npm - @indigoai-us/hq-cli - Versions diffs - 5.1.0 - Mend

@indigoai-us/hq-cli 5.1.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (102) hide show

package/dist/__tests__/credentials.test.d.ts +5 -0
package/dist/__tests__/credentials.test.d.ts.map +1 -0
package/dist/__tests__/credentials.test.js +169 -0
package/dist/__tests__/credentials.test.js.map +1 -0
package/dist/commands/add.d.ts +6 -0
package/dist/commands/add.d.ts.map +1 -0
package/dist/commands/add.js +60 -0
package/dist/commands/add.js.map +1 -0
package/dist/commands/auth.d.ts +17 -0
package/dist/commands/auth.d.ts.map +1 -0
package/dist/commands/auth.js +269 -0
package/dist/commands/auth.js.map +1 -0
package/dist/commands/cloud-setup.d.ts +19 -0
package/dist/commands/cloud-setup.d.ts.map +1 -0
package/dist/commands/cloud-setup.js +206 -0
package/dist/commands/cloud-setup.js.map +1 -0
package/dist/commands/cloud.d.ts +16 -0
package/dist/commands/cloud.d.ts.map +1 -0
package/dist/commands/cloud.js +263 -0
package/dist/commands/cloud.js.map +1 -0
package/dist/commands/initial-upload.d.ts +67 -0
package/dist/commands/initial-upload.d.ts.map +1 -0
package/dist/commands/initial-upload.js +205 -0
package/dist/commands/initial-upload.js.map +1 -0
package/dist/commands/list.d.ts +6 -0
package/dist/commands/list.d.ts.map +1 -0
package/dist/commands/list.js +55 -0
package/dist/commands/list.js.map +1 -0
package/dist/commands/sync.d.ts +6 -0
package/dist/commands/sync.d.ts.map +1 -0
package/dist/commands/sync.js +104 -0
package/dist/commands/sync.js.map +1 -0
package/dist/commands/update.d.ts +7 -0
package/dist/commands/update.d.ts.map +1 -0
package/dist/commands/update.js +60 -0
package/dist/commands/update.js.map +1 -0
package/dist/index.d.ts +6 -0
package/dist/index.d.ts.map +1 -0
package/dist/index.js +36 -0
package/dist/index.js.map +1 -0
package/dist/strategies/link.d.ts +7 -0
package/dist/strategies/link.d.ts.map +1 -0
package/dist/strategies/link.js +51 -0
package/dist/strategies/link.js.map +1 -0
package/dist/strategies/merge.d.ts +7 -0
package/dist/strategies/merge.d.ts.map +1 -0
package/dist/strategies/merge.js +110 -0
package/dist/strategies/merge.js.map +1 -0
package/dist/sync-worker.d.ts +11 -0
package/dist/sync-worker.d.ts.map +1 -0
package/dist/sync-worker.js +77 -0
package/dist/sync-worker.js.map +1 -0
package/dist/types.d.ts +41 -0
package/dist/types.d.ts.map +1 -0
package/dist/types.js +5 -0
package/dist/types.js.map +1 -0
package/dist/utils/api-client.d.ts +26 -0
package/dist/utils/api-client.d.ts.map +1 -0
package/dist/utils/api-client.js +87 -0
package/dist/utils/api-client.js.map +1 -0
package/dist/utils/credentials.d.ts +44 -0
package/dist/utils/credentials.d.ts.map +1 -0
package/dist/utils/credentials.js +101 -0
package/dist/utils/credentials.js.map +1 -0
package/dist/utils/git.d.ts +13 -0
package/dist/utils/git.d.ts.map +1 -0
package/dist/utils/git.js +70 -0
package/dist/utils/git.js.map +1 -0
package/dist/utils/manifest.d.ts +16 -0
package/dist/utils/manifest.d.ts.map +1 -0
package/dist/utils/manifest.js +95 -0
package/dist/utils/manifest.js.map +1 -0
package/dist/utils/sync.d.ts +125 -0
package/dist/utils/sync.d.ts.map +1 -0
package/dist/utils/sync.js +291 -0
package/dist/utils/sync.js.map +1 -0
package/package.json +36 -0
package/src/__tests__/cloud-setup.test.ts +117 -0
package/src/__tests__/credentials.test.ts +203 -0
package/src/__tests__/initial-upload.test.ts +414 -0
package/src/__tests__/sync.test.ts +627 -0
package/src/commands/add.ts +74 -0
package/src/commands/auth.ts +303 -0
package/src/commands/cloud-setup.ts +251 -0
package/src/commands/cloud.ts +300 -0
package/src/commands/initial-upload.ts +263 -0
package/src/commands/list.ts +66 -0
package/src/commands/sync.ts +149 -0
package/src/commands/update.ts +71 -0
package/src/hq-cloud.d.ts +19 -0
package/src/index.ts +46 -0
package/src/strategies/link.ts +62 -0
package/src/strategies/merge.ts +142 -0
package/src/sync-worker.ts +82 -0
package/src/types.ts +47 -0
package/src/utils/api-client.ts +111 -0
package/src/utils/credentials.ts +124 -0
package/src/utils/git.ts +74 -0
package/src/utils/manifest.ts +111 -0
package/src/utils/sync.ts +381 -0
package/tsconfig.json +9 -0
package/vitest.config.ts +8 -0

package/src/commands/auth.ts ADDED Viewed

@@ -0,0 +1,303 @@
+/**
+ * hq auth commands — login, logout, status
+ *
+ * Login flow:
+ * 1. CLI generates a unique device code
+ * 2. CLI starts a temporary localhost HTTP server to receive the callback
+ * 3. CLI opens the user's browser to the hq-cloud API auth page with the device code + callback port
+ * 4. User signs in with Clerk in the browser
+ * 5. After sign-in, the API redirects to the localhost callback with the token
+ * 6. CLI captures the token, stores it, and shuts down the server
+ */
+import { Command } from 'commander';
+import * as http from 'http';
+import * as crypto from 'crypto';
+import chalk from 'chalk';
+import {
+  readCredentials,
+  writeCredentials,
+  clearCredentials,
+  getCredentialsPath,
+  isExpired,
+} from '../utils/credentials.js';
+import { getApiUrl, apiRequest } from '../utils/api-client.js';
+/** Port range for the localhost callback server */
+const MIN_PORT = 19750;
+const MAX_PORT = 19850;
+/** Timeout for waiting for the browser callback (ms) */
+const LOGIN_TIMEOUT_MS = 5 * 60 * 1000; // 5 minutes
+/**
+ * Open a URL in the user's default browser.
+ * Works on macOS, Linux, and Windows.
+ */
+async function openBrowser(url: string): Promise<void> {
+  const { exec } = await import('child_process');
+  const { promisify } = await import('util');
+  const execAsync = promisify(exec);
+  const platform = process.platform;
+  let command: string;
+  if (platform === 'darwin') {
+    command = `open "${url}"`;
+  } else if (platform === 'win32') {
+    command = `start "" "${url}"`;
+  } else {
+    // Linux — try xdg-open, then sensible-browser
+    command = `xdg-open "${url}" 2>/dev/null || sensible-browser "${url}" 2>/dev/null || echo "OPEN_FAILED"`;
+  }
+  try {
+    await execAsync(command);
+  } catch {
+    // Browser open failed silently — user will be shown the URL to open manually
+  }
+}
+/**
+ * Find an available port in the callback port range.
+ */
+function findAvailablePort(): Promise<number> {
+  return new Promise((resolve, reject) => {
+    const port = MIN_PORT + Math.floor(Math.random() * (MAX_PORT - MIN_PORT));
+    const server = http.createServer();
+    server.listen(port, '127.0.0.1', () => {
+      server.close(() => resolve(port));
+    });
+    server.on('error', () => {
+      // Try another port
+      const fallback = MIN_PORT + Math.floor(Math.random() * (MAX_PORT - MIN_PORT));
+      const server2 = http.createServer();
+      server2.listen(fallback, '127.0.0.1', () => {
+        server2.close(() => resolve(fallback));
+      });
+      server2.on('error', () => {
+        reject(new Error('Could not find an available port for auth callback'));
+      });
+    });
+  });
+}
+/**
+ * HTML page shown to the user after successful login.
+ */
+function successHtml(): string {
+  return `<!DOCTYPE html>
+<html>
+<head><title>HQ CLI — Logged In</title></head>
+<body style="font-family: system-ui, sans-serif; display: flex; align-items: center; justify-content: center; height: 100vh; margin: 0; background: #f8f9fa;">
+  <div style="text-align: center; max-width: 400px;">
+    <h1 style="color: #16a34a;">Logged In</h1>
+    <p style="color: #4b5563;">You have been authenticated. You can close this tab and return to the terminal.</p>
+  </div>
+</body>
+</html>`;
+}
+/**
+ * HTML page shown on error.
+ */
+function errorHtml(message: string): string {
+  return `<!DOCTYPE html>
+<html>
+<head><title>HQ CLI — Auth Error</title></head>
+<body style="font-family: system-ui, sans-serif; display: flex; align-items: center; justify-content: center; height: 100vh; margin: 0; background: #f8f9fa;">
+  <div style="text-align: center; max-width: 400px;">
+    <h1 style="color: #dc2626;">Authentication Error</h1>
+    <p style="color: #4b5563;">${message}</p>
+    <p style="color: #6b7280;">Please return to the terminal and try again.</p>
+  </div>
+</body>
+</html>`;
+}
+/**
+ * Start a temporary localhost server and wait for the auth callback.
+ * Returns the received token and user info.
+ */
+function waitForCallback(port: number): Promise<{ token: string; userId: string; email?: string; expiresAt?: string }> {
+  return new Promise((resolve, reject) => {
+    const server = http.createServer((req, res) => {
+      const url = new URL(req.url ?? '/', `http://127.0.0.1:${port}`);
+      if (url.pathname === '/callback') {
+        const token = url.searchParams.get('token');
+        const userId = url.searchParams.get('user_id');
+        const email = url.searchParams.get('email') ?? undefined;
+        const expiresAt = url.searchParams.get('expires_at') ?? undefined;
+        const error = url.searchParams.get('error');
+        if (error) {
+          res.writeHead(200, { 'Content-Type': 'text/html' });
+          res.end(errorHtml(error));
+          server.close();
+          reject(new Error(error));
+          return;
+        }
+        if (!token || !userId) {
+          res.writeHead(200, { 'Content-Type': 'text/html' });
+          res.end(errorHtml('Missing token or user ID in callback'));
+          server.close();
+          reject(new Error('Invalid callback: missing token or user_id'));
+          return;
+        }
+        res.writeHead(200, { 'Content-Type': 'text/html' });
+        res.end(successHtml());
+        // Close the server after sending the response
+        server.close();
+        resolve({ token, userId, email, expiresAt });
+      } else {
+        res.writeHead(404, { 'Content-Type': 'text/plain' });
+        res.end('Not Found');
+      }
+    });
+    server.listen(port, '127.0.0.1', () => {
+      // Server is ready
+    });
+    // Timeout
+    const timeout = setTimeout(() => {
+      server.close();
+      reject(new Error('Login timed out. Please try again.'));
+    }, LOGIN_TIMEOUT_MS);
+    server.on('close', () => {
+      clearTimeout(timeout);
+    });
+    server.on('error', (err) => {
+      clearTimeout(timeout);
+      reject(err);
+    });
+  });
+}
+/**
+ * Register the "hq auth" command group with login, logout, and status subcommands.
+ */
+export function registerAuthCommand(program: Command): void {
+  const authCmd = program
+    .command('auth')
+    .description('Authenticate with HQ Cloud');
+  // --- hq auth login ---
+  authCmd
+    .command('login')
+    .description('Log in to HQ Cloud via browser')
+    .action(async () => {
+      try {
+        // Check if already logged in
+        const existing = readCredentials();
+        if (existing && !isExpired(existing)) {
+          const label = existing.email ?? existing.userId;
+          console.log(chalk.yellow(`Already logged in as ${label}.`));
+          console.log('Run "hq auth logout" first to switch accounts.');
+          return;
+        }
+        // Generate a device code for the login session
+        const deviceCode = crypto.randomBytes(16).toString('hex');
+        // Find an available port for the callback
+        const port = await findAvailablePort();
+        const callbackUrl = `http://127.0.0.1:${port}/callback`;
+        // Build the login URL
+        const apiUrl = getApiUrl();
+        const loginUrl = `${apiUrl}/auth/cli-login?device_code=${deviceCode}&callback_url=${encodeURIComponent(callbackUrl)}`;
+        console.log(chalk.blue('Opening browser for authentication...'));
+        console.log();
+        console.log(`If the browser does not open, visit this URL:`);
+        console.log(chalk.underline(loginUrl));
+        console.log();
+        console.log(chalk.dim('Waiting for authentication (timeout: 5 minutes)...'));
+        // Open browser
+        await openBrowser(loginUrl);
+        // Wait for callback
+        const result = await waitForCallback(port);
+        // Store credentials
+        writeCredentials({
+          token: result.token,
+          userId: result.userId,
+          email: result.email,
+          storedAt: new Date().toISOString(),
+          expiresAt: result.expiresAt,
+        });
+        const label = result.email ?? result.userId;
+        console.log();
+        console.log(chalk.green(`Logged in as ${label}`));
+        console.log(chalk.dim(`Credentials saved to ${getCredentialsPath()}`));
+      } catch (error) {
+        console.error(chalk.red('Login failed:'), error instanceof Error ? error.message : error);
+        process.exit(1);
+      }
+    });
+  // --- hq auth logout ---
+  authCmd
+    .command('logout')
+    .description('Log out and clear stored credentials')
+    .action(() => {
+      const removed = clearCredentials();
+      if (removed) {
+        console.log(chalk.green('Logged out. Credentials cleared.'));
+      } else {
+        console.log(chalk.yellow('Not logged in.'));
+      }
+    });
+  // --- hq auth status ---
+  authCmd
+    .command('status')
+    .description('Show current authentication status')
+    .action(async () => {
+      const creds = readCredentials();
+      if (!creds) {
+        console.log(chalk.yellow('Not logged in.'));
+        console.log('Run "hq auth login" to authenticate.');
+        return;
+      }
+      if (isExpired(creds)) {
+        console.log(chalk.red('Session expired.'));
+        console.log('Run "hq auth login" to re-authenticate.');
+        return;
+      }
+      const label = creds.email ?? creds.userId;
+      console.log(chalk.green(`Logged in as ${label}`));
+      console.log(`  User ID:    ${creds.userId}`);
+      console.log(`  Stored at:  ${creds.storedAt}`);
+      if (creds.expiresAt) {
+        console.log(`  Expires at: ${creds.expiresAt}`);
+      }
+      console.log(`  API URL:    ${getApiUrl()}`);
+      console.log(`  Creds file: ${getCredentialsPath()}`);
+      // Optionally verify with the API
+      try {
+        const resp = await apiRequest<{ userId: string; sessionId: string }>('GET', '/auth/me');
+        if (resp.ok && resp.data) {
+          console.log(chalk.dim(`  Verified:   API confirms session is valid`));
+        } else {
+          console.log(chalk.yellow(`  Warning:    API returned ${resp.status} — token may be invalid`));
+        }
+      } catch {
+        console.log(chalk.dim(`  Note:       Could not reach API to verify token`));
+      }
+    });
+}

package/src/commands/cloud-setup.ts ADDED Viewed

@@ -0,0 +1,251 @@
+/**
+ * hq cloud commands — cloud session management
+ *
+ * Subcommands:
+ * - setup-token: Walk user through generating and storing a Claude OAuth token
+ * - status: Show cloud readiness (auth state + Claude token state)
+ * - upload: Initial HQ file upload to cloud storage
+ */
+import { Command } from 'commander';
+import * as readline from 'readline';
+import chalk from 'chalk';
+import {
+  readCredentials,
+  isExpired,
+} from '../utils/credentials.js';
+import { apiRequest, getApiUrl } from '../utils/api-client.js';
+import { findHqRoot } from '../utils/manifest.js';
+import { runInitialUpload } from './initial-upload.js';
+/** Minimum token length for basic validation */
+const MIN_TOKEN_LENGTH = 20;
+/**
+ * Validate a Claude OAuth token string.
+ * Returns null if valid, or an error message string if invalid.
+ */
+export function validateClaudeToken(token: string): string | null {
+  if (!token || token.trim().length === 0) {
+    return 'Token cannot be empty.';
+  }
+  const trimmed = token.trim();
+  if (trimmed.length < MIN_TOKEN_LENGTH) {
+    return `Token is too short (${trimmed.length} chars). Claude tokens are typically much longer. Please check you copied the full token.`;
+  }
+  // Reject tokens that look like they contain whitespace in the middle (copy-paste artifacts)
+  if (/\s/.test(trimmed)) {
+    return 'Token contains whitespace. Please ensure you copied it correctly without line breaks.';
+  }
+  return null;
+}
+/**
+ * Prompt the user for input on stdin.
+ * Returns the entered string (trimmed).
+ */
+function promptUser(question: string): Promise<string> {
+  const rl = readline.createInterface({
+    input: process.stdin,
+    output: process.stdout,
+  });
+  return new Promise((resolve) => {
+    rl.question(question, (answer) => {
+      rl.close();
+      resolve(answer.trim());
+    });
+  });
+}
+/**
+ * Register the "hq cloud" command group with setup-token and status subcommands.
+ */
+export function registerCloudSetupCommand(program: Command): void {
+  const cloudCmd = program
+    .command('cloud')
+    .description('Cloud session management — token setup and status');
+  // --- hq cloud setup-token ---
+  cloudCmd
+    .command('setup-token')
+    .description('Set up your Claude OAuth token for cloud sessions')
+    .action(async () => {
+      try {
+        // Check auth first (AC #6)
+        const creds = readCredentials();
+        if (!creds || isExpired(creds)) {
+          console.log(chalk.red('Not logged in to HQ Cloud.'));
+          console.log('Run "hq auth login" first, then try again.');
+          process.exit(1);
+        }
+        console.log(chalk.blue('Claude Token Setup'));
+        console.log('');
+        console.log('To launch cloud sessions, HQ needs your Claude OAuth token.');
+        console.log('This token lets cloud containers run Claude on your behalf.');
+        console.log('');
+        console.log(chalk.yellow('Step 1:') + ' Open a terminal and run:');
+        console.log('');
+        console.log(chalk.cyan('  claude setup-token'));
+        console.log('');
+        console.log(chalk.yellow('Step 2:') + ' Copy the token output and paste it below.');
+        console.log('');
+        // Prompt for the token
+        const token = await promptUser('Paste your Claude token: ');
+        // Validate format (AC #2)
+        const validationError = validateClaudeToken(token);
+        if (validationError) {
+          console.log('');
+          console.log(chalk.red('Invalid token: ') + validationError);
+          process.exit(1);
+        }
+        // Send to API (AC #3)
+        console.log('');
+        console.log(chalk.dim('Storing token securely...'));
+        const resp = await apiRequest<{ ok: boolean; hasToken: boolean; setAt: string | null }>(
+          'POST',
+          '/api/settings/claude-token',
+          { token: token.trim() },
+        );
+        if (!resp.ok) {
+          console.log(chalk.red('Failed to store token: ') + (resp.error ?? `HTTP ${resp.status}`));
+          process.exit(1);
+        }
+        // Success (AC #4)
+        console.log('');
+        console.log(chalk.green('Claude token stored securely.'));
+        if (resp.data?.setAt) {
+          console.log(chalk.dim(`  Set at: ${resp.data.setAt}`));
+        }
+        console.log('');
+        console.log('You can now launch cloud sessions with "hq cloud" commands.');
+      } catch (error) {
+        console.error(
+          chalk.red('Error:'),
+          error instanceof Error ? error.message : error,
+        );
+        process.exit(1);
+      }
+    });
+  // --- hq cloud status ---
+  cloudCmd
+    .command('status')
+    .description('Show cloud readiness — authentication and Claude token status')
+    .action(async () => {
+      try {
+        console.log(chalk.blue('HQ Cloud Status'));
+        console.log('');
+        // 1. Auth status
+        const creds = readCredentials();
+        if (!creds) {
+          console.log(`  Auth:          ${chalk.red('Not logged in')}`);
+          console.log(`  Claude Token:  ${chalk.dim('unknown (login first)')}`);
+          console.log('');
+          console.log('Run "hq auth login" to get started.');
+          return;
+        }
+        if (isExpired(creds)) {
+          console.log(`  Auth:          ${chalk.red('Session expired')}`);
+          console.log(`  Claude Token:  ${chalk.dim('unknown (login first)')}`);
+          console.log('');
+          console.log('Run "hq auth login" to re-authenticate.');
+          return;
+        }
+        const label = creds.email ?? creds.userId;
+        console.log(`  Auth:          ${chalk.green('Logged in')} as ${label}`);
+        console.log(`  API:           ${getApiUrl()}`);
+        // 2. Claude token status (AC #5)
+        try {
+          const resp = await apiRequest<{ hasToken: boolean; setAt: string | null }>(
+            'GET',
+            '/api/settings/claude-token',
+          );
+          if (resp.ok && resp.data) {
+            if (resp.data.hasToken) {
+              console.log(`  Claude Token:  ${chalk.green('Configured')}`);
+              if (resp.data.setAt) {
+                console.log(`  Token Set At:  ${resp.data.setAt}`);
+              }
+            } else {
+              console.log(`  Claude Token:  ${chalk.yellow('Not configured')}`);
+              console.log('');
+              console.log('Run "hq cloud setup-token" to configure your Claude token.');
+            }
+          } else {
+            console.log(`  Claude Token:  ${chalk.yellow('Could not check')} (API returned ${resp.status})`);
+          }
+        } catch {
+          console.log(`  Claude Token:  ${chalk.dim('Could not reach API')}`);
+        }
+        console.log('');
+      } catch (error) {
+        console.error(
+          chalk.red('Error:'),
+          error instanceof Error ? error.message : error,
+        );
+        process.exit(1);
+      }
+    });
+  // --- hq cloud upload ---
+  cloudCmd
+    .command('upload')
+    .description('Upload local HQ files to cloud storage (initial setup)')
+    .option('--hq-root <path>', 'Path to HQ root directory (auto-detected if omitted)')
+    .option('--on-conflict <action>', 'Action when remote has files: merge, replace, or skip')
+    .action(async (opts: { hqRoot?: string; onConflict?: string }) => {
+      try {
+        // Require auth
+        const creds = readCredentials();
+        if (!creds || isExpired(creds)) {
+          console.log(chalk.red('Not logged in to HQ Cloud.'));
+          console.log('Run "hq auth login" first, then try again.');
+          process.exit(1);
+        }
+        const hqRoot = opts.hqRoot ?? findHqRoot();
+        console.log(chalk.blue('HQ Cloud — Initial Upload'));
+        console.log(chalk.dim(`  HQ root: ${hqRoot}`));
+        console.log('');
+        const onConflict = opts.onConflict as 'merge' | 'replace' | 'skip' | undefined;
+        const result = await runInitialUpload(hqRoot, {
+          onConflict,
+        });
+        if (result.skipped) {
+          process.exit(0);
+        }
+        if (result.failed > 0) {
+          process.exit(1);
+        }
+      } catch (error) {
+        console.error(
+          chalk.red('Upload failed:'),
+          error instanceof Error ? error.message : error,
+        );
+        process.exit(1);
+      }
+    });
+}