@runcofactor/cli 0.57.0 → 0.58.0

package/dist/{chunk-N55RKCGR.js → chunk-V22CGGHO.js}

@@ -14,6 +14,11 @@ function stripDeployedStageEnv(argv) {
   return result;
 }
 function normalizeGlobalCommandOptions(command, rest, options) {
+  if (command === "usage" && rest[0] === "report") {
+    return options.filter(
+      (arg, index) => arg !== "--org" && options[index - 1] !== "--org" && !arg.startsWith("--org=")
+    );
+  }
   return command === "trigger" && rest[0] === "deployed" ? stripDeployedStageEnv(options) : options;
 }
 
@@ -21,4 +26,4 @@ export {
   stripDeployedStageEnv,
   normalizeGlobalCommandOptions
 };
-//# sourceMappingURL=chunk-N55RKCGR.js.map
+//# sourceMappingURL=chunk-V22CGGHO.js.map

package/dist/chunk-V22CGGHO.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/trigger-options.ts"],"sourcesContent":["/** Option normalization shared by the CLI entry point and trigger auth setup. */\n\nexport function stripDeployedStageEnv(argv: string[]): string[] {\n  const result: string[] = [];\n  for (let i = 0; i < argv.length; i++) {\n    if (argv[i] === '--env') {\n      i++;\n      continue;\n    }\n    if (argv[i]?.startsWith('--env=')) continue;\n    result.push(argv[i]!);\n  }\n  return result;\n}\n\nexport function normalizeGlobalCommandOptions(\n  command: string | undefined,\n  rest: string[],\n  options: string[]\n): string[] {\n  if (command === 'usage' && rest[0] === 'report') {\n    // The internal report's --org filters data; it does not select a login.\n    return options.filter(\n      (arg, index) => arg !== '--org' && options[index - 1] !== '--org' && !arg.startsWith('--org=')\n    );\n  }\n  return command === 'trigger' && rest[0] === 'deployed' ? stripDeployedStageEnv(options) : options;\n}\n"],"mappings":";;;AAEO,SAAS,sBAAsB,MAA0B;AAC9D,QAAM,SAAmB,CAAC;AAC1B,WAAS,IAAI,GAAG,IAAI,KAAK,QAAQ,KAAK;AACpC,QAAI,KAAK,CAAC,MAAM,SAAS;AACvB;AACA;AAAA,IACF;AACA,QAAI,KAAK,CAAC,GAAG,WAAW,QAAQ,EAAG;AACnC,WAAO,KAAK,KAAK,CAAC,CAAE;AAAA,EACtB;AACA,SAAO;AACT;AAEO,SAAS,8BACd,SACA,MACA,SACU;AACV,MAAI,YAAY,WAAW,KAAK,CAAC,MAAM,UAAU;AAE/C,WAAO,QAAQ;AAAA,MACb,CAAC,KAAK,UAAU,QAAQ,WAAW,QAAQ,QAAQ,CAAC,MAAM,WAAW,CAAC,IAAI,WAAW,QAAQ;AAAA,IAC/F;AAAA,EACF;AACA,SAAO,YAAY,aAAa,KAAK,CAAC,MAAM,aAAa,sBAAsB,OAAO,IAAI;AAC5F;","names":[]}

package/dist/{chunk-YFXTMFYB.js → chunk-V6OC2WQL.js}

@@ -2,22 +2,22 @@ import { createRequire as __cr } from "module"; import { fileURLToPath as __fup
 import {
   ENV_VAR_NAME,
   updateEnvVarDefinitions
-} from "./chunk-SBQLD7X6.js";
+} from "./chunk-PN5IK7CJ.js";
 import {
   UUID_RE,
   apiRequest,
   fetchProperties,
   readStdin,
   stripOneTrailingNewline
-} from "./chunk-72Y65NWI.js";
+} from "./chunk-WY4R4IL5.js";
 import {
   getArgValue,
   hasFlag,
   resolveConfig
-} from "./chunk-IIDQM4MY.js";
+} from "./chunk-BMFD4OPC.js";
 import {
   writeRawOutput
-} from "./chunk-T6ZNIMI4.js";
+} from "./chunk-LRIP5IQD.js";
 
 // src/environment.ts
 import process from "process";
@@ -769,4 +769,4 @@ export {
   handleSetVar,
   runEnvironment
 };
-//# sourceMappingURL=chunk-YFXTMFYB.js.map
+//# sourceMappingURL=chunk-V6OC2WQL.js.map

package/dist/{chunk-YV4RASGX.js → chunk-W43YGZOP.js}

@@ -1,11 +1,11 @@
 import { createRequire as __cr } from "module"; import { fileURLToPath as __fup } from "url"; import { dirname as __dn } from "path"; const require = __cr(import.meta.url); const __filename = __fup(import.meta.url); const __dirname = __dn(__filename);
 import {
   getGuideSectionArg
-} from "./chunk-72Y65NWI.js";
+} from "./chunk-WY4R4IL5.js";
 import {
   hasFlag,
   resolveApiUrl
-} from "./chunk-IIDQM4MY.js";
+} from "./chunk-BMFD4OPC.js";
 import {
   EVAL_GUIDE_SECTIONS,
   EXPLORATORY_TEST_GUIDE_SECTIONS,
@@ -18,7 +18,7 @@ import {
   command,
   stripControlCharacters,
   version
-} from "./chunk-T6ZNIMI4.js";
+} from "./chunk-LRIP5IQD.js";
 
 // ../content/src/sandbox-v2-guide/support.ts
 var SANDBOX_V2_SUPPORT_MATRIX = [
@@ -405,6 +405,14 @@ function filterGuideForCli(content, cliVersion) {
   return out.join("\n");
 }
 
+// ../content/src/dev-guide/setup.txt
+var setup_default = "An ADE is your remote coding environment. An agent can inspect and apply laptop\nsetup without a terminal. Only browser approvals need the person.\n\n1. Plan without changing the laptop or sending credentials:\n     cofactor dev setup --plan --json --env <dev|prod> --org <org> [--template <name>]\n   Read every decision, its findings, recommended default, consequences and exact\n   flags. The plan lists the selected published template's repositories. It never\n   prints token values or file contents. No sign-in command runs during planning.\n\n2. Ask the person which logins and file groups they want to send. Explain:\n   --github=token reuses their current gh token; it creates no new GitHub key.\n     Both clone and push use HTTPS with gh auth git-credential in the ADE.\n   --github=none sends no GitHub token. Private repos need browser sign-in inside\n     the ADE before clone/push can work; none does not mean repos need no login.\n   --claude=token uses a dedicated CLAUDE_CODE_OAUTH_TOKEN from the environment or\n     the local ADE cache, never laptop OAuth refresh credentials.\n   --claude=in-box leaves Claude sign-in to the attached ADE browser flow.\n   --codex-key=yes sends an explicit OPENAI_API_KEY and uses API billing.\n     --codex-key=no leaves Codex to in-box browser sign-in when selected.\n   --git-identity=yes sends the global author name/email, not authentication.\n     --git-identity=no leaves them for the user to configure before committing.\n   --include=none sends no optional files. Or combine any of claude-settings,\n     claude-skills, claude-memory, codex-config,shell with commas. Review these\n     locally: settings/dotfiles can contain secrets and laptop-specific commands.\n     Claude settings.env, OAuth auth.json, symlinks and hardlinks are excluded.\n\n3. Only the plan's needsYou browser steps require the person. Each supplies the\n   exact command prefixed with ! for the person to run in their local terminal.\n   GitHub: !gh auth login --hostname github.com --git-protocol https --web\n   Claude: !claude setup-token\n   The latter creates a dedicated token. Keep it out of chat/logs and export it\n   as CLAUDE_CODE_OAUTH_TOKEN in the environment running setup; an existing ADE\n   token cache is also accepted. Browser steps are conditional on choosing token;\n   choosing none/in-box defers sign-in to the attached ADE. Run the plan again\n   after the person finishes; the agent should never request a token in chat.\n\n4. Apply the person's complete explicit choices without prompts, for example:\n     cofactor dev setup --yes --github=token --claude=token --codex-key=no --git-identity=yes --include=none --env dev --org <org>\n   All five decision flags are required even when skipping. Missing decisions\n   error with --plan guidance; --yes never launches browser login or a prompt.\n   Choices and transfer consent are saved privately on the laptop. Credentials\n   are read again at each claim, never stored in the choices file. If a selected\n   credential disappears, setup errors with guidance instead of silently changing\n   the person's choices.\n\n5. Claim with the same org/environment/template:\n     cofactor dev --env dev --org <org> [--template <name>]\n   New homes receive the selected items privately through SSH, without asking\n   again. Existing prepared homes reuse their saved settings and setup marker.\n   Re-running setup changes laptop choices for new homes; it does not overwrite\n   an already prepared home. Interactive `cofactor dev setup` remains available\n   for humans and uses the same decisions and consequences.\n\nLaptop SSH private keys never leave the laptop. There is no SSH file group and\nno deploy key is needed. The separate ADE attach key stays on the laptop; only\nits public half is authorized for access to the session. It is unrelated to\nGitHub cloning/pushing. Personal AWS files are never imported; explicitly select\napproved organization AWS connections at claim if you need AWS access.\n";
+
+// ../content/src/dev-guide/index.ts
+var DEV_GUIDE_SECTIONS = [
+  { title: "Set up an ADE with an agent", slug: "setup", content: setup_default }
+];
+
 // ../content/src/product-map-guide/voice.txt
 var voice_default = `The product map describes THE PRODUCT \u2014 what it does today, in the
 present tense, as a person who has never seen a test run would need it
@@ -2481,7 +2489,8 @@ var GUIDES = {
   session: SESSION_GUIDE_SECTIONS,
   proofs: PROOFS_GUIDE_SECTIONS,
   perf: PERF_GUIDE_SECTIONS,
-  eval: EVAL_GUIDE_SECTIONS
+  eval: EVAL_GUIDE_SECTIONS,
+  dev: DEV_GUIDE_SECTIONS
 };
 function filterGuideSections(sections, cliVersion) {
   if (!isCliVersion(cliVersion)) throw new Error("Invalid cliVersion");
@@ -2489,7 +2498,10 @@ function filterGuideSections(sections, cliVersion) {
     try {
       return { ...s, content: filterGuideForCli(s.content, cliVersion) };
     } catch (cause) {
-      throw new Error(`Guide section "${s.slug}": ${cause instanceof Error ? cause.message : String(cause)}`, { cause });
+      throw new Error(
+        `Guide section "${s.slug}": ${cause instanceof Error ? cause.message : String(cause)}`,
+        { cause }
+      );
     }
   });
 }
@@ -2561,4 +2573,4 @@ export {
   SANDBOX_V2_GUIDE_SECTIONS,
   printServedGuide
 };
-//# sourceMappingURL=chunk-YV4RASGX.js.map
+//# sourceMappingURL=chunk-W43YGZOP.js.map