@zivis/cli 0.1.0-alpha.40 → 0.1.0-alpha.6

package/dist/commands/auth/login.js

@@ -1,161 +1,60 @@
-import * as readline from "node:readline/promises";
 import { login } from "@zivis/mcp/auth";
 import { getStorageName } from "@zivis/mcp/auth";
 import { saveSessionEntry } from "@zivis/mcp/auth";
-import { detectProjectBinding, resolveConfigFromBinding } from "@zivis/mcp/project-binding";
-import { credentialStorageFromConfig, DEFAULT_CONFIG } from "@zivis/mcp/types";
+import { detectProjectBinding } from "@zivis/mcp/project-binding";
+import { DEFAULT_CONFIG } from "@zivis/mcp/types";
 import { extractEmail } from "../../internal/orgs.js";
-import { pickOrg } from "../../internal/org-picker.js";
 import { ensureProjectBinding } from "../../internal/project-binding.js";
-import { discardOauthAfterLogin, tryAutoMintBindingTokenAfterLogin, } from "../../internal/binding-token-mint.js";
-import { setupCursorWorkspace, setupVsCodeClaude, setupVsCodeCopilot, setupClaudeCodeCli, } from "../../internal/ide-setup.js";
-import { buildLinkagePrompt } from "../../internal/github-linkage-prompt.js";
-async function confirm(question) {
-    const rl = readline.createInterface({ input: process.stdin, output: process.stderr });
-    try {
-        const answer = (await rl.question(question)).trim().toLowerCase();
-        return answer !== "n" && answer !== "no";
-    }
-    finally {
-        rl.close();
-    }
-}
+import { setupVsCodeClaude, setupVsCodeCopilot, setupClaudeCodeCli, } from "../../internal/ide-setup.js";
 export async function loginCommand(opts) {
-    const config = {
-        ...DEFAULT_CONFIG,
-        ...resolveConfigFromBinding(process.cwd()),
-    };
+    const config = DEFAULT_CONFIG;
     const detected = detectProjectBinding(process.cwd());
     const session = opts.session || detected?.binding.session || config.session;
-    const sessionName = session || "default";
-    let organizationId;
-    let orgName;
-    let writeMode = "no-write";
-    if (opts.org) {
-        organizationId = opts.org;
-        orgName = detected?.binding.orgName && detected.binding.workosOrgId === opts.org
-            ? detected.binding.orgName
-            : undefined;
-        if (opts.rebind) {
-            writeMode = "replace";
-        }
-    }
-    else if (opts.rebind) {
-        const picked = await runIdentityThenPicker(config, sessionName, {
-            currentOrgId: detected?.binding.workosOrgId ?? undefined,
-            header: detected?.binding.workosOrgId
-                ? "Switch this project to which org?"
-                : "Your organizations:",
-        });
-        if (detected?.binding.workosOrgId && detected.binding.workosOrgId === picked.workosOrgId) {
-            console.log(`Project is already bound to ${picked.name}. Nothing to change.`);
-            process.exit(0);
-        }
-        if (detected?.binding.workosOrgId) {
-            const fromLabel = detected.binding.orgName
-                ? `${detected.binding.orgName} (${detected.binding.workosOrgId})`
-                : detected.binding.workosOrgId;
-            const toLabel = `${picked.name} (${picked.workosOrgId})`;
-            if (!opts.yes) {
-                const ok = await confirm(`Change project binding from "${fromLabel}" to "${toLabel}"? [Y/n] `);
-                if (!ok) {
-                    console.log("Aborted.");
-                    process.exit(0);
-                }
-            }
-            writeMode = "replace";
-        }
-        else {
-            writeMode = "create";
-        }
-        organizationId = picked.workosOrgId;
-        orgName = picked.name;
-    }
-    else if (detected?.binding.workosOrgId) {
+    let organizationId = opts.org;
+    if (!organizationId && detected?.binding.workosOrgId) {
         organizationId = detected.binding.workosOrgId;
-        orgName = detected.binding.orgName;
-        console.log(`Using org from project binding: ${organizationId}${orgName ? ` (${orgName})` : ""}`);
-    }
-    else {
-        const picked = await runIdentityThenPicker(config, sessionName, {
-            header: "Your organizations:",
-        });
-        organizationId = picked.workosOrgId;
-        orgName = picked.name;
-        writeMode = "create";
-    }
-    if (!organizationId) {
-        console.error("Internal error: no organization resolved for login.");
-        process.exit(1);
+        console.log(`Using org from project binding: ${organizationId}${detected.binding.orgName ? ` (${detected.binding.orgName})` : ""}`);
     }
     if (detected?.binding.session && !opts.session) {
         console.log(`Using session from project binding: ${session}`);
     }
     try {
         const tokens = await login(config, session, organizationId, {
-            orgName,
-            skipConfirm: opts.yes === true || writeMode !== "no-write",
+            orgName: detected?.binding.orgName,
+            skipConfirm: opts.yes === true,
         });
         const storageName = getStorageName();
         const email = extractEmail(tokens.id_token);
-        await saveSessionEntry(sessionName, email, credentialStorageFromConfig(config));
+        const sessionName = session || "default";
+        await saveSessionEntry(sessionName, email);
         const sessionLabel = session ? ` (session: ${session})` : "";
         console.log(`✓ Logged in as ${email}${sessionLabel}`);
         console.log(`✓ Credentials stored in ${storageName}`);
-        console.log(`✓ JWT scoped to organization: ${organizationId}${orgName ? ` (${orgName})` : ""}`);
-        try {
-            await setupCursorWorkspace();
-        }
-        catch (err) {
-            console.log(`  WARNING: Failed to update .cursor/mcp.json: ${err instanceof Error ? err.message : err}`);
+        if (organizationId) {
+            console.log(`✓ JWT scoped to organization: ${organizationId}`);
         }
         try {
-            await setupVsCodeClaude();
-            await setupVsCodeCopilot();
+            await setupVsCodeClaude(session);
+            await setupVsCodeCopilot(session);
         }
         catch (err) {
             console.log(`  WARNING: Failed to update .vscode/mcp.json: ${err instanceof Error ? err.message : err}`);
         }
         try {
-            await setupClaudeCodeCli();
+            await setupClaudeCodeCli(session);
         }
         catch (err) {
             console.log(`  WARNING: Failed to update Claude Code CLI config: ${err instanceof Error ? err.message : err}`);
         }
-        if (writeMode === "create" && !opts.yes && !opts.noBind) {
-            const orgLabel = orgName ? `${orgName} (${organizationId})` : organizationId;
-            const ok = await confirm(`Bind this project to ${orgLabel}? [Y/n] `);
-            if (!ok) {
-                console.log("Login succeeded but project was not bound.");
-                await discardOauthAfterLogin({ session, config });
-                process.exit(0);
-            }
-        }
         await ensureProjectBinding({
             config,
             session: sessionName,
             accessToken: tokens.access_token,
             organizationId,
             cwd: process.cwd(),
-            autoBind: opts.bind === true || writeMode !== "no-write",
+            autoBind: opts.bind === true,
             skipBind: opts.noBind === true,
-            force: writeMode === "replace",
         });
-        await tryAutoMintBindingTokenAfterLogin({
-            cwd: process.cwd(),
-            sessionName,
-            accessToken: tokens.access_token,
-            skip: opts.skipMintKey === true,
-            warnOnFailure: true,
-        });
-        await discardOauthAfterLogin({ session, config });
-        try {
-            const linkagePrompt = await buildLinkagePrompt({ config });
-            if (linkagePrompt)
-                console.log(linkagePrompt);
-        }
-        catch {
-        }
         process.exit(0);
     }
     catch (err) {
@@ -163,21 +62,4 @@ export async function loginCommand(opts) {
         process.exit(1);
     }
 }
-async function runIdentityThenPicker(config, session, pickOpts) {
-    console.log("Opening browser to identify your account (no org scope yet)...");
-    let identity;
-    try {
-        identity = await login(config, session, undefined, { skipConfirm: true });
-    }
-    catch (err) {
-        console.error("Login failed:", err instanceof Error ? err.message : err);
-        process.exit(1);
-    }
-    try {
-        return await pickOrg(config, identity.access_token, pickOpts);
-    }
-    catch (err) {
-        console.error(err instanceof Error ? err.message : err);
-        process.exit(1);
-    }
-}
+//# sourceMappingURL=login.js.map

package/dist/commands/auth/login.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"login.js","sourceRoot":"","sources":["../../../src/commands/auth/login.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAC;AACxC,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAClE,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACtD,OAAO,EAAE,oBAAoB,EAAE,MAAM,mCAAmC,CAAC;AACzE,OAAO,EACL,iBAAiB,EACjB,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,6BAA6B,CAAC;AAUrC,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IAAkB;IACnD,MAAM,MAAM,GAAG,cAAc,CAAC;IAC9B,MAAM,QAAQ,GAAG,oBAAoB,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IACrD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,QAAQ,EAAE,OAAO,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC;IAE5E,IAAI,cAAc,GAAG,IAAI,CAAC,GAAG,CAAC;IAC9B,IAAI,CAAC,cAAc,IAAI,QAAQ,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC;QACrD,cAAc,GAAG,QAAQ,CAAC,OAAO,CAAC,WAAW,CAAC;QAC9C,OAAO,CAAC,GAAG,CACT,mCAAmC,cAAc,GAC/C,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,OAAO,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,EAChE,EAAE,CACH,CAAC;IACJ,CAAC;IAED,IAAI,QAAQ,EAAE,OAAO,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QAC/C,OAAO,CAAC,GAAG,CAAC,uCAAuC,OAAO,EAAE,CAAC,CAAC;IAChE,CAAC;IAED,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,cAAc,EAAE;YAC1D,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,OAAO;YAClC,WAAW,EAAE,IAAI,CAAC,GAAG,KAAK,IAAI;SAC/B,CAAC,CAAC;QACH,MAAM,WAAW,GAAG,cAAc,EAAE,CAAC;QACrC,MAAM,KAAK,GAAG,YAAY,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAE5C,MAAM,WAAW,GAAG,OAAO,IAAI,SAAS,CAAC;QACzC,MAAM,gBAAgB,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;QAE3C,MAAM,YAAY,GAAG,OAAO,CAAC,CAAC,CAAC,cAAc,OAAO,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7D,OAAO,CAAC,GAAG,CAAC,kBAAkB,KAAK,GAAG,YAAY,EAAE,CAAC,CAAC;QACtD,OAAO,CAAC,GAAG,CAAC,2BAA2B,WAAW,EAAE,CAAC,CAAC;QACtD,IAAI,cAAc,EAAE,CAAC;YACnB,OAAO,CAAC,GAAG,CAAC,iCAAiC,cAAc,EAAE,CAAC,CAAC;QACjE,CAAC;QAED,IAAI,CAAC;YACH,MAAM,iBAAiB,CAAC,OAAO,CAAC,CAAC;YACjC,MAAM,kBAAkB,CAAC,OAAO,CAAC,CAAC;QACpC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,GAAG,CACT,iDAAiD,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,CAC5F,CAAC;QACJ,CAAC;QACD,IAAI,CAAC;YACH,MAAM,kBAAkB,CAAC,OAAO,CAAC,CAAC;QACpC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,GAAG,CACT,uDAAuD,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,CAClG,CAAC;QACJ,CAAC;QAED,MAAM,oBAAoB,CAAC;YACzB,MAAM;YACN,OAAO,EAAE,WAAW;YACpB,WAAW,EAAE,MAAM,CAAC,YAAY;YAChC,cAAc;YACd,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE;YAClB,QAAQ,EAAE,IAAI,CAAC,IAAI,KAAK,IAAI;YAC5B,QAAQ,EAAE,IAAI,CAAC,MAAM,KAAK,IAAI;SAC/B,CAAC,CAAC;QAEH,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,eAAe,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACzE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC"}

package/dist/commands/auth/logout.js

@@ -1,26 +1,14 @@
-import { keychainClearAll, keychainClearSession, keychainDelete, keychainRead } from "@zivis/mcp/auth";
+import { keychainClearAll, keychainClearSession } from "@zivis/mcp/auth";
 import { removeSessionEntry } from "@zivis/mcp/auth";
-import { detectProjectBinding, resolveConfigFromBinding } from "@zivis/mcp/project-binding";
-import { credentialStorageFromConfig } from "@zivis/mcp/types";
 export async function logoutCommand(opts) {
-    const config = resolveConfigFromBinding(process.cwd());
-    const st = credentialStorageFromConfig(config);
-    const sessionName = opts.session ??
-        detectProjectBinding(process.cwd())?.binding.session;
-    if (sessionName) {
-        await keychainClearSession(sessionName, st);
-        const apiKeyAccount = `apikey.${sessionName}`;
-        const hadApiKey = !!(await keychainRead(apiKeyAccount, st).catch(() => null));
-        if (hadApiKey) {
-            await keychainDelete(apiKeyAccount, st);
-            console.log(`✓ Local Project Binding Token cleared for session "${sessionName}"`);
-            console.log(`  Note: To revoke the key server-side, visit Settings → API Tokens in the ZIVIS UI.`);
-        }
-        await removeSessionEntry(sessionName, st);
-        console.log(`✓ Session "${sessionName}" credentials cleared`);
+    if (opts.session) {
+        await keychainClearSession(opts.session);
+        await removeSessionEntry(opts.session);
+        console.log(`✓ Session "${opts.session}" credentials cleared`);
         return;
     }
-    await keychainClearAll(st);
+    await keychainClearAll();
     console.log("✓ Default credentials cleared");
     console.log("  Note: Named sessions are not affected. Use 'zivis auth sessions' to list them.");
 }
+//# sourceMappingURL=logout.js.map

package/dist/commands/auth/logout.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logout.js","sourceRoot":"","sources":["../../../src/commands/auth/logout.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AACzE,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAOrD,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAAmB;IACrD,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QACjB,MAAM,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACzC,MAAM,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACvC,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,CAAC,OAAO,uBAAuB,CAAC,CAAC;QAC/D,OAAO;IACT,CAAC;IAED,MAAM,gBAAgB,EAAE,CAAC;IACzB,OAAO,CAAC,GAAG,CAAC,+BAA+B,CAAC,CAAC;IAC7C,OAAO,CAAC,GAAG,CAAC,kFAAkF,CAAC,CAAC;AAClG,CAAC"}

package/dist/commands/auth/sessions.js

@@ -1,16 +1,12 @@
 import { listSessions, removeSessionEntry, keychainClearSession } from "@zivis/mcp/auth";
-import { resolveConfigFromBinding } from "@zivis/mcp/project-binding";
-import { credentialStorageFromConfig } from "@zivis/mcp/types";
 export async function sessionsCommand(opts) {
-    const config = resolveConfigFromBinding(process.cwd());
-    const st = credentialStorageFromConfig(config);
     if (opts.remove) {
-        await keychainClearSession(opts.remove, st);
-        await removeSessionEntry(opts.remove, st);
+        await keychainClearSession(opts.remove);
+        await removeSessionEntry(opts.remove);
         console.log(`✓ Session "${opts.remove}" removed`);
         return;
     }
-    const sessions = await listSessions(st);
+    const sessions = await listSessions();
     const activeSession = process.env.ZIVIS_SESSION;
     if (sessions.length === 0) {
         console.log("No sessions stored.");
@@ -31,3 +27,4 @@ export async function sessionsCommand(opts) {
     console.log("To use a session in a project, add to .mcp.json:");
     console.log('  "env": { "ZIVIS_SESSION": "<session-name>" }');
 }
+//# sourceMappingURL=sessions.js.map

package/dist/commands/auth/sessions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sessions.js","sourceRoot":"","sources":["../../../src/commands/auth/sessions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AAMzF,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAAqB;IACzD,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAChB,MAAM,oBAAoB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACxC,MAAM,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACtC,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,CAAC,MAAM,WAAW,CAAC,CAAC;QAClD,OAAO;IACT,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,YAAY,EAAE,CAAC;IACtC,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;IAEhD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;QACnC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;QACpC,OAAO,CAAC,GAAG,CAAC,yDAAyD,CAAC,CAAC;QACvE,OAAO,CAAC,GAAG,CAAC,uDAAuD,CAAC,CAAC;QACrE,OAAO;IACT,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACzB,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,aAAa,IAAI,SAAS,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3E,MAAM,OAAO,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAClC,OAAO,CAAC,GAAG,CAAC,KAAK,OAAO,IAAI,CAAC,CAAC,KAAK,GAAG,MAAM,EAAE,CAAC,CAAC;IAClD,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,kDAAkD,CAAC,CAAC;IAChE,OAAO,CAAC,GAAG,CAAC,gDAAgD,CAAC,CAAC;AAChE,CAAC"}

package/dist/commands/auth/status.js

@@ -1,13 +1,12 @@
-import { resolveAuth, loadTokens, keychainRead } from "@zivis/mcp/auth";
-import { detectProjectBinding, resolveConfigFromBinding } from "@zivis/mcp/project-binding";
-import { DEFAULT_CONFIG, credentialStorageFromConfig } from "@zivis/mcp/types";
+import { resolveAuth, loadTokens, getStorageName, keychainRead } from "@zivis/mcp/auth";
+import { detectProjectBinding } from "@zivis/mcp/project-binding";
+import { DEFAULT_CONFIG } from "@zivis/mcp/types";
 import { extractEmail } from "../../internal/orgs.js";
 export async function statusCommand(opts) {
-    const config = { ...DEFAULT_CONFIG, ...resolveConfigFromBinding(process.cwd()) };
+    const config = DEFAULT_CONFIG;
     const detected = detectProjectBinding(process.cwd());
     const session = opts.session || config.session || detected?.binding.session;
     const resolveConfig = session ? { ...config, session } : config;
-    const st = credentialStorageFromConfig(resolveConfig);
     if (session) {
         const source = opts.session
             ? "flag"
@@ -19,7 +18,7 @@ export async function statusCommand(opts) {
     const creds = await resolveAuth(resolveConfig);
     switch (creds.method) {
         case "oauth": {
-            const tokens = await loadTokens(session, st);
+            const tokens = await loadTokens(session);
             const email = extractEmail(tokens?.id_token);
             console.log(`Auth:   OAuth (${email})`);
             if (tokens) {
@@ -29,30 +28,11 @@ export async function statusCommand(opts) {
             break;
         }
         case "apikey": {
-            const key = creds.apiKey ?? "";
-            const masked = key.startsWith("sk_")
-                ? `${key.slice(0, 10)}...${key.slice(-4)}`
+            const masked = creds.apiKey?.startsWith("sk_")
+                ? `sk_...${creds.apiKey.slice(-4)}`
                 : "***";
-            const sessionApiKeyAccount = session ? `apikey.${session}` : null;
-            const isSessionKey = sessionApiKeyAccount
-                ? !!(await keychainRead(sessionApiKeyAccount, st))
-                : false;
-            const isEnvKey = key === process.env.ZIVIS_API_KEY;
-            const isGlobalKey = !isSessionKey && !isEnvKey && !!(await keychainRead("apikey", st));
-            if (isSessionKey && key.startsWith("sk_")) {
-                console.log(`Auth:   Local Project Binding Token (${masked})`);
-                console.log(`        Minted by \`zivis auth bind\` — org-scoped, no refresh needed`);
-            }
-            else if (isEnvKey) {
-                console.log(`Auth:   API Key from ZIVIS_API_KEY env var (${masked})`);
-            }
-            else if (isGlobalKey) {
-                console.log(`Auth:   API Key from keychain (${masked})`);
-                console.log(`        Run \`zivis auth bind\` in this repo for project-scoped credentials`);
-            }
-            else {
-                console.log(`Auth:   API Key (${masked})`);
-            }
+            const source = (await keychainRead("apikey")) ? getStorageName() : "environment variable";
+            console.log(`Auth:   API Key (${masked}) from ${source}`);
             break;
         }
         case "none":
@@ -60,15 +40,14 @@ export async function statusCommand(opts) {
             console.log("");
             if (session) {
                 console.log(`Session "${session}" has no credentials.`);
-                console.log(`  Run in this repo:  zivis auth bind`);
-                console.log(`  Or manually:       zivis auth login --session ${session}`);
+                console.log(`Run: zivis auth login --session ${session}`);
             }
             else {
                 console.log("To authenticate:");
-                console.log("  zivis auth bind    (recommended — mints a project-scoped token)");
-                console.log("  zivis auth login   (interactive OAuth for web access)");
+                console.log("  zivis auth login");
             }
             break;
     }
     console.log(`API:    ${resolveConfig.apiBaseUrl}`);
 }
+//# sourceMappingURL=status.js.map

package/dist/commands/auth/status.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"status.js","sourceRoot":"","sources":["../../../src/commands/auth/status.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AACxF,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAClE,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAMtD,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAAmB;IACrD,MAAM,MAAM,GAAG,cAAc,CAAC;IAC9B,MAAM,QAAQ,GAAG,oBAAoB,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IACrD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,IAAI,QAAQ,EAAE,OAAO,CAAC,OAAO,CAAC;IAC5E,MAAM,aAAa,GAAG,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;IAEhE,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO;YACzB,CAAC,CAAC,MAAM;YACR,CAAC,CAAC,MAAM,CAAC,OAAO;gBAChB,CAAC,CAAC,eAAe;gBACjB,CAAC,CAAC,iBAAiB,CAAC;QACtB,OAAO,CAAC,GAAG,CAAC,YAAY,OAAO,UAAU,MAAM,GAAG,CAAC,CAAC;IACtD,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC,aAAa,CAAC,CAAC;IAE/C,QAAQ,KAAK,CAAC,MAAM,EAAE,CAAC;QACrB,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,CAAC;YACzC,MAAM,KAAK,GAAG,YAAY,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;YAC7C,OAAO,CAAC,GAAG,CAAC,kBAAkB,KAAK,GAAG,CAAC,CAAC;YACxC,IAAI,MAAM,EAAE,CAAC;gBACX,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,GAAG,EAAE,CAAC,CAAC;gBAC3E,OAAO,CAAC,GAAG,CACT,WAAW,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,cAAc,SAAS,MAAM,CAAC,CAAC,CAAC,wBAAwB,EAAE,CACtF,CAAC;YACJ,CAAC;YACD,MAAM;QACR,CAAC;QACD,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,EAAE,UAAU,CAAC,KAAK,CAAC;gBAC5C,CAAC,CAAC,SAAS,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE;gBACnC,CAAC,CAAC,KAAK,CAAC;YACV,MAAM,MAAM,GAAG,CAAC,MAAM,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,sBAAsB,CAAC;YAC1F,OAAO,CAAC,GAAG,CAAC,oBAAoB,MAAM,UAAU,MAAM,EAAE,CAAC,CAAC;YAC1D,MAAM;QACR,CAAC;QACD,KAAK,MAAM;YACT,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;YACzC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChB,IAAI,OAAO,EAAE,CAAC;gBACZ,OAAO,CAAC,GAAG,CAAC,YAAY,OAAO,uBAAuB,CAAC,CAAC;gBACxD,OAAO,CAAC,GAAG,CAAC,mCAAmC,OAAO,EAAE,CAAC,CAAC;YAC5D,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;gBAChC,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;YACpC,CAAC;YACD,MAAM;IACV,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,WAAW,aAAa,CAAC,UAAU,EAAE,CAAC,CAAC;AACrD,CAAC"}

package/dist/commands/credits/index.js

@@ -1,7 +1,7 @@
 import { ApiClient } from "@zivis/mcp/api-client";
-import { resolveConfigFromBinding } from "@zivis/mcp/project-binding";
+import { DEFAULT_CONFIG } from "@zivis/mcp/types";
 function buildClient(opts) {
-    const config = opts.session ? { ...resolveConfigFromBinding(process.cwd()), session: opts.session } : resolveConfigFromBinding(process.cwd());
+    const config = opts.session ? { ...DEFAULT_CONFIG, session: opts.session } : DEFAULT_CONFIG;
     return new ApiClient(config);
 }
 export function registerCreditsCommands(program) {
@@ -48,3 +48,4 @@ export function registerCreditsCommands(program) {
         }
     });
 }
+//# sourceMappingURL=index.js.map

package/dist/commands/credits/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/commands/credits/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAClD,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAYlD,SAAS,WAAW,CAAC,IAA0B;IAC7C,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,cAAc,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC;IAC5F,OAAO,IAAI,SAAS,CAAC,MAAM,CAAC,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,OAAgB;IACtD,OAAO;SACJ,OAAO,CAAC,SAAS,CAAC;SAClB,WAAW,CAAC,oDAAoD,CAAC;SACjE,MAAM,CAAC,sBAAsB,EAAE,eAAe,CAAC;SAC/C,MAAM,CAAC,QAAQ,EAAE,kDAAkD,CAAC;SACpE,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QACrB,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;QACjC,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACzC,MAAM,CAAC,OAAO,CAAgB,KAAK,EAAE,sBAAsB,CAAC;YAC5D,MAAM;iBACH,OAAO,CAAe,KAAK,EAAE,4BAA4B,CAAC;iBAC1D,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAmB,CAAA,CAAC;SACrC,CAAC,CAAC;QAEH,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;YACzE,OAAO;QACT,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACvB,IAAI,OAAO,OAAO,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;YACxC,OAAO,CAAC,GAAG,CAAC,eAAe,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;QAChD,CAAC;QACD,IAAI,OAAO,OAAO,CAAC,YAAY,KAAK,QAAQ,EAAE,CAAC;YAC7C,OAAO,CAAC,GAAG,CAAC,eAAe,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC;QACrD,CAAC;QACD,IAAI,OAAO,OAAO,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;YAC3C,OAAO,CAAC,GAAG,CAAC,eAAe,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;QACnD,CAAC;QACD,IAAI,OAAO,OAAO,CAAC,cAAc,KAAK,QAAQ,IAAI,OAAO,CAAC,cAAc,GAAG,CAAC,EAAE,CAAC;YAC7E,OAAO,CAAC,GAAG,CAAC,eAAe,OAAO,CAAC,cAAc,oBAAoB,CAAC,CAAC;QACzE,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC;QACpF,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChB,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;YACvC,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,OAAO,EAAE,CAAC;gBAClC,MAAM,GAAG,GAAG,CAAsC,CAAC;gBACnD,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,IAAI,CAAC,CAAC;gBAC7B,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,IAAI,CAAC,CAAC;gBAC3B,OAAO,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,IAAI,QAAQ,CAAC,CAAC;YACrF,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/commands/mcp/index.js

@@ -1,8 +1,6 @@
-import * as path from "node:path";
-import * as readline from "node:readline/promises";
 import { startServer } from "@zivis/mcp/server";
 import { DEFAULT_CONFIG } from "@zivis/mcp/types";
-import { setupCursorWorkspace, setupVsCodeCopilot, setupVsCodeClaude, setupClaudeCodeCli, setupCline, setupWindsurf, printClaudeCodeManual, writeGuidance, } from "../../internal/ide-setup.js";
+import { setupCursor, setupVsCodeCopilot, setupVsCodeClaude, setupClaudeCodeCli, setupCline, setupWindsurf, printClaudeCodeManual, } from "../../internal/ide-setup.js";
 const KNOWN_CLIENTS = [
     "cursor",
     "claude-code",
@@ -12,84 +10,50 @@ const KNOWN_CLIENTS = [
     "vscode-copilot",
     "vscode-claude",
 ];
-function toGuidanceClient(client) {
-    switch (client) {
-        case "cursor": return "cursor";
-        case "claude-code-cli": return "claude-code-cli";
-        case "vscode-copilot": return "vscode-copilot";
-        case "vscode-claude": return "vscode-claude";
-        case "cline": return "cline";
-        case "windsurf": return "windsurf";
-        default: return null;
-    }
-}
-async function promptYesNo(question) {
-    const rl = readline.createInterface({ input: process.stdin, output: process.stderr });
-    try {
-        const answer = (await rl.question(question)).trim().toLowerCase();
-        return answer !== "n" && answer !== "no";
-    }
-    finally {
-        rl.close();
-    }
-}
 export function registerMcpCommands(program) {
     const mcp = program.command("mcp").description("MCP server for IDE integration");
     mcp
         .command("serve")
         .description("start the stdio MCP server (called by your IDE, not directly)")
-        .option("-w, --workspace <path>", "workspace root for project binding detection (auto-set by IDE config, do not pass manually)")
-        .action(async (opts) => {
-        const config = { ...DEFAULT_CONFIG };
-        if (opts.workspace) {
-            config.workspacePath = path.resolve(opts.workspace);
-        }
-        await startServer(config);
+        .action(async () => {
+        await startServer(DEFAULT_CONFIG);
     });
     mcp
         .command("install")
-        .description("write MCP config for a supported IDE client (run from your project root)")
+        .description("write MCP config for a supported IDE client")
         .option("--client <name>", `target client (${KNOWN_CLIENTS.join(" | ")})`)
-        .option("--package <name>", "which ZIVIS MCP package to register: 'builder' (default, @zivis/mcp-builder, citizen-dev surface) or 'appsec' (@zivis/mcp, DevSecOps surface)", "builder")
-        .option("--with-guidance", "also write IDE guidance files so the AI knows when to suggest security checks (no prompt). Only applies to the appsec package; builder ships its own cadence block via zivis_setup.")
-        .option("--no-guidance", "skip writing IDE guidance files (no prompt)")
+        .option("-s, --session <name>", "include ZIVIS_SESSION env var")
         .action(async (opts) => {
         const client = opts.client?.toLowerCase();
-        const pkgArg = opts.package?.toLowerCase() ?? "builder";
+        const session = opts.session;
         if (!client) {
             console.error("Specify a client with --client <name>:");
             for (const c of KNOWN_CLIENTS)
                 console.error(`  zivis mcp install --client ${c}`);
             process.exit(1);
         }
-        if (pkgArg !== "appsec" && pkgArg !== "builder") {
-            console.error(`Unknown --package value: ${pkgArg}`);
-            console.error("Supported: appsec, builder");
-            process.exit(1);
-        }
-        const pkg = pkgArg;
         try {
             switch (client) {
                 case "cursor":
-                    await setupCursorWorkspace(pkg);
+                    await setupCursor(session);
                     break;
                 case "claude-code":
-                    printClaudeCodeManual(pkg);
+                    printClaudeCodeManual(session);
                     break;
                 case "claude-code-cli":
-                    await setupClaudeCodeCli(pkg);
+                    await setupClaudeCodeCli(session);
                     break;
                 case "cline":
-                    await setupCline(pkg);
+                    await setupCline(session);
                     break;
                 case "windsurf":
-                    await setupWindsurf(pkg);
+                    await setupWindsurf(session);
                     break;
                 case "vscode-copilot":
-                    await setupVsCodeCopilot(pkg);
+                    await setupVsCodeCopilot(session);
                     break;
                 case "vscode-claude":
-                    await setupVsCodeClaude(pkg);
+                    await setupVsCodeClaude(session);
                     break;
                 default:
                     console.error(`Unknown client: ${client}`);
@@ -101,37 +65,6 @@ export function registerMcpCommands(program) {
             console.error("Install failed:", err instanceof Error ? err.message : err);
             process.exit(1);
         }
-        if (client === "claude-code")
-            return;
-        if (pkg === "builder")
-            return;
-        const guidanceClient = toGuidanceClient(client);
-        if (!guidanceClient)
-            return;
-        let shouldWrite;
-        if (opts.withGuidance) {
-            shouldWrite = true;
-        }
-        else if (opts.guidance === false) {
-            shouldWrite = false;
-        }
-        else {
-            console.log("");
-            shouldWrite = await promptYesNo("Write ZIVIS guidance files so your IDE knows when to suggest security checks?\n" +
-                "(Adds a rule/instruction file to the project. You can edit or remove it anytime.) [Y/n] ");
-        }
-        if (shouldWrite) {
-            try {
-                const files = writeGuidance({ cwd: process.cwd(), client: guidanceClient });
-                if (files.length > 0) {
-                    console.log(`✓ Wrote guidance files:`);
-                    for (const f of files)
-                        console.log(`  ${f}`);
-                }
-            }
-            catch (err) {
-                console.warn(`  Warning: Could not write guidance files: ${err instanceof Error ? err.message : err}`);
-            }
-        }
     });
 }
+//# sourceMappingURL=index.js.map

package/dist/commands/mcp/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/commands/mcp/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EACL,WAAW,EACX,kBAAkB,EAClB,iBAAiB,EACjB,kBAAkB,EAClB,UAAU,EACV,aAAa,EACb,qBAAqB,GACtB,MAAM,6BAA6B,CAAC;AAErC,MAAM,aAAa,GAAG;IACpB,QAAQ;IACR,aAAa;IACb,iBAAiB;IACjB,OAAO;IACP,UAAU;IACV,gBAAgB;IAChB,eAAe;CACP,CAAC;AAEX,MAAM,UAAU,mBAAmB,CAAC,OAAgB;IAClD,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,WAAW,CAAC,gCAAgC,CAAC,CAAC;IAEjF,GAAG;SACA,OAAO,CAAC,OAAO,CAAC;SAChB,WAAW,CAAC,+DAA+D,CAAC;SAC5E,MAAM,CAAC,KAAK,IAAI,EAAE;QACjB,MAAM,WAAW,CAAC,cAAc,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;IAEL,GAAG;SACA,OAAO,CAAC,SAAS,CAAC;SAClB,WAAW,CAAC,6CAA6C,CAAC;SAC1D,MAAM,CACL,iBAAiB,EACjB,kBAAkB,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAC/C;SACA,MAAM,CAAC,sBAAsB,EAAE,+BAA+B,CAAC;SAC/D,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QACrB,MAAM,MAAM,GAAI,IAAI,CAAC,MAA6B,EAAE,WAAW,EAAE,CAAC;QAClE,MAAM,OAAO,GAAG,IAAI,CAAC,OAA6B,CAAC;QAEnD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,CAAC,KAAK,CAAC,wCAAwC,CAAC,CAAC;YACxD,KAAK,MAAM,CAAC,IAAI,aAAa;gBAAE,OAAO,CAAC,KAAK,CAAC,gCAAgC,CAAC,EAAE,CAAC,CAAC;YAClF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,IAAI,CAAC;YACH,QAAQ,MAAM,EAAE,CAAC;gBACf,KAAK,QAAQ;oBACX,MAAM,WAAW,CAAC,OAAO,CAAC,CAAC;oBAC3B,MAAM;gBACR,KAAK,aAAa;oBAChB,qBAAqB,CAAC,OAAO,CAAC,CAAC;oBAC/B,MAAM;gBACR,KAAK,iBAAiB;oBACpB,MAAM,kBAAkB,CAAC,OAAO,CAAC,CAAC;oBAClC,MAAM;gBACR,KAAK,OAAO;oBACV,MAAM,UAAU,CAAC,OAAO,CAAC,CAAC;oBAC1B,MAAM;gBACR,KAAK,UAAU;oBACb,MAAM,aAAa,CAAC,OAAO,CAAC,CAAC;oBAC7B,MAAM;gBACR,KAAK,gBAAgB;oBACnB,MAAM,kBAAkB,CAAC,OAAO,CAAC,CAAC;oBAClC,MAAM;gBACR,KAAK,eAAe;oBAClB,MAAM,iBAAiB,CAAC,OAAO,CAAC,CAAC;oBACjC,MAAM;gBACR;oBACE,OAAO,CAAC,KAAK,CAAC,mBAAmB,MAAM,EAAE,CAAC,CAAC;oBAC3C,OAAO,CAAC,KAAK,CAAC,cAAc,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;oBACxD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACpB,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,iBAAiB,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;YAC3E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/commands/open/index.d.ts

@@ -1,2 +1,10 @@
+/**
+ * `zivis open` — Build and (by default) launch a vscode:// or cursor:// deep link
+ * that opens a ZIVIS artifact in the ZIVIS Code IDE extension. Use `--ide cursor`
+ * for Cursor. With --print, emit the URI to stdout for piping/sharing.
+ *
+ * Mirrors the URI shape emitted by the `zivis_open_in_ide` MCP tool and the
+ * web app's buildIdeLink() helper. See docs/platform/integrations/IDE-DEEP-LINKS.md.
+ */
 import type { Command } from "commander";
 export declare function registerOpenCommands(program: Command): void;

package/dist/commands/open/index.js

@@ -1,3 +1,11 @@
+/**
+ * `zivis open` — Build and (by default) launch a vscode:// or cursor:// deep link
+ * that opens a ZIVIS artifact in the ZIVIS Code IDE extension. Use `--ide cursor`
+ * for Cursor. With --print, emit the URI to stdout for piping/sharing.
+ *
+ * Mirrors the URI shape emitted by the `zivis_open_in_ide` MCP tool and the
+ * web app's buildIdeLink() helper. See docs/platform/integrations/IDE-DEEP-LINKS.md.
+ */
 const KINDS = ["diagram", "document", "threat-model"];
 export function registerOpenCommands(program) {
     program
@@ -39,8 +47,11 @@ export function registerOpenCommands(program) {
             console.log(uri);
             return;
         }
+        // Lazy-import `open` so --print stays dependency-free in environments
+        // (e.g. headless CI) where launching a URL handler would fail or hang.
         const { default: open } = await import("open");
         await open(uri);
         console.log(uri);
     });
 }
+//# sourceMappingURL=index.js.map

package/dist/commands/open/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/commands/open/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,MAAM,KAAK,GAAG,CAAC,SAAS,EAAE,UAAU,EAAE,cAAc,CAAU,CAAC;AAG/D,MAAM,UAAU,oBAAoB,CAAC,OAAgB;IACnD,OAAO;SACJ,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,uDAAuD,CAAC;SACpE,MAAM,CAAC,gBAAgB,EAAE,wBAAwB,CAAC;SAClD,MAAM,CAAC,iBAAiB,EAAE,yBAAyB,CAAC;SACpD,MAAM,CAAC,qBAAqB,EAAE,+CAA+C,CAAC;SAC9E,MAAM,CAAC,gBAAgB,EAAE,mDAAmD,CAAC;SAC7E,MAAM,CAAC,SAAS,EAAE,2CAA2C,CAAC;SAC9D,MAAM,CACL,gBAAgB,EAChB,kEAAkE,EAClE,QAAQ,CACT;SACA,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QACrB,MAAM,OAAO,GAAsC,EAAE,CAAC;QACtD,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC9E,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACjF,IAAI,IAAI,CAAC,WAAW;YAAE,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QAE3F,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,CAAC,KAAK,CAAC,sEAAsE,CAAC,CAAC;YACtF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,OAAO,CAAC,KAAK,CAAC,+DAA+D,CAAC,CAAC;YAC/E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QAChC,MAAM,KAAK,GAAG,IAAI,CAAC,KAA2B,CAAC;QAE/C,MAAM,EAAE,GAAG,IAAI,eAAe,EAAE,CAAC;QACjC,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACjB,IAAI,KAAK,EAAE,CAAC;YACV,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QACxD,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;QACvD,MAAM,MAAM,GAAG,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC;QACtD,MAAM,GAAG,GAAG,GAAG,MAAM,6BAA6B,IAAI,IAAI,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC;QAE1E,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACjB,OAAO;QACT,CAAC;QAED,sEAAsE;QACtE,uEAAuE;QACvE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,CAAC;QAC/C,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACnB,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/commands/scan/index.js

@@ -1,8 +1,8 @@
 import { ApiClient } from "@zivis/mcp/api-client";
-import { resolveConfigFromBinding } from "@zivis/mcp/project-binding";
+import { DEFAULT_CONFIG } from "@zivis/mcp/types";
 const VALID_TARGET_TYPES = ["ai_chat", "web_app", "api"];
 function buildClient(opts) {
-    const config = opts.session ? { ...resolveConfigFromBinding(process.cwd()), session: opts.session } : resolveConfigFromBinding(process.cwd());
+    const config = opts.session ? { ...DEFAULT_CONFIG, session: opts.session } : DEFAULT_CONFIG;
     return new ApiClient(config);
 }
 export function registerScanCommands(program) {
@@ -118,6 +118,11 @@ export function registerScanCommands(program) {
         }
     });
 }
+/**
+ * Map customer-facing ApplicationType to the RT scan's targetType enum.
+ * The two enums differ historically: ApplicationType is product-shape,
+ * targetType is what the RT runner needs to know about the wire format.
+ */
 function appTypeToTargetType(appType) {
     switch (appType) {
         case "agent":
@@ -126,10 +131,10 @@ function appTypeToTargetType(appType) {
             return "ai_chat";
         case "rest_api":
             return "api";
-        case "application":
         case "ad_hoc_url":
             return "web_app";
         default:
             return undefined;
     }
 }
+//# sourceMappingURL=index.js.map

package/dist/commands/scan/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/commands/scan/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAClD,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAElD,MAAM,kBAAkB,GAAG,CAAC,SAAS,EAAE,SAAS,EAAE,KAAK,CAAU,CAAC;AAElE,SAAS,WAAW,CAAC,IAA0B;IAC7C,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,cAAc,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC;IAC5F,OAAO,IAAI,SAAS,CAAC,MAAM,CAAC,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,OAAgB;IACnD,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,WAAW,CAAC,8BAA8B,CAAC,CAAC;IAEjF,IAAI;SACD,OAAO,CAAC,KAAK,CAAC;SACd,WAAW,CAAC,6EAA6E,CAAC;SAC1F,MAAM,CAAC,sBAAsB,EAAE,eAAe,CAAC;SAC/C,MAAM,CAAC,uBAAuB,EAAE,qDAAqD,CAAC;SACtF,MAAM,CAAC,mBAAmB,EAAE,6CAA6C,CAAC;SAC1E,MAAM,CAAC,qBAAqB,EAAE,gBAAgB,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;SAC9E,MAAM,CAAC,mBAAmB,EAAE,6DAA6D,CAAC;SAC1F,MAAM,CAAC,eAAe,EAAE,kCAAkC,CAAC;SAC3D,MAAM,CAAC,mBAAmB,EAAE,+DAA+D,CAAC;SAC5F,MAAM,CAAC,qBAAqB,EAAE,4CAA4C,CAAC;SAC3E,MAAM,CAAC,gBAAgB,EAAE,eAAe,EAAE,GAAG,CAAC;SAC9C,MAAM,CAAC,QAAQ,EAAE,eAAe,CAAC;SACjC,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QACrB,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;QAEjC,IAAI,SAAS,GAAG,IAAI,CAAC,GAAyB,CAAC;QAC/C,IAAI,UAAU,GAAG,IAAI,CAAC,IAA0B,CAAC;QACjD,IAAI,OAA2B,CAAC;QAEhC,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;YACb,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,OAAO,CAK7B,KAAK,EAAE,qBAAqB,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;YAC3E,OAAO,GAAG,GAAG,CAAC,IAAI,CAAC;YACnB,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,SAAS,GAAG,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC;YAC/C,CAAC;YACD,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,UAAU,GAAG,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAC7C,CAAC;QACH,CAAC;QAED,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,oEAAoE,CAAC,CAAC;YACpF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,IAAI,CAAC,UAAU,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,UAAiB,CAAC,EAAE,CAAC;YACnE,OAAO,CAAC,KAAK,CAAC,0BAA0B,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACzE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC;aAC1C,KAAK,CAAC,GAAG,CAAC;aACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;aACpB,MAAM,CAAC,OAAO,CAAC,CAAC;QACnB,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3B,OAAO,CAAC,KAAK,CAAC,0EAA0E,CAAC,CAAC;YAC1F,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,MAAM,WAAW,GAAG,IAAI,CAAC,QAAQ;YAC/B,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;YACvE,CAAC,CAAC,SAAS,CAAC;QAEd,IAAI,SAAS,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,WAAW,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;YAC7E,OAAO,CAAC,KAAK,CACX,qEAAqE,CACtE,CAAC;YACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,MAAM,IAAI,GAA4B;YACpC,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC;YAC7D,SAAS;YACT,UAAU;YACV,SAAS;YACT,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC,IAAI,CAAC;SAC3C,CAAC;QACF,IAAI,WAAW;YAAE,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAChD,IAAI,IAAI,CAAC,WAAW;YAAE,IAAI,CAAC,mBAAmB,GAAG,IAAI,CAAC,WAAW,CAAC;QAElE,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,OAAO,CACjC,MAAM,EACN,eAAe,EACf,IAAI,CACL,CAAC;YACF,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;gBACd,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;gBAC7D,OAAO;YACT,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,UAAU,MAAM,CAAC,IAAI,CAAC,EAAE,YAAY,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;YACvE,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI;gBAAE,OAAO,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QAC7D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,sBAAsB,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;YAChF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,IAAI;SACD,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,yCAAyC,CAAC;SACtD,MAAM,CAAC,sBAAsB,EAAE,eAAe,CAAC;SAC/C,MAAM,CAAC,uBAAuB,EAAE,uBAAuB,CAAC;SACxD,MAAM,CAAC,mBAAmB,EAAE,qDAAqD,CAAC;SAClF,MAAM,CAAC,aAAa,EAAE,UAAU,EAAE,IAAI,CAAC;SACvC,MAAM,CAAC,QAAQ,EAAE,eAAe,CAAC;SACjC,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QACrB,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;QACjC,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;QACrC,IAAI,IAAI,CAAC,GAAG;YAAE,MAAM,CAAC,GAAG,CAAC,eAAe,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QACpD,IAAI,IAAI,CAAC,MAAM;YAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QACnD,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QAChC,MAAM,IAAI,GAAG,iBAAiB,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC;QAClD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,OAAO,CACjC,KAAK,EACL,IAAI,CACL,CAAC;QACF,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;YAC7D,OAAO;QACT,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC;QACjC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YAClB,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YACzB,OAAO;QACT,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;YACtB,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC,CAAC;YAChE,IAAI,CAAC,CAAC,SAAS;gBAAE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;QACnD,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC;AAED;;;;GAIG;AACH,SAAS,mBAAmB,CAAC,OAAgB;IAC3C,QAAQ,OAAO,EAAE,CAAC;QAChB,KAAK,OAAO,CAAC;QACb,KAAK,cAAc,CAAC;QACpB,KAAK,YAAY;YACf,OAAO,SAAS,CAAC;QACnB,KAAK,UAAU;YACb,OAAO,KAAK,CAAC;QACf,KAAK,YAAY;YACf,OAAO,SAAS,CAAC;QACnB;YACE,OAAO,SAAS,CAAC;IACrB,CAAC;AACH,CAAC"}