cc-control-agent 2.0.2 → 2.0.4

package/dist/src/auth/device-manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"device-manager.d.ts","sourceRoot":"","sources":["../../../src/auth/device-manager.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAM5D,qBAAa,aAAa;IACxB,OAAO,CAAC,QAAQ,CAAc;IAC9B,OAAO,CAAC,WAAW,CAAqB;IACxC,OAAO,CAAC,YAAY,CAAqB;IACzC,OAAO,CAAC,UAAU,CAAS;;IAcrB,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAoCjC,WAAW,IAAI,MAAM;IAIrB,aAAa,IAAI,MAAM;IAIvB,cAAc,IAAI,MAAM,GAAG,SAAS;IAIpC,eAAe,IAAI,MAAM,GAAG,SAAS;IAIrC,aAAa,IAAI,OAAO;IAIlB,UAAU,CAAC,MAAM,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAiBnD,kBAAkB,CAAC,MAAM,EAAE,QAAQ,GAAG,SAAS,GAAG,IAAI;IAKtD,mBAAmB,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,IAAI;IAIxC,WAAW,IAAI,OAAO,CAAC,IAAI,CAAC;IAK5B,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;CAIhC"}

package/dist/{auth → src/auth}/device-manager.js

@@ -1,10 +1,10 @@
 // ============================================================================
 // Device Manager - Loads user credentials and device info for agent
 // ============================================================================
-import { promises as fs } from "fs";
 import { join } from "path";
 import { logger } from "../utils/logger.js";
 import { getConfig } from "../config/default.js";
+import { readEncryptedFile, writeEncryptedFile } from "./encryption.js";
 const CONFIG_DIR = join(process.env.HOME || "~", ".cc-control");
 const CREDENTIALS_FILE = join(CONFIG_DIR, "credentials.json");
 export class DeviceManager {
@@ -26,7 +26,11 @@ export class DeviceManager {
     async initialize() {
         try {
             // Load user credentials (created by `cc-control login`)
-            const data = await fs.readFile(CREDENTIALS_FILE, "utf-8");
+            // Note: Credentials are encrypted at rest, so we need to decrypt them
+            const data = await readEncryptedFile(CREDENTIALS_FILE);
+            if (!data) {
+                throw new Error("No credentials file found");
+            }
             const creds = JSON.parse(data);
             if (!creds.accessToken || !creds.deviceId) {
                 throw new Error("Incomplete credentials. Run 'cc-control login' first.");
@@ -69,14 +73,16 @@ export class DeviceManager {
     async saveTokens(tokens) {
         this.accessToken = tokens.accessToken;
         this.refreshToken = tokens.refreshToken;
-        // Update the credentials file
+        // Update the credentials file (credentials are encrypted)
         try {
-            const data = await fs.readFile(CREDENTIALS_FILE, "utf-8");
+            const data = await readEncryptedFile(CREDENTIALS_FILE);
+            if (!data)
+                return;
             const creds = JSON.parse(data);
             creds.accessToken = tokens.accessToken;
             creds.refreshToken = tokens.refreshToken;
             creds.expiresAt = tokens.expiresAt.toISOString();
-            await fs.writeFile(CREDENTIALS_FILE, JSON.stringify(creds, null, 2), "utf-8");
+            await writeEncryptedFile(CREDENTIALS_FILE, JSON.stringify(creds, null, 2));
         }
         catch {
             // ignore

package/dist/src/auth/device-manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"device-manager.js","sourceRoot":"","sources":["../../../src/auth/device-manager.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,oEAAoE;AACpE,+EAA+E;AAG/E,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAIxE,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,GAAG,EAAE,aAAa,CAAC,CAAC;AAChE,MAAM,gBAAgB,GAAG,IAAI,CAAC,UAAU,EAAE,kBAAkB,CAAC,CAAC;AAE9D,MAAM,OAAO,aAAa;IAChB,QAAQ,GAAW,EAAE,CAAC;IACtB,WAAW,CAAqB;IAChC,YAAY,CAAqB;IACjC,UAAU,CAAS;IAE3B;QACE,IAAI,CAAC,UAAU,GAAG;YAChB,EAAE,EAAE,EAAE;YACN,IAAI,EAAE,EAAE;YACR,IAAI,EAAE,SAAS;YACf,MAAM,EAAE,SAAS;YACjB,QAAQ,EAAE,IAAI,IAAI,EAAE;YACpB,aAAa,EAAE,EAAE;YACjB,YAAY,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE;SACjD,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,UAAU;QACd,IAAI,CAAC;YACH,wDAAwD;YACxD,sEAAsE;YACtE,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC,gBAAgB,CAAC,CAAC;YACvD,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;YAC/C,CAAC;YACD,MAAM,KAAK,GAAsB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAElD,IAAI,CAAC,KAAK,CAAC,WAAW,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;gBAC1C,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;YAC3E,CAAC;YAED,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;YAC/B,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC;YACrC,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC,YAAY,CAAC;YAEvC,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;YAC3B,IAAI,CAAC,UAAU,GAAG;gBAChB,EAAE,EAAE,IAAI,CAAC,QAAQ;gBACjB,IAAI,EAAE,MAAM,CAAC,UAAU;gBACvB,IAAI,EAAE,SAAS;gBACf,MAAM,EAAE,SAAS;gBACjB,QAAQ,EAAE,IAAI,IAAI,EAAE;gBACpB,aAAa,EAAE,EAAE;gBACjB,YAAY,EAAE,MAAM,CAAC,YAAY;aAClC,CAAC;YAEF,MAAM,CAAC,IAAI,CAAC,4BAA4B,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;QAC7F,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,qCAAqC,EAAE,KAAK,CAAC,CAAC;YAC3D,MAAM,IAAI,KAAK,CAAC,uEAAuE,CAAC,CAAC;QAC3F,CAAC;IACH,CAAC;IAED,WAAW;QACT,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IAED,aAAa;QACX,OAAO,EAAE,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;IAChC,CAAC;IAED,cAAc;QACZ,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAED,eAAe;QACb,OAAO,IAAI,CAAC,YAAY,CAAC;IAC3B,CAAC;IAED,aAAa;QACX,OAAO,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC;IAC5B,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,MAAkB;QACjC,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC;QACtC,IAAI,CAAC,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC;QACxC,0DAA0D;QAC1D,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC,gBAAgB,CAAC,CAAC;YACvD,IAAI,CAAC,IAAI;gBAAE,OAAO;YAClB,MAAM,KAAK,GAAsB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAClD,KAAK,CAAC,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC;YACvC,KAAK,CAAC,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC;YACzC,KAAK,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC;YACjD,MAAM,kBAAkB,CAAC,gBAAgB,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC7E,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;IACH,CAAC;IAED,kBAAkB,CAAC,MAA4B;QAC7C,IAAI,CAAC,UAAU,CAAC,MAAM,GAAG,MAAM,CAAC;QAChC,IAAI,CAAC,UAAU,CAAC,QAAQ,GAAG,IAAI,IAAI,EAAE,CAAC;IACxC,CAAC;IAED,mBAAmB,CAAC,SAAmB;QACrC,IAAI,CAAC,UAAU,CAAC,aAAa,GAAG,SAAS,CAAC;IAC5C,CAAC;IAED,KAAK,CAAC,WAAW;QACf,IAAI,CAAC,WAAW,GAAG,SAAS,CAAC;QAC7B,IAAI,CAAC,YAAY,GAAG,SAAS,CAAC;IAChC,CAAC;IAED,KAAK,CAAC,QAAQ;QACZ,IAAI,CAAC,kBAAkB,CAAC,SAAS,CAAC,CAAC;QACnC,MAAM,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;IAC1C,CAAC;CACF"}

package/dist/src/auth/encryption.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Encrypt data using AES-256-GCM
+ */
+export declare function encrypt(plaintext: string): {
+    encrypted: string;
+    iv: string;
+    tag: string;
+};
+/**
+ * Decrypt data using AES-256-GCM
+ */
+export declare function decrypt(encrypted: string, iv: string, tag: string): string;
+/**
+ * Read and decrypt encrypted file
+ */
+export declare function readEncryptedFile(filePath: string): Promise<string | null>;
+/**
+ * Encrypt and write file
+ */
+export declare function writeEncryptedFile(filePath: string, plaintext: string): Promise<void>;
+//# sourceMappingURL=encryption.d.ts.map

package/dist/src/auth/encryption.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"encryption.d.ts","sourceRoot":"","sources":["../../../src/auth/encryption.ts"],"names":[],"mappings":"AAoCA;;GAEG;AACH,wBAAgB,OAAO,CAAC,SAAS,EAAE,MAAM,GAAG;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAgBzF;AAED;;GAEG;AACH,wBAAgB,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAe1E;AAED;;GAEG;AACH,wBAAsB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAehF;AAED;;GAEG;AACH,wBAAsB,kBAAkB,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAO3F"}

package/dist/src/auth/encryption.js

@@ -0,0 +1,85 @@
+// ============================================================================
+// Encryption Utilities - Secure credential storage at rest
+// ============================================================================
+import { createCipheriv, createDecipheriv, randomBytes, scryptSync } from 'crypto';
+import { promises as fs } from 'fs';
+import { hostname } from 'os';
+const ALGORITHM = 'aes-256-gcm';
+const KEY_LENGTH = 32;
+const IV_LENGTH = 16;
+const SALT_LENGTH = 32;
+const TAG_LENGTH = 16;
+/**
+ * Get encryption key from machine-specific data
+ * Uses scrypt for key derivation with machine hostname as salt
+ */
+function getEncryptionKey() {
+    // Use machine-specific data for key derivation
+    const machineId = hostname() + process.platform + process.arch;
+    const salt = Buffer.from(machineId.padEnd(SALT_LENGTH, 'x').substring(0, SALT_LENGTH));
+    // Use a pepper from environment if available, otherwise derive from machine
+    const pepper = process.env.CC_CONTROL_ENCRYPTION_PEPPER || 'cc-control-default-pepper';
+    // Derive key using scrypt (memory-hard KDF)
+    // Node.js scryptSync uses: (password, salt, keylen, options?)
+    return scryptSync(pepper, salt, KEY_LENGTH, {
+        N: 16384, // CPU/memory cost parameter
+        r: 8, // Block size parameter
+        p: 1, // Parallelization parameter
+    });
+}
+/**
+ * Encrypt data using AES-256-GCM
+ */
+export function encrypt(plaintext) {
+    const key = getEncryptionKey();
+    const iv = randomBytes(IV_LENGTH);
+    const cipher = createCipheriv(ALGORITHM, key, iv);
+    let encrypted = cipher.update(plaintext, 'utf8', 'hex');
+    encrypted += cipher.final('hex');
+    const tag = cipher.getAuthTag();
+    return {
+        encrypted,
+        iv: iv.toString('hex'),
+        tag: tag.toString('hex'),
+    };
+}
+/**
+ * Decrypt data using AES-256-GCM
+ */
+export function decrypt(encrypted, iv, tag) {
+    const key = getEncryptionKey();
+    const decipher = createDecipheriv(ALGORITHM, key, Buffer.from(iv, 'hex'));
+    decipher.setAuthTag(Buffer.from(tag, 'hex'));
+    let decrypted = decipher.update(encrypted, 'hex', 'utf8');
+    decrypted += decipher.final('utf8');
+    return decrypted;
+}
+/**
+ * Read and decrypt encrypted file
+ */
+export async function readEncryptedFile(filePath) {
+    try {
+        const data = await fs.readFile(filePath, 'utf8');
+        const parsed = JSON.parse(data);
+        // Handle both old (plaintext) and new (encrypted) formats
+        if (parsed.encrypted && parsed.iv && parsed.tag) {
+            return decrypt(parsed.encrypted, parsed.iv, parsed.tag);
+        }
+        else {
+            // Old format - return as-is for migration
+            return data;
+        }
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Encrypt and write file
+ */
+export async function writeEncryptedFile(filePath, plaintext) {
+    const encrypted = encrypt(plaintext);
+    await fs.writeFile(filePath, JSON.stringify(encrypted, null, 2), { mode: 0o600 } // User read/write only
+    );
+}
+//# sourceMappingURL=encryption.js.map

package/dist/src/auth/encryption.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"encryption.js","sourceRoot":"","sources":["../../../src/auth/encryption.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,2DAA2D;AAC3D,+EAA+E;AAE/E,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AACnF,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,IAAI,CAAC;AAEpC,OAAO,EAAE,QAAQ,EAAE,MAAM,IAAI,CAAC;AAE9B,MAAM,SAAS,GAAG,aAAa,CAAC;AAChC,MAAM,UAAU,GAAG,EAAE,CAAC;AACtB,MAAM,SAAS,GAAG,EAAE,CAAC;AACrB,MAAM,WAAW,GAAG,EAAE,CAAC;AACvB,MAAM,UAAU,GAAG,EAAE,CAAC;AAEtB;;;GAGG;AACH,SAAS,gBAAgB;IACvB,+CAA+C;IAC/C,MAAM,SAAS,GAAG,QAAQ,EAAE,GAAG,OAAO,CAAC,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC;IAC/D,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,CAAC;IAEvF,4EAA4E;IAC5E,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,4BAA4B,IAAI,2BAA2B,CAAC;IAEvF,4CAA4C;IAC5C,8DAA8D;IAC9D,OAAO,UAAU,CAAC,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE;QAC1C,CAAC,EAAE,KAAK,EAAE,4BAA4B;QACtC,CAAC,EAAE,CAAC,EAAO,uBAAuB;QAClC,CAAC,EAAE,CAAC,EAAO,4BAA4B;KACxC,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,OAAO,CAAC,SAAiB;IACvC,MAAM,GAAG,GAAG,gBAAgB,EAAE,CAAC;IAC/B,MAAM,EAAE,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC;IAElC,MAAM,MAAM,GAAG,cAAc,CAAC,SAAS,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;IAElD,IAAI,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;IACxD,SAAS,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAEjC,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;IAEhC,OAAO;QACL,SAAS;QACT,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC;QACtB,GAAG,EAAE,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC;KACzB,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,OAAO,CAAC,SAAiB,EAAE,EAAU,EAAE,GAAW;IAChE,MAAM,GAAG,GAAG,gBAAgB,EAAE,CAAC;IAE/B,MAAM,QAAQ,GAAG,gBAAgB,CAC/B,SAAS,EACT,GAAG,EACH,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,CAAC,CACvB,CAAC;IAEF,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;IAE7C,IAAI,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC,SAAS,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;IAC1D,SAAS,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAEpC,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,QAAgB;IACtD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACjD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAEhC,0DAA0D;QAC1D,IAAI,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,EAAE,IAAI,MAAM,CAAC,GAAG,EAAE,CAAC;YAChD,OAAO,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;QAC1D,CAAC;aAAM,CAAC;YACN,0CAA0C;YAC1C,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,QAAgB,EAAE,SAAiB;IAC1E,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IACrC,MAAM,EAAE,CAAC,SAAS,CAChB,QAAQ,EACR,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,EAClC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,uBAAuB;KACxC,CAAC;AACJ,CAAC"}

package/dist/src/auth/onboarding.d.ts

@@ -0,0 +1,81 @@
+import { type StoredCredentials } from "./user-credentials.js";
+interface OnboardingOptions {
+    relayUrl?: string;
+    skipWelcome?: boolean;
+}
+interface OnboardingResult {
+    success: boolean;
+    credentials?: StoredCredentials;
+    started?: boolean;
+}
+export declare class InteractiveOnboarding {
+    private credManager;
+    private relayUrl;
+    constructor(options?: OnboardingOptions);
+    /**
+     * Display welcome message
+     */
+    private showWelcome;
+    /**
+     * Display success message
+     */
+    private showSuccess;
+    /**
+     * Display error message
+     */
+    private showError;
+    /**
+     * Prompt user for email
+     */
+    private promptEmail;
+    /**
+     * Prompt user for password (login)
+     */
+    private promptPassword;
+    /**
+     * Prompt user for new password (registration)
+     */
+    private promptNewPassword;
+    /**
+     * Prompt for device name
+     */
+    private promptDeviceName;
+    /**
+     * Ask if user wants to start now
+     */
+    private promptStartNow;
+    /**
+     * Ask if user wants to transfer the device
+     */
+    private promptDeviceTransfer;
+    /**
+     * Choose between login and signup
+     */
+    private chooseAuthMethod;
+    /**
+     * Show email verification notice
+     */
+    private showEmailVerificationNotice;
+    /**
+     * Run the login flow
+     */
+    private runLoginFlow;
+    /**
+     * Run the registration flow
+     */
+    private runRegisterFlow;
+    /**
+     * Register device or handle transfer if already registered
+     */
+    private registerOrTransferDevice;
+    /**
+     * Run the complete onboarding flow
+     */
+    run(options?: OnboardingOptions): Promise<OnboardingResult>;
+}
+/**
+ * Run onboarding from CLI
+ */
+export declare function runOnboarding(options?: OnboardingOptions): Promise<OnboardingResult>;
+export {};
+//# sourceMappingURL=onboarding.d.ts.map

package/dist/src/auth/onboarding.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"onboarding.d.ts","sourceRoot":"","sources":["../../../src/auth/onboarding.ts"],"names":[],"mappings":"AAMA,OAAO,EAAyB,KAAK,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAetF,UAAU,iBAAiB;IACzB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AAED,UAAU,gBAAgB;IACxB,OAAO,EAAE,OAAO,CAAC;IACjB,WAAW,CAAC,EAAE,iBAAiB,CAAC;IAChC,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,qBAAa,qBAAqB;IAChC,OAAO,CAAC,WAAW,CAAwB;IAC3C,OAAO,CAAC,QAAQ,CAAS;gBAEb,OAAO,GAAE,iBAAsB;IAK3C;;OAEG;IACH,OAAO,CAAC,WAAW;IAYnB;;OAEG;IACH,OAAO,CAAC,WAAW;IAUnB;;OAEG;IACH,OAAO,CAAC,SAAS;IAMjB;;OAEG;YACW,WAAW;IAgBzB;;OAEG;YACW,cAAc;IAe5B;;OAEG;YACW,iBAAiB;IAqB/B;;OAEG;YACW,gBAAgB;IAW9B;;OAEG;YACW,cAAc;IAU5B;;OAEG;YACW,oBAAoB;IAkBlC;;OAEG;YACW,gBAAgB;IAc9B;;OAEG;IACH,OAAO,CAAC,2BAA2B;IAYnC;;OAEG;YACW,YAAY;IA0B1B;;OAEG;YACW,eAAe;IAwB7B;;OAEG;YACW,wBAAwB;IA8BtC;;OAEG;IACG,GAAG,CAAC,OAAO,GAAE,iBAAsB,GAAG,OAAO,CAAC,gBAAgB,CAAC;CA0DtE;AAED;;GAEG;AACH,wBAAsB,aAAa,CAAC,OAAO,GAAE,iBAAsB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAG9F"}

package/dist/src/auth/onboarding.js

@@ -0,0 +1,327 @@
+// ============================================================================
+// Interactive Onboarding - CLI-based user onboarding flow
+// ============================================================================
+import prompts from "prompts";
+import { UserCredentialManager } from "./user-credentials.js";
+const DEFAULT_RELAY = process.env.CC_CONTROL_RELAY_URL || "http://localhost:3030";
+// ANSI codes for terminal styling
+const style = {
+    bold: (text) => `\x1b[1m${text}\x1b[0m`,
+    dim: (text) => `\x1b[2m${text}\x1b[0m`,
+    green: (text) => `\x1b[32m${text}\x1b[0m`,
+    blue: (text) => `\x1b[34m${text}\x1b[0m`,
+    yellow: (text) => `\x1b[33m${text}\x1b[0m`,
+    red: (text) => `\x1b[31m${text}\x1b[0m`,
+    cyan: (text) => `\x1b[36m${text}\x1b[0m`,
+};
+export class InteractiveOnboarding {
+    credManager;
+    relayUrl;
+    constructor(options = {}) {
+        this.credManager = new UserCredentialManager();
+        this.relayUrl = options.relayUrl || DEFAULT_RELAY;
+    }
+    /**
+     * Display welcome message
+     */
+    showWelcome() {
+        console.clear();
+        console.log();
+        console.log(style.cyan("╔════════════════════════════════════════════════════════════╗"));
+        console.log(style.cyan("║") + style.bold("  Welcome to CC-Control Desktop Agent v2.0            ") + style.cyan("║"));
+        console.log(style.cyan("╠════════════════════════════════════════════════════════════╣"));
+        console.log(style.cyan("║") + "  Monitor and control your Claude Code sessions       " + style.cyan("║"));
+        console.log(style.cyan("║") + "  from anywhere using your mobile device              " + style.cyan("║"));
+        console.log(style.cyan("╚════════════════════════════════════════════════════════════╝"));
+        console.log();
+    }
+    /**
+     * Display success message
+     */
+    showSuccess(email, deviceId) {
+        console.log();
+        console.log(style.green("✓ Setup complete!"));
+        console.log();
+        console.log(style.bold("  Account: ") + email);
+        console.log(style.bold("  Device:  ") + deviceId);
+        console.log(style.bold("  Relay:   ") + this.relayUrl);
+        console.log();
+    }
+    /**
+     * Display error message
+     */
+    showError(message) {
+        console.log();
+        console.log(style.red("✗ Error: ") + message);
+        console.log();
+    }
+    /**
+     * Prompt user for email
+     */
+    async promptEmail(initial) {
+        const response = await prompts({
+            type: "text",
+            name: "email",
+            message: "Email address:",
+            initial,
+            validate: (value) => {
+                if (!value || !value.includes("@")) {
+                    return "Please enter a valid email address";
+                }
+                return true;
+            },
+        });
+        return response.email;
+    }
+    /**
+     * Prompt user for password (login)
+     */
+    async promptPassword() {
+        const response = await prompts({
+            type: "password",
+            name: "password",
+            message: "Password:",
+            validate: (value) => {
+                if (!value || value.length < 1) {
+                    return "Please enter your password";
+                }
+                return true;
+            },
+        });
+        return response.password;
+    }
+    /**
+     * Prompt user for new password (registration)
+     */
+    async promptNewPassword() {
+        const response = await prompts({
+            type: "password",
+            name: "password",
+            message: "Password (min 8 chars, include a number):",
+            validate: (value) => {
+                if (!value) {
+                    return "Please enter a password";
+                }
+                if (value.length < 8) {
+                    return "Password must be at least 8 characters";
+                }
+                if (!/\d/.test(value)) {
+                    return "Password must include at least one number";
+                }
+                return true;
+            },
+        });
+        return response.password;
+    }
+    /**
+     * Prompt for device name
+     */
+    async promptDeviceName() {
+        const defaultName = `${process.env.USER || "user"}'s Desktop`;
+        const response = await prompts({
+            type: "text",
+            name: "deviceName",
+            message: "Device name:",
+            initial: defaultName,
+        });
+        return response.deviceName || defaultName;
+    }
+    /**
+     * Ask if user wants to start now
+     */
+    async promptStartNow() {
+        const response = await prompts({
+            type: "confirm",
+            name: "start",
+            message: "Start monitoring now?",
+            initial: true,
+        });
+        return response.start ?? true;
+    }
+    /**
+     * Ask if user wants to transfer the device
+     */
+    async promptDeviceTransfer(existingOwnerEmail) {
+        const message = existingOwnerEmail
+            ? `This device is registered to ${style.yellow(existingOwnerEmail)}. Transfer it to your account?`
+            : "This device is registered to another account. Transfer it to your account?";
+        console.log();
+        console.log(style.yellow("⚠ Device already registered"));
+        console.log();
+        const response = await prompts({
+            type: "confirm",
+            name: "transfer",
+            message,
+            initial: true,
+        });
+        return response.transfer ?? true;
+    }
+    /**
+     * Choose between login and signup
+     */
+    async chooseAuthMethod() {
+        const response = await prompts({
+            type: "select",
+            name: "method",
+            message: "Choose an option:",
+            choices: [
+                { title: "Log in to existing account", value: "login" },
+                { title: "Create a new account", value: "register" },
+            ],
+            initial: 0,
+        });
+        return response.method || "login";
+    }
+    /**
+     * Show email verification notice
+     */
+    showEmailVerificationNotice(email) {
+        console.log();
+        console.log(style.yellow("⚠ Email verification required"));
+        console.log();
+        console.log(style.dim("  A verification email has been sent to:"));
+        console.log(style.bold(`  ${email}`));
+        console.log();
+        console.log(style.dim("  Please check your inbox and click the verification link."));
+        console.log(style.dim("  You can still use CC-Control, but some features may be limited."));
+        console.log();
+    }
+    /**
+     * Run the login flow
+     */
+    async runLoginFlow(email) {
+        try {
+            const userEmail = email || await this.promptEmail();
+            const password = await this.promptPassword();
+            console.log();
+            console.log(style.dim("Logging in..."));
+            const creds = await this.credManager.login(userEmail, password, this.relayUrl);
+            // Check email verification status
+            if (creds.emailVerified === false) {
+                this.showEmailVerificationNotice(creds.email);
+            }
+            // Try to register device
+            await this.registerOrTransferDevice();
+            this.showSuccess(creds.email, creds.deviceId || "unknown");
+            return { success: true };
+        }
+        catch (error) {
+            const msg = error.response?.data?.error || error.message;
+            return { success: false, error: msg };
+        }
+    }
+    /**
+     * Run the registration flow
+     */
+    async runRegisterFlow(email) {
+        try {
+            const userEmail = email || await this.promptEmail();
+            const password = await this.promptNewPassword();
+            console.log();
+            console.log(style.dim("Creating account..."));
+            const creds = await this.credManager.register(userEmail, password, this.relayUrl);
+            // New accounts need email verification
+            this.showEmailVerificationNotice(creds.email);
+            // Register device
+            await this.registerOrTransferDevice();
+            this.showSuccess(creds.email, creds.deviceId || "unknown");
+            return { success: true };
+        }
+        catch (error) {
+            const msg = error.response?.data?.error || error.message;
+            return { success: false, error: msg };
+        }
+    }
+    /**
+     * Register device or handle transfer if already registered
+     */
+    async registerOrTransferDevice() {
+        const deviceName = await this.promptDeviceName();
+        console.log();
+        console.log(style.dim("Registering device..."));
+        try {
+            await this.credManager.registerDevice(deviceName);
+            console.log(style.green("✓ Device registered"));
+        }
+        catch (error) {
+            const errorMsg = error.response?.data?.error || error.message;
+            // Check if this is a "device already registered" error
+            if (errorMsg.includes("already registered") || error.response?.status === 409) {
+                const shouldTransfer = await this.promptDeviceTransfer();
+                if (shouldTransfer) {
+                    console.log();
+                    console.log(style.dim("Transferring device..."));
+                    await this.credManager.transferDevice(deviceName);
+                    console.log(style.green("✓ Device transferred"));
+                }
+                else {
+                    throw new Error("Device registration cancelled. Please unlink the device from the other account first.");
+                }
+            }
+            else {
+                throw error;
+            }
+        }
+    }
+    /**
+     * Run the complete onboarding flow
+     */
+    async run(options = {}) {
+        // Load existing credentials
+        await this.credManager.load();
+        // Show welcome unless skipped
+        if (!options.skipWelcome) {
+            this.showWelcome();
+        }
+        // Check if already logged in
+        const existing = this.credManager.get();
+        if (existing && this.credManager.isLoggedIn()) {
+            console.log(style.green("✓ Already logged in as ") + style.bold(existing.email));
+            console.log();
+            // Check if device is registered
+            if (!existing.deviceId) {
+                console.log(style.yellow("⚠ No device registered. Registering now..."));
+                await this.registerOrTransferDevice();
+                this.showSuccess(existing.email, existing.deviceId || "unknown");
+            }
+            else {
+                console.log(style.dim("Device: ") + existing.deviceId);
+                console.log();
+            }
+            const startNow = await this.promptStartNow();
+            return {
+                success: true,
+                credentials: existing,
+                started: startNow,
+            };
+        }
+        // Choose auth method
+        const method = await this.chooseAuthMethod();
+        let result;
+        if (method === "login") {
+            result = await this.runLoginFlow();
+        }
+        else {
+            result = await this.runRegisterFlow();
+        }
+        if (!result.success) {
+            this.showError(result.error || "Authentication failed");
+            return { success: false };
+        }
+        // Ask if user wants to start now
+        const startNow = await this.promptStartNow();
+        return {
+            success: true,
+            credentials: this.credManager.get() || undefined,
+            started: startNow,
+        };
+    }
+}
+/**
+ * Run onboarding from CLI
+ */
+export async function runOnboarding(options = {}) {
+    const onboarding = new InteractiveOnboarding(options);
+    return onboarding.run(options);
+}
+//# sourceMappingURL=onboarding.js.map

package/dist/src/auth/onboarding.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"onboarding.js","sourceRoot":"","sources":["../../../src/auth/onboarding.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,0DAA0D;AAC1D,+EAA+E;AAE/E,OAAO,OAAO,MAAM,SAAS,CAAC;AAE9B,OAAO,EAAE,qBAAqB,EAA0B,MAAM,uBAAuB,CAAC;AAEtF,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,uBAAuB,CAAC;AAElF,kCAAkC;AAClC,MAAM,KAAK,GAAG;IACZ,IAAI,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,UAAU,IAAI,SAAS;IAC/C,GAAG,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,UAAU,IAAI,SAAS;IAC9C,KAAK,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,WAAW,IAAI,SAAS;IACjD,IAAI,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,WAAW,IAAI,SAAS;IAChD,MAAM,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,WAAW,IAAI,SAAS;IAClD,GAAG,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,WAAW,IAAI,SAAS;IAC/C,IAAI,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,WAAW,IAAI,SAAS;CACjD,CAAC;AAaF,MAAM,OAAO,qBAAqB;IACxB,WAAW,CAAwB;IACnC,QAAQ,CAAS;IAEzB,YAAY,UAA6B,EAAE;QACzC,IAAI,CAAC,WAAW,GAAG,IAAI,qBAAqB,EAAE,CAAC;QAC/C,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,aAAa,CAAC;IACpD,CAAC;IAED;;OAEG;IACK,WAAW;QACjB,OAAO,CAAC,KAAK,EAAE,CAAC;QAChB,OAAO,CAAC,GAAG,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,gEAAgE,CAAC,CAAC,CAAC;QAC1F,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,wDAAwD,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QACtH,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,gEAAgE,CAAC,CAAC,CAAC;QAC1F,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,wDAAwD,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QAC1G,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,wDAAwD,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QAC1G,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,gEAAgE,CAAC,CAAC,CAAC;QAC1F,OAAO,CAAC,GAAG,EAAE,CAAC;IAChB,CAAC;IAED;;OAEG;IACK,WAAW,CAAC,KAAa,EAAE,QAAgB;QACjD,OAAO,CAAC,GAAG,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC;QAC9C,OAAO,CAAC,GAAG,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC;QAC/C,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,QAAQ,CAAC,CAAC;QAClD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC;QACvD,OAAO,CAAC,GAAG,EAAE,CAAC;IAChB,CAAC;IAED;;OAEG;IACK,SAAS,CAAC,OAAe;QAC/B,OAAO,CAAC,GAAG,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,GAAG,OAAO,CAAC,CAAC;QAC9C,OAAO,CAAC,GAAG,EAAE,CAAC;IAChB,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,WAAW,CAAC,OAAgB;QACxC,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC;YAC7B,IAAI,EAAE,MAAM;YACZ,IAAI,EAAE,OAAO;YACb,OAAO,EAAE,gBAAgB;YACzB,OAAO;YACP,QAAQ,EAAE,CAAC,KAAa,EAAE,EAAE;gBAC1B,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;oBACnC,OAAO,oCAAoC,CAAC;gBAC9C,CAAC;gBACD,OAAO,IAAI,CAAC;YACd,CAAC;SACF,CAAC,CAAC;QACH,OAAO,QAAQ,CAAC,KAAK,CAAC;IACxB,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,cAAc;QAC1B,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC;YAC7B,IAAI,EAAE,UAAU;YAChB,IAAI,EAAE,UAAU;YAChB,OAAO,EAAE,WAAW;YACpB,QAAQ,EAAE,CAAC,KAAa,EAAE,EAAE;gBAC1B,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC/B,OAAO,4BAA4B,CAAC;gBACtC,CAAC;gBACD,OAAO,IAAI,CAAC;YACd,CAAC;SACF,CAAC,CAAC;QACH,OAAO,QAAQ,CAAC,QAAQ,CAAC;IAC3B,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,iBAAiB;QAC7B,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC;YAC7B,IAAI,EAAE,UAAU;YAChB,IAAI,EAAE,UAAU;YAChB,OAAO,EAAE,2CAA2C;YACpD,QAAQ,EAAE,CAAC,KAAa,EAAE,EAAE;gBAC1B,IAAI,CAAC,KAAK,EAAE,CAAC;oBACX,OAAO,yBAAyB,CAAC;gBACnC,CAAC;gBACD,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACrB,OAAO,wCAAwC,CAAC;gBAClD,CAAC;gBACD,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;oBACtB,OAAO,2CAA2C,CAAC;gBACrD,CAAC;gBACD,OAAO,IAAI,CAAC;YACd,CAAC;SACF,CAAC,CAAC;QACH,OAAO,QAAQ,CAAC,QAAQ,CAAC;IAC3B,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,gBAAgB;QAC5B,MAAM,WAAW,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,MAAM,YAAY,CAAC;QAC9D,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC;YAC7B,IAAI,EAAE,MAAM;YACZ,IAAI,EAAE,YAAY;YAClB,OAAO,EAAE,cAAc;YACvB,OAAO,EAAE,WAAW;SACrB,CAAC,CAAC;QACH,OAAO,QAAQ,CAAC,UAAU,IAAI,WAAW,CAAC;IAC5C,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,cAAc;QAC1B,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC;YAC7B,IAAI,EAAE,SAAS;YACf,IAAI,EAAE,OAAO;YACb,OAAO,EAAE,uBAAuB;YAChC,OAAO,EAAE,IAAI;SACd,CAAC,CAAC;QACH,OAAO,QAAQ,CAAC,KAAK,IAAI,IAAI,CAAC;IAChC,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,oBAAoB,CAAC,kBAA2B;QAC5D,MAAM,OAAO,GAAG,kBAAkB;YAChC,CAAC,CAAC,gCAAgC,KAAK,CAAC,MAAM,CAAC,kBAAkB,CAAC,gCAAgC;YAClG,CAAC,CAAC,4EAA4E,CAAC;QAEjF,OAAO,CAAC,GAAG,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,6BAA6B,CAAC,CAAC,CAAC;QACzD,OAAO,CAAC,GAAG,EAAE,CAAC;QAEd,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC;YAC7B,IAAI,EAAE,SAAS;YACf,IAAI,EAAE,UAAU;YAChB,OAAO;YACP,OAAO,EAAE,IAAI;SACd,CAAC,CAAC;QACH,OAAO,QAAQ,CAAC,QAAQ,IAAI,IAAI,CAAC;IACnC,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,gBAAgB;QAC5B,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC;YAC7B,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,mBAAmB;YAC5B,OAAO,EAAE;gBACP,EAAE,KAAK,EAAE,4BAA4B,EAAE,KAAK,EAAE,OAAO,EAAE;gBACvD,EAAE,KAAK,EAAE,sBAAsB,EAAE,KAAK,EAAE,UAAU,EAAE;aACrD;YACD,OAAO,EAAE,CAAC;SACX,CAAC,CAAC;QACH,OAAO,QAAQ,CAAC,MAAM,IAAI,OAAO,CAAC;IACpC,CAAC;IAED;;OAEG;IACK,2BAA2B,CAAC,KAAa;QAC/C,OAAO,CAAC,GAAG,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,+BAA+B,CAAC,CAAC,CAAC;QAC3D,OAAO,CAAC,GAAG,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,0CAA0C,CAAC,CAAC,CAAC;QACnE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,KAAK,EAAE,CAAC,CAAC,CAAC;QACtC,OAAO,CAAC,GAAG,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,4DAA4D,CAAC,CAAC,CAAC;QACrF,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,mEAAmE,CAAC,CAAC,CAAC;QAC5F,OAAO,CAAC,GAAG,EAAE,CAAC;IAChB,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,YAAY,CAAC,KAAc;QACvC,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,KAAK,IAAI,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;YACpD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;YAE7C,OAAO,CAAC,GAAG,EAAE,CAAC;YACd,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC;YAExC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,SAAS,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;YAE/E,kCAAkC;YAClC,IAAI,KAAK,CAAC,aAAa,KAAK,KAAK,EAAE,CAAC;gBAClC,IAAI,CAAC,2BAA2B,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAChD,CAAC;YAED,yBAAyB;YACzB,MAAM,IAAI,CAAC,wBAAwB,EAAE,CAAC;YAEtC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,QAAQ,IAAI,SAAS,CAAC,CAAC;YAC3D,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC3B,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,MAAM,GAAG,GAAG,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC;YACzD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;QACxC,CAAC;IACH,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,eAAe,CAAC,KAAc;QAC1C,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,KAAK,IAAI,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;YACpD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAEhD,OAAO,CAAC,GAAG,EAAE,CAAC;YACd,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC,CAAC;YAE9C,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,SAAS,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;YAElF,uCAAuC;YACvC,IAAI,CAAC,2BAA2B,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAE9C,kBAAkB;YAClB,MAAM,IAAI,CAAC,wBAAwB,EAAE,CAAC;YAEtC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,QAAQ,IAAI,SAAS,CAAC,CAAC;YAC3D,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC3B,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,MAAM,GAAG,GAAG,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC;YACzD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;QACxC,CAAC;IACH,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,wBAAwB;QACpC,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAEjD,OAAO,CAAC,GAAG,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC,CAAC;QAEhD,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC;YAClD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAC;QAClD,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC;YAE9D,uDAAuD;YACvD,IAAI,QAAQ,CAAC,QAAQ,CAAC,oBAAoB,CAAC,IAAI,KAAK,CAAC,QAAQ,EAAE,MAAM,KAAK,GAAG,EAAE,CAAC;gBAC9E,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,oBAAoB,EAAE,CAAC;gBAEzD,IAAI,cAAc,EAAE,CAAC;oBACnB,OAAO,CAAC,GAAG,EAAE,CAAC;oBACd,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC,CAAC;oBACjD,MAAM,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC;oBAClD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC,CAAC;gBACnD,CAAC;qBAAM,CAAC;oBACN,MAAM,IAAI,KAAK,CAAC,uFAAuF,CAAC,CAAC;gBAC3G,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,GAAG,CAAC,UAA6B,EAAE;QACvC,4BAA4B;QAC5B,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;QAE9B,8BAA8B;QAC9B,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;YACzB,IAAI,CAAC,WAAW,EAAE,CAAC;QACrB,CAAC;QAED,6BAA6B;QAC7B,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC;QACxC,IAAI,QAAQ,IAAI,IAAI,CAAC,WAAW,CAAC,UAAU,EAAE,EAAE,CAAC;YAC9C,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,yBAAyB,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;YACjF,OAAO,CAAC,GAAG,EAAE,CAAC;YAEd,gCAAgC;YAChC,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;gBACvB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,4CAA4C,CAAC,CAAC,CAAC;gBACxE,MAAM,IAAI,CAAC,wBAAwB,EAAE,CAAC;gBACtC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,QAAQ,IAAI,SAAS,CAAC,CAAC;YACnE,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;gBACvD,OAAO,CAAC,GAAG,EAAE,CAAC;YAChB,CAAC;YAED,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;YAC7C,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,WAAW,EAAE,QAAQ;gBACrB,OAAO,EAAE,QAAQ;aAClB,CAAC;QACJ,CAAC;QAED,qBAAqB;QACrB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAE7C,IAAI,MAA4C,CAAC;QAEjD,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;YACvB,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;QACrC,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,MAAM,IAAI,CAAC,eAAe,EAAE,CAAC;QACxC,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,IAAI,uBAAuB,CAAC,CAAC;YACxD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAC5B,CAAC;QAED,iCAAiC;QACjC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;QAE7C,OAAO;YACL,OAAO,EAAE,IAAI;YACb,WAAW,EAAE,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,IAAI,SAAS;YAChD,OAAO,EAAE,QAAQ;SAClB,CAAC;IACJ,CAAC;CACF;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,UAA6B,EAAE;IACjE,MAAM,UAAU,GAAG,IAAI,qBAAqB,CAAC,OAAO,CAAC,CAAC;IACtD,OAAO,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;AACjC,CAAC"}

package/dist/{auth → src/auth}/user-credentials.d.ts

@@ -1,6 +1,7 @@
 export interface StoredCredentials {
     userId: string;
     email: string;
+    emailVerified?: boolean;
     accessToken: string;
     refreshToken: string;
     expiresAt: string;
@@ -26,6 +27,10 @@ export declare class UserCredentialManager {
      * Register this machine as a device
      */
     registerDevice(deviceName: string): Promise<string>;
+    /**
+     * Transfer a device from another account to this user
+     */
+    transferDevice(deviceName: string): Promise<string>;
     /**
      * Refresh the access token
      */

package/dist/src/auth/user-credentials.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-credentials.d.ts","sourceRoot":"","sources":["../../../src/auth/user-credentials.ts"],"names":[],"mappings":"AAaA,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAKD,qBAAa,qBAAqB;IAChC,OAAO,CAAC,WAAW,CAAkC;IAE/C,IAAI,IAAI,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC;IAgBzC,IAAI,CAAC,KAAK,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC;IAO7C,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAS5B,GAAG,IAAI,iBAAiB,GAAG,IAAI;IAI/B,UAAU,IAAI,OAAO;IAMrB;;OAEG;IACG,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAuB1F;;OAEG;IACG,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAuB7F;;OAEG;IACG,cAAc,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IA0BzD;;OAEG;IACG,cAAc,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IA0BzD;;OAEG;IACG,kBAAkB,IAAI,OAAO,CAAC,MAAM,CAAC;IAmB3C,OAAO,CAAC,qBAAqB;CAc9B"}