16 @@ async function installFiles(options) {
     const destAbs = path5.join(cwd, file.dest);
     const exists = await pathExists6(destAbs);
     if (exists) {
+      if (dryRun) {
+        results.push({ dest: file.dest, action: "would-overwrite" });
+        continue;
+      }
       const content = await fetchModuleFile(moduleName, file.src, localPath);
-      const existing = await import("fs/promises").then(
-        (fs) => fs.readFile(destAbs, "utf-8")
-      );
+      const existing = await readFile(destAbs, "utf-8");
       if (existing === content) {
         results.push({ dest: file.dest, action: "skipped" });
         continue;
       }
-      if (dryRun) {
-        results.push({ dest: file.dest, action: "would-overwrite" });
-        continue;
-      }
       const answer = await p2.confirm({
         message: `File already exists: ${file.dest} \u2014 overwrite?`,
         initialValue: false
@@ -499,7 +512,7 @@ async function installFiles(options) {
 // src/transforms/append-export.ts
 import fsExtra8 from "fs-extra";
 import path6 from "path";
-var { readFile, outputFile: outputFile2, pathExists: pathExists7 } = fsExtra8;
+var { readFile: readFile2, outputFile: outputFile2, pathExists: pathExists7 } = fsExtra8;
 async function appendExport(target, value, cwd, dryRun) {
   const file = path6.join(cwd, target);
   if (!await pathExists7(file)) {
@@ -509,7 +522,7 @@ async function appendExport(target, value, cwd, dryRun) {
     }
     return;
   }
-  const content = await readFile(file, "utf-8");
+  const content = await readFile2(file, "utf-8");
   if (content.includes(value)) return;
   if (!dryRun) {
     const newContent = content.endsWith("\n") ? `${content}${value}
@@ -523,7 +536,7 @@ ${value}
 // src/transforms/register-route.ts
 import fsExtra9 from "fs-extra";
 import path7 from "path";
-var { readFile: readFile2, outputFile: outputFile3, pathExists: pathExists8 } = fsExtra9;
+var { readFile: readFile3, outputFile: outputFile3, pathExists: pathExists8 } = fsExtra9;
 async function registerRoute(target, value, cwd, dryRun) {
   const file = path7.join(cwd, target);
   if (!await pathExists8(file)) {
@@ -531,7 +544,7 @@ async function registerRoute(target, value, cwd, dryRun) {
       `register-route: target file not found: ${target}. Please ensure your router file exists.`
     );
   }
-  const content = await readFile2(file, "utf-8");
+  const content = await readFile3(file, "utf-8");
   if (content.includes(value)) return;
   const routerPattern = /^([ \t]*\})[ \t]*(?:satisfies|as)\s/m;
   const match = routerPattern.exec(content);
@@ -551,7 +564,7 @@ async function registerRoute(target, value, cwd, dryRun) {
 // src/transforms/add-nav-item.ts
 import fsExtra10 from "fs-extra";
 import path8 from "path";
-var { readFile: readFile3, outputFile: outputFile4, pathExists: pathExists9 } = fsExtra10;
+var { readFile: readFile4, outputFile: outputFile4, pathExists: pathExists9 } = fsExtra10;
 async function addNavItem(target, value, cwd, dryRun) {
   const file = path8.join(cwd, target);
   if (!await pathExists9(file)) {
@@ -559,7 +572,7 @@ async function addNavItem(target, value, cwd, dryRun) {
       `add-nav-item: target file not found: ${target}`
     );
   }
-  const content = await readFile3(file, "utf-8");
+  const content = await readFile4(file, "utf-8");
   if (content.includes(value)) return;
   const openPattern = /(?:const\s+\w+(?:\s*:\s*[\w<>\[\], ]+)?\s*=\s*\[|items\s*:\s*\[)/;
   const openMatch = openPattern.exec(content);
@@ -596,7 +609,7 @@ async function addNavItem(target, value, cwd, dryRun) {
 // src/transforms/merge-schema.ts
 import fsExtra11 from "fs-extra";
 import path9 from "path";
-var { readFile: readFile4, outputFile: outputFile5, pathExists: pathExists10 } = fsExtra11;
+var { readFile: readFile5, outputFile: outputFile5, pathExists: pathExists10 } = fsExtra11;
 async function mergeSchema(target, value, cwd, dryRun) {
   const file = path9.join(cwd, target);
   if (!await pathExists10(file)) {
@@ -606,7 +619,7 @@ async function mergeSchema(target, value, cwd, dryRun) {
     }
     return;
   }
-  const content = await readFile4(file, "utf-8");
+  const content = await readFile5(file, "utf-8");
   if (content.includes(value)) return;
   if (!dryRun) {
     const newContent = content.endsWith("\n") ? `${content}${value}
@@ -621,12 +634,12 @@ ${value}
 import fsExtra12 from "fs-extra";
 import path10 from "path";
 import * as p3 from "@clack/prompts";
-var { readFile: readFile5, outputFile: outputFile6, pathExists: pathExists11 } = fsExtra12;
+var { readFile: readFile6, outputFile: outputFile6, pathExists: pathExists11 } = fsExtra12;
 async function addEnv(target, value, cwd, dryRun) {
   const file = path10.join(cwd, target);
   let content = "";
   if (await pathExists11(file)) {
-    content = await readFile5(file, "utf-8");
+    content = await readFile6(file, "utf-8");
     const escaped = value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
     const keyPattern = new RegExp(`^${escaped}=`, "m");
     if (keyPattern.test(content)) return;
@@ -692,9 +705,8 @@ function authPath() {
 import { z as z6 } from "zod";
 var AuthCredentialsSchema = z6.object({
   token: z6.string(),
-  refreshToken: z6.string().optional(),
   expiresAt: z6.string().optional(),
-  email: z6.string()
+  email: z6.string().optional()
 });
 
 // src/auth/read-auth.ts
@@ -724,21 +736,28 @@ async function requireAuth() {
 }
 
 // src/commands/add.ts
-async function resolveModuleDeps(moduleId, localPath, resolved, orderedModules) {
+async function getManifest(moduleId, localPath, manifests) {
+  const cached = manifests.get(moduleId);
+  if (cached) return cached;
+  const manifest = await fetchModuleManifest(moduleId, localPath);
+  manifests.set(moduleId, manifest);
+  return manifest;
+}
+async function resolveModuleDeps(moduleId, localPath, manifests, resolved, orderedModules) {
   if (resolved.has(moduleId)) return;
   resolved.add(moduleId);
-  const manifest = await fetchModuleManifest(moduleId, localPath);
+  const manifest = await getManifest(moduleId, localPath, manifests);
   for (const dep of manifest.moduleDependencies) {
-    await resolveModuleDeps(dep, localPath, resolved, orderedModules);
+    await resolveModuleDeps(dep, localPath, manifests, resolved, orderedModules);
   }
   orderedModules.push(moduleId);
 }
-async function resolveWithParent(moduleId, localPath, installedNames, resolved, orderedModules) {
+async function resolveWithParent(moduleId, localPath, installedNames, manifests, resolved, orderedModules) {
   const { parent, child } = parseModuleId(moduleId);
   if (child !== null && !installedNames.has(parent)) {
-    await resolveModuleDeps(parent, localPath, resolved, orderedModules);
+    await resolveModuleDeps(parent, localPath, manifests, resolved, orderedModules);
   }
-  await resolveModuleDeps(moduleId, localPath, resolved, orderedModules);
+  await resolveModuleDeps(moduleId, localPath, manifests, resolved, orderedModules);
 }
 function detectPackageManager(cwd) {
   if (existsSync(path12.join(cwd, "pnpm-lock.yaml"))) return "pnpm";
@@ -774,9 +793,7 @@ async function installModule(moduleId, manifest, cwd, dryRun, installedModules,
     });
     for (const f of installed) {
       if (f.action === "conditional-skip") {
-        if (dryRun) {
-          p5.log.message(`  \u25CB ${f.dest} [skipped: ${f.reason}]`);
-        }
+        p5.log.message(`  \u25CB ${f.dest} [skipped: ${f.reason}]`);
         continue;
       }
       installedDests.push(f.dest);
@@ -853,7 +870,7 @@ async function pickModulesInteractively(localPath) {
   return [...result];
 }
 async function runAdd(options) {
-  let { moduleNames, cwd, dryRun, localPath, withSubModules = [] } = options;
+  let { moduleNames, cwd, dryRun, localPath, withSubModules = [], allowScripts = false } = options;
   let allTargets;
   if (moduleNames.length === 0) {
     p5.intro(`impulse add${dryRun ? " [dry-run]" : ""}`);
@@ -885,6 +902,7 @@ async function runAdd(options) {
     process.exit(1);
   }
   const installedNames = new Set(config.installedModules.map((m) => m.name));
+  const manifests = /* @__PURE__ */ new Map();
   if (withSubModules.length === 0) {
     const alreadyInstalled = allTargets.filter((id) => {
       const { child } = parseModuleId(id);
@@ -906,7 +924,7 @@ async function runAdd(options) {
     }
   }
   if (moduleNames.length === 1 && withSubModules.length > 0) {
-    const parentManifest = await fetchModuleManifest(moduleNames[0], localPath).catch(() => null);
+    const parentManifest = await getManifest(moduleNames[0], localPath, manifests).catch(() => null);
     if (parentManifest) {
       if (parentManifest.subModules.length === 0) {
         p5.cancel(`"${moduleNames[0]}" has no declared sub-modules.`);
@@ -928,7 +946,7 @@ Available: ${parentManifest.subModules.join(", ")}`
   const orderedModules = [];
   try {
     for (const target of allTargets) {
-      await resolveWithParent(target, localPath, installedNames, resolved, orderedModules);
+      await resolveWithParent(target, localPath, installedNames, manifests, resolved, orderedModules);
     }
   } catch (err) {
     s.stop("Dependency resolution failed.");
@@ -936,11 +954,14 @@ Available: ${parentManifest.subModules.join(", ")}`
     process.exit(1);
   }
   s.stop(`Resolved: ${orderedModules.join(" \u2192 ")}`);
-  const manifests = /* @__PURE__ */ new Map();
-  for (const id of orderedModules) {
-    manifests.set(id, await fetchModuleManifest(id, localPath));
-  }
-  for (const [id, manifest] of manifests) {
+  const orderedManifests = orderedModules.map((id) => {
+    const manifest = manifests.get(id);
+    if (!manifest) {
+      throw new Error(`Missing manifest for resolved module "${id}".`);
+    }
+    return [id, manifest];
+  });
+  for (const [id, manifest] of orderedManifests) {
     if (installedNames.has(id)) continue;
     for (const incompatible of manifest.incompatibleWith) {
       if (installedNames.has(incompatible)) {
@@ -954,13 +975,13 @@ Available: ${parentManifest.subModules.join(", ")}`
     }
   }
   const allDeps = /* @__PURE__ */ new Set();
-  for (const manifest of manifests.values()) {
+  for (const [, manifest] of orderedManifests) {
     for (const dep of manifest.dependencies) {
       allDeps.add(dep);
     }
   }
   p5.log.message("\nSummary of changes:");
-  for (const [id, manifest] of manifests) {
+  for (const [id, manifest] of orderedManifests) {
     p5.log.message(`
   Module: ${id}@${manifest.version}`);
     for (const file of manifest.files) {
@@ -971,7 +992,7 @@ Available: ${parentManifest.subModules.join(", ")}`
     }
   }
   const allEnvVars = /* @__PURE__ */ new Set();
-  for (const manifest of manifests.values()) {
+  for (const [, manifest] of orderedManifests) {
     for (const envVar of manifest.envVars) {
       allEnvVars.add(envVar);
     }
@@ -1020,23 +1041,64 @@ Available: ${parentManifest.subModules.join(", ")}`
     installedNames.add(targetId);
   }
   installNpmDeps([...allDeps], cwd, dryRun);
-  if (!dryRun) {
-    for (const { name, hooks } of depPostInstallHooks) {
-      p5.log.step(`Running post-install hooks for ${name}...`);
+  const allPostInstallHooks = [];
+  for (const { name, hooks } of depPostInstallHooks) {
+    if (hooks.length > 0) allPostInstallHooks.push({ name, hooks });
+  }
+  for (const targetId of targetModules) {
+    const targetManifest = manifests.get(targetId);
+    if (targetManifest?.postInstall?.length) {
+      allPostInstallHooks.push({ name: targetId, hooks: targetManifest.postInstall });
+    }
+  }
+  if (allPostInstallHooks.length > 0) {
+    const allHookLines = [];
+    for (const { name, hooks } of allPostInstallHooks) {
       for (const hook of hooks) {
-        p5.log.message(`  $ ${hook}`);
-        execSync2(hook, { cwd, stdio: "inherit" });
+        allHookLines.push(`  [${name}] $ ${hook}`);
       }
     }
-  }
-  if (!dryRun) {
-    for (const targetId of targetModules) {
-      const targetManifest = manifests.get(targetId);
-      if (!targetManifest?.postInstall?.length) continue;
-      p5.log.step(`Running post-install hooks for ${targetId}...`);
-      for (const hook of targetManifest.postInstall) {
-        p5.log.message(`  $ ${hook}`);
-        execSync2(hook, { cwd, stdio: "inherit" });
+    if (dryRun) {
+      p5.log.message("\nPost-install hooks that would run:");
+      for (const line of allHookLines) {
+        p5.log.message(line);
+      }
+    } else if (!allowScripts && process.stdin.isTTY === false) {
+      p5.log.warn(
+        `Skipping ${allHookLines.length} post-install hook(s) \u2014 non-interactive mode detected. Pass --allow-scripts to run them.`
+      );
+      for (const line of allHookLines) {
+        p5.log.message(line);
+      }
+    } else {
+      p5.log.message("\nPost-install hooks to run:");
+      for (const line of allHookLines) {
+        p5.log.message(line);
+      }
+      let runHooks;
+      if (allowScripts) {
+        runHooks = true;
+      } else {
+        const confirmed = await p5.confirm({
+          message: "Run post-install hooks?",
+          initialValue: true
+        });
+        if (p5.isCancel(confirmed)) {
+          p5.outro("Cancelled.");
+          return;
+        }
+        runHooks = confirmed;
+      }
+      if (runHooks) {
+        for (const { name, hooks } of allPostInstallHooks) {
+          p5.log.step(`Running post-install hooks for ${name}...`);
+          for (const hook of hooks) {
+            p5.log.message(`  $ ${hook}`);
+            execSync2(hook, { cwd, stdio: "inherit" });
+          }
+        }
+      } else {
+        p5.log.warn("Post-install hooks skipped.");
       }
     }
   }
@@ -1149,19 +1211,20 @@ import * as p7 from "@clack/prompts";
 
 // src/auth/device-flow.ts
 import { execFileSync as execFileSync2 } from "child_process";
-var IMPULSE_BASE_URL = process.env.IMPULSE_BASE_URL ?? "https://impulse.studio";
+var IMPULSE_BASE_URL = process.env.IMPULSE_BASE_URL ?? "https://impulselab.ai";
+var CLIENT_ID = "impulse-cli";
 async function requestDeviceCode() {
   const res = await fetch(`${IMPULSE_BASE_URL}/api/auth/device/code`, {
     method: "POST",
     headers: { "Content-Type": "application/json" },
-    body: JSON.stringify({ client: "impulse-cli" })
+    body: JSON.stringify({ client_id: CLIENT_ID })
   });
   if (!res.ok) {
     throw new Error(`Failed to initiate device flow: ${res.status} ${res.statusText}`);
   }
   const data = await res.json();
   assertDeviceCodeResponse(data);
-  return data;
+  return mapDeviceCodeResponse(data);
 }
 async function pollDeviceToken(deviceCode) {
   let res;
@@ -1169,7 +1232,11 @@ async function pollDeviceToken(deviceCode) {
     res = await fetch(`${IMPULSE_BASE_URL}/api/auth/device/token`, {
       method: "POST",
       headers: { "Content-Type": "application/json" },
-      body: JSON.stringify({ deviceCode })
+      body: JSON.stringify({
+        grant_type: "urn:ietf:params:oauth:grant-type:device_code",
+        device_code: deviceCode,
+        client_id: CLIENT_ID
+      })
     });
   } catch {
     return { status: "error", message: "Network error while polling for token" };
@@ -1177,10 +1244,7 @@ async function pollDeviceToken(deviceCode) {
   if (res.status === 200) {
     const data = await res.json();
     assertDeviceTokenResponse(data);
-    return { status: "authorized", data };
-  }
-  if (res.status === 202) {
-    return { status: "pending" };
+    return { status: "authorized", data: mapDeviceTokenResponse(data) };
   }
   if (res.status === 400) {
     let body;
@@ -1190,8 +1254,10 @@ async function pollDeviceToken(deviceCode) {
       body = {};
     }
     const error = typeof body === "object" && body !== null && "error" in body ? String(body.error) : "";
+    if (error === "authorization_pending") return { status: "pending" };
     if (error === "slow_down") return { status: "slow_down" };
-    if (error === "expired" || error === "authorization_expired") return { status: "expired" };
+    if (error === "expired_token") return { status: "expired" };
+    if (error === "access_denied") return { status: "denied" };
     return { status: "error", message: error || "Device code error" };
   }
   return { status: "error", message: `Unexpected response: ${res.status}` };
@@ -1210,15 +1276,32 @@ function openBrowser(url) {
   }
 }
 function assertDeviceCodeResponse(data) {
-  if (typeof data !== "object" || data === null || typeof data.deviceCode !== "string" || typeof data.userCode !== "string" || typeof data.verificationUri !== "string") {
+  if (typeof data !== "object" || data === null || typeof data.device_code !== "string" || typeof data.user_code !== "string" || typeof data.verification_uri !== "string") {
     throw new Error("Invalid device code response from server");
   }
 }
 function assertDeviceTokenResponse(data) {
-  if (typeof data !== "object" || data === null || typeof data.token !== "string" || typeof data.email !== "string") {
+  if (typeof data !== "object" || data === null || typeof data.access_token !== "string") {
     throw new Error("Invalid token response from server");
   }
 }
+function mapDeviceCodeResponse(raw) {
+  return {
+    deviceCode: raw.device_code,
+    userCode: raw.user_code,
+    verificationUri: raw.verification_uri,
+    ...raw.verification_uri_complete !== void 0 ? { verificationUriComplete: raw.verification_uri_complete } : {},
+    expiresIn: raw.expires_in,
+    interval: raw.interval
+  };
+}
+function mapDeviceTokenResponse(raw) {
+  return {
+    token: raw.access_token,
+    ...raw.expires_in !== void 0 ? { expiresIn: raw.expires_in } : {},
+    ...raw.email !== void 0 ? { email: raw.email } : {}
+  };
+}
 
 // src/auth/write-auth.ts
 import fsExtra14 from "fs-extra";
@@ -1238,7 +1321,7 @@ async function runLogin() {
   const existing = await readAuth();
   if (existing) {
     const reauth = await p7.confirm({
-      message: `Already logged in as ${existing.email}. Log in again?`,
+      message: `Already logged in as ${existing.email ?? "current session"}. Log in again?`,
       initialValue: false
     });
     if (p7.isCancel(reauth) || !reauth) {
@@ -1281,13 +1364,14 @@ Base URL: ${IMPULSE_BASE_URL}`);
     const result = await pollDeviceToken(deviceCode.deviceCode);
     if (result.status === "authorized") {
       pollSpinner.stop("Authentication successful!");
+      const expiresAt2 = result.data.expiresIn !== void 0 ? new Date(Date.now() + result.data.expiresIn * 1e3).toISOString() : void 0;
       await writeAuth({
         token: result.data.token,
-        refreshToken: result.data.refreshToken,
-        expiresAt: result.data.expiresAt,
+        expiresAt: expiresAt2,
         email: result.data.email
       });
-      p7.outro(`Logged in as ${result.data.email}`);
+      const identity = result.data.email ?? "your account";
+      p7.outro(`Logged in as ${identity}`);
       return;
     }
     if (result.status === "slow_down") {
@@ -1299,6 +1383,11 @@ Base URL: ${IMPULSE_BASE_URL}`);
       p7.cancel("Authentication timed out. Run `impulse login` again.");
       process.exit(1);
     }
+    if (result.status === "denied") {
+      pollSpinner.stop("Access denied.");
+      p7.cancel("You denied the authorization request.");
+      process.exit(1);
+    }
     if (result.status === "error") {
       pollSpinner.stop("Authentication failed.");
       p7.cancel(result.message);
@@ -1335,7 +1424,7 @@ async function runLogout() {
     return;
   }
   const confirm6 = await p8.confirm({
-    message: `Log out ${credentials.email}?`,
+    message: `Log out ${credentials.email ?? "current session"}?`,
     initialValue: true
   });
   if (p8.isCancel(confirm6) || !confirm6) {
@@ -1355,7 +1444,7 @@ async function runWhoami() {
     p9.cancel("Not authenticated. Run `impulse login` first.");
     process.exit(1);
   }
-  p9.log.message(`Logged in as: ${credentials.email}`);
+  p9.log.message(`Logged in as: ${credentials.email ?? "(unknown)"}`);
   if (credentials.expiresAt) {
     const expires = new Date(credentials.expiresAt);
     const now = /* @__PURE__ */ new Date();
@@ -1387,11 +1476,16 @@ program.command("add [modules...]").description(
 ).option(
   "--with <submodules>",
   "Comma-separated sub-modules to install alongside the parent (e.g. --with quote-to-cash,gocardless)"
+).option(
+  "--allow-scripts",
+  "Run post-install hooks without prompting for confirmation (required in non-interactive environments)",
+  false
 ).action(async (modules, options) => {
   const addOpts = {
     moduleNames: modules ?? [],
     cwd: process.cwd(),
-    dryRun: options.dryRun
+    dryRun: options.dryRun,
+    allowScripts: options.allowScripts
   };
   if (options.local !== void 0) addOpts.localPath = options.local;
   if (options.with !== void 0) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@impulselab/cli",
-  "version": "0.1.4",
+  "version": "0.1.5",
   "description": "ImpulseLab CLI — install and manage modules for your projects",
   "private": false,
   "type": "module",