axgram 0.1.0

package/dist/commands/hook-session-start.js

@@ -0,0 +1,85 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.hookSessionStartCommand = hookSessionStartCommand;
+const project_resolver_1 = require("../lib/project-resolver");
+const supabase_client_1 = require("../lib/supabase-client");
+/**
+ * Session-start hook. Emits an addendum on stdout that Claude Code injects
+ * into the session's system prompt. Three branches:
+ *
+ *   1. Resolved project (flag/env/binding/global): one-paragraph briefing
+ *      naming the project and a one-line nudge to use Axgram's memory
+ *      tools.
+ *   2. Unresolved but inside a git repo: ask the user to link this repo
+ *      or create a new project, with concrete CLI suggestions.
+ *   3. Unresolved and not in a git repo: softer briefing — remind the
+ *      user that AXGRAM_PROJECT_ID overrides the binding.
+ *
+ * Always exits 0 — never blocks the session.
+ */
+async function hookSessionStartCommand(opts = {}, deps = {}) {
+    const log = deps.log ?? ((m) => process.stdout.write(`${m}\n`));
+    const errOut = deps.err ?? ((m) => process.stderr.write(`${m}\n`));
+    // Plan 5 Task 12: surface pending invitations to stderr. Best-effort —
+    // any failure (no creds, network glitch, RLS hiccup) is swallowed.
+    await surfacePendingInvitations(errOut, deps);
+    const resolved = await (0, project_resolver_1.resolveActiveProject)({
+        flag: opts.project,
+        ...(opts.cwd ? { cwd: opts.cwd } : {}),
+    });
+    if (resolved.projectId) {
+        log([
+            `<axgram>`,
+            `You are working in Axgram project ${resolved.projectId} (resolved via ${resolved.source}).`,
+            `When this session ends, call axgram_diary_write + axgram_memories_filed_away to checkpoint memories.`,
+            `Use axgram_search and axgram_context to recall prior work in this project before answering.`,
+            `</axgram>`,
+        ].join("\n"));
+        return 0;
+    }
+    if (resolved.repoKey) {
+        log([
+            `<axgram>`,
+            `This repository (${resolved.repoKey}) isn't linked to an Axgram project. Before continuing,`,
+            `please ask the user one of:`,
+            `  - "Should I link this repo to an existing Axgram project? (axgram projects link <id>)"`,
+            `  - "Should I create a new project for this repo? (axgram projects create <name> && axgram projects link <id>)"`,
+            `Run \`axgram projects ls\` to enumerate the user's accessible projects.`,
+            `</axgram>`,
+        ].join("\n"));
+        return 0;
+    }
+    log([
+        `<axgram>`,
+        `No Axgram project is bound to this shell. If memory recall matters for this task, ask`,
+        `the user which project applies — or set AXGRAM_PROJECT_ID=<id> in the environment.`,
+        `Run \`axgram projects ls\` for the available list.`,
+        `</axgram>`,
+    ].join("\n"));
+    return 0;
+}
+async function surfacePendingInvitations(errOut, deps) {
+    try {
+        const count = deps.pendingInvitationsCount
+            ? await deps.pendingInvitationsCount()
+            : await defaultPendingInvitationsCount();
+        if (count > 0) {
+            errOut(`You have ${count} pending invitation${count === 1 ? "" : "s"}. ` +
+                `Run \`axgram invitations ls\` to inspect, or \`axgram invitations accept <token>\` to join.`);
+        }
+    }
+    catch {
+        // Never block the session — swallow any error.
+    }
+}
+async function defaultPendingInvitationsCount() {
+    const s = await (0, supabase_client_1.authenticatedSupabase)();
+    const { count, error } = await s
+        .from("invitations")
+        .select("id", { count: "exact", head: true })
+        .is("accepted_at", null);
+    if (error)
+        return 0;
+    return count ?? 0;
+}
+//# sourceMappingURL=hook-session-start.js.map

package/dist/commands/hook-session-start.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hook-session-start.js","sourceRoot":"","sources":["../../src/commands/hook-session-start.ts"],"names":[],"mappings":";;AA+BA,0DAsDC;AArFD,8DAA+D;AAC/D,4DAA+D;AAgB/D;;;;;;;;;;;;;GAaG;AACI,KAAK,UAAU,uBAAuB,CAC3C,OAAgC,EAAE,EAClC,OAA6B,EAAE;IAE/B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IACxE,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IAE3E,uEAAuE;IACvE,mEAAmE;IACnE,MAAM,yBAAyB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAE9C,MAAM,QAAQ,GAAG,MAAM,IAAA,uCAAoB,EAAC;QAC1C,IAAI,EAAE,IAAI,CAAC,OAAO;QAClB,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACvC,CAAC,CAAC;IAEH,IAAI,QAAQ,CAAC,SAAS,EAAE,CAAC;QACvB,GAAG,CACD;YACE,UAAU;YACV,qCAAqC,QAAQ,CAAC,SAAS,kBAAkB,QAAQ,CAAC,MAAM,IAAI;YAC5F,sGAAsG;YACtG,6FAA6F;YAC7F,WAAW;SACZ,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;QACF,OAAO,CAAC,CAAC;IACX,CAAC;IAED,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;QACrB,GAAG,CACD;YACE,UAAU;YACV,oBAAoB,QAAQ,CAAC,OAAO,yDAAyD;YAC7F,6BAA6B;YAC7B,0FAA0F;YAC1F,iHAAiH;YACjH,yEAAyE;YACzE,WAAW;SACZ,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;QACF,OAAO,CAAC,CAAC;IACX,CAAC;IAED,GAAG,CACD;QACE,UAAU;QACV,uFAAuF;QACvF,oFAAoF;QACpF,oDAAoD;QACpD,WAAW;KACZ,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;IACF,OAAO,CAAC,CAAC;AACX,CAAC;AAED,KAAK,UAAU,yBAAyB,CACtC,MAA2B,EAC3B,IAA0B;IAE1B,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,IAAI,CAAC,uBAAuB;YACxC,CAAC,CAAC,MAAM,IAAI,CAAC,uBAAuB,EAAE;YACtC,CAAC,CAAC,MAAM,8BAA8B,EAAE,CAAC;QAC3C,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;YACd,MAAM,CACJ,YAAY,KAAK,sBAAsB,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,IAAI;gBAC/D,6FAA6F,CAChG,CAAC;QACJ,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,+CAA+C;IACjD,CAAC;AACH,CAAC;AAED,KAAK,UAAU,8BAA8B;IAC3C,MAAM,CAAC,GAAG,MAAM,IAAA,uCAAqB,GAAE,CAAC;IACxC,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,MAAM,CAAC;SAC7B,IAAI,CAAC,aAAa,CAAC;SACnB,MAAM,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;SAC5C,EAAE,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;IAC3B,IAAI,KAAK;QAAE,OAAO,CAAC,CAAC;IACpB,OAAO,KAAK,IAAI,CAAC,CAAC;AACpB,CAAC"}

package/dist/commands/hook-stop.js

@@ -0,0 +1,73 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.hookStopCommand = hookStopCommand;
+const hook_settings_1 = require("../lib/hook-settings");
+const hook_state_1 = require("../lib/hook-state");
+const project_resolver_1 = require("../lib/project-resolver");
+const transcript_1 = require("../lib/transcript");
+/**
+ * Stop hook handler. Returns the exit code:
+ *   0 — quiet pass (counter under threshold, or no project resolved).
+ *   2 — block + emit stderr prompt instructing the model to file memories.
+ *
+ * Per Claude Code's hook protocol, exit 2 surfaces stderr to the model;
+ * exit 0 lets the session terminate normally.
+ */
+async function hookStopCommand(opts, deps = {}) {
+    const errOut = deps.err ?? ((m) => process.stderr.write(`${m}\n`));
+    // Resolve project. If unresolved, exit 0 silently — SessionStart handles
+    // disambiguation; we don't want to disrupt a misconfigured session.
+    const resolved = await (0, project_resolver_1.resolveActiveProject)({ flag: opts.project });
+    if (!resolved.projectId)
+        return 0;
+    const projectId = resolved.projectId;
+    let stats;
+    try {
+        stats = await (0, transcript_1.readTranscript)(opts.transcript);
+    }
+    catch (e) {
+        errOut(`axgram-hook: could not read transcript: ${e.message}`);
+        return 0;
+    }
+    let threshold;
+    let enabled = true;
+    if (opts.threshold !== undefined) {
+        threshold = opts.threshold;
+    }
+    else {
+        const settings = await (0, hook_settings_1.getEffectiveHookSettings)(projectId, {
+            err: errOut,
+            ...(opts.workerUrl !== undefined ? { workerUrl: opts.workerUrl } : {}),
+            ...(deps.mcpClientFactory
+                ? { mcpClientFactory: deps.mcpClientFactory }
+                : {}),
+        });
+        threshold = settings.threshold;
+        enabled = settings.enabled;
+    }
+    // User-disabled hook → still update the counter so the SessionStart side
+    // sees it, but never block.
+    if (!enabled) {
+        const disabledState = await (0, hook_state_1.loadHookState)(projectId);
+        disabledState.exchanges_since_checkpoint = stats.exchangesSinceCheckpoint;
+        await (0, hook_state_1.saveHookState)(projectId, disabledState);
+        return 0;
+    }
+    const state = await (0, hook_state_1.loadHookState)(projectId);
+    state.exchanges_since_checkpoint = stats.exchangesSinceCheckpoint;
+    if (stats.filedAtLeastOnce) {
+        state.last_checkpoint_at = new Date().toISOString();
+    }
+    await (0, hook_state_1.saveHookState)(projectId, state);
+    if (stats.exchangesSinceCheckpoint < threshold)
+        return 0;
+    errOut([
+        `Axgram: ${stats.exchangesSinceCheckpoint} user exchanges since the last memory checkpoint (threshold ${threshold}).`,
+        "Before this session terminates, please:",
+        "  1. Call axgram_diary_write with a short AAAK-format summary of what we did.",
+        "  2. Call axgram_add_drawer (or axgram_bulk_add) for any decisions/conclusions worth retaining.",
+        "  3. Call axgram_memories_filed_away to acknowledge the checkpoint.",
+    ].join("\n"));
+    return 2;
+}
+//# sourceMappingURL=hook-stop.js.map

package/dist/commands/hook-stop.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hook-stop.js","sourceRoot":"","sources":["../../src/commands/hook-stop.ts"],"names":[],"mappings":";;AAmCA,0CAgEC;AAnGD,wDAG8B;AAC9B,kDAAiE;AACjE,8DAA+D;AAC/D,kDAAmD;AAqBnD;;;;;;;GAOG;AACI,KAAK,UAAU,eAAe,CACnC,IAAqB,EACrB,OAAqB,EAAE;IAEvB,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IAE3E,yEAAyE;IACzE,oEAAoE;IACpE,MAAM,QAAQ,GAAG,MAAM,IAAA,uCAAoB,EAAC,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;IACpE,IAAI,CAAC,QAAQ,CAAC,SAAS;QAAE,OAAO,CAAC,CAAC;IAClC,MAAM,SAAS,GAAG,QAAQ,CAAC,SAAS,CAAC;IAErC,IAAI,KAAK,CAAC;IACV,IAAI,CAAC;QACH,KAAK,GAAG,MAAM,IAAA,2BAAc,EAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAChD,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,CAAC,2CAA4C,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC;QAC1E,OAAO,CAAC,CAAC;IACX,CAAC;IAED,IAAI,SAAiB,CAAC;IACtB,IAAI,OAAO,GAAG,IAAI,CAAC;IACnB,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QACjC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;IAC7B,CAAC;SAAM,CAAC;QACN,MAAM,QAAQ,GAAG,MAAM,IAAA,wCAAwB,EAAC,SAAS,EAAE;YACzD,GAAG,EAAE,MAAM;YACX,GAAG,CAAC,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtE,GAAG,CAAC,IAAI,CAAC,gBAAgB;gBACvB,CAAC,CAAC,EAAE,gBAAgB,EAAE,IAAI,CAAC,gBAAgB,EAAE;gBAC7C,CAAC,CAAC,EAAE,CAAC;SACR,CAAC,CAAC;QACH,SAAS,GAAG,QAAQ,CAAC,SAAS,CAAC;QAC/B,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC;IAC7B,CAAC;IAED,yEAAyE;IACzE,4BAA4B;IAC5B,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,aAAa,GAAG,MAAM,IAAA,0BAAa,EAAC,SAAS,CAAC,CAAC;QACrD,aAAa,CAAC,0BAA0B,GAAG,KAAK,CAAC,wBAAwB,CAAC;QAC1E,MAAM,IAAA,0BAAa,EAAC,SAAS,EAAE,aAAa,CAAC,CAAC;QAC9C,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,IAAA,0BAAa,EAAC,SAAS,CAAC,CAAC;IAC7C,KAAK,CAAC,0BAA0B,GAAG,KAAK,CAAC,wBAAwB,CAAC;IAClE,IAAI,KAAK,CAAC,gBAAgB,EAAE,CAAC;QAC3B,KAAK,CAAC,kBAAkB,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACtD,CAAC;IACD,MAAM,IAAA,0BAAa,EAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IAEtC,IAAI,KAAK,CAAC,wBAAwB,GAAG,SAAS;QAAE,OAAO,CAAC,CAAC;IAEzD,MAAM,CACJ;QACE,WAAW,KAAK,CAAC,wBAAwB,+DAA+D,SAAS,IAAI;QACrH,yCAAyC;QACzC,+EAA+E;QAC/E,iGAAiG;QACjG,qEAAqE;KACtE,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;IACF,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/commands/import.js

@@ -0,0 +1,56 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.importChatGpt = importChatGpt;
+exports.importClaude = importClaude;
+exports.importGemini = importGemini;
+exports.importObsidian = importObsidian;
+exports.importMarkdown = importMarkdown;
+const chatgpt_1 = require("../lib/importers/chatgpt");
+const claude_1 = require("../lib/importers/claude");
+const gemini_1 = require("../lib/importers/gemini");
+const markdown_1 = require("../lib/importers/markdown");
+const obsidian_1 = require("../lib/importers/obsidian");
+const run_1 = require("../lib/importers/run");
+function shellOpts(label, opts) {
+    return {
+        label,
+        ...(opts.project !== undefined ? { project: opts.project } : {}),
+        ...(opts.workerUrl !== undefined ? { workerUrl: opts.workerUrl } : {}),
+    };
+}
+async function importChatGpt(filePath, opts = {}, deps = {}) {
+    return (0, run_1.runImporter)(() => (0, chatgpt_1.parseChatGptExport)(filePath, {
+        ...(opts.wing !== undefined ? { wing: opts.wing } : {}),
+        ...(opts.room !== undefined ? { room: opts.room } : {}),
+        ...(opts.noKg !== undefined ? { noKg: opts.noKg } : {}),
+    }), shellOpts("ChatGPT export", opts), deps);
+}
+async function importClaude(filePath, opts = {}, deps = {}) {
+    return (0, run_1.runImporter)(() => (0, claude_1.parseClaudeExport)(filePath, {
+        ...(opts.wing !== undefined ? { wing: opts.wing } : {}),
+        ...(opts.room !== undefined ? { room: opts.room } : {}),
+        ...(opts.noKg !== undefined ? { noKg: opts.noKg } : {}),
+    }), shellOpts("Claude.ai export", opts), deps);
+}
+async function importGemini(filePath, opts = {}, deps = {}) {
+    return (0, run_1.runImporter)(() => (0, gemini_1.parseGeminiExport)(filePath, {
+        ...(opts.wing !== undefined ? { wing: opts.wing } : {}),
+        ...(opts.room !== undefined ? { room: opts.room } : {}),
+        ...(opts.noKg !== undefined ? { noKg: opts.noKg } : {}),
+    }), shellOpts("Gemini Takeout", opts), deps);
+}
+async function importObsidian(vaultPath, opts = {}, deps = {}) {
+    return (0, run_1.runImporter)(() => (0, obsidian_1.parseObsidianVault)(vaultPath, {
+        ...(opts.wing !== undefined ? { wing: opts.wing } : {}),
+        ...(opts.room !== undefined ? { room: opts.room } : {}),
+        ...(opts.noKg !== undefined ? { noKg: opts.noKg } : {}),
+    }), shellOpts("Obsidian vault", opts), deps);
+}
+async function importMarkdown(rootPath, opts, deps = {}) {
+    return (0, run_1.runImporter)(() => (0, markdown_1.parseMarkdownDir)(rootPath, {
+        wing: opts.wing,
+        ...(opts.room !== undefined ? { room: opts.room } : {}),
+        ...(opts.noKg !== undefined ? { noKg: opts.noKg } : {}),
+    }), shellOpts("markdown directory", opts), deps);
+}
+//# sourceMappingURL=import.js.map

package/dist/commands/import.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"import.js","sourceRoot":"","sources":["../../src/commands/import.ts"],"names":[],"mappings":";;AA8BA,sCAeC;AAED,oCAeC;AAED,oCAeC;AAED,wCAeC;AAED,wCAeC;AAjHD,sDAA8D;AAC9D,oDAA4D;AAC5D,oDAA4D;AAC5D,wDAA6D;AAC7D,wDAA+D;AAC/D,8CAI8B;AAU9B,SAAS,SAAS,CAChB,KAAa,EACb,IAAsB;IAEtB,OAAO;QACL,KAAK;QACL,GAAG,CAAC,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChE,GAAG,CAAC,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACvE,CAAC;AACJ,CAAC;AAEM,KAAK,UAAU,aAAa,CACjC,QAAgB,EAChB,OAAyB,EAAE,EAC3B,OAAwB,EAAE;IAE1B,OAAO,IAAA,iBAAW,EAChB,GAAG,EAAE,CACH,IAAA,4BAAkB,EAAC,QAAQ,EAAE;QAC3B,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACxD,CAAC,EACJ,SAAS,CAAC,gBAAgB,EAAE,IAAI,CAAC,EACjC,IAAI,CACL,CAAC;AACJ,CAAC;AAEM,KAAK,UAAU,YAAY,CAChC,QAAgB,EAChB,OAAyB,EAAE,EAC3B,OAAwB,EAAE;IAE1B,OAAO,IAAA,iBAAW,EAChB,GAAG,EAAE,CACH,IAAA,0BAAiB,EAAC,QAAQ,EAAE;QAC1B,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACxD,CAAC,EACJ,SAAS,CAAC,kBAAkB,EAAE,IAAI,CAAC,EACnC,IAAI,CACL,CAAC;AACJ,CAAC;AAEM,KAAK,UAAU,YAAY,CAChC,QAAgB,EAChB,OAAyB,EAAE,EAC3B,OAAwB,EAAE;IAE1B,OAAO,IAAA,iBAAW,EAChB,GAAG,EAAE,CACH,IAAA,0BAAiB,EAAC,QAAQ,EAAE;QAC1B,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACxD,CAAC,EACJ,SAAS,CAAC,gBAAgB,EAAE,IAAI,CAAC,EACjC,IAAI,CACL,CAAC;AACJ,CAAC;AAEM,KAAK,UAAU,cAAc,CAClC,SAAiB,EACjB,OAAyB,EAAE,EAC3B,OAAwB,EAAE;IAE1B,OAAO,IAAA,iBAAW,EAChB,GAAG,EAAE,CACH,IAAA,6BAAkB,EAAC,SAAS,EAAE;QAC5B,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACxD,CAAC,EACJ,SAAS,CAAC,gBAAgB,EAAE,IAAI,CAAC,EACjC,IAAI,CACL,CAAC;AACJ,CAAC;AAEM,KAAK,UAAU,cAAc,CAClC,QAAgB,EAChB,IAAyC,EACzC,OAAwB,EAAE;IAE1B,OAAO,IAAA,iBAAW,EAChB,GAAG,EAAE,CACH,IAAA,2BAAgB,EAAC,QAAQ,EAAE;QACzB,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACxD,CAAC,EACJ,SAAS,CAAC,oBAAoB,EAAE,IAAI,CAAC,EACrC,IAAI,CACL,CAAC;AACJ,CAAC"}

package/dist/commands/invitations.js

@@ -0,0 +1,153 @@
+"use strict";
+// Plan 5 Task 11: `axgram invitations` subcommands.
+//
+// ls, invite, revoke, accept, resend. The invite flow prints the
+// accept_url to stdout for the inviter to share manually until Plan 7
+// wires email delivery. Tokens are never written to log files.
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.invitationsLs = invitationsLs;
+exports.invitationsInvite = invitationsInvite;
+exports.invitationsRevoke = invitationsRevoke;
+exports.invitationsAccept = invitationsAccept;
+exports.invitationsResend = invitationsResend;
+const supabase_client_1 = require("../lib/supabase-client");
+const defaultLog = (m) => process.stdout.write(`${m}\n`);
+const defaultErr = (m) => process.stderr.write(`${m}\n`);
+const isUuid = (s) => /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(s);
+async function buildSupabase(deps) {
+    return deps.supabaseFactory ? deps.supabaseFactory() : (0, supabase_client_1.authenticatedSupabase)();
+}
+async function resolveTeamId(s, idOrName) {
+    const q = s.from("teams").select("id");
+    const { data } = isUuid(idOrName)
+        ? await q.eq("id", idOrName).maybeSingle()
+        : await q.eq("name", idOrName).maybeSingle();
+    return data?.id ?? null;
+}
+function buildAcceptUrl(token, base) {
+    const root = (base ?? process.env.AXGRAM_APP_BASE_URL ?? "http://localhost:3000").replace(/\/+$/, "");
+    return `${root}/invitations/accept?token=${encodeURIComponent(token)}`;
+}
+async function invitationsLs(teamFlag, deps = {}) {
+    const log = deps.log ?? defaultLog;
+    const errOut = deps.err ?? defaultErr;
+    const s = await buildSupabase(deps);
+    let q = s
+        .from("invitations")
+        .select("id, team_id, email, role, expires_at, accepted_at, created_at")
+        .order("created_at", { ascending: false });
+    if (teamFlag) {
+        const tid = await resolveTeamId(s, teamFlag);
+        if (!tid) {
+            errOut(`No team found matching "${teamFlag}".`);
+            return 1;
+        }
+        q = q.eq("team_id", tid);
+    }
+    const { data, error } = await q;
+    if (error) {
+        errOut(`Failed to list invitations: ${error.message}`);
+        return 1;
+    }
+    if (!data || data.length === 0) {
+        log("No invitations.");
+        return 0;
+    }
+    for (const i of data) {
+        const status = i.accepted_at ? "accepted" : new Date(i.expires_at).getTime() < Date.now() ? "expired" : "pending";
+        log(`${i.id}  [${status}]  ${i.email}  role=${i.role}  team=${i.team_id}`);
+    }
+    return 0;
+}
+async function invitationsInvite(email, options, deps = {}) {
+    const log = deps.log ?? defaultLog;
+    const errOut = deps.err ?? defaultErr;
+    const s = await buildSupabase(deps);
+    if (!options.team) {
+        errOut("--team <id-or-name> is required.");
+        return 1;
+    }
+    const tid = await resolveTeamId(s, options.team);
+    if (!tid) {
+        errOut(`No team found matching "${options.team}".`);
+        return 1;
+    }
+    // Look up org_id + invited_by.
+    const { data: team } = await s.from("teams").select("org_id").eq("id", tid).single();
+    const { data: who } = await s.auth.getUser();
+    if (!who.user) {
+        errOut("Not logged in. Run `axgram login`.");
+        return 1;
+    }
+    const { data, error } = await s
+        .from("invitations")
+        .insert({
+        org_id: team.org_id,
+        team_id: tid,
+        email,
+        role: options.role ?? "member",
+        invited_by: who.user.id,
+    })
+        .select("id, token, expires_at")
+        .single();
+    if (error) {
+        if (error.code === "23505") {
+            errOut(`A pending invitation for ${email} already exists. Use \`axgram invitations resend <id>\`.`);
+            return 1;
+        }
+        errOut(`Failed to invite: ${error.message}`);
+        return 1;
+    }
+    const acceptUrl = buildAcceptUrl(data.token, deps.appBaseUrl);
+    log(`Invited ${email}. Share this link out-of-band:`);
+    log("");
+    log(acceptUrl);
+    log("");
+    log(`(Expires at ${data.expires_at}; resend to extend.)`);
+    return 0;
+}
+async function invitationsRevoke(invitationId, deps = {}) {
+    const log = deps.log ?? defaultLog;
+    const errOut = deps.err ?? defaultErr;
+    const s = await buildSupabase(deps);
+    const { error } = await s.from("invitations").delete().eq("id", invitationId);
+    if (error) {
+        errOut(`Failed to revoke invitation: ${error.message}`);
+        return 1;
+    }
+    log(`Revoked invitation ${invitationId}.`);
+    return 0;
+}
+async function invitationsAccept(token, deps = {}) {
+    const log = deps.log ?? defaultLog;
+    const errOut = deps.err ?? defaultErr;
+    const s = await buildSupabase(deps);
+    const { data, error } = await s.rpc("accept_invitation", { p_token: token });
+    if (error) {
+        if (error.code === "42501") {
+            errOut("This invitation was issued to a different email. Sign in as that user and retry.");
+            return 1;
+        }
+        errOut(`Failed to accept invitation: ${error.message}`);
+        return 1;
+    }
+    const row = data[0];
+    log(`Joined team ${row.joined_team_id} as ${row.joined_role}.`);
+    return 0;
+}
+async function invitationsResend(invitationId, deps = {}) {
+    const log = deps.log ?? defaultLog;
+    const errOut = deps.err ?? defaultErr;
+    const s = await buildSupabase(deps);
+    const { data, error } = await s.rpc("resend_invitation", {
+        p_invitation_id: invitationId,
+    });
+    if (error) {
+        errOut(`Failed to resend invitation: ${error.message}`);
+        return 1;
+    }
+    const row = data[0];
+    log(`Extended invitation expiry to ${row.expires_at}.`);
+    return 0;
+}
+//# sourceMappingURL=invitations.js.map

package/dist/commands/invitations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"invitations.js","sourceRoot":"","sources":["../../src/commands/invitations.ts"],"names":[],"mappings":";AAAA,oDAAoD;AACpD,EAAE;AACF,iEAAiE;AACjE,sEAAsE;AACtE,+DAA+D;;AAsC/D,sCAkCC;AAED,8CAkDC;AAED,8CAcC;AAED,8CAmBC;AAED,8CAiBC;AAjLD,4DAA+D;AAU/D,MAAM,UAAU,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AACjE,MAAM,UAAU,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AACjE,MAAM,MAAM,GAAG,CAAC,CAAS,EAAE,EAAE,CAC3B,iEAAiE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAE5E,KAAK,UAAU,aAAa,CAAC,IAA2B;IACtD,OAAO,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,IAAA,uCAAqB,GAAE,CAAC;AACjF,CAAC;AAED,KAAK,UAAU,aAAa,CAC1B,CAAiB,EACjB,QAAgB;IAEhB,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACvC,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,CAAC,QAAQ,CAAC;QAC/B,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,WAAW,EAAE;QAC1C,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;IAC/C,OAAQ,IAAY,EAAE,EAAE,IAAI,IAAI,CAAC;AACnC,CAAC;AAED,SAAS,cAAc,CAAC,KAAa,EAAE,IAAa;IAClD,MAAM,IAAI,GAAG,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,uBAAuB,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACtG,OAAO,GAAG,IAAI,6BAA6B,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC;AACzE,CAAC;AAEM,KAAK,UAAU,aAAa,CACjC,QAA4B,EAC5B,OAA8B,EAAE;IAEhC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,UAAU,CAAC;IACnC,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,IAAI,UAAU,CAAC;IACtC,MAAM,CAAC,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,CAAC;IAEpC,IAAI,CAAC,GAAG,CAAC;SACN,IAAI,CAAC,aAAa,CAAC;SACnB,MAAM,CAAC,+DAA+D,CAAC;SACvE,KAAK,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;IAC7C,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;QAC7C,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,CAAC,2BAA2B,QAAQ,IAAI,CAAC,CAAC;YAChD,OAAO,CAAC,CAAC;QACX,CAAC;QACD,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;IAC3B,CAAC;IACD,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,CAAC,CAAC;IAChC,IAAI,KAAK,EAAE,CAAC;QACV,MAAM,CAAC,+BAA+B,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QACvD,OAAO,CAAC,CAAC;IACX,CAAC;IACD,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/B,GAAG,CAAC,iBAAiB,CAAC,CAAC;QACvB,OAAO,CAAC,CAAC;IACX,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,IAAa,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;QAClH,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,MAAM,MAAM,CAAC,CAAC,KAAK,UAAU,CAAC,CAAC,IAAI,UAAU,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;IAC7E,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAEM,KAAK,UAAU,iBAAiB,CACrC,KAAa,EACb,OAA+D,EAC/D,OAA8B,EAAE;IAEhC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,UAAU,CAAC;IACnC,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,IAAI,UAAU,CAAC;IACtC,MAAM,CAAC,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,CAAC;IACpC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QAClB,MAAM,CAAC,kCAAkC,CAAC,CAAC;QAC3C,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IACjD,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,CAAC,2BAA2B,OAAO,CAAC,IAAI,IAAI,CAAC,CAAC;QACpD,OAAO,CAAC,CAAC;IACX,CAAC;IACD,+BAA+B;IAC/B,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC;IACrF,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;IAC7C,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QACd,MAAM,CAAC,oCAAoC,CAAC,CAAC;QAC7C,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,CAAC;SAC5B,IAAI,CAAC,aAAa,CAAC;SACnB,MAAM,CAAC;QACN,MAAM,EAAG,IAAY,CAAC,MAAM;QAC5B,OAAO,EAAE,GAAG;QACZ,KAAK;QACL,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,QAAQ;QAC9B,UAAU,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE;KACxB,CAAC;SACD,MAAM,CAAC,uBAAuB,CAAC;SAC/B,MAAM,EAAE,CAAC;IACZ,IAAI,KAAK,EAAE,CAAC;QACV,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC3B,MAAM,CAAC,4BAA4B,KAAK,0DAA0D,CAAC,CAAC;YACpG,OAAO,CAAC,CAAC;QACX,CAAC;QACD,MAAM,CAAC,qBAAqB,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAC7C,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,SAAS,GAAG,cAAc,CAAE,IAAY,CAAC,KAAK,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;IACvE,GAAG,CAAC,WAAW,KAAK,gCAAgC,CAAC,CAAC;IACtD,GAAG,CAAC,EAAE,CAAC,CAAC;IACR,GAAG,CAAC,SAAS,CAAC,CAAC;IACf,GAAG,CAAC,EAAE,CAAC,CAAC;IACR,GAAG,CAAC,eAAgB,IAAY,CAAC,UAAU,sBAAsB,CAAC,CAAC;IACnE,OAAO,CAAC,CAAC;AACX,CAAC;AAEM,KAAK,UAAU,iBAAiB,CACrC,YAAoB,EACpB,OAA8B,EAAE;IAEhC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,UAAU,CAAC;IACnC,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,IAAI,UAAU,CAAC;IACtC,MAAM,CAAC,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,CAAC;IACpC,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;IAC9E,IAAI,KAAK,EAAE,CAAC;QACV,MAAM,CAAC,gCAAgC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QACxD,OAAO,CAAC,CAAC;IACX,CAAC;IACD,GAAG,CAAC,sBAAsB,YAAY,GAAG,CAAC,CAAC;IAC3C,OAAO,CAAC,CAAC;AACX,CAAC;AAEM,KAAK,UAAU,iBAAiB,CACrC,KAAa,EACb,OAA8B,EAAE;IAEhC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,UAAU,CAAC;IACnC,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,IAAI,UAAU,CAAC;IACtC,MAAM,CAAC,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,CAAC;IACpC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,mBAAmB,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;IAC7E,IAAI,KAAK,EAAE,CAAC;QACV,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC3B,MAAM,CAAC,kFAAkF,CAAC,CAAC;YAC3F,OAAO,CAAC,CAAC;QACX,CAAC;QACD,MAAM,CAAC,gCAAgC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QACxD,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,GAAG,GAAI,IAAc,CAAC,CAAC,CAAC,CAAC;IAC/B,GAAG,CAAC,eAAe,GAAG,CAAC,cAAc,OAAO,GAAG,CAAC,WAAW,GAAG,CAAC,CAAC;IAChE,OAAO,CAAC,CAAC;AACX,CAAC;AAEM,KAAK,UAAU,iBAAiB,CACrC,YAAoB,EACpB,OAA8B,EAAE;IAEhC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,UAAU,CAAC;IACnC,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,IAAI,UAAU,CAAC;IACtC,MAAM,CAAC,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,CAAC;IACpC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,mBAAmB,EAAE;QACvD,eAAe,EAAE,YAAY;KAC9B,CAAC,CAAC;IACH,IAAI,KAAK,EAAE,CAAC;QACV,MAAM,CAAC,gCAAgC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QACxD,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,GAAG,GAAI,IAAc,CAAC,CAAC,CAAC,CAAC;IAC/B,GAAG,CAAC,iCAAiC,GAAG,CAAC,UAAU,GAAG,CAAC,CAAC;IACxD,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/commands/login.js

@@ -0,0 +1,125 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.startTokenReceiver = startTokenReceiver;
+exports.loginCommand = loginCommand;
+const node_http_1 = require("node:http");
+const open_1 = __importDefault(require("open"));
+const auth_1 = require("../lib/auth");
+/**
+ * Spawns a tiny localhost HTTP server that listens for a single token POST
+ * from the worker-bridged login page. Returns the chosen port + a promise.
+ *
+ * Why localhost: browsers allow https→http requests to 127.0.0.1 from a
+ * secure context, so the worker-served page can POST tokens back here even
+ * though it's loaded over https. Same pattern as `gcloud auth login`.
+ */
+function startTokenReceiver(opts) {
+    const allowedOrigin = opts?.allowedOrigin ?? "*";
+    return new Promise((resolveOuter, rejectOuter) => {
+        let server;
+        const tokenPromise = new Promise((resolveToken, rejectToken) => {
+            server = (0, node_http_1.createServer)((req, res) => {
+                const corsHeaders = {
+                    "Access-Control-Allow-Origin": allowedOrigin,
+                    "Access-Control-Allow-Methods": "POST, OPTIONS",
+                    "Access-Control-Allow-Headers": "Content-Type",
+                    "Access-Control-Max-Age": "600",
+                };
+                if (req.method === "OPTIONS") {
+                    res.writeHead(204, corsHeaders);
+                    res.end();
+                    return;
+                }
+                if (req.method !== "POST" || req.url !== "/token") {
+                    res.writeHead(404, corsHeaders);
+                    res.end();
+                    return;
+                }
+                const chunks = [];
+                req.on("data", (chunk) => chunks.push(chunk));
+                req.on("end", () => {
+                    try {
+                        const body = JSON.parse(Buffer.concat(chunks).toString("utf8"));
+                        if (typeof body.access_token !== "string" ||
+                            typeof body.refresh_token !== "string" ||
+                            typeof body.expires_at !== "number" ||
+                            typeof body.supabase_url !== "string" ||
+                            typeof body.supabase_anon_key !== "string") {
+                            res.writeHead(400, {
+                                ...corsHeaders,
+                                "Content-Type": "application/json",
+                            });
+                            res.end(JSON.stringify({ error: "Invalid token payload" }));
+                            return;
+                        }
+                        res.writeHead(200, {
+                            ...corsHeaders,
+                            "Content-Type": "application/json",
+                        });
+                        res.end(JSON.stringify({ ok: true }));
+                        resolveToken(body);
+                    }
+                    catch (err) {
+                        res.writeHead(400, {
+                            ...corsHeaders,
+                            "Content-Type": "application/json",
+                        });
+                        res.end(JSON.stringify({
+                            error: `Invalid JSON: ${err.message}`,
+                        }));
+                    }
+                });
+                req.on("error", rejectToken);
+            });
+        });
+        server.on("error", (err) => {
+            rejectOuter(err);
+        });
+        // 0 = OS picks a free port.
+        server.listen(0, "127.0.0.1", () => {
+            const addr = server.address();
+            const port = addr.port;
+            resolveOuter({
+                port,
+                promise: tokenPromise,
+                close: () => new Promise((doneClose) => {
+                    server.close(() => doneClose());
+                }),
+            });
+        });
+    });
+}
+/**
+ * Runs the full login flow: spawn local listener, open browser to the
+ * worker-bridged login page, wait for token POST, persist credentials.
+ */
+async function loginCommand(opts) {
+    const log = opts.log ?? ((m) => process.stdout.write(`${m}\n`));
+    const opener = opts.openImpl ?? ((url) => (0, open_1.default)(url));
+    const receiver = await startTokenReceiver();
+    const url = `${opts.workerUrl.replace(/\/+$/, "")}/cli-login?port=${receiver.port}`;
+    log(`Opening browser: ${url}`);
+    log("Complete sign-in in the browser; this terminal will resume automatically.");
+    try {
+        await opener(url);
+    }
+    catch (err) {
+        log(`Failed to open browser automatically: ${err.message}`);
+        log(`Open this URL manually: ${url}`);
+    }
+    const tokens = await receiver.promise;
+    await receiver.close();
+    const creds = {
+        access_token: tokens.access_token,
+        refresh_token: tokens.refresh_token,
+        expires_at: tokens.expires_at,
+        supabase_url: tokens.supabase_url,
+        supabase_anon_key: tokens.supabase_anon_key,
+    };
+    await (0, auth_1.saveCredentials)(creds);
+    log("Logged in.");
+}
+//# sourceMappingURL=login.js.map

package/dist/commands/login.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"login.js","sourceRoot":"","sources":["../../src/commands/login.ts"],"names":[],"mappings":";;;;;AA8BA,gDA2FC;AAeD,oCA4BC;AApKD,yCAAsD;AAEtD,gDAAwB;AACxB,sCAAgE;AAmBhE;;;;;;;GAOG;AACH,SAAgB,kBAAkB,CAAC,IAIlC;IACC,MAAM,aAAa,GAAG,IAAI,EAAE,aAAa,IAAI,GAAG,CAAC;IAEjD,OAAO,IAAI,OAAO,CAAC,CAAC,YAAY,EAAE,WAAW,EAAE,EAAE;QAC/C,IAAI,MAA0B,CAAC;QAC/B,MAAM,YAAY,GAAG,IAAI,OAAO,CAC9B,CAAC,YAAY,EAAE,WAAW,EAAE,EAAE;YAC5B,MAAM,GAAG,IAAA,wBAAY,EAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;gBACjC,MAAM,WAAW,GAA2B;oBAC1C,6BAA6B,EAAE,aAAa;oBAC5C,8BAA8B,EAAE,eAAe;oBAC/C,8BAA8B,EAAE,cAAc;oBAC9C,wBAAwB,EAAE,KAAK;iBAChC,CAAC;gBAEF,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;oBAC7B,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;oBAChC,GAAG,CAAC,GAAG,EAAE,CAAC;oBACV,OAAO;gBACT,CAAC;gBAED,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,GAAG,CAAC,GAAG,KAAK,QAAQ,EAAE,CAAC;oBAClD,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;oBAChC,GAAG,CAAC,GAAG,EAAE,CAAC;oBACV,OAAO;gBACT,CAAC;gBAED,MAAM,MAAM,GAAa,EAAE,CAAC;gBAC5B,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;gBACtD,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;oBACjB,IAAI,CAAC;wBACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;wBAChE,IACE,OAAO,IAAI,CAAC,YAAY,KAAK,QAAQ;4BACrC,OAAO,IAAI,CAAC,aAAa,KAAK,QAAQ;4BACtC,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ;4BACnC,OAAO,IAAI,CAAC,YAAY,KAAK,QAAQ;4BACrC,OAAO,IAAI,CAAC,iBAAiB,KAAK,QAAQ,EAC1C,CAAC;4BACD,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;gCACjB,GAAG,WAAW;gCACd,cAAc,EAAE,kBAAkB;6BACnC,CAAC,CAAC;4BACH,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC,CAAC;4BAC5D,OAAO;wBACT,CAAC;wBACD,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;4BACjB,GAAG,WAAW;4BACd,cAAc,EAAE,kBAAkB;yBACnC,CAAC,CAAC;wBACH,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;wBACtC,YAAY,CAAC,IAA4B,CAAC,CAAC;oBAC7C,CAAC;oBAAC,OAAO,GAAG,EAAE,CAAC;wBACb,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;4BACjB,GAAG,WAAW;4BACd,cAAc,EAAE,kBAAkB;yBACnC,CAAC,CAAC;wBACH,GAAG,CAAC,GAAG,CACL,IAAI,CAAC,SAAS,CAAC;4BACb,KAAK,EAAE,iBAAkB,GAAa,CAAC,OAAO,EAAE;yBACjD,CAAC,CACH,CAAC;oBACJ,CAAC;gBACH,CAAC,CAAC,CAAC;gBACH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;YAC/B,CAAC,CAAC,CAAC;QACL,CAAC,CACF,CAAC;QAEF,MAAO,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YAC1B,WAAW,CAAC,GAAG,CAAC,CAAC;QACnB,CAAC,CAAC,CAAC;QAEH,4BAA4B;QAC5B,MAAO,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE;YAClC,MAAM,IAAI,GAAG,MAAO,CAAC,OAAO,EAAiB,CAAC;YAC9C,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;YACvB,YAAY,CAAC;gBACX,IAAI;gBACJ,OAAO,EAAE,YAAY;gBACrB,KAAK,EAAE,GAAG,EAAE,CACV,IAAI,OAAO,CAAO,CAAC,SAAS,EAAE,EAAE;oBAC9B,MAAO,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,EAAE,CAAC,CAAC;gBACnC,CAAC,CAAC;aACL,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAWD;;;GAGG;AACI,KAAK,UAAU,YAAY,CAAC,IAAkB;IACnD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IAChE,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC,GAAW,EAAE,EAAE,CAAC,IAAA,cAAI,EAAC,GAAG,CAAC,CAAC,CAAC;IAE7D,MAAM,QAAQ,GAAG,MAAM,kBAAkB,EAAE,CAAC;IAC5C,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,mBAAmB,QAAQ,CAAC,IAAI,EAAE,CAAC;IACpF,GAAG,CAAC,oBAAoB,GAAG,EAAE,CAAC,CAAC;IAC/B,GAAG,CAAC,2EAA2E,CAAC,CAAC;IAEjF,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,GAAG,CAAC,CAAC;IACpB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,yCAA0C,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QACvE,GAAG,CAAC,2BAA2B,GAAG,EAAE,CAAC,CAAC;IACxC,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC;IACtC,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC;IAEvB,MAAM,KAAK,GAAgB;QACzB,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,aAAa,EAAE,MAAM,CAAC,aAAa;QACnC,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;KAC5C,CAAC;IACF,MAAM,IAAA,sBAAe,EAAC,KAAK,CAAC,CAAC;IAC7B,GAAG,CAAC,YAAY,CAAC,CAAC;AACpB,CAAC"}

package/dist/commands/logout.js

@@ -0,0 +1,11 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.logoutCommand = logoutCommand;
+const auth_1 = require("../lib/auth");
+async function logoutCommand(opts = {}) {
+    const log = opts.log ?? ((m) => process.stdout.write(`${m}\n`));
+    const had = await (0, auth_1.loadCredentials)();
+    await (0, auth_1.clearCredentials)();
+    log(had ? "Logged out." : "No active session — credentials already cleared.");
+}
+//# sourceMappingURL=logout.js.map

package/dist/commands/logout.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logout.js","sourceRoot":"","sources":["../../src/commands/logout.ts"],"names":[],"mappings":";;AAMA,sCAKC;AAXD,sCAAgE;AAMzD,KAAK,UAAU,aAAa,CAAC,OAAsB,EAAE;IAC1D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IAChE,MAAM,GAAG,GAAG,MAAM,IAAA,sBAAe,GAAE,CAAC;IACpC,MAAM,IAAA,uBAAgB,GAAE,CAAC;IACzB,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,kDAAkD,CAAC,CAAC;AAChF,CAAC"}