@thecorporation/cli 26.3.10 → 26.3.13

package/README.md

@@ -15,12 +15,25 @@ npm install -g @thecorporation/cli
 ## Quick Start
 
 ```bash
-corp setup                          # interactive first-run wizard
+corp setup                          # authenticate via magic link
 corp status                         # workspace summary
 corp chat                           # AI assistant with full tool access
 corp form --type llc --name "Acme"  # form a new entity
 ```
 
+## Authentication
+
+`corp setup` authenticates via magic link:
+
+1. Enter your name and email
+2. Check your email for a sign-in link from TheCorporation
+3. Copy the code from the link URL and paste it into the terminal
+4. Credentials are saved to `~/.corp/config.json`
+
+Your workspace is shared across the CLI, [MCP server](https://www.npmjs.com/package/@thecorporation/mcp-server), and [chat](https://humans.thecorporation.ai/chat) — all keyed on your email.
+
+For self-hosted setups (`CORP_API_URL` pointing to your own server), `corp setup` provisions a workspace directly without requiring a magic link.
+
 ## Commands
 
 ### Core
@@ -204,7 +217,7 @@ Inside `corp chat`, these slash commands are available:
 
 ## Configuration
 
-Config is stored at `~/.corp/config.json`. The `corp setup` wizard will populate it, or set values manually:
+Config is stored at `~/.corp/config.json`. `corp setup` populates it via magic link auth. You can also set values manually:
 
 ```bash
 corp config set api_url https://api.thecorporation.ai

package/dist/index.js

@@ -479,25 +479,112 @@ __export(setup_exports, {
   setupCommand: () => setupCommand
 });
 import { input, confirm } from "@inquirer/prompts";
+async function requestMagicLink(apiUrl, email, tosAccepted) {
+  const resp = await fetch(`${apiUrl}/v1/auth/magic-link`, {
+    method: "POST",
+    headers: { "Content-Type": "application/json" },
+    body: JSON.stringify({ email, tos_accepted: tosAccepted })
+  });
+  if (!resp.ok) {
+    const data = await resp.json().catch(() => ({}));
+    const detail = data?.error ?? data?.message ?? resp.statusText;
+    throw new Error(
+      typeof detail === "string" ? detail : JSON.stringify(detail)
+    );
+  }
+}
+async function verifyMagicLinkCode(apiUrl, code) {
+  const resp = await fetch(`${apiUrl}/v1/auth/magic-link/verify`, {
+    method: "POST",
+    headers: { "Content-Type": "application/json" },
+    body: JSON.stringify({ code, client: "cli" })
+  });
+  const data = await resp.json().catch(() => ({}));
+  if (!resp.ok) {
+    const detail = data?.error ?? data?.message ?? resp.statusText;
+    throw new Error(
+      typeof detail === "string" ? detail : JSON.stringify(detail)
+    );
+  }
+  if (!data.api_key || !data.workspace_id) {
+    throw new Error("Unexpected response \u2014 missing api_key or workspace_id");
+  }
+  return {
+    api_key: data.api_key,
+    workspace_id: data.workspace_id
+  };
+}
+function isCloudApi(url) {
+  return url.replace(/\/+$/, "").includes("thecorporation.ai");
+}
+async function magicLinkAuth(apiUrl, email) {
+  console.log("\nSending magic link to " + email + "...");
+  await requestMagicLink(apiUrl, email, true);
+  console.log("Check your email for a sign-in link from TheCorporation.");
+  console.log(
+    "Copy the code from the URL (the ?code=... part) and paste it below.\n"
+  );
+  const code = await input({ message: "Paste your magic link code" });
+  const trimmed = code.trim().replace(/^.*[?&]code=/, "");
+  if (!trimmed) {
+    throw new Error("No code provided");
+  }
+  console.log("Verifying...");
+  return verifyMagicLinkCode(apiUrl, trimmed);
+}
 async function setupCommand() {
   const cfg = loadConfig();
   console.log("Welcome to corp \u2014 corporate governance from the terminal.\n");
-  cfg.api_url = API_URL;
+  const customUrl = process.env.CORP_API_URL;
+  if (customUrl) {
+    cfg.api_url = customUrl.replace(/\/+$/, "");
+    console.log(`Using API: ${cfg.api_url}
+`);
+  } else {
+    cfg.api_url = CLOUD_API_URL;
+  }
   console.log("--- User Info ---");
   const user = cfg.user ?? { name: "", email: "" };
-  user.name = await input({ message: "Your name", default: user.name || void 0 });
-  user.email = await input({ message: "Your email", default: user.email || void 0 });
+  user.name = await input({
+    message: "Your name",
+    default: user.name || void 0
+  });
+  user.email = await input({
+    message: "Your email",
+    default: user.email || void 0
+  });
   cfg.user = user;
-  if (!cfg.api_key || !cfg.workspace_id) {
-    console.log("\nProvisioning workspace...");
-    try {
-      const result = await provisionWorkspace(cfg.api_url, `${user.name}'s workspace`);
-      cfg.api_key = result.api_key;
-      cfg.workspace_id = result.workspace_id;
-      console.log(`Workspace provisioned: ${result.workspace_id}`);
-    } catch (err) {
-      printError(`Auto-provision failed: ${err}`);
-      console.log("You can manually set credentials with: corp config set api_key <key>");
+  const needsAuth = !cfg.api_key || !cfg.workspace_id;
+  const cloud = isCloudApi(cfg.api_url);
+  if (needsAuth) {
+    if (cloud) {
+      try {
+        const result = await magicLinkAuth(cfg.api_url, user.email);
+        cfg.api_key = result.api_key;
+        cfg.workspace_id = result.workspace_id;
+        printSuccess(`Authenticated. Workspace: ${result.workspace_id}`);
+      } catch (err) {
+        printError(`Authentication failed: ${err}`);
+        console.log(
+          "You can manually set credentials with: corp config set api_key <key>"
+        );
+      }
+    } else {
+      console.log("\nProvisioning workspace...");
+      try {
+        const result = await provisionWorkspace(
+          cfg.api_url,
+          `${user.name}'s workspace`
+        );
+        cfg.api_key = result.api_key;
+        cfg.workspace_id = result.workspace_id;
+        console.log(`Workspace provisioned: ${result.workspace_id}`);
+      } catch (err) {
+        printError(`Auto-provision failed: ${err}`);
+        console.log(
+          "You can manually set credentials with: corp config set api_key <key>"
+        );
+      }
     }
   } else {
     console.log("\nVerifying existing credentials...");
@@ -514,21 +601,33 @@ async function setupCommand() {
       console.log("Credentials OK.");
     } else {
       console.log("API key is no longer valid.");
-      const reprovision = await confirm({
-        message: "Provision a new workspace? (This will replace your current credentials)",
-        default: false
+      const reauth = await confirm({
+        message: cloud ? "Re-authenticate via magic link?" : "Provision a new workspace? (This will replace your current credentials)",
+        default: true
       });
-      if (reprovision) {
+      if (reauth) {
         try {
-          const result = await provisionWorkspace(cfg.api_url, `${user.name}'s workspace`);
-          cfg.api_key = result.api_key;
-          cfg.workspace_id = result.workspace_id;
-          console.log(`Workspace provisioned: ${result.workspace_id}`);
+          if (cloud) {
+            const result = await magicLinkAuth(cfg.api_url, user.email);
+            cfg.api_key = result.api_key;
+            cfg.workspace_id = result.workspace_id;
+            printSuccess(`Authenticated. Workspace: ${result.workspace_id}`);
+          } else {
+            const result = await provisionWorkspace(
+              cfg.api_url,
+              `${user.name}'s workspace`
+            );
+            cfg.api_key = result.api_key;
+            cfg.workspace_id = result.workspace_id;
+            console.log(`Workspace provisioned: ${result.workspace_id}`);
+          }
         } catch (err) {
-          printError(`Provisioning failed: ${err}`);
+          printError(`Authentication failed: ${err}`);
         }
       } else {
-        console.log("Keeping existing credentials. You can manually update with: corp config set api_key <key>");
+        console.log(
+          "Keeping existing credentials. You can manually update with: corp config set api_key <key>"
+        );
       }
     }
   }
@@ -536,14 +635,14 @@ async function setupCommand() {
   console.log("\nConfig saved to ~/.corp/config.json");
   console.log("Run 'corp status' to verify your connection.");
 }
-var API_URL;
+var CLOUD_API_URL;
 var init_setup = __esm({
   "src/commands/setup.ts"() {
     "use strict";
     init_config();
     init_api_client();
     init_output();
-    API_URL = "https://api.thecorporation.ai";
+    CLOUD_API_URL = "https://api.thecorporation.ai";
   }
 });
 
@@ -1255,21 +1354,10 @@ __export(entities_exports, {
   entitiesShowCommand: () => entitiesShowCommand
 });
 import chalk3 from "chalk";
-function wantsJsonOutput(opts) {
-  if (opts && typeof opts === "object") {
-    const json = opts.json;
-    if (typeof json === "boolean") return json;
-    const commandOpts = opts.opts;
-    if (typeof commandOpts === "function") {
-      return Boolean(commandOpts().json);
-    }
-  }
-  return false;
-}
 async function entitiesCommand(opts) {
   const cfg = requireConfig("api_url", "api_key", "workspace_id");
   const client = new CorpAPIClient(cfg.api_url, cfg.api_key, cfg.workspace_id);
-  const jsonOutput = wantsJsonOutput(opts);
+  const jsonOutput = Boolean(opts.json);
   try {
     const entities = await withSpinner("Loading", () => client.listEntities(), jsonOutput);
     if (jsonOutput) {
@@ -1287,7 +1375,7 @@ async function entitiesCommand(opts) {
 async function entitiesShowCommand(entityId, opts) {
   const cfg = requireConfig("api_url", "api_key", "workspace_id");
   const client = new CorpAPIClient(cfg.api_url, cfg.api_key, cfg.workspace_id);
-  const jsonOutput = wantsJsonOutput(opts);
+  const jsonOutput = Boolean(opts.json);
   try {
     const entities = await client.listEntities();
     const entity = entities.find((e) => e.entity_id === entityId);
@@ -2120,7 +2208,7 @@ async function governanceConveneCommand(opts) {
 }
 async function governanceVoteCommand(meetingId, itemId, opts) {
   const cfg = requireConfig("api_url", "api_key", "workspace_id");
-  const eid = resolveEntityId(cfg, void 0);
+  const eid = resolveEntityId(cfg, opts.entityId);
   const client = new CorpAPIClient(cfg.api_url, cfg.api_key, cfg.workspace_id);
   try {
     const result = await client.castVote(eid, meetingId, itemId, {
@@ -2272,6 +2360,19 @@ __export(documents_exports, {
   documentsPreviewPdfCommand: () => documentsPreviewPdfCommand,
   documentsSigningLinkCommand: () => documentsSigningLinkCommand
 });
+function formatSigningLink(docId, result) {
+  if (typeof result.token === "string" && result.token.length > 0) {
+    return `${HUMANS_APP_ORIGIN}/sign/${docId}?token=${encodeURIComponent(result.token)}`;
+  }
+  if (typeof result.signing_url === "string" && result.signing_url.length > 0) {
+    if (/^https?:\/\//.test(result.signing_url)) {
+      return result.signing_url;
+    }
+    const normalizedPath = result.signing_url.startsWith("/human/sign/") ? result.signing_url.replace("/human/sign/", "/sign/") : result.signing_url;
+    return `${HUMANS_APP_ORIGIN}${normalizedPath.startsWith("/") ? normalizedPath : `/${normalizedPath}`}`;
+  }
+  return `${HUMANS_APP_ORIGIN}/sign/${docId}`;
+}
 async function documentsListCommand(opts) {
   const cfg = requireConfig("api_url", "api_key", "workspace_id");
   const eid = resolveEntityId(cfg, opts.entityId);
@@ -2292,8 +2393,10 @@ async function documentsSigningLinkCommand(docId, opts) {
   const client = new CorpAPIClient(cfg.api_url, cfg.api_key, cfg.workspace_id);
   try {
     const result = await client.getSigningLink(docId, eid);
-    const shareUrl = result.token ? `https://humans.thecorporation.ai/sign/${docId}?token=${result.token}` : result.signing_url ?? `https://humans.thecorporation.ai/sign/${docId}`;
-    printSuccess("Signing link generated.");
+    const shareUrl = formatSigningLink(docId, result);
+    if (process.stdout.isTTY) {
+      printSuccess("Signing link generated.");
+    }
     console.log(shareUrl);
   } catch (err) {
     printError(`Failed to get signing link: ${err}`);
@@ -2332,12 +2435,14 @@ async function documentsPreviewPdfCommand(opts) {
     process.exit(1);
   }
 }
+var HUMANS_APP_ORIGIN;
 var init_documents = __esm({
   "src/commands/documents.ts"() {
     "use strict";
     init_config();
     init_api_client();
     init_output();
+    HUMANS_APP_ORIGIN = "https://humans.thecorporation.ai";
   }
 });
 
@@ -2610,6 +2715,10 @@ async function workItemsCreateCommand(opts) {
   const eid = resolveEntityId(cfg, opts.entityId);
   const client = new CorpAPIClient(cfg.api_url, cfg.api_key, cfg.workspace_id);
   try {
+    if (!opts.category) {
+      printError("Missing required option: --category <category>");
+      process.exit(1);
+    }
     const data = { title: opts.title, category: opts.category };
     if (opts.description) data.description = opts.description;
     if (opts.deadline) data.deadline = opts.deadline;
@@ -3390,6 +3499,13 @@ INTERNAL_WORKER_TOKEN={{INTERNAL_WORKER_TOKEN}}
 // src/index.ts
 import { Command, Option } from "commander";
 import { createRequire } from "module";
+
+// src/command-options.ts
+function inheritOption(localValue, parentValue) {
+  return localValue ?? parentValue;
+}
+
+// src/index.ts
 var require2 = createRequire(import.meta.url);
 var pkg = require2("../package.json");
 var program = new Command();
@@ -3440,8 +3556,12 @@ var entitiesCmd = program.command("entities").description("List entities, show d
   await entitiesCommand2(opts);
 });
 entitiesCmd.command("show <entity-id>").option("--json", "Output as JSON").description("Show entity detail").action(async (entityId, opts, cmd) => {
+  const parent = cmd.parent.opts();
   const { entitiesShowCommand: entitiesShowCommand2 } = await Promise.resolve().then(() => (init_entities(), entities_exports));
-  await entitiesShowCommand2(entityId, { ...cmd.opts(), ...opts });
+  await entitiesShowCommand2(entityId, {
+    ...opts,
+    json: inheritOption(opts.json, parent.json)
+  });
 });
 entitiesCmd.command("convert <entity-id>").requiredOption("--to <type>", "Target entity type (llc, c_corp)").option("--jurisdiction <jurisdiction>", "New jurisdiction").description("Convert entity to a different type").action(async (entityId, opts) => {
   const { entitiesConvertCommand: entitiesConvertCommand2 } = await Promise.resolve().then(() => (init_entities(), entities_exports));
@@ -3458,7 +3578,11 @@ var contactsCmd = program.command("contacts").description("Contact management").
 contactsCmd.command("show <contact-id>").option("--json", "Output as JSON").description("Show contact detail/profile").action(async (contactId, opts, cmd) => {
   const parent = cmd.parent.opts();
   const { contactsShowCommand: contactsShowCommand2 } = await Promise.resolve().then(() => (init_contacts(), contacts_exports));
-  await contactsShowCommand2(contactId, { ...opts, entityId: parent.entityId });
+  await contactsShowCommand2(contactId, {
+    ...opts,
+    entityId: parent.entityId,
+    json: inheritOption(opts.json, parent.json)
+  });
 });
 contactsCmd.command("add").requiredOption("--name <name>", "Contact name").requiredOption("--email <email>", "Contact email").option("--type <type>", "Contact type (individual, organization)", "individual").option("--category <category>", "Category (employee, contractor, board_member, investor, law_firm, valuation_firm, accounting_firm, officer, founder, member, other)").option("--phone <phone>", "Phone number").option("--notes <notes>", "Notes").description("Add a new contact").action(async (opts, cmd) => {
   const parent = cmd.parent.opts();
@@ -3609,9 +3733,13 @@ governanceCmd.command("convene").requiredOption("--body <id>", "Governance body
   const { governanceConveneCommand: governanceConveneCommand2 } = await Promise.resolve().then(() => (init_governance(), governance_exports));
   await governanceConveneCommand2({ ...opts, meetingType: opts.type, entityId: parent.entityId });
 });
-governanceCmd.command("vote <meeting-id> <item-id>").requiredOption("--voter <id>", "Voter contact UUID").addOption(new Option("--vote <value>", "Vote (for, against, abstain, recusal)").choices(["for", "against", "abstain", "recusal"]).makeOptionMandatory()).description("Cast a vote on an agenda item").action(async (meetingId, itemId, opts) => {
+governanceCmd.command("vote <meeting-id> <item-id>").requiredOption("--voter <id>", "Voter contact UUID").addOption(new Option("--vote <value>", "Vote (for, against, abstain, recusal)").choices(["for", "against", "abstain", "recusal"]).makeOptionMandatory()).description("Cast a vote on an agenda item").action(async (meetingId, itemId, opts, cmd) => {
+  const parent = cmd.parent.opts();
   const { governanceVoteCommand: governanceVoteCommand2 } = await Promise.resolve().then(() => (init_governance(), governance_exports));
-  await governanceVoteCommand2(meetingId, itemId, opts);
+  await governanceVoteCommand2(meetingId, itemId, {
+    ...opts,
+    entityId: parent.entityId
+  });
 });
 governanceCmd.command("notice <meeting-id>").description("Send meeting notice").action(async (meetingId, _opts, cmd) => {
   const parent = cmd.parent.opts();
@@ -3682,9 +3810,13 @@ var agentsCmd = program.command("agents").description("Agent management").option
   const { agentsListCommand: agentsListCommand2 } = await Promise.resolve().then(() => (init_agents(), agents_exports));
   await agentsListCommand2(opts);
 });
-agentsCmd.command("show <agent-id>").option("--json", "Output as JSON").description("Show agent detail").action(async (agentId, opts) => {
+agentsCmd.command("show <agent-id>").option("--json", "Output as JSON").description("Show agent detail").action(async (agentId, opts, cmd) => {
+  const parent = cmd.parent.opts();
   const { agentsShowCommand: agentsShowCommand2 } = await Promise.resolve().then(() => (init_agents(), agents_exports));
-  await agentsShowCommand2(agentId, opts);
+  await agentsShowCommand2(agentId, {
+    ...opts,
+    json: inheritOption(opts.json, parent.json)
+  });
 });
 agentsCmd.command("create").requiredOption("--name <name>", "Agent name").requiredOption("--prompt <prompt>", "System prompt").option("--model <model>", "Model").description("Create a new agent").action(async (opts) => {
   const { agentsCreateCommand: agentsCreateCommand2 } = await Promise.resolve().then(() => (init_agents(), agents_exports));
@@ -3717,12 +3849,20 @@ var workItemsCmd = program.command("work-items").description("Long-term work ite
 workItemsCmd.command("show <item-id>").option("--json", "Output as JSON").description("Show work item detail").action(async (itemId, opts, cmd) => {
   const parent = cmd.parent.opts();
   const { workItemsShowCommand: workItemsShowCommand2 } = await Promise.resolve().then(() => (init_work_items(), work_items_exports));
-  await workItemsShowCommand2(itemId, { ...opts, entityId: parent.entityId });
+  await workItemsShowCommand2(itemId, {
+    ...opts,
+    entityId: parent.entityId,
+    json: inheritOption(opts.json, parent.json)
+  });
 });
-workItemsCmd.command("create").requiredOption("--title <title>", "Work item title").requiredOption("--category <category>", "Work item category").option("--description <desc>", "Description").option("--deadline <date>", "Deadline (YYYY-MM-DD)").option("--asap", "Mark as ASAP priority").option("--created-by <name>", "Creator identifier").description("Create a new work item").action(async (opts, cmd) => {
+workItemsCmd.command("create").requiredOption("--title <title>", "Work item title").option("--category <category>", "Work item category").option("--description <desc>", "Description").option("--deadline <date>", "Deadline (YYYY-MM-DD)").option("--asap", "Mark as ASAP priority").option("--created-by <name>", "Creator identifier").description("Create a new work item").action(async (opts, cmd) => {
   const parent = cmd.parent.opts();
   const { workItemsCreateCommand: workItemsCreateCommand2 } = await Promise.resolve().then(() => (init_work_items(), work_items_exports));
-  await workItemsCreateCommand2({ ...opts, entityId: parent.entityId });
+  await workItemsCreateCommand2({
+    ...opts,
+    category: inheritOption(opts.category, parent.category),
+    entityId: parent.entityId
+  });
 });
 workItemsCmd.command("claim <item-id>").requiredOption("--by <name>", "Agent or user claiming the item").option("--ttl <seconds>", "Auto-release TTL in seconds", parseInt).description("Claim a work item").action(async (itemId, opts, cmd) => {
   const parent = cmd.parent.opts();