@levr-one/auth 1.0.0

package/README.md

@@ -0,0 +1,37 @@
+# @levr-one/auth
+
+Shared OAuth 2.1 client with self-healing token management, used by the Levr
+CLIs and tooling. Provides a browser (PKCE) and device authorization flow, an
+on-disk token/config store under `~/.tq/`, and a `listWorkspaces()` helper.
+
+## Install
+
+```bash
+npm install @levr-one/auth
+```
+
+## Usage
+
+```ts
+import { OAuthClient, listWorkspaces } from '@levr-one/auth';
+
+// Authenticate (opens a browser by default; use authorizeDevice() for headless).
+const client = new OAuthClient({
+  clientId: 'my-client',
+  authServerUrl: 'https://api.levr.now',
+});
+await client.authorize();
+
+// List the workspaces the signed-in user belongs to.
+const workspaces = await listWorkspaces();
+for (const w of workspaces) {
+  console.log(w.workspace_name, w.role, w.is_primary ? '(primary)' : '');
+}
+```
+
+`listWorkspaces()` throws a typed `WorkspaceFetchError` (never terminates the
+process) on auth or HTTP errors — catch it and handle as your app sees fit.
+
+## License
+
+MIT

package/dist/config-watcher.d.ts

@@ -0,0 +1,65 @@
+/**
+ * ConfigWatcher - Environment Change Detection
+ *
+ * Watches ~/.tq/config.json for changes and notifies subscribers.
+ * This enables MCP servers to auto-reconfigure when the user runs
+ * `yarn tq:env <preset>` without requiring a restart.
+ */
+import type { TqConfig } from './config.js';
+export type ConfigChangeCallback = (config: TqConfig) => void;
+export interface ConfigWatcherOptions {
+    /** Polling interval in milliseconds (backup if fs.watch misses events) */
+    pollInterval?: number;
+}
+/**
+ * ConfigWatcher for environment change detection
+ *
+ * Usage:
+ * ```typescript
+ * const watcher = new ConfigWatcher();
+ * watcher.onConfigChange((config) => {
+ *   console.log(`Environment changed to ${config.environment} (${config.apiUrl})`);
+ *   client.setConfig({ baseUrl: config.apiUrl });
+ * });
+ * watcher.start();
+ * ```
+ */
+export declare class ConfigWatcher {
+    private watcher;
+    private pollTimer;
+    private lastConfigJson;
+    private lastConfig;
+    private callbacks;
+    private options;
+    private isRunning;
+    constructor(options?: ConfigWatcherOptions);
+    /**
+     * Start watching for config changes
+     */
+    start(): void;
+    /**
+     * Stop watching
+     */
+    stop(): void;
+    /**
+     * Register a callback for config changes
+     */
+    onConfigChange(callback: ConfigChangeCallback): void;
+    /**
+     * Remove a callback
+     */
+    offConfigChange(callback: ConfigChangeCallback): void;
+    /**
+     * Get current config snapshot
+     */
+    getCurrentConfig(): TqConfig | null;
+    /**
+     * Force a config check
+     */
+    forceCheck(): void;
+    /**
+     * Internal: Check config and notify if changed
+     */
+    private checkConfig;
+}
+//# sourceMappingURL=config-watcher.d.ts.map

package/dist/config-watcher.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-watcher.d.ts","sourceRoot":"","sources":["../src/config-watcher.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAMH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAE5C,MAAM,MAAM,oBAAoB,GAAG,CAAC,MAAM,EAAE,QAAQ,KAAK,IAAI,CAAC;AAE9D,MAAM,WAAW,oBAAoB;IACnC,0EAA0E;IAC1E,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAMD;;;;;;;;;;;;GAYG;AACH,qBAAa,aAAa;IACxB,OAAO,CAAC,OAAO,CAA6B;IAC5C,OAAO,CAAC,SAAS,CAA+B;IAChD,OAAO,CAAC,cAAc,CAAc;IACpC,OAAO,CAAC,UAAU,CAAyB;IAC3C,OAAO,CAAC,SAAS,CAAwC;IACzD,OAAO,CAAC,OAAO,CAAiC;IAChD,OAAO,CAAC,SAAS,CAAkB;gBAEvB,OAAO,CAAC,EAAE,oBAAoB;IAI1C;;OAEG;IACH,KAAK,IAAI,IAAI;IA4Cb;;OAEG;IACH,IAAI,IAAI,IAAI;IAcZ;;OAEG;IACH,cAAc,CAAC,QAAQ,EAAE,oBAAoB,GAAG,IAAI;IAIpD;;OAEG;IACH,eAAe,CAAC,QAAQ,EAAE,oBAAoB,GAAG,IAAI;IAIrD;;OAEG;IACH,gBAAgB,IAAI,QAAQ,GAAG,IAAI;IAInC;;OAEG;IACH,UAAU,IAAI,IAAI;IAIlB;;OAEG;IACH,OAAO,CAAC,WAAW;CAsBpB"}

package/dist/config-watcher.js

@@ -0,0 +1,140 @@
+/**
+ * ConfigWatcher - Environment Change Detection
+ *
+ * Watches ~/.tq/config.json for changes and notifies subscribers.
+ * This enables MCP servers to auto-reconfigure when the user runs
+ * `yarn tq:env <preset>` without requiring a restart.
+ */
+import * as fs from 'fs';
+import * as path from 'path';
+import { loadConfig, getConfigFilePath } from './config.js';
+import { getTqDir } from './token-store.js';
+const DEFAULT_OPTIONS = {
+    pollInterval: 10000, // 10 seconds
+};
+/**
+ * ConfigWatcher for environment change detection
+ *
+ * Usage:
+ * ```typescript
+ * const watcher = new ConfigWatcher();
+ * watcher.onConfigChange((config) => {
+ *   console.log(`Environment changed to ${config.environment} (${config.apiUrl})`);
+ *   client.setConfig({ baseUrl: config.apiUrl });
+ * });
+ * watcher.start();
+ * ```
+ */
+export class ConfigWatcher {
+    watcher = null;
+    pollTimer = null;
+    lastConfigJson = '';
+    lastConfig = null;
+    callbacks = new Set();
+    options;
+    isRunning = false;
+    constructor(options) {
+        this.options = { ...DEFAULT_OPTIONS, ...options };
+    }
+    /**
+     * Start watching for config changes
+     */
+    start() {
+        if (this.isRunning)
+            return;
+        this.isRunning = true;
+        const tqDir = getTqDir();
+        // Ensure directory exists for watching
+        if (!fs.existsSync(tqDir)) {
+            try {
+                fs.mkdirSync(tqDir, { recursive: true, mode: 0o700 });
+            }
+            catch {
+                console.error('[tq-oauth] Failed to create .tq directory for config watching');
+            }
+        }
+        // Watch the directory (file may not exist yet)
+        const configFileName = path.basename(getConfigFilePath());
+        try {
+            this.watcher = fs.watch(tqDir, (_eventType, filename) => {
+                if (filename === configFileName) {
+                    this.checkConfig();
+                }
+            });
+            this.watcher.on('error', (error) => {
+                console.error('[tq-oauth] Config watch error:', error);
+            });
+        }
+        catch (error) {
+            console.error('[tq-oauth] Failed to start config watcher:', error);
+        }
+        // Poll as backup (unref so timer doesn't keep the process alive)
+        this.pollTimer = setInterval(() => {
+            this.checkConfig();
+        }, this.options.pollInterval);
+        this.pollTimer.unref();
+        // Initial snapshot (don't notify — caller already has initial config)
+        this.lastConfig = loadConfig();
+        this.lastConfigJson = JSON.stringify(this.lastConfig);
+    }
+    /**
+     * Stop watching
+     */
+    stop() {
+        this.isRunning = false;
+        if (this.watcher) {
+            this.watcher.close();
+            this.watcher = null;
+        }
+        if (this.pollTimer) {
+            clearInterval(this.pollTimer);
+            this.pollTimer = null;
+        }
+    }
+    /**
+     * Register a callback for config changes
+     */
+    onConfigChange(callback) {
+        this.callbacks.add(callback);
+    }
+    /**
+     * Remove a callback
+     */
+    offConfigChange(callback) {
+        this.callbacks.delete(callback);
+    }
+    /**
+     * Get current config snapshot
+     */
+    getCurrentConfig() {
+        return this.lastConfig;
+    }
+    /**
+     * Force a config check
+     */
+    forceCheck() {
+        this.checkConfig();
+    }
+    /**
+     * Internal: Check config and notify if changed
+     */
+    checkConfig() {
+        const config = loadConfig();
+        const configJson = JSON.stringify(config);
+        if (configJson !== this.lastConfigJson) {
+            const prev = this.lastConfig;
+            this.lastConfig = config;
+            this.lastConfigJson = configJson;
+            console.error(`[tq-oauth] Config change detected: ${prev?.environment ?? 'unknown'} (${prev?.apiUrl ?? '?'}) → ${config.environment} (${config.apiUrl})`);
+            this.callbacks.forEach((cb) => {
+                try {
+                    cb(config);
+                }
+                catch (error) {
+                    console.error('[tq-oauth] Error in config change callback:', error);
+                }
+            });
+        }
+    }
+}
+//# sourceMappingURL=config-watcher.js.map

package/dist/config-watcher.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-watcher.js","sourceRoot":"","sources":["../src/config-watcher.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,EAAE,UAAU,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAC5D,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAU5C,MAAM,eAAe,GAAmC;IACtD,YAAY,EAAE,KAAK,EAAE,aAAa;CACnC,CAAC;AAEF;;;;;;;;;;;;GAYG;AACH,MAAM,OAAO,aAAa;IAChB,OAAO,GAAwB,IAAI,CAAC;IACpC,SAAS,GAA0B,IAAI,CAAC;IACxC,cAAc,GAAW,EAAE,CAAC;IAC5B,UAAU,GAAoB,IAAI,CAAC;IACnC,SAAS,GAA8B,IAAI,GAAG,EAAE,CAAC;IACjD,OAAO,CAAiC;IACxC,SAAS,GAAY,KAAK,CAAC;IAEnC,YAAY,OAA8B;QACxC,IAAI,CAAC,OAAO,GAAG,EAAE,GAAG,eAAe,EAAE,GAAG,OAAO,EAAE,CAAC;IACpD,CAAC;IAED;;OAEG;IACH,KAAK;QACH,IAAI,IAAI,CAAC,SAAS;YAAE,OAAO;QAC3B,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QAEtB,MAAM,KAAK,GAAG,QAAQ,EAAE,CAAC;QAEzB,uCAAuC;QACvC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1B,IAAI,CAAC;gBACH,EAAE,CAAC,SAAS,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACxD,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,CAAC,KAAK,CACX,+DAA+D,CAChE,CAAC;YACJ,CAAC;QACH,CAAC;QAED,+CAA+C;QAC/C,MAAM,cAAc,GAAG,IAAI,CAAC,QAAQ,CAAC,iBAAiB,EAAE,CAAC,CAAC;QAC1D,IAAI,CAAC;YACH,IAAI,CAAC,OAAO,GAAG,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,UAAU,EAAE,QAAQ,EAAE,EAAE;gBACtD,IAAI,QAAQ,KAAK,cAAc,EAAE,CAAC;oBAChC,IAAI,CAAC,WAAW,EAAE,CAAC;gBACrB,CAAC;YACH,CAAC,CAAC,CAAC;YAEH,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;gBACjC,OAAO,CAAC,KAAK,CAAC,gCAAgC,EAAE,KAAK,CAAC,CAAC;YACzD,CAAC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,4CAA4C,EAAE,KAAK,CAAC,CAAC;QACrE,CAAC;QAED,iEAAiE;QACjE,IAAI,CAAC,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE;YAChC,IAAI,CAAC,WAAW,EAAE,CAAC;QACrB,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QAC9B,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;QAEvB,sEAAsE;QACtE,IAAI,CAAC,UAAU,GAAG,UAAU,EAAE,CAAC;QAC/B,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACxD,CAAC;IAED;;OAEG;IACH,IAAI;QACF,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;QAEvB,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;YACrB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACtB,CAAC;QAED,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnB,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAC9B,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QACxB,CAAC;IACH,CAAC;IAED;;OAEG;IACH,cAAc,CAAC,QAA8B;QAC3C,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC/B,CAAC;IAED;;OAEG;IACH,eAAe,CAAC,QAA8B;QAC5C,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAClC,CAAC;IAED;;OAEG;IACH,gBAAgB;QACd,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;IAED;;OAEG;IACH,UAAU;QACR,IAAI,CAAC,WAAW,EAAE,CAAC;IACrB,CAAC;IAED;;OAEG;IACK,WAAW;QACjB,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;QAC5B,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAE1C,IAAI,UAAU,KAAK,IAAI,CAAC,cAAc,EAAE,CAAC;YACvC,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC;YAC7B,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC;YACzB,IAAI,CAAC,cAAc,GAAG,UAAU,CAAC;YAEjC,OAAO,CAAC,KAAK,CACX,sCAAsC,IAAI,EAAE,WAAW,IAAI,SAAS,KAAK,IAAI,EAAE,MAAM,IAAI,GAAG,OAAO,MAAM,CAAC,WAAW,KAAK,MAAM,CAAC,MAAM,GAAG,CAC3I,CAAC;YAEF,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE;gBAC5B,IAAI,CAAC;oBACH,EAAE,CAAC,MAAM,CAAC,CAAC;gBACb,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,OAAO,CAAC,KAAK,CAAC,6CAA6C,EAAE,KAAK,CAAC,CAAC;gBACtE,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;CACF"}

package/dist/config-watcher.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=config-watcher.test.d.ts.map

package/dist/config-watcher.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-watcher.test.d.ts","sourceRoot":"","sources":["../src/config-watcher.test.ts"],"names":[],"mappings":""}

package/dist/config-watcher.test.js

@@ -0,0 +1,116 @@
+import { describe, it, expect, beforeEach, afterEach, vi } from 'vitest';
+import * as fs from 'fs';
+import * as path from 'path';
+import * as os from 'os';
+const state = vi.hoisted(() => ({ tmpDir: '' }));
+vi.mock('os', async (importOriginal) => {
+    const original = await importOriginal();
+    return { ...original, homedir: () => state.tmpDir };
+});
+import { withNonTestEnv } from './test-utils.js';
+let ConfigWatcher;
+let writeConfig;
+let PRESETS;
+beforeEach(async () => {
+    state.tmpDir = fs.mkdtempSync(path.join(os.tmpdir(), 'tq-cfg-watch-'));
+    vi.resetModules();
+    const configMod = await import('./config.js');
+    writeConfig = configMod.writeConfig;
+    PRESETS = configMod.PRESETS;
+    const watcherMod = await import('./config-watcher.js');
+    ConfigWatcher = watcherMod.ConfigWatcher;
+});
+afterEach(() => {
+    fs.rmSync(state.tmpDir, { recursive: true, force: true });
+});
+describe('ConfigWatcher', () => {
+    it('starts and stops without error', () => {
+        const watcher = new ConfigWatcher();
+        watcher.start();
+        watcher.stop();
+    });
+    it('does not notify on start (initial snapshot only)', () => {
+        writeConfig(PRESETS.staging);
+        const watcher = new ConfigWatcher();
+        const cb = vi.fn();
+        watcher.onConfigChange(cb);
+        watcher.start();
+        expect(cb).not.toHaveBeenCalled();
+        watcher.stop();
+    });
+    it('notifies when config changes via forceCheck', () => {
+        withNonTestEnv(() => {
+            writeConfig(PRESETS.staging);
+            const watcher = new ConfigWatcher();
+            const cb = vi.fn();
+            watcher.onConfigChange(cb);
+            watcher.start();
+            // Change config
+            writeConfig(PRESETS.local);
+            watcher.forceCheck();
+            expect(cb).toHaveBeenCalledTimes(1);
+            const changed = cb.mock.calls[0][0];
+            expect(changed.environment).toBe('local');
+            // Match what was written. PRESETS.local is a getter that returns
+            // the HTTPS variant when DEV_TLS dev mode is detected, so this
+            // assertion stays correct in both modes.
+            expect(changed.apiUrl).toBe(PRESETS.local.apiUrl);
+            watcher.stop();
+        });
+    });
+    it('does not notify when config is unchanged', () => {
+        writeConfig(PRESETS.staging);
+        const watcher = new ConfigWatcher();
+        const cb = vi.fn();
+        watcher.onConfigChange(cb);
+        watcher.start();
+        watcher.forceCheck();
+        expect(cb).not.toHaveBeenCalled();
+        watcher.stop();
+    });
+    it('getCurrentConfig returns latest config', () => {
+        withNonTestEnv(() => {
+            writeConfig(PRESETS.production);
+            const watcher = new ConfigWatcher();
+            watcher.start();
+            expect(watcher.getCurrentConfig()?.environment).toBe('production');
+            writeConfig(PRESETS.local);
+            watcher.forceCheck();
+            expect(watcher.getCurrentConfig()?.environment).toBe('local');
+            watcher.stop();
+        });
+    });
+    it('offConfigChange removes callback', () => {
+        withNonTestEnv(() => {
+            writeConfig(PRESETS.staging);
+            const watcher = new ConfigWatcher();
+            const cb = vi.fn();
+            watcher.onConfigChange(cb);
+            watcher.offConfigChange(cb);
+            watcher.start();
+            writeConfig(PRESETS.local);
+            watcher.forceCheck();
+            expect(cb).not.toHaveBeenCalled();
+            watcher.stop();
+        });
+    });
+    it('handles callback errors without crashing', () => {
+        withNonTestEnv(() => {
+            writeConfig(PRESETS.staging);
+            const watcher = new ConfigWatcher();
+            const badCb = vi.fn(() => {
+                throw new Error('callback error');
+            });
+            const goodCb = vi.fn();
+            watcher.onConfigChange(badCb);
+            watcher.onConfigChange(goodCb);
+            watcher.start();
+            writeConfig(PRESETS.local);
+            watcher.forceCheck();
+            expect(badCb).toHaveBeenCalledTimes(1);
+            expect(goodCb).toHaveBeenCalledTimes(1);
+            watcher.stop();
+        });
+    });
+});
+//# sourceMappingURL=config-watcher.test.js.map

package/dist/config-watcher.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-watcher.test.js","sourceRoot":"","sources":["../src/config-watcher.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AACzE,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AAEzB,MAAM,KAAK,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;AAEjD,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE;IACrC,MAAM,QAAQ,GAAG,MAAM,cAAc,EAAuB,CAAC;IAC7D,OAAO,EAAE,GAAG,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;AACtD,CAAC,CAAC,CAAC;AAEH,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAEjD,IAAI,aAAiE,CAAC;AACtE,IAAI,WAAqD,CAAC;AAC1D,IAAI,OAA6C,CAAC;AAElD,UAAU,CAAC,KAAK,IAAI,EAAE;IACpB,KAAK,CAAC,MAAM,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,eAAe,CAAC,CAAC,CAAC;IACvE,EAAE,CAAC,YAAY,EAAE,CAAC;IAElB,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC;IAC9C,WAAW,GAAG,SAAS,CAAC,WAAW,CAAC;IACpC,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC;IAE5B,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC,CAAC;IACvD,aAAa,GAAG,UAAU,CAAC,aAAa,CAAC;AAC3C,CAAC,CAAC,CAAC;AAEH,SAAS,CAAC,GAAG,EAAE;IACb,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAC5D,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;IAC7B,EAAE,CAAC,gCAAgC,EAAE,GAAG,EAAE;QACxC,MAAM,OAAO,GAAG,IAAI,aAAa,EAAE,CAAC;QACpC,OAAO,CAAC,KAAK,EAAE,CAAC;QAChB,OAAO,CAAC,IAAI,EAAE,CAAC;IACjB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC1D,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC7B,MAAM,OAAO,GAAG,IAAI,aAAa,EAAE,CAAC;QACpC,MAAM,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;QACnB,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC;QAC3B,OAAO,CAAC,KAAK,EAAE,CAAC;QAEhB,MAAM,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QAClC,OAAO,CAAC,IAAI,EAAE,CAAC;IACjB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;QACrD,cAAc,CAAC,GAAG,EAAE;YAClB,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAC7B,MAAM,OAAO,GAAG,IAAI,aAAa,EAAE,CAAC;YACpC,MAAM,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;YACnB,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC;YAC3B,OAAO,CAAC,KAAK,EAAE,CAAC;YAEhB,gBAAgB;YAChB,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAC3B,OAAO,CAAC,UAAU,EAAE,CAAC;YAErB,MAAM,CAAC,EAAE,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;YACpC,MAAM,OAAO,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAmC,CAAC;YACtE,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC1C,iEAAiE;YACjE,+DAA+D;YAC/D,yCAAyC;YACzC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAClD,OAAO,CAAC,IAAI,EAAE,CAAC;QACjB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QAClD,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC7B,MAAM,OAAO,GAAG,IAAI,aAAa,EAAE,CAAC;QACpC,MAAM,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;QACnB,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC;QAC3B,OAAO,CAAC,KAAK,EAAE,CAAC;QAEhB,OAAO,CAAC,UAAU,EAAE,CAAC;QACrB,MAAM,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QAClC,OAAO,CAAC,IAAI,EAAE,CAAC;IACjB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;QAChD,cAAc,CAAC,GAAG,EAAE;YAClB,WAAW,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;YAChC,MAAM,OAAO,GAAG,IAAI,aAAa,EAAE,CAAC;YACpC,OAAO,CAAC,KAAK,EAAE,CAAC;YAEhB,MAAM,CAAC,OAAO,CAAC,gBAAgB,EAAE,EAAE,WAAW,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YAEnE,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAC3B,OAAO,CAAC,UAAU,EAAE,CAAC;YAErB,MAAM,CAAC,OAAO,CAAC,gBAAgB,EAAE,EAAE,WAAW,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC9D,OAAO,CAAC,IAAI,EAAE,CAAC;QACjB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;QAC1C,cAAc,CAAC,GAAG,EAAE;YAClB,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAC7B,MAAM,OAAO,GAAG,IAAI,aAAa,EAAE,CAAC;YACpC,MAAM,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;YACnB,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC;YAC3B,OAAO,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;YAC5B,OAAO,CAAC,KAAK,EAAE,CAAC;YAEhB,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAC3B,OAAO,CAAC,UAAU,EAAE,CAAC;YAErB,MAAM,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;YAClC,OAAO,CAAC,IAAI,EAAE,CAAC;QACjB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QAClD,cAAc,CAAC,GAAG,EAAE;YAClB,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAC7B,MAAM,OAAO,GAAG,IAAI,aAAa,EAAE,CAAC;YACpC,MAAM,KAAK,GAAG,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE;gBACvB,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC;YACpC,CAAC,CAAC,CAAC;YACH,MAAM,MAAM,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;YACvB,OAAO,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;YAC9B,OAAO,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;YAC/B,OAAO,CAAC,KAAK,EAAE,CAAC;YAEhB,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAC3B,OAAO,CAAC,UAAU,EAAE,CAAC;YAErB,MAAM,CAAC,KAAK,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;YACvC,MAAM,CAAC,MAAM,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;YACxC,OAAO,CAAC,IAAI,EAAE,CAAC;QACjB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/config.d.ts

@@ -0,0 +1,58 @@
+/**
+ * Unified environment configuration for TQ.AI
+ *
+ * Single source of truth for backend URLs, auth URLs, and OAuth client IDs.
+ * Precedence: TQ_BACKEND_URL env var > ~/.tq/config.json > token apiBaseUrl > staging default
+ *
+ * In test environments (VITEST or NODE_ENV=test), ~/.tq/config.json is
+ * skipped so that tests stay deterministic and never depend on the
+ * developer's local config file.
+ */
+export interface TqConfig {
+    environment: 'local' | 'staging' | 'production' | 'custom';
+    apiUrl: string;
+    authUrl: string;
+    clientUrl: string;
+    oauthClientId: string;
+}
+/**
+ * Environment presets. Staging is the default.
+ *
+ * `local` is a getter that returns the HTTPS variant when DEV_TLS dev mode
+ * is detected (see `isLocalTlsMode()`), so `yarn tq:env local` writes the
+ * right URLs whether the user has TLS dev mode set up or not.
+ */
+export declare const PRESETS: Record<'local' | 'staging' | 'production', TqConfig>;
+/**
+ * Resolve a full TqConfig from a bare API URL by matching presets.
+ * Returns 'custom' environment if no preset matches.
+ *
+ * Local resolution covers three forms:
+ *   - `http://localhost:8080`        → LOCAL_HTTP
+ *   - `https://api.levr.test:8080`   → LOCAL_HTTPS (canonical TLS form)
+ *   - `https://localhost:8080`       → LOCAL_HTTPS (legacy alias)
+ *
+ * Resolving the legacy localhost alias to the new levr.test preset means
+ * a token issued in TLS mode under the old localhost URL still maps to
+ * the right config when read after this change.
+ */
+export declare function resolveFromApiUrl(url: string): TqConfig;
+/**
+ * Load unified config with precedence:
+ * 1. TQ_BACKEND_URL env var
+ * 2. ~/.tq/config.json  (skipped in test environments)
+ * 3. Token's apiBaseUrl from ~/.tq/oauth-tokens.json (skipped in test environments)
+ * 4. Staging default
+ *
+ * TQ_OAUTH_CLIENT_ID env var overrides oauthClientId from any source.
+ */
+export declare function loadConfig(): TqConfig;
+/**
+ * Write config to ~/.tq/config.json using atomic write (tmp + rename)
+ */
+export declare function writeConfig(config: TqConfig): void;
+/**
+ * Get the config file path (~/.tq/config.json)
+ */
+export declare function getConfigFilePath(): string;
+//# sourceMappingURL=config.d.ts.map

package/dist/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAMH,MAAM,WAAW,QAAQ;IACvB,WAAW,EAAE,OAAO,GAAG,SAAS,GAAG,YAAY,GAAG,QAAQ,CAAC;IAC3D,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;CACvB;AAgED;;;;;;GAMG;AACH,eAAO,MAAM,OAAO,EAAE,MAAM,CAAC,OAAO,GAAG,SAAS,GAAG,YAAY,EAAE,QAAQ,CAqBxE,CAAC;AAeF;;;;;;;;;;;;GAYG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,QAAQ,CAqBvD;AAED;;;;;;;;GAQG;AACH,wBAAgB,UAAU,IAAI,QAAQ,CA+DrC;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,MAAM,EAAE,QAAQ,GAAG,IAAI,CAclD;AAED;;GAEG;AACH,wBAAgB,iBAAiB,IAAI,MAAM,CAE1C"}