@oh-hai/cli 0.1.0-beta.0 → 0.2.1

package/dist/config.d.ts

@@ -1,6 +1,11 @@
-export declare const DEFAULT_BASE_URL = "http://localhost:8787";
+import { type Binding } from "./bindings.js";
+export declare const DEFAULT_BASE_URL = "https://inbox.ohhai.app";
 export type OutputFormat = "human" | "json";
 export type TokenSource = "env" | "keychain" | "file" | "none";
+/** Where the resolved `account` came from (§6 precedence), for `whoami` to explain the resolution.
+ *  `"binding"` is a user-side directory→agent binding (bindings.ts); `"none"` means nothing was
+ *  configured — a downstream sole-identity DISCOVERY (resolveIdentity) may still find one. */
+export type AccountSource = "flag" | "env" | "binding" | "user-config" | "none";
 /** Global flags after parsing (the subset that feeds config resolution). */
 export interface RawFlags {
     baseUrl?: string | undefined;
@@ -45,12 +50,21 @@ export interface ResolvedConfig {
     color: boolean;
     token: string | undefined;
     tokenSource: TokenSource;
+    /** How `account` resolved (§6), for `whoami`. Optional so a hand-built config (tests) may omit it. */
+    accountSource?: AccountSource;
+    /** The bound directory when `accountSource === "binding"`; omitted otherwise. */
+    bindingPath?: string | undefined;
 }
 export interface ResolveInput {
     flags?: RawFlags | undefined;
     env?: EnvVars | undefined;
     userConfig?: UserConfig | undefined;
     projectConfig?: ProjectConfig | undefined;
+    /** User-side directory→agent bindings (already loaded from the user dir; bindings.ts). Consulted for
+     *  the account precedence only — a repo never reaches this, preserving credential-safety (§6). */
+    bindings?: Binding[] | undefined;
+    /** The process working directory, for walk-up binding resolution. Omitted → bindings are ignored. */
+    cwd?: string | undefined;
 }
 export interface ResolveResult {
     config: ResolvedConfig;

package/dist/config.js

@@ -11,7 +11,12 @@
 //
 // #105 implements the resolution CONTRACT over an already-parsed, in-memory config object.
 // The TOML file loader + per-project discovery + keychain read land in #106/#107.
-export const DEFAULT_BASE_URL = "http://localhost:8787";
+import { resolveBinding } from "./bindings.js";
+import { originOf } from "./url.js";
+// The production Hub — a shipped CLI must reach the real service with zero configuration (#271, R8).
+// Local development points at a local hub by setting MA2H_BASE_URL (or `--base-url`), which outranks
+// this default (§6 precedence).
+export const DEFAULT_BASE_URL = "https://inbox.ohhai.app";
 /** A string is "present" only when non-empty after trimming; the trimmed value is returned
  *  so stray whitespace never rides along into a base URL / account / token. */
 function presentString(value) {
@@ -63,8 +68,42 @@ export function resolveConfig(input = {}) {
     // empty, so fall back to the default rather than yield an unusable "".
     const resolvedBase = (firstPresent(flags.baseUrl, env.MA2H_BASE_URL, userConfig.base_url) ?? DEFAULT_BASE_URL).replace(/\/+$/, "");
     const baseUrl = resolvedBase === "" ? DEFAULT_BASE_URL : resolvedBase;
-    // account: flag > env > USER config only. Project config excluded on purpose.
-    const account = firstPresent(flags.account, env.MA2H_AGENT_ID, userConfig.default_account);
+    // account: flag > env > directory binding > USER config only (§6). Project config excluded on purpose.
+    // The directory binding (bindings.ts) is user-side + origin-scoped, so it can supply the account for
+    // the current directory tree WITHOUT a repo ever influencing identity — it sits BELOW an explicit
+    // --account / MA2H_AGENT_ID (which still win) and ABOVE the user-global default. `accountSource`
+    // records which layer won, for `whoami` to explain the resolution.
+    const origin = originOf(baseUrl);
+    const binding = input.bindings !== undefined && input.cwd !== undefined
+        ? resolveBinding(input.bindings, input.cwd, origin)
+        : undefined;
+    const flagAccount = presentString(flags.account);
+    const envAccount = presentString(env.MA2H_AGENT_ID);
+    const userAccount = presentString(userConfig.default_account);
+    let account;
+    let accountSource;
+    let bindingPath = undefined;
+    if (flagAccount !== undefined) {
+        account = flagAccount;
+        accountSource = "flag";
+    }
+    else if (envAccount !== undefined) {
+        account = envAccount;
+        accountSource = "env";
+    }
+    else if (binding !== undefined) {
+        account = binding.account;
+        accountSource = "binding";
+        bindingPath = binding.path;
+    }
+    else if (userAccount !== undefined) {
+        account = userAccount;
+        accountSource = "user-config";
+    }
+    else {
+        account = undefined;
+        accountSource = "none";
+    }
     // output: an explicit --json flag wins EITHER way (--json → json, --json=false → human, upholding
     // flag > config precedence); only when the flag is absent does the config `output` decide; else human.
     const output = flags.json === true
@@ -90,7 +129,7 @@ export function resolveConfig(input = {}) {
     const envToken = presentString(env.MA2H_AGENT_TOKEN);
     const tokenSource = envToken !== undefined ? "env" : "none";
     return {
-        config: { baseUrl, account, output, timeoutMs, color, token: envToken, tokenSource },
+        config: { baseUrl, account, output, timeoutMs, color, token: envToken, tokenSource, accountSource, bindingPath },
         warnings,
     };
 }

package/dist/config.js.map

@@ -1 +1 @@
-{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,yDAAyD;AACzD,EAAE;AACF,sFAAsF;AACtF,EAAE;AACF,sFAAsF;AACtF,2FAA2F;AAC3F,6FAA6F;AAC7F,2FAA2F;AAC3F,2FAA2F;AAC3F,0FAA0F;AAC1F,EAAE;AACF,2FAA2F;AAC3F,kFAAkF;AAElF,MAAM,CAAC,MAAM,gBAAgB,GAAG,uBAAuB,CAAC;AAoExD;+EAC+E;AAC/E,SAAS,aAAa,CAAC,KAAyB;IAC9C,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,OAAO,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC;AAC9C,CAAC;AAED,8FAA8F;AAC9F,SAAS,YAAY,CAAC,GAAG,MAAiC;IACxD,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,OAAO,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;QACrC,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,OAAO,OAAO,CAAC;QACjB,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,YAAY,CAAC,KAAyB;IAC7C,MAAM,OAAO,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;IACrC,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAC5C,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AACrE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,QAAsB,EAAE;IACpD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC;IAChC,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,EAAE,CAAC;IAC5B,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,IAAI,EAAE,CAAC;IAC1C,MAAM,aAAa,GAAG,KAAK,CAAC,aAAa,IAAI,EAAE,CAAC;IAChD,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,sFAAsF;IACtF,wFAAwF;IACxF,IAAI,aAAa,CAAC,aAAa,CAAC,QAAQ,CAAC,KAAK,SAAS,EAAE,CAAC;QACxD,QAAQ,CAAC,IAAI,CACX,2HAA2H,CAC5H,CAAC;IACJ,CAAC;IACD,IAAI,aAAa,CAAC,aAAa,CAAC,OAAO,CAAC,KAAK,SAAS,EAAE,CAAC;QACvD,QAAQ,CAAC,IAAI,CACX,yHAAyH,CAC1H,CAAC;IACJ,CAAC;IAED,4FAA4F;IAC5F,wFAAwF;IACxF,wFAAwF;IACxF,uEAAuE;IACvE,MAAM,YAAY,GAAG,CACnB,YAAY,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC,aAAa,EAAE,UAAU,CAAC,QAAQ,CAAC,IAAI,gBAAgB,CACxF,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACtB,MAAM,OAAO,GAAG,YAAY,KAAK,EAAE,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,YAAY,CAAC;IAEtE,8EAA8E;IAC9E,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC,aAAa,EAAE,UAAU,CAAC,eAAe,CAAC,CAAC;IAE3F,kGAAkG;IAClG,uGAAuG;IACvG,MAAM,MAAM,GACV,KAAK,CAAC,IAAI,KAAK,IAAI;QACjB,CAAC,CAAC,MAAM;QACR,CAAC,CAAC,KAAK,CAAC,IAAI,KAAK,KAAK;YACpB,CAAC,CAAC,OAAO;YACT,CAAC,CAAC,aAAa,CAAC,MAAM,IAAI,UAAU,CAAC,MAAM,IAAI,OAAO,CAAC;IAE7D,qFAAqF;IACrF,MAAM,SAAS,GACb,KAAK,CAAC,SAAS;QACf,YAAY,CAAC,GAAG,CAAC,eAAe,CAAC;QACjC,aAAa,CAAC,UAAU;QACxB,UAAU,CAAC,UAAU,CAAC;IAExB,0FAA0F;IAC1F,8EAA8E;IAC9E,IAAI,KAAc,CAAC;IACnB,IAAI,KAAK,CAAC,OAAO,KAAK,IAAI,IAAI,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,SAAS,EAAE,CAAC;QACxE,KAAK,GAAG,KAAK,CAAC;IAChB,CAAC;SAAM,CAAC;QACN,KAAK,GAAG,aAAa,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,IAAI,IAAI,CAAC;IAC1D,CAAC;IAED,wFAAwF;IACxF,MAAM,QAAQ,GAAG,aAAa,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IACrD,MAAM,WAAW,GAAgB,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;IAEzE,OAAO;QACL,MAAM,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE;QACpF,QAAQ;KACT,CAAC;AACJ,CAAC"}
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,yDAAyD;AACzD,EAAE;AACF,sFAAsF;AACtF,EAAE;AACF,sFAAsF;AACtF,2FAA2F;AAC3F,6FAA6F;AAC7F,2FAA2F;AAC3F,2FAA2F;AAC3F,0FAA0F;AAC1F,EAAE;AACF,2FAA2F;AAC3F,kFAAkF;AAElF,OAAO,EAAE,cAAc,EAAgB,MAAM,eAAe,CAAC;AAC7D,OAAO,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AAEpC,qGAAqG;AACrG,qGAAqG;AACrG,gCAAgC;AAChC,MAAM,CAAC,MAAM,gBAAgB,GAAG,yBAAyB,CAAC;AAkF1D;+EAC+E;AAC/E,SAAS,aAAa,CAAC,KAAyB;IAC9C,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,OAAO,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC;AAC9C,CAAC;AAED,8FAA8F;AAC9F,SAAS,YAAY,CAAC,GAAG,MAAiC;IACxD,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,OAAO,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;QACrC,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,OAAO,OAAO,CAAC;QACjB,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,YAAY,CAAC,KAAyB;IAC7C,MAAM,OAAO,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;IACrC,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAC5C,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AACrE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,QAAsB,EAAE;IACpD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC;IAChC,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,EAAE,CAAC;IAC5B,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,IAAI,EAAE,CAAC;IAC1C,MAAM,aAAa,GAAG,KAAK,CAAC,aAAa,IAAI,EAAE,CAAC;IAChD,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,sFAAsF;IACtF,wFAAwF;IACxF,IAAI,aAAa,CAAC,aAAa,CAAC,QAAQ,CAAC,KAAK,SAAS,EAAE,CAAC;QACxD,QAAQ,CAAC,IAAI,CACX,2HAA2H,CAC5H,CAAC;IACJ,CAAC;IACD,IAAI,aAAa,CAAC,aAAa,CAAC,OAAO,CAAC,KAAK,SAAS,EAAE,CAAC;QACvD,QAAQ,CAAC,IAAI,CACX,yHAAyH,CAC1H,CAAC;IACJ,CAAC;IAED,4FAA4F;IAC5F,wFAAwF;IACxF,wFAAwF;IACxF,uEAAuE;IACvE,MAAM,YAAY,GAAG,CACnB,YAAY,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC,aAAa,EAAE,UAAU,CAAC,QAAQ,CAAC,IAAI,gBAAgB,CACxF,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACtB,MAAM,OAAO,GAAG,YAAY,KAAK,EAAE,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,YAAY,CAAC;IAEtE,uGAAuG;IACvG,qGAAqG;IACrG,kGAAkG;IAClG,iGAAiG;IACjG,mEAAmE;IACnE,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;IACjC,MAAM,OAAO,GACX,KAAK,CAAC,QAAQ,KAAK,SAAS,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS;QACrD,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC;QACnD,CAAC,CAAC,SAAS,CAAC;IAEhB,MAAM,WAAW,GAAG,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACjD,MAAM,UAAU,GAAG,aAAa,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IACpD,MAAM,WAAW,GAAG,aAAa,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;IAE9D,IAAI,OAA2B,CAAC;IAChC,IAAI,aAA4B,CAAC;IACjC,IAAI,WAAW,GAAuB,SAAS,CAAC;IAChD,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QAC9B,OAAO,GAAG,WAAW,CAAC;QACtB,aAAa,GAAG,MAAM,CAAC;IACzB,CAAC;SAAM,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QACpC,OAAO,GAAG,UAAU,CAAC;QACrB,aAAa,GAAG,KAAK,CAAC;IACxB,CAAC;SAAM,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QACjC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QAC1B,aAAa,GAAG,SAAS,CAAC;QAC1B,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IAC7B,CAAC;SAAM,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QACrC,OAAO,GAAG,WAAW,CAAC;QACtB,aAAa,GAAG,aAAa,CAAC;IAChC,CAAC;SAAM,CAAC;QACN,OAAO,GAAG,SAAS,CAAC;QACpB,aAAa,GAAG,MAAM,CAAC;IACzB,CAAC;IAED,kGAAkG;IAClG,uGAAuG;IACvG,MAAM,MAAM,GACV,KAAK,CAAC,IAAI,KAAK,IAAI;QACjB,CAAC,CAAC,MAAM;QACR,CAAC,CAAC,KAAK,CAAC,IAAI,KAAK,KAAK;YACpB,CAAC,CAAC,OAAO;YACT,CAAC,CAAC,aAAa,CAAC,MAAM,IAAI,UAAU,CAAC,MAAM,IAAI,OAAO,CAAC;IAE7D,qFAAqF;IACrF,MAAM,SAAS,GACb,KAAK,CAAC,SAAS;QACf,YAAY,CAAC,GAAG,CAAC,eAAe,CAAC;QACjC,aAAa,CAAC,UAAU;QACxB,UAAU,CAAC,UAAU,CAAC;IAExB,0FAA0F;IAC1F,8EAA8E;IAC9E,IAAI,KAAc,CAAC;IACnB,IAAI,KAAK,CAAC,OAAO,KAAK,IAAI,IAAI,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,SAAS,EAAE,CAAC;QACxE,KAAK,GAAG,KAAK,CAAC;IAChB,CAAC;SAAM,CAAC;QACN,KAAK,GAAG,aAAa,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,IAAI,IAAI,CAAC;IAC1D,CAAC;IAED,wFAAwF;IACxF,MAAM,QAAQ,GAAG,aAAa,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IACrD,MAAM,WAAW,GAAgB,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;IAEzE,OAAO;QACL,MAAM,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,aAAa,EAAE,WAAW,EAAE;QAChH,QAAQ;KACT,CAAC;AACJ,CAAC"}

package/dist/exit-codes.d.ts

@@ -19,6 +19,11 @@ export declare const ExitCode: {
     readonly CONFLICT: 8;
     /** 9 — Invalid request (Hub 400/422/413; version not supported). */
     readonly INVALID_REQUEST: 9;
+    /** 10 — Already running: a LOCAL precondition conflict, no Hub call — currently only a second
+     *  `inbox watch` on an identity another live watcher already holds (#323). Distinct from `8`
+     *  (a Hub 409) so a caller branching on the exit code never mistakes a non-retryable "stop the
+     *  other watcher" for a retryable idempotency conflict. */
+    readonly ALREADY_RUNNING: 10;
 };
 export type ExitCode = (typeof ExitCode)[keyof typeof ExitCode];
 /**
@@ -39,6 +44,7 @@ declare const ERROR_CODE_TO_EXIT: {
     readonly validation_error: 9;
     readonly payload_too_large: 9;
     readonly version_not_supported: 9;
+    readonly already_running: 10;
     readonly not_implemented: 1;
 };
 export type ErrorCode = keyof typeof ERROR_CODE_TO_EXIT;

package/dist/exit-codes.js

@@ -22,6 +22,11 @@ export const ExitCode = {
     CONFLICT: 8,
     /** 9 — Invalid request (Hub 400/422/413; version not supported). */
     INVALID_REQUEST: 9,
+    /** 10 — Already running: a LOCAL precondition conflict, no Hub call — currently only a second
+     *  `inbox watch` on an identity another live watcher already holds (#323). Distinct from `8`
+     *  (a Hub 409) so a caller branching on the exit code never mistakes a non-retryable "stop the
+     *  other watcher" for a retryable idempotency conflict. */
+    ALREADY_RUNNING: 10,
 };
 /**
  * Stable `error.code` strings (§8) → exit codes (§7). An exit code may cover more
@@ -41,6 +46,7 @@ const ERROR_CODE_TO_EXIT = {
     validation_error: ExitCode.INVALID_REQUEST,
     payload_too_large: ExitCode.INVALID_REQUEST,
     version_not_supported: ExitCode.INVALID_REQUEST,
+    already_running: ExitCode.ALREADY_RUNNING,
     not_implemented: ExitCode.ERROR,
 };
 /** Map a (possibly unknown) `error.code` string to its exit code; unknown → generic 1. */

package/dist/exit-codes.js.map

@@ -1 +1 @@
-{"version":3,"file":"exit-codes.js","sourceRoot":"","sources":["../src/exit-codes.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,mFAAmF;AACnF,gEAAgE;AAEhE,MAAM,CAAC,MAAM,QAAQ,GAAG;IACtB,mBAAmB;IACnB,OAAO,EAAE,CAAC;IACV,sCAAsC;IACtC,KAAK,EAAE,CAAC;IACR,mEAAmE;IACnE,KAAK,EAAE,CAAC;IACR,mEAAmE;IACnE,IAAI,EAAE,CAAC;IACP,sDAAsD;IACtD,SAAS,EAAE,CAAC;IACZ,oEAAoE;IACpE,OAAO,EAAE,CAAC;IACV,kCAAkC;IAClC,MAAM,EAAE,CAAC;IACT,qEAAqE;IACrE,OAAO,EAAE,CAAC;IACV,4EAA4E;IAC5E,QAAQ,EAAE,CAAC;IACX,oEAAoE;IACpE,eAAe,EAAE,CAAC;CACV,CAAC;AAIX;;;;GAIG;AACH,MAAM,kBAAkB,GAAG;IACzB,KAAK,EAAE,QAAQ,CAAC,KAAK;IACrB,KAAK,EAAE,QAAQ,CAAC,KAAK;IACrB,IAAI,EAAE,QAAQ,CAAC,IAAI;IACnB,SAAS,EAAE,QAAQ,CAAC,SAAS;IAC7B,OAAO,EAAE,QAAQ,CAAC,OAAO;IACzB,MAAM,EAAE,QAAQ,CAAC,MAAM;IACvB,OAAO,EAAE,QAAQ,CAAC,OAAO;IACzB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;IAC3B,WAAW,EAAE,QAAQ,CAAC,eAAe;IACrC,gBAAgB,EAAE,QAAQ,CAAC,eAAe;IAC1C,iBAAiB,EAAE,QAAQ,CAAC,eAAe;IAC3C,qBAAqB,EAAE,QAAQ,CAAC,eAAe;IAC/C,eAAe,EAAE,QAAQ,CAAC,KAAK;CACvB,CAAC;AAIX,0FAA0F;AAC1F,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,MAAM,KAAK,GAA6B,kBAAkB,CAAC;IAC3D,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,KAAK,CAAC;AACvC,CAAC;AAED;;oGAEoG;AACpG,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,OAAO,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,kBAAkB,EAAE,IAAI,CAAC,CAAC;AACxE,CAAC"}
+{"version":3,"file":"exit-codes.js","sourceRoot":"","sources":["../src/exit-codes.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,mFAAmF;AACnF,gEAAgE;AAEhE,MAAM,CAAC,MAAM,QAAQ,GAAG;IACtB,mBAAmB;IACnB,OAAO,EAAE,CAAC;IACV,sCAAsC;IACtC,KAAK,EAAE,CAAC;IACR,mEAAmE;IACnE,KAAK,EAAE,CAAC;IACR,mEAAmE;IACnE,IAAI,EAAE,CAAC;IACP,sDAAsD;IACtD,SAAS,EAAE,CAAC;IACZ,oEAAoE;IACpE,OAAO,EAAE,CAAC;IACV,kCAAkC;IAClC,MAAM,EAAE,CAAC;IACT,qEAAqE;IACrE,OAAO,EAAE,CAAC;IACV,4EAA4E;IAC5E,QAAQ,EAAE,CAAC;IACX,oEAAoE;IACpE,eAAe,EAAE,CAAC;IAClB;;;+DAG2D;IAC3D,eAAe,EAAE,EAAE;CACX,CAAC;AAIX;;;;GAIG;AACH,MAAM,kBAAkB,GAAG;IACzB,KAAK,EAAE,QAAQ,CAAC,KAAK;IACrB,KAAK,EAAE,QAAQ,CAAC,KAAK;IACrB,IAAI,EAAE,QAAQ,CAAC,IAAI;IACnB,SAAS,EAAE,QAAQ,CAAC,SAAS;IAC7B,OAAO,EAAE,QAAQ,CAAC,OAAO;IACzB,MAAM,EAAE,QAAQ,CAAC,MAAM;IACvB,OAAO,EAAE,QAAQ,CAAC,OAAO;IACzB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;IAC3B,WAAW,EAAE,QAAQ,CAAC,eAAe;IACrC,gBAAgB,EAAE,QAAQ,CAAC,eAAe;IAC1C,iBAAiB,EAAE,QAAQ,CAAC,eAAe;IAC3C,qBAAqB,EAAE,QAAQ,CAAC,eAAe;IAC/C,eAAe,EAAE,QAAQ,CAAC,eAAe;IACzC,eAAe,EAAE,QAAQ,CAAC,KAAK;CACvB,CAAC;AAIX,0FAA0F;AAC1F,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,MAAM,KAAK,GAA6B,kBAAkB,CAAC;IAC3D,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,KAAK,CAAC;AACvC,CAAC;AAED;;oGAEoG;AACpG,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,OAAO,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,kBAAkB,EAAE,IAAI,CAAC,CAAC;AACxE,CAAC"}

package/dist/help.js

@@ -5,11 +5,15 @@ export const TOP_LEVEL_HELP = [
     "",
     "Usage: oh-hai [global flags] <command> [subcommand] [flags]",
     "",
-    "Auth:       login | logout | whoami",
+    "Setup:      setup   (bare `oh-hai` on a new machine onboards; re-run to add/re-auth)",
+    "Auth:       login | logout | whoami | use",
+    "                    (use: bind this directory to an agent — per-project identity)",
     "Messaging:  notify | ask | task",
     "Inbox:      inbox watch",
     "Agents:     agents list | create | revoke",
     "Health:     doctor",
+    "Teach:      teach   (write the OH HAI snippet into this machine's agent-instruction files)",
+    "Update:     upgrade (self-update, or --check for a newer oh-hai)",
     "",
     "Global flags: --base-url --account --json --quiet --verbose --no-color --timeout",
     "Run 'oh-hai <command> --help' for details.",

package/dist/help.js.map

@@ -1 +1 @@
-{"version":3,"file":"help.js","sourceRoot":"","sources":["../src/help.ts"],"names":[],"mappings":"AAAA,sFAAsF;AACtF,qEAAqE;AAErE,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,8DAA8D;IAC9D,EAAE;IACF,6DAA6D;IAC7D,EAAE;IACF,qCAAqC;IACrC,iCAAiC;IACjC,yBAAyB;IACzB,2CAA2C;IAC3C,oBAAoB;IACpB,EAAE;IACF,kFAAkF;IAClF,4CAA4C;CAC7C,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC"}
+{"version":3,"file":"help.js","sourceRoot":"","sources":["../src/help.ts"],"names":[],"mappings":"AAAA,sFAAsF;AACtF,qEAAqE;AAErE,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,8DAA8D;IAC9D,EAAE;IACF,6DAA6D;IAC7D,EAAE;IACF,sFAAsF;IACtF,2CAA2C;IAC3C,mFAAmF;IACnF,iCAAiC;IACjC,yBAAyB;IACzB,2CAA2C;IAC3C,oBAAoB;IACpB,4FAA4F;IAC5F,kEAAkE;IAClE,EAAE;IACF,kFAAkF;IAClF,4CAA4C;CAC7C,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC"}

package/dist/onboarding/open-url.d.ts

@@ -0,0 +1,26 @@
+/** The minimal child-process surface this util touches — `once('spawn'|'error')` to learn whether
+ *  the opener launched, and `unref()` so it doesn't keep the event loop (or the CLI) alive. Node's
+ *  real `ChildProcess` is structurally assignable, so the production `spawn` fits without a cast. */
+export interface SpawnedOpener {
+    once(event: "spawn", listener: () => void): unknown;
+    once(event: "error", listener: (err: Error) => void): unknown;
+    unref(): void;
+}
+/** The `spawn` shape the util needs (file + argv + detached/ignore options). Injected so tests assert
+ *  the exact opener + argv without launching anything. Node's `child_process.spawn` is assignable. */
+export type SpawnLike = (file: string, args: string[], options: {
+    detached: boolean;
+    stdio: "ignore";
+}) => SpawnedOpener;
+export interface OpenUrlDeps {
+    /** Override the detected platform (tests exercise darwin / win32 / linux without three machines). */
+    platform?: NodeJS.Platform;
+    /** Inject the spawn implementation (tests). Defaults to the real `node:child_process` spawn. */
+    spawn?: SpawnLike;
+}
+/**
+ * Try to open `url` in the user's default browser. Resolves `true` when the opener process
+ * launched, `false` when it couldn't (non-http(s) URL, missing opener binary, spawn failure).
+ * Never throws — a `false` result is the caller's cue to print the URL + code instead.
+ */
+export declare function openInBrowser(url: string, deps?: OpenUrlDeps): Promise<boolean>;

package/dist/onboarding/open-url.js

@@ -0,0 +1,69 @@
+// Best-effort browser opener for the onboarding flow (docs/specs/cli.md §4; issue #271). The
+// device-code login prompts a human to APPROVE in their browser; "platinum" onboarding opens that
+// URL for them instead of making them copy it. This is deliberately fire-and-forget and NON-fatal:
+//
+//   - It launches the platform's own opener via `node:child_process` (no runtime dependency, mirroring
+//     the keychain backend's shell-out): macOS `open`, Windows `cmd /c start`, else `xdg-open`.
+//   - It returns whether the opener process LAUNCHED — never whether the human finished anything.
+//     A missing opener (headless box, no `xdg-open`), an unknown platform, or a non-http(s) URL all
+//     resolve `false` so the caller falls back to PRINTING the URL + short code. It never throws.
+//   - The child is spawned DETACHED with `stdio: "ignore"` and `unref()`'d so the CLI can exit
+//     immediately after; we never wait on the browser or read its output.
+//
+// SECURITY: only http(s) URLs are ever handed to the opener. The verification URL is server-supplied
+// (login.ts already validates the scheme), so this is defense-in-depth — a `file:`/`javascript:` URL
+// must never reach a shell-less `open`/`xdg-open` as a thing to "open".
+import { spawn } from "node:child_process";
+import { isHttpUrl } from "../url.js";
+/** The opener command + argv for a platform. On Windows we deliberately do NOT use `cmd /c start`:
+ *  even a shell-less spawn there launches `cmd.exe`, whose OWN parser re-interprets `& | < > ^ ( )`
+ *  before argv splitting — and the URL is Hub-supplied (`verification_uri[_complete]`), guarded only
+ *  by a scheme check, so `https://h/?x=1&calc.exe` would let a hostile Hub run a local command during
+ *  onboarding. `rundll32 url.dll,FileProtocolHandler <url>` hands the URL to the OS default-handler as
+ *  a SINGLE argv element with no command interpreter in the path. `open`/`xdg-open` already take the
+ *  URL as one argv element (no shell), so they're unaffected. */
+function openerFor(platform, url) {
+    if (platform === "darwin")
+        return { file: "open", args: [url] };
+    if (platform === "win32")
+        return { file: "rundll32", args: ["url.dll,FileProtocolHandler", url] };
+    return { file: "xdg-open", args: [url] };
+}
+/**
+ * Try to open `url` in the user's default browser. Resolves `true` when the opener process
+ * launched, `false` when it couldn't (non-http(s) URL, missing opener binary, spawn failure).
+ * Never throws — a `false` result is the caller's cue to print the URL + code instead.
+ */
+export function openInBrowser(url, deps = {}) {
+    if (!isHttpUrl(url))
+        return Promise.resolve(false);
+    const platform = deps.platform ?? process.platform;
+    const spawnImpl = deps.spawn ?? spawn;
+    const { file, args } = openerFor(platform, url);
+    return new Promise((resolve) => {
+        let settled = false;
+        const done = (value) => {
+            if (!settled) {
+                settled = true;
+                resolve(value);
+            }
+        };
+        try {
+            // Detached + ignored stdio so the opener outlives the CLI and never blocks on I/O.
+            const child = spawnImpl(file, args, { detached: true, stdio: "ignore" });
+            // `spawn` fires once the child process actually started; `error` fires on ENOENT (opener
+            // missing) or a spawn failure. Either resolves the promise exactly once.
+            child.once("spawn", () => {
+                child.unref();
+                done(true);
+            });
+            child.once("error", () => done(false));
+        }
+        catch {
+            // A synchronous throw from spawn (e.g. an invalid options combination) is still just "couldn't
+            // open" — degrade to the print fallback rather than failing onboarding.
+            done(false);
+        }
+    });
+}
+//# sourceMappingURL=open-url.js.map

package/dist/onboarding/open-url.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"open-url.js","sourceRoot":"","sources":["../../src/onboarding/open-url.ts"],"names":[],"mappings":"AAAA,6FAA6F;AAC7F,kGAAkG;AAClG,mGAAmG;AACnG,EAAE;AACF,uGAAuG;AACvG,gGAAgG;AAChG,kGAAkG;AAClG,oGAAoG;AACpG,kGAAkG;AAClG,+FAA+F;AAC/F,0EAA0E;AAC1E,EAAE;AACF,qGAAqG;AACrG,qGAAqG;AACrG,wEAAwE;AAExE,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAE3C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AA0BtC;;;;;;iEAMiE;AACjE,SAAS,SAAS,CAAC,QAAyB,EAAE,GAAW;IACvD,IAAI,QAAQ,KAAK,QAAQ;QAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;IAChE,IAAI,QAAQ,KAAK,OAAO;QAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,6BAA6B,EAAE,GAAG,CAAC,EAAE,CAAC;IAClG,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;AAC3C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,GAAW,EAAE,OAAoB,EAAE;IAC/D,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC;QAAE,OAAO,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACnD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC;IACnD,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,IAAK,KAA8B,CAAC;IAChE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,SAAS,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IAEhD,OAAO,IAAI,OAAO,CAAU,CAAC,OAAO,EAAE,EAAE;QACtC,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,IAAI,GAAG,CAAC,KAAc,EAAQ,EAAE;YACpC,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO,GAAG,IAAI,CAAC;gBACf,OAAO,CAAC,KAAK,CAAC,CAAC;YACjB,CAAC;QACH,CAAC,CAAC;QACF,IAAI,CAAC;YACH,mFAAmF;YACnF,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;YACzE,yFAAyF;YACzF,yEAAyE;YACzE,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE;gBACvB,KAAK,CAAC,KAAK,EAAE,CAAC;gBACd,IAAI,CAAC,IAAI,CAAC,CAAC;YACb,CAAC,CAAC,CAAC;YACH,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QACzC,CAAC;QAAC,MAAM,CAAC;YACP,+FAA+F;YAC/F,wEAAwE;YACxE,IAAI,CAAC,KAAK,CAAC,CAAC;QACd,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/onboarding/status.d.ts

@@ -0,0 +1,24 @@
+import type { ResolvedConfig } from "../config.js";
+import type { CredentialStore } from "../auth/token-store.js";
+export interface MachineStatus {
+    /** True when this machine already has a usable credential for the resolved Hub origin. */
+    setUp: boolean;
+    /** Where the credential came from: the env token, a stored identity, or nothing. */
+    source: "env" | "stored" | "none";
+    /** The agent id to display, when unambiguous — the env / configured account, or a sole stored
+     *  identity. Undefined when there is no single one to name (no account on the env token, or multiple
+     *  stored identities discovered). */
+    agentId: string | undefined;
+    /** How many resolvable stored identities exist for this origin (0 on the env / configured-account
+     *  paths, which resolve a single specific credential rather than discovering). */
+    storedCount: number;
+}
+/**
+ * Resolve whether this machine is set up for the config's Hub, and how, WITHOUT revealing a token.
+ * `openStore` is a thunk so the store is opened only when a local lookup is actually needed — the env
+ * credential proves set-up with no keychain probe at all (important in CI / locked-keychain envs). The
+ * resolution precedence mirrors `resolveIdentity` (resolve-token.ts) exactly, so a machine that reads
+ * as "set up" here is one whose credential `notify`/`ask` will actually resolve:
+ *   env token > the explicitly-configured account's token > the sole discoverable stored identity.
+ */
+export declare function machineStatus(config: ResolvedConfig, openStore: () => Promise<CredentialStore>): Promise<MachineStatus>;

package/dist/onboarding/status.js

@@ -0,0 +1,53 @@
+// "Is this machine set up?" — shared by `oh-hai setup` (#271) and the bare-`oh-hai` first-run
+// dispatch (cli.ts). A machine is set up for a Hub when it already has a usable credential for that
+// Hub's ORIGIN (§5.1 Hub-scoping): either the `MA2H_AGENT_TOKEN` env credential (the CI path) or at
+// least one stored identity in the keychain/file backend whose bearer still resolves.
+//
+// This mirrors resolveIdentity()'s "resolvable stored identity" logic (resolve-token.ts): `list()`
+// reads a keys-only index (redaction-safe — it can drift from the backend), so an identity counts
+// only when its token actually resolves. We count resolvable identities to decide set-up + whether
+// there's a single unambiguous one to name in the "connected as …" message.
+import { originOf } from "../auth/resolve-token.js";
+/**
+ * Resolve whether this machine is set up for the config's Hub, and how, WITHOUT revealing a token.
+ * `openStore` is a thunk so the store is opened only when a local lookup is actually needed — the env
+ * credential proves set-up with no keychain probe at all (important in CI / locked-keychain envs). The
+ * resolution precedence mirrors `resolveIdentity` (resolve-token.ts) exactly, so a machine that reads
+ * as "set up" here is one whose credential `notify`/`ask` will actually resolve:
+ *   env token > the explicitly-configured account's token > the sole discoverable stored identity.
+ */
+export async function machineStatus(config, openStore) {
+    // The env credential (CI path, §5.3) is authoritative and needs no store lookup. Its agent id may be
+    // absent (a token with no MA2H_AGENT_ID) — still "set up", just unnamed.
+    if (config.tokenSource === "env") {
+        return { setUp: true, source: "env", agentId: config.account, storedCount: 0 };
+    }
+    const origin = originOf(config.baseUrl);
+    const store = await openStore();
+    // An explicitly-configured account (--account / MA2H_AGENT_ID / default_account) wins: set-up means
+    // THAT account resolves, not merely that some other identity does — otherwise bare `oh-hai` would
+    // print help while `notify` (which looks up only the configured account) fails auth. Mirrors
+    // resolveIdentity's "configured account wins, no discovery" branch.
+    if (config.account !== undefined) {
+        const found = await store.getWithSource(origin, config.account);
+        return found !== undefined
+            ? { setUp: true, source: "stored", agentId: config.account, storedCount: 1 }
+            : { setUp: false, source: "none", agentId: undefined, storedCount: 0 };
+    }
+    // No configured account: discover the resolvable stored identities for this origin (a sole one is
+    // unambiguous; several stay ambiguous → no single agent to name, but still "set up").
+    const listed = (await store.list()).filter((identity) => identity.origin === origin);
+    let count = 0;
+    let soleAgent;
+    for (const identity of listed) {
+        const found = await store.getWithSource(origin, identity.agentId);
+        if (found !== undefined) {
+            count++;
+            soleAgent = identity.agentId; // meaningful only when count ends at 1
+        }
+    }
+    if (count === 0)
+        return { setUp: false, source: "none", agentId: undefined, storedCount: 0 };
+    return { setUp: true, source: "stored", agentId: count === 1 ? soleAgent : undefined, storedCount: count };
+}
+//# sourceMappingURL=status.js.map

package/dist/onboarding/status.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"status.js","sourceRoot":"","sources":["../../src/onboarding/status.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,oGAAoG;AACpG,oGAAoG;AACpG,sFAAsF;AACtF,EAAE;AACF,mGAAmG;AACnG,kGAAkG;AAClG,mGAAmG;AACnG,4EAA4E;AAI5E,OAAO,EAAE,QAAQ,EAAE,MAAM,0BAA0B,CAAC;AAgBpD;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,MAAsB,EACtB,SAAyC;IAEzC,qGAAqG;IACrG,yEAAyE;IACzE,IAAI,MAAM,CAAC,WAAW,KAAK,KAAK,EAAE,CAAC;QACjC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC;IACjF,CAAC;IACD,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACxC,MAAM,KAAK,GAAG,MAAM,SAAS,EAAE,CAAC;IAEhC,oGAAoG;IACpG,kGAAkG;IAClG,6FAA6F;IAC7F,oEAAoE;IACpE,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QACjC,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,aAAa,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;QAChE,OAAO,KAAK,KAAK,SAAS;YACxB,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,WAAW,EAAE,CAAC,EAAE;YAC5E,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC;IAC3E,CAAC;IAED,kGAAkG;IAClG,sFAAsF;IACtF,MAAM,MAAM,GAAG,CAAC,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;IACrF,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,SAA6B,CAAC;IAClC,KAAK,MAAM,QAAQ,IAAI,MAAM,EAAE,CAAC;QAC9B,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,aAAa,CAAC,MAAM,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;QAClE,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,KAAK,EAAE,CAAC;YACR,SAAS,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,uCAAuC;QACvE,CAAC;IACH,CAAC;IACD,IAAI,KAAK,KAAK,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC;IAC7F,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;AAC7G,CAAC"}

package/dist/os.d.ts

@@ -0,0 +1,16 @@
+/** Read an OS value that can throw (notably `process.cwd()` when the working dir was removed), degrading
+ *  to "" so a caller never crashes on an OS value it may not even need. */
+export declare function safeOsValue(read: () => string): string;
+/**
+ * Resolve the absolute config-home directory (`$XDG_CONFIG_HOME`, else `~/.config`) with the
+ * credential-safety discipline the TRUSTED user-side files require: prefer an ABSOLUTE
+ * `$XDG_CONFIG_HOME`, else `~/.config` when the home dir is absolute, else undefined. A relative or
+ * blank XDG is IGNORED on purpose — a relative path would resolve against cwd and let a repo-committed
+ * file masquerade as user-global config (bypassing per-project rejection). This is the single source of
+ * truth for that invariant, shared by the user config loader (`config-file.ts`, `config.toml`) and the
+ * directory-binding store (`bindings.ts`, `bindings.json`).
+ */
+export declare function resolveXdgConfigHome(env: {
+    homedir: string;
+    xdgConfigHome: string | undefined;
+}): string | undefined;

package/dist/os.js

@@ -0,0 +1,32 @@
+// Small OS-value helpers shared across the CLI. Kept out of any feature module so a generic guard has a
+// neutral home (not `config-file.ts`, which owns TOML loading, nor a command module).
+import { isAbsolute, join } from "node:path";
+/** Read an OS value that can throw (notably `process.cwd()` when the working dir was removed), degrading
+ *  to "" so a caller never crashes on an OS value it may not even need. */
+export function safeOsValue(read) {
+    try {
+        return read();
+    }
+    catch {
+        return "";
+    }
+}
+/**
+ * Resolve the absolute config-home directory (`$XDG_CONFIG_HOME`, else `~/.config`) with the
+ * credential-safety discipline the TRUSTED user-side files require: prefer an ABSOLUTE
+ * `$XDG_CONFIG_HOME`, else `~/.config` when the home dir is absolute, else undefined. A relative or
+ * blank XDG is IGNORED on purpose — a relative path would resolve against cwd and let a repo-committed
+ * file masquerade as user-global config (bypassing per-project rejection). This is the single source of
+ * truth for that invariant, shared by the user config loader (`config-file.ts`, `config.toml`) and the
+ * directory-binding store (`bindings.ts`, `bindings.json`).
+ */
+export function resolveXdgConfigHome(env) {
+    const xdg = env.xdgConfigHome?.trim();
+    const home = env.homedir.trim();
+    return xdg !== undefined && xdg !== "" && isAbsolute(xdg)
+        ? xdg
+        : home !== "" && isAbsolute(home)
+            ? join(home, ".config")
+            : undefined;
+}
+//# sourceMappingURL=os.js.map

package/dist/os.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"os.js","sourceRoot":"","sources":["../src/os.ts"],"names":[],"mappings":"AAAA,wGAAwG;AACxG,sFAAsF;AAEtF,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAE7C;2EAC2E;AAC3E,MAAM,UAAU,WAAW,CAAC,IAAkB;IAC5C,IAAI,CAAC;QACH,OAAO,IAAI,EAAE,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,oBAAoB,CAAC,GAGpC;IACC,MAAM,GAAG,GAAG,GAAG,CAAC,aAAa,EAAE,IAAI,EAAE,CAAC;IACtC,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;IAChC,OAAO,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,EAAE,IAAI,UAAU,CAAC,GAAG,CAAC;QACvD,CAAC,CAAC,GAAG;QACL,CAAC,CAAC,IAAI,KAAK,EAAE,IAAI,UAAU,CAAC,IAAI,CAAC;YAC/B,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC;YACvB,CAAC,CAAC,SAAS,CAAC;AAClB,CAAC"}

package/dist/url.d.ts

@@ -0,0 +1,8 @@
+export declare function isHttpUrl(value: string): boolean;
+/** Derive the Hub origin (scheme+host+port) from a base URL, for Hub-scoped keying (cli spec §5.1) —
+ *  the credential store key `<origin>|<agent id>` and the origin-scoped directory bindings. A single
+ *  definition shared by the config layer (config.ts, binding-origin resolution) and the auth layer
+ *  (auth/resolve-token.ts, store keying); housed here so neither layer depends on the other. Falls
+ *  back to the raw string when the URL can't be parsed (resolveConfig guarantees a valid default, so
+ *  this is belt-and-suspenders). */
+export declare function originOf(baseUrl: string): string;

package/dist/url.js

@@ -0,0 +1,29 @@
+// Shared http(s) URL scheme guard. A server-supplied URL is safe to hand to a browser opener, or to
+// accept as a callback / verification URL, only when its scheme is http(s) — never file: / javascript:
+// / data: etc. Consolidated here after the guard reached three copies (login.ts device-code flow,
+// onboarding/open-url.ts, messaging/validate.ts); a scheme check is security-relevant, so it should
+// have one definition and one rationale, not three that can drift apart.
+export function isHttpUrl(value) {
+    try {
+        const { protocol } = new URL(value);
+        return protocol === "http:" || protocol === "https:";
+    }
+    catch {
+        return false;
+    }
+}
+/** Derive the Hub origin (scheme+host+port) from a base URL, for Hub-scoped keying (cli spec §5.1) —
+ *  the credential store key `<origin>|<agent id>` and the origin-scoped directory bindings. A single
+ *  definition shared by the config layer (config.ts, binding-origin resolution) and the auth layer
+ *  (auth/resolve-token.ts, store keying); housed here so neither layer depends on the other. Falls
+ *  back to the raw string when the URL can't be parsed (resolveConfig guarantees a valid default, so
+ *  this is belt-and-suspenders). */
+export function originOf(baseUrl) {
+    try {
+        return new URL(baseUrl).origin;
+    }
+    catch {
+        return baseUrl;
+    }
+}
+//# sourceMappingURL=url.js.map

package/dist/url.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"url.js","sourceRoot":"","sources":["../src/url.ts"],"names":[],"mappings":"AAAA,oGAAoG;AACpG,uGAAuG;AACvG,kGAAkG;AAClG,oGAAoG;AACpG,yEAAyE;AACzE,MAAM,UAAU,SAAS,CAAC,KAAa;IACrC,IAAI,CAAC;QACH,MAAM,EAAE,QAAQ,EAAE,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;QACpC,OAAO,QAAQ,KAAK,OAAO,IAAI,QAAQ,KAAK,QAAQ,CAAC;IACvD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;oCAKoC;AACpC,MAAM,UAAU,QAAQ,CAAC,OAAe;IACtC,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,CAAC;IACjB,CAAC;AACH,CAAC"}

package/dist/version.d.ts

@@ -1,8 +1,16 @@
 /** The MA2H wire protocol version this CLI targets (docs/specs/cli.md §3). */
 export declare const MA2H_WIRE_VERSION = "v0.3";
 /**
- * The CLI's own version, read from package.json relative to this module. Works both when
- * run from `dist/version.js` and from `src/version.ts` via tsx — both sit one level under
- * the package root, so `../package.json` resolves to the manifest either way.
+ * The CLI's own version.
+ *
+ * A standalone binary built by `bun build --compile` (issue #344) has no package.json on the
+ * real filesystem to read, so the dist workflow inlines the version at compile time: it sets
+ * OH_HAI_BUILD_VERSION in the build env and passes `--env='OH_HAI_BUILD_*'`, which freezes this
+ * `process.env.OH_HAI_BUILD_VERSION` read into the bundle as a literal. We prefer that value **only
+ * when running as the compiled Bun executable** (`process.versions.bun` is set) — so a stray
+ * OH_HAI_BUILD_VERSION in the environment can NOT hijack `--version` on the npm/Node path, which
+ * stays exactly as before: fall back to reading the manifest relative to this module. That read
+ * works both from `dist/version.js` and `src/version.ts` via tsx — both sit one level under the
+ * package root, so `../package.json` resolves to the manifest either way.
  */
 export declare function cliVersion(): string;

package/dist/version.js

@@ -5,11 +5,28 @@ import { fileURLToPath } from "node:url";
 /** The MA2H wire protocol version this CLI targets (docs/specs/cli.md §3). */
 export const MA2H_WIRE_VERSION = "v0.3";
 /**
- * The CLI's own version, read from package.json relative to this module. Works both when
- * run from `dist/version.js` and from `src/version.ts` via tsx — both sit one level under
- * the package root, so `../package.json` resolves to the manifest either way.
+ * The CLI's own version.
+ *
+ * A standalone binary built by `bun build --compile` (issue #344) has no package.json on the
+ * real filesystem to read, so the dist workflow inlines the version at compile time: it sets
+ * OH_HAI_BUILD_VERSION in the build env and passes `--env='OH_HAI_BUILD_*'`, which freezes this
+ * `process.env.OH_HAI_BUILD_VERSION` read into the bundle as a literal. We prefer that value **only
+ * when running as the compiled Bun executable** (`process.versions.bun` is set) — so a stray
+ * OH_HAI_BUILD_VERSION in the environment can NOT hijack `--version` on the npm/Node path, which
+ * stays exactly as before: fall back to reading the manifest relative to this module. That read
+ * works both from `dist/version.js` and `src/version.ts` via tsx — both sit one level under the
+ * package root, so `../package.json` resolves to the manifest either way.
  */
 export function cliVersion() {
+    // Build-time injected version — trusted ONLY under Bun (the compiled binary), never on the
+    // Node/npm path, so an ambient OH_HAI_BUILD_VERSION can't spoof the npm CLI's version. In the
+    // compiled binary `process.env.OH_HAI_BUILD_VERSION` is the frozen `--env` literal, not a live
+    // read. Empty string is not a valid version, so an unset/blank value falls through to the manifest.
+    const runningUnderBun = typeof process.versions.bun === "string";
+    const injected = process.env.OH_HAI_BUILD_VERSION;
+    if (runningUnderBun && typeof injected === "string" && injected.length > 0) {
+        return injected;
+    }
     try {
         const manifestUrl = new URL("../package.json", import.meta.url);
         const raw = readFileSync(fileURLToPath(manifestUrl), "utf8");

package/dist/version.js.map

@@ -1 +1 @@
-{"version":3,"file":"version.js","sourceRoot":"","sources":["../src/version.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,4FAA4F;AAE5F,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,8EAA8E;AAC9E,MAAM,CAAC,MAAM,iBAAiB,GAAG,MAAM,CAAC;AAExC;;;;GAIG;AACH,MAAM,UAAU,UAAU;IACxB,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,iBAAiB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChE,MAAM,GAAG,GAAG,YAAY,CAAC,aAAa,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC,CAAC;QAC7D,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA0B,CAAC;QACxD,OAAO,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC;IACvE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,CAAC;IACjB,CAAC;AACH,CAAC"}
+{"version":3,"file":"version.js","sourceRoot":"","sources":["../src/version.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,4FAA4F;AAE5F,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,8EAA8E;AAC9E,MAAM,CAAC,MAAM,iBAAiB,GAAG,MAAM,CAAC;AAExC;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,UAAU;IACxB,2FAA2F;IAC3F,8FAA8F;IAC9F,+FAA+F;IAC/F,oGAAoG;IACpG,MAAM,eAAe,GAAG,OAAQ,OAAO,CAAC,QAA6B,CAAC,GAAG,KAAK,QAAQ,CAAC;IACvF,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC;IAClD,IAAI,eAAe,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3E,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,iBAAiB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChE,MAAM,GAAG,GAAG,YAAY,CAAC,aAAa,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC,CAAC;QAC7D,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA0B,CAAC;QACxD,OAAO,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC;IACvE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,CAAC;IACjB,CAAC;AACH,CAAC"}