harvask-cli 0.1.0

package/dist/utils/file-utils.js

@@ -0,0 +1,58 @@
+/**
+ * ファイル関連ユーティリティ（kairon utils/file-utils.ts から流用）。
+ */
+/**
+ * 拡張子から MIME タイプを判定する。
+ */
+export function getMimeType(filename) {
+    const ext = filename.split('.').pop()?.toLowerCase() || '';
+    const mimeTypes = {
+        png: 'image/png',
+        jpg: 'image/jpeg',
+        jpeg: 'image/jpeg',
+        gif: 'image/gif',
+        webp: 'image/webp',
+        svg: 'image/svg+xml',
+        ico: 'image/x-icon',
+        bmp: 'image/bmp',
+        pdf: 'application/pdf',
+        doc: 'application/msword',
+        docx: 'application/vnd.openxmlformats-officedocument.wordprocessingml.document',
+        xls: 'application/vnd.ms-excel',
+        xlsx: 'application/vnd.openxmlformats-officedocument.spreadsheetml.sheet',
+        ppt: 'application/vnd.ms-powerpoint',
+        pptx: 'application/vnd.openxmlformats-officedocument.presentationml.presentation',
+        txt: 'text/plain',
+        csv: 'text/csv',
+        md: 'text/markdown',
+        html: 'text/html',
+        css: 'text/css',
+        js: 'application/javascript',
+        ts: 'application/typescript',
+        json: 'application/json',
+        xml: 'application/xml',
+        yaml: 'application/x-yaml',
+        yml: 'application/x-yaml',
+        zip: 'application/zip',
+        gz: 'application/gzip',
+        tar: 'application/x-tar',
+        mp3: 'audio/mpeg',
+        mp4: 'video/mp4',
+        wav: 'audio/wav',
+    };
+    return mimeTypes[ext] || 'application/octet-stream';
+}
+/**
+ * バイト数を人間可読形式に変換する。
+ */
+export function formatFileSize(bytes) {
+    if (bytes === 0) {
+        return '0 B';
+    }
+    const units = ['B', 'KB', 'MB', 'GB'];
+    const k = 1024;
+    const i = Math.floor(Math.log(bytes) / Math.log(k));
+    const size = bytes / Math.pow(k, i);
+    return `${size.toFixed(i === 0 ? 0 : 1)} ${units[i]}`;
+}
+//# sourceMappingURL=file-utils.js.map

package/dist/utils/file-utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-utils.js","sourceRoot":"","sources":["../../src/utils/file-utils.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH;;GAEG;AACH,MAAM,UAAU,WAAW,CAAC,QAAgB;IAC1C,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;IAC3D,MAAM,SAAS,GAA2B;QACxC,GAAG,EAAE,WAAW;QAChB,GAAG,EAAE,YAAY;QACjB,IAAI,EAAE,YAAY;QAClB,GAAG,EAAE,WAAW;QAChB,IAAI,EAAE,YAAY;QAClB,GAAG,EAAE,eAAe;QACpB,GAAG,EAAE,cAAc;QACnB,GAAG,EAAE,WAAW;QAChB,GAAG,EAAE,iBAAiB;QACtB,GAAG,EAAE,oBAAoB;QACzB,IAAI,EAAE,yEAAyE;QAC/E,GAAG,EAAE,0BAA0B;QAC/B,IAAI,EAAE,mEAAmE;QACzE,GAAG,EAAE,+BAA+B;QACpC,IAAI,EAAE,2EAA2E;QACjF,GAAG,EAAE,YAAY;QACjB,GAAG,EAAE,UAAU;QACf,EAAE,EAAE,eAAe;QACnB,IAAI,EAAE,WAAW;QACjB,GAAG,EAAE,UAAU;QACf,EAAE,EAAE,wBAAwB;QAC5B,EAAE,EAAE,wBAAwB;QAC5B,IAAI,EAAE,kBAAkB;QACxB,GAAG,EAAE,iBAAiB;QACtB,IAAI,EAAE,oBAAoB;QAC1B,GAAG,EAAE,oBAAoB;QACzB,GAAG,EAAE,iBAAiB;QACtB,EAAE,EAAE,kBAAkB;QACtB,GAAG,EAAE,mBAAmB;QACxB,GAAG,EAAE,YAAY;QACjB,GAAG,EAAE,WAAW;QAChB,GAAG,EAAE,WAAW;KACjB,CAAC;IACF,OAAO,SAAS,CAAC,GAAG,CAAC,IAAI,0BAA0B,CAAC;AACtD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,KAAa;IAC1C,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;QAChB,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,KAAK,GAAG,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IACtC,MAAM,CAAC,GAAG,IAAI,CAAC;IACf,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACpD,MAAM,IAAI,GAAG,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACpC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;AACxD,CAAC"}

package/dist/utils/input.js

@@ -0,0 +1,66 @@
+/**
+ * 入力ユーティリティ
+ *
+ * 長文 Markdown / JSON を、リテラル・@file・-（stdin）から読み取る。
+ */
+import { readFileSync } from 'node:fs';
+import { ValidationError } from '../errors/index.js';
+/**
+ * 値を解決する: '-' は stdin、先頭 '@' はファイル、それ以外はリテラル。
+ */
+export function readContentArg(value) {
+    if (value === '-') {
+        return readFileSync(0, 'utf8');
+    }
+    if (value.startsWith('@')) {
+        const path = value.slice(1);
+        try {
+            return readFileSync(path, 'utf8');
+        }
+        catch (e) {
+            throw new ValidationError(`File not found or unreadable: ${path} (${e.message})`);
+        }
+    }
+    return value;
+}
+/**
+ * JSON 引数を解決する（リテラル / @file / -）。
+ */
+export function parseJsonArg(value) {
+    const raw = readContentArg(value);
+    try {
+        return JSON.parse(raw);
+    }
+    catch (e) {
+        throw new ValidationError(`Invalid JSON: ${e.message}`);
+    }
+}
+/**
+ * "1,2,3" のようなカンマ区切りを number[] に変換する。
+ */
+export function parseNumberList(value) {
+    return value
+        .split(',')
+        .map((s) => s.trim())
+        .filter((s) => s !== '')
+        .map((s) => {
+        if (!INTEGER_RE.test(s)) {
+            throw new ValidationError(`Invalid number in list: "${s}"`);
+        }
+        return Number(s);
+    });
+}
+/** 10進整数のみを許可する（'', '0x10', '1e3', '3.0', ' 5 ' などは拒否）。 */
+const INTEGER_RE = /^-?\d+$/;
+/**
+ * 文字列を整数に変換する（commander の引数パーサ向け）。
+ * Number() の緩い変換（16進・指数・空文字を id/page として受理してしまう）を避け、
+ * 10進整数表記のみを受け付ける。
+ */
+export function parseIntArg(value) {
+    if (!INTEGER_RE.test(value)) {
+        throw new ValidationError(`Expected an integer, got "${value}"`);
+    }
+    return Number(value);
+}
+//# sourceMappingURL=input.js.map

package/dist/utils/input.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"input.js","sourceRoot":"","sources":["../../src/utils/input.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAErD;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,KAAa;IAC1C,IAAI,KAAK,KAAK,GAAG,EAAE,CAAC;QAClB,OAAO,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IACjC,CAAC;IACD,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC5B,IAAI,CAAC;YACH,OAAO,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACpC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,IAAI,eAAe,CAAC,iCAAiC,IAAI,KAAM,CAAW,CAAC,OAAO,GAAG,CAAC,CAAC;QAC/F,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,YAAY,CAAC,KAAa;IACxC,MAAM,GAAG,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;IAClC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACzB,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,IAAI,eAAe,CAAC,iBAAkB,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC;IACrE,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,KAAa;IAC3C,OAAO,KAAK;SACT,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;SACvB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACT,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,eAAe,CAAC,4BAA4B,CAAC,GAAG,CAAC,CAAC;QAC9D,CAAC;QACD,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC;IACnB,CAAC,CAAC,CAAC;AACP,CAAC;AAED,2DAA2D;AAC3D,MAAM,UAAU,GAAG,SAAS,CAAC;AAE7B;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAC,KAAa;IACvC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,eAAe,CAAC,6BAA6B,KAAK,GAAG,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;AACvB,CAAC"}

package/dist/utils/issue-resolver.js

@@ -0,0 +1,20 @@
+/**
+ * issue 識別子の解決（数値idはそのまま、キーは search で id に解決）。
+ * issue 本体・子リソース（comment/todo/memory/dependency）で共有。
+ */
+import { API_NS } from '../api-base.js';
+import { resolveProjectId } from './project-resolver.js';
+import { ValidationError } from '../errors/index.js';
+export async function resolveIssueId(client, projectArg, value) {
+    if (/^\d+$/.test(value)) {
+        return parseInt(value, 10);
+    }
+    const pid = await resolveProjectId(client, projectArg ?? {});
+    const res = await client.get(`${API_NS}/projects/${pid}/issues/search?query=${encodeURIComponent(value)}&limit=50`);
+    const match = (res.results || []).find((r) => String(r.key).toUpperCase() === value.toUpperCase());
+    if (!match) {
+        throw new ValidationError(`Issue "${value}" not found. Pass a numeric issue id, or a valid key (see \`harvask issue search\`).`);
+    }
+    return match.id;
+}
+//# sourceMappingURL=issue-resolver.js.map

package/dist/utils/issue-resolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"issue-resolver.js","sourceRoot":"","sources":["../../src/utils/issue-resolver.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC;AACxC,OAAO,EAAE,gBAAgB,EAAmB,MAAM,uBAAuB,CAAC;AAC1E,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAErD,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,MAAwB,EACxB,UAAkC,EAClC,KAAa;IAEb,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC7B,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAAC,MAAM,EAAE,UAAU,IAAI,EAAE,CAAC,CAAC;IAC7D,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,GAAG,CAC1B,GAAG,MAAM,aAAa,GAAG,wBAAwB,kBAAkB,CAAC,KAAK,CAAC,WAAW,CACtF,CAAC;IACF,MAAM,KAAK,GAAG,CAAC,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,CACpC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,WAAW,EAAE,CAC3D,CAAC;IACF,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,eAAe,CACvB,UAAU,KAAK,sFAAsF,CACtG,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC,EAAE,CAAC;AAClB,CAAC"}

package/dist/utils/loopback.js

@@ -0,0 +1,86 @@
+/**
+ * ループバック受け口
+ *
+ * `127.0.0.1:<random>` に一時 HTTP サーバを立て、ブラウザ認可後のリダイレクト
+ * `/callback?request_id=...&code=...` を受け取る。
+ */
+import http from 'node:http';
+/**
+ * コールバックパス（/callback?request_id&code）を解析する純粋関数。
+ */
+export function parseCallback(reqUrl, base = 'http://127.0.0.1') {
+    let u;
+    try {
+        u = new URL(reqUrl, base);
+    }
+    catch {
+        return null;
+    }
+    if (u.pathname !== '/callback') {
+        return null;
+    }
+    const code = u.searchParams.get('code') ?? '';
+    if (!code) {
+        return null;
+    }
+    return { requestId: u.searchParams.get('request_id') ?? '', code };
+}
+const DONE_HTML = `<!doctype html><html lang="ja"><head><meta charset="utf-8">
+<meta name="viewport" content="width=device-width,initial-scale=1"><title>harvask</title></head>
+<body style="margin:0;min-height:100vh;display:flex;align-items:center;justify-content:center;background:#f1f5f9;font-family:system-ui,-apple-system,'Segoe UI',sans-serif;color:#0f172a">
+<div style="text-align:center;background:#fff;border:1px solid #e2e8f0;border-radius:16px;padding:40px 48px;box-shadow:0 10px 30px rgba(15,23,42,.06);max-width:360px">
+<div style="font-size:40px;line-height:1">&#9989;</div>
+<h1 style="font-size:1.125rem;margin:12px 0 6px;font-weight:600">ログインが完了しました</h1>
+<p style="color:#64748b;margin:0;font-size:.875rem">ターミナルに戻ってください。このタブは閉じて構いません。</p>
+</div></body></html>`;
+/**
+ * ループバックサーバを起動し、redirectUri と callback 待受を返す。
+ */
+export async function startLoopback() {
+    const server = http.createServer();
+    await new Promise((resolve, reject) => {
+        server.once('error', reject);
+        server.listen(0, '127.0.0.1', () => resolve());
+    });
+    const port = server.address().port;
+    const redirectUri = `http://127.0.0.1:${port}/callback`;
+    let resolveResult;
+    const result = new Promise((res) => {
+        resolveResult = res;
+    });
+    // 期待する request_id（/cli/auth/start の戻り値）。CSRF 的な偽コールバック対策。
+    let expectedRequestId;
+    function expectRequestId(id) {
+        expectedRequestId = id;
+    }
+    server.on('request', (req, res) => {
+        const parsed = req.url ? parseCallback(req.url, redirectUri) : null;
+        // このログイン試行の request_id と完全一致しないコールバックは無視する（空・欠落も拒否）。
+        // 正規サーバのリダイレクトは常に request_id を含むため、ローカルの悪意あるページ等が
+        // code を投げ込んでも正しい request_id を推測できず弾かれる（ログインCSRF対策）。
+        const mismatched = parsed !== null &&
+            expectedRequestId !== undefined &&
+            parsed.requestId !== expectedRequestId;
+        if (!parsed || mismatched) {
+            res.writeHead(404, { 'Content-Type': 'text/plain' });
+            res.end('not found');
+            return;
+        }
+        res.writeHead(200, { 'Content-Type': 'text/html; charset=utf-8' });
+        res.end(DONE_HTML);
+        resolveResult(parsed);
+    });
+    function wait(timeoutMs = 5 * 60 * 1000) {
+        return Promise.race([
+            result,
+            new Promise((_, rej) => setTimeout(() => rej(new Error('Timed out waiting for browser authorization')), timeoutMs)),
+        ]);
+    }
+    function close() {
+        // keep-alive 接続が残るとプロセスが終了しないため、明示的に全接続を閉じる
+        server.closeAllConnections?.();
+        server.close();
+    }
+    return { redirectUri, expectRequestId, wait, close };
+}
+//# sourceMappingURL=loopback.js.map

package/dist/utils/loopback.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"loopback.js","sourceRoot":"","sources":["../../src/utils/loopback.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,IAAI,MAAM,WAAW,CAAC;AAgB7B;;GAEG;AACH,MAAM,UAAU,aAAa,CAAC,MAAc,EAAE,IAAI,GAAG,kBAAkB;IACrE,IAAI,CAAM,CAAC;IACX,IAAI,CAAC;QACH,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC,CAAC,QAAQ,KAAK,WAAW,EAAE,CAAC;QAC/B,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,IAAI,GAAG,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IAC9C,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC;AACrE,CAAC;AAED,MAAM,SAAS,GAAG;;;;;;;qBAOG,CAAC;AAEtB;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa;IACjC,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;IAEnC,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC7B,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,MAAM,IAAI,GAAI,MAAM,CAAC,OAAO,EAAkB,CAAC,IAAI,CAAC;IACpD,MAAM,WAAW,GAAG,oBAAoB,IAAI,WAAW,CAAC;IAExD,IAAI,aAA0C,CAAC;IAC/C,MAAM,MAAM,GAAG,IAAI,OAAO,CAAiB,CAAC,GAAG,EAAE,EAAE;QACjD,aAAa,GAAG,GAAG,CAAC;IACtB,CAAC,CAAC,CAAC;IAEH,0DAA0D;IAC1D,IAAI,iBAAqC,CAAC;IAC1C,SAAS,eAAe,CAAC,EAAU;QACjC,iBAAiB,GAAG,EAAE,CAAC;IACzB,CAAC;IAED,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAChC,MAAM,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACpE,qDAAqD;QACrD,kDAAkD;QAClD,qDAAqD;QACrD,MAAM,UAAU,GACd,MAAM,KAAK,IAAI;YACf,iBAAiB,KAAK,SAAS;YAC/B,MAAM,CAAC,SAAS,KAAK,iBAAiB,CAAC;QACzC,IAAI,CAAC,MAAM,IAAI,UAAU,EAAE,CAAC;YAC1B,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,YAAY,EAAE,CAAC,CAAC;YACrD,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QACD,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,0BAA0B,EAAE,CAAC,CAAC;QACnE,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACnB,aAAa,CAAC,MAAM,CAAC,CAAC;IACxB,CAAC,CAAC,CAAC;IAEH,SAAS,IAAI,CAAC,SAAS,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI;QACrC,OAAO,OAAO,CAAC,IAAI,CAAC;YAClB,MAAM;YACN,IAAI,OAAO,CAAiB,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,CACrC,UAAU,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC,EAAE,SAAS,CAAC,CAC3F;SACF,CAAC,CAAC;IACL,CAAC;IAED,SAAS,KAAK;QACZ,4CAA4C;QAC3C,MAA+C,CAAC,mBAAmB,EAAE,EAAE,CAAC;QACzE,MAAM,CAAC,KAAK,EAAE,CAAC;IACjB,CAAC;IAED,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;AACvD,CAAC"}

package/dist/utils/pkce.js

@@ -0,0 +1,20 @@
+/**
+ * PKCE (RFC 7636) — S256
+ */
+import { randomBytes, createHash } from 'node:crypto';
+export function base64url(buf) {
+    return buf.toString('base64').replace(/\+/g, '-').replace(/\//g, '_').replace(/=+$/, '');
+}
+/**
+ * code_verifier を生成する（base64url, 64文字程度）。
+ */
+export function generateVerifier() {
+    return base64url(randomBytes(48));
+}
+/**
+ * code_challenge = base64url(sha256(verifier))（S256）。純粋関数。
+ */
+export function challengeFor(verifier) {
+    return base64url(createHash('sha256').update(verifier).digest());
+}
+//# sourceMappingURL=pkce.js.map

package/dist/utils/pkce.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pkce.js","sourceRoot":"","sources":["../../src/utils/pkce.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEtD,MAAM,UAAU,SAAS,CAAC,GAAW;IACnC,OAAO,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AAC3F,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB;IAC9B,OAAO,SAAS,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC;AACpC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,YAAY,CAAC,QAAgB;IAC3C,OAAO,SAAS,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;AACnE,CAAC"}

package/dist/utils/project-resolver.js

@@ -0,0 +1,63 @@
+/**
+ * Project Resolver
+ *
+ * project_key から project_id を解決するユーティリティ（セッション内キャッシュ付き）。
+ * kairon MCP (mcp-servers/kairon/src/utils/project-resolver.ts) から流用。
+ */
+import { ApiClientError } from '../api-client.js';
+import { API_NS } from '../api-base.js';
+const projectKeyCache = new Map();
+/**
+ * project_id または project_key からプロジェクトIDを解決する。
+ *
+ * @throws ProjectIdentifierRequiredError どちらも未指定の場合
+ * @throws ProjectKeyNotFoundError キーが見つからない場合
+ */
+export async function resolveProjectId(apiClient, arg) {
+    const projectId = arg.id;
+    const projectKey = arg.key;
+    // 1. project_id 優先
+    if (projectId !== undefined && projectId !== null) {
+        return projectId;
+    }
+    // 2. project_key を API で解決（キャッシュあり）
+    if (projectKey !== undefined && projectKey !== null && projectKey.trim() !== '') {
+        const cacheKey = projectKey.toUpperCase();
+        const cached = projectKeyCache.get(cacheKey);
+        if (cached !== undefined) {
+            return cached;
+        }
+        try {
+            const response = await apiClient.get(`${API_NS}/projects/resolve?key=${encodeURIComponent(projectKey)}`);
+            projectKeyCache.set(cacheKey, response.project_id);
+            return response.project_id;
+        }
+        catch (error) {
+            if (error instanceof ApiClientError && error.statusCode === 404) {
+                throw new ProjectKeyNotFoundError(`プロジェクトキー "${projectKey}" が見つかりませんでした。`);
+            }
+            throw error;
+        }
+    }
+    // 3. どちらも未指定
+    throw new ProjectIdentifierRequiredError('プロジェクトを指定してください（-p, --project に key または id）。');
+}
+/**
+ * キャッシュをクリア（テスト用）
+ */
+export function clearProjectKeyCache() {
+    projectKeyCache.clear();
+}
+export class ProjectKeyNotFoundError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'ProjectKeyNotFoundError';
+    }
+}
+export class ProjectIdentifierRequiredError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'ProjectIdentifierRequiredError';
+    }
+}
+//# sourceMappingURL=project-resolver.js.map

package/dist/utils/project-resolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"project-resolver.js","sourceRoot":"","sources":["../../src/utils/project-resolver.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAoB,cAAc,EAAE,MAAM,kBAAkB,CAAC;AACpE,OAAO,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC;AAGxC,MAAM,eAAe,GAAwB,IAAI,GAAG,EAAE,CAAC;AAOvD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,SAA2B,EAC3B,GAAe;IAEf,MAAM,SAAS,GAAG,GAAG,CAAC,EAAE,CAAC;IACzB,MAAM,UAAU,GAAG,GAAG,CAAC,GAAG,CAAC;IAE3B,mBAAmB;IACnB,IAAI,SAAS,KAAK,SAAS,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;QAClD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,oCAAoC;IACpC,IAAI,UAAU,KAAK,SAAS,IAAI,UAAU,KAAK,IAAI,IAAI,UAAU,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAChF,MAAM,QAAQ,GAAG,UAAU,CAAC,WAAW,EAAE,CAAC;QAC1C,MAAM,MAAM,GAAG,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC7C,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,GAAG,CAClC,GAAG,MAAM,yBAAyB,kBAAkB,CAAC,UAAU,CAAC,EAAE,CACnE,CAAC;YACF,eAAe,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAC;YACnD,OAAO,QAAQ,CAAC,UAAU,CAAC;QAC7B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,cAAc,IAAI,KAAK,CAAC,UAAU,KAAK,GAAG,EAAE,CAAC;gBAChE,MAAM,IAAI,uBAAuB,CAAC,aAAa,UAAU,gBAAgB,CAAC,CAAC;YAC7E,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,aAAa;IACb,MAAM,IAAI,8BAA8B,CACtC,8CAA8C,CAC/C,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,oBAAoB;IAClC,eAAe,CAAC,KAAK,EAAE,CAAC;AAC1B,CAAC;AAED,MAAM,OAAO,uBAAwB,SAAQ,KAAK;IAChD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;IACxC,CAAC;CACF;AAED,MAAM,OAAO,8BAA+B,SAAQ,KAAK;IACvD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,gCAAgC,CAAC;IAC/C,CAAC;CACF"}

package/dist/utils/prompt.js

@@ -0,0 +1,17 @@
+/**
+ * 対話プロンプト（TTY）
+ */
+import readline from 'node:readline';
+/**
+ * 通常の入力プロンプト。
+ */
+export function prompt(question) {
+    return new Promise((resolve) => {
+        const rl = readline.createInterface({ input: process.stdin, output: process.stderr });
+        rl.question(question, (answer) => {
+            rl.close();
+            resolve(answer);
+        });
+    });
+}
+//# sourceMappingURL=prompt.js.map

package/dist/utils/prompt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompt.js","sourceRoot":"","sources":["../../src/utils/prompt.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,QAAQ,MAAM,eAAe,CAAC;AAErC;;GAEG;AACH,MAAM,UAAU,MAAM,CAAC,QAAgB;IACrC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,EAAE,GAAG,QAAQ,CAAC,eAAe,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QACtF,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,EAAE;YAC/B,EAAE,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,CAAC,MAAM,CAAC,CAAC;QAClB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/utils/upload.js

@@ -0,0 +1,32 @@
+/**
+ * マルチパートアップロード用 FormData 構築。
+ */
+import { readFileSync } from 'node:fs';
+import { basename } from 'node:path';
+import { ValidationError } from '../errors/index.js';
+import { getMimeType } from './file-utils.js';
+/**
+ * ローカルファイルと追加フィールドから FormData を作る。
+ * フィールド名 `file` でファイルを添付する（API 仕様）。
+ */
+export function buildFileFormData(filePath, fields = {}) {
+    let buffer;
+    try {
+        buffer = readFileSync(filePath);
+    }
+    catch (e) {
+        throw new ValidationError(`File not found or unreadable: ${filePath} (${e.message})`);
+    }
+    const name = basename(filePath);
+    const form = new FormData();
+    // undici の FormData は Blob + filename を受け付ける（Buffer を Uint8Array ビューに包む）。
+    const blob = new Blob([new Uint8Array(buffer)], { type: getMimeType(name) });
+    form.append('file', blob, name);
+    for (const [key, value] of Object.entries(fields)) {
+        if (value !== undefined && value !== null) {
+            form.append(key, String(value));
+        }
+    }
+    return form;
+}
+//# sourceMappingURL=upload.js.map

package/dist/utils/upload.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"upload.js","sourceRoot":"","sources":["../../src/utils/upload.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACrC,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAE9C;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAC/B,QAAgB,EAChB,SAAsD,EAAE;IAExD,IAAI,MAAc,CAAC;IACnB,IAAI,CAAC;QACH,MAAM,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;IAClC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,IAAI,eAAe,CAAC,iCAAiC,QAAQ,KAAM,CAAW,CAAC,OAAO,GAAG,CAAC,CAAC;IACnG,CAAC;IACD,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAChC,MAAM,IAAI,GAAG,IAAI,QAAQ,EAAE,CAAC;IAC5B,0EAA0E;IAC1E,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC7E,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IAChC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAClD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YAC1C,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAClC,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/package.json

@@ -0,0 +1,44 @@
+{
+  "name": "harvask-cli",
+  "version": "0.1.0",
+  "description": "Command-line client for a harvask tenant, built for coding agents",
+  "type": "module",
+  "bin": {
+    "harvask": "dist/index.js"
+  },
+  "files": [
+    "dist",
+    "skills",
+    "README.md"
+  ],
+  "engines": {
+    "node": ">=18.0.0"
+  },
+  "scripts": {
+    "clean": "rm -rf dist",
+    "gen:agents": "node scripts/gen-agent-docs.mjs",
+    "build": "npm run clean && npm run gen:agents && tsc -p tsconfig.build.json && chmod +x dist/index.js",
+    "build:test": "npm run clean && tsc && chmod +x dist/index.js",
+    "dev": "tsc -p tsconfig.build.json --watch",
+    "test": "npm run build:test && node --test \"dist/__tests__/**/*.test.js\"",
+    "prepublishOnly": "npm run build"
+  },
+  "keywords": [
+    "cli",
+    "harvask",
+    "tenant",
+    "ai-worker",
+    "coding-agent"
+  ],
+  "author": "wown",
+  "license": "MIT",
+  "dependencies": {
+    "commander": "^12.1.0",
+    "env-paths": "^3.0.0",
+    "open": "^10.1.0"
+  },
+  "devDependencies": {
+    "@types/node": "^22.10.0",
+    "typescript": "^5.6.0"
+  }
+}

package/skills/harvask/AGENTS.md

@@ -0,0 +1,131 @@
+<!-- Generated from skills/harvask/SKILL.md by scripts/gen-agent-docs.mjs. Edit that file, then run `npm run gen:agents`. Do not edit skills/harvask/AGENTS.md by hand. -->
+
+# harvask CLI
+
+`harvask` is a command-line client for a harvask tenant, designed for coding
+agents: output is JSON by default and errors are structured as
+`Error / Why / Hint`.
+
+## First: authenticate
+
+Login is browser-based (no password typed into the CLI):
+
+```
+harvask login --tenant <tenant-domain>              # opens browser, approve, done (loopback)
+harvask login --tenant <tenant-domain> --no-browser # print URL, approve, paste the code (remote/headless)
+```
+
+You must be logged into the web app to approve. Tokens are stored per tenant
+under your OS config dir (mode 0600). Check status with `harvask whoami`.
+Log out with `harvask logout`.
+
+If a command fails with an auth error (exit code 3), run `harvask login` again.
+
+## Core workflow: discover → fetch → act
+
+1. **discover** the target
+   ```
+   harvask project list
+   harvask issue search -p PRJ "login bug"
+   ```
+2. **fetch** details
+   ```
+   harvask issue show -p PRJ 1234 --comments
+   harvask wiki show -p PRJ --slug api-documentation
+   ```
+3. **act**
+   ```
+   harvask issue create -p PRJ --title "Fix login" --type bug --priority high
+   harvask issue status -p PRJ 1234 in_progress
+   harvask issue assign -p PRJ 1234 --assignee-id 42
+   ```
+
+## project key vs id
+
+- Humans know the **key** (e.g. `PRJ`); the API uses a numeric **id**.
+- Every project-scoped command accepts either via `-p, --project <key|id>`
+  (`-p PRJ` or `-p 5`). The CLI resolves keys to ids automatically.
+- For `issue show/update/status/assign`, the issue argument accepts a numeric id
+  or a key like `PRJ-12` (resolved via search).
+- New to a tenant? Start with `harvask project list`.
+
+## Reading output
+
+- Default output is pretty JSON.
+- `--data` prints only the payload (unwraps `{issues:[...]}` → the array).
+- `--raw` prints the unformatted response.
+- `--json` forces machine-readable JSON (no color), even in a terminal.
+- Results go to stdout; errors go to stderr.
+
+## Long input (Markdown / JSON)
+
+- `--content` accepts a literal string, `@file.md` (read a file), or `-` (stdin).
+  ```
+  harvask wiki create -p PRJ --title "Docs" --content @docs.md
+  harvask note create --content -    # read from stdin
+  ```
+- The `api` escape hatch accepts a JSON body the same way (`@body.json`, `-`).
+
+## Common errors and what to do
+
+- **exit 3 / 401** — token invalid or expired → `harvask login --tenant <domain>`.
+- **403 tenant_mismatch** — token is for another tenant → use `--profile <domain>`
+  or re-login against the correct tenant.
+- **403 not_project_member** — you are not a member of that project → pick a
+  project from `harvask project list` or ask an admin to add you.
+- **404** — wrong id/key → verify with `harvask project list` / `harvask issue search`.
+- **422** — validation: read `Why:` for the offending field
+  (e.g. `issue_type`/`priority` enums, `title` ≤ 255, wiki/note content ≤ 500000).
+
+## Escape hatch (anything not wrapped)
+
+`harvask api <method> <path> [json]` calls any tenant API endpoint directly,
+for anything not covered by a dedicated command. Relative paths are namespaced
+automatically; absolute URLs and `..` are rejected.
+
+```
+harvask api GET projects
+harvask api GET projects/5/issues?status=open
+harvask api POST notes '{"content":"hi","is_pinned":true}'
+harvask api POST projects/5/issues @issue.json
+```
+
+## Command summary
+
+```
+harvask login | logout | whoami
+
+# project-scoped (pass -p <key|id>)
+harvask project        list | show <key|id> | create | members list|add|remove <key|id>
+harvask issue          list | show | create | update | search | status | assign
+harvask issue comment      list | create
+harvask issue todo         list | show | create | update | delete
+harvask issue memory       list | show | create | update | delete
+harvask issue dependency   list | add | remove
+harvask issue bulk-create | bulk-update      (--items @file.json [--atomic])
+harvask wiki           list | show | create | update | search | history | delete | bulk-create | bulk-update
+harvask milestone      list | create | update
+harvask workflow       list | show | create | update
+harvask scheduled-task list | show | create | update
+harvask file           search | stats
+harvask storage        search | stats | upload | folder | move | download | content
+harvask preview-config show | update
+harvask site-credential                       # list browser credentials
+
+# personal / tenant-wide (no -p)
+harvask note        list | show | create | update | delete | search
+harvask calendar    list | show | create | update | delete
+harvask global-wiki list | show | create | update | search | delete | bulk-create | bulk-update
+harvask user        list | search
+harvask chat        history <chatId> | search <q> | list | thread <kind> <uuid>
+harvask attachment  upload | download <id>
+
+harvask api <method> <path> [json]            # escape hatch
+```
+
+Notes:
+- `personal-wiki` is intentionally not available via the CLI.
+- File/binary: `storage upload` / `attachment upload` take `--file <path>`;
+  `storage download` / `attachment download` save with `--out <path>`.
+
+Use `harvask <command> --help` for options, examples, and prerequisites.