halfcycle 0.3.10 → 0.3.12

package/dist/project-name.d.ts

@@ -0,0 +1,52 @@
+/**
+ * A NAME FOR THE PROJECT THIS INSTALL IS CREATING, derived rather than asked for.
+ *
+ * Every project created by this CLI was called `Untitled project`: the create call
+ * sent no name, so the plane assigned its neutral default, and a person with two
+ * projects got two identical rows with nothing to tell them apart. The install
+ * already knows two things that are almost always the answer — the git remote and
+ * the directory — and neither costs a prompt in a flow that is deliberately quiet.
+ *
+ * **THE NAME THIS PRODUCES IS A GUESS, AND IT TRAVELS AS ONE.** It is sent in the
+ * create call's `derivedName` field, never `name`: a guess and a stated name are
+ * different claims, and the plane records which is which so that a name a person
+ * actually states later — when the method asks what the product is called —
+ * replaces this one. A guess that arrived in the field for stated names would
+ * outrank the answer forever, which is worse than the placeholder it replaces.
+ *
+ * `undefined` is a legitimate answer here (no remote, an unreadable path). The
+ * caller sends nothing and the plane's own default applies — this file never
+ * invents a placeholder of its own, because that string belongs to the plane.
+ *
+ * INV-001: Node builtins and bundle-internal modules only.
+ */
+/**
+ * The repository name inside a git remote URL, or `undefined` if there is not one
+ * to read.
+ *
+ * Both remote forms are handled because both are ordinary: the HTTPS/SSH URL form
+ * (`https://host/org/repo.git`, `ssh://git@host/org/repo`) and the scp-like form
+ * (`git@host:org/repo.git`), which is not a URL at all and which a URL parser
+ * silently mangles. The ORGANISATION is deliberately dropped — `acme-checkout` is
+ * a project name a person recognises; `AcmeCorp/acme-checkout` is a coordinate,
+ * and the console has a place for coordinates and this is not it.
+ *
+ * Exported for its own test: the parsing is the part with edge cases, and testing
+ * it through a git repository fixture would test git.
+ */
+export declare function repositoryNameFromRemote(remote: string): string | undefined;
+/**
+ * The name to offer for the project being installed into `targetRepoRoot` — the
+ * git remote's repository name, else the directory's own name, else `undefined`.
+ *
+ * THE REMOTE IS PREFERRED OVER THE DIRECTORY because it is the name the project is
+ * known by rather than the name one machine happens to have checked it out under:
+ * `~/work/tmp2` and `~/src/checkout` are the same project, and a developer with
+ * several clones would otherwise get several differently-named projects.
+ *
+ * The remote is read through `identity.ts`'s `readRemote`, which is the one home
+ * for asking git that question in this package — this file adds no second
+ * subprocess and no second failure-swallowing.
+ */
+export declare function deriveProjectName(targetRepoRoot: string): string | undefined;
+//# sourceMappingURL=project-name.d.ts.map

package/dist/project-name.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"project-name.d.ts","sourceRoot":"","sources":["../src/project-name.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAsBH;;;;;;;;;;;;;GAaG;AACH,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAc3E;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,iBAAiB,CAAC,cAAc,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAO5E"}

package/dist/resolve-credential.d.ts

@@ -58,12 +58,32 @@ export interface ResolvedCredential {
     credential: string;
     source: CredentialSource;
     /**
-     * The account the credential speaks for, when it is known. ABSENT for the
-     * environment arm — a bare variable carries no identity and this CLI does not go
-     * and ask, because the only way to find out is to spend a call, and control will
-     * tell us by accepting or refusing it a moment later anyway.
+     * The account the credential speaks for, when it is known. ABSENT from what THIS
+     * RESOLVER returns on the environment arm — a bare variable carries no identity and
+     * the resolver does not go and ask, because the only way to find out is to spend a
+     * call, and control will tell us by accepting or refusing it a moment later anyway.
+     *
+     * `confirmActingIdentity` DOES spend that call, so the credential it hands back may
+     * carry an id on any arm, including this one — see `actingAs` there. That is the value
+     * the install records on disk, and it is control's answer rather than this machine's
+     * memory of which account a stored credential was written for.
      */
     accountId?: string;
+    /**
+     * When THIS MACHINE stored the credential, UTC ISO-8601 — present on the `stored`
+     * arm and on nothing else (W-2, #803).
+     *
+     * It is here because it is the fact that makes a reused sign-in recognisable to a
+     * human. "This install will act as account 0987fb25…" is a sentence a person cannot
+     * check; "…saved on this machine on 30 August" is one they can, because they either
+     * signed in that day or somebody else did. A fresh handoff does not carry it (the
+     * person is watching it happen) and the environment arm has none to carry.
+     *
+     * INFORMATION, NEVER A GATE — the same rule the store's `expiresAt` carries. Nothing
+     * may refuse or expire a credential on this value; whether a credential is live is
+     * control's question, answered with a 401.
+     */
+    signedInAt?: string;
 }
 export interface ResolveOptions extends SignInDeps {
     /** The process environment to read `HALFCYCLE_TOKEN` and `CI` from. */
@@ -82,6 +102,34 @@ export interface ResolveOptions extends SignInDeps {
  * back through the browser for a reason that had nothing to do with signing in.
  */
 export declare function obtainCredential(serviceUrl: string, opts?: ResolveOptions): Promise<ResolvedCredential>;
+/**
+ * The person looked at the account this machine had saved and said *not that one* —
+ * forget it and sign in through the browser (W-2, #803).
+ *
+ * ---------------------------------------------------------------------------
+ * IT IS NOT `replaceRefusedCredential`, AND THE DIFFERENCE IS THE ONLY REASON IT IS A
+ * SEPARATE FUNCTION. That one is driven by CONTROL refusing a value; this one is driven
+ * by a HUMAN refusing an identity. The mechanics coincide today — forget, sign in,
+ * store — and they are shared below rather than copied, but the decisions do not:
+ *
+ *   - The refusal path must NOT re-sign-in for an environment credential or a
+ *     seconds-old one, because both loop. Neither is true here: this is only ever
+ *     reached from a credential a person was shown and declined, and a person declining
+ *     an account is a reason to offer them a different one every single time.
+ *   - The refusal path is a recovery the CLI performs on its own initiative. This one is
+ *     an instruction, and refusing to carry it out because of a rule about loops would
+ *     leave a developer holding the exact identity they just said was wrong.
+ *
+ * Folding the two into one function with a flag was the alternative, and the flag would
+ * have been named "the human asked" — which is the whole of the difference, so it is
+ * two named functions instead.
+ *
+ * FORGETTING FIRST IS DELIBERATE. If the handoff is declined or times out, the machine
+ * is left with NO saved sign-in rather than with the one the person rejected. The next
+ * run then asks the browser, which is the state they were trying to reach; keeping the
+ * old value would silently restore the identity they refused.
+ */
+export declare function switchAccount(serviceUrl: string, opts?: ResolveOptions): Promise<ResolvedCredential>;
 /**
  * Control refused the credential we presented. Replace it, if replacing it is a
  * thing this CLI is allowed to do.

package/dist/resolve-credential.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"resolve-credential.d.ts","sourceRoot":"","sources":["../src/resolve-credential.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8CG;AAOH,OAAO,EAAU,KAAK,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAE7D,wDAAwD;AACxD,MAAM,MAAM,gBAAgB;AAC1B,+EAA+E;AAC7E,aAAa;AACf,uEAAuE;GACrE,QAAQ;AACV,oEAAoE;GAClE,iBAAiB,CAAC;AAEtB,MAAM,WAAW,kBAAkB;IACjC,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,gBAAgB,CAAC;IACzB;;;;;OAKG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,cAAe,SAAQ,UAAU;IAChD,uEAAuE;IACvE,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,qFAAqF;IACrF,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED;;;;;;;;;GASG;AACH,wBAAsB,gBAAgB,CACpC,UAAU,EAAE,MAAM,EAClB,IAAI,GAAE,cAAmB,GACxB,OAAO,CAAC,kBAAkB,CAAC,CA0B7B;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,wBAAsB,wBAAwB,CAC5C,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,kBAAkB,EAC3B,IAAI,GAAE,cAAmB,GACxB,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAmBpC;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,gBAAgB,GAAG,MAAM,CAqBxE"}
+{"version":3,"file":"resolve-credential.d.ts","sourceRoot":"","sources":["../src/resolve-credential.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8CG;AAOH,OAAO,EAAU,KAAK,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAE7D,wDAAwD;AACxD,MAAM,MAAM,gBAAgB;AAC1B,+EAA+E;AAC7E,aAAa;AACf,uEAAuE;GACrE,QAAQ;AACV,oEAAoE;GAClE,iBAAiB,CAAC;AAEtB,MAAM,WAAW,kBAAkB;IACjC,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,gBAAgB,CAAC;IACzB;;;;;;;;;;OAUG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;;;;;;;;;;OAaG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,cAAe,SAAQ,UAAU;IAChD,uEAAuE;IACvE,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,qFAAqF;IACrF,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED;;;;;;;;;GASG;AACH,wBAAsB,gBAAgB,CACpC,UAAU,EAAE,MAAM,EAClB,IAAI,GAAE,cAAmB,GACxB,OAAO,CAAC,kBAAkB,CAAC,CAiB7B;AAqCD;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,wBAAsB,aAAa,CACjC,UAAU,EAAE,MAAM,EAClB,IAAI,GAAE,cAAmB,GACxB,OAAO,CAAC,kBAAkB,CAAC,CAG7B;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,wBAAsB,wBAAwB,CAC5C,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,kBAAkB,EAC3B,IAAI,GAAE,cAAmB,GACxB,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAKpC;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,gBAAgB,GAAG,MAAM,CAqBxE"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "halfcycle",
-  "version": "0.3.10",
+  "version": "0.3.12",
   "description": "Your coding agents are the engineers. Halfcycle is the rest of the team: product owner, architect, planner and independent reviewer for Claude Code.",
   "keywords": [
     "claude",