@kamilio/wire 0.1.2 → 0.1.3

package/src/adapters/root.ts

@@ -1,10 +1,11 @@
 import { UserError, defineCommand, defineGroup, S, type Group } from "toolcraft";
 
-import type { FetchedDocument, InitializedWire, Resource, SwitchedWireBackend, Wire, WireBackend, WireResult, WireWatchSession } from "wire-core";
+import { defaultWireBackend, registryPathForBackend, type FetchedDocument, type InitializedWire, type Resource, type SwitchedWireBackend, type Wire, type WireBackend, type WireResult, type WireWatchSession } from "wire-core";
 import type { Auth, AuthResult, AuthService } from "../auth.js";
 
 export type WireRoot = Group;
 export type TextInputReader = () => Promise<string>;
+export type WireRootOptions = Readonly<{ allowPaste: boolean }>;
 
 const authServices = ["asana", "chatgpt", "gmail", "google-docs", "notion", "slack", "zoom"] as const;
 const removedCliCommandNames = Object.freeze({
@@ -116,20 +117,22 @@ function formatWireCountsRich(result: WireResult, primitives: any): string {
 
 function formatWireResult(result: WireResult): string {
   const local = lineText(primaryFilesystemLink(result.resource).path);
+  const remote = lineText(result.summary.remote);
   const titleText = lineText(wireTitle(result.resource));
   if (result.summary.action === "failed") return [`failed  ${titleText}`, `local:  ${local}`, formatMultilineField("error", result.summary.error!)].join("\n");
-  const changed = result.summary.added !== 0 || result.summary.modified !== 0 || result.summary.removed !== 0;
+  const changed = result.summary.action !== "detached" && (result.summary.added !== 0 || result.summary.modified !== 0 || result.summary.removed !== 0);
   const title = changed ? `${result.summary.action}  ${formatWireCounts(result)}  ${titleText}` : `${result.summary.action}  ${titleText}`;
-  return [title, `local:  ${local}`].join("\n");
+  return [title, ...(result.summary.action === "uploaded" ? [`remote: ${remote}`] : []), `local:  ${local}`].join("\n");
 }
 
 function formatWireResultRich(result: WireResult, primitives: any): string {
   const local = lineText(primaryFilesystemLink(result.resource).path);
+  const remote = lineText(result.summary.remote);
   const titleText = lineText(wireTitle(result.resource));
   if (result.summary.action === "failed") return [`failed  ${titleText}`, `local:  ${local}`, formatMultilineField("error", result.summary.error!)].join("\n");
-  const changed = result.summary.added !== 0 || result.summary.modified !== 0 || result.summary.removed !== 0;
+  const changed = result.summary.action !== "detached" && (result.summary.added !== 0 || result.summary.modified !== 0 || result.summary.removed !== 0);
   const title = changed ? `${result.summary.action}  ${formatWireCountsRich(result, primitives)}  ${titleText}` : `${result.summary.action}  ${titleText}`;
-  return [title, `local:  ${local}`].join("\n");
+  return [title, ...(result.summary.action === "uploaded" ? [`remote: ${remote}`] : []), `local:  ${local}`].join("\n");
 }
 
 function formatMultilineField(label: string, value: string): string {
@@ -189,16 +192,16 @@ function formatInitializedWire(value: InitializedWire): string {
 
 function watchSessionJson(value: WireWatchSession) {
   value.close();
-  return { resource_id: value.resource.id, title: wireTitle(value.resource), remote: value.resource.urls[0], local: primaryFilesystemLink(value.resource).path, path: value.path, mode: value.mode, debounceMs: value.debounceMs, pollMs: value.pollMs };
+  throw new UserError("wire watch --json is not supported. Use markdown output for watch.");
 }
 
 function wireUserErrorMessage(message: string): boolean {
-  return /^Unsupported source URL: /.test(message) || /^Wire workspace not initialized\. Run `wire init` or `wire <url>` first\.$/.test(message) || /^Wire workspace already initialized with (sqlite|files) registry at .+\. Existing registries are not overwritten\.$/.test(message) || /^Resource path is not registered: /.test(message) || /^Resource (path |identifier |URL )?not found: /.test(message) || /^Ambiguous resource path /.test(message) || /^Login not saved$/.test(message) || /authentication (is missing|is missing or expired|failed|expired).*Run `wire (asana|chatgpt|gmail|google-docs|notion|slack|zoom) login`/i.test(message) || /^Asana API /.test(message) || /^(GET|POST|PUT|DELETE) \/.* failed: \d+ /.test(message) || /^(Invalid Asana project heading|Asana section appears|Asana milestone appears|Asana task appears|Asana subtask appears|Unsupported Asana Markdown|Duplicate Asana identity|Missing Asana project heading|Asana project identity changed|Unknown Asana identity|Conflicting Asana edits)/.test(message) || /^ChatGPT conversation download failed\. Run `wire chatgpt login`\./.test(message) || /^Gmail API .+ failed: HTTP \d+ /.test(message) || /^Slack API [\w.]+ failed: /.test(message) || /^Zoom Hub (.+ failed: HTTP \d+|file .+ was not returned by batch_get)/.test(message) || /^(Markdown document requires a first heading|Markdown and Notion changed since last sync|lossless Markdown headings deeper than level 3 are not supported)$/.test(message) || /^Indented Notion Markdown block has no parent at indent \d+$/.test(message) || /^POST [A-Za-z0-9]+ failed: \d+ /.test(message) || /^Google (Docs|Sheets) changed remotely and locally\./.test(message) || /^Google Docs local edit cannot be mapped to the live document text$/.test(message) || /^Google Docs sync cannot upload formatting-only Markdown edits$/.test(message) || /^Google (Docs|Sheets) editor did not include save metadata$/.test(message) || /^Google (Docs Markdown|Sheets CSV) export (did not include a filename|failed: HTTP \d+)$/.test(message) || /^Google (Docs|Sheets) save (failed: |verification failed$)/.test(message) || /^Google sync base must /.test(message) || /^Google Sheets sync base /.test(message) || /^Google Sheets sync cannot upload formula-like cell text at row \d+, column \d+\nPrefix it with an apostrophe or rewrite it as plain text before syncing\.$/.test(message) || /^Google Sheets sync requires a Markdown table/.test(message) || /^Google Sheets sync requires every Markdown table row to have the same number of cells$/.test(message) || /^Google Sheets sync requires every Markdown table row to have \d+ cells: line \d+ has \d+$/.test(message);
+  return /^Unsupported source URL: /.test(message) || /^Wire workspace not initialized\. Run `wire init` or `wire <url>` first\.$/.test(message) || /^Wire workspace already initialized with (sqlite|files) registry at .+\. Existing registries are not overwritten\.$/.test(message) || /^Resource path is not registered: /.test(message) || /^Resource (path |identifier |URL )?not found: /.test(message) || /^Ambiguous resource path /.test(message) || /^Login not saved$/.test(message) || /authentication (is missing|is missing or expired|failed|expired).*Run `wire (asana|chatgpt|gmail|google-docs|notion|slack|zoom) login`/i.test(message) || /^Asana API /.test(message) || /^(GET|POST|PUT|DELETE) \/.* failed: \d+ /.test(message) || /^(Invalid Asana project heading|Asana section appears|Asana milestone appears|Asana task appears|Asana subtask appears|Unsupported Asana Markdown|Duplicate Asana identity|Missing Asana project heading|Asana project identity changed|Unknown Asana identity|Conflicting Asana edits)/.test(message) || /^ChatGPT conversation download failed\. Run `wire chatgpt login`\./.test(message) || /^Gmail API .+ failed: HTTP \d+ /.test(message) || /^Slack API [\w.]+ failed: /.test(message) || /^Zoom Hub (.+ failed: HTTP \d+|file .+ was not returned by batch_get)/.test(message) || /^(Markdown document requires a first heading|Markdown and Notion changed since last sync|lossless Markdown headings deeper than level 3 are not supported)$/.test(message) || /^Indented Notion Markdown block has no parent at indent \d+$/.test(message) || /^POST [A-Za-z0-9]+ failed: \d+ /.test(message) || /^Google (Docs|Sheets|Slides) changed remotely and locally\./.test(message) || /^Google Docs local edit cannot be mapped to the live document text$/.test(message) || /^Google Docs sync cannot upload formatting-only Markdown edits$/.test(message) || /^Google Docs sync cannot preserve formatting in edited text$/.test(message) || /^Google Slides sync is download-only\./.test(message) || /^Google Forms sync is download-only\./.test(message) || /^Google Forms API is disabled\. Enable it at /.test(message) || /^Google Forms API token is missing required scopes\./.test(message) || /^Google Forms API authentication is missing or expired\./.test(message) || /^Google Forms API .+ failed: HTTP \d+/.test(message) || /^Google (Docs|Sheets) editor did not include save metadata$/.test(message) || /^Google (Docs Markdown|Sheets CSV|Slides PPTX) export (did not include a filename|failed: HTTP \d+)$/.test(message) || /^Google (Docs|Sheets) save (failed: |verification failed$)/.test(message) || /^Google sync base must /.test(message) || /^Google Sheets sync base /.test(message) || /^Google Sheets sync cannot upload formula-like cell text at row \d+, column \d+\nPrefix it with an apostrophe or rewrite it as plain text before syncing\.$/.test(message) || /^Google Sheets sync requires a Markdown table/.test(message) || /^Google Sheets sync requires every Markdown table row to have the same number of cells$/.test(message) || /^Google Sheets sync requires every Markdown table row to have \d+ cells: line \d+ has \d+$/.test(message);
 }
 
 function wireUserErrorDisplayMessage(message: string): string {
   const unsupportedSource = /^Unsupported source URL: ([\s\S]+)$/.exec(message);
-  if (unsupportedSource !== null) return `unsupported source\nurl: ${lineText(unsupportedSource[1]!)}\nsupported: Asana, ChatGPT, Gmail, Google Docs/Sheets, Notion, Slack, Zoom`;
+  if (unsupportedSource !== null) return `unsupported source\nurl: ${lineText(unsupportedSource[1]!)}\nsupported: Asana, ChatGPT, Gmail, Google Docs/Sheets/Slides/Forms, Notion, Slack, Zoom`;
   const missingWorkspace = /^Wire workspace not initialized\. Run `wire init` or `wire <url>` first\.$/.exec(message);
   if (missingWorkspace !== null) return "workspace not initialized\nrun: wire init\nattach: wire <url>";
   const existingWorkspace = /^Wire workspace already initialized with (sqlite|files) registry at ([\s\S]+)\. Existing registries are not overwritten\.$/.exec(message);
@@ -235,30 +238,44 @@ function wireUserErrorDisplayMessage(message: string): string {
   if (notionIndentedBlock !== null) return `local markdown invalid\nservice: Notion\nindent: ${notionIndentedBlock[1]!}\ndetail: indented block has no parent`;
   const chatgptDownload = /^ChatGPT conversation download failed\. Run `wire chatgpt login`\.([\s\S]*)$/.exec(message);
   if (chatgptDownload !== null) return `download failed\nservice: ChatGPT\nlogin: wire chatgpt login\ndetail: ${lineText(chatgptDownload[1]!)}`;
-  const googleExportMissingFilename = /^Google (Docs Markdown|Sheets CSV) export did not include a filename$/.exec(message);
-  if (googleExportMissingFilename !== null) return `export failed\nservice: Google Docs/Sheets\nsource: Google ${googleExportMissingFilename[1]!}\ndetail: missing filename`;
-  const googleExportHttp = /^Google (Docs Markdown|Sheets CSV) export failed: HTTP (\d+)(?: ([\s\S]+))?$/.exec(message);
-  if (googleExportHttp !== null) return `export failed\nservice: Google Docs/Sheets\nsource: Google ${googleExportHttp[1]!}\nstatus: HTTP ${googleExportHttp[2]!}${googleExportHttp[3] === undefined ? "" : `\ndetail: ${lineText(googleExportHttp[3]!)}`}`;
+  const googleExportMissingFilename = /^Google (Docs Markdown|Sheets CSV|Slides PPTX) export did not include a filename$/.exec(message);
+  if (googleExportMissingFilename !== null) return `export failed\nservice: Google Docs/Sheets/Slides\nsource: Google ${googleExportMissingFilename[1]!}\ndetail: missing filename`;
+  const googleExportHttp = /^Google (Docs Markdown|Sheets CSV|Slides PPTX) export failed: HTTP (\d+)(?: ([\s\S]+))?$/.exec(message);
+  if (googleExportHttp !== null) return `export failed\nservice: Google Docs/Sheets/Slides\nsource: Google ${googleExportHttp[1]!}\nstatus: HTTP ${googleExportHttp[2]!}${googleExportHttp[3] === undefined ? "" : `\ndetail: ${lineText(googleExportHttp[3]!)}`}`;
   const googleEditorMetadata = /^Google (Docs|Sheets) editor did not include save metadata$/.exec(message);
-  if (googleEditorMetadata !== null) return `save metadata missing\nservice: Google Docs/Sheets\nsource: Google ${googleEditorMetadata[1]!} editor`;
+  if (googleEditorMetadata !== null) return `save metadata missing\nservice: Google Docs/Sheets/Slides\nsource: Google ${googleEditorMetadata[1]!} editor`;
   const googleSaveFailed = /^Google (Docs|Sheets) save failed: ([\s\S]+)$/.exec(message);
-  if (googleSaveFailed !== null) return `save failed\nservice: Google Docs/Sheets\nsource: Google ${googleSaveFailed[1]!}\ndetail: ${lineText(googleSaveFailed[2]!)}`;
+  if (googleSaveFailed !== null) return `save failed\nservice: Google Docs/Sheets/Slides\nsource: Google ${googleSaveFailed[1]!}\ndetail: ${lineText(googleSaveFailed[2]!)}`;
   const googleSaveVerification = /^Google (Docs|Sheets) save verification failed$/.exec(message);
-  if (googleSaveVerification !== null) return `save verification failed\nservice: Google Docs/Sheets\nsource: Google ${googleSaveVerification[1]!}`;
-  const googleConflict = /^Google (Docs|Sheets) changed remotely and locally\. Resolve the conflict in Google (Docs|Sheets) or the local Markdown file before syncing again\.$/.exec(message);
-  if (googleConflict !== null) return `sync conflict\nservice: Google Docs/Sheets\nsource: Google ${googleConflict[1]!}\nresolve: edit Google ${googleConflict[2]!} or local Markdown, then sync again`;
+  if (googleSaveVerification !== null) return `save verification failed\nservice: Google Docs/Sheets/Slides\nsource: Google ${googleSaveVerification[1]!}`;
+  const googleConflict = /^Google (Docs|Sheets|Slides) changed remotely and locally\. Resolve the conflict in Google (Docs|Sheets|Slides) or the local Markdown file before syncing again\.$/.exec(message);
+  if (googleConflict !== null) return `sync conflict\nservice: Google Docs/Sheets/Slides\nsource: Google ${googleConflict[1]!}\nresolve: edit Google ${googleConflict[2]!} or local Markdown, then sync again`;
   const googleDocsMapping = /^Google Docs local edit cannot be mapped to the live document text$/.exec(message);
-  if (googleDocsMapping !== null) return "local edit not mappable\nservice: Google Docs/Sheets\nsource: Google Docs\nresolve: edit Google Docs or simplify local Markdown";
+  if (googleDocsMapping !== null) return "local edit not mappable\nservice: Google Docs/Sheets/Slides\nsource: Google Docs\nresolve: edit Google Docs or simplify local Markdown";
   const googleFormattingOnly = /^Google Docs sync cannot upload formatting-only Markdown edits$/.exec(message);
-  if (googleFormattingOnly !== null) return "local edit not uploadable\nservice: Google Docs/Sheets\nsource: Google Docs\ndetail: formatting-only Markdown edit";
+  if (googleFormattingOnly !== null) return "local edit not uploadable\nservice: Google Docs/Sheets/Slides\nsource: Google Docs\ndetail: formatting-only Markdown edit";
+  const googleFormattingSpan = /^Google Docs sync cannot preserve formatting in edited text$/.exec(message);
+  if (googleFormattingSpan !== null) return "local edit not uploadable\nservice: Google Docs/Sheets/Slides\nsource: Google Docs\ndetail: edited text contains formatting";
+  const googleSlidesDownloadOnly = /^Google Slides sync is download-only\. Revert local edits or use `wire download <url>` for a fresh copy\.$/.exec(message);
+  if (googleSlidesDownloadOnly !== null) return "local edit not uploadable\nservice: Google Docs/Sheets/Slides\nsource: Google Slides\ndetail: download-only";
+  const googleFormsDownloadOnly = /^Google Forms sync is download-only\. Revert local edits or use `wire download <url>` for a fresh copy\.$/.exec(message);
+  if (googleFormsDownloadOnly !== null) return "local edit not uploadable\nservice: Google Forms\ndetail: download-only";
+  const googleFormsDisabled = /^Google Forms API is disabled\. Enable it at ([^\s]+) then retry\.$/.exec(message);
+  if (googleFormsDisabled !== null) return `api disabled\nservice: Google Forms\nenable: ${lineText(googleFormsDisabled[1]!)}\nretry: wire <form-url>`;
+  const googleFormsScopes = /^Google Forms API token is missing required scopes\. Regenerate GOOGLE_FORMS_TOKEN_FILE with forms\.body and forms\.responses\.readonly scopes\.$/.exec(message);
+  if (googleFormsScopes !== null) return "login invalid\nservice: Google Forms\ntoken: GOOGLE_FORMS_TOKEN_FILE\nscopes: forms.body, forms.responses.readonly";
+  const googleFormsAuth = /^Google Forms API authentication is missing or expired\. Set GOOGLE_FORMS_TOKEN_FILE to an OAuth token with Forms scopes, then retry\.$/.exec(message);
+  if (googleFormsAuth !== null) return "login required\nservice: Google Forms\ntoken: GOOGLE_FORMS_TOKEN_FILE\nscopes: forms.body, forms.responses.readonly";
+  const googleFormsApi = /^Google Forms API ([\s\S]+?) failed: HTTP (\d+)(?: ([\s\S]+))?$/.exec(message);
+  if (googleFormsApi !== null) return `api failed\nservice: Google Forms\noperation: ${lineText(googleFormsApi[1]!)}\nstatus: HTTP ${googleFormsApi[2]!}${googleFormsApi[3] === undefined ? "" : `\ndetail: ${lineText(googleFormsApi[3]!)}`}`;
   const googleSyncBase = /^Google sync base must ([\s\S]+)$/.exec(message);
-  if (googleSyncBase !== null) return `sync base invalid\nservice: Google Docs/Sheets\ndetail: must ${lineText(googleSyncBase[1]!)}`;
+  if (googleSyncBase !== null) return `sync base invalid\nservice: Google Docs/Sheets/Slides\ndetail: must ${lineText(googleSyncBase[1]!)}`;
   const googleSheetsSyncBase = /^Google Sheets sync base ([\s\S]+)$/.exec(message);
-  if (googleSheetsSyncBase !== null) return `sync base invalid\nservice: Google Docs/Sheets\nsource: Google Sheets\ndetail: ${lineText(googleSheetsSyncBase[1]!)}`;
+  if (googleSheetsSyncBase !== null) return `sync base invalid\nservice: Google Docs/Sheets/Slides\nsource: Google Sheets\ndetail: ${lineText(googleSheetsSyncBase[1]!)}`;
   const googleSheetsFormulaCell = /^Google Sheets sync cannot upload formula-like cell text at row (\d+), column (\d+)\nPrefix it with an apostrophe or rewrite it as plain text before syncing\.$/.exec(message);
-  if (googleSheetsFormulaCell !== null) return `formula-like cell blocked\nservice: Google Docs/Sheets\nsource: Google Sheets\ncell: row ${googleSheetsFormulaCell[1]!}, column ${googleSheetsFormulaCell[2]!}\nresolve: prefix with an apostrophe or rewrite as plain text`;
+  if (googleSheetsFormulaCell !== null) return `formula-like cell blocked\nservice: Google Docs/Sheets/Slides\nsource: Google Sheets\ncell: row ${googleSheetsFormulaCell[1]!}, column ${googleSheetsFormulaCell[2]!}\nresolve: prefix with an apostrophe or rewrite as plain text`;
   const googleSheetsTable = /^Google Sheets sync requires (a Markdown table(?: separator row)?|every Markdown table row to have the same number of cells|every Markdown table row to have \d+ cells: line \d+ has \d+)$/.exec(message);
-  if (googleSheetsTable !== null) return `local table invalid\nservice: Google Docs/Sheets\nsource: Google Sheets\ndetail: requires ${lineText(googleSheetsTable[1]!)}`;
+  if (googleSheetsTable !== null) return `local table invalid\nservice: Google Docs/Sheets/Slides\nsource: Google Sheets\ndetail: requires ${lineText(googleSheetsTable[1]!)}`;
   const missingPath = /^Resource path (not found|is not registered): ([\s\S]+)$/.exec(message);
   if (missingPath !== null) return `${missingPath[1] === "not found" ? "resource not found" : "resource not registered"}\npath: ${lineText(missingPath[2]!)}`;
   const missingResource = /^Resource (identifier |URL )?not found: ([\s\S]+)$/.exec(message);
@@ -290,7 +307,7 @@ function serviceTitle(service: AuthService): string {
     asana: "Asana",
     chatgpt: "ChatGPT",
     gmail: "Gmail",
-    "google-docs": "Google Docs/Sheets",
+    "google-docs": "Google Docs/Sheets/Slides",
     notion: "Notion",
     slack: "Slack",
     zoom: "Zoom",
@@ -349,17 +366,20 @@ export const wirePresentation: WirePresentation = Object.freeze({
   authLogout: render<{ readonly service: AuthService; readonly deleted: true }>((value) => `${serviceTitle(value.service)} logged out`),
 });
 
-function authGroup(service: AuthService, description: string, loginDescription: string, auth: Auth, readInput?: TextInputReader): Group {
-  const login = async (paste: boolean | undefined) => paste === true ? auth.pasteCookies(service, await readInput!()) : service === "asana" ? auth.extractAsana() : service === "chatgpt" ? auth.extractChatgpt() : service === "gmail" ? auth.extractGmail() : service === "google-docs" ? auth.extractGoogleDocs() : service === "notion" ? auth.extractNotion() : service === "slack" ? auth.extractSlack() : auth.extractZoom();
+function authGroup(service: AuthService, description: string, loginDescription: string, auth: Auth, readInput: TextInputReader | undefined, options: WireRootOptions): Group {
+  const login = async (paste: boolean | undefined) => {
+    if (paste === true && !options.allowPaste) throw new UserError("Cookie paste is CLI-only.");
+    return paste === true ? auth.pasteCookies(service, await readInput!()) : service === "asana" ? auth.extractAsana() : service === "chatgpt" ? auth.extractChatgpt() : service === "gmail" ? auth.extractGmail() : service === "google-docs" ? auth.extractGoogleDocs() : service === "notion" ? auth.extractNotion() : service === "slack" ? auth.extractSlack() : auth.extractZoom();
+  };
   const title = serviceTitle(service);
   return defineGroup({ name: service, description, children: [
     defineCommand({ name: "status", description: `Check saved ${title} login.`, params: S.Object({}), handler: () => userFacing(() => auth.status(service)), render: wirePresentation.authStatus }),
-    defineCommand({ name: "login", description: loginDescription, params: S.Object({ paste: S.Optional(S.Boolean({ description: "Read cookie text from stdin." })) }), handler: ({ params }) => userFacing(() => login(params.paste)), render: wirePresentation.authStatus }),
+    defineCommand({ name: "login", description: loginDescription, params: S.Object({ paste: S.Optional(S.Boolean({ description: "Read cookie text from stdin.", scope: ["cli", "sdk"] })) }), handler: ({ params }) => userFacing(() => login(params.paste)), render: wirePresentation.authStatus }),
     defineCommand({ name: "logout", description: `Delete saved ${title} cookies.`, params: S.Object({}), handler: () => auth.logout(service), render: wirePresentation.authLogout }),
   ] });
 }
 
-export function createRoot(wire: Wire, currentDirectory: string, auth?: Auth, readInput?: TextInputReader): WireRoot {
+export function createRoot(wire: Wire, currentDirectory: string, auth?: Auth, readInput?: TextInputReader, options: WireRootOptions = { allowPaste: true }): WireRoot {
   const attachFromCliUrl = (url: string) => {
     const removedCommand = removedCliCommandNames[url as keyof typeof removedCliCommandNames];
     if (removedCommand !== undefined) throw new UserError(`Unknown command: ${url}. ${removedCommand}`);
@@ -376,7 +396,7 @@ export function createRoot(wire: Wire, currentDirectory: string, auth?: Auth, re
   });
   const authCommand = (service: (typeof authServices)[number]) => {
     const title = serviceTitle(service);
-    return authGroup(service, `Manage ${title} login.`, "Capture cookies once; normal commands reuse saved cookies.", auth!, readInput);
+    return authGroup(service, `Manage ${title} login.`, "Capture cookies once; normal commands reuse saved cookies.", auth!, readInput, options);
   };
   return defineGroup({
     name: "",
@@ -388,9 +408,9 @@ export function createRoot(wire: Wire, currentDirectory: string, auth?: Auth, re
         name: "init",
         description: "Initialize a wire workspace in the current directory.",
         params: S.Object({
-          backend: S.Optional(S.Enum(["sqlite", "files"], { default: "sqlite", description: "Registry backend: sqlite or files." })),
+          backend: S.Optional(S.Enum(["files", "sqlite"], { default: defaultWireBackend, description: "Registry backend: files or sqlite." })),
         }),
-        handler: ({ params }) => userFacing(() => wire.init(currentDirectory, params.backend as WireBackend, params.backend === "files" ? "records" : "registry.sqlite3")),
+        handler: ({ params }) => userFacing(() => wire.init(currentDirectory, params.backend as WireBackend, registryPathForBackend(params.backend as WireBackend))),
         render: wirePresentation.init,
       }),
       defineCommand({

package/src/auth.ts

@@ -45,24 +45,19 @@ async function verifySlack(runtime: RuntimeCapabilities, cookies: readonly Cooki
 
 async function verifyZoom(runtime: RuntimeCapabilities, cookies: readonly Cookie[]): Promise<AuthResult | null> {
   const cookie = cookieHeader(cookies);
-  const csrfResponse = await runtime.http.request("https://zoom.us/csrf_js", { method: "POST", headers: { cookie, "user-agent": "Mozilla/5.0", "fetch-csrf-token": "1", referer: "https://hub.zoom.us/" }, body: "" });
-  if (!csrfResponse.ok) return null;
-  const csrfText = await csrfResponse.text();
-  const csrfIndex = csrfText.indexOf(":");
-  if (csrfIndex === -1) return null;
-  const csrf = csrfText.slice(csrfIndex + 1).trim();
-  if (csrf === "") return null;
-  const jwtResponse = await runtime.http.request("https://hub.zoom.us/nws/common/2.0/nak?pms=Hub%2CUser%3ABase%2CAICW&src=aicw", { headers: { cookie, "user-agent": "Mozilla/5.0", "zoom-csrftoken": csrf, "x-requested-with": "XMLHttpRequest", referer: "https://hub.zoom.us/" } });
+  const jwtResponse = await runtime.http.request("https://hub.zoom.us/nws/common/2.0/nak?pms=Hub%2CUser%3ABase%2CAICW&src=aicw", { headers: { cookie, "user-agent": zoomUserAgent, "x-requested-with": "XMLHttpRequest", referer: "https://hub.zoom.us/" } });
   const jwt = (await jwtResponse.text()).trim();
   const accountId = cookies.find((value) => value.name === "zm_aid")?.value;
-  if (jwt.split(".").length !== 3 || accountId === undefined) return null;
+  if (!jwtResponse.ok || jwt.split(".").length !== 3 || accountId === undefined) return null;
   return Object.freeze({ service: "zoom", identity: Object.freeze({ account_id: accountId }) });
 }
 
 type CookieJar = Map<string, Cookie>;
 
+const zoomUserAgent = "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36";
+
 function zoomCookieKey(cookie: Cookie): string {
-  return `${cookie.domain}\t${cookie.path}\t${cookie.name}`;
+  return `${cookie.domain.startsWith(".") ? cookie.domain.slice(1) : cookie.domain}\t${cookie.path}\t${cookie.name}`;
 }
 
 function zoomCookieJar(cookies: readonly Cookie[]): CookieJar {
@@ -173,15 +168,7 @@ async function zoomAuthRequest(runtime: RuntimeCapabilities, jar: CookieJar, url
 async function verifyZoomCookieState(runtime: RuntimeCapabilities, cookies: readonly Cookie[], metadata: Readonly<Record<string, string>>): Promise<Readonly<{ result: AuthResult | null; cookies: readonly Cookie[]; metadata: Readonly<Record<string, string>>; changed: boolean }>> {
   const jar = zoomCookieJar(cookies);
   let changed = zoomPruneExpiredCookies(jar, runtime.clock.now());
-  const csrf = await zoomAuthRequest(runtime, jar, "https://zoom.us/csrf_js", { method: "POST", headers: { "user-agent": "Mozilla/5.0", "fetch-csrf-token": "1", referer: "https://hub.zoom.us/" }, body: "" });
-  changed = csrf.changed || changed;
-  if (!csrf.response.ok) return Object.freeze({ result: null, cookies: Object.freeze([...jar.values()]), metadata, changed });
-  const csrfText = await csrf.response.text();
-  const csrfIndex = csrfText.indexOf(":");
-  if (csrfIndex === -1) return Object.freeze({ result: null, cookies: Object.freeze([...jar.values()]), metadata, changed });
-  const token = csrfText.slice(csrfIndex + 1).trim();
-  if (token === "") return Object.freeze({ result: null, cookies: Object.freeze([...jar.values()]), metadata, changed });
-  const jwt = await zoomAuthRequest(runtime, jar, "https://hub.zoom.us/nws/common/2.0/nak?pms=Hub%2CUser%3ABase%2CAICW&src=aicw", { headers: { "user-agent": "Mozilla/5.0", "zoom-csrftoken": token, "x-requested-with": "XMLHttpRequest", referer: "https://hub.zoom.us/" } });
+  const jwt = await zoomAuthRequest(runtime, jar, "https://hub.zoom.us/nws/common/2.0/nak?pms=Hub%2CUser%3ABase%2CAICW&src=aicw", { headers: { "user-agent": zoomUserAgent, "x-requested-with": "XMLHttpRequest", referer: "https://hub.zoom.us/" } });
   changed = jwt.changed || changed;
   const jwtText = (await jwt.response.text()).trim();
   const accountId = [...jar.values()].find((value) => value.name === "zm_aid")?.value;
@@ -264,7 +251,7 @@ export function composeAuth(runtime: RuntimeCapabilities, environment: NodeEnvir
   const status = async (service: AuthService) => {
     const cookies = await runtime.cookies.loadSaved(service);
     if (cookies === null) throw cookieAuthError(service);
-    const state = await verifyCookieState(service, cookies, service === "slack" ? await runtime.cookies.metadata(service) : Object.freeze({}));
+    const state = await verifyCookieState(service, cookies, await runtime.cookies.metadata(service));
     if (state.changed) await saveCookies(service, state.cookies, state.metadata);
     if (state.result !== null) return state.result;
     throw cookieAuthError(service);

package/src/cli.ts

@@ -133,8 +133,8 @@ const removedCommandNames = Object.freeze({
 const outputFormatNames = new Set(["rich", "md", "markdown", "json"]);
 const outputFormatList = "md, markdown, json, rich";
 const debugModeNames = new Set(["raw"]);
-const backendNames = new Set(["sqlite", "files"]);
-const backendList = "sqlite, files";
+const backendNames = new Set(["files", "sqlite"]);
+const backendList = "files, sqlite";
 
 function isSourceUrl(value: string): boolean {
   return /^[a-zA-Z][a-zA-Z\d+.-]*:\/\//.test(value);

package/src/executable.ts

@@ -6,7 +6,7 @@ import { createRoot } from "./adapters/root.js";
 import { composeAuth } from "./auth.js";
 import { serviceCatalog } from "./adapters/services/catalog.js";
 import { withWireHooks } from "./hooks.js";
-import { composeWire, configuredWireRoot, createCookiesCapability, createGoogleTokensCapability, createNodeClock, createNodeConfiguration, createNodeFilesystem, createNodeHttp, createNodeOpenFiles, createNodeProcess, createNodeSecrets, createNodeWatch, extractChromeCookies, initializeWire, loadWireConfig, openWireRegistry, switchWireBackend, wireRelativePath, type NodeEnvironment } from "wire-core";
+import { composeWire, configuredWireRoot, createCookiesCapability, createGoogleTokensCapability, createNodeClock, createNodeConfiguration, createNodeFilesystem, createNodeHttp, createNodeOpenFiles, createNodeProcess, createNodeSecrets, createNodeWatch, defaultWireBackend, defaultWireRegistryPath, extractChromeCookies, initializeWire, loadWireConfig, openWireRegistry, switchWireBackend, wireRelativePath, type NodeEnvironment } from "wire-core";
 import type { WireConfig } from "wire-core";
 
 function readStandardInput(): Promise<string> {
@@ -52,7 +52,7 @@ function loadConfiguredEnvironment(environment: NodeEnvironment, currentDirector
   return config.env === undefined ? environment : Object.freeze({ ...environment, ...config.env });
 }
 
-export function createExecutableRoot(environment: NodeEnvironment, currentDirectory: string) {
+export function createExecutableRoot(environment: NodeEnvironment, currentDirectory: string, options = { allowPaste: true }) {
   const repositoryRoot = environment["WIRE_REPOSITORY_ROOT"] ?? discoverRepositoryRoot(currentDirectory);
   const baseEnvironment = repositoryRoot === undefined ? environment : Object.freeze({ ...environment, WIRE_REPOSITORY_ROOT: repositoryRoot });
   const resolvedEnvironment = loadConfiguredEnvironment(baseEnvironment, currentDirectory);
@@ -71,6 +71,7 @@ export function createExecutableRoot(environment: NodeEnvironment, currentDirect
     configuration,
     secrets: createNodeSecrets(filesystem, resolvedEnvironment),
     gmailTokens: Object.freeze({ load: () => createGoogleTokensCapability(filesystem, http, clock, configuration.get("GOOGLE_CREDENTIALS_FILE"), configuration.get("GOOGLE_TOKEN_FILE")).load(), refresh: () => createGoogleTokensCapability(filesystem, http, clock, configuration.get("GOOGLE_CREDENTIALS_FILE"), configuration.get("GOOGLE_TOKEN_FILE")).refresh() }),
+    googleFormsTokens: Object.freeze({ load: () => createGoogleTokensCapability(filesystem, http, clock, configuration.get("GOOGLE_CREDENTIALS_FILE"), configuration.get("GOOGLE_FORMS_TOKEN_FILE")).load(), refresh: () => createGoogleTokensCapability(filesystem, http, clock, configuration.get("GOOGLE_CREDENTIALS_FILE"), configuration.get("GOOGLE_FORMS_TOKEN_FILE")).refresh() }),
   };
   let auth: ReturnType<typeof composeAuth>;
   const runtime = Object.freeze({ ...runtimeBase, cookies: createCookiesCapability(filesystem, () => home, () => resolvedEnvironment["WIRE_REPOSITORY_ROOT"]) });
@@ -93,10 +94,10 @@ export function createExecutableRoot(environment: NodeEnvironment, currentDirect
       relativePath: wireRelativePath,
       switchBackend: switchWireBackend,
     },
-    initialization: { backend: "sqlite", registryPath: "registry.sqlite3" },
+    initialization: { backend: defaultWireBackend, registryPath: defaultWireRegistryPath },
     watch: createNodeWatch(),
     now: runtime.clock.now,
     open: runtime.openFiles.open,
   }), { currentDirectory, home, environment: resolvedEnvironment });
-  return createRoot(wire, currentDirectory, auth, readStandardInput);
+  return createRoot(wire, currentDirectory, auth, readStandardInput, options);
 }

package/src/hooks.ts

@@ -6,6 +6,8 @@ import { promisify } from "node:util";
 
 import type { Resource, Wire, WireResult } from "wire-core";
 import { configuredWireRoot, openWireRegistry, wireRelativePath } from "wire-core";
+import type { WireWatchSyncHook } from "wire-core/internal/operations";
+import { wireWatchHooks } from "wire-core/internal/operations";
 
 const execFileAsync = promisify(execFile);
 
@@ -183,14 +185,17 @@ async function runBatchHooks(options: WireHookOptions, command: string, results:
 }
 
 export function withWireHooks(wire: Wire, options: WireHookOptions): Wire {
+  const watchSyncHook: WireWatchSyncHook = (command, result) => runSingleResultHooks(options, command, result);
   return Object.freeze({
     ...wire,
     attach: async (url, path) => runSingleResultHooks(options, "attach", await wire.attach(url, path)),
     create: async (url, path) => runSingleResultHooks(options, "attach", await wire.create(url, path)),
     sync: async (value, path) => runSingleResultHooks(options, "sync", await wire.sync(value, path)),
+    downloadSource: async (url, path) => runSingleResultHooks(options, "download", await wire.downloadSource(url, path)),
     download: async (value, path) => runSingleResultHooks(options, "download", await wire.download(value, path)),
     detach: async (value, path) => runSingleResultHooks(options, "detach", await wire.detach(value, path)),
     unlink: async (value, path) => runSingleResultHooks(options, "detach", await wire.unlink(value, path)),
+    watch: async (value, path) => (wire as Wire & { [wireWatchHooks](value: string, path: string, hooks: readonly WireWatchSyncHook[]): ReturnType<Wire["watch"]> })[wireWatchHooks](value, path, [watchSyncHook]),
     syncAll: async (path) => runBatchHooks(options, "sync-all", await wire.syncAll(path)),
   });
 }