@nac3/forge-cli 1.0.13 → 1.0.15

package/dist/chat/session_projects.d.ts

@@ -19,9 +19,13 @@
 export interface SessionProject {
     root: string;
     slug: string;
+    name: string;
 }
-/** Point a session at its own project (root + slug). */
-export declare function setSessionProject(sessionId: string, root: string, slug: string): void;
+/** Point a session at its own project (root + slug + display name).
+ *  name travels WITH root/slug so a turn's prompt context cannot report
+ *  the global project's name against the session's directory (Pablo
+ *  2026-06-18: chat said "project A" while cwd was project B's path). */
+export declare function setSessionProject(sessionId: string, root: string, slug: string, name: string): void;
 /** The override for a session, or null when it follows the global project. */
 export declare function getSessionProject(sessionId: string): SessionProject | null;
 /** Clear a session's override (back to the global project). */

package/dist/chat/session_projects.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"session_projects.d.ts","sourceRoot":"","sources":["../../src/chat/session_projects.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,MAAM,WAAW,cAAc;IAAG,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE;AAI9D,wDAAwD;AACxD,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAGrF;AAED,8EAA8E;AAC9E,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,cAAc,GAAG,IAAI,CAE1E;AAED,+DAA+D;AAC/D,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAE3D;AAED,iBAAiB;AACjB,wBAAgB,qBAAqB,IAAI,IAAI,CAAwB"}
+{"version":3,"file":"session_projects.d.ts","sourceRoot":"","sources":["../../src/chat/session_projects.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,MAAM,WAAW,cAAc;IAAG,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE;AAI5E;;;yEAGyE;AACzE,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAGnG;AAED,8EAA8E;AAC9E,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,cAAc,GAAG,IAAI,CAE1E;AAED,+DAA+D;AAC/D,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAE3D;AAED,iBAAiB;AACjB,wBAAgB,qBAAqB,IAAI,IAAI,CAAwB"}

package/dist/chat/session_projects.js

@@ -17,11 +17,14 @@
  * ASCII-only.
  */
 const _overrides = new Map();
-/** Point a session at its own project (root + slug). */
-export function setSessionProject(sessionId, root, slug) {
+/** Point a session at its own project (root + slug + display name).
+ *  name travels WITH root/slug so a turn's prompt context cannot report
+ *  the global project's name against the session's directory (Pablo
+ *  2026-06-18: chat said "project A" while cwd was project B's path). */
+export function setSessionProject(sessionId, root, slug, name) {
     if (!sessionId)
         return;
-    _overrides.set(sessionId, { root, slug });
+    _overrides.set(sessionId, { root, slug, name });
 }
 /** The override for a session, or null when it follows the global project. */
 export function getSessionProject(sessionId) {

package/dist/chat/session_projects.js.map

@@ -1 +1 @@
-{"version":3,"file":"session_projects.js","sourceRoot":"","sources":["../../src/chat/session_projects.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAIH,MAAM,UAAU,GAAG,IAAI,GAAG,EAA0B,CAAC;AAErD,wDAAwD;AACxD,MAAM,UAAU,iBAAiB,CAAC,SAAiB,EAAE,IAAY,EAAE,IAAY;IAC7E,IAAI,CAAC,SAAS;QAAE,OAAO;IACvB,UAAU,CAAC,GAAG,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;AAC5C,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,iBAAiB,CAAC,SAAiB;IACjD,OAAO,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC;AAC3C,CAAC;AAED,+DAA+D;AAC/D,MAAM,UAAU,mBAAmB,CAAC,SAAiB;IACnD,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;AAC/B,CAAC;AAED,iBAAiB;AACjB,MAAM,UAAU,qBAAqB,KAAW,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"session_projects.js","sourceRoot":"","sources":["../../src/chat/session_projects.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAIH,MAAM,UAAU,GAAG,IAAI,GAAG,EAA0B,CAAC;AAErD;;;yEAGyE;AACzE,MAAM,UAAU,iBAAiB,CAAC,SAAiB,EAAE,IAAY,EAAE,IAAY,EAAE,IAAY;IAC3F,IAAI,CAAC,SAAS;QAAE,OAAO;IACvB,UAAU,CAAC,GAAG,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;AAClD,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,iBAAiB,CAAC,SAAiB;IACjD,OAAO,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC;AAC3C,CAAC;AAED,+DAA+D;AAC/D,MAAM,UAAU,mBAAmB,CAAC,SAAiB;IACnD,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;AAC/B,CAAC;AAED,iBAAiB;AACjB,MAAM,UAAU,qBAAqB,KAAW,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC"}

package/dist/license/activate_url.d.ts

@@ -0,0 +1,36 @@
+type FetchLike = (url: string, init: {
+    method: string;
+    headers: Record<string, string>;
+    body: string;
+}) => Promise<{
+    ok: boolean;
+    status: number;
+    json(): Promise<unknown>;
+}>;
+/** Pull the one-time token out of a yujin-forge://activate?token=... URL.
+ *  Returns null for anything that is not such a URL. */
+export declare function parseActivateUrl(arg: string): string | null;
+export interface RedeemedHandle {
+    ok: boolean;
+    handle?: string;
+    handle_key?: string;
+    error?: string;
+}
+/** Redeem a provision token at the worker. Pure network -- no local writes,
+ *  so it is unit-testable with an injected fetch. */
+export declare function redeemToken(token: string, opts?: {
+    baseUrl?: string;
+    fetchImpl?: FetchLike;
+}): Promise<RedeemedHandle>;
+export interface ActivateUrlResult {
+    ok: boolean;
+    handle?: string;
+    error?: string;
+}
+/** Full activation: parse -> redeem -> persist the per-handle key + handle. */
+export declare function activateFromUrl(arg: string, opts?: {
+    baseUrl?: string;
+    fetchImpl?: FetchLike;
+}): Promise<ActivateUrlResult>;
+export {};
+//# sourceMappingURL=activate_url.d.ts.map

package/dist/license/activate_url.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"activate_url.d.ts","sourceRoot":"","sources":["../../src/license/activate_url.ts"],"names":[],"mappings":"AAmBA,KAAK,SAAS,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,KAAK,OAAO,CAAC;IACjH,EAAE,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;CACvD,CAAC,CAAC;AAEH;wDACwD;AACxD,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAW3D;AAED,MAAM,WAAW,cAAc;IAAG,EAAE,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE;AAErG;qDACqD;AACrD,wBAAsB,WAAW,CAC/B,KAAK,EAAE,MAAM,EACb,IAAI,CAAC,EAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,SAAS,CAAA;CAAE,GACjD,OAAO,CAAC,cAAc,CAAC,CAkBzB;AAED,MAAM,WAAW,iBAAiB;IAAG,EAAE,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE;AAEnF,+EAA+E;AAC/E,wBAAsB,eAAe,CACnC,GAAG,EAAE,MAAM,EACX,IAAI,CAAC,EAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,SAAS,CAAA;CAAE,GACjD,OAAO,CAAC,iBAAiB,CAAC,CAU5B"}

package/dist/license/activate_url.js

@@ -0,0 +1,76 @@
+/**
+ * yujin-forge:// protocol activation -- PND-129 Camino A (zero friction).
+ *
+ * After the buyer clicks "Open Forge" on the Polar success page, the OS
+ * launches the registered handler with a URL like
+ *   yujin-forge://activate?token=<one-time provision token>
+ * as an argv entry. We redeem that token at the worker for THIS handle's
+ * per-handle key (HKDF, derived server-side -- the client never sees the
+ * global root), store it, and mark the local license active. The user
+ * pasted nothing and ran no command.
+ *
+ * ASCII-only.
+ */
+import { Vault } from '../vault/store.js';
+import { configDir } from './index.js';
+import { HANDLE_KEY_SLOT } from './handle_key.js';
+import { HITO4_BASE_URL } from './hito4_client.js';
+import { readLicense, writeLicense } from '../core/polar.js';
+/** Pull the one-time token out of a yujin-forge://activate?token=... URL.
+ *  Returns null for anything that is not such a URL. */
+export function parseActivateUrl(arg) {
+    if (typeof arg !== 'string' || !arg.startsWith('yujin-forge://'))
+        return null;
+    let u;
+    try {
+        u = new URL(arg);
+    }
+    catch {
+        return null;
+    }
+    /* host is "activate" (yujin-forge://activate?token=...). Accept any host
+     * but require the activate intent + a token, so a future verb cannot be
+     * mistaken for an activation. */
+    const action = (u.hostname || u.pathname.replace(/^\/+/, '')).toLowerCase();
+    if (action !== 'activate')
+        return null;
+    const token = (u.searchParams.get('token') || '').trim();
+    return token.length >= 32 ? token : null;
+}
+/** Redeem a provision token at the worker. Pure network -- no local writes,
+ *  so it is unit-testable with an injected fetch. */
+export async function redeemToken(token, opts) {
+    const base = opts?.baseUrl ?? HITO4_BASE_URL;
+    const f = opts?.fetchImpl ?? globalThis.fetch;
+    let resp;
+    try {
+        resp = await f(base + '/v1/provision/redeem', {
+            method: 'POST',
+            headers: { 'content-type': 'application/json' },
+            body: JSON.stringify({ token }),
+        });
+    }
+    catch (e) {
+        return { ok: false, error: 'network error: ' + (e instanceof Error ? e.message : String(e)) };
+    }
+    const j = (await resp.json().catch(() => ({})));
+    if (!resp.ok || !j.ok || !j.handle || !j.handle_key) {
+        return { ok: false, error: j.error || ('redeem failed (' + resp.status + ')') };
+    }
+    return { ok: true, handle: j.handle, handle_key: j.handle_key };
+}
+/** Full activation: parse -> redeem -> persist the per-handle key + handle. */
+export async function activateFromUrl(arg, opts) {
+    const token = parseActivateUrl(arg);
+    if (!token)
+        return { ok: false, error: 'not a valid yujin-forge://activate token URL' };
+    const red = await redeemToken(token, opts);
+    if (!red.ok || !red.handle || !red.handle_key)
+        return { ok: false, error: red.error };
+    const vault = await Vault.open({ configDir: configDir() });
+    await vault.set(HANDLE_KEY_SLOT, red.handle_key);
+    const cur = await readLicense();
+    await writeLicense({ ...cur, user_handle: red.handle });
+    return { ok: true, handle: red.handle };
+}
+//# sourceMappingURL=activate_url.js.map

package/dist/license/activate_url.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"activate_url.js","sourceRoot":"","sources":["../../src/license/activate_url.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAC;AAC1C,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACvC,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAM7D;wDACwD;AACxD,MAAM,UAAU,gBAAgB,CAAC,GAAW;IAC1C,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,gBAAgB,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9E,IAAI,CAAM,CAAC;IACX,IAAI,CAAC;QAAC,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;IAChD;;qCAEiC;IACjC,MAAM,MAAM,GAAG,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;IAC5E,IAAI,MAAM,KAAK,UAAU;QAAE,OAAO,IAAI,CAAC;IACvC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACzD,OAAO,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AAC3C,CAAC;AAID;qDACqD;AACrD,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,KAAa,EACb,IAAkD;IAElD,MAAM,IAAI,GAAG,IAAI,EAAE,OAAO,IAAI,cAAc,CAAC;IAC7C,MAAM,CAAC,GAAG,IAAI,EAAE,SAAS,IAAK,UAAU,CAAC,KAA8B,CAAC;IACxE,IAAI,IAA+D,CAAC;IACpE,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,CAAC,CAAC,IAAI,GAAG,sBAAsB,EAAE;YAC5C,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC;SAChC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,iBAAiB,GAAG,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAChG,CAAC;IACD,MAAM,CAAC,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAmB,CAAC;IAClE,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC;QACpD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC,EAAE,CAAC;IAClF,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC;AAClE,CAAC;AAID,+EAA+E;AAC/E,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,GAAW,EACX,IAAkD;IAElD,MAAM,KAAK,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;IACpC,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,8CAA8C,EAAE,CAAC;IACxF,MAAM,GAAG,GAAG,MAAM,WAAW,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAC3C,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,UAAU;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC;IACtF,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;IAC3D,MAAM,KAAK,CAAC,GAAG,CAAC,eAAe,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC;IACjD,MAAM,GAAG,GAAG,MAAM,WAAW,EAAE,CAAC;IAChC,MAAM,YAAY,CAAC,EAAE,GAAG,GAAG,EAAE,WAAW,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;IACxD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC;AAC1C,CAAC"}

package/dist/version.d.ts

@@ -2,5 +2,5 @@
  * Yujin Forge CLI version. Kept in sync with package.json by the npm
  * "version" lifecycle (scripts/sync_version.mjs) so the two never drift.
  */
-export declare const VERSION = "1.0.13";
+export declare const VERSION = "1.0.15";
 //# sourceMappingURL=version.d.ts.map

package/dist/version.js

@@ -2,5 +2,5 @@
  * Yujin Forge CLI version. Kept in sync with package.json by the npm
  * "version" lifecycle (scripts/sync_version.mjs) so the two never drift.
  */
-export const VERSION = '1.0.13';
+export const VERSION = '1.0.15';
 //# sourceMappingURL=version.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nac3/forge-cli",
-  "version": "1.0.13",
+  "version": "1.0.15",
   "description": "Yujin Forge -- voice-first NAC-3 React development framework. CLI + chat panel + spec ingest + 10-format document reader + voice loop.",
   "license": "SEE LICENSE IN LICENSE",
   "author": "Pablo Kuschnirof <pablo@rpaforce.com>",