@opentig/cli 0.0.0-reserved.0 → 0.1.2

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 OpenTig contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,37 @@
+# OpenTig CLI
+
+Run the same authenticated OpenTig server, runtime, protocol, and production web client used by the Windows desktop application.
+
+OpenTig is local-first: it works with existing Git repositories on the machine running the server. Node.js 24 or later and Git are required.
+
+## Local use
+
+Pin an exact version for repeatable use:
+
+```bash
+npx --yes @opentig/cli@0.1.0
+npx --yes @opentig/cli@0.1.0 serve
+bunx @opentig/cli@0.1.0 serve
+```
+
+Plain `bunx` installs and launches the Node-shebang executable. Running OpenTig under the Bun runtime itself is not supported.
+
+Run `opentig help` or `opentig --help` for commands, examples, pairing/tunnel guidance, service management, environment variables, and shutdown behavior.
+
+`opentig` and `opentig start` open the pairing link in the system browser. `opentig serve` keeps browser launch disabled and prints a terminal QR. Use `--no-browser` to suppress presentation in start mode. The CLI starts one project-independent server; add, open, and switch repositories exclusively from the web UI using paths on the server.
+
+The default listener is `127.0.0.1:6767`. If the configured port is busy, OpenTig fails instead of silently changing a reverse-proxy target. Configuration precedence is command line, `OPENTIG_HOST` / `OPENTIG_PORT` / `OPENTIG_HOME`, then defaults. Data lives under `~/.opentig` unless `--home` is supplied. Settings, hash-only sessions, AI history, credential-free runtime identity, a private same-host admin credential, and rotating logs are kept there.
+
+Run `opentig pair --home <same-home>` as the same OS user to mint a new five-minute, one-use code and link for a running server. Open `/pair` on the local, LAN, or tunnel domain, paste the code, and confirm or edit the suggested device name. SIGINT and SIGTERM close clients, watchers, owned Git/AI processes, persistence, and logs; a second signal forces exit.
+
+`npx` and `bunx` never install background persistence. Linux/systemd users can opt in with `opentig service install`, inspect it with `opentig service status`, and remove it with `opentig service uninstall`. The installer stages the exact package outside the temporary npx cache, uses the private OpenTig home as its stable working directory, and enables user lingering. It is never scoped to a repository. Other platforms should use their preferred service manager for now.
+
+A non-loopback listener grants authenticated owner sessions the filesystem, Git, GitHub CLI, and configured AI CLI authority of the operating-system account running OpenTig. Use a trusted LAN/VPN, HTTPS reverse proxy, or SSH tunnel with a restrictive firewall. Never expose the raw HTTP port to the public Internet or use unencrypted non-loopback HTTP on an untrusted network.
+
+Pin versions for production. Upgrade or roll back by stopping the process and running a different immutable version. Docker, built-in TLS, Tailscale/SSH automation, multi-user roles, and self-update are not included.
+
+Source, documentation, and security guidance: <https://github.com/jorgefl8/opentig>
+
+## License
+
+MIT. Bundled third-party assets retain their own licences; see `THIRD_PARTY_NOTICES.md`.

package/THIRD_PARTY_NOTICES.md

@@ -0,0 +1,21 @@
+# Third-party notices
+
+## vscode-icons
+
+Files bundled into the production client originate from the [vscode-icons project](https://github.com/vscode-icons/vscode-icons).
+
+- Project source code: MIT License
+- Icons: Creative Commons Attribution-ShareAlike 4.0 International
+- Branded icons remain subject to their respective owners' copyright and trademark terms
+
+## trash
+
+OpenTig uses [`trash`](https://github.com/sindresorhus/trash) 10.1.1 under the MIT License to move files and folders to system Trash on Windows, macOS, and Linux.
+
+## ws
+
+OpenTig uses [`ws`](https://github.com/websockets/ws) 8.21.3 under the MIT License for its authenticated WebSocket transport.
+
+## uqr
+
+OpenTig bundles [`uqr`](https://github.com/unjs/uqr) 0.1.3 into the CLI to render one-use pairing links as terminal QR codes. It is licensed under the MIT License.

package/dist/bin.mjs

@@ -0,0 +1,28 @@
+#!/usr/bin/env node
+import process from "node:process";
+import { r as runCli } from "./chunks/cli-bEPXlEpH.mjs";
+import "node:child_process";
+import "./server.mjs";
+import "node:url";
+import "node:path";
+import "node:crypto";
+import "node:fs/promises";
+import "node:string_decoder";
+import "node:util";
+import "node:tty";
+import "node:timers/promises";
+import "node:os";
+import "node:events";
+import "node:v8";
+import "node:fs";
+import "node:buffer";
+import "node:stream";
+import "node:stream/promises";
+import "node:path/win32";
+import "child_process";
+import "path";
+import "fs";
+import "node:net";
+import "node:http";
+import "ws";
+process.exitCode = await runCli(process.argv.slice(2));