create-hq 10.10.0 → 10.12.0

package/dist/teams-flow.js

@@ -1,173 +0,0 @@
-/**
- * Teams flow router.
- *
- * Called by scaffold.ts after the user opts into the HQ Teams path. Handles:
- *   - Reusing or refreshing GitHub auth
- *   - Routing: invite code → join-by-invite, discovery → auto-discovery, new → admin onboarding
- *
- * The team setup happens *after* core HQ has been installed, so all paths
- * receive a fully scaffolded hqRoot to drop companies/{slug}/ into.
- */
-import chalk from "chalk";
-import { createInterface } from "readline";
-import { loadGitHubAuth, isGitHubAuthValid, isAppScopedToken, startGitHubDeviceFlow, clearGitHubAuth, openBrowser, } from "./auth.js";
-import { runAdminOnboarding } from "./admin-onboarding.js";
-import { runMemberJoin } from "./team-setup.js";
-import { runJoinByInvite } from "./join-flow.js";
-import { decodeInviteToken } from "./invite.js";
-import { warn, info } from "./ui.js";
-function prompt(question, defaultVal) {
-    const rl = createInterface({ input: process.stdin, output: process.stdout });
-    const suffix = defaultVal ? ` (${defaultVal})` : "";
-    return new Promise((resolve) => {
-        rl.question(`  ? ${question}${suffix} `, (answer) => {
-            rl.close();
-            resolve(answer.trim() || defaultVal || "");
-        });
-    });
-}
-async function confirm(question, defaultYes) {
-    const hint = defaultYes ? "Y/n" : "y/N";
-    const answer = await prompt(`${question} (${hint})`);
-    if (!answer)
-        return defaultYes;
-    return answer.toLowerCase().startsWith("y");
-}
-/**
- * Authenticate the user, reusing a stored HQ App token if it's still valid.
- *
- * Priority:
- *   1. ~/.hq/app-token.json — cached HQ App token from a previous session
- *   2. Device flow — browser-based OAuth through the hq-team-sync GitHub App
- *
- * The user's existing `gh` CLI auth is never read or modified.
- */
-export async function authenticate() {
-    // 1. Try the cached HQ App token
-    const existing = loadGitHubAuth();
-    if (existing) {
-        const valid = await isGitHubAuthValid(existing);
-        if (valid) {
-            // Double-check it actually has App scopes (not a leftover from the old
-            // gh-based flow where a regular OAuth token could end up in the file)
-            const appScoped = await isAppScopedToken(existing);
-            if (appScoped === "yes") {
-                info(`Already signed in as ${chalk.cyan("@" + existing.login)}`);
-                return existing;
-            }
-            if (appScoped === "unknown") {
-                // Transient failure (network, 5xx) — keep the cached token and
-                // optimistically reuse it. If it truly lacks scopes, the downstream
-                // /user/installations call will fail with a clear error.
-                info(`Already signed in as ${chalk.cyan("@" + existing.login)} (scope check skipped — GitHub unreachable)`);
-                return existing;
-            }
-            // appScoped === "no" — definitively wrong token type (403)
-            info(`Signed in as ${chalk.cyan("@" + existing.login)} but token lacks HQ App permissions`);
-            clearGitHubAuth();
-        }
-        else {
-            info("HQ App token expired — re-authenticating");
-            clearGitHubAuth();
-        }
-    }
-    // 2. No valid App token — run the device flow
-    // Quick check: does the user have a GitHub account?
-    console.log();
-    const hasGithub = await confirm("Do you have a GitHub account?", true);
-    if (!hasGithub) {
-        console.log();
-        info("HQ Teams uses GitHub for identity, repos, and access control.");
-        const create = await confirm("Open github.com/signup in your browser to create one?", true);
-        if (!create) {
-            warn("A GitHub account is required for HQ Teams. Aborting team setup.");
-            return null;
-        }
-        openBrowser("https://github.com/signup");
-        console.log();
-        info("After creating your account, come back here and press Enter...");
-        await prompt("");
-    }
-    try {
-        return await startGitHubDeviceFlow();
-    }
-    catch (err) {
-        const message = err instanceof Error ? err.message : String(err);
-        warn(`GitHub sign-in failed: ${message}`);
-        return null;
-    }
-}
-/**
- * Run the teams flow. The mode determines the entry point:
- *   - "existing": user said they have an HQ Teams account → prompt for invite code, then discovery
- *   - "new":      user wants to create a new team → admin onboarding
- *
- * @param joinToken - Pre-supplied invite token (from --join flag). Skips the invite code prompt.
- */
-export async function runTeamsFlow(mode, hqRoot, hqVersion, preAuth, joinToken) {
-    if (mode === "existing") {
-        // "existing" path requires App auth upfront for discovery + invite flows
-        const auth = preAuth ?? await authenticate();
-        if (!auth)
-            return null;
-        const result = { auth, member: null, admin: null, joinedByInvite: null };
-        // Check for a pre-supplied token (--join flag) or prompt for one
-        let token = joinToken;
-        if (!token) {
-            console.log();
-            token = await prompt("Enter your invite code (or press Enter to auto-discover)");
-        }
-        // If the user provided a token, use the invite flow
-        if (token) {
-            // Validate the token before proceeding
-            const decoded = decodeInviteToken(token);
-            if (!decoded) {
-                warn("That doesn't look like a valid invite code.");
-                info("Check that you copied the full code starting with hq_");
-                console.log();
-                // Fall through to discovery as a courtesy
-                info("Trying auto-discovery instead...");
-            }
-            else {
-                result.joinedByInvite = await runJoinByInvite(auth, hqRoot, token);
-                if (result.joinedByInvite) {
-                    return result;
-                }
-                // Join failed — don't fall through to discovery, the user needs to
-                // fix the access issue first
-                return result;
-            }
-        }
-        // Auto-discovery: find teams via GitHub App installations
-        result.member = await runMemberJoin(auth, hqRoot);
-        if (result.member === null) {
-            // No teams found at all — offer to create a team
-            console.log();
-            info("No HQ teams are linked to your GitHub account yet.");
-            const create = await confirm("Would you like to create a new team now?", false);
-            if (create) {
-                // Admin onboarding handles its own auth sequence:
-                // gh CLI for org discovery → App device flow after org selection
-                result.admin = await runAdminOnboarding(auth, hqRoot, hqVersion);
-            }
-        }
-        return result;
-    }
-    // mode === "new"
-    // Admin onboarding handles its own auth sequence:
-    //   1. gh CLI token for org discovery (prompt gh auth login if needed)
-    //   2. User picks org
-    //   3. App device flow auth (for installations + repo management)
-    // This avoids the chicken-and-egg problem where the App token can only
-    // see orgs it's already installed on.
-    const result = { auth: null, member: null, admin: null, joinedByInvite: null };
-    result.admin = await runAdminOnboarding(null, hqRoot, hqVersion);
-    if (result.admin) {
-        // Admin onboarding completed — load the auth it persisted
-        const auth = loadGitHubAuth();
-        if (auth)
-            result.auth = auth;
-    }
-    return result;
-}
-//# sourceMappingURL=teams-flow.js.map

package/dist/teams-flow.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"teams-flow.js","sourceRoot":"","sources":["../src/teams-flow.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,eAAe,EAAE,MAAM,UAAU,CAAC;AAC3C,OAAO,EAEL,cAAc,EACd,iBAAiB,EACjB,gBAAgB,EAChB,qBAAqB,EACrB,eAAe,EACf,WAAW,GACZ,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,kBAAkB,EAA8B,MAAM,uBAAuB,CAAC;AACvF,OAAO,EAAE,aAAa,EAAyB,MAAM,iBAAiB,CAAC;AACvE,OAAO,EAAE,eAAe,EAA2B,MAAM,gBAAgB,CAAC;AAC1E,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAAuB,IAAI,EAAE,IAAI,EAAE,MAAM,SAAS,CAAC;AAY1D,SAAS,MAAM,CAAC,QAAgB,EAAE,UAAmB;IACnD,MAAM,EAAE,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAC7E,MAAM,MAAM,GAAG,UAAU,CAAC,CAAC,CAAC,KAAK,UAAU,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IACpD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,EAAE,CAAC,QAAQ,CAAC,OAAO,QAAQ,GAAG,MAAM,GAAG,EAAE,CAAC,MAAM,EAAE,EAAE;YAClD,EAAE,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,UAAU,IAAI,EAAE,CAAC,CAAC;QAC7C,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,OAAO,CAAC,QAAgB,EAAE,UAAmB;IAC1D,MAAM,IAAI,GAAG,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC;IACxC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,GAAG,QAAQ,KAAK,IAAI,GAAG,CAAC,CAAC;IACrD,IAAI,CAAC,MAAM;QAAE,OAAO,UAAU,CAAC;IAC/B,OAAO,MAAM,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;AAC9C,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY;IAChC,iCAAiC;IACjC,MAAM,QAAQ,GAAG,cAAc,EAAE,CAAC;IAClC,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,QAAQ,CAAC,CAAC;QAChD,IAAI,KAAK,EAAE,CAAC;YACV,uEAAuE;YACvE,sEAAsE;YACtE,MAAM,SAAS,GAAG,MAAM,gBAAgB,CAAC,QAAQ,CAAC,CAAC;YACnD,IAAI,SAAS,KAAK,KAAK,EAAE,CAAC;gBACxB,IAAI,CAAC,wBAAwB,KAAK,CAAC,IAAI,CAAC,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;gBACjE,OAAO,QAAQ,CAAC;YAClB,CAAC;YACD,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;gBAC5B,+DAA+D;gBAC/D,oEAAoE;gBACpE,yDAAyD;gBACzD,IAAI,CAAC,wBAAwB,KAAK,CAAC,IAAI,CAAC,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,6CAA6C,CAAC,CAAC;gBAC5G,OAAO,QAAQ,CAAC;YAClB,CAAC;YACD,2DAA2D;YAC3D,IAAI,CAAC,gBAAgB,KAAK,CAAC,IAAI,CAAC,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,qCAAqC,CAAC,CAAC;YAC5F,eAAe,EAAE,CAAC;QACpB,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,0CAA0C,CAAC,CAAC;YACjD,eAAe,EAAE,CAAC;QACpB,CAAC;IACH,CAAC;IAED,8CAA8C;IAC9C,oDAAoD;IACpD,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,+BAA+B,EAAE,IAAI,CAAC,CAAC;IACvE,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,CAAC,GAAG,EAAE,CAAC;QACd,IAAI,CAAC,+DAA+D,CAAC,CAAC;QACtE,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,uDAAuD,EAAE,IAAI,CAAC,CAAC;QAC5F,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,IAAI,CAAC,iEAAiE,CAAC,CAAC;YACxE,OAAO,IAAI,CAAC;QACd,CAAC;QACD,WAAW,CAAC,2BAA2B,CAAC,CAAC;QACzC,OAAO,CAAC,GAAG,EAAE,CAAC;QACd,IAAI,CAAC,gEAAgE,CAAC,CAAC;QACvE,MAAM,MAAM,CAAC,EAAE,CAAC,CAAC;IACnB,CAAC;IAED,IAAI,CAAC;QACH,OAAO,MAAM,qBAAqB,EAAE,CAAC;IACvC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,IAAI,CAAC,0BAA0B,OAAO,EAAE,CAAC,CAAC;QAC1C,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,IAAmB,EACnB,MAAc,EACd,SAAiB,EACjB,OAAoB,EACpB,SAAkB;IAElB,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;QACxB,yEAAyE;QACzE,MAAM,IAAI,GAAG,OAAO,IAAI,MAAM,YAAY,EAAE,CAAC;QAC7C,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC;QAEvB,MAAM,MAAM,GAAoB,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC;QAE1F,iEAAiE;QACjE,IAAI,KAAK,GAAG,SAAS,CAAC;QAEtB,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,CAAC,GAAG,EAAE,CAAC;YACd,KAAK,GAAG,MAAM,MAAM,CAClB,0DAA0D,CAC3D,CAAC;QACJ,CAAC;QAED,oDAAoD;QACpD,IAAI,KAAK,EAAE,CAAC;YACV,uCAAuC;YACvC,MAAM,OAAO,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;YACzC,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,IAAI,CAAC,6CAA6C,CAAC,CAAC;gBACpD,IAAI,CAAC,uDAAuD,CAAC,CAAC;gBAC9D,OAAO,CAAC,GAAG,EAAE,CAAC;gBACd,0CAA0C;gBAC1C,IAAI,CAAC,kCAAkC,CAAC,CAAC;YAC3C,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,cAAc,GAAG,MAAM,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;gBACnE,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;oBAC1B,OAAO,MAAM,CAAC;gBAChB,CAAC;gBACD,mEAAmE;gBACnE,6BAA6B;gBAC7B,OAAO,MAAM,CAAC;YAChB,CAAC;QACH,CAAC;QAED,0DAA0D;QAC1D,MAAM,CAAC,MAAM,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAElD,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;YAC3B,iDAAiD;YACjD,OAAO,CAAC,GAAG,EAAE,CAAC;YACd,IAAI,CAAC,oDAAoD,CAAC,CAAC;YAC3D,MAAM,MAAM,GAAG,MAAM,OAAO,CAC1B,0CAA0C,EAC1C,KAAK,CACN,CAAC;YACF,IAAI,MAAM,EAAE,CAAC;gBACX,kDAAkD;gBAClD,iEAAiE;gBACjE,MAAM,CAAC,KAAK,GAAG,MAAM,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;YACnE,CAAC;QACH,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,iBAAiB;IACjB,kDAAkD;IAClD,uEAAuE;IACvE,sBAAsB;IACtB,kEAAkE;IAClE,uEAAuE;IACvE,sCAAsC;IACtC,MAAM,MAAM,GAAoB,EAAE,IAAI,EAAE,IAA6B,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC;IACzH,MAAM,CAAC,KAAK,GAAG,MAAM,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;IACjE,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,0DAA0D;QAC1D,MAAM,IAAI,GAAG,cAAc,EAAE,CAAC;QAC9B,IAAI,IAAI;YAAE,MAAM,CAAC,IAAI,GAAG,IAAI,CAAC;IAC/B,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}