auden 0.1.0-alpha.2

package/dist/config.js

@@ -0,0 +1,246 @@
+import { chmod, mkdir, readFile, stat, writeFile } from 'node:fs/promises';
+import { dirname } from 'node:path';
+import { AUDEN_CONFIG } from './auden-paths.js';
+/** Permission bits for `~/.auden/` and other auden-owned directories. */
+export const AUDEN_DIR_MODE = 0o700;
+/** Permission bits for `~/.auden/config.json` — it holds a bearer token. */
+export const AUDEN_CONFIG_MODE = 0o600;
+/**
+ * Create `dir` (and parents) with owner-only permissions, tightening an
+ * existing directory's mode too — `mkdir`'s `mode` option only applies to
+ * newly-created directories, so a pre-existing `~/.auden` from an older
+ * version (or a permissive umask) would otherwise stay world-readable.
+ */
+export async function ensureAudenDir(dir) {
+    await mkdir(dir, { recursive: true, mode: AUDEN_DIR_MODE });
+    await chmod(dir, AUDEN_DIR_MODE).catch(() => { });
+}
+/**
+ * Write JSON to `configPath` with owner-only file permissions (it stores a
+ * bearer token). Creates the parent directory (also owner-only) if needed.
+ */
+async function writeConfigFile(configPath, contents) {
+    await ensureAudenDir(dirname(configPath));
+    await writeFile(configPath, contents, { mode: AUDEN_CONFIG_MODE });
+    // `writeFile`'s mode option only applies when creating the file — chmod
+    // unconditionally so an existing file with looser permissions is tightened.
+    await chmod(configPath, AUDEN_CONFIG_MODE).catch(() => { });
+}
+/** Tighten an existing config file's permissions if they're looser than 0600. */
+async function tightenConfigPermissions(configPath) {
+    try {
+        const info = await stat(configPath);
+        if ((info.mode & 0o777) !== AUDEN_CONFIG_MODE) {
+            await chmod(configPath, AUDEN_CONFIG_MODE);
+        }
+    }
+    catch {
+        // Missing or unreadable — nothing to tighten.
+    }
+}
+/**
+ * Baked-in fallback when the config file has no `dashboardUrl`. Build-time
+ * constant so a stripped-down `auden` binary (no config, no flags) still
+ * talks to prod.
+ */
+export const DEFAULT_DASHBOARD_URL = 'https://app.auden.to';
+/**
+ * Normalize a candidate dashboard URL to its origin (scheme + host + port).
+ * Returns '' when the input is empty, whitespace-only, unparseable, or has a
+ * non-http(s) protocol. Centralized here so reads, writes, the resolve
+ * helper, and the `auden init` flag-validation path all agree on what counts
+ * as a valid URL and what gets stripped (paths, queries, fragments, trailing
+ * whitespace).
+ */
+export function normalizeDashboardUrl(value) {
+    const trimmed = value.trim();
+    if (!trimmed)
+        return '';
+    try {
+        const url = new URL(trimmed);
+        if (url.protocol !== 'http:' && url.protocol !== 'https:')
+            return '';
+        return url.origin;
+    }
+    catch {
+        return '';
+    }
+}
+async function readParsedConfig(path = AUDEN_CONFIG) {
+    let raw;
+    try {
+        raw = await readFile(path, 'utf8');
+    }
+    catch (err) {
+        if (err.code === 'ENOENT') {
+            return { parsed: {}, missing: true, malformed: false };
+        }
+        // Other read errors (permissions, etc.) — treat as malformed so callers
+        // that want to write are forced to handle it explicitly.
+        return { parsed: {}, missing: false, malformed: true };
+    }
+    // The file holds a bearer token — tighten permissions on read in case it
+    // was created by an older version of the CLI or under a permissive umask.
+    await tightenConfigPermissions(path);
+    try {
+        const parsed = JSON.parse(raw);
+        if (parsed && typeof parsed === 'object' && !Array.isArray(parsed)) {
+            return {
+                parsed: parsed,
+                missing: false,
+                malformed: false,
+            };
+        }
+        return { parsed: {}, missing: false, malformed: true };
+    }
+    catch {
+        return { parsed: {}, missing: false, malformed: true };
+    }
+}
+/**
+ * Read the stored API token (persisted by `auden init --token` or the first
+ * successful `auden sync --token`). Returns '' if absent or unreadable.
+ */
+export async function readConfigToken(configPath = AUDEN_CONFIG) {
+    const { parsed } = await readParsedConfig(configPath);
+    return typeof parsed['token'] === 'string' ? parsed['token'] : '';
+}
+/**
+ * Persist the API token while preserving any other fields already in the
+ * config file. Same malformed-config guard as the other writers — refuses to
+ * overwrite a broken file. Throws on an empty/whitespace token so callers
+ * can't silently wipe a working credential.
+ */
+export async function writeConfigToken(value, configPath = AUDEN_CONFIG) {
+    const trimmed = value.trim();
+    if (!trimmed) {
+        throw new Error('Refusing to store an empty token.');
+    }
+    const { parsed, malformed } = await readParsedConfig(configPath);
+    if (malformed) {
+        throw new Error(`Refusing to overwrite malformed config at ${configPath}. ` +
+            'Fix or remove the file before re-running.');
+    }
+    parsed['token'] = trimmed;
+    await writeConfigFile(configPath, JSON.stringify(parsed, null, 2) + '\n');
+}
+/**
+ * Read the `discoverGlobal` flag. When true, `auden rules import` extends its
+ * default scan to `~/.claude/CLAUDE.md`. Defaults to false on missing or
+ * malformed config.
+ */
+export async function readConfigDiscoverGlobal(configPath = AUDEN_CONFIG) {
+    const { parsed } = await readParsedConfig(configPath);
+    return parsed['discoverGlobal'] === true;
+}
+/**
+ * Persist `discoverGlobal` while preserving any other fields already in the
+ * config file. Creates the parent directory if needed.
+ *
+ * Throws when the existing config file is present but malformed, rather than
+ * silently overwriting it — callers must surface the error so the user can
+ * fix or remove the file before retrying.
+ */
+export async function writeConfigDiscoverGlobal(value, configPath = AUDEN_CONFIG) {
+    const { parsed, malformed } = await readParsedConfig(configPath);
+    if (malformed) {
+        throw new Error(`Refusing to overwrite malformed config at ${configPath}. ` +
+            'Fix or remove the file before re-running.');
+    }
+    parsed['discoverGlobal'] = value;
+    await writeConfigFile(configPath, JSON.stringify(parsed, null, 2) + '\n');
+}
+/**
+ * Read the MCP bundle allowlist. When set to a non-empty array of slugs,
+ * `auden mcp` only exposes those bundles; when absent, empty, or malformed it
+ * returns `null`, meaning "no restriction" (all of the caller's bundles are
+ * reachable). A `--bundles` flag overrides this per invocation.
+ */
+export async function readConfigMcpBundles(configPath = AUDEN_CONFIG) {
+    const { parsed } = await readParsedConfig(configPath);
+    const value = parsed['mcp'];
+    if (!value || typeof value !== 'object' || Array.isArray(value))
+        return null;
+    const bundles = value['bundles'];
+    if (!Array.isArray(bundles))
+        return null;
+    // Trim each slug so a hand-edited config with stray whitespace (" work ")
+    // matches the real slug — consistent with the `--bundles` flag parser.
+    const slugs = bundles
+        .filter((s) => typeof s === 'string')
+        .map((s) => s.trim())
+        .filter((s) => s !== '');
+    return slugs.length > 0 ? slugs : null;
+}
+/**
+ * Read whether `auden mcp` may perform writes (push/update/archive). Defaults
+ * to `true` — writes are enabled unless the config explicitly sets
+ * `mcp.write: false` or the caller passes `--read-only`. Returns `true` on a
+ * missing or malformed config so a fresh install is fully functional.
+ */
+export async function readConfigMcpWrite(configPath = AUDEN_CONFIG) {
+    const { parsed } = await readParsedConfig(configPath);
+    const value = parsed['mcp'];
+    if (!value || typeof value !== 'object' || Array.isArray(value))
+        return true;
+    return value['write'] !== false;
+}
+/**
+ * Read the configured dashboard base URL. Returns '' when absent, malformed,
+ * not a string, or not a valid http(s) URL. Always normalized to origin so
+ * callers can concatenate `${url}/api/...` without thinking about paths,
+ * trailing slashes, or stray whitespace from hand-edited configs.
+ */
+export async function readConfigDashboardUrl(configPath = AUDEN_CONFIG) {
+    const { parsed } = await readParsedConfig(configPath);
+    const value = parsed['dashboardUrl'];
+    if (typeof value !== 'string')
+        return '';
+    return normalizeDashboardUrl(value);
+}
+/**
+ * Persist the dashboard URL. Same malformed-config guard as
+ * writeConfigDiscoverGlobal — refuses to overwrite a broken file. Throws
+ * when the value isn't a valid http(s) URL so callers can't silently store
+ * garbage that fails later at fetch time.
+ */
+export async function writeConfigDashboardUrl(value, configPath = AUDEN_CONFIG) {
+    const normalized = normalizeDashboardUrl(value);
+    if (!normalized) {
+        throw new Error(`Refusing to store invalid dashboard URL: ${JSON.stringify(value)}`);
+    }
+    const { parsed, malformed } = await readParsedConfig(configPath);
+    if (malformed) {
+        throw new Error(`Refusing to overwrite malformed config at ${configPath}. ` +
+            'Fix or remove the file before re-running.');
+    }
+    parsed['dashboardUrl'] = normalized;
+    await writeConfigFile(configPath, JSON.stringify(parsed, null, 2) + '\n');
+}
+/**
+ * Resolve which dashboard URL a command should hit. Precedence:
+ *   1. Explicit `--dashboard-url` flag (`flag` arg, when non-empty and valid)
+ *   2. `dashboardUrl` field in ~/.auden/config.json
+ *   3. DEFAULT_DASHBOARD_URL baked into the build
+ *
+ * Throws when the flag was supplied but isn't a valid http(s) URL — silent
+ * fallback would let `auden sync --dashboard-url htps://typo` hit prod
+ * instead of the intended override. Matches `auden init`'s strictness.
+ *
+ * The result is always a bare origin (no path, no trailing slash) so
+ * `${resolved}/api/sync` works.
+ */
+export async function resolveDashboardUrl(flag = '', configPath = AUDEN_CONFIG) {
+    if (flag.trim()) {
+        const fromFlag = normalizeDashboardUrl(flag);
+        if (!fromFlag) {
+            throw new Error(`--dashboard-url is not a valid http(s) URL: ${flag}`);
+        }
+        return fromFlag;
+    }
+    const fromConfig = await readConfigDashboardUrl(configPath);
+    if (fromConfig)
+        return fromConfig;
+    return DEFAULT_DASHBOARD_URL;
+}
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AAC1E,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAEnC,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAA;AAE/C,yEAAyE;AACzE,MAAM,CAAC,MAAM,cAAc,GAAG,KAAK,CAAA;AACnC,4EAA4E;AAC5E,MAAM,CAAC,MAAM,iBAAiB,GAAG,KAAK,CAAA;AAEtC;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,GAAW;IAC9C,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAA;IAC3D,MAAM,KAAK,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;AAClD,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,eAAe,CAAC,UAAkB,EAAE,QAAgB;IACjE,MAAM,cAAc,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAA;IACzC,MAAM,SAAS,CAAC,UAAU,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC,CAAA;IAClE,wEAAwE;IACxE,4EAA4E;IAC5E,MAAM,KAAK,CAAC,UAAU,EAAE,iBAAiB,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;AAC5D,CAAC;AAED,iFAAiF;AACjF,KAAK,UAAU,wBAAwB,CAAC,UAAkB;IACxD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,CAAA;QACnC,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,iBAAiB,EAAE,CAAC;YAC9C,MAAM,KAAK,CAAC,UAAU,EAAE,iBAAiB,CAAC,CAAA;QAC5C,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,8CAA8C;IAChD,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,sBAAsB,CAAA;AAE3D;;;;;;;GAOG;AACH,MAAM,UAAU,qBAAqB,CAAC,KAAa;IACjD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAA;IAC5B,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,CAAA;IACvB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAA;QAC5B,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ;YAAE,OAAO,EAAE,CAAA;QACpE,OAAO,GAAG,CAAC,MAAM,CAAA;IACnB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAA;IACX,CAAC;AACH,CAAC;AAWD,KAAK,UAAU,gBAAgB,CAAC,IAAI,GAAG,YAAY;IACjD,IAAI,GAAW,CAAA;IACf,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;IACpC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACrD,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAA;QACxD,CAAC;QACD,wEAAwE;QACxE,yDAAyD;QACzD,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,CAAA;IACxD,CAAC;IAED,yEAAyE;IACzE,0EAA0E;IAC1E,MAAM,wBAAwB,CAAC,IAAI,CAAC,CAAA;IAEpC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,CAAA;QACzC,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YACnE,OAAO;gBACL,MAAM,EAAE,MAAiC;gBACzC,OAAO,EAAE,KAAK;gBACd,SAAS,EAAE,KAAK;aACjB,CAAA;QACH,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,CAAA;IACxD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,CAAA;IACxD,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,UAAU,GAAG,YAAY;IAC7D,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,gBAAgB,CAAC,UAAU,CAAC,CAAA;IACrD,OAAO,OAAO,MAAM,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;AACnE,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,KAAa,EACb,UAAU,GAAG,YAAY;IAEzB,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAA;IAC5B,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAA;IACtD,CAAC;IACD,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,gBAAgB,CAAC,UAAU,CAAC,CAAA;IAChE,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CACb,6CAA6C,UAAU,IAAI;YACzD,2CAA2C,CAC9C,CAAA;IACH,CAAC;IACD,MAAM,CAAC,OAAO,CAAC,GAAG,OAAO,CAAA;IACzB,MAAM,eAAe,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAA;AAC3E,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,UAAU,GAAG,YAAY;IAEzB,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,gBAAgB,CAAC,UAAU,CAAC,CAAA;IACrD,OAAO,MAAM,CAAC,gBAAgB,CAAC,KAAK,IAAI,CAAA;AAC1C,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,KAAc,EACd,UAAU,GAAG,YAAY;IAEzB,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,gBAAgB,CAAC,UAAU,CAAC,CAAA;IAChE,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CACb,6CAA6C,UAAU,IAAI;YACzD,2CAA2C,CAC9C,CAAA;IACH,CAAC;IACD,MAAM,CAAC,gBAAgB,CAAC,GAAG,KAAK,CAAA;IAChC,MAAM,eAAe,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAA;AAC3E,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,UAAU,GAAG,YAAY;IAEzB,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,gBAAgB,CAAC,UAAU,CAAC,CAAA;IACrD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAA;IAC3B,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IAC5E,MAAM,OAAO,GAAI,KAAiC,CAAC,SAAS,CAAC,CAAA;IAC7D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAA;IACxC,0EAA0E;IAC1E,uEAAuE;IACvE,MAAM,KAAK,GAAG,OAAO;SAClB,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC;SACjD,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAA;IAC1B,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAA;AACxC,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,UAAU,GAAG,YAAY;IAChE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,gBAAgB,CAAC,UAAU,CAAC,CAAA;IACrD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAA;IAC3B,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IAC5E,OAAQ,KAAiC,CAAC,OAAO,CAAC,KAAK,KAAK,CAAA;AAC9D,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,UAAU,GAAG,YAAY;IACpE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,gBAAgB,CAAC,UAAU,CAAC,CAAA;IACrD,MAAM,KAAK,GAAG,MAAM,CAAC,cAAc,CAAC,CAAA;IACpC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAA;IACxC,OAAO,qBAAqB,CAAC,KAAK,CAAC,CAAA;AACrC,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,KAAa,EACb,UAAU,GAAG,YAAY;IAEzB,MAAM,UAAU,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAA;IAC/C,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,IAAI,KAAK,CAAC,4CAA4C,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;IACtF,CAAC;IACD,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,gBAAgB,CAAC,UAAU,CAAC,CAAA;IAChE,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CACb,6CAA6C,UAAU,IAAI;YACzD,2CAA2C,CAC9C,CAAA;IACH,CAAC;IACD,MAAM,CAAC,cAAc,CAAC,GAAG,UAAU,CAAA;IACnC,MAAM,eAAe,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAA;AAC3E,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,IAAI,GAAG,EAAE,EACT,UAAU,GAAG,YAAY;IAEzB,IAAI,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;QAChB,MAAM,QAAQ,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAA;QAC5C,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CAAC,+CAA+C,IAAI,EAAE,CAAC,CAAA;QACxE,CAAC;QACD,OAAO,QAAQ,CAAA;IACjB,CAAC;IACD,MAAM,UAAU,GAAG,MAAM,sBAAsB,CAAC,UAAU,CAAC,CAAA;IAC3D,IAAI,UAAU;QAAE,OAAO,UAAU,CAAA;IACjC,OAAO,qBAAqB,CAAA;AAC9B,CAAC"}

package/dist/context/pull.d.ts

@@ -0,0 +1,40 @@
+/**
+ * Core logic for the `auden pull <bundle>` command: fetch a bundle's canonical
+ * items via the shared `ContextClient` and materialize them to a local
+ * directory as Markdown. This is the plain-terminal twin of the MCP
+ * `pull_context` tool (`src/mcp/server.ts`) — same client, same
+ * `writeItemsToDir` write path — so a human can drop scoped context into a repo
+ * without wiring an agent.
+ *
+ * Kept free of citty/console so it unit-tests directly against a mocked client.
+ */
+import type { ContextClient, PullContextParams } from '../mcp/client.js';
+import type { WriteItemsDeps } from '../mcp/write-items.js';
+import type { ContextItem } from '@auden.to/protocol';
+export type PullBundleParams = PullContextParams;
+export type PullBundleResult = {
+    /** Every item the bundle returned, including items with null content (e.g. assets). */
+    items: readonly ContextItem[];
+    /** Paths written to disk (excludes null-content items, which are skipped). */
+    written: string[];
+};
+/**
+ * Turn a bundle slug into a safe single path segment for the default output
+ * directory. Strips path separators and leading dots so a crafted slug cannot
+ * escape the target directory, and falls back to `bundle` when the slug reduces
+ * to nothing. Mirrors the defensive posture of `safeItemFileName`.
+ */
+export declare function safeBundleDirName(bundle: string): string;
+/**
+ * Default output directory for `auden pull <bundle>` when `--out` is not given:
+ * `<cwd>/.auden/context/<bundle>/`. Keeps pulled context out of the way of the
+ * repo's own tree while staying discoverable.
+ */
+export declare function defaultPullDir(bundle: string, cwd: string): string;
+/**
+ * Pull `params.bundle`'s items and write each to `dir` as `<safe-name>.md`.
+ * Returns the full item list (for a caller-facing summary) alongside the paths
+ * actually written. `deps` injects the filesystem for tests.
+ */
+export declare function pullBundleToDir(client: ContextClient, params: PullBundleParams, dir: string, deps?: WriteItemsDeps): Promise<PullBundleResult>;
+//# sourceMappingURL=pull.d.ts.map

package/dist/context/pull.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pull.d.ts","sourceRoot":"","sources":["../../src/context/pull.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAMH,OAAO,KAAK,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAA;AACxE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAA;AAC3D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AAErD,MAAM,MAAM,gBAAgB,GAAG,iBAAiB,CAAA;AAEhD,MAAM,MAAM,gBAAgB,GAAG;IAC7B,uFAAuF;IACvF,KAAK,EAAE,SAAS,WAAW,EAAE,CAAA;IAC7B,8EAA8E;IAC9E,OAAO,EAAE,MAAM,EAAE,CAAA;CAClB,CAAA;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAQxD;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAElE;AAED;;;;GAIG;AACH,wBAAsB,eAAe,CACnC,MAAM,EAAE,aAAa,EACrB,MAAM,EAAE,gBAAgB,EACxB,GAAG,EAAE,MAAM,EACX,IAAI,GAAE,cAAmB,GACxB,OAAO,CAAC,gBAAgB,CAAC,CAI3B"}

package/dist/context/pull.js

@@ -0,0 +1,46 @@
+/**
+ * Core logic for the `auden pull <bundle>` command: fetch a bundle's canonical
+ * items via the shared `ContextClient` and materialize them to a local
+ * directory as Markdown. This is the plain-terminal twin of the MCP
+ * `pull_context` tool (`src/mcp/server.ts`) — same client, same
+ * `writeItemsToDir` write path — so a human can drop scoped context into a repo
+ * without wiring an agent.
+ *
+ * Kept free of citty/console so it unit-tests directly against a mocked client.
+ */
+import { join } from 'node:path';
+import { writeItemsToDir } from '../mcp/write-items.js';
+/**
+ * Turn a bundle slug into a safe single path segment for the default output
+ * directory. Strips path separators and leading dots so a crafted slug cannot
+ * escape the target directory, and falls back to `bundle` when the slug reduces
+ * to nothing. Mirrors the defensive posture of `safeItemFileName`.
+ */
+export function safeBundleDirName(bundle) {
+    const cleaned = bundle
+        .trim()
+        .replace(/[/\\]/g, '-') // no path separators: single segment, no traversal
+        .replace(/[<>:"|?*]/g, '-') // chars invalid in Windows filenames
+        .replace(/^[-.]+/, '') // no leading dots/dashes (., .., dotfiles-as-traversal)
+        .trim();
+    return cleaned || 'bundle';
+}
+/**
+ * Default output directory for `auden pull <bundle>` when `--out` is not given:
+ * `<cwd>/.auden/context/<bundle>/`. Keeps pulled context out of the way of the
+ * repo's own tree while staying discoverable.
+ */
+export function defaultPullDir(bundle, cwd) {
+    return join(cwd, '.auden', 'context', safeBundleDirName(bundle));
+}
+/**
+ * Pull `params.bundle`'s items and write each to `dir` as `<safe-name>.md`.
+ * Returns the full item list (for a caller-facing summary) alongside the paths
+ * actually written. `deps` injects the filesystem for tests.
+ */
+export async function pullBundleToDir(client, params, dir, deps = {}) {
+    const { items } = await client.pullContext(params);
+    const written = await writeItemsToDir(items, dir, deps);
+    return { items, written };
+}
+//# sourceMappingURL=pull.js.map

package/dist/context/pull.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pull.js","sourceRoot":"","sources":["../../src/context/pull.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAEhC,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAA;AAevD;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAc;IAC9C,MAAM,OAAO,GAAG,MAAM;SACnB,IAAI,EAAE;SACN,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,mDAAmD;SAC1E,OAAO,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC,qCAAqC;SAChE,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,wDAAwD;SAC9E,IAAI,EAAE,CAAA;IACT,OAAO,OAAO,IAAI,QAAQ,CAAA;AAC5B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,MAAc,EAAE,GAAW;IACxD,OAAO,IAAI,CAAC,GAAG,EAAE,QAAQ,EAAE,SAAS,EAAE,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAA;AAClE,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,MAAqB,EACrB,MAAwB,EACxB,GAAW,EACX,OAAuB,EAAE;IAEzB,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAA;IAClD,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,KAAK,EAAE,GAAG,EAAE,IAAI,CAAC,CAAA;IACvD,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAA;AAC3B,CAAC"}

package/dist/dashboard-health.d.ts

@@ -0,0 +1,20 @@
+import type { TokenVerification } from './token-verify.js';
+/**
+ * Dashboard-connection state reported by `auden doctor`. Extends the network
+ * probe's {@link TokenVerification} with `unconfigured` — no token stored at
+ * all, i.e. deliberate local-only mode rather than a broken connection.
+ */
+export type DashboardHealth = TokenVerification | 'unconfigured';
+/**
+ * One-line, human-readable description of the dashboard connection for
+ * `auden doctor`. Presentation only — the actual probe lives in
+ * {@link verifyDashboardToken}.
+ *
+ * Dashboard connectivity is informational and never fails the doctor run: the
+ * CLI evaluates fully offline from the cached guide bundle, so a missing or
+ * broken connection doesn't stop local use. Surfacing a *broken* connection is
+ * the point — a token that silently 401s otherwise reads as "configured", so
+ * activation fails with no signal.
+ */
+export declare function describeDashboardHealth(health: DashboardHealth, dashboardUrl: string): string;
+//# sourceMappingURL=dashboard-health.d.ts.map

package/dist/dashboard-health.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dashboard-health.d.ts","sourceRoot":"","sources":["../src/dashboard-health.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAA;AAE1D;;;;GAIG;AACH,MAAM,MAAM,eAAe,GAAG,iBAAiB,GAAG,cAAc,CAAA;AAEhE;;;;;;;;;;GAUG;AACH,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,eAAe,EACvB,YAAY,EAAE,MAAM,GACnB,MAAM,CAWR"}

package/dist/dashboard-health.js

@@ -0,0 +1,24 @@
+/**
+ * One-line, human-readable description of the dashboard connection for
+ * `auden doctor`. Presentation only — the actual probe lives in
+ * {@link verifyDashboardToken}.
+ *
+ * Dashboard connectivity is informational and never fails the doctor run: the
+ * CLI evaluates fully offline from the cached guide bundle, so a missing or
+ * broken connection doesn't stop local use. Surfacing a *broken* connection is
+ * the point — a token that silently 401s otherwise reads as "configured", so
+ * activation fails with no signal.
+ */
+export function describeDashboardHealth(health, dashboardUrl) {
+    switch (health) {
+        case 'unconfigured':
+            return 'Dashboard token: not set — local-only mode (run `auden sync --token <token>` to connect)';
+        case 'ok':
+            return `Dashboard connection: healthy (${dashboardUrl})`;
+        case 'rejected':
+            return `Dashboard connection: token rejected by ${dashboardUrl} — it may be expired or revoked; get a fresh one from the dashboard (Settings → Developer → CLI Token) and run \`auden sync --token <token>\``;
+        case 'unreachable':
+            return `Dashboard connection: could not reach ${dashboardUrl} — check your network or pass --dashboard-url (token left unverified)`;
+    }
+}
+//# sourceMappingURL=dashboard-health.js.map

package/dist/dashboard-health.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dashboard-health.js","sourceRoot":"","sources":["../src/dashboard-health.ts"],"names":[],"mappings":"AASA;;;;;;;;;;GAUG;AACH,MAAM,UAAU,uBAAuB,CACrC,MAAuB,EACvB,YAAoB;IAEpB,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,cAAc;YACjB,OAAO,0FAA0F,CAAA;QACnG,KAAK,IAAI;YACP,OAAO,kCAAkC,YAAY,GAAG,CAAA;QAC1D,KAAK,UAAU;YACb,OAAO,2CAA2C,YAAY,+IAA+I,CAAA;QAC/M,KAAK,aAAa;YAChB,OAAO,yCAAyC,YAAY,uEAAuE,CAAA;IACvI,CAAC;AACH,CAAC"}

package/dist/eval-provider.d.ts

@@ -0,0 +1,30 @@
+import type { EvalAdapter } from '@auden.to/eval-core';
+import type { EvalProviderConfig } from '@auden.to/protocol';
+type EvalOptionOverrides = {
+    provider?: string;
+    model?: string;
+    apiKey?: string;
+    baseUrl?: string;
+};
+export declare const DEFAULT_EVAL_PROVIDER: "openrouter";
+export declare const DEFAULT_OPENROUTER_MODEL = "anthropic/claude-sonnet-4.6";
+export declare function readStoredEvalProviderSettings(rawConfig: unknown): {
+    provider?: "openrouter" | "anthropic" | "openai-compatible" | "google" | "ollama" | undefined;
+    model?: string | undefined;
+    apiKey?: string | undefined;
+    baseUrl?: string | undefined;
+    siteUrl?: string | undefined;
+    siteName?: string | undefined;
+};
+export declare function resolveEvalProviderConfig(rawConfig: unknown, env: NodeJS.ProcessEnv, overrides?: EvalOptionOverrides): EvalProviderConfig;
+/**
+ * Default per-request timeout for eval provider calls. Generous because LLM
+ * completions can legitimately take tens of seconds; the guard is against a
+ * hung connection blocking the CLI (and the Claude Code Stop hook) forever.
+ * Override with `AUDEN_EVAL_TIMEOUT_MS`.
+ */
+export declare const DEFAULT_EVAL_FETCH_TIMEOUT_MS = 120000;
+export declare function evalFetchTimeoutMs(env?: NodeJS.ProcessEnv): number;
+export declare function createEvalAdapter(config: EvalProviderConfig): EvalAdapter;
+export {};
+//# sourceMappingURL=eval-provider.d.ts.map

package/dist/eval-provider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"eval-provider.d.ts","sourceRoot":"","sources":["../src/eval-provider.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAA;AACtD,OAAO,KAAK,EAAE,kBAAkB,EAAoB,MAAM,oBAAoB,CAAA;AAE9E,KAAK,mBAAmB,GAAG;IACzB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB,CAAA;AAED,eAAO,MAAM,qBAAqB,EAAG,YAAqB,CAAA;AAC1D,eAAO,MAAM,wBAAwB,gCAAgC,CAAA;AAqGrE,wBAAgB,8BAA8B,CAAC,SAAS,EAAE,OAAO;;;;;;;EAMhE;AAED,wBAAgB,yBAAyB,CACvC,SAAS,EAAE,OAAO,EAClB,GAAG,EAAE,MAAM,CAAC,UAAU,EACtB,SAAS,GAAE,mBAAwB,GAClC,kBAAkB,CAmDpB;AAED;;;;;GAKG;AACH,eAAO,MAAM,6BAA6B,SAAU,CAAA;AAEpD,wBAAgB,kBAAkB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,CAI/E;AA0QD,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,kBAAkB,GAAG,WAAW,CAgBzE"}