granola-toolkit 0.27.0 → 0.29.0

package/README.md

@@ -100,6 +100,7 @@ granola meeting view 1234abcd
 granola meeting notes 1234abcd
 granola meeting transcript 1234abcd --format json
 granola meeting export 1234abcd --format yaml
+granola meeting open 1234abcd
 granola tui
 granola tui --meeting 1234abcd
 ```
@@ -116,6 +117,7 @@ granola attach http://127.0.0.1:4096 --meeting 1234abcd
 granola attach http://127.0.0.1:4096 --password "change-me"
 
 granola web
+granola web --meeting 1234abcd
 granola web --open=false --port 4096
 granola web --network lan --password "change-me" --trusted-origins "https://trusted.example"
 ```
@@ -191,6 +193,7 @@ The focused meeting subcommands are:
 
 - `meeting notes` for just the selected note output
 - `meeting transcript` for just the selected transcript output
+- `meeting open` to start the web workspace focused on one meeting
 
 The machine-readable `export` command includes:
 
@@ -237,6 +240,11 @@ Server hardening now includes:
 
 `web` starts the same local server as `serve`, enables the browser client at `/`, and opens that workspace in your default browser unless you pass `--open=false`.
 
+You can deep-link into a specific meeting with either:
+
+- `granola web --meeting <id>`
+- `granola meeting open <id>`
+
 The initial browser client includes:
 
 - a searchable meeting list
@@ -272,6 +280,7 @@ The initial terminal workspace includes:
 
 - a meeting list pane with keyboard navigation
 - a detail pane with notes, transcript, metadata, and raw views
+- an auth session overlay for import, refresh, source switching, and sign-out
 - a footer with app state and key hints
 - a quick-open overlay for jumping by title, id, or tag
 
@@ -279,6 +288,7 @@ The main keyboard controls are:
 
 - `j` / `k` or arrow keys to move between meetings
 - `/` or `Ctrl+P` to open quick open
+- `a` to open auth session actions
 - `1`-`4` to switch detail tabs
 - `PageUp` / `PageDown` to scroll the detail pane
 - `r` to refresh from live Granola data

package/dist/cli.js

@@ -1305,6 +1305,151 @@ const granolaTuiTheme = {
 	}
 };
 //#endregion
+//#region src/tui/auth.ts
+function padLine$2(text, width) {
+	const clipped = truncateToWidth(text, width, "");
+	return clipped + " ".repeat(Math.max(0, width - visibleWidth(clipped)));
+}
+function frameLine$1(text, width) {
+	return `| ${padLine$2(text, Math.max(1, width - 4))} |`;
+}
+function actionDisabledReason(auth, actionId) {
+	switch (actionId) {
+		case "login": return auth.supabaseAvailable ? "" : "supabase.json unavailable";
+		case "refresh":
+			if (!auth.storedSessionAvailable) return "stored session missing";
+			return auth.refreshAvailable ? "" : "refresh unavailable";
+		case "use-stored":
+			if (!auth.storedSessionAvailable) return "stored session missing";
+			return auth.mode === "stored-session" ? "already active" : "";
+		case "use-supabase":
+			if (!auth.supabaseAvailable) return "supabase.json unavailable";
+			return auth.mode === "supabase-file" ? "already active" : "";
+		case "logout": return auth.storedSessionAvailable ? "" : "stored session missing";
+	}
+}
+function buildGranolaTuiAuthActions(auth) {
+	return [
+		{
+			description: "Import the Granola desktop session from supabase.json",
+			id: "login",
+			key: "1",
+			label: "Import desktop session"
+		},
+		{
+			description: "Refresh the stored Granola session",
+			id: "refresh",
+			key: "2",
+			label: "Refresh stored session"
+		},
+		{
+			description: "Switch the active auth source to the stored session",
+			id: "use-stored",
+			key: "3",
+			label: "Use stored session"
+		},
+		{
+			description: "Switch the active auth source to supabase.json",
+			id: "use-supabase",
+			key: "4",
+			label: "Use supabase.json"
+		},
+		{
+			description: "Delete the stored session and fall back to supabase.json",
+			id: "logout",
+			key: "5",
+			label: "Sign out"
+		}
+	].map((action) => {
+		const disabledReason = actionDisabledReason(auth, action.id);
+		return {
+			...action,
+			disabled: disabledReason.length > 0,
+			disabledReason: disabledReason || void 0
+		};
+	});
+}
+function renderGranolaTuiAuthState(auth) {
+	const lines = [
+		`Active source: ${auth.mode === "stored-session" ? "Stored session" : "supabase.json"}`,
+		`Stored session: ${auth.storedSessionAvailable ? "available" : "missing"}`,
+		`supabase.json: ${auth.supabaseAvailable ? "available" : "missing"}`,
+		`Refresh: ${auth.refreshAvailable ? "available" : "missing"}`
+	];
+	if (auth.clientId) lines.push(`Client ID: ${auth.clientId}`);
+	if (auth.signInMethod) lines.push(`Sign-in method: ${auth.signInMethod}`);
+	if (auth.supabasePath) lines.push(`supabase path: ${auth.supabasePath}`);
+	if (auth.lastError) lines.push(`Last error: ${auth.lastError}`);
+	return lines.join("\n");
+}
+function nextEnabledIndex(actions, startIndex, delta) {
+	if (actions.length === 0) return -1;
+	for (let attempts = 0; attempts < actions.length; attempts += 1) {
+		const nextIndex = (startIndex + delta * (attempts + 1) + actions.length) % actions.length;
+		if (!actions[nextIndex]?.disabled) return nextIndex;
+	}
+	return Math.max(0, Math.min(actions.length - 1, startIndex));
+}
+var GranolaTuiAuthOverlay = class {
+	focused = false;
+	#actions;
+	#selectedIndex;
+	constructor(options) {
+		this.options = options;
+		this.#actions = buildGranolaTuiAuthActions(this.options.auth);
+		const firstEnabledIndex = this.#actions.findIndex((action) => !action.disabled);
+		this.#selectedIndex = firstEnabledIndex >= 0 ? firstEnabledIndex : 0;
+	}
+	invalidate() {}
+	async runAction(actionId) {
+		const action = this.#actions.find((candidate) => candidate.id === actionId);
+		if (!action || action.disabled) return;
+		await this.options.onRun(action.id);
+	}
+	handleInput(data) {
+		if (matchesKey(data, "esc")) {
+			this.options.onCancel();
+			return;
+		}
+		if (matchesKey(data, "up")) {
+			this.#selectedIndex = nextEnabledIndex(this.#actions, this.#selectedIndex, -1);
+			return;
+		}
+		if (matchesKey(data, "down")) {
+			this.#selectedIndex = nextEnabledIndex(this.#actions, this.#selectedIndex, 1);
+			return;
+		}
+		const selected = this.#actions[this.#selectedIndex];
+		if (matchesKey(data, "enter")) {
+			if (selected && !selected.disabled) this.runAction(selected.id);
+			return;
+		}
+		const hotkeyAction = this.#actions.find((action) => action.key === data);
+		if (hotkeyAction && !hotkeyAction.disabled) this.runAction(hotkeyAction.id);
+	}
+	render(width) {
+		const lines = [];
+		const bodyWidth = Math.max(48, width);
+		lines.push(`+${"-".repeat(bodyWidth - 2)}+`);
+		lines.push(frameLine$1(granolaTuiTheme.strong("Auth Session"), bodyWidth));
+		lines.push(frameLine$1("", bodyWidth));
+		for (const detailLine of renderGranolaTuiAuthState(this.options.auth).split("\n")) lines.push(frameLine$1(detailLine, bodyWidth));
+		lines.push(frameLine$1("", bodyWidth));
+		for (const action of this.#actions) {
+			const selected = this.#actions[this.#selectedIndex]?.id === action.id;
+			const label = `${action.key}. ${action.label}`;
+			const titleLine = action.disabled ? granolaTuiTheme.dim(label) : selected ? granolaTuiTheme.selected(label) : label;
+			lines.push(frameLine$1(titleLine, bodyWidth));
+			const detail = action.disabled ? granolaTuiTheme.warning(action.disabledReason ?? "Unavailable") : granolaTuiTheme.dim(action.description);
+			for (const wrapped of wrapTextWithAnsi(detail, Math.max(1, bodyWidth - 6))) lines.push(frameLine$1(`  ${wrapped}`, bodyWidth));
+		}
+		lines.push(frameLine$1("", bodyWidth));
+		lines.push(frameLine$1(granolaTuiTheme.dim("Enter to run, Esc to cancel, arrows to move"), bodyWidth));
+		lines.push(`+${"-".repeat(bodyWidth - 2)}+`);
+		return lines;
+	}
+};
+//#endregion
 //#region src/tui/palette.ts
 function padLine$1(text, width) {
 	const clipped = truncateToWidth(text, width, "");
@@ -1597,6 +1742,85 @@ var GranolaTuiWorkspace = class {
 		this.#detailScroll = 0;
 		this.tui.requestRender();
 	}
+	async reloadAfterAuthChange() {
+		const preferredMeetingId = this.#selectedMeeting?.document.id ?? this.#selectedMeetingId;
+		try {
+			await this.loadMeetings({
+				forceRefresh: true,
+				preferredMeetingId,
+				setStatus: false
+			});
+			if (this.#selectedMeetingId) {
+				await this.loadMeeting(this.#selectedMeetingId, { ensureMeetingVisible: true });
+				return;
+			}
+			this.#selectedMeeting = void 0;
+			this.#detailError = "";
+			this.#detailScroll = 0;
+			this.tui.requestRender();
+		} catch {}
+	}
+	async runAuthAction(actionId) {
+		let successMessage = "";
+		try {
+			switch (actionId) {
+				case "login":
+					this.setStatus("Importing desktop session…");
+					await this.app.loginAuth();
+					successMessage = "Stored session imported";
+					break;
+				case "refresh":
+					this.setStatus("Refreshing stored session…");
+					await this.app.refreshAuth();
+					successMessage = "Stored session refreshed";
+					break;
+				case "use-stored":
+					this.setStatus("Switching to stored session…");
+					await this.app.switchAuthMode("stored-session");
+					successMessage = "Using stored session";
+					break;
+				case "use-supabase":
+					this.setStatus("Switching to supabase.json…");
+					await this.app.switchAuthMode("supabase-file");
+					successMessage = "Using supabase.json";
+					break;
+				case "logout":
+					this.setStatus("Signing out…");
+					await this.app.logoutAuth();
+					successMessage = "Stored session removed";
+					break;
+			}
+			await this.reloadAfterAuthChange();
+			this.setStatus(successMessage);
+		} catch (error) {
+			const message = error instanceof Error ? error.message : String(error);
+			this.setStatus(message, "error");
+		}
+	}
+	openAuthPanel(auth = this.#appState.auth) {
+		if (this.#overlay) return;
+		const closeOverlay = () => {
+			this.#overlay?.hide();
+			this.#overlay = void 0;
+			this.tui.setFocus(this);
+			this.tui.requestRender();
+		};
+		const overlay = new GranolaTuiAuthOverlay({
+			auth,
+			onCancel: closeOverlay,
+			onRun: async (actionId) => {
+				closeOverlay();
+				await this.runAuthAction(actionId);
+			}
+		});
+		this.#overlay = this.tui.showOverlay(overlay, {
+			anchor: "center",
+			maxHeight: "70%",
+			minWidth: 52,
+			width: "72%"
+		});
+		this.setStatus("Auth session");
+	}
 	openQuickOpen() {
 		if (this.#overlay) return;
 		const closeOverlay = () => {
@@ -1641,6 +1865,10 @@ var GranolaTuiWorkspace = class {
 			this.openQuickOpen();
 			return;
 		}
+		if (matchesKey(data, "a")) {
+			this.openAuthPanel();
+			return;
+		}
 		if (matchesKey(data, "up") || matchesKey(data, "k")) {
 			this.moveSelection(-1);
 			return;
@@ -1779,7 +2007,7 @@ var GranolaTuiWorkspace = class {
 		const bodyLines = [];
 		for (let index = 0; index < bodyHeight; index += 1) bodyLines.push(`${padLine(listLines[index] ?? "", listWidth)} | ${padLine(detailLines[index] ?? "", detailWidth)}`);
 		const footerStatus = padLine(toneText(this.#statusTone, this.#statusMessage), width);
-		const footerHints = padLine(granolaTuiTheme.dim("/ quick open  r refresh  1-4 tabs  PgUp/PgDn scroll  q quit"), width);
+		const footerHints = padLine(granolaTuiTheme.dim("/ quick open  a auth  r refresh  1-4 tabs  PgUp/PgDn scroll  q quit"), width);
 		return [
 			headerTitle,
 			headerSummary,
@@ -3452,337 +3680,138 @@ async function rerun(id, commandFlags, globalFlags) {
 	return 0;
 }
 //#endregion
-//#region src/commands/meeting.ts
-function meetingHelp() {
-	return `Granola meeting
+//#region src/browser.ts
+const execFileAsync = promisify(execFile);
+function getBrowserOpenCommand(url, platform = process.platform) {
+	const href = String(url);
+	switch (platform) {
+		case "darwin": return {
+			args: [href],
+			file: "open"
+		};
+		case "win32": return {
+			args: [
+				"/c",
+				"start",
+				"",
+				href
+			],
+			file: "cmd"
+		};
+		default: return {
+			args: [href],
+			file: "xdg-open"
+		};
+	}
+}
+async function openExternalUrl(url, options = {}) {
+	const command = getBrowserOpenCommand(url, options.platform);
+	await (options.run ?? (async (file, args) => {
+		await execFileAsync(file, args);
+	}))(command.file, command.args);
+}
+//#endregion
+//#region src/web/client-script.ts
+const granolaWebClientScript = String.raw`
+const serverConfig = window.__GRANOLA_SERVER__ || { passwordRequired: false };
+const workspaceTabs = ["notes", "transcript", "metadata", "raw"];
 
-Usage:
-  granola meeting <list|view|export|notes|transcript> [options]
+const state = {
+  appState: null,
+  detailError: "",
+  listError: "",
+  meetings: [],
+  quickOpen: "",
+  search: "",
+  selectedMeeting: null,
+  selectedMeetingBundle: null,
+  selectedMeetingId: null,
+  meetingSource: "live",
+  serverLocked: Boolean(serverConfig.passwordRequired),
+  sort: "updated-desc",
+  updatedFrom: "",
+  updatedTo: "",
+  workspaceTab: "notes",
+};
 
-Subcommands:
-  list                List meetings from the Granola API
-  view <id>           Show a single meeting with notes and transcript text
-  export <id>         Export a single meeting as JSON or YAML
-  notes <id>          Show a single meeting's notes
-  transcript <id>     Show a single meeting's transcript
+const els = {
+  appState: document.querySelector("[data-app-state]"),
+  authPanel: document.querySelector("[data-auth-panel]"),
+  detailBody: document.querySelector("[data-detail-body]"),
+  detailMeta: document.querySelector("[data-detail-meta]"),
+  empty: document.querySelector("[data-empty]"),
+  jobsList: document.querySelector("[data-jobs-list]"),
+  list: document.querySelector("[data-meeting-list]"),
+  noteButton: document.querySelector("[data-export-notes]"),
+  quickOpen: document.querySelector("[data-quick-open]"),
+  quickOpenButton: document.querySelector("[data-quick-open-button]"),
+  refreshButton: document.querySelector("[data-refresh]"),
+  search: document.querySelector("[data-search]"),
+  securityPanel: document.querySelector("[data-security-panel]"),
+  serverPassword: document.querySelector("[data-server-password]"),
+  lockServerButton: document.querySelector("[data-lock-server]"),
+  sort: document.querySelector("[data-sort]"),
+  stateBadge: document.querySelector("[data-state-badge]"),
+  transcriptButton: document.querySelector("[data-export-transcripts]"),
+  unlockServerButton: document.querySelector("[data-unlock-server]"),
+  updatedFrom: document.querySelector("[data-updated-from]"),
+  updatedTo: document.querySelector("[data-updated-to]"),
+  workspaceTabs: document.querySelectorAll("[data-workspace-tab]"),
+};
 
-Options:
-  --cache <path>      Path to Granola cache JSON for transcript data
-  --format <value>    list/view: text, json, yaml; export: json, yaml; notes: markdown, json, yaml, raw; transcript: text, json, yaml, raw
-  --limit <n>         Number of meetings for list (default: 20)
-  --search <query>    Filter list by title, id, or tag
-  --timeout <value>   Request timeout, e.g. 2m, 30s, 120000 (default: 2m)
-  --supabase <path>   Path to supabase.json
-  --debug             Enable debug logging
-  --config <path>     Path to .granola.toml
-  -h, --help          Show help
-`;
+function parseWorkspaceTab(value) {
+  return workspaceTabs.includes(value) ? value : "notes";
 }
-function resolveListFormat(value) {
-	switch (value) {
-		case void 0: return "text";
-		case "json":
-		case "text":
-		case "yaml": return value;
-		default: throw new Error("invalid meeting format: expected text, json, or yaml");
-	}
-}
-function resolveViewFormat(value) {
-	switch (value) {
-		case void 0: return "text";
-		case "json":
-		case "text":
-		case "yaml": return value;
-		default: throw new Error("invalid meeting format: expected text, json, or yaml");
-	}
+
+function startupSelection() {
+  const params = new URLSearchParams(window.location.search);
+  return {
+    meetingId: params.get("meeting")?.trim() || "",
+    workspaceTab: parseWorkspaceTab(params.get("tab")),
+  };
 }
-function resolveExportFormat(value) {
-	switch (value) {
-		case void 0: return "json";
-		case "json":
-		case "yaml": return value;
-		default: throw new Error("invalid meeting export format: expected json or yaml");
-	}
+
+function syncBrowserUrl() {
+  const url = new URL(window.location.href);
+
+  if (state.selectedMeetingId) {
+    url.searchParams.set("meeting", state.selectedMeetingId);
+  } else {
+    url.searchParams.delete("meeting");
+  }
+
+  if (state.workspaceTab !== "notes") {
+    url.searchParams.set("tab", state.workspaceTab);
+  } else {
+    url.searchParams.delete("tab");
+  }
+
+  const nextPath = url.pathname + url.search + url.hash;
+  const currentPath = window.location.pathname + window.location.search + window.location.hash;
+  if (nextPath !== currentPath) {
+    history.replaceState(null, "", nextPath);
+  }
 }
-function resolveNotesFormat(value) {
-	switch (value) {
-		case void 0: return "markdown";
-		case "json":
-		case "markdown":
-		case "raw":
-		case "yaml": return value;
-		default: throw new Error("invalid meeting notes format: expected markdown, json, yaml, or raw");
-	}
+
+function escapeHtml(value) {
+  return value
+    .replaceAll("&", "&amp;")
+    .replaceAll("<", "&lt;")
+    .replaceAll(">", "&gt;")
+    .replaceAll('"', "&quot;");
 }
-function resolveTranscriptFormat$1(value) {
-	switch (value) {
-		case void 0: return "text";
-		case "json":
-		case "raw":
-		case "text":
-		case "yaml": return value;
-		default: throw new Error("invalid meeting transcript format: expected text, json, yaml, or raw");
-	}
+
+function setStatus(label, tone = "idle") {
+  els.stateBadge.textContent = label;
+  els.stateBadge.dataset.tone = tone;
 }
-function parseLimit(value) {
-	if (value === void 0) return 20;
-	if (typeof value !== "string" || !/^\d+$/.test(value)) throw new Error("invalid meeting limit: expected a positive integer");
-	const limit = Number(value);
-	if (!Number.isInteger(limit) || limit < 1) throw new Error("invalid meeting limit: expected a positive integer");
-	return limit;
-}
-const meetingCommand = {
-	description: "Inspect and export individual Granola meetings",
-	flags: {
-		cache: { type: "string" },
-		format: { type: "string" },
-		help: { type: "boolean" },
-		limit: { type: "string" },
-		search: { type: "string" },
-		timeout: { type: "string" }
-	},
-	help: meetingHelp,
-	name: "meeting",
-	async run({ commandArgs, commandFlags, globalFlags }) {
-		const [action, id] = commandArgs;
-		switch (action) {
-			case "list": return await list(commandFlags, globalFlags);
-			case "view":
-				if (!id) throw new Error("meeting view requires an id");
-				return await view(id, commandFlags, globalFlags);
-			case "export":
-				if (!id) throw new Error("meeting export requires an id");
-				return await exportMeeting(id, commandFlags, globalFlags);
-			case "notes":
-				if (!id) throw new Error("meeting notes requires an id");
-				return await notes(id, commandFlags, globalFlags);
-			case "transcript":
-				if (!id) throw new Error("meeting transcript requires an id");
-				return await transcript(id, commandFlags, globalFlags);
-			case void 0:
-				console.log(meetingHelp());
-				return 1;
-			default: throw new Error("invalid meeting command: expected list, view, export, notes, or transcript");
-		}
-	}
-};
-async function list(commandFlags, globalFlags) {
-	const format = resolveListFormat(commandFlags.format);
-	const limit = parseLimit(commandFlags.limit);
-	const search = typeof commandFlags.search === "string" ? commandFlags.search : void 0;
-	const config = await loadConfig({
-		globalFlags,
-		subcommandFlags: commandFlags
-	});
-	debug(config.debug, "using config", config.configFileUsed ?? "(none)");
-	debug(config.debug, "supabase", config.supabase);
-	debug(config.debug, "cacheFile", config.transcripts.cacheFile || "(none)");
-	debug(config.debug, "timeoutMs", config.notes.timeoutMs);
-	const app = await createGranolaApp(config);
-	debug(config.debug, "authMode", app.getState().auth.mode);
-	console.log("Loading meetings...");
-	const result = await app.listMeetings({
-		limit,
-		search
-	});
-	console.log(result.source === "index" ? "Loaded meetings from the local index" : "Fetched meetings from Granola API");
-	console.log(renderMeetingList(result.meetings, format).trimEnd());
-	return 0;
-}
-async function view(id, commandFlags, globalFlags) {
-	const format = resolveViewFormat(commandFlags.format);
-	const config = await loadConfig({
-		globalFlags,
-		subcommandFlags: commandFlags
-	});
-	debug(config.debug, "using config", config.configFileUsed ?? "(none)");
-	debug(config.debug, "supabase", config.supabase);
-	debug(config.debug, "cacheFile", config.transcripts.cacheFile || "(none)");
-	debug(config.debug, "timeoutMs", config.notes.timeoutMs);
-	const app = await createGranolaApp(config);
-	debug(config.debug, "authMode", app.getState().auth.mode);
-	console.log("Fetching meeting from Granola API...");
-	const result = await app.getMeeting(id);
-	console.log(renderMeetingView(result.meeting, format).trimEnd());
-	return 0;
-}
-async function exportMeeting(id, commandFlags, globalFlags) {
-	const format = resolveExportFormat(commandFlags.format);
-	const config = await loadConfig({
-		globalFlags,
-		subcommandFlags: commandFlags
-	});
-	debug(config.debug, "using config", config.configFileUsed ?? "(none)");
-	debug(config.debug, "supabase", config.supabase);
-	debug(config.debug, "cacheFile", config.transcripts.cacheFile || "(none)");
-	debug(config.debug, "timeoutMs", config.notes.timeoutMs);
-	const app = await createGranolaApp(config);
-	debug(config.debug, "authMode", app.getState().auth.mode);
-	console.log("Fetching meeting from Granola API...");
-	const result = await app.getMeeting(id);
-	console.log(renderMeetingExport(result.meeting, format).trimEnd());
-	return 0;
-}
-async function notes(id, commandFlags, globalFlags) {
-	const format = resolveNotesFormat(commandFlags.format);
-	const config = await loadConfig({
-		globalFlags,
-		subcommandFlags: commandFlags
-	});
-	debug(config.debug, "using config", config.configFileUsed ?? "(none)");
-	debug(config.debug, "supabase", config.supabase);
-	debug(config.debug, "cacheFile", config.transcripts.cacheFile || "(none)");
-	debug(config.debug, "timeoutMs", config.notes.timeoutMs);
-	const app = await createGranolaApp(config);
-	debug(config.debug, "authMode", app.getState().auth.mode);
-	console.log("Fetching meeting from Granola API...");
-	const result = await app.getMeeting(id);
-	console.log(renderMeetingNotes(result.document, format).trimEnd());
-	return 0;
-}
-async function transcript(id, commandFlags, globalFlags) {
-	const format = resolveTranscriptFormat$1(commandFlags.format);
-	const config = await loadConfig({
-		globalFlags,
-		subcommandFlags: commandFlags
-	});
-	debug(config.debug, "using config", config.configFileUsed ?? "(none)");
-	debug(config.debug, "supabase", config.supabase);
-	debug(config.debug, "cacheFile", config.transcripts.cacheFile || "(none)");
-	debug(config.debug, "timeoutMs", config.notes.timeoutMs);
-	const app = await createGranolaApp(config);
-	debug(config.debug, "authMode", app.getState().auth.mode);
-	console.log("Fetching meeting from Granola API...");
-	const result = await app.getMeeting(id, { requireCache: true });
-	const output = renderMeetingTranscript(result.document, result.cacheData, format);
-	if (!output.trim()) throw new Error(`no transcript found for meeting: ${result.document.id}`);
-	console.log(output.trimEnd());
-	return 0;
-}
-//#endregion
-//#region src/commands/notes.ts
-function notesHelp() {
-	return `Granola notes
-
-Usage:
-  granola notes [options]
-
-Options:
-  --format <value>    Output format: markdown, json, yaml, raw (default: markdown)
-  --output <path>     Output directory for note files (default: ./notes)
-  --timeout <value>   Request timeout, e.g. 2m, 30s, 120000 (default: 2m)
-  --supabase <path>   Path to supabase.json
-  --debug             Enable debug logging
-  --config <path>     Path to .granola.toml
-  -h, --help          Show help
-`;
-}
-const notesCommand = {
-	description: "Export Granola notes",
-	flags: {
-		format: { type: "string" },
-		help: { type: "boolean" },
-		output: { type: "string" },
-		timeout: { type: "string" }
-	},
-	help: notesHelp,
-	name: "notes",
-	async run({ commandFlags, globalFlags }) {
-		const config = await loadConfig({
-			globalFlags,
-			subcommandFlags: commandFlags
-		});
-		debug(config.debug, "using config", config.configFileUsed ?? "(none)");
-		debug(config.debug, "supabase", config.supabase);
-		debug(config.debug, "timeoutMs", config.notes.timeoutMs);
-		debug(config.debug, "output", config.notes.output);
-		const format = resolveNoteFormat(commandFlags.format);
-		debug(config.debug, "format", format);
-		const app = await createGranolaApp(config);
-		debug(config.debug, "authMode", app.getState().auth.mode);
-		const result = await app.exportNotes(format);
-		console.log(`✓ Exported ${result.documentCount} notes to ${result.outputDir} (job ${result.job.id})`);
-		debug(config.debug, "notes written", result.written);
-		return 0;
-	}
-};
-function resolveNoteFormat(value) {
-	switch (value) {
-		case void 0: return "markdown";
-		case "json":
-		case "markdown":
-		case "raw":
-		case "yaml": return value;
-		default: throw new Error("invalid notes format: expected markdown, json, yaml, or raw");
-	}
-}
-//#endregion
-//#region src/web/client-script.ts
-const granolaWebClientScript = String.raw`
-const serverConfig = window.__GRANOLA_SERVER__ || { passwordRequired: false };
-
-const state = {
-  appState: null,
-  detailError: "",
-  listError: "",
-  meetings: [],
-  quickOpen: "",
-  search: "",
-  selectedMeeting: null,
-  selectedMeetingBundle: null,
-  selectedMeetingId: null,
-  meetingSource: "live",
-  serverLocked: Boolean(serverConfig.passwordRequired),
-  sort: "updated-desc",
-  updatedFrom: "",
-  updatedTo: "",
-  workspaceTab: "notes",
-};
-
-const els = {
-  appState: document.querySelector("[data-app-state]"),
-  authPanel: document.querySelector("[data-auth-panel]"),
-  detailBody: document.querySelector("[data-detail-body]"),
-  detailMeta: document.querySelector("[data-detail-meta]"),
-  empty: document.querySelector("[data-empty]"),
-  jobsList: document.querySelector("[data-jobs-list]"),
-  list: document.querySelector("[data-meeting-list]"),
-  noteButton: document.querySelector("[data-export-notes]"),
-  quickOpen: document.querySelector("[data-quick-open]"),
-  quickOpenButton: document.querySelector("[data-quick-open-button]"),
-  refreshButton: document.querySelector("[data-refresh]"),
-  search: document.querySelector("[data-search]"),
-  securityPanel: document.querySelector("[data-security-panel]"),
-  serverPassword: document.querySelector("[data-server-password]"),
-  lockServerButton: document.querySelector("[data-lock-server]"),
-  sort: document.querySelector("[data-sort]"),
-  stateBadge: document.querySelector("[data-state-badge]"),
-  transcriptButton: document.querySelector("[data-export-transcripts]"),
-  unlockServerButton: document.querySelector("[data-unlock-server]"),
-  updatedFrom: document.querySelector("[data-updated-from]"),
-  updatedTo: document.querySelector("[data-updated-to]"),
-  workspaceTabs: document.querySelectorAll("[data-workspace-tab]"),
-};
-
-function escapeHtml(value) {
-  return value
-    .replaceAll("&", "&amp;")
-    .replaceAll("<", "&lt;")
-    .replaceAll(">", "&gt;")
-    .replaceAll('"', "&quot;");
-}
-
-function setStatus(label, tone = "idle") {
-  els.stateBadge.textContent = label;
-  els.stateBadge.dataset.tone = tone;
-}
-
-function syncFilterInputs() {
-  els.quickOpen.value = state.quickOpen;
-  els.search.value = state.search;
-  els.sort.value = state.sort;
-  els.updatedFrom.value = state.updatedFrom;
-  els.updatedTo.value = state.updatedTo;
+
+function syncFilterInputs() {
+  els.quickOpen.value = state.quickOpen;
+  els.search.value = state.search;
+  els.sort.value = state.sort;
+  els.updatedFrom.value = state.updatedFrom;
+  els.updatedTo.value = state.updatedTo;
 }
 
 function currentFilterSummary() {
@@ -3927,6 +3956,7 @@ function renderMeetingList() {
     state.selectedMeetingId = null;
     state.selectedMeeting = null;
     state.selectedMeetingBundle = null;
+    syncBrowserUrl();
     const filterSummary = currentFilterSummary();
     const message = filterSummary
       ? "No meetings match " + filterSummary + "."
@@ -3940,6 +3970,7 @@ function renderMeetingList() {
   if (!state.selectedMeetingId || !visibleIds.has(state.selectedMeetingId)) {
     state.selectedMeetingId = state.meetings[0]?.id || null;
   }
+  syncBrowserUrl();
 
   els.list.innerHTML = state.meetings
     .map((meeting) => {
@@ -4138,6 +4169,7 @@ async function loadMeetings(options = {}) {
 
 async function loadMeeting(id) {
   state.selectedMeetingId = id;
+  syncBrowserUrl();
   renderMeetingList();
 
   try {
@@ -4496,6 +4528,7 @@ els.quickOpenButton.addEventListener("click", () => {
 els.workspaceTabs.forEach((button) => {
   button.addEventListener("click", () => {
     state.workspaceTab = button.dataset.workspaceTab || "notes";
+    syncBrowserUrl();
     renderMeetingDetail();
   });
 });
@@ -4512,24 +4545,28 @@ document.addEventListener("keydown", (event) => {
   const tabs = ["notes", "transcript", "metadata", "raw"];
   if (event.key === "1") {
     state.workspaceTab = "notes";
+    syncBrowserUrl();
     renderMeetingDetail();
     return;
   }
 
   if (event.key === "2") {
     state.workspaceTab = "transcript";
+    syncBrowserUrl();
     renderMeetingDetail();
     return;
   }
 
   if (event.key === "3") {
     state.workspaceTab = "metadata";
+    syncBrowserUrl();
     renderMeetingDetail();
     return;
   }
 
   if (event.key === "4") {
     state.workspaceTab = "raw";
+    syncBrowserUrl();
     renderMeetingDetail();
     return;
   }
@@ -4537,15 +4574,21 @@ document.addEventListener("keydown", (event) => {
   const currentIndex = tabs.indexOf(state.workspaceTab);
   if (event.key === "]") {
     state.workspaceTab = tabs[(currentIndex + 1) % tabs.length];
+    syncBrowserUrl();
     renderMeetingDetail();
   }
 
   if (event.key === "[") {
     state.workspaceTab = tabs[(currentIndex + tabs.length - 1) % tabs.length];
+    syncBrowserUrl();
     renderMeetingDetail();
   }
 });
 
+const initialSelection = startupSelection();
+state.selectedMeetingId = initialSelection.meetingId || null;
+state.workspaceTab = initialSelection.workspaceTab;
+
 const events = new EventSource("/events");
 events.addEventListener("state.updated", (event) => {
   const previousLoadedAt = state.appState?.documents?.loadedAt;
@@ -5562,14 +5605,386 @@ async function startGranolaServer(app, options = {}) {
 	};
 }
 //#endregion
-//#region src/commands/serve.ts
-function serveHelp() {
-	return `Granola serve
-
-Usage:
-  granola serve [options]
-
-Options:
+//#region src/web-url.ts
+function buildGranolaMeetingUrl(baseUrl, meetingId) {
+	const url = new URL(baseUrl);
+	if (meetingId.trim()) url.searchParams.set("meeting", meetingId.trim());
+	return url;
+}
+//#endregion
+//#region src/commands/web-shared.ts
+function resolveGranolaWebWorkspaceOptions(commandFlags) {
+	const networkMode = parseNetworkMode(commandFlags.network);
+	const hostname = resolveServerHostname(networkMode, commandFlags.hostname);
+	const port = parsePort(commandFlags.port);
+	return {
+		hostname,
+		networkMode,
+		openBrowser: commandFlags.open !== false,
+		password: typeof commandFlags.password === "string" && commandFlags.password.trim() ? commandFlags.password.trim() : void 0,
+		port,
+		trustedOrigins: parseTrustedOrigins(commandFlags["trusted-origins"])
+	};
+}
+function printWebRoutes() {
+	console.log("Routes:");
+	console.log("  GET  /");
+	console.log("  GET  /health");
+	console.log("  POST /auth/unlock");
+	console.log("  POST /auth/lock");
+	console.log("  GET  /auth/status");
+	console.log("  GET  /state");
+	console.log("  GET  /events");
+	console.log("  GET  /meetings");
+	console.log("  GET  /meetings/:id");
+	console.log("  GET  /exports/jobs");
+	console.log("  POST /auth/login");
+	console.log("  POST /auth/logout");
+	console.log("  POST /auth/mode");
+	console.log("  POST /auth/refresh");
+	console.log("  POST /exports/notes");
+	console.log("  POST /exports/jobs/:id/rerun");
+	console.log("  POST /exports/transcripts");
+}
+async function runGranolaWebWorkspace(app, options) {
+	const server = await startGranolaServer(app, {
+		enableWebClient: true,
+		hostname: options.hostname,
+		port: options.port,
+		security: {
+			password: options.password,
+			trustedOrigins: options.trustedOrigins
+		}
+	});
+	const targetUrl = options.targetMeetingId ? buildGranolaMeetingUrl(server.url, options.targetMeetingId) : new URL(server.url);
+	console.log(`Granola Toolkit web workspace listening on ${server.url.href}`);
+	if (targetUrl.href !== server.url.href) console.log(`Focused meeting URL: ${targetUrl.href}`);
+	console.log(`Network mode: ${options.networkMode}`);
+	if (options.password) console.log("Server password protection: enabled");
+	else if (options.networkMode === "lan") console.log("Warning: LAN mode is enabled without a server password");
+	if (options.trustedOrigins.length > 0) console.log(`Trusted origins: ${options.trustedOrigins.join(", ")}`);
+	printWebRoutes();
+	console.log(`Attach: granola attach ${server.url.href}`);
+	if (options.password) console.log("Attach password: add --password <value>");
+	if (options.openBrowser) try {
+		await openExternalUrl(targetUrl);
+	} catch (error) {
+		const message = error instanceof Error ? error.message : String(error);
+		console.error(`failed to open browser automatically: ${message}`);
+		console.error(`open ${targetUrl.href} manually`);
+	}
+	await waitForShutdown(async () => await server.close());
+	return 0;
+}
+//#endregion
+//#region src/commands/meeting.ts
+function meetingHelp() {
+	return `Granola meeting
+
+Usage:
+  granola meeting <list|view|export|notes|transcript|open> [options]
+
+Subcommands:
+  list                List meetings from the Granola API
+  view <id>           Show a single meeting with notes and transcript text
+  export <id>         Export a single meeting as JSON or YAML
+  notes <id>          Show a single meeting's notes
+  transcript <id>     Show a single meeting's transcript
+  open <id>           Start the web workspace focused on one meeting
+
+Options:
+  --cache <path>      Path to Granola cache JSON for transcript data
+  --format <value>    list/view: text, json, yaml; export: json, yaml; notes: markdown, json, yaml, raw; transcript: text, json, yaml, raw
+  --network <mode>    open: local or lan (default: local)
+  --hostname <value>  open: hostname to bind (overrides network default)
+  --limit <n>         Number of meetings for list (default: 20)
+  --open[=true|false] open: launch the browser automatically (default: true)
+  --password <value>  open: optional server password
+  --port <value>      open: port to bind (default: 0 for any available port)
+  --search <query>    Filter list by title, id, or tag
+  --timeout <value>   Request timeout, e.g. 2m, 30s, 120000 (default: 2m)
+  --trusted-origins <v> open: comma-separated extra browser origins to trust
+  --supabase <path>   Path to supabase.json
+  --debug             Enable debug logging
+  --config <path>     Path to .granola.toml
+  -h, --help          Show help
+`;
+}
+function resolveListFormat(value) {
+	switch (value) {
+		case void 0: return "text";
+		case "json":
+		case "text":
+		case "yaml": return value;
+		default: throw new Error("invalid meeting format: expected text, json, or yaml");
+	}
+}
+function resolveViewFormat(value) {
+	switch (value) {
+		case void 0: return "text";
+		case "json":
+		case "text":
+		case "yaml": return value;
+		default: throw new Error("invalid meeting format: expected text, json, or yaml");
+	}
+}
+function resolveExportFormat(value) {
+	switch (value) {
+		case void 0: return "json";
+		case "json":
+		case "yaml": return value;
+		default: throw new Error("invalid meeting export format: expected json or yaml");
+	}
+}
+function resolveNotesFormat(value) {
+	switch (value) {
+		case void 0: return "markdown";
+		case "json":
+		case "markdown":
+		case "raw":
+		case "yaml": return value;
+		default: throw new Error("invalid meeting notes format: expected markdown, json, yaml, or raw");
+	}
+}
+function resolveTranscriptFormat$1(value) {
+	switch (value) {
+		case void 0: return "text";
+		case "json":
+		case "raw":
+		case "text":
+		case "yaml": return value;
+		default: throw new Error("invalid meeting transcript format: expected text, json, yaml, or raw");
+	}
+}
+function parseLimit(value) {
+	if (value === void 0) return 20;
+	if (typeof value !== "string" || !/^\d+$/.test(value)) throw new Error("invalid meeting limit: expected a positive integer");
+	const limit = Number(value);
+	if (!Number.isInteger(limit) || limit < 1) throw new Error("invalid meeting limit: expected a positive integer");
+	return limit;
+}
+const meetingCommand = {
+	description: "Inspect and export individual Granola meetings",
+	flags: {
+		cache: { type: "string" },
+		format: { type: "string" },
+		help: { type: "boolean" },
+		hostname: { type: "string" },
+		limit: { type: "string" },
+		network: { type: "string" },
+		open: { type: "boolean" },
+		password: { type: "string" },
+		port: { type: "string" },
+		search: { type: "string" },
+		timeout: { type: "string" },
+		"trusted-origins": { type: "string" }
+	},
+	help: meetingHelp,
+	name: "meeting",
+	async run({ commandArgs, commandFlags, globalFlags }) {
+		const [action, id] = commandArgs;
+		switch (action) {
+			case "list": return await list(commandFlags, globalFlags);
+			case "view":
+				if (!id) throw new Error("meeting view requires an id");
+				return await view(id, commandFlags, globalFlags);
+			case "export":
+				if (!id) throw new Error("meeting export requires an id");
+				return await exportMeeting(id, commandFlags, globalFlags);
+			case "notes":
+				if (!id) throw new Error("meeting notes requires an id");
+				return await notes(id, commandFlags, globalFlags);
+			case "transcript":
+				if (!id) throw new Error("meeting transcript requires an id");
+				return await transcript(id, commandFlags, globalFlags);
+			case "open":
+				if (!id) throw new Error("meeting open requires an id");
+				return await openMeeting(id, commandFlags, globalFlags);
+			case void 0:
+				console.log(meetingHelp());
+				return 1;
+			default: throw new Error("invalid meeting command: expected list, view, export, notes, transcript, or open");
+		}
+	}
+};
+async function list(commandFlags, globalFlags) {
+	const format = resolveListFormat(commandFlags.format);
+	const limit = parseLimit(commandFlags.limit);
+	const search = typeof commandFlags.search === "string" ? commandFlags.search : void 0;
+	const config = await loadConfig({
+		globalFlags,
+		subcommandFlags: commandFlags
+	});
+	debug(config.debug, "using config", config.configFileUsed ?? "(none)");
+	debug(config.debug, "supabase", config.supabase);
+	debug(config.debug, "cacheFile", config.transcripts.cacheFile || "(none)");
+	debug(config.debug, "timeoutMs", config.notes.timeoutMs);
+	const app = await createGranolaApp(config);
+	debug(config.debug, "authMode", app.getState().auth.mode);
+	console.log("Loading meetings...");
+	const result = await app.listMeetings({
+		limit,
+		search
+	});
+	console.log(result.source === "index" ? "Loaded meetings from the local index" : "Fetched meetings from Granola API");
+	console.log(renderMeetingList(result.meetings, format).trimEnd());
+	return 0;
+}
+async function view(id, commandFlags, globalFlags) {
+	const format = resolveViewFormat(commandFlags.format);
+	const config = await loadConfig({
+		globalFlags,
+		subcommandFlags: commandFlags
+	});
+	debug(config.debug, "using config", config.configFileUsed ?? "(none)");
+	debug(config.debug, "supabase", config.supabase);
+	debug(config.debug, "cacheFile", config.transcripts.cacheFile || "(none)");
+	debug(config.debug, "timeoutMs", config.notes.timeoutMs);
+	const app = await createGranolaApp(config);
+	debug(config.debug, "authMode", app.getState().auth.mode);
+	console.log("Fetching meeting from Granola API...");
+	const result = await app.getMeeting(id);
+	console.log(renderMeetingView(result.meeting, format).trimEnd());
+	return 0;
+}
+async function exportMeeting(id, commandFlags, globalFlags) {
+	const format = resolveExportFormat(commandFlags.format);
+	const config = await loadConfig({
+		globalFlags,
+		subcommandFlags: commandFlags
+	});
+	debug(config.debug, "using config", config.configFileUsed ?? "(none)");
+	debug(config.debug, "supabase", config.supabase);
+	debug(config.debug, "cacheFile", config.transcripts.cacheFile || "(none)");
+	debug(config.debug, "timeoutMs", config.notes.timeoutMs);
+	const app = await createGranolaApp(config);
+	debug(config.debug, "authMode", app.getState().auth.mode);
+	console.log("Fetching meeting from Granola API...");
+	const result = await app.getMeeting(id);
+	console.log(renderMeetingExport(result.meeting, format).trimEnd());
+	return 0;
+}
+async function notes(id, commandFlags, globalFlags) {
+	const format = resolveNotesFormat(commandFlags.format);
+	const config = await loadConfig({
+		globalFlags,
+		subcommandFlags: commandFlags
+	});
+	debug(config.debug, "using config", config.configFileUsed ?? "(none)");
+	debug(config.debug, "supabase", config.supabase);
+	debug(config.debug, "cacheFile", config.transcripts.cacheFile || "(none)");
+	debug(config.debug, "timeoutMs", config.notes.timeoutMs);
+	const app = await createGranolaApp(config);
+	debug(config.debug, "authMode", app.getState().auth.mode);
+	console.log("Fetching meeting from Granola API...");
+	const result = await app.getMeeting(id);
+	console.log(renderMeetingNotes(result.document, format).trimEnd());
+	return 0;
+}
+async function transcript(id, commandFlags, globalFlags) {
+	const format = resolveTranscriptFormat$1(commandFlags.format);
+	const config = await loadConfig({
+		globalFlags,
+		subcommandFlags: commandFlags
+	});
+	debug(config.debug, "using config", config.configFileUsed ?? "(none)");
+	debug(config.debug, "supabase", config.supabase);
+	debug(config.debug, "cacheFile", config.transcripts.cacheFile || "(none)");
+	debug(config.debug, "timeoutMs", config.notes.timeoutMs);
+	const app = await createGranolaApp(config);
+	debug(config.debug, "authMode", app.getState().auth.mode);
+	console.log("Fetching meeting from Granola API...");
+	const result = await app.getMeeting(id, { requireCache: true });
+	const output = renderMeetingTranscript(result.document, result.cacheData, format);
+	if (!output.trim()) throw new Error(`no transcript found for meeting: ${result.document.id}`);
+	console.log(output.trimEnd());
+	return 0;
+}
+async function openMeeting(id, commandFlags, globalFlags) {
+	const config = await loadConfig({
+		globalFlags,
+		subcommandFlags: commandFlags
+	});
+	debug(config.debug, "using config", config.configFileUsed ?? "(none)");
+	debug(config.debug, "supabase", config.supabase);
+	debug(config.debug, "cacheFile", config.transcripts.cacheFile || "(none)");
+	debug(config.debug, "timeoutMs", config.notes.timeoutMs);
+	const app = await createGranolaApp(config, { surface: "web" });
+	debug(config.debug, "authMode", app.getState().auth.mode);
+	console.log("Resolving meeting from Granola API...");
+	const result = await app.getMeeting(id);
+	console.log(`Preparing web workspace for ${result.document.title || result.document.id}...`);
+	return await runGranolaWebWorkspace(app, {
+		...resolveGranolaWebWorkspaceOptions(commandFlags),
+		targetMeetingId: result.document.id
+	});
+}
+//#endregion
+//#region src/commands/notes.ts
+function notesHelp() {
+	return `Granola notes
+
+Usage:
+  granola notes [options]
+
+Options:
+  --format <value>    Output format: markdown, json, yaml, raw (default: markdown)
+  --output <path>     Output directory for note files (default: ./notes)
+  --timeout <value>   Request timeout, e.g. 2m, 30s, 120000 (default: 2m)
+  --supabase <path>   Path to supabase.json
+  --debug             Enable debug logging
+  --config <path>     Path to .granola.toml
+  -h, --help          Show help
+`;
+}
+const notesCommand = {
+	description: "Export Granola notes",
+	flags: {
+		format: { type: "string" },
+		help: { type: "boolean" },
+		output: { type: "string" },
+		timeout: { type: "string" }
+	},
+	help: notesHelp,
+	name: "notes",
+	async run({ commandFlags, globalFlags }) {
+		const config = await loadConfig({
+			globalFlags,
+			subcommandFlags: commandFlags
+		});
+		debug(config.debug, "using config", config.configFileUsed ?? "(none)");
+		debug(config.debug, "supabase", config.supabase);
+		debug(config.debug, "timeoutMs", config.notes.timeoutMs);
+		debug(config.debug, "output", config.notes.output);
+		const format = resolveNoteFormat(commandFlags.format);
+		debug(config.debug, "format", format);
+		const app = await createGranolaApp(config);
+		debug(config.debug, "authMode", app.getState().auth.mode);
+		const result = await app.exportNotes(format);
+		console.log(`✓ Exported ${result.documentCount} notes to ${result.outputDir} (job ${result.job.id})`);
+		debug(config.debug, "notes written", result.written);
+		return 0;
+	}
+};
+function resolveNoteFormat(value) {
+	switch (value) {
+		case void 0: return "markdown";
+		case "json":
+		case "markdown":
+		case "raw":
+		case "yaml": return value;
+		default: throw new Error("invalid notes format: expected markdown, json, yaml, or raw");
+	}
+}
+//#endregion
+//#region src/commands/serve.ts
+function serveHelp() {
+	return `Granola serve
+
+Usage:
+  granola serve [options]
+
+Options:
   --network <mode>        Network mode: local or lan (default: local)
   --hostname <value>      Hostname to bind (overrides network default)
   --port <value>          Port to bind (default: 0 for any available port)
@@ -5744,37 +6159,6 @@ function resolveTranscriptFormat(value) {
 	}
 }
 //#endregion
-//#region src/browser.ts
-const execFileAsync = promisify(execFile);
-function getBrowserOpenCommand(url, platform = process.platform) {
-	const href = String(url);
-	switch (platform) {
-		case "darwin": return {
-			args: [href],
-			file: "open"
-		};
-		case "win32": return {
-			args: [
-				"/c",
-				"start",
-				"",
-				href
-			],
-			file: "cmd"
-		};
-		default: return {
-			args: [href],
-			file: "xdg-open"
-		};
-	}
-}
-async function openExternalUrl(url, options = {}) {
-	const command = getBrowserOpenCommand(url, options.platform);
-	await (options.run ?? (async (file, args) => {
-		await execFileAsync(file, args);
-	}))(command.file, command.args);
-}
-//#endregion
 //#region src/commands/web.ts
 function webHelp() {
 	return `Granola web
@@ -5783,6 +6167,7 @@ Usage:
   granola web [options]
 
 Options:
+  --meeting <id>         Open a specific meeting on load
   --network <mode>        Network mode: local or lan (default: local)
   --hostname <value>      Hostname to bind (overrides network default)
   --port <value>          Port to bind (default: 0 for any available port)
@@ -5814,6 +6199,7 @@ const commands = [
 			cache: { type: "string" },
 			help: { type: "boolean" },
 			hostname: { type: "string" },
+			meeting: { type: "string" },
 			network: { type: "string" },
 			open: { type: "boolean" },
 			password: { type: "string" },
@@ -5833,55 +6219,12 @@ const commands = [
 			debug(config.debug, "cacheFile", config.transcripts.cacheFile || "(none)");
 			debug(config.debug, "timeoutMs", config.notes.timeoutMs);
 			const app = await createGranolaApp(config, { surface: "web" });
-			const networkMode = parseNetworkMode(commandFlags.network);
-			const hostname = resolveServerHostname(networkMode, commandFlags.hostname);
-			const port = parsePort(commandFlags.port);
-			const openBrowser = commandFlags.open !== false;
-			const password = typeof commandFlags.password === "string" && commandFlags.password.trim() ? commandFlags.password : void 0;
-			const trustedOrigins = parseTrustedOrigins(commandFlags["trusted-origins"]);
-			const server = await startGranolaServer(app, {
-				enableWebClient: true,
-				hostname,
-				port,
-				security: {
-					password,
-					trustedOrigins
-				}
+			const options = resolveGranolaWebWorkspaceOptions(commandFlags);
+			const targetMeetingId = typeof commandFlags.meeting === "string" && commandFlags.meeting.trim() ? commandFlags.meeting.trim() : void 0;
+			return await runGranolaWebWorkspace(app, {
+				...options,
+				targetMeetingId
 			});
-			console.log(`Granola Toolkit web workspace listening on ${server.url.href}`);
-			console.log(`Network mode: ${networkMode}`);
-			if (password) console.log("Server password protection: enabled");
-			else if (networkMode === "lan") console.log("Warning: LAN mode is enabled without a server password");
-			if (trustedOrigins.length > 0) console.log(`Trusted origins: ${trustedOrigins.join(", ")}`);
-			console.log("Routes:");
-			console.log("  GET  /");
-			console.log("  GET  /health");
-			console.log("  POST /auth/unlock");
-			console.log("  POST /auth/lock");
-			console.log("  GET  /auth/status");
-			console.log("  GET  /state");
-			console.log("  GET  /events");
-			console.log("  GET  /meetings");
-			console.log("  GET  /meetings/:id");
-			console.log("  GET  /exports/jobs");
-			console.log("  POST /auth/login");
-			console.log("  POST /auth/logout");
-			console.log("  POST /auth/mode");
-			console.log("  POST /auth/refresh");
-			console.log("  POST /exports/notes");
-			console.log("  POST /exports/jobs/:id/rerun");
-			console.log("  POST /exports/transcripts");
-			console.log(`Attach: granola attach ${server.url.href}`);
-			if (password) console.log("Attach password: add --password <value>");
-			if (openBrowser) try {
-				await openExternalUrl(server.url);
-			} catch (error) {
-				const message = error instanceof Error ? error.message : String(error);
-				console.error(`failed to open browser automatically: ${message}`);
-				console.error(`open ${server.url.href} manually`);
-			}
-			await waitForShutdown(async () => await server.close());
-			return 0;
 		}
 	}
 ];

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "granola-toolkit",
-  "version": "0.27.0",
+  "version": "0.29.0",
   "description": "Toolkit for exporting and working with Granola meetings, notes, and transcripts",
   "keywords": [
     "cli",