create-hq 10.1.0 → 10.7.1

package/dist/auth.js

@@ -1,44 +1,56 @@
 /**
- * Auth utilities for create-hq — OAuth PKCE flow for Clerk (US-008)
+ * GitHub App device flow auth for create-hq.
  *
- * Reuses the same patterns as hq-cli/src/utils/auth.ts and
- * hq-cli/src/utils/token-store.ts but bundled inline so create-hq
- * has no dependency on @indigoai-us/hq-cli.
+ * Talks directly to github.com — no backend involved.
+ *
+ * Flow:
+ *   1. POST github.com/login/device/code with our App's client_id
+ *   2. Display user_code, open verification_uri in browser
+ *   3. Poll github.com/login/oauth/access_token at the GitHub-specified interval
+ *   4. On success: GET api.github.com/user → store { access_token, login, id, name, email }
+ *
+ * Token is stored at ~/.hq/credentials.json (mode 0600). Tokens are
+ * GitHub App user-to-server tokens (ghu_…), so they ignore OAuth scopes —
+ * permissions are configured on the App settings page.
  *
  * Token values are NEVER written to stdout or logs.
  */
-import * as crypto from "crypto";
-import * as http from "http";
 import * as fs from "fs";
 import * as path from "path";
 import * as os from "os";
 import { exec } from "child_process";
+import chalk from "chalk";
+// ─── Constants ──────────────────────────────────────────────────────────────
+/** hq-team-sync GitHub App client ID (public — safe to commit). */
+export const HQ_GITHUB_APP_CLIENT_ID = "Iv23liSdkCBQYhrNcRmI";
+export const HQ_GITHUB_APP_SLUG = "hq-team-sync";
+const GITHUB_DEVICE_CODE_URL = "https://github.com/login/device/code";
+const GITHUB_TOKEN_URL = "https://github.com/login/oauth/access_token";
+const GITHUB_API_USER_URL = "https://api.github.com/user";
 const HQ_DIR = path.join(os.homedir(), ".hq");
-const AUTH_FILE = path.join(HQ_DIR, "auth.json");
-// ─── Token store ─────────────────────────────────────────────────────────────
+const CREDENTIALS_FILE = path.join(HQ_DIR, "credentials.json");
+// ─── Token store ────────────────────────────────────────────────────────────
 function ensureHqDir() {
     if (!fs.existsSync(HQ_DIR)) {
         fs.mkdirSync(HQ_DIR, { recursive: true, mode: 0o700 });
     }
 }
-/** Save auth token to ~/.hq/auth.json with 0600 permissions. */
-export function saveToken(token) {
+/** Save credentials to ~/.hq/credentials.json with 0600 perms. */
+export function saveGitHubAuth(auth) {
     ensureHqDir();
-    const content = JSON.stringify(token, null, 2);
-    fs.writeFileSync(AUTH_FILE, content, { mode: 0o600 });
+    fs.writeFileSync(CREDENTIALS_FILE, JSON.stringify(auth, null, 2), {
+        mode: 0o600,
+    });
 }
-/** Load auth token from ~/.hq/auth.json. Returns null if missing/invalid. */
-export function loadToken() {
+/** Load credentials, or null if missing/invalid. */
+export function loadGitHubAuth() {
     try {
-        if (!fs.existsSync(AUTH_FILE)) {
+        if (!fs.existsSync(CREDENTIALS_FILE))
             return null;
-        }
-        const content = fs.readFileSync(AUTH_FILE, "utf-8");
-        const parsed = JSON.parse(content);
-        if (typeof parsed.clerk_session_token !== "string" ||
-            typeof parsed.user_id !== "string" ||
-            typeof parsed.email !== "string" ||
-            typeof parsed.expires_at !== "string") {
+        const parsed = JSON.parse(fs.readFileSync(CREDENTIALS_FILE, "utf-8"));
+        if (typeof parsed.access_token !== "string" ||
+            typeof parsed.login !== "string" ||
+            typeof parsed.id !== "number") {
             return null;
         }
         return parsed;
@@ -47,110 +59,201 @@ export function loadToken() {
         return null;
     }
 }
-/** Check if a token is expired or within 5 minutes of expiry. */
-export function isTokenExpired(token) {
-    const expiresAt = new Date(token.expires_at).getTime();
-    const bufferMs = 5 * 60 * 1000;
-    return Date.now() >= expiresAt - bufferMs;
-}
-// ─── PKCE helpers ────────────────────────────────────────────────────────────
-function generateCodeVerifier() {
-    return crypto.randomBytes(32).toString("base64url");
+/** Remove stored credentials. */
+export function clearGitHubAuth() {
+    try {
+        if (fs.existsSync(CREDENTIALS_FILE)) {
+            fs.unlinkSync(CREDENTIALS_FILE);
+        }
+    }
+    catch {
+        // ignore
+    }
 }
-function generateCodeChallenge(verifier) {
-    return crypto.createHash("sha256").update(verifier).digest("base64url");
+/**
+ * Quick liveness probe — does the stored token still work?
+ * Calls api.github.com/user with the token; returns true on 200.
+ */
+export async function isGitHubAuthValid(auth) {
+    try {
+        const res = await fetch(GITHUB_API_USER_URL, {
+            headers: {
+                Authorization: `token ${auth.access_token}`,
+                Accept: "application/vnd.github+json",
+                "User-Agent": "create-hq",
+            },
+            signal: AbortSignal.timeout(10_000),
+        });
+        return res.ok;
+    }
+    catch {
+        return false;
+    }
 }
-function openBrowser(url) {
-    const command = process.platform === "darwin" ? `open "${url}"` : `xdg-open "${url}"`;
+// ─── Browser open (cross-platform) ──────────────────────────────────────────
+/** Open a URL in the user's default browser. Best-effort, never throws. */
+export function openBrowser(url) {
+    let command;
+    if (process.platform === "darwin") {
+        command = `open "${url}"`;
+    }
+    else if (process.platform === "win32") {
+        // Windows: `start` is a cmd.exe builtin. The empty quotes are the
+        // window title argument (start treats the first quoted arg as title).
+        command = `start "" "${url}"`;
+    }
+    else {
+        command = `xdg-open "${url}"`;
+    }
     exec(command, (err) => {
         if (err) {
-            console.error(`Could not open browser automatically. Please visit:\n  ${url}`);
+            console.error(chalk.dim(`  (could not open browser automatically — visit ${url} manually)`));
         }
     });
 }
-// ─── Auth flow ───────────────────────────────────────────────────────────────
+// ─── Device flow ────────────────────────────────────────────────────────────
+function sleep(ms) {
+    return new Promise((resolve) => setTimeout(resolve, ms));
+}
 /**
- * Start the OAuth PKCE auth flow:
- * 1. Generate PKCE code_verifier + code_challenge
- * 2. Start local HTTP server on a random port for the callback
- * 3. Open browser to Clerk auth URL
- * 4. Wait for callback with auth code
- * 5. Exchange code for token via registry /auth/token endpoint
- * 6. Save token and return AuthToken
+ * Run the GitHub App device authorization flow.
+ *
+ * Throws on:
+ *   - Network errors talking to github.com
+ *   - User-denied authorization (access_denied)
+ *   - Device code expiration
+ *   - Failure to fetch the user profile
  */
-export async function startAuthFlow(registryUrl) {
-    const codeVerifier = generateCodeVerifier();
-    const codeChallenge = generateCodeChallenge(codeVerifier);
-    return new Promise((resolve, reject) => {
-        const server = http.createServer(async (req, res) => {
-            try {
-                const url = new URL(req.url ?? "/", "http://localhost");
-                if (url.pathname !== "/callback") {
-                    res.writeHead(404);
-                    res.end("Not found");
-                    return;
-                }
-                const code = url.searchParams.get("code");
-                const error = url.searchParams.get("error");
-                if (error) {
-                    res.writeHead(200, { "Content-Type": "text/html" });
-                    res.end("<html><body><h2>Authentication failed</h2><p>You can close this window.</p></body></html>");
-                    server.close();
-                    reject(new Error(`Auth failed: ${error}`));
-                    return;
-                }
-                if (!code) {
-                    res.writeHead(400, { "Content-Type": "text/html" });
-                    res.end("<html><body><h2>Missing auth code</h2><p>You can close this window.</p></body></html>");
-                    server.close();
-                    reject(new Error("No authorization code received"));
-                    return;
-                }
-                // Exchange code for token
-                const tokenResponse = await fetch(`${registryUrl}/auth/token`, {
-                    method: "POST",
-                    headers: { "Content-Type": "application/json" },
-                    body: JSON.stringify({
-                        code,
-                        code_verifier: codeVerifier,
-                        redirect_uri: `http://localhost:${server.address().port}/callback`,
-                    }),
-                });
-                if (!tokenResponse.ok) {
-                    const body = await tokenResponse.text();
-                    res.writeHead(200, { "Content-Type": "text/html" });
-                    res.end("<html><body><h2>Token exchange failed</h2><p>You can close this window.</p></body></html>");
-                    server.close();
-                    reject(new Error(`Token exchange failed (${tokenResponse.status}): ${body}`));
-                    return;
-                }
-                const tokenData = (await tokenResponse.json());
-                // Save token to ~/.hq/auth.json
-                saveToken(tokenData);
-                res.writeHead(200, { "Content-Type": "text/html" });
-                res.end("<html><body><h2>Authenticated!</h2><p>You can close this window and return to the terminal.</p></body></html>");
-                server.close();
-                resolve(tokenData);
-            }
-            catch (err) {
-                server.close();
-                reject(err);
-            }
-        });
-        // Listen on random port
-        server.listen(0, "127.0.0.1", () => {
-            const addr = server.address();
-            const redirectUri = `http://localhost:${addr.port}/callback`;
-            const authUrl = `${registryUrl}/auth/login?redirect_uri=${encodeURIComponent(redirectUri)}&code_challenge=${codeChallenge}&code_challenge_method=S256`;
-            console.log("  Opening browser for authentication...");
-            openBrowser(authUrl);
-            console.log(`\n  If the browser doesn't open, visit:\n  ${authUrl}\n`);
+export async function startGitHubDeviceFlow() {
+    // 1. Request a device code
+    const deviceRes = await fetch(GITHUB_DEVICE_CODE_URL, {
+        method: "POST",
+        headers: {
+            Accept: "application/json",
+            "Content-Type": "application/json",
+            "User-Agent": "create-hq",
+        },
+        body: JSON.stringify({
+            client_id: HQ_GITHUB_APP_CLIENT_ID,
+        }),
+        signal: AbortSignal.timeout(15_000),
+    });
+    if (!deviceRes.ok) {
+        const body = await deviceRes.text().catch(() => "");
+        throw new Error(`GitHub device code request failed (${deviceRes.status}): ${body}`);
+    }
+    const device = (await deviceRes.json());
+    // 2. Display the code and open the browser
+    console.log();
+    console.log(chalk.bold("  Sign in with GitHub"));
+    console.log();
+    console.log(`  Open this URL in your browser:`);
+    console.log(`  ${chalk.cyan(device.verification_uri)}`);
+    console.log();
+    console.log(`  Enter this code: ${chalk.bold.white(device.user_code)}`);
+    console.log();
+    console.log(chalk.dim("  Waiting for authorization..."));
+    openBrowser(device.verification_uri);
+    // 3. Poll for token
+    let pollInterval = Math.max((device.interval ?? 5) * 1000, 5000);
+    const expiresAt = Date.now() + (device.expires_in ?? 900) * 1000;
+    while (Date.now() < expiresAt) {
+        await sleep(pollInterval);
+        let tokenRes;
+        try {
+            tokenRes = await fetch(GITHUB_TOKEN_URL, {
+                method: "POST",
+                headers: {
+                    Accept: "application/json",
+                    "Content-Type": "application/json",
+                    "User-Agent": "create-hq",
+                },
+                body: JSON.stringify({
+                    client_id: HQ_GITHUB_APP_CLIENT_ID,
+                    device_code: device.device_code,
+                    grant_type: "urn:ietf:params:oauth:grant-type:device_code",
+                }),
+                signal: AbortSignal.timeout(15_000),
+            });
+        }
+        catch {
+            // Network blip — keep polling
+            continue;
+        }
+        const data = (await tokenRes.json().catch(() => ({})));
+        if (data.error === "authorization_pending")
+            continue;
+        if (data.error === "slow_down") {
+            // Per spec: increase polling interval by at least 5 seconds
+            const bump = (data.interval ?? 5) * 1000;
+            pollInterval = Math.max(pollInterval + bump, pollInterval + 5000);
+            continue;
+        }
+        if (data.error === "expired_token") {
+            throw new Error("GitHub device code expired — please run create-hq again");
+        }
+        if (data.error === "access_denied") {
+            throw new Error("Authorization was denied");
+        }
+        if (data.error) {
+            throw new Error(`GitHub auth error: ${data.error}${data.error_description ? ` — ${data.error_description}` : ""}`);
+        }
+        if (!data.access_token) {
+            throw new Error("GitHub returned no access_token");
+        }
+        // 4. Fetch the authenticated user profile
+        const userRes = await fetch(GITHUB_API_USER_URL, {
+            headers: {
+                Authorization: `token ${data.access_token}`,
+                Accept: "application/vnd.github+json",
+                "User-Agent": "create-hq",
+            },
+            signal: AbortSignal.timeout(15_000),
         });
-        // Timeout after 2 minutes
-        setTimeout(() => {
-            server.close();
-            reject(new Error("Authentication timed out after 2 minutes"));
-        }, 120_000);
+        if (!userRes.ok) {
+            const body = await userRes.text().catch(() => "");
+            throw new Error(`Failed to fetch GitHub user (${userRes.status}): ${body}`);
+        }
+        const user = (await userRes.json());
+        const auth = {
+            access_token: data.access_token,
+            login: user.login,
+            id: user.id,
+            name: user.name,
+            email: user.email,
+            issued_at: new Date().toISOString(),
+        };
+        saveGitHubAuth(auth);
+        return auth;
+    }
+    throw new Error("GitHub device flow timed out — please try again");
+}
+// ─── GitHub API helpers used by downstream flows ────────────────────────────
+/**
+ * Authenticated fetch against api.github.com. Throws on non-2xx with
+ * the response body included for diagnostics.
+ */
+export async function githubApi(pathname, auth, init = {}) {
+    const url = pathname.startsWith("https://")
+        ? pathname
+        : `https://api.github.com${pathname.startsWith("/") ? "" : "/"}${pathname}`;
+    const res = await fetch(url, {
+        ...init,
+        headers: {
+            Authorization: `token ${auth.access_token}`,
+            Accept: "application/vnd.github+json",
+            "User-Agent": "create-hq",
+            ...(init.headers || {}),
+        },
+        signal: init.signal ?? AbortSignal.timeout(20_000),
     });
+    if (!res.ok) {
+        const body = await res.text().catch(() => "");
+        throw new Error(`GitHub API ${res.status} ${pathname}: ${body}`);
+    }
+    // Some endpoints return 204
+    if (res.status === 204)
+        return undefined;
+    return (await res.json());
 }
 //# sourceMappingURL=auth.js.map

package/dist/auth.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth.js","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,MAAM,MAAM,QAAQ,CAAC;AACjC,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;AAWrC,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,KAAK,CAAC,CAAC;AAC9C,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;AAEjD,gFAAgF;AAEhF,SAAS,WAAW;IAClB,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3B,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACzD,CAAC;AACH,CAAC;AAED,gEAAgE;AAChE,MAAM,UAAU,SAAS,CAAC,KAAgB;IACxC,WAAW,EAAE,CAAC;IACd,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAC/C,EAAE,CAAC,aAAa,CAAC,SAAS,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AACxD,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,SAAS;IACvB,IAAI,CAAC;QACH,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAC9B,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QACpD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAEnC,IACE,OAAO,MAAM,CAAC,mBAAmB,KAAK,QAAQ;YAC9C,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ;YAClC,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ;YAChC,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ,EACrC,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,MAAmB,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,cAAc,CAAC,KAAgB;IAC7C,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE,CAAC;IACvD,MAAM,QAAQ,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;IAC/B,OAAO,IAAI,CAAC,GAAG,EAAE,IAAI,SAAS,GAAG,QAAQ,CAAC;AAC5C,CAAC;AAED,gFAAgF;AAEhF,SAAS,oBAAoB;IAC3B,OAAO,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AACtD,CAAC;AAED,SAAS,qBAAqB,CAAC,QAAgB;IAC7C,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;AAC1E,CAAC;AAED,SAAS,WAAW,CAAC,GAAW;IAC9B,MAAM,OAAO,GACX,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,GAAG,GAAG,CAAC,CAAC,CAAC,aAAa,GAAG,GAAG,CAAC;IACxE,IAAI,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;QACpB,IAAI,GAAG,EAAE,CAAC;YACR,OAAO,CAAC,KAAK,CACX,0DAA0D,GAAG,EAAE,CAChE,CAAC;QACJ,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,gFAAgF;AAEhF;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,WAAmB;IACrD,MAAM,YAAY,GAAG,oBAAoB,EAAE,CAAC;IAC5C,MAAM,aAAa,GAAG,qBAAqB,CAAC,YAAY,CAAC,CAAC;IAE1D,OAAO,IAAI,OAAO,CAAY,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAChD,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;YAClD,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,kBAAkB,CAAC,CAAC;gBAExD,IAAI,GAAG,CAAC,QAAQ,KAAK,WAAW,EAAE,CAAC;oBACjC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;oBACnB,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;oBACrB,OAAO;gBACT,CAAC;gBAED,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;gBAC1C,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;gBAE5C,IAAI,KAAK,EAAE,CAAC;oBACV,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC,CAAC;oBACpD,GAAG,CAAC,GAAG,CACL,2FAA2F,CAC5F,CAAC;oBACF,MAAM,CAAC,KAAK,EAAE,CAAC;oBACf,MAAM,CAAC,IAAI,KAAK,CAAC,gBAAgB,KAAK,EAAE,CAAC,CAAC,CAAC;oBAC3C,OAAO;gBACT,CAAC;gBAED,IAAI,CAAC,IAAI,EAAE,CAAC;oBACV,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC,CAAC;oBACpD,GAAG,CAAC,GAAG,CACL,uFAAuF,CACxF,CAAC;oBACF,MAAM,CAAC,KAAK,EAAE,CAAC;oBACf,MAAM,CAAC,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC,CAAC;oBACpD,OAAO;gBACT,CAAC;gBAED,0BAA0B;gBAC1B,MAAM,aAAa,GAAG,MAAM,KAAK,CAAC,GAAG,WAAW,aAAa,EAAE;oBAC7D,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;oBAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;wBACnB,IAAI;wBACJ,aAAa,EAAE,YAAY;wBAC3B,YAAY,EAAE,oBAAqB,MAAM,CAAC,OAAO,EAAuB,CAAC,IAAI,WAAW;qBACzF,CAAC;iBACH,CAAC,CAAC;gBAEH,IAAI,CAAC,aAAa,CAAC,EAAE,EAAE,CAAC;oBACtB,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,CAAC;oBACxC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC,CAAC;oBACpD,GAAG,CAAC,GAAG,CACL,2FAA2F,CAC5F,CAAC;oBACF,MAAM,CAAC,KAAK,EAAE,CAAC;oBACf,MAAM,CACJ,IAAI,KAAK,CACP,0BAA0B,aAAa,CAAC,MAAM,MAAM,IAAI,EAAE,CAC3D,CACF,CAAC;oBACF,OAAO;gBACT,CAAC;gBAED,MAAM,SAAS,GAAG,CAAC,MAAM,aAAa,CAAC,IAAI,EAAE,CAAc,CAAC;gBAE5D,gCAAgC;gBAChC,SAAS,CAAC,SAAS,CAAC,CAAC;gBAErB,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC,CAAC;gBACpD,GAAG,CAAC,GAAG,CACL,+GAA+G,CAChH,CAAC;gBACF,MAAM,CAAC,KAAK,EAAE,CAAC;gBACf,OAAO,CAAC,SAAS,CAAC,CAAC;YACrB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,CAAC,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,GAAG,CAAC,CAAC;YACd,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,wBAAwB;QACxB,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE;YACjC,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,EAAsB,CAAC;YAClD,MAAM,WAAW,GAAG,oBAAoB,IAAI,CAAC,IAAI,WAAW,CAAC;YAC7D,MAAM,OAAO,GAAG,GAAG,WAAW,4BAA4B,kBAAkB,CAAC,WAAW,CAAC,mBAAmB,aAAa,6BAA6B,CAAC;YAEvJ,OAAO,CAAC,GAAG,CAAC,yCAAyC,CAAC,CAAC;YACvD,WAAW,CAAC,OAAO,CAAC,CAAC;YACrB,OAAO,CAAC,GAAG,CAAC,8CAA8C,OAAO,IAAI,CAAC,CAAC;QACzE,CAAC,CAAC,CAAC;QAEH,0BAA0B;QAC1B,UAAU,CAAC,GAAG,EAAE;YACd,MAAM,CAAC,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC,CAAC;QAChE,CAAC,EAAE,OAAO,CAAC,CAAC;IACd,CAAC,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;AACrC,OAAO,KAAK,MAAM,OAAO,CAAC;AAE1B,+EAA+E;AAE/E,mEAAmE;AACnE,MAAM,CAAC,MAAM,uBAAuB,GAAG,sBAAsB,CAAC;AAC9D,MAAM,CAAC,MAAM,kBAAkB,GAAG,cAAc,CAAC;AAEjD,MAAM,sBAAsB,GAAG,sCAAsC,CAAC;AACtE,MAAM,gBAAgB,GAAG,6CAA6C,CAAC;AACvE,MAAM,mBAAmB,GAAG,6BAA6B,CAAC;AAE1D,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,KAAK,CAAC,CAAC;AAC9C,MAAM,gBAAgB,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;AAkD/D,+EAA+E;AAE/E,SAAS,WAAW;IAClB,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3B,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACzD,CAAC;AACH,CAAC;AAED,kEAAkE;AAClE,MAAM,UAAU,cAAc,CAAC,IAAgB;IAC7C,WAAW,EAAE,CAAC;IACd,EAAE,CAAC,aAAa,CAAC,gBAAgB,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE;QAChE,IAAI,EAAE,KAAK;KACZ,CAAC,CAAC;AACL,CAAC;AAED,oDAAoD;AACpD,MAAM,UAAU,cAAc;IAC5B,IAAI,CAAC;QACH,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,gBAAgB,CAAC;YAAE,OAAO,IAAI,CAAC;QAClD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,gBAAgB,EAAE,OAAO,CAAC,CAAC,CAAC;QACtE,IACE,OAAO,MAAM,CAAC,YAAY,KAAK,QAAQ;YACvC,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ;YAChC,OAAO,MAAM,CAAC,EAAE,KAAK,QAAQ,EAC7B,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,MAAoB,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,iCAAiC;AACjC,MAAM,UAAU,eAAe;IAC7B,IAAI,CAAC;QACH,IAAI,EAAE,CAAC,UAAU,CAAC,gBAAgB,CAAC,EAAE,CAAC;YACpC,EAAE,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC;QAClC,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,SAAS;IACX,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,IAAgB;IACtD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,mBAAmB,EAAE;YAC3C,OAAO,EAAE;gBACP,aAAa,EAAE,SAAS,IAAI,CAAC,YAAY,EAAE;gBAC3C,MAAM,EAAE,6BAA6B;gBACrC,YAAY,EAAE,WAAW;aAC1B;YACD,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;SACpC,CAAC,CAAC;QACH,OAAO,GAAG,CAAC,EAAE,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,+EAA+E;AAE/E,2EAA2E;AAC3E,MAAM,UAAU,WAAW,CAAC,GAAW;IACrC,IAAI,OAAe,CAAC;IACpB,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAClC,OAAO,GAAG,SAAS,GAAG,GAAG,CAAC;IAC5B,CAAC;SAAM,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACxC,kEAAkE;QAClE,sEAAsE;QACtE,OAAO,GAAG,aAAa,GAAG,GAAG,CAAC;IAChC,CAAC;SAAM,CAAC;QACN,OAAO,GAAG,aAAa,GAAG,GAAG,CAAC;IAChC,CAAC;IACD,IAAI,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;QACpB,IAAI,GAAG,EAAE,CAAC;YACR,OAAO,CAAC,KAAK,CACX,KAAK,CAAC,GAAG,CAAC,mDAAmD,GAAG,YAAY,CAAC,CAC9E,CAAC;QACJ,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,+EAA+E;AAE/E,SAAS,KAAK,CAAC,EAAU;IACvB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB;IACzC,2BAA2B;IAC3B,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,sBAAsB,EAAE;QACpD,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,MAAM,EAAE,kBAAkB;YAC1B,cAAc,EAAE,kBAAkB;YAClC,YAAY,EAAE,WAAW;SAC1B;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;YACnB,SAAS,EAAE,uBAAuB;SACnC,CAAC;QACF,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;KACpC,CAAC,CAAC;IAEH,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;QAClB,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QACpD,MAAM,IAAI,KAAK,CAAC,sCAAsC,SAAS,CAAC,MAAM,MAAM,IAAI,EAAE,CAAC,CAAC;IACtF,CAAC;IAED,MAAM,MAAM,GAAG,CAAC,MAAM,SAAS,CAAC,IAAI,EAAE,CAAuB,CAAC;IAE9D,2CAA2C;IAC3C,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC,CAAC;IACjD,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,OAAO,CAAC,GAAG,CAAC,kCAAkC,CAAC,CAAC;IAChD,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC;IACxD,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,OAAO,CAAC,GAAG,CAAC,sBAAsB,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IACxE,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,gCAAgC,CAAC,CAAC,CAAC;IAEzD,WAAW,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;IAErC,oBAAoB;IACpB,IAAI,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,QAAQ,IAAI,CAAC,CAAC,GAAG,IAAI,EAAE,IAAI,CAAC,CAAC;IACjE,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,UAAU,IAAI,GAAG,CAAC,GAAG,IAAI,CAAC;IAEjE,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,EAAE,CAAC;QAC9B,MAAM,KAAK,CAAC,YAAY,CAAC,CAAC;QAE1B,IAAI,QAAkB,CAAC;QACvB,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,KAAK,CAAC,gBAAgB,EAAE;gBACvC,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,MAAM,EAAE,kBAAkB;oBAC1B,cAAc,EAAE,kBAAkB;oBAClC,YAAY,EAAE,WAAW;iBAC1B;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACnB,SAAS,EAAE,uBAAuB;oBAClC,WAAW,EAAE,MAAM,CAAC,WAAW;oBAC/B,UAAU,EAAE,8CAA8C;iBAC3D,CAAC;gBACF,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;aACpC,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,8BAA8B;YAC9B,SAAS;QACX,CAAC;QAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAkB,CAAC;QAExE,IAAI,IAAI,CAAC,KAAK,KAAK,uBAAuB;YAAE,SAAS;QAErD,IAAI,IAAI,CAAC,KAAK,KAAK,WAAW,EAAE,CAAC;YAC/B,4DAA4D;YAC5D,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC;YACzC,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,YAAY,GAAG,IAAI,EAAE,YAAY,GAAG,IAAI,CAAC,CAAC;YAClE,SAAS;QACX,CAAC;QAED,IAAI,IAAI,CAAC,KAAK,KAAK,eAAe,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;QAC7E,CAAC;QACD,IAAI,IAAI,CAAC,KAAK,KAAK,eAAe,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;QAC9C,CAAC;QACD,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CACb,sBAAsB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAClG,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QACrD,CAAC;QAED,0CAA0C;QAC1C,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,mBAAmB,EAAE;YAC/C,OAAO,EAAE;gBACP,aAAa,EAAE,SAAS,IAAI,CAAC,YAAY,EAAE;gBAC3C,MAAM,EAAE,6BAA6B;gBACrC,YAAY,EAAE,WAAW;aAC1B;YACD,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;SACpC,CAAC,CAAC;QAEH,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;YAChB,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;YAClD,MAAM,IAAI,KAAK,CAAC,gCAAgC,OAAO,CAAC,MAAM,MAAM,IAAI,EAAE,CAAC,CAAC;QAC9E,CAAC;QAED,MAAM,IAAI,GAAG,CAAC,MAAM,OAAO,CAAC,IAAI,EAAE,CAAuB,CAAC;QAE1D,MAAM,IAAI,GAAe;YACvB,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,CAAC;QAEF,cAAc,CAAC,IAAI,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;AACrE,CAAC;AAED,+EAA+E;AAE/E;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,QAAgB,EAChB,IAAgB,EAChB,OAAoB,EAAE;IAEtB,MAAM,GAAG,GAAG,QAAQ,CAAC,UAAU,CAAC,UAAU,CAAC;QACzC,CAAC,CAAC,QAAQ;QACV,CAAC,CAAC,yBAAyB,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,QAAQ,EAAE,CAAC;IAE9E,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;QAC3B,GAAG,IAAI;QACP,OAAO,EAAE;YACP,aAAa,EAAE,SAAS,IAAI,CAAC,YAAY,EAAE;YAC3C,MAAM,EAAE,6BAA6B;YACrC,YAAY,EAAE,WAAW;YACzB,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC;SACxB;QACD,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;KACnD,CAAC,CAAC;IAEH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,cAAc,GAAG,CAAC,MAAM,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC,CAAC;IACnE,CAAC;IAED,4BAA4B;IAC5B,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;QAAE,OAAO,SAAc,CAAC;IAC9C,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAM,CAAC;AACjC,CAAC"}

package/dist/cloud.d.ts

@@ -0,0 +1,26 @@
+/**
+ * Result type for cloud state detection.
+ */
+export type CloudState = {
+    status: "has-files";
+    count: number;
+} | {
+    status: "empty";
+} | {
+    status: "error";
+    message: string;
+} | {
+    status: "no-auth";
+};
+/**
+ * Pure function that checks cloud state without side effects.
+ * Takes dependencies as parameters for testability.
+ */
+export declare function checkCloudState(deps: {
+    hasCredentials: () => boolean;
+    listRemoteFiles: () => Promise<{
+        key: string;
+    }[]>;
+}): Promise<CloudState>;
+export declare function checkAndSyncCloud(targetDir: string): Promise<void>;
+//# sourceMappingURL=cloud.d.ts.map

package/dist/cloud.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloud.d.ts","sourceRoot":"","sources":["../src/cloud.ts"],"names":[],"mappings":"AAYA;;GAEG;AACH,MAAM,MAAM,UAAU,GAClB;IAAE,MAAM,EAAE,WAAW,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACtC;IAAE,MAAM,EAAE,OAAO,CAAA;CAAE,GACnB;IAAE,MAAM,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACpC;IAAE,MAAM,EAAE,SAAS,CAAA;CAAE,CAAC;AAE1B;;;GAGG;AACH,wBAAsB,eAAe,CAAC,IAAI,EAAE;IAC1C,cAAc,EAAE,MAAM,OAAO,CAAC;IAC9B,eAAe,EAAE,MAAM,OAAO,CAAC;QAAE,GAAG,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC,CAAC;CACnD,GAAG,OAAO,CAAC,UAAU,CAAC,CAetB;AAED,wBAAsB,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CA8FxE"}

package/dist/cloud.js

@@ -0,0 +1,126 @@
+import { success, warn, step } from "./ui.js";
+import { tuiPrompt, tuiConfirm } from "./tui.js";
+// Lazy import hq-cloud — it may not be installed yet
+async function loadHqCloud() {
+    try {
+        return await import("@indigoai/hq-cloud");
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Pure function that checks cloud state without side effects.
+ * Takes dependencies as parameters for testability.
+ */
+export async function checkCloudState(deps) {
+    if (!deps.hasCredentials()) {
+        return { status: "no-auth" };
+    }
+    try {
+        const files = await deps.listRemoteFiles();
+        if (files.length > 0) {
+            return { status: "has-files", count: files.length };
+        }
+        return { status: "empty" };
+    }
+    catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        return { status: "error", message };
+    }
+}
+export async function checkAndSyncCloud(targetDir) {
+    console.log();
+    const setupSync = await tuiConfirm("Set up cloud sync? (enables mobile access via hq.indigoai.com)");
+    if (!setupSync)
+        return;
+    const hqCloud = await loadHqCloud();
+    if (!hqCloud) {
+        warn("@indigoai/hq-cloud not available — skipping cloud sync");
+        step("You can set up cloud sync later with: hq sync init");
+        return;
+    }
+    // Authenticate
+    step("Authenticating with HQ Cloud...");
+    let authenticated = false;
+    try {
+        if (hqCloud.hasCredentials()) {
+            authenticated = true;
+            step("Using existing credentials");
+        }
+        else {
+            await hqCloud.authenticate();
+            authenticated = true;
+            success("Authenticated with HQ Cloud");
+        }
+    }
+    catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        warn(`Authentication failed: ${message}`);
+        const skip = await tuiConfirm("Skip cloud setup and continue?");
+        if (skip)
+            return;
+        // If they don't want to skip, try once more
+        try {
+            await hqCloud.authenticate();
+            authenticated = true;
+            success("Authenticated with HQ Cloud");
+        }
+        catch {
+            warn("Authentication failed again — skipping cloud setup");
+            return;
+        }
+    }
+    if (!authenticated)
+        return;
+    // Check for existing remote files
+    step("Checking for existing files in your cloud HQ...");
+    let remoteFiles;
+    try {
+        remoteFiles = await hqCloud.listRemoteFiles();
+    }
+    catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        warn(`Could not check remote files: ${message}`);
+        const skip = await tuiConfirm("Skip cloud setup and continue?");
+        if (!skip) {
+            warn("Cloud setup skipped");
+        }
+        return;
+    }
+    if (remoteFiles.length > 0) {
+        // Existing files found — offer to clone down
+        console.log();
+        const cloneDown = await tuiConfirm(`Found ${remoteFiles.length} files in your cloud HQ. Clone to this machine?`);
+        if (cloneDown) {
+            step("Cloning files from cloud...");
+            try {
+                const result = await hqCloud.pullAll(targetDir);
+                success(`Cloned ${result.filesDownloaded} files from cloud to local HQ`);
+            }
+            catch (err) {
+                const message = err instanceof Error ? err.message : String(err);
+                warn(`Clone failed: ${message}`);
+                step("Your local template files are still intact");
+            }
+        }
+        else {
+            // User declined clone — warn about overwrite
+            warn("Uploading will overwrite your existing cloud files");
+            const overwriteConfirm = await tuiPrompt("This will replace your cloud HQ. Type YES to confirm:");
+            if (overwriteConfirm === "YES") {
+                step("Cloud files will be replaced on next sync");
+                step("Run: hq sync push");
+            }
+            else {
+                step("Cloud sync skipped — your cloud files are unchanged");
+            }
+        }
+    }
+    else {
+        // No remote files — proceed with standard flow
+        step("No existing cloud files found — starting fresh");
+        step("Run: hq sync push — to upload your HQ to the cloud");
+    }
+}
+//# sourceMappingURL=cloud.js.map

package/dist/cloud.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloud.js","sourceRoot":"","sources":["../src/cloud.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,SAAS,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AAEjD,qDAAqD;AACrD,KAAK,UAAU,WAAW;IACxB,IAAI,CAAC;QACH,OAAO,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAWD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAGrC;IACC,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;QAC3B,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IAC/B,CAAC;IAED,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,eAAe,EAAE,CAAC;QAC3C,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACrB,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;QACtD,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IAC7B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;IACtC,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,SAAiB;IACvD,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,MAAM,SAAS,GAAG,MAAM,UAAU,CAChC,gEAAgE,CACjE,CAAC;IACF,IAAI,CAAC,SAAS;QAAE,OAAO;IAEvB,MAAM,OAAO,GAAG,MAAM,WAAW,EAAE,CAAC;IACpC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,IAAI,CAAC,wDAAwD,CAAC,CAAC;QAC/D,IAAI,CAAC,oDAAoD,CAAC,CAAC;QAC3D,OAAO;IACT,CAAC;IAED,eAAe;IACf,IAAI,CAAC,iCAAiC,CAAC,CAAC;IACxC,IAAI,aAAa,GAAG,KAAK,CAAC;IAC1B,IAAI,CAAC;QACH,IAAI,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC;YAC7B,aAAa,GAAG,IAAI,CAAC;YACrB,IAAI,CAAC,4BAA4B,CAAC,CAAC;QACrC,CAAC;aAAM,CAAC;YACN,MAAM,OAAO,CAAC,YAAY,EAAE,CAAC;YAC7B,aAAa,GAAG,IAAI,CAAC;YACrB,OAAO,CAAC,6BAA6B,CAAC,CAAC;QACzC,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,IAAI,CAAC,0BAA0B,OAAO,EAAE,CAAC,CAAC;QAC1C,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,gCAAgC,CAAC,CAAC;QAChE,IAAI,IAAI;YAAE,OAAO;QACjB,4CAA4C;QAC5C,IAAI,CAAC;YACH,MAAM,OAAO,CAAC,YAAY,EAAE,CAAC;YAC7B,aAAa,GAAG,IAAI,CAAC;YACrB,OAAO,CAAC,6BAA6B,CAAC,CAAC;QACzC,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,oDAAoD,CAAC,CAAC;YAC3D,OAAO;QACT,CAAC;IACH,CAAC;IAED,IAAI,CAAC,aAAa;QAAE,OAAO;IAE3B,kCAAkC;IAClC,IAAI,CAAC,iDAAiD,CAAC,CAAC;IACxD,IAAI,WAAgE,CAAC;IACrE,IAAI,CAAC;QACH,WAAW,GAAG,MAAM,OAAO,CAAC,eAAe,EAAE,CAAC;IAChD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,IAAI,CAAC,iCAAiC,OAAO,EAAE,CAAC,CAAC;QACjD,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,gCAAgC,CAAC,CAAC;QAChE,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,IAAI,CAAC,qBAAqB,CAAC,CAAC;QAC9B,CAAC;QACD,OAAO;IACT,CAAC;IAED,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3B,6CAA6C;QAC7C,OAAO,CAAC,GAAG,EAAE,CAAC;QACd,MAAM,SAAS,GAAG,MAAM,UAAU,CAChC,SAAS,WAAW,CAAC,MAAM,iDAAiD,CAC7E,CAAC;QAEF,IAAI,SAAS,EAAE,CAAC;YACd,IAAI,CAAC,6BAA6B,CAAC,CAAC;YACpC,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;gBAChD,OAAO,CAAC,UAAU,MAAM,CAAC,eAAe,+BAA+B,CAAC,CAAC;YAC3E,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBACjE,IAAI,CAAC,iBAAiB,OAAO,EAAE,CAAC,CAAC;gBACjC,IAAI,CAAC,4CAA4C,CAAC,CAAC;YACrD,CAAC;QACH,CAAC;aAAM,CAAC;YACN,6CAA6C;YAC7C,IAAI,CAAC,oDAAoD,CAAC,CAAC;YAC3D,MAAM,gBAAgB,GAAG,MAAM,SAAS,CACtC,uDAAuD,CACxD,CAAC;YACF,IAAI,gBAAgB,KAAK,KAAK,EAAE,CAAC;gBAC/B,IAAI,CAAC,2CAA2C,CAAC,CAAC;gBAClD,IAAI,CAAC,mBAAmB,CAAC,CAAC;YAC5B,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,qDAAqD,CAAC,CAAC;YAC9D,CAAC;QACH,CAAC;IACH,CAAC;SAAM,CAAC;QACN,+CAA+C;QAC/C,IAAI,CAAC,gDAAgD,CAAC,CAAC;QACvD,IAAI,CAAC,oDAAoD,CAAC,CAAC;IAC7D,CAAC;AACH,CAAC"}

package/dist/company-template.d.ts

@@ -0,0 +1,34 @@
+/**
+ * Company / team-repo template generator.
+ *
+ * When an admin creates a new team, we need to seed the new {org}/hq private
+ * repo with a baseline directory structure that mirrors what /newcompany
+ * produces. This module renders that structure into a target directory
+ * (which is then committed and pushed to the new GitHub repo).
+ *
+ * No filesystem dependencies on the core HQ template — these files are
+ * synthesized in code so the seed is version-locked with the create-hq
+ * release the user just installed.
+ */
+export interface TeamMetadata {
+    team_id: string;
+    team_name: string;
+    team_slug: string;
+    org_login: string;
+    org_id: number;
+    created_by: string;
+    created_at: string;
+    hq_version: string;
+}
+/**
+ * Render the company template into targetDir. Creates the directory if it
+ * does not exist. Will not overwrite existing files (idempotent on re-runs).
+ */
+export declare function writeCompanyTemplate(targetDir: string, meta: TeamMetadata): void;
+/**
+ * Ensure all standard company subdirectories exist inside targetDir
+ * without overwriting any existing files. Used after cloning a team repo
+ * to fill in any directories the upstream repo doesn't have yet.
+ */
+export declare function ensureCompanyStructure(targetDir: string): void;
+//# sourceMappingURL=company-template.d.ts.map

package/dist/company-template.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"company-template.d.ts","sourceRoot":"","sources":["../src/company-template.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAKH,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;CACpB;AA0ED;;;GAGG;AACH,wBAAgB,oBAAoB,CAClC,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,YAAY,GACjB,IAAI,CA6CN;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAO9D"}