create-hq 10.1.0 → 10.7.1

package/dist/index.js

@@ -2,6 +2,7 @@
 import { Command } from "commander";
 import { createRequire } from "node:module";
 import { scaffold } from "./scaffold.js";
+import { runInviteCommand } from "./invite-command.js";
 const require = createRequire(import.meta.url);
 const pkg = require("../package.json");
 const program = new Command();
@@ -9,12 +10,15 @@ program
     .name("create-hq")
     .description("Create a new HQ by Indigo — Personal OS for AI Workers")
     .version(pkg.version)
-    .argument("[directory]", "where to create HQ", "hq")
+    .argument("[directory]", "where to create HQ (prompts if omitted)")
     .option("--skip-deps", "skip dependency checks")
     .option("--skip-cli", "don't install @indigoai-us/hq-cli globally")
     .option("--skip-sync", "don't prompt for cloud sync setup")
+    .option("--skip-packages", "don't prompt for package discovery and installation")
     .option("--tag <version>", "fetch a specific HQ version tag (e.g. v9.1.0)")
     .option("--local-template <path>", "use a local template directory instead of fetching from GitHub")
+    .option("--join <token>", "join a team with an invite token (interactive prompt)")
+    .option("--invite <token>", "join a team via invite — direct, no extra prompts")
     .action(async (directory, options) => {
     try {
         await scaffold(directory, options);
@@ -24,5 +28,18 @@ program
         process.exit(1);
     }
 });
+// Standalone invite subcommand for admins to generate invites
+program
+    .command("invite")
+    .description("Generate an invite code for a new team member")
+    .action(async () => {
+    try {
+        await runInviteCommand();
+    }
+    catch (err) {
+        console.error(err instanceof Error ? err.message : "An unexpected error occurred");
+        process.exit(1);
+    }
+});
 program.parse();
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAEA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC/C,MAAM,GAAG,GAAG,OAAO,CAAC,iBAAiB,CAAwB,CAAC;AAE9D,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;AAE9B,OAAO;KACJ,IAAI,CAAC,WAAW,CAAC;KACjB,WAAW,CAAC,wDAAwD,CAAC;KACrE,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC;KACpB,QAAQ,CAAC,aAAa,EAAE,oBAAoB,EAAE,IAAI,CAAC;KACnD,MAAM,CAAC,aAAa,EAAE,wBAAwB,CAAC;KAC/C,MAAM,CAAC,YAAY,EAAE,4CAA4C,CAAC;KAClE,MAAM,CAAC,aAAa,EAAE,mCAAmC,CAAC;KAC1D,MAAM,CAAC,iBAAiB,EAAE,+CAA+C,CAAC;KAC1E,MAAM,CAAC,yBAAyB,EAAE,gEAAgE,CAAC;KACnG,MAAM,CAAC,KAAK,EAAE,SAAiB,EAAE,OAAO,EAAE,EAAE;IAC3C,IAAI,CAAC;QACH,MAAM,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IACrC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CACX,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,8BAA8B,CACpE,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,OAAO,CAAC,KAAK,EAAE,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAEA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzC,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAEvD,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC/C,MAAM,GAAG,GAAG,OAAO,CAAC,iBAAiB,CAAwB,CAAC;AAE9D,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;AAE9B,OAAO;KACJ,IAAI,CAAC,WAAW,CAAC;KACjB,WAAW,CAAC,wDAAwD,CAAC;KACrE,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC;KACpB,QAAQ,CAAC,aAAa,EAAE,yCAAyC,CAAC;KAClE,MAAM,CAAC,aAAa,EAAE,wBAAwB,CAAC;KAC/C,MAAM,CAAC,YAAY,EAAE,4CAA4C,CAAC;KAClE,MAAM,CAAC,aAAa,EAAE,mCAAmC,CAAC;KAC1D,MAAM,CAAC,iBAAiB,EAAE,qDAAqD,CAAC;KAChF,MAAM,CAAC,iBAAiB,EAAE,+CAA+C,CAAC;KAC1E,MAAM,CAAC,yBAAyB,EAAE,gEAAgE,CAAC;KACnG,MAAM,CAAC,gBAAgB,EAAE,uDAAuD,CAAC;KACjF,MAAM,CAAC,kBAAkB,EAAE,mDAAmD,CAAC;KAC/E,MAAM,CAAC,KAAK,EAAE,SAA6B,EAAE,OAAO,EAAE,EAAE;IACvD,IAAI,CAAC;QACH,MAAM,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IACrC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CACX,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,8BAA8B,CACpE,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,8DAA8D;AAC9D,OAAO;KACJ,OAAO,CAAC,QAAQ,CAAC;KACjB,WAAW,CAAC,+CAA+C,CAAC;KAC5D,MAAM,CAAC,KAAK,IAAI,EAAE;IACjB,IAAI,CAAC;QACH,MAAM,gBAAgB,EAAE,CAAC;IAC3B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CACX,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,8BAA8B,CACpE,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,OAAO,CAAC,KAAK,EAAE,CAAC"}

package/dist/invite-command.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Standalone invite command for admins.
+ *
+ * Usage: create-hq invite
+ *
+ * Finds team metadata from the current HQ directory, authenticates
+ * the admin, and generates an invite code plus optional org invite.
+ */
+export declare function runInviteCommand(): Promise<void>;
+//# sourceMappingURL=invite-command.d.ts.map

package/dist/invite-command.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"invite-command.d.ts","sourceRoot":"","sources":["../src/invite-command.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AA6EH,wBAAsB,gBAAgB,IAAI,OAAO,CAAC,IAAI,CAAC,CA8CtD"}

package/dist/invite-command.js

@@ -0,0 +1,110 @@
+/**
+ * Standalone invite command for admins.
+ *
+ * Usage: create-hq invite
+ *
+ * Finds team metadata from the current HQ directory, authenticates
+ * the admin, and generates an invite code plus optional org invite.
+ */
+import * as fs from "fs";
+import * as path from "path";
+import { execSync } from "child_process";
+import { createInterface } from "readline";
+import chalk from "chalk";
+import { authenticate } from "./teams-flow.js";
+import { inviteLoop } from "./admin-onboarding.js";
+import { warn, info } from "./ui.js";
+function prompt(question, defaultVal) {
+    const rl = createInterface({ input: process.stdin, output: process.stdout });
+    const suffix = defaultVal ? ` (${defaultVal})` : "";
+    return new Promise((resolve) => {
+        rl.question(`  ? ${question}${suffix} `, (answer) => {
+            rl.close();
+            resolve(answer.trim() || defaultVal || "");
+        });
+    });
+}
+/**
+ * Find team.json files in companies/ walking up from cwd.
+ */
+function findTeams() {
+    let dir = process.cwd();
+    const root = path.parse(dir).root;
+    const teams = [];
+    while (dir !== root) {
+        const companiesDir = path.join(dir, "companies");
+        if (fs.existsSync(companiesDir) && fs.statSync(companiesDir).isDirectory()) {
+            for (const entry of fs.readdirSync(companiesDir)) {
+                const teamJsonPath = path.join(companiesDir, entry, "team.json");
+                if (fs.existsSync(teamJsonPath)) {
+                    try {
+                        const meta = JSON.parse(fs.readFileSync(teamJsonPath, "utf-8"));
+                        let cloneUrl = `https://github.com/${meta.org_login}/hq-${meta.team_slug}.git`;
+                        try {
+                            const remote = execSync("git remote get-url origin", {
+                                cwd: path.join(companiesDir, entry),
+                                stdio: "pipe",
+                            })
+                                .toString()
+                                .trim();
+                            if (remote)
+                                cloneUrl = remote;
+                        }
+                        catch {
+                            // Use constructed URL
+                        }
+                        teams.push({
+                            meta,
+                            cloneUrl,
+                            companyDir: path.join(companiesDir, entry),
+                        });
+                    }
+                    catch {
+                        // Skip malformed team.json
+                    }
+                }
+            }
+            break;
+        }
+        dir = path.dirname(dir);
+    }
+    return teams;
+}
+export async function runInviteCommand() {
+    console.log();
+    console.log(chalk.bold("  Generate a team invite"));
+    console.log();
+    const teams = findTeams();
+    if (teams.length === 0) {
+        warn("No teams found. Run this from your HQ directory (must have companies/*/team.json).");
+        info("If you haven't created a team yet, run: npx create-hq");
+        return;
+    }
+    let selected;
+    if (teams.length === 1) {
+        selected = teams[0];
+        info(`Team: ${chalk.cyan(selected.meta.team_name)} (${selected.meta.org_login})`);
+    }
+    else {
+        console.log("  Which team?");
+        for (let i = 0; i < teams.length; i++) {
+            console.log(chalk.cyan(`  [${i + 1}] `) +
+                chalk.white(teams[i].meta.team_name) +
+                chalk.dim(` (${teams[i].meta.org_login})`));
+        }
+        const choice = await prompt(`Select (1-${teams.length})`, "1");
+        const idx = parseInt(choice, 10) - 1;
+        if (idx < 0 || idx >= teams.length) {
+            warn("Invalid selection.");
+            return;
+        }
+        selected = teams[idx];
+    }
+    const auth = await authenticate();
+    if (!auth) {
+        warn("Authentication required to generate invites.");
+        return;
+    }
+    await inviteLoop(auth, selected.meta, selected.cloneUrl);
+}
+//# sourceMappingURL=invite-command.js.map

package/dist/invite-command.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"invite-command.js","sourceRoot":"","sources":["../src/invite-command.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzC,OAAO,EAAE,eAAe,EAAE,MAAM,UAAU,CAAC;AAC3C,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAEnD,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,SAAS,CAAC;AAErC,SAAS,MAAM,CAAC,QAAgB,EAAE,UAAmB;IACnD,MAAM,EAAE,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAC7E,MAAM,MAAM,GAAG,UAAU,CAAC,CAAC,CAAC,KAAK,UAAU,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IACpD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,EAAE,CAAC,QAAQ,CAAC,OAAO,QAAQ,GAAG,MAAM,GAAG,EAAE,CAAC,MAAM,EAAE,EAAE;YAClD,EAAE,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,UAAU,IAAI,EAAE,CAAC,CAAC;QAC7C,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAQD;;GAEG;AACH,SAAS,SAAS;IAChB,IAAI,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IACxB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;IAClC,MAAM,KAAK,GAAgB,EAAE,CAAC;IAE9B,OAAO,GAAG,KAAK,IAAI,EAAE,CAAC;QACpB,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;QACjD,IAAI,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;YAC3E,KAAK,MAAM,KAAK,IAAI,EAAE,CAAC,WAAW,CAAC,YAAY,CAAC,EAAE,CAAC;gBACjD,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC;gBACjE,IAAI,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;oBAChC,IAAI,CAAC;wBACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CACrB,EAAE,CAAC,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CACvB,CAAC;wBAClB,IAAI,QAAQ,GAAG,sBAAsB,IAAI,CAAC,SAAS,OAAO,IAAI,CAAC,SAAS,MAAM,CAAC;wBAC/E,IAAI,CAAC;4BACH,MAAM,MAAM,GAAG,QAAQ,CAAC,2BAA2B,EAAE;gCACnD,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,KAAK,CAAC;gCACnC,KAAK,EAAE,MAAM;6BACd,CAAC;iCACC,QAAQ,EAAE;iCACV,IAAI,EAAE,CAAC;4BACV,IAAI,MAAM;gCAAE,QAAQ,GAAG,MAAM,CAAC;wBAChC,CAAC;wBAAC,MAAM,CAAC;4BACP,sBAAsB;wBACxB,CAAC;wBACD,KAAK,CAAC,IAAI,CAAC;4BACT,IAAI;4BACJ,QAAQ;4BACR,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,KAAK,CAAC;yBAC3C,CAAC,CAAC;oBACL,CAAC;oBAAC,MAAM,CAAC;wBACP,2BAA2B;oBAC7B,CAAC;gBACH,CAAC;YACH,CAAC;YACD,MAAM;QACR,CAAC;QACD,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC1B,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB;IACpC,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC,CAAC;IACpD,OAAO,CAAC,GAAG,EAAE,CAAC;IAEd,MAAM,KAAK,GAAG,SAAS,EAAE,CAAC;IAE1B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,IAAI,CACF,oFAAoF,CACrF,CAAC;QACF,IAAI,CAAC,uDAAuD,CAAC,CAAC;QAC9D,OAAO;IACT,CAAC;IAED,IAAI,QAAmB,CAAC;IACxB,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACpB,IAAI,CACF,SAAS,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,QAAQ,CAAC,IAAI,CAAC,SAAS,GAAG,CAC5E,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;QAC7B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACtC,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC;gBACzB,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC;gBACpC,KAAK,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,GAAG,CAAC,CAC7C,CAAC;QACJ,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,aAAa,KAAK,CAAC,MAAM,GAAG,EAAE,GAAG,CAAC,CAAC;QAC/D,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,GAAG,GAAG,CAAC,IAAI,GAAG,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;YACnC,IAAI,CAAC,oBAAoB,CAAC,CAAC;YAC3B,OAAO;QACT,CAAC;QACD,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;IACxB,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,YAAY,EAAE,CAAC;IAClC,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,IAAI,CAAC,8CAA8C,CAAC,CAAC;QACrD,OAAO;IACT,CAAC;IAED,MAAM,UAAU,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;AAC3D,CAAC"}

package/dist/invite.d.ts

@@ -0,0 +1,91 @@
+/**
+ * Invite system for HQ Teams.
+ *
+ * Tokens are self-contained (no server) — they encode the team coordinates
+ * so a new member can join without discovery. Security comes from GitHub:
+ * the member still needs org access to clone the private repo.
+ *
+ * Token format: "hq_" + base64url({ org, repo, slug, teamName, cloneUrl, invitedBy })
+ *
+ * Admin flow:
+ *   1. Generate token from team metadata
+ *   2. Optionally send GitHub org invite by email
+ *   3. Share token + instructions with member
+ *
+ * Member flow:
+ *   1. Decode token → get team coordinates
+ *   2. Auth via GitHub device flow
+ *   3. Verify org membership (wait for invite acceptance if needed)
+ *   4. Clone repo into companies/{slug}/
+ */
+import { type GitHubAuth } from "./auth.js";
+export interface InvitePayload {
+    /** GitHub org login (e.g. "indigoai-us") */
+    org: string;
+    /** Repo name (e.g. "hq-indigo") */
+    repo: string;
+    /** Team slug (e.g. "indigo") — maps to companies/{slug}/ */
+    slug: string;
+    /** Human-readable team name */
+    teamName: string;
+    /** HTTPS clone URL for the repo */
+    cloneUrl: string;
+    /** GitHub login of the admin who generated the invite */
+    invitedBy: string;
+}
+export declare function encodeInviteToken(payload: InvitePayload): string;
+export declare function decodeInviteToken(token: string): InvitePayload | null;
+interface OrgInviteResponse {
+    id: number;
+    login?: string;
+    email?: string;
+    role: string;
+}
+/**
+ * Send a GitHub org invitation by email.
+ *
+ * Requires the authenticated user to be an org admin, and the GitHub App
+ * to have "Organization > Members: Write" permission.
+ *
+ * Returns the invitation on success, or an error message string on failure.
+ */
+export declare function sendOrgInviteByEmail(auth: GitHubAuth, orgLogin: string, email: string, role?: "direct_member" | "admin"): Promise<{
+    ok: true;
+    invite: OrgInviteResponse;
+} | {
+    ok: false;
+    error: string;
+}>;
+/**
+ * Check whether a GitHub user is a member of an org.
+ */
+export declare function checkOrgMembership(auth: GitHubAuth, orgLogin: string, username: string): Promise<"active" | "pending" | "none">;
+/**
+ * Check whether the authenticated user can access a specific repo.
+ */
+export declare function checkRepoAccess(auth: GitHubAuth, orgLogin: string, repoName: string): Promise<boolean>;
+/**
+ * Generate a ready-to-share invite message for the admin to send to the
+ * new member. Designed to be copy-pasted into Slack, email, or text.
+ */
+export declare function formatInviteMessage(payload: InvitePayload, token: string, memberEmail?: string): string;
+/**
+ * Print the invite details to the console for the admin.
+ */
+export declare function printInviteSummary(payload: InvitePayload, token: string, _emailSent?: boolean, memberEmail?: string): void;
+/**
+ * Build a mailto: URL pre-populated with the invite message.
+ * Opens in the admin's default email client — they just hit Send.
+ */
+export declare function buildMailtoUrl(payload: InvitePayload, token: string, recipientEmail: string): string;
+/**
+ * Open the admin's email client with a pre-populated invite email.
+ */
+export declare function openInviteEmail(payload: InvitePayload, token: string, recipientEmail: string): void;
+/**
+ * Copy text to the system clipboard. Cross-platform: pbcopy (macOS),
+ * clip (Windows), xclip/xsel (Linux). Returns true on success.
+ */
+export declare function copyToClipboard(text: string): boolean;
+export {};
+//# sourceMappingURL=invite.d.ts.map

package/dist/invite.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"invite.d.ts","sourceRoot":"","sources":["../src/invite.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAIH,OAAO,EAAE,KAAK,UAAU,EAA0B,MAAM,WAAW,CAAC;AAIpE,MAAM,WAAW,aAAa;IAC5B,4CAA4C;IAC5C,GAAG,EAAE,MAAM,CAAC;IACZ,mCAAmC;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,4DAA4D;IAC5D,IAAI,EAAE,MAAM,CAAC;IACb,+BAA+B;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,mCAAmC;IACnC,QAAQ,EAAE,MAAM,CAAC;IACjB,yDAAyD;IACzD,SAAS,EAAE,MAAM,CAAC;CACnB;AAmBD,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,aAAa,GAAG,MAAM,CAEhE;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,aAAa,GAAG,IAAI,CAwBrE;AAID,UAAU,iBAAiB;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;;;;;;GAOG;AACH,wBAAsB,oBAAoB,CACxC,IAAI,EAAE,UAAU,EAChB,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,MAAM,EACb,IAAI,GAAE,eAAe,GAAG,OAAyB,GAChD,OAAO,CAAC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,iBAAiB,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CAiCjF;AAED;;GAEG;AACH,wBAAsB,kBAAkB,CACtC,IAAI,EAAE,UAAU,EAChB,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,QAAQ,GAAG,SAAS,GAAG,MAAM,CAAC,CAwBxC;AAED;;GAEG;AACH,wBAAsB,eAAe,CACnC,IAAI,EAAE,UAAU,EAChB,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,OAAO,CAAC,CAOlB;AAID;;;GAGG;AACH,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,aAAa,EACtB,KAAK,EAAE,MAAM,EACb,WAAW,CAAC,EAAE,MAAM,GACnB,MAAM,CAoDR;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,aAAa,EACtB,KAAK,EAAE,MAAM,EACb,UAAU,CAAC,EAAE,OAAO,EACpB,WAAW,CAAC,EAAE,MAAM,GACnB,IAAI,CAsBN;AAID;;;GAGG;AACH,wBAAgB,cAAc,CAC5B,OAAO,EAAE,aAAa,EACtB,KAAK,EAAE,MAAM,EACb,cAAc,EAAE,MAAM,GACrB,MAAM,CAIR;AAED;;GAEG;AACH,wBAAgB,eAAe,CAC7B,OAAO,EAAE,aAAa,EACtB,KAAK,EAAE,MAAM,EACb,cAAc,EAAE,MAAM,GACrB,IAAI,CAGN;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAmBrD"}

package/dist/invite.js

@@ -0,0 +1,230 @@
+/**
+ * Invite system for HQ Teams.
+ *
+ * Tokens are self-contained (no server) — they encode the team coordinates
+ * so a new member can join without discovery. Security comes from GitHub:
+ * the member still needs org access to clone the private repo.
+ *
+ * Token format: "hq_" + base64url({ org, repo, slug, teamName, cloneUrl, invitedBy })
+ *
+ * Admin flow:
+ *   1. Generate token from team metadata
+ *   2. Optionally send GitHub org invite by email
+ *   3. Share token + instructions with member
+ *
+ * Member flow:
+ *   1. Decode token → get team coordinates
+ *   2. Auth via GitHub device flow
+ *   3. Verify org membership (wait for invite acceptance if needed)
+ *   4. Clone repo into companies/{slug}/
+ */
+import chalk from "chalk";
+import { execSync } from "child_process";
+import { githubApi, openBrowser } from "./auth.js";
+// ─── Token encode / decode ──────────────────────────────────────────────────
+const TOKEN_PREFIX = "hq_";
+function toBase64Url(str) {
+    return Buffer.from(str, "utf-8")
+        .toString("base64")
+        .replace(/\+/g, "-")
+        .replace(/\//g, "_")
+        .replace(/=+$/, "");
+}
+function fromBase64Url(b64) {
+    const padded = b64.replace(/-/g, "+").replace(/_/g, "/");
+    return Buffer.from(padded, "base64").toString("utf-8");
+}
+export function encodeInviteToken(payload) {
+    return TOKEN_PREFIX + toBase64Url(JSON.stringify(payload));
+}
+export function decodeInviteToken(token) {
+    try {
+        const raw = token.startsWith(TOKEN_PREFIX)
+            ? token.slice(TOKEN_PREFIX.length)
+            : token;
+        const json = fromBase64Url(raw);
+        const parsed = JSON.parse(json);
+        // Validate required fields
+        if (typeof parsed.org !== "string" ||
+            typeof parsed.repo !== "string" ||
+            typeof parsed.slug !== "string" ||
+            typeof parsed.teamName !== "string" ||
+            typeof parsed.cloneUrl !== "string" ||
+            typeof parsed.invitedBy !== "string") {
+            return null;
+        }
+        return parsed;
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Send a GitHub org invitation by email.
+ *
+ * Requires the authenticated user to be an org admin, and the GitHub App
+ * to have "Organization > Members: Write" permission.
+ *
+ * Returns the invitation on success, or an error message string on failure.
+ */
+export async function sendOrgInviteByEmail(auth, orgLogin, email, role = "direct_member") {
+    try {
+        const invite = await githubApi(`/orgs/${orgLogin}/invitations`, auth, {
+            method: "POST",
+            body: JSON.stringify({
+                email,
+                role,
+            }),
+        });
+        return { ok: true, invite };
+    }
+    catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        if (message.includes("404") || message.includes("403")) {
+            return {
+                ok: false,
+                error: "The HQ App doesn't have permission to send org invites. " +
+                    `Please invite the member manually at: https://github.com/orgs/${orgLogin}/people`,
+            };
+        }
+        if (message.includes("422") && /already/i.test(message)) {
+            return {
+                ok: false,
+                error: "This email has already been invited or is already a member.",
+            };
+        }
+        return { ok: false, error: message };
+    }
+}
+/**
+ * Check whether a GitHub user is a member of an org.
+ */
+export async function checkOrgMembership(auth, orgLogin, username) {
+    // Check active membership first
+    try {
+        await githubApi(`/orgs/${orgLogin}/members/${username}`, auth);
+        return "active";
+    }
+    catch {
+        // Not an active member — check pending invitations
+    }
+    // Check if there's a pending invitation for this user
+    try {
+        const memberships = await githubApi("/user/memberships/orgs?state=pending&per_page=100", auth);
+        const pending = memberships.find((m) => m.organization.login.toLowerCase() === orgLogin.toLowerCase());
+        if (pending)
+            return "pending";
+    }
+    catch {
+        // Can't check pending — fall through
+    }
+    return "none";
+}
+/**
+ * Check whether the authenticated user can access a specific repo.
+ */
+export async function checkRepoAccess(auth, orgLogin, repoName) {
+    try {
+        await githubApi(`/repos/${orgLogin}/${repoName}`, auth);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+// ─── Invite message template ────────────────────────────────────────────────
+/**
+ * Generate a ready-to-share invite message for the admin to send to the
+ * new member. Designed to be copy-pasted into Slack, email, or text.
+ */
+export function formatInviteMessage(payload, token, memberEmail) {
+    const orgInviteUrl = `https://github.com/orgs/${payload.org}/invitation`;
+    const lines = [
+        `You've been invited to join ${payload.teamName} on HQ!`,
+        "",
+    ];
+    // Step 1: Accept org invite (which handles GitHub account creation too)
+    if (memberEmail) {
+        lines.push(`Step 1: Accept the GitHub invitation sent to ${memberEmail}`, `        (if you don't have a GitHub account yet, you'll be guided to create one)`, `        Direct link: ${orgInviteUrl}`, "");
+    }
+    else {
+        lines.push(`Step 1: Accept your GitHub organization invite`, `        Direct link: ${orgInviteUrl}`, `        (if you haven't received one, ask @${payload.invitedBy} to send it)`, "");
+    }
+    // Step 2: Install Node.js (platform-specific instructions)
+    lines.push(`Step 2: Install Node.js (if you don't have it already)`, "", `   Windows (PowerShell, run as Administrator):`, `     winget install OpenJS.NodeJS.LTS`, "", `   Mac (Terminal):`, `     brew install node`, `     (if you don't have brew: https://brew.sh)`, "", `   Or download from: https://nodejs.org`, "");
+    // Step 3: Single command with token
+    lines.push(`Step 3: Open your terminal and run this command:`, "", `   npx create-hq --invite ${token}`, "", `   Then follow the prompts to sign in with GitHub and complete setup.`, "", `---`, `Questions? Ask @${payload.invitedBy} or visit https://getindigo.ai/hq`);
+    return lines.join("\n");
+}
+/**
+ * Print the invite details to the console for the admin.
+ */
+export function printInviteSummary(payload, token, _emailSent, memberEmail) {
+    console.log();
+    console.log(chalk.bold("  Invite ready!"));
+    console.log();
+    console.log(`  ${chalk.dim("Team:")}     ${chalk.cyan(payload.teamName)}`);
+    console.log(`  ${chalk.dim("Org:")}      ${payload.org}`);
+    if (memberEmail) {
+        console.log(`  ${chalk.dim("Email:")}    ${memberEmail}`);
+    }
+    console.log();
+    console.log(chalk.bold("  Invite code (share with the new member):"));
+    console.log();
+    console.log(`  ${chalk.cyan(token)}`);
+    console.log();
+    console.log(chalk.dim("  Full invite message (copy-paste ready):"));
+    console.log(chalk.dim("  ─".repeat(30)));
+    const msg = formatInviteMessage(payload, token, memberEmail);
+    for (const line of msg.split("\n")) {
+        console.log(chalk.dim("  ") + line);
+    }
+    console.log(chalk.dim("  ─".repeat(30)));
+    console.log();
+}
+// ─── Mailto helper ──────────────────────────────────────────────────────────
+/**
+ * Build a mailto: URL pre-populated with the invite message.
+ * Opens in the admin's default email client — they just hit Send.
+ */
+export function buildMailtoUrl(payload, token, recipientEmail) {
+    const subject = `You're invited to join ${payload.teamName} on HQ`;
+    const body = formatInviteMessage(payload, token, recipientEmail);
+    return `mailto:${recipientEmail}?subject=${encodeURIComponent(subject)}&body=${encodeURIComponent(body)}`;
+}
+/**
+ * Open the admin's email client with a pre-populated invite email.
+ */
+export function openInviteEmail(payload, token, recipientEmail) {
+    const url = buildMailtoUrl(payload, token, recipientEmail);
+    openBrowser(url);
+}
+/**
+ * Copy text to the system clipboard. Cross-platform: pbcopy (macOS),
+ * clip (Windows), xclip/xsel (Linux). Returns true on success.
+ */
+export function copyToClipboard(text) {
+    try {
+        const platform = process.platform;
+        if (platform === "darwin") {
+            execSync("pbcopy", { input: text });
+        }
+        else if (platform === "win32") {
+            execSync("clip", { input: text });
+        }
+        else {
+            // Try xclip first, fall back to xsel
+            try {
+                execSync("xclip -selection clipboard", { input: text });
+            }
+            catch {
+                execSync("xsel --clipboard --input", { input: text });
+            }
+        }
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+//# sourceMappingURL=invite.js.map

package/dist/invite.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"invite.js","sourceRoot":"","sources":["../src/invite.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzC,OAAO,EAAmB,SAAS,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAmBpE,+EAA+E;AAE/E,MAAM,YAAY,GAAG,KAAK,CAAC;AAE3B,SAAS,WAAW,CAAC,GAAW;IAC9B,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC;SAC7B,QAAQ,CAAC,QAAQ,CAAC;SAClB,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;SACnB,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;SACnB,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AACxB,CAAC;AAED,SAAS,aAAa,CAAC,GAAW;IAChC,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACzD,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;AACzD,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,OAAsB;IACtD,OAAO,YAAY,GAAG,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;AAC7D,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,KAAa;IAC7C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,KAAK,CAAC,UAAU,CAAC,YAAY,CAAC;YACxC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC;YAClC,CAAC,CAAC,KAAK,CAAC;QACV,MAAM,IAAI,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;QAChC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAEhC,2BAA2B;QAC3B,IACE,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ;YAC9B,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ;YAC/B,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ;YAC/B,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ;YACnC,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ;YACnC,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,EACpC,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,MAAuB,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAWD;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,IAAgB,EAChB,QAAgB,EAChB,KAAa,EACb,OAAkC,eAAe;IAEjD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,SAAS,CAC5B,SAAS,QAAQ,cAAc,EAC/B,IAAI,EACJ;YACE,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,KAAK;gBACL,IAAI;aACL,CAAC;SACH,CACF,CAAC;QACF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAC9B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAEjE,IAAI,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACvD,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,KAAK,EACH,0DAA0D;oBAC1D,iEAAiE,QAAQ,SAAS;aACrF,CAAC;QACJ,CAAC;QACD,IAAI,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACxD,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,6DAA6D;aACrE,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;IACvC,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,IAAgB,EAChB,QAAgB,EAChB,QAAgB;IAEhB,gCAAgC;IAChC,IAAI,CAAC;QACH,MAAM,SAAS,CAAU,SAAS,QAAQ,YAAY,QAAQ,EAAE,EAAE,IAAI,CAAC,CAAC;QACxE,OAAO,QAAQ,CAAC;IAClB,CAAC;IAAC,MAAM,CAAC;QACP,mDAAmD;IACrD,CAAC;IAED,sDAAsD;IACtD,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,MAAM,SAAS,CACjC,mDAAmD,EACnD,IAAI,CACL,CAAC;QACF,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAC9B,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,QAAQ,CAAC,WAAW,EAAE,CACrE,CAAC;QACF,IAAI,OAAO;YAAE,OAAO,SAAS,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,qCAAqC;IACvC,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,IAAgB,EAChB,QAAgB,EAChB,QAAgB;IAEhB,IAAI,CAAC;QACH,MAAM,SAAS,CAAU,UAAU,QAAQ,IAAI,QAAQ,EAAE,EAAE,IAAI,CAAC,CAAC;QACjE,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,+EAA+E;AAE/E;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CACjC,OAAsB,EACtB,KAAa,EACb,WAAoB;IAEpB,MAAM,YAAY,GAAG,2BAA2B,OAAO,CAAC,GAAG,aAAa,CAAC;IACzE,MAAM,KAAK,GAAa;QACtB,+BAA+B,OAAO,CAAC,QAAQ,SAAS;QACxD,EAAE;KACH,CAAC;IAEF,wEAAwE;IACxE,IAAI,WAAW,EAAE,CAAC;QAChB,KAAK,CAAC,IAAI,CACR,gDAAgD,WAAW,EAAE,EAC7D,kFAAkF,EAClF,wBAAwB,YAAY,EAAE,EACtC,EAAE,CACH,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,IAAI,CACR,gDAAgD,EAChD,wBAAwB,YAAY,EAAE,EACtC,8CAA8C,OAAO,CAAC,SAAS,cAAc,EAC7E,EAAE,CACH,CAAC;IACJ,CAAC;IAED,2DAA2D;IAC3D,KAAK,CAAC,IAAI,CACR,wDAAwD,EACxD,EAAE,EACF,gDAAgD,EAChD,uCAAuC,EACvC,EAAE,EACF,oBAAoB,EACpB,wBAAwB,EACxB,gDAAgD,EAChD,EAAE,EACF,yCAAyC,EACzC,EAAE,CACH,CAAC;IAEF,oCAAoC;IACpC,KAAK,CAAC,IAAI,CACR,kDAAkD,EAClD,EAAE,EACF,6BAA6B,KAAK,EAAE,EACpC,EAAE,EACF,uEAAuE,EACvE,EAAE,EACF,KAAK,EACL,mBAAmB,OAAO,CAAC,SAAS,mCAAmC,CACxE,CAAC;IAEF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAChC,OAAsB,EACtB,KAAa,EACb,UAAoB,EACpB,WAAoB;IAEpB,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC;IAC3C,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IAC3E,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAC1D,IAAI,WAAW,EAAE,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,WAAW,EAAE,CAAC,CAAC;IAC5D,CAAC;IACD,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,4CAA4C,CAAC,CAAC,CAAC;IACtE,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACtC,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,2CAA2C,CAAC,CAAC,CAAC;IACpE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACzC,MAAM,GAAG,GAAG,mBAAmB,CAAC,OAAO,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC;IAC7D,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;IACtC,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACzC,OAAO,CAAC,GAAG,EAAE,CAAC;AAChB,CAAC;AAED,+EAA+E;AAE/E;;;GAGG;AACH,MAAM,UAAU,cAAc,CAC5B,OAAsB,EACtB,KAAa,EACb,cAAsB;IAEtB,MAAM,OAAO,GAAG,0BAA0B,OAAO,CAAC,QAAQ,QAAQ,CAAC;IACnE,MAAM,IAAI,GAAG,mBAAmB,CAAC,OAAO,EAAE,KAAK,EAAE,cAAc,CAAC,CAAC;IACjE,OAAO,UAAU,cAAc,YAAY,kBAAkB,CAAC,OAAO,CAAC,SAAS,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC;AAC5G,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAC7B,OAAsB,EACtB,KAAa,EACb,cAAsB;IAEtB,MAAM,GAAG,GAAG,cAAc,CAAC,OAAO,EAAE,KAAK,EAAE,cAAc,CAAC,CAAC;IAC3D,WAAW,CAAC,GAAG,CAAC,CAAC;AACnB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;QAClC,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAC1B,QAAQ,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACtC,CAAC;aAAM,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;YAChC,QAAQ,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACpC,CAAC;aAAM,CAAC;YACN,qCAAqC;YACrC,IAAI,CAAC;gBACH,QAAQ,CAAC,4BAA4B,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAC1D,CAAC;YAAC,MAAM,CAAC;gBACP,QAAQ,CAAC,0BAA0B,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACxD,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}

package/dist/join-flow.d.ts

@@ -0,0 +1,32 @@
+/**
+ * Join-via-invite flow for HQ Teams members.
+ *
+ * When a member has an invite token (from an admin), this flow:
+ *   1. Decodes the token to get team coordinates
+ *   2. Authenticates via GitHub device flow
+ *   3. Checks org membership / repo access (waits if invite is pending)
+ *   4. Clones the team repo into companies/{slug}/
+ *
+ * This is the primary path for non-technical users who received an invite.
+ */
+import { type GitHubAuth } from "./auth.js";
+export interface JoinByInviteResult {
+    /** Team slug (companies/{slug}/ directory). */
+    slug: string;
+    /** Human-readable team name. */
+    teamName: string;
+    /** Local path where the team repo was cloned. */
+    companyDir: string;
+    /** GitHub HTML URL for the team repo. */
+    repoUrl: string;
+}
+/**
+ * Run the join-via-invite flow.
+ *
+ * @param auth    - Authenticated GitHub user (already signed in)
+ * @param hqRoot  - Local HQ root directory (where companies/ lives)
+ * @param token   - The invite token string (hq_...) or raw base64
+ * @returns       - Result on success, null on failure/abort
+ */
+export declare function runJoinByInvite(auth: GitHubAuth, hqRoot: string, token: string): Promise<JoinByInviteResult | null>;
+//# sourceMappingURL=join-flow.d.ts.map

package/dist/join-flow.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"join-flow.d.ts","sourceRoot":"","sources":["../src/join-flow.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAQH,OAAO,EAAE,KAAK,UAAU,EAAE,MAAM,WAAW,CAAC;AAW5C,MAAM,WAAW,kBAAkB;IACjC,+CAA+C;IAC/C,IAAI,EAAE,MAAM,CAAC;IACb,gCAAgC;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB,iDAAiD;IACjD,UAAU,EAAE,MAAM,CAAC;IACnB,yCAAyC;IACzC,OAAO,EAAE,MAAM,CAAC;CACjB;AAwED;;;;;;;GAOG;AACH,wBAAsB,eAAe,CACnC,IAAI,EAAE,UAAU,EAChB,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CA6HpC"}