@scitus/hazel 0.0.1

package/LICENSE

@@ -0,0 +1,40 @@
+Proprietary Software License Agreement
+
+Copyright (c) 2024-2026 Scitus Solutions Ltd. All Rights Reserved.
+
+This software and associated documentation files (the "Software") are the
+exclusive property of Scitus Solutions Ltd.
+
+TERMS AND CONDITIONS:
+
+1. NO LICENSE GRANTED
+   No license, express or implied, is granted to any person or entity to use,
+   copy, modify, merge, publish, distribute, sublicense, and/or sell copies
+   of the Software.
+
+2. RESTRICTIONS
+   You may NOT:
+   - Use the Software for any purpose without explicit written permission
+   - Copy, reproduce, or duplicate the Software
+   - Modify, adapt, or create derivative works
+   - Distribute, sublicense, lease, or lend the Software
+   - Reverse engineer, decompile, or disassemble the Software
+   - Remove or alter any proprietary notices
+
+3. AUTHORIZED USE
+   Use of this Software is permitted ONLY with a valid license agreement
+   from Scitus Solutions Ltd. Contact licensing@scitus.ca for inquiries.
+
+4. NO WARRANTY
+   THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS
+   OR IMPLIED. SCITUS SOLUTIONS LTD. SHALL NOT BE LIABLE FOR ANY DAMAGES
+   ARISING FROM THE USE OR INABILITY TO USE THE SOFTWARE.
+
+5. TERMINATION
+   Any unauthorized use automatically terminates any permissions granted
+   and may result in legal action.
+
+For licensing inquiries: licensing@scitus.ca
+Website: https://scitus.ca
+
+Scitus Solutions Ltd.

package/README.md

@@ -0,0 +1,38 @@
+# @hazel/cli
+
+Hazel CLI - Your dedicated AI coding companion from Scitus Solutions Ltd.
+
+## Installation
+
+```bash
+npm install -g @hazel/cli
+```
+
+## Usage
+
+```bash
+hazel
+```
+
+## Features
+
+- AI-powered coding assistant using Gemini
+- File reading (text, PDF, DOCX, XLSX, images, videos)
+- Code editing and writing
+- Gmail integration
+- Local and API modes
+
+## Requirements
+
+- Node.js >= 18.0.0
+- Google Cloud Project (for local mode) or Hazel API access
+
+## Security
+
+See [SECURITY.md](./SECURITY.md) for security information.
+
+## License
+
+Proprietary - Copyright (c) 2024-2026 Scitus Solutions Ltd. All Rights Reserved.
+
+See [LICENSE](./LICENSE) for details.

package/SECURITY.md

@@ -0,0 +1,85 @@
+# Security Policy
+
+## Overview
+
+Hazel CLI is an AI-powered coding assistant. This document outlines security considerations for users and contributors.
+
+## Security Features
+
+### Authentication
+
+- **Password Hashing**: Passwords are hashed using bcrypt with a cost factor of 12
+- **Token Storage**: Authentication tokens are stored with secure file permissions (0600)
+- **Session Management**: Sessions expire after 7 days
+
+### File System Access
+
+- **Path Traversal Protection**: Read, write, and edit operations validate paths to prevent directory traversal attacks
+- **Sensitive File Blocking**: Access to system files (`/etc/`, `/.ssh/`, credentials files) is blocked
+- **Working Directory Restriction**: Write/edit operations are restricted to the current working directory
+
+### Code Execution
+
+#### Bash Tool
+- Executes shell commands (by design)
+- **Environment Variable Filtering**: Sensitive environment variables (API keys, tokens, secrets) are NOT passed to spawned processes
+- **Timeout Protection**: Commands timeout after configurable duration (default: 2 minutes)
+
+#### Python Tool
+- Executes Python code with restrictions
+- **Blocked Operations**:
+  - File access (`open`, `read`, `write`)
+  - Network access (`socket`, `urllib`, `requests`)
+  - System access (`os`, `subprocess`, `sys`)
+  - Code execution (`eval`, `exec`, `__import__`)
+  - Dangerous introspection (`__builtins__`, `__globals__`, `__subclasses__`)
+- **Allowed Modules**: `math`, `datetime`, `json`, `re`, `random`, `statistics`, `decimal`, `fractions`, `collections`
+- **Timeout**: 30 second execution limit
+
+**Important**: The Python tool's restrictions are pattern-based and not a true sandbox. Sophisticated attacks may bypass these restrictions. For high-security environments, consider containerized execution.
+
+## Reporting Security Issues
+
+If you discover a security vulnerability, please report it by:
+
+1. **DO NOT** create a public GitHub issue
+2. Email security concerns to the maintainers
+3. Include:
+   - Description of the vulnerability
+   - Steps to reproduce
+   - Potential impact
+   - Suggested fix (if any)
+
+## Security Best Practices for Users
+
+1. **API Keys**: Never commit API keys or tokens to version control
+2. **Permissions**: Run Hazel with minimum necessary permissions
+3. **Review**: Review AI-generated code before execution
+4. **Updates**: Keep Hazel updated to get security patches
+
+## Development Security Guidelines
+
+1. **Dependencies**: Regularly run `npm audit` and update vulnerable packages
+2. **Input Validation**: All user input must be validated before use
+3. **Path Handling**: Always use path validation functions for file operations
+4. **Credentials**: Never log or expose credentials in error messages
+
+## Known Limitations
+
+1. **Bash Tool**: By design, allows arbitrary command execution. Users must trust the AI or review commands.
+2. **Python Sandbox**: Pattern-based blocking can be bypassed by sophisticated attacks
+3. **Local Authentication**: The local auth module is for convenience, not for high-security scenarios. Use device flow authentication for production.
+
+## Dependency Notes
+
+- **bcrypt**: Uses `@mapbox/node-pre-gyp` for native binary installation, which has a build-time dependency on `tar`. Any reported vulnerabilities in these packages only affect the installation process, not runtime security.
+- Run `npm audit` regularly to check for new vulnerabilities
+
+## Changelog
+
+### v0.1.0
+- Initial security implementation
+- bcrypt password hashing
+- Path traversal protection
+- Environment variable filtering
+- Python execution restrictions

package/dist/auth/device.d.ts

@@ -0,0 +1,90 @@
+/**
+ * Device Flow Authentication for Hazel CLI
+ *
+ * This module handles CLI authentication using device authorization flow.
+ * No local HTTP server needed - user enters code shown in browser.
+ *
+ * Environment Variables:
+ *   SCITUS_CA_URL       - Scitus CA OIDC provider URL (e.g., http://localhost:4025)
+ *   AUTH_DISABLED       - Set to 'true' to disable auth (dev mode)
+ *   DEV_USER            - Username for dev mode
+ */
+interface LocalConfig {
+    scitus_ca_url?: string;
+    hazel_api_url?: string;
+}
+/**
+ * Save local config to ~/.hazel/config.json
+ */
+export declare function saveLocalConfig(config: LocalConfig): Promise<void>;
+/**
+ * Get the local config file path (for display to user)
+ */
+export declare function getConfigFilePath(): string;
+/**
+ * Get the current Scitus CA URL (exported for OAuth device flow only)
+ * Note: Other API calls should use getHazelApiUrl() instead
+ */
+export declare function getScitusCaUrl(): Promise<string>;
+/**
+ * Get Hazel API URL for all API calls (except OAuth device flow)
+ * Priority: Local config file > env var > production default
+ *
+ * The Hazel API proxies requests to Scitus CA with server-side API key auth,
+ * so CLI doesn't need to know about Scitus CA API keys.
+ */
+export declare function getHazelApiUrl(): Promise<string>;
+/**
+ * Check if auth is disabled (dev mode)
+ */
+export declare function isAuthDisabled(): boolean;
+/**
+ * Check if device auth is configured
+ */
+export declare function isDeviceAuthConfigured(): boolean;
+/**
+ * Clear tokens (logout)
+ */
+export declare function clearTokens(): Promise<void>;
+/**
+ * Get current authenticated user
+ */
+export declare function getCurrentUser(): Promise<{
+    authenticated: boolean;
+    user?: {
+        sub: string;
+        email?: string;
+        name?: string;
+        username?: string;
+    };
+}>;
+/**
+ * Main authentication function using device flow
+ */
+export declare function authenticate(callbacks?: {
+    onShowCode?: (userCode: string, verificationUri: string) => void;
+    onWaitingForUser?: () => void;
+    onReadInput?: () => Promise<string>;
+}): Promise<{
+    success: boolean;
+    user?: {
+        sub: string;
+        email?: string;
+        name?: string;
+        username?: string;
+    };
+    error?: string;
+}>;
+/**
+ * Logout - clear tokens
+ */
+export declare function logout(): Promise<{
+    success: boolean;
+    message: string;
+}>;
+/**
+ * Get stored access token (for API calls)
+ */
+export declare function getAccessToken(): Promise<string | null>;
+export {};
+//# sourceMappingURL=device.d.ts.map

package/dist/auth/device.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"device.d.ts","sourceRoot":"","sources":["../../src/auth/device.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAeH,UAAU,WAAW;IACnB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAcD;;GAEG;AACH,wBAAsB,eAAe,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAKxE;AAED;;GAEG;AACH,wBAAgB,iBAAiB,IAAI,MAAM,CAE1C;AA4DD;;;GAGG;AACH,wBAAsB,cAAc,IAAI,OAAO,CAAC,MAAM,CAAC,CAEtD;AAED;;;;;;GAMG;AACH,wBAAsB,cAAc,IAAI,OAAO,CAAC,MAAM,CAAC,CAKtD;AAED;;GAEG;AACH,wBAAgB,cAAc,IAAI,OAAO,CAExC;AAED;;GAEG;AACH,wBAAgB,sBAAsB,IAAI,OAAO,CAMhD;AAsCD;;GAEG;AACH,wBAAsB,WAAW,IAAI,OAAO,CAAC,IAAI,CAAC,CAOjD;AAED;;GAEG;AACH,wBAAsB,cAAc,IAAI,OAAO,CAAC;IAC9C,aAAa,EAAE,OAAO,CAAC;IACvB,IAAI,CAAC,EAAE;QACL,GAAG,EAAE,MAAM,CAAC;QACZ,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,CAAC;CACH,CAAC,CA8BD;AAkED;;GAEG;AACH,wBAAsB,YAAY,CAChC,SAAS,CAAC,EAAE;IACV,UAAU,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,KAAK,IAAI,CAAC;IACjE,gBAAgB,CAAC,EAAE,MAAM,IAAI,CAAC;IAC9B,WAAW,CAAC,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;CACrC,GACA,OAAO,CAAC;IACT,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,CAAC,EAAE;QACL,GAAG,EAAE,MAAM,CAAC;QACZ,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,CAAC;IACF,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,CAAC,CA0GD;AAED;;GAEG;AACH,wBAAsB,MAAM,IAAI,OAAO,CAAC;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC,CAW7E;AAED;;GAEG;AACH,wBAAsB,cAAc,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAO7D"}

package/dist/auth/device.js

@@ -0,0 +1,345 @@
+/**
+ * Device Flow Authentication for Hazel CLI
+ *
+ * This module handles CLI authentication using device authorization flow.
+ * No local HTTP server needed - user enters code shown in browser.
+ *
+ * Environment Variables:
+ *   SCITUS_CA_URL       - Scitus CA OIDC provider URL (e.g., http://localhost:4025)
+ *   AUTH_DISABLED       - Set to 'true' to disable auth (dev mode)
+ *   DEV_USER            - Username for dev mode
+ */
+import { readFile, writeFile, mkdir } from 'fs/promises';
+import { existsSync } from 'fs';
+import { join } from 'path';
+import { homedir } from 'os';
+const AUTH_DIR = join(homedir(), '.hazel');
+const TOKEN_FILE = join(AUTH_DIR, 'tokens.json');
+const CONFIG_FILE = join(AUTH_DIR, 'config.json');
+// Default production URLs - no .env needed
+const DEFAULT_SCITUS_CA_URL = 'https://scitus.ca';
+const DEFAULT_HAZEL_API_URL = 'https://api.scitus.ca';
+/**
+ * Load local config from ~/.hazel/config.json
+ */
+async function loadLocalConfig() {
+    try {
+        const content = await readFile(CONFIG_FILE, 'utf-8');
+        return JSON.parse(content);
+    }
+    catch {
+        return {};
+    }
+}
+/**
+ * Save local config to ~/.hazel/config.json
+ */
+export async function saveLocalConfig(config) {
+    await ensureAuthDir();
+    const existing = await loadLocalConfig();
+    const merged = { ...existing, ...config };
+    await writeFile(CONFIG_FILE, JSON.stringify(merged, null, 2), { mode: 0o600 });
+}
+/**
+ * Get the local config file path (for display to user)
+ */
+export function getConfigFilePath() {
+    return CONFIG_FILE;
+}
+// Cached config to avoid repeated file reads
+let cachedLocalConfig = null;
+/**
+ * Get Scitus CA OIDC provider URL
+ * Priority: Local config file > env var > production default
+ */
+async function getAuthServerUrlAsync() {
+    if (!cachedLocalConfig) {
+        cachedLocalConfig = await loadLocalConfig();
+    }
+    return cachedLocalConfig.scitus_ca_url || process.env.SCITUS_CA_URL || DEFAULT_SCITUS_CA_URL;
+}
+/**
+ * Get Scitus CA OIDC provider URL (sync version for backward compat)
+ * Uses cached value if available, otherwise falls back to env/default
+ */
+function getAuthServerUrl() {
+    return cachedLocalConfig?.scitus_ca_url || process.env.SCITUS_CA_URL || DEFAULT_SCITUS_CA_URL;
+}
+/**
+ * Get the current Scitus CA URL (exported for OAuth device flow only)
+ * Note: Other API calls should use getHazelApiUrl() instead
+ */
+export async function getScitusCaUrl() {
+    return getAuthServerUrlAsync();
+}
+/**
+ * Get Hazel API URL for all API calls (except OAuth device flow)
+ * Priority: Local config file > env var > production default
+ *
+ * The Hazel API proxies requests to Scitus CA with server-side API key auth,
+ * so CLI doesn't need to know about Scitus CA API keys.
+ */
+export async function getHazelApiUrl() {
+    if (!cachedLocalConfig) {
+        cachedLocalConfig = await loadLocalConfig();
+    }
+    return cachedLocalConfig.hazel_api_url || process.env.HAZEL_API_URL || DEFAULT_HAZEL_API_URL;
+}
+/**
+ * Check if auth is disabled (dev mode)
+ */
+export function isAuthDisabled() {
+    return process.env.AUTH_DISABLED === 'true';
+}
+/**
+ * Check if device auth is configured
+ */
+export function isDeviceAuthConfigured() {
+    if (isAuthDisabled()) {
+        return true; // Skip check if auth is disabled
+    }
+    // Device auth just needs the auth server URL
+    return !!getAuthServerUrl();
+}
+/**
+ * Ensure auth directory exists
+ */
+async function ensureAuthDir() {
+    if (!existsSync(AUTH_DIR)) {
+        await mkdir(AUTH_DIR, { recursive: true });
+    }
+}
+/**
+ * Load stored tokens
+ */
+async function loadTokens() {
+    try {
+        const content = await readFile(TOKEN_FILE, 'utf-8');
+        const tokens = JSON.parse(content);
+        // Check if expired
+        if (new Date(tokens.expiresAt) < new Date()) {
+            return null;
+        }
+        return tokens;
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Save tokens
+ */
+async function saveTokens(tokens) {
+    await ensureAuthDir();
+    await writeFile(TOKEN_FILE, JSON.stringify(tokens, null, 2), { mode: 0o600 });
+}
+/**
+ * Clear tokens (logout)
+ */
+export async function clearTokens() {
+    try {
+        const { unlink } = await import('fs/promises');
+        await unlink(TOKEN_FILE);
+    }
+    catch {
+        // Ignore
+    }
+}
+/**
+ * Get current authenticated user
+ */
+export async function getCurrentUser() {
+    // Dev mode - return dev user
+    if (isAuthDisabled()) {
+        const devUser = process.env.DEV_USER || 'developer';
+        return {
+            authenticated: true,
+            user: {
+                sub: 'dev-user',
+                email: `${devUser}@localhost`,
+                name: devUser,
+                username: devUser,
+            },
+        };
+    }
+    const tokens = await loadTokens();
+    if (!tokens) {
+        return { authenticated: false };
+    }
+    return {
+        authenticated: true,
+        user: {
+            sub: tokens.user.sub,
+            email: tokens.user.email,
+            name: tokens.user.name,
+            username: tokens.user.preferred_username || tokens.user.email?.split('@')[0],
+        },
+    };
+}
+/**
+ * Start device authorization flow
+ */
+async function startDeviceAuth() {
+    const authServerUrl = await getAuthServerUrlAsync();
+    const response = await fetch(`${authServerUrl}/device/start`, {
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json' },
+        body: JSON.stringify({ client_id: 'hazel-cli', scope: 'openid profile email' }),
+    });
+    if (!response.ok) {
+        const error = await response.text();
+        throw new Error(`Failed to start device auth: ${error}`);
+    }
+    return response.json();
+}
+/**
+ * Poll for tokens after user authorizes
+ */
+async function pollForTokens(deviceCode, userCode, interval, expiresIn) {
+    const authServerUrl = await getAuthServerUrlAsync();
+    const startTime = Date.now();
+    const expiresAt = startTime + expiresIn * 1000;
+    while (Date.now() < expiresAt) {
+        await new Promise(resolve => setTimeout(resolve, interval * 1000));
+        const response = await fetch(`${authServerUrl}/device/token`, {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/json' },
+            body: JSON.stringify({ device_code: deviceCode, user_code: userCode }),
+        });
+        const result = await response.json();
+        if (result.error === 'authorization_pending') {
+            // Keep polling
+            continue;
+        }
+        if (result.error === 'expired_token') {
+            throw new Error('Authorization expired. Please try again.');
+        }
+        if (result.error) {
+            throw new Error(result.error_description || result.error);
+        }
+        if (result.access_token) {
+            return result;
+        }
+    }
+    throw new Error('Authorization timeout');
+}
+/**
+ * Main authentication function using device flow
+ */
+export async function authenticate(callbacks) {
+    // Dev mode - skip authentication
+    if (isAuthDisabled()) {
+        const devUser = process.env.DEV_USER || 'developer';
+        return {
+            success: true,
+            user: {
+                sub: 'dev-user',
+                email: `${devUser}@localhost`,
+                name: devUser,
+                username: devUser,
+            },
+        };
+    }
+    // Check for existing valid tokens
+    const existingTokens = await loadTokens();
+    if (existingTokens) {
+        return {
+            success: true,
+            user: {
+                sub: existingTokens.user.sub,
+                email: existingTokens.user.email,
+                name: existingTokens.user.name,
+                username: existingTokens.user.preferred_username || existingTokens.user.email?.split('@')[0],
+            },
+        };
+    }
+    try {
+        // Start device authorization
+        const deviceAuth = await startDeviceAuth();
+        // Show code to user
+        if (callbacks?.onShowCode) {
+            callbacks.onShowCode(deviceAuth.user_code, deviceAuth.verification_uri);
+        }
+        else {
+            console.log('\n  To login, open this URL in your browser:');
+            console.log(`  ${deviceAuth.verification_uri}`);
+            console.log('\n  Or go to your auth server and enter code:');
+            console.log(`  ${deviceAuth.user_code}\n`);
+        }
+        // Open browser automatically
+        try {
+            const open = await import('open');
+            await open.default(deviceAuth.verification_uri);
+        }
+        catch {
+            // Browser open failed, user can manually open URL
+        }
+        // Wait for user to enter the code
+        if (callbacks?.onWaitingForUser) {
+            callbacks.onWaitingForUser();
+        }
+        else {
+            console.log('  Waiting for you to login in the browser...');
+        }
+        // If we have a way to read input, wait for user to enter code
+        if (callbacks?.onReadInput) {
+            console.log('\n  After logging in, enter the code shown in the browser:');
+            const enteredCode = await callbacks.onReadInput();
+            if (enteredCode.trim().toUpperCase() !== deviceAuth.user_code) {
+                return { success: false, error: 'Code mismatch. Please try again.' };
+            }
+        }
+        // Poll for tokens
+        const tokens = await pollForTokens(deviceAuth.device_code, deviceAuth.user_code, deviceAuth.interval, deviceAuth.expires_in);
+        if (!tokens.access_token || !tokens.user) {
+            return { success: false, error: 'Failed to get tokens' };
+        }
+        // Save tokens
+        const storedTokens = {
+            accessToken: tokens.access_token,
+            idToken: tokens.id_token,
+            refreshToken: tokens.refresh_token,
+            expiresAt: new Date(Date.now() + 7 * 24 * 60 * 60 * 1000).toISOString(), // 7 days
+            user: tokens.user,
+        };
+        await saveTokens(storedTokens);
+        return {
+            success: true,
+            user: {
+                sub: tokens.user.sub,
+                email: tokens.user.email,
+                name: tokens.user.name,
+                username: tokens.user.preferred_username || tokens.user.email?.split('@')[0],
+            },
+        };
+    }
+    catch (error) {
+        return {
+            success: false,
+            error: error instanceof Error ? error.message : 'Authentication failed',
+        };
+    }
+}
+/**
+ * Logout - clear tokens
+ */
+export async function logout() {
+    const tokens = await loadTokens();
+    if (!tokens) {
+        return { success: false, message: 'Not logged in' };
+    }
+    const userName = tokens.user.name || tokens.user.email || 'User';
+    await clearTokens();
+    return { success: true, message: `Goodbye, ${userName}! See you next time.` };
+}
+/**
+ * Get stored access token (for API calls)
+ */
+export async function getAccessToken() {
+    if (isAuthDisabled()) {
+        return 'dev-token';
+    }
+    const tokens = await loadTokens();
+    return tokens?.accessToken || null;
+}
+//# sourceMappingURL=device.js.map

package/dist/auth/device.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"device.js","sourceRoot":"","sources":["../../src/auth/device.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AACzD,OAAO,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AAChC,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;AAE7B,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,CAAC,CAAC;AAC3C,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;AACjD,MAAM,WAAW,GAAG,IAAI,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;AAElD,2CAA2C;AAC3C,MAAM,qBAAqB,GAAG,mBAAmB,CAAC;AAClD,MAAM,qBAAqB,GAAG,uBAAuB,CAAC;AAOtD;;GAEG;AACH,KAAK,UAAU,eAAe;IAC5B,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QACrD,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAgB,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,MAAmB;IACvD,MAAM,aAAa,EAAE,CAAC;IACtB,MAAM,QAAQ,GAAG,MAAM,eAAe,EAAE,CAAC;IACzC,MAAM,MAAM,GAAG,EAAE,GAAG,QAAQ,EAAE,GAAG,MAAM,EAAE,CAAC;IAC1C,MAAM,SAAS,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AACjF,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB;IAC/B,OAAO,WAAW,CAAC;AACrB,CAAC;AAsCD,6CAA6C;AAC7C,IAAI,iBAAiB,GAAuB,IAAI,CAAC;AAEjD;;;GAGG;AACH,KAAK,UAAU,qBAAqB;IAClC,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACvB,iBAAiB,GAAG,MAAM,eAAe,EAAE,CAAC;IAC9C,CAAC;IACD,OAAO,iBAAiB,CAAC,aAAa,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,qBAAqB,CAAC;AAC/F,CAAC;AAED;;;GAGG;AACH,SAAS,gBAAgB;IACvB,OAAO,iBAAiB,EAAE,aAAa,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,qBAAqB,CAAC;AAChG,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc;IAClC,OAAO,qBAAqB,EAAE,CAAC;AACjC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc;IAClC,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACvB,iBAAiB,GAAG,MAAM,eAAe,EAAE,CAAC;IAC9C,CAAC;IACD,OAAO,iBAAiB,CAAC,aAAa,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,qBAAqB,CAAC;AAC/F,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc;IAC5B,OAAO,OAAO,CAAC,GAAG,CAAC,aAAa,KAAK,MAAM,CAAC;AAC9C,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,sBAAsB;IACpC,IAAI,cAAc,EAAE,EAAE,CAAC;QACrB,OAAO,IAAI,CAAC,CAAC,iCAAiC;IAChD,CAAC;IACD,6CAA6C;IAC7C,OAAO,CAAC,CAAC,gBAAgB,EAAE,CAAC;AAC9B,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,aAAa;IAC1B,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1B,MAAM,KAAK,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7C,CAAC;AACH,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,UAAU;IACvB,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QACpD,MAAM,MAAM,GAAiB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAEjD,mBAAmB;QACnB,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,IAAI,IAAI,EAAE,EAAE,CAAC;YAC5C,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,UAAU,CAAC,MAAoB;IAC5C,MAAM,aAAa,EAAE,CAAC;IACtB,MAAM,SAAS,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AAChF,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW;IAC/B,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC;QAC/C,MAAM,MAAM,CAAC,UAAU,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,SAAS;IACX,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc;IASlC,6BAA6B;IAC7B,IAAI,cAAc,EAAE,EAAE,CAAC;QACrB,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,WAAW,CAAC;QACpD,OAAO;YACL,aAAa,EAAE,IAAI;YACnB,IAAI,EAAE;gBACJ,GAAG,EAAE,UAAU;gBACf,KAAK,EAAE,GAAG,OAAO,YAAY;gBAC7B,IAAI,EAAE,OAAO;gBACb,QAAQ,EAAE,OAAO;aAClB;SACF,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,UAAU,EAAE,CAAC;IAElC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC;IAClC,CAAC;IAED,OAAO;QACL,aAAa,EAAE,IAAI;QACnB,IAAI,EAAE;YACJ,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG;YACpB,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK;YACxB,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI;YACtB,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,kBAAkB,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;SAC7E;KACF,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,eAAe;IAC5B,MAAM,aAAa,GAAG,MAAM,qBAAqB,EAAE,CAAC;IACpD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,aAAa,eAAe,EAAE;QAC5D,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,WAAW,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC;KAChF,CAAC,CAAC;IAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,gCAAgC,KAAK,EAAE,CAAC,CAAC;IAC3D,CAAC;IAED,OAAO,QAAQ,CAAC,IAAI,EAAkC,CAAC;AACzD,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,aAAa,CAC1B,UAAkB,EAClB,QAAgB,EAChB,QAAgB,EAChB,SAAiB;IAEjB,MAAM,aAAa,GAAG,MAAM,qBAAqB,EAAE,CAAC;IACpD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,MAAM,SAAS,GAAG,SAAS,GAAG,SAAS,GAAG,IAAI,CAAC;IAE/C,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,EAAE,CAAC;QAC9B,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,QAAQ,GAAG,IAAI,CAAC,CAAC,CAAC;QAEnE,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,aAAa,eAAe,EAAE;YAC5D,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;SACvE,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAyB,CAAC;QAE5D,IAAI,MAAM,CAAC,KAAK,KAAK,uBAAuB,EAAE,CAAC;YAC7C,eAAe;YACf,SAAS;QACX,CAAC;QAED,IAAI,MAAM,CAAC,KAAK,KAAK,eAAe,EAAE,CAAC;YACrC,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;QAC9D,CAAC;QAED,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,iBAAiB,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC;QAC5D,CAAC;QAED,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;YACxB,OAAO,MAAM,CAAC;QAChB,CAAC;IACH,CAAC;IAED,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;AAC3C,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,SAIC;IAWD,iCAAiC;IACjC,IAAI,cAAc,EAAE,EAAE,CAAC;QACrB,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,WAAW,CAAC;QACpD,OAAO;YACL,OAAO,EAAE,IAAI;YACb,IAAI,EAAE;gBACJ,GAAG,EAAE,UAAU;gBACf,KAAK,EAAE,GAAG,OAAO,YAAY;gBAC7B,IAAI,EAAE,OAAO;gBACb,QAAQ,EAAE,OAAO;aAClB;SACF,CAAC;IACJ,CAAC;IAED,kCAAkC;IAClC,MAAM,cAAc,GAAG,MAAM,UAAU,EAAE,CAAC;IAC1C,IAAI,cAAc,EAAE,CAAC;QACnB,OAAO;YACL,OAAO,EAAE,IAAI;YACb,IAAI,EAAE;gBACJ,GAAG,EAAE,cAAc,CAAC,IAAI,CAAC,GAAG;gBAC5B,KAAK,EAAE,cAAc,CAAC,IAAI,CAAC,KAAK;gBAChC,IAAI,EAAE,cAAc,CAAC,IAAI,CAAC,IAAI;gBAC9B,QAAQ,EAAE,cAAc,CAAC,IAAI,CAAC,kBAAkB,IAAI,cAAc,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;aAC7F;SACF,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,6BAA6B;QAC7B,MAAM,UAAU,GAAG,MAAM,eAAe,EAAE,CAAC;QAE3C,oBAAoB;QACpB,IAAI,SAAS,EAAE,UAAU,EAAE,CAAC;YAC1B,SAAS,CAAC,UAAU,CAAC,UAAU,CAAC,SAAS,EAAE,UAAU,CAAC,gBAAgB,CAAC,CAAC;QAC1E,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,8CAA8C,CAAC,CAAC;YAC5D,OAAO,CAAC,GAAG,CAAC,KAAK,UAAU,CAAC,gBAAgB,EAAE,CAAC,CAAC;YAChD,OAAO,CAAC,GAAG,CAAC,+CAA+C,CAAC,CAAC;YAC7D,OAAO,CAAC,GAAG,CAAC,KAAK,UAAU,CAAC,SAAS,IAAI,CAAC,CAAC;QAC7C,CAAC;QAED,6BAA6B;QAC7B,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,CAAC;YAClC,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC;QAClD,CAAC;QAAC,MAAM,CAAC;YACP,kDAAkD;QACpD,CAAC;QAED,kCAAkC;QAClC,IAAI,SAAS,EAAE,gBAAgB,EAAE,CAAC;YAChC,SAAS,CAAC,gBAAgB,EAAE,CAAC;QAC/B,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,8CAA8C,CAAC,CAAC;QAC9D,CAAC;QAED,8DAA8D;QAC9D,IAAI,SAAS,EAAE,WAAW,EAAE,CAAC;YAC3B,OAAO,CAAC,GAAG,CAAC,4DAA4D,CAAC,CAAC;YAC1E,MAAM,WAAW,GAAG,MAAM,SAAS,CAAC,WAAW,EAAE,CAAC;YAElD,IAAI,WAAW,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,UAAU,CAAC,SAAS,EAAE,CAAC;gBAC9D,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,kCAAkC,EAAE,CAAC;YACvE,CAAC;QACH,CAAC;QAED,kBAAkB;QAClB,MAAM,MAAM,GAAG,MAAM,aAAa,CAChC,UAAU,CAAC,WAAW,EACtB,UAAU,CAAC,SAAS,EACpB,UAAU,CAAC,QAAQ,EACnB,UAAU,CAAC,UAAU,CACtB,CAAC;QAEF,IAAI,CAAC,MAAM,CAAC,YAAY,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YACzC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC;QAC3D,CAAC;QAED,cAAc;QACd,MAAM,YAAY,GAAiB;YACjC,WAAW,EAAE,MAAM,CAAC,YAAY;YAChC,OAAO,EAAE,MAAM,CAAC,QAAQ;YACxB,YAAY,EAAE,MAAM,CAAC,aAAa;YAClC,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,SAAS;YAClF,IAAI,EAAE,MAAM,CAAC,IAAI;SAClB,CAAC;QAEF,MAAM,UAAU,CAAC,YAAY,CAAC,CAAC;QAE/B,OAAO;YACL,OAAO,EAAE,IAAI;YACb,IAAI,EAAE;gBACJ,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG;gBACpB,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK;gBACxB,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI;gBACtB,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,kBAAkB,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;aAC7E;SACF,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,uBAAuB;SACxE,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,MAAM;IAC1B,MAAM,MAAM,GAAG,MAAM,UAAU,EAAE,CAAC;IAElC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC;IACtD,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,IAAI,MAAM,CAAC;IACjE,MAAM,WAAW,EAAE,CAAC;IAEpB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,YAAY,QAAQ,sBAAsB,EAAE,CAAC;AAChF,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc;IAClC,IAAI,cAAc,EAAE,EAAE,CAAC;QACrB,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,UAAU,EAAE,CAAC;IAClC,OAAO,MAAM,EAAE,WAAW,IAAI,IAAI,CAAC;AACrC,CAAC"}

package/dist/cli/api-mode.d.ts

@@ -0,0 +1,11 @@
+/**
+ * API Mode - Thin client that connects to Hazel API
+ *
+ * Zero-config mode: gets everything from server after authentication.
+ * No local tools, no providers - all execution happens server-side.
+ */
+/**
+ * Run CLI in API mode
+ */
+export declare function runApiMode(): Promise<void>;
+//# sourceMappingURL=api-mode.d.ts.map

package/dist/cli/api-mode.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-mode.d.ts","sourceRoot":"","sources":["../../src/cli/api-mode.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AA6PH;;GAEG;AACH,wBAAsB,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC,CAiJhD"}

package/dist/cli/api-mode.js

@@ -0,0 +1,309 @@
+/**
+ * API Mode - Thin client that connects to Hazel API
+ *
+ * Zero-config mode: gets everything from server after authentication.
+ * No local tools, no providers - all execution happens server-side.
+ */
+import * as readline from 'readline';
+import chalk from 'chalk';
+import { getApiUrl } from './mode.js';
+import { authenticate, logout, isDeviceAuthConfigured, getAccessToken } from '../auth/device.js';
+// Hazel's brand colors
+const hazel = {
+    primary: chalk.hex('#8B7355'),
+    accent: chalk.hex('#A0522D'),
+    soft: chalk.hex('#D2B48C'),
+    highlight: chalk.hex('#DEB887'),
+    success: chalk.green,
+    error: chalk.red,
+    muted: chalk.gray,
+};
+// Token storage (in-memory for session)
+let authToken = null;
+let serverConfig = null;
+function showStartupBanner() {
+    console.log('');
+    console.log(hazel.primary('  ██╗  ██╗ █████╗ ███████╗███████╗██╗     '));
+    console.log(hazel.primary('  ██║  ██║██╔══██╗╚══███╔╝██╔════╝██║     '));
+    console.log(hazel.primary('  ███████║███████║  ███╔╝ █████╗  ██║     '));
+    console.log(hazel.primary('  ██╔══██║██╔══██║ ███╔╝  ██╔══╝  ██║     '));
+    console.log(hazel.primary('  ██║  ██║██║  ██║███████╗███████╗███████╗'));
+    console.log(hazel.primary('  ╚═╝  ╚═╝╚═╝  ╚═╝╚══════╝╚══════╝╚══════╝'));
+    console.log('');
+    console.log(hazel.soft('  Your dedicated coding companion'));
+    console.log(hazel.muted('  from Scitus Solutions Ltd.'));
+    console.log(hazel.muted('  [API Mode - Server-side execution]'));
+    console.log('');
+}
+/**
+ * Fetch config from server
+ */
+async function fetchConfig(token) {
+    const API_URL = getApiUrl();
+    try {
+        const res = await fetch(`${API_URL}/api/config`, {
+            headers: { Authorization: `Bearer ${token}` },
+        });
+        if (!res.ok) {
+            console.error(hazel.error(`  Failed to fetch config: ${res.status}`));
+            return null;
+        }
+        return await res.json();
+    }
+    catch (error) {
+        console.error(hazel.error(`  Failed to connect to server: ${error instanceof Error ? error.message : 'Unknown error'}`));
+        return null;
+    }
+}
+/**
+ * Send chat message to server (streaming)
+ */
+async function chat(token, messages, cwd, onText, onToolStart, onToolResult, onError) {
+    const API_URL = getApiUrl();
+    try {
+        const res = await fetch(`${API_URL}/api/chat`, {
+            method: 'POST',
+            headers: {
+                'Content-Type': 'application/json',
+                Authorization: `Bearer ${token}`,
+            },
+            body: JSON.stringify({ messages, cwd, stream: true }),
+        });
+        if (!res.ok) {
+            const errorBody = await res.json().catch(() => ({ error: 'Request failed' }));
+            onError(errorBody.error || `Server error: ${res.status}`);
+            return;
+        }
+        if (!res.body) {
+            onError('No response body');
+            return;
+        }
+        const reader = res.body.getReader();
+        const decoder = new TextDecoder();
+        let buffer = '';
+        while (true) {
+            const { done, value } = await reader.read();
+            if (done)
+                break;
+            buffer += decoder.decode(value, { stream: true });
+            const lines = buffer.split('\n');
+            buffer = lines.pop() || '';
+            for (const line of lines) {
+                if (line.startsWith('data: ')) {
+                    try {
+                        const event = JSON.parse(line.substring(6));
+                        switch (event.type) {
+                            case 'text':
+                                if (event.content)
+                                    onText(event.content);
+                                break;
+                            case 'tool_start':
+                                if (event.tool)
+                                    onToolStart(event.tool);
+                                break;
+                            case 'tool_result':
+                                if (event.tool)
+                                    onToolResult(event.tool, event.success || false, event.preview || '');
+                                break;
+                            case 'error':
+                                onError(event.error || 'Unknown error');
+                                break;
+                            case 'done':
+                                // Conversation complete
+                                break;
+                        }
+                    }
+                    catch {
+                        // Skip malformed JSON
+                    }
+                }
+            }
+        }
+    }
+    catch (error) {
+        onError(error instanceof Error ? error.message : 'Request failed');
+    }
+}
+function handleCommand(input, rl, messages, config) {
+    const parts = input.split(' ');
+    const cmd = parts[0];
+    switch (cmd) {
+        case '/quit':
+        case '/exit':
+        case '/q':
+            rl.close();
+            return 'quit';
+        case '/logout':
+            logout().then((result) => {
+                console.log(hazel.soft(`\n  ${result.message}\n`));
+                rl.close();
+            });
+            return 'quit';
+        case '/help':
+        case '/h':
+            console.log(hazel.soft('\n  Commands:\n'));
+            console.log(hazel.muted('  /help, /h   - Show this help'));
+            console.log(hazel.muted('  /tools, /t  - List available tools'));
+            console.log(hazel.muted('  /clear, /c  - Clear conversation'));
+            console.log(hazel.muted('  /whoami     - Show current user'));
+            console.log(hazel.muted('  /logout     - Logout and exit'));
+            console.log(hazel.muted('  /quit, /q   - Exit'));
+            console.log('');
+            return 'help';
+        case '/tools':
+        case '/t':
+            console.log(hazel.soft('\n  Available tools:\n'));
+            for (const tool of config.tools) {
+                const badge = tool.security === 'internal' ? hazel.accent(' [full]') : '';
+                console.log(hazel.highlight(`  ${tool.name}`) + badge);
+                console.log(hazel.muted(`    ${tool.description}\n`));
+            }
+            return 'tools';
+        case '/clear':
+        case '/c':
+            messages.length = 0;
+            console.log(hazel.soft('\n  Conversation cleared.\n'));
+            return 'clear';
+        case '/whoami':
+            console.log(hazel.soft(`\n  Logged in as ${config.user.name || config.user.email}`));
+            console.log(hazel.muted(`  Email: ${config.user.email}`));
+            if (config.user.username) {
+                console.log(hazel.muted(`  Username: @${config.user.username}`));
+            }
+            console.log('');
+            return 'whoami';
+        default:
+            console.log(hazel.accent(`\n  Unknown command: "${cmd}"`));
+            console.log(hazel.muted('  Type /help for available commands.\n'));
+            return 'unknown';
+    }
+}
+/**
+ * Run CLI in API mode
+ */
+export async function runApiMode() {
+    const API_URL = getApiUrl();
+    showStartupBanner();
+    // Check if auth is configured
+    if (!isDeviceAuthConfigured()) {
+        console.error(hazel.error('  Authentication not configured.\n'));
+        console.log(hazel.muted('  Please set HAZEL_API_URL environment variable.'));
+        console.log('');
+        process.exit(1);
+    }
+    // Check if server is reachable
+    try {
+        const healthRes = await fetch(`${API_URL}/health`);
+        if (!healthRes.ok) {
+            console.error(hazel.error('  Cannot connect to Hazel server.'));
+            console.log(hazel.muted(`  Server: ${API_URL}`));
+            process.exit(1);
+        }
+    }
+    catch {
+        console.error(hazel.error('  Cannot connect to Hazel server.'));
+        console.log(hazel.muted(`  Server: ${API_URL}`));
+        console.log(hazel.muted('  Please check your internet connection.'));
+        process.exit(1);
+    }
+    // Authenticate via device flow
+    console.log(hazel.muted('  Authenticating...'));
+    const authResult = await authenticate({
+        onShowCode: (userCode, verificationUri) => {
+            console.log('');
+            console.log(hazel.highlight('  To login, open this URL in your browser:'));
+            console.log(hazel.primary(`  ${verificationUri}`));
+            console.log('');
+        },
+        onWaitingForUser: () => {
+            console.log(hazel.muted('  Waiting for you to login in the browser...'));
+            console.log(hazel.muted('  After logging in, enter the code shown in the browser below.\n'));
+        },
+    });
+    if (!authResult.success) {
+        console.error(hazel.error(`\n  ${authResult.error || 'Authentication failed'}\n`));
+        process.exit(1);
+    }
+    // Get access token from auth module
+    const token = await getAccessToken();
+    if (!token) {
+        console.error(hazel.error('\n  Failed to get access token\n'));
+        process.exit(1);
+    }
+    authToken = token;
+    console.log(hazel.success(`  ✓ Logged in as ${authResult.user?.name || authResult.user?.email}\n`));
+    // Fetch config from server
+    serverConfig = await fetchConfig(authToken);
+    if (!serverConfig) {
+        console.error(hazel.error('  Failed to load configuration from server.\n'));
+        process.exit(1);
+    }
+    // Create readline interface
+    const rl = readline.createInterface({
+        input: process.stdin,
+        output: process.stdout,
+        terminal: process.stdin.isTTY ?? false,
+    });
+    // Show config info
+    console.log(hazel.muted(`  Model: ${serverConfig.config.model}`));
+    console.log(hazel.muted(`  Tools: ${serverConfig.tools.map(t => t.name).join(', ')}`));
+    console.log(hazel.muted(`  Directory: ${process.cwd()}`));
+    console.log('');
+    console.log(hazel.highlight(`  Hello${serverConfig.user.name ? `, ${serverConfig.user.name}` : ''}! How can I help you today?`));
+    console.log(hazel.muted('  Type /help for commands, or start chatting!\n'));
+    // Conversation state
+    const messages = [];
+    const cwd = process.cwd();
+    // Handle input
+    const askQuestion = () => {
+        rl.question(hazel.primary('❯ '), async (input) => {
+            const trimmed = input.trim();
+            if (!trimmed) {
+                askQuestion();
+                return;
+            }
+            // Handle commands
+            if (trimmed.startsWith('/')) {
+                const handled = handleCommand(trimmed, rl, messages, serverConfig);
+                if (handled !== 'quit') {
+                    askQuestion();
+                }
+                return;
+            }
+            // Add user message
+            messages.push({ role: 'user', content: trimmed });
+            // Send to server
+            process.stdout.write(hazel.soft('\n'));
+            await chat(authToken, messages, cwd, 
+            // onText
+            (text) => process.stdout.write(text), 
+            // onToolStart
+            (tool) => console.log(hazel.accent(`\n  Using ${tool}...`)), 
+            // onToolResult
+            (tool, success, preview) => {
+                if (success) {
+                    console.log(hazel.success(`   ✓ Done`));
+                    if (preview) {
+                        const lines = preview.split('\n').slice(0, 3);
+                        console.log(hazel.muted(lines.map(l => `   ${l}`).join('\n')));
+                    }
+                }
+                else {
+                    console.log(hazel.error(`   ✗ Failed`));
+                }
+            }, 
+            // onError
+            (error) => console.error(hazel.error(`\n  Error: ${error}`)));
+            console.log('\n');
+            askQuestion();
+        });
+    };
+    // Handle Ctrl+C gracefully
+    rl.on('close', () => {
+        console.log(hazel.soft('\n  Take care! It was lovely helping you.\n'));
+        process.exit(0);
+    });
+    // Start the conversation
+    askQuestion();
+}
+//# sourceMappingURL=api-mode.js.map

package/dist/cli/api-mode.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-mode.js","sourceRoot":"","sources":["../../src/cli/api-mode.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,QAAQ,MAAM,UAAU,CAAC;AACrC,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,YAAY,EAAkB,MAAM,EAAE,sBAAsB,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAEjH,uBAAuB;AACvB,MAAM,KAAK,GAAG;IACZ,OAAO,EAAE,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC;IAC7B,MAAM,EAAE,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC;IAC5B,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC;IAC1B,SAAS,EAAE,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC;IAC/B,OAAO,EAAE,KAAK,CAAC,KAAK;IACpB,KAAK,EAAE,KAAK,CAAC,GAAG;IAChB,KAAK,EAAE,KAAK,CAAC,IAAI;CAClB,CAAC;AAkDF,wCAAwC;AACxC,IAAI,SAAS,GAAkB,IAAI,CAAC;AACpC,IAAI,YAAY,GAA0B,IAAI,CAAC;AAE/C,SAAS,iBAAiB;IACxB,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,4CAA4C,CAAC,CAAC,CAAC;IACzE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,4CAA4C,CAAC,CAAC,CAAC;IACzE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,4CAA4C,CAAC,CAAC,CAAC;IACzE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,4CAA4C,CAAC,CAAC,CAAC;IACzE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,4CAA4C,CAAC,CAAC,CAAC;IACzE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,4CAA4C,CAAC,CAAC,CAAC;IACzE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC,CAAC;IAC7D,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC,CAAC;IACzD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,sCAAsC,CAAC,CAAC,CAAC;IACjE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AAClB,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,WAAW,CAAC,KAAa;IACtC,MAAM,OAAO,GAAG,SAAS,EAAE,CAAC;IAC5B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,aAAa,EAAE;YAC/C,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE;SAC9C,CAAC,CAAC;QAEH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,6BAA6B,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;YACtE,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,MAAM,GAAG,CAAC,IAAI,EAAoB,CAAC;IAC5C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,kCAAkC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC;QACzH,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,IAAI,CACjB,KAAa,EACb,QAAmB,EACnB,GAAW,EACX,MAA8B,EAC9B,WAAmC,EACnC,YAAuE,EACvE,OAAgC;IAEhC,MAAM,OAAO,GAAG,SAAS,EAAE,CAAC;IAC5B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,WAAW,EAAE;YAC7C,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,aAAa,EAAE,UAAU,KAAK,EAAE;aACjC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;SACtD,CAAC,CAAC;QAEH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,SAAS,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAuB,CAAC;YACpG,OAAO,CAAC,SAAS,CAAC,KAAK,IAAI,iBAAiB,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;YAC1D,OAAO;QACT,CAAC;QAED,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;YACd,OAAO,CAAC,kBAAkB,CAAC,CAAC;YAC5B,OAAO;QACT,CAAC;QAED,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;QACpC,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;QAClC,IAAI,MAAM,GAAG,EAAE,CAAC;QAEhB,OAAO,IAAI,EAAE,CAAC;YACZ,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YAC5C,IAAI,IAAI;gBAAE,MAAM;YAEhB,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;YAClD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACjC,MAAM,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC;YAE3B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAC9B,IAAI,CAAC;wBACH,MAAM,KAAK,GAAgB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;wBAEzD,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;4BACnB,KAAK,MAAM;gCACT,IAAI,KAAK,CAAC,OAAO;oCAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;gCACzC,MAAM;4BACR,KAAK,YAAY;gCACf,IAAI,KAAK,CAAC,IAAI;oCAAE,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gCACxC,MAAM;4BACR,KAAK,aAAa;gCAChB,IAAI,KAAK,CAAC,IAAI;oCAAE,YAAY,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,OAAO,IAAI,KAAK,EAAE,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;gCACtF,MAAM;4BACR,KAAK,OAAO;gCACV,OAAO,CAAC,KAAK,CAAC,KAAK,IAAI,eAAe,CAAC,CAAC;gCACxC,MAAM;4BACR,KAAK,MAAM;gCACT,wBAAwB;gCACxB,MAAM;wBACV,CAAC;oBACH,CAAC;oBAAC,MAAM,CAAC;wBACP,sBAAsB;oBACxB,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC;IACrE,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CACpB,KAAa,EACb,EAAsB,EACtB,QAAmB,EACnB,MAAsB;IAEtB,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/B,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IAErB,QAAQ,GAAG,EAAE,CAAC;QACZ,KAAK,OAAO,CAAC;QACb,KAAK,OAAO,CAAC;QACb,KAAK,IAAI;YACP,EAAE,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,MAAM,CAAC;QAEhB,KAAK,SAAS;YACZ,MAAM,EAAE,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;gBACvB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC;gBACnD,EAAE,CAAC,KAAK,EAAE,CAAC;YACb,CAAC,CAAC,CAAC;YACH,OAAO,MAAM,CAAC;QAEhB,KAAK,OAAO,CAAC;QACb,KAAK,IAAI;YACP,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC;YAC3C,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,gCAAgC,CAAC,CAAC,CAAC;YAC3D,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,sCAAsC,CAAC,CAAC,CAAC;YACjE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,oCAAoC,CAAC,CAAC,CAAC;YAC/D,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,mCAAmC,CAAC,CAAC,CAAC;YAC9D,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,iCAAiC,CAAC,CAAC,CAAC;YAC5D,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC,CAAC;YACjD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChB,OAAO,MAAM,CAAC;QAEhB,KAAK,QAAQ,CAAC;QACd,KAAK,IAAI;YACP,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC,CAAC;YAClD,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;gBAChC,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC1E,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC;gBACvD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,IAAI,CAAC,WAAW,IAAI,CAAC,CAAC,CAAC;YACxD,CAAC;YACD,OAAO,OAAO,CAAC;QAEjB,KAAK,QAAQ,CAAC;QACd,KAAK,IAAI;YACP,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;YACpB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC,CAAC;YACvD,OAAO,OAAO,CAAC;QAEjB,KAAK,SAAS;YACZ,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,oBAAoB,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YACrF,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,YAAY,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YAC1D,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACzB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,gBAAgB,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;YACnE,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChB,OAAO,QAAQ,CAAC;QAElB;YACE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,yBAAyB,GAAG,GAAG,CAAC,CAAC,CAAC;YAC3D,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,wCAAwC,CAAC,CAAC,CAAC;YACnE,OAAO,SAAS,CAAC;IACrB,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU;IAC9B,MAAM,OAAO,GAAG,SAAS,EAAE,CAAC;IAE5B,iBAAiB,EAAE,CAAC;IAEpB,8BAA8B;IAC9B,IAAI,CAAC,sBAAsB,EAAE,EAAE,CAAC;QAC9B,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,oCAAoC,CAAC,CAAC,CAAC;QACjE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,kDAAkD,CAAC,CAAC,CAAC;QAC7E,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,+BAA+B;IAC/B,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,SAAS,CAAC,CAAC;QACnD,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;YAClB,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,mCAAmC,CAAC,CAAC,CAAC;YAChE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,aAAa,OAAO,EAAE,CAAC,CAAC,CAAC;YACjD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,mCAAmC,CAAC,CAAC,CAAC;QAChE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,aAAa,OAAO,EAAE,CAAC,CAAC,CAAC;QACjD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,0CAA0C,CAAC,CAAC,CAAC;QACrE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,+BAA+B;IAC/B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAC;IAChD,MAAM,UAAU,GAAG,MAAM,YAAY,CAAC;QACpC,UAAU,EAAE,CAAC,QAAQ,EAAE,eAAe,EAAE,EAAE;YACxC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,4CAA4C,CAAC,CAAC,CAAC;YAC3E,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,eAAe,EAAE,CAAC,CAAC,CAAC;YACnD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAClB,CAAC;QACD,gBAAgB,EAAE,GAAG,EAAE;YACrB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,8CAA8C,CAAC,CAAC,CAAC;YACzE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,kEAAkE,CAAC,CAAC,CAAC;QAC/F,CAAC;KACF,CAAC,CAAC;IAEH,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;QACxB,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,UAAU,CAAC,KAAK,IAAI,uBAAuB,IAAI,CAAC,CAAC,CAAC;QACnF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,oCAAoC;IACpC,MAAM,KAAK,GAAG,MAAM,cAAc,EAAE,CAAC;IACrC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,kCAAkC,CAAC,CAAC,CAAC;QAC/D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,SAAS,GAAG,KAAK,CAAC;IAClB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,oBAAoB,UAAU,CAAC,IAAI,EAAE,IAAI,IAAI,UAAU,CAAC,IAAI,EAAE,KAAK,IAAI,CAAC,CAAC,CAAC;IAEpG,2BAA2B;IAC3B,YAAY,GAAG,MAAM,WAAW,CAAC,SAAU,CAAC,CAAC;IAC7C,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,+CAA+C,CAAC,CAAC,CAAC;QAC5E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,4BAA4B;IAC5B,MAAM,EAAE,GAAG,QAAQ,CAAC,eAAe,CAAC;QAClC,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,QAAQ,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK,IAAI,KAAK;KACvC,CAAC,CAAC;IAEH,mBAAmB;IACnB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,YAAY,YAAY,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAClE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,YAAY,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;IACvF,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,gBAAgB,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC;IAC1D,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,UAAU,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,6BAA6B,CAAC,CAAC,CAAC;IACjI,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,iDAAiD,CAAC,CAAC,CAAC;IAE5E,qBAAqB;IACrB,MAAM,QAAQ,GAAc,EAAE,CAAC;IAC/B,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAE1B,eAAe;IACf,MAAM,WAAW,GAAG,GAAG,EAAE;QACvB,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;YAC/C,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;YAE7B,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,WAAW,EAAE,CAAC;gBACd,OAAO;YACT,CAAC;YAED,kBAAkB;YAClB,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC5B,MAAM,OAAO,GAAG,aAAa,CAAC,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,YAAa,CAAC,CAAC;gBACpE,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;oBACvB,WAAW,EAAE,CAAC;gBAChB,CAAC;gBACD,OAAO;YACT,CAAC;YAED,mBAAmB;YACnB,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;YAElD,iBAAiB;YACjB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;YAEvC,MAAM,IAAI,CACR,SAAU,EACV,QAAQ,EACR,GAAG;YACH,SAAS;YACT,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC;YACpC,cAAc;YACd,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,aAAa,IAAI,KAAK,CAAC,CAAC;YAC3D,eAAe;YACf,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE;gBACzB,IAAI,OAAO,EAAE,CAAC;oBACZ,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC;oBACxC,IAAI,OAAO,EAAE,CAAC;wBACZ,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;wBAC9C,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;oBACjE,CAAC;gBACH,CAAC;qBAAM,CAAC;oBACN,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC;gBAC1C,CAAC;YACH,CAAC;YACD,UAAU;YACV,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,cAAc,KAAK,EAAE,CAAC,CAAC,CAC7D,CAAC;YAEF,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAClB,WAAW,EAAE,CAAC;QAChB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;IAEF,2BAA2B;IAC3B,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;QAClB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,6CAA6C,CAAC,CAAC,CAAC;QACvE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;IAEH,yBAAyB;IACzB,WAAW,EAAE,CAAC;AAChB,CAAC"}

package/dist/cli/index.d.ts

@@ -0,0 +1,9 @@
+#!/usr/bin/env node
+/**
+ * Hazel CLI - Your dedicated coding companion from Scitus Solutions Ltd.
+ *
+ * Thin client that connects to Hazel API server.
+ * All tools and AI execution happens server-side.
+ */
+export {};
+//# sourceMappingURL=index.d.ts.map

package/dist/cli/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/cli/index.ts"],"names":[],"mappings":";AAEA;;;;;GAKG"}

package/dist/cli/index.js

@@ -0,0 +1,27 @@
+#!/usr/bin/env node
+/**
+ * Hazel CLI - Your dedicated coding companion from Scitus Solutions Ltd.
+ *
+ * Thin client that connects to Hazel API server.
+ * All tools and AI execution happens server-side.
+ */
+// Load .env file first
+import { config as loadEnv } from 'dotenv';
+import { resolve } from 'path';
+loadEnv({ path: resolve(process.cwd(), '.env') });
+import chalk from 'chalk';
+import { runApiMode } from './api-mode.js';
+const hazel = {
+    error: chalk.red,
+};
+async function main() {
+    try {
+        await runApiMode();
+    }
+    catch (error) {
+        console.error(hazel.error(`  Error: ${error instanceof Error ? error.message : 'Unknown error'}`));
+        process.exit(1);
+    }
+}
+main();
+//# sourceMappingURL=index.js.map

package/dist/cli/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/cli/index.ts"],"names":[],"mappings":";AAEA;;;;;GAKG;AAEH,uBAAuB;AACvB,OAAO,EAAE,MAAM,IAAI,OAAO,EAAE,MAAM,QAAQ,CAAC;AAC3C,OAAO,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAC/B,OAAO,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;AAElD,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAE3C,MAAM,KAAK,GAAG;IACZ,KAAK,EAAE,KAAK,CAAC,GAAG;CACjB,CAAC;AAEF,KAAK,UAAU,IAAI;IACjB,IAAI,CAAC;QACH,MAAM,UAAU,EAAE,CAAC;IACrB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,YAAY,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC;QACnG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED,IAAI,EAAE,CAAC"}

package/dist/cli/mode.d.ts

@@ -0,0 +1,9 @@
+/**
+ * CLI Configuration
+ */
+/**
+ * Get the Hazel API URL.
+ * Defaults to production URL if not specified.
+ */
+export declare function getApiUrl(): string;
+//# sourceMappingURL=mode.d.ts.map

package/dist/cli/mode.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mode.d.ts","sourceRoot":"","sources":["../../src/cli/mode.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH;;;GAGG;AACH,wBAAgB,SAAS,IAAI,MAAM,CAElC"}

package/dist/cli/mode.js

@@ -0,0 +1,11 @@
+/**
+ * CLI Configuration
+ */
+/**
+ * Get the Hazel API URL.
+ * Defaults to production URL if not specified.
+ */
+export function getApiUrl() {
+    return process.env.HAZEL_API_URL || 'https://hazel.scitus.ca';
+}
+//# sourceMappingURL=mode.js.map

package/dist/cli/mode.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mode.js","sourceRoot":"","sources":["../../src/cli/mode.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH;;;GAGG;AACH,MAAM,UAAU,SAAS;IACvB,OAAO,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,yBAAyB,CAAC;AAChE,CAAC"}

package/package.json

@@ -0,0 +1,49 @@
+{
+  "name": "@scitus/hazel",
+  "version": "0.0.1",
+  "description": "Hazel CLI - Your dedicated AI coding companion from Scitus Solutions Ltd.",
+  "type": "module",
+  "main": "dist/cli/index.js",
+  "bin": {
+    "hazel": "dist/cli/index.js"
+  },
+  "scripts": {
+    "build": "tsc",
+    "dev": "tsx src/cli/index.ts",
+    "start": "node dist/cli/index.js",
+    "clean": "rm -rf dist"
+  },
+  "dependencies": {
+    "chalk": "^5.3.0",
+    "dotenv": "^17.2.3",
+    "open": "^11.0.0"
+  },
+  "devDependencies": {
+    "@types/node": "^22.10.5",
+    "tsx": "^4.19.2",
+    "typescript": "^5.7.3"
+  },
+  "engines": {
+    "node": ">=18.0.0"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "keywords": [
+    "ai",
+    "cli",
+    "coding-assistant",
+    "gemini",
+    "llm",
+    "hazel",
+    "scitus"
+  ],
+  "author": "Scitus Solutions Ltd.",
+  "files": [
+    "dist",
+    "README.md",
+    "SECURITY.md",
+    "LICENSE"
+  ],
+  "license": "SEE LICENSE IN LICENSE"
+}