helixmind 0.5.4

package/dist/cli/agent/undo.js

@@ -0,0 +1,48 @@
+import { readFileSync, writeFileSync, existsSync } from 'node:fs';
+export class UndoStack {
+    stack = [];
+    maxSize = 50;
+    push(entry) {
+        this.stack.push(entry);
+        if (this.stack.length > this.maxSize) {
+            this.stack.shift();
+        }
+    }
+    /**
+     * Undo the last n changes. Returns the number of changes undone.
+     */
+    undo(count = 1) {
+        const entries = [];
+        const toUndo = Math.min(count, this.stack.length);
+        for (let i = 0; i < toUndo; i++) {
+            const entry = this.stack.pop();
+            if (entry.originalContent === null) {
+                // File was created — we can't delete it (too dangerous), just note it
+                entries.push(entry);
+            }
+            else {
+                writeFileSync(entry.path, entry.originalContent, 'utf-8');
+                entries.push(entry);
+            }
+        }
+        return { undone: entries.length, entries };
+    }
+    /**
+     * Get all undo-able entries (most recent first).
+     */
+    list() {
+        return [...this.stack].reverse();
+    }
+    /**
+     * Capture the current state of a file before modification.
+     */
+    static captureState(path) {
+        if (!existsSync(path))
+            return null;
+        return readFileSync(path, 'utf-8');
+    }
+    get size() {
+        return this.stack.length;
+    }
+}
+//# sourceMappingURL=undo.js.map

package/dist/cli/agent/undo.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"undo.js","sourceRoot":"","sources":["../../../src/cli/agent/undo.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAWlE,MAAM,OAAO,SAAS;IACZ,KAAK,GAAgB,EAAE,CAAC;IACxB,OAAO,GAAG,EAAE,CAAC;IAErB,IAAI,CAAC,KAAgB;QACnB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACvB,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;YACrC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACrB,CAAC;IACH,CAAC;IAED;;OAEG;IACH,IAAI,CAAC,QAAgB,CAAC;QACpB,MAAM,OAAO,GAAgB,EAAE,CAAC;QAChC,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAElD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAChC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAG,CAAC;YAChC,IAAI,KAAK,CAAC,eAAe,KAAK,IAAI,EAAE,CAAC;gBACnC,sEAAsE;gBACtE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACtB,CAAC;iBAAM,CAAC;gBACN,aAAa,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC;gBAC1D,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACtB,CAAC;QACH,CAAC;QAED,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;IAC7C,CAAC;IAED;;OAEG;IACH,IAAI;QACF,OAAO,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;IACnC,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,YAAY,CAAC,IAAY;QAC9B,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QACnC,OAAO,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACrC,CAAC;IAED,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;IAC3B,CAAC;CACF"}

package/dist/cli/auth/callback-server.d.ts

@@ -0,0 +1,15 @@
+export interface CallbackResult {
+    apiKey: string;
+    state: string;
+    userId?: string;
+    email?: string;
+    plan?: string;
+}
+export interface CallbackServer {
+    port: number;
+    state: string;
+    waitForCallback(): Promise<CallbackResult>;
+    close(): void;
+}
+export declare function startCallbackServer(timeoutMs?: number): Promise<CallbackServer>;
+//# sourceMappingURL=callback-server.d.ts.map

package/dist/cli/auth/callback-server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"callback-server.d.ts","sourceRoot":"","sources":["../../../src/cli/auth/callback-server.ts"],"names":[],"mappings":"AAQA,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,eAAe,IAAI,OAAO,CAAC,cAAc,CAAC,CAAC;IAC3C,KAAK,IAAI,IAAI,CAAC;CACf;AAsED,wBAAgB,mBAAmB,CAAC,SAAS,SAAU,GAAG,OAAO,CAAC,cAAc,CAAC,CAyGhF"}

package/dist/cli/auth/callback-server.js

@@ -0,0 +1,169 @@
+/**
+ * Temporary localhost HTTP server for CLI login callback.
+ * Receives the API key from the webapp after user authorization.
+ */
+import { createServer } from 'node:http';
+import { randomBytes } from 'node:crypto';
+import { URL } from 'node:url';
+const SUCCESS_HTML = `<!DOCTYPE html>
+<html lang="en">
+<head>
+  <meta charset="utf-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1">
+  <title>HelixMind CLI — Authorized</title>
+  <style>
+    * { margin: 0; padding: 0; box-sizing: border-box; }
+    body {
+      background: #050510;
+      color: #e0e0e0;
+      font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', sans-serif;
+      display: flex;
+      align-items: center;
+      justify-content: center;
+      min-height: 100vh;
+    }
+    .card {
+      text-align: center;
+      padding: 3rem;
+      border: 1px solid rgba(0, 212, 255, 0.2);
+      border-radius: 16px;
+      background: rgba(0, 212, 255, 0.03);
+      max-width: 420px;
+    }
+    .icon { font-size: 3rem; margin-bottom: 1rem; }
+    h1 { color: #00d4ff; font-size: 1.5rem; margin-bottom: 0.5rem; }
+    p { color: #888; font-size: 0.95rem; line-height: 1.5; }
+    .hint { margin-top: 1.5rem; font-size: 0.8rem; color: #555; }
+  </style>
+</head>
+<body>
+  <div class="card">
+    <div class="icon">&#x2713;</div>
+    <h1>CLI Authorized</h1>
+    <p>HelixMind CLI has been connected to your account.<br>You can close this tab and return to your terminal.</p>
+    <p class="hint">This tab will close automatically in 3 seconds.</p>
+  </div>
+  <script>setTimeout(() => window.close(), 3000);</script>
+</body>
+</html>`;
+const CANCEL_HTML = `<!DOCTYPE html>
+<html lang="en">
+<head>
+  <meta charset="utf-8">
+  <title>HelixMind CLI — Cancelled</title>
+  <style>
+    * { margin: 0; padding: 0; box-sizing: border-box; }
+    body {
+      background: #050510; color: #e0e0e0;
+      font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', sans-serif;
+      display: flex; align-items: center; justify-content: center; min-height: 100vh;
+    }
+    .card { text-align: center; padding: 3rem; border: 1px solid rgba(255,100,100,0.2); border-radius: 16px; max-width: 420px; }
+    h1 { color: #ff6464; font-size: 1.5rem; margin-bottom: 0.5rem; }
+    p { color: #888; }
+  </style>
+</head>
+<body>
+  <div class="card">
+    <h1>Authorization Cancelled</h1>
+    <p>You can close this tab.</p>
+  </div>
+  <script>setTimeout(() => window.close(), 2000);</script>
+</body>
+</html>`;
+export function startCallbackServer(timeoutMs = 120_000) {
+    return new Promise((resolveServer, rejectServer) => {
+        const state = randomBytes(32).toString('hex');
+        let callbackResolve = null;
+        let callbackReject = null;
+        let settled = false;
+        let timer = null;
+        const server = createServer((req, res) => {
+            const url = new URL(req.url ?? '/', `http://127.0.0.1`);
+            const pathname = url.pathname;
+            // SECURITY: Restrict CORS to the webapp origin only
+            const webappOrigin = process.env.NEXT_PUBLIC_APP_URL || 'https://helix-mind.ai';
+            res.setHeader('Access-Control-Allow-Origin', webappOrigin);
+            res.setHeader('Content-Type', 'text/html; charset=utf-8');
+            if (pathname === '/callback' && req.method === 'GET') {
+                const returnedState = url.searchParams.get('state');
+                const key = url.searchParams.get('key');
+                if (returnedState !== state) {
+                    res.writeHead(403);
+                    res.end('<h1>Invalid state — possible CSRF attack</h1>');
+                    return;
+                }
+                if (!key) {
+                    res.writeHead(400);
+                    res.end('<h1>Missing API key</h1>');
+                    return;
+                }
+                res.writeHead(200);
+                res.end(SUCCESS_HTML);
+                if (!settled && callbackResolve) {
+                    settled = true;
+                    if (timer)
+                        clearTimeout(timer);
+                    callbackResolve({
+                        apiKey: key,
+                        state: returnedState,
+                        userId: url.searchParams.get('userId') ?? undefined,
+                        email: url.searchParams.get('email') ?? undefined,
+                        plan: url.searchParams.get('plan') ?? undefined,
+                    });
+                    // Close server after a short delay to finish sending the response
+                    setTimeout(() => server.close(), 500);
+                }
+                return;
+            }
+            if (pathname === '/cancel' && req.method === 'GET') {
+                res.writeHead(200);
+                res.end(CANCEL_HTML);
+                if (!settled && callbackReject) {
+                    settled = true;
+                    if (timer)
+                        clearTimeout(timer);
+                    callbackReject(new Error('Authorization cancelled by user'));
+                    setTimeout(() => server.close(), 500);
+                }
+                return;
+            }
+            // Any other request
+            res.writeHead(404);
+            res.end('Not found');
+        });
+        server.listen(0, '127.0.0.1', () => {
+            const addr = server.address();
+            if (!addr || typeof addr === 'string') {
+                rejectServer(new Error('Failed to start callback server'));
+                return;
+            }
+            resolveServer({
+                port: addr.port,
+                state,
+                waitForCallback() {
+                    return new Promise((resolve, reject) => {
+                        callbackResolve = resolve;
+                        callbackReject = reject;
+                        timer = setTimeout(() => {
+                            if (!settled) {
+                                settled = true;
+                                server.close();
+                                reject(new Error(`Authorization timed out after ${timeoutMs / 1000}s`));
+                            }
+                        }, timeoutMs);
+                    });
+                },
+                close() {
+                    if (timer)
+                        clearTimeout(timer);
+                    server.close();
+                },
+            });
+        });
+        server.on('error', (err) => {
+            rejectServer(err);
+        });
+    });
+}
+//# sourceMappingURL=callback-server.js.map

package/dist/cli/auth/callback-server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"callback-server.js","sourceRoot":"","sources":["../../../src/cli/auth/callback-server.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,YAAY,EAAe,MAAM,WAAW,CAAC;AACtD,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC;AAiB/B,MAAM,YAAY,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QAwCb,CAAC;AAET,MAAM,WAAW,GAAG;;;;;;;;;;;;;;;;;;;;;;;;QAwBZ,CAAC;AAET,MAAM,UAAU,mBAAmB,CAAC,SAAS,GAAG,OAAO;IACrD,OAAO,IAAI,OAAO,CAAC,CAAC,aAAa,EAAE,YAAY,EAAE,EAAE;QACjD,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC9C,IAAI,eAAe,GAA8C,IAAI,CAAC;QACtE,IAAI,cAAc,GAAkC,IAAI,CAAC;QACzD,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,KAAK,GAAyC,IAAI,CAAC;QAEvD,MAAM,MAAM,GAAW,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;YAC/C,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,kBAAkB,CAAC,CAAC;YACxD,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC;YAE9B,oDAAoD;YACpD,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,uBAAuB,CAAC;YAChF,GAAG,CAAC,SAAS,CAAC,6BAA6B,EAAE,YAAY,CAAC,CAAC;YAC3D,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,0BAA0B,CAAC,CAAC;YAE1D,IAAI,QAAQ,KAAK,WAAW,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;gBACrD,MAAM,aAAa,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;gBACpD,MAAM,GAAG,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;gBAExC,IAAI,aAAa,KAAK,KAAK,EAAE,CAAC;oBAC5B,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;oBACnB,GAAG,CAAC,GAAG,CAAC,+CAA+C,CAAC,CAAC;oBACzD,OAAO;gBACT,CAAC;gBAED,IAAI,CAAC,GAAG,EAAE,CAAC;oBACT,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;oBACnB,GAAG,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC;oBACpC,OAAO;gBACT,CAAC;gBAED,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;gBACnB,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;gBAEtB,IAAI,CAAC,OAAO,IAAI,eAAe,EAAE,CAAC;oBAChC,OAAO,GAAG,IAAI,CAAC;oBACf,IAAI,KAAK;wBAAE,YAAY,CAAC,KAAK,CAAC,CAAC;oBAC/B,eAAe,CAAC;wBACd,MAAM,EAAE,GAAG;wBACX,KAAK,EAAE,aAAa;wBACpB,MAAM,EAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,SAAS;wBACnD,KAAK,EAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,SAAS;wBACjD,IAAI,EAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,SAAS;qBAChD,CAAC,CAAC;oBACH,kEAAkE;oBAClE,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,GAAG,CAAC,CAAC;gBACxC,CAAC;gBACD,OAAO;YACT,CAAC;YAED,IAAI,QAAQ,KAAK,SAAS,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;gBACnD,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;gBACnB,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;gBAErB,IAAI,CAAC,OAAO,IAAI,cAAc,EAAE,CAAC;oBAC/B,OAAO,GAAG,IAAI,CAAC;oBACf,IAAI,KAAK;wBAAE,YAAY,CAAC,KAAK,CAAC,CAAC;oBAC/B,cAAc,CAAC,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC,CAAC;oBAC7D,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,GAAG,CAAC,CAAC;gBACxC,CAAC;gBACD,OAAO;YACT,CAAC;YAED,oBAAoB;YACpB,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YACnB,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACvB,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE;YACjC,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;YAC9B,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACtC,YAAY,CAAC,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC,CAAC;gBAC3D,OAAO;YACT,CAAC;YAED,aAAa,CAAC;gBACZ,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,KAAK;gBACL,eAAe;oBACb,OAAO,IAAI,OAAO,CAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;wBACrD,eAAe,GAAG,OAAO,CAAC;wBAC1B,cAAc,GAAG,MAAM,CAAC;wBAExB,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;4BACtB,IAAI,CAAC,OAAO,EAAE,CAAC;gCACb,OAAO,GAAG,IAAI,CAAC;gCACf,MAAM,CAAC,KAAK,EAAE,CAAC;gCACf,MAAM,CAAC,IAAI,KAAK,CAAC,iCAAiC,SAAS,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC;4BAC1E,CAAC;wBACH,CAAC,EAAE,SAAS,CAAC,CAAC;oBAChB,CAAC,CAAC,CAAC;gBACL,CAAC;gBACD,KAAK;oBACH,IAAI,KAAK;wBAAE,YAAY,CAAC,KAAK,CAAC,CAAC;oBAC/B,MAAM,CAAC,KAAK,EAAE,CAAC;gBACjB,CAAC;aACF,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACzB,YAAY,CAAC,GAAG,CAAC,CAAC;QACpB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/cli/auth/feature-gate.d.ts

@@ -0,0 +1,47 @@
+/**
+ * Feature gating based on subscription plan.
+ * Checks whether a feature is available for the user's current plan.
+ *
+ * Plan hierarchy: FREE → FREE_PLUS → PRO → TEAM → ENTERPRISE
+ *
+ * FREE (no account):  Full CLI agent + spiral memory + 1 local brain per project.
+ *                     No Jarvis, no validation, no monitor, no brain management.
+ * FREE_PLUS (logged in): Jarvis (1 instance), validation basic, 1 global + 2 local brains.
+ * PRO (19€/mo):      Jarvis (3), deep thinking, scheduling, triggers, full validation,
+ *                     monitor, cloud sync, 5 global + 10 local brains.
+ * TEAM (39€/user/mo): Unlimited Jarvis, parallel execution, shared brains, unlimited brains.
+ * ENTERPRISE:         Full API, self-hosted, benchmark, SSO/SAML.
+ */
+import type { ConfigStore } from '../config/store.js';
+import type { BrainLimits } from '../brain/instance-manager.js';
+export type Feature = 'jarvis' | 'jarvis_multi' | 'jarvis_unlimited' | 'jarvis_thinking_deep' | 'jarvis_scheduling' | 'jarvis_triggers' | 'jarvis_parallel' | 'validation_basic' | 'validation_full' | 'monitor' | 'cloud_sync' | 'brain_api' | 'team_brain_sharing' | 'team_sessions' | 'priority_support' | 'benchmark' | 'self_hosted' | 'sso_saml';
+export declare function isFeatureAvailable(store: ConfigStore, feature: Feature): boolean;
+export declare function requireFeature(store: ConfigStore, feature: Feature): void;
+/**
+ * Check if the user is logged in (FREE_PLUS or above).
+ * Used for brain management, Jarvis access, etc.
+ */
+export declare function isLoggedIn(store: ConfigStore): boolean;
+/**
+ * Get brain limits for a given plan.
+ * Returns null for FREE (no brain registry active).
+ */
+export declare function getBrainLimitsForPlan(plan: string): BrainLimits | null;
+/**
+ * Get Jarvis instance limit for a given plan.
+ * Returns 0 for FREE (no Jarvis access).
+ */
+export declare function getJarvisLimitsForPlan(plan: string): number;
+export declare class FeatureGateError extends Error {
+    readonly feature: Feature;
+    readonly requiredPlan: string;
+    constructor(feature: Feature, requiredPlan: string);
+}
+/** Get a login CTA message for the given context */
+export declare function getLoginCTA(context: 'brain' | 'jarvis' | 'nudge' | 'banner'): string;
+/**
+ * Refresh plan info from the web platform.
+ * Updates cached plan in config. Returns the plan string or null on failure.
+ */
+export declare function refreshPlanInfo(store: ConfigStore): Promise<string | null>;
+//# sourceMappingURL=feature-gate.d.ts.map

package/dist/cli/auth/feature-gate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"feature-gate.d.ts","sourceRoot":"","sources":["../../../src/cli/auth/feature-gate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAMhE,MAAM,MAAM,OAAO,GAEf,QAAQ,GACR,cAAc,GACd,kBAAkB,GAClB,sBAAsB,GACtB,mBAAmB,GACnB,iBAAiB,GACjB,iBAAiB,GAEjB,kBAAkB,GAClB,iBAAiB,GAEjB,SAAS,GAET,YAAY,GACZ,WAAW,GAEX,oBAAoB,GACpB,eAAe,GAEf,kBAAkB,GAElB,WAAW,GACX,aAAa,GACb,UAAU,CAAC;AA6Ef,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAIhF;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,GAAG,IAAI,CAKzE;AAED;;;GAGG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAGtD;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW,GAAG,IAAI,CAEtE;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAE3D;AAMD,qBAAa,gBAAiB,SAAQ,KAAK;aAEvB,OAAO,EAAE,OAAO;aAChB,YAAY,EAAE,MAAM;gBADpB,OAAO,EAAE,OAAO,EAChB,YAAY,EAAE,MAAM;CAQvC;AAMD,oDAAoD;AACpD,wBAAgB,WAAW,CAAC,OAAO,EAAE,OAAO,GAAG,QAAQ,GAAG,OAAO,GAAG,QAAQ,GAAG,MAAM,CAWpF;AAMD;;;GAGG;AACH,wBAAsB,eAAe,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CA0ChF"}

package/dist/cli/auth/feature-gate.js

@@ -0,0 +1,171 @@
+// Web enricher is FREE for all — it's the core intelligence of HelixMind.
+// Agent loop, spiral memory, 22 tools, providers — all FREE (open source core).
+// ---------------------------------------------------------------------------
+// Plan Hierarchy
+// ---------------------------------------------------------------------------
+const PLAN_HIERARCHY = {
+    FREE: 0,
+    FREE_PLUS: 1,
+    PRO: 2,
+    TEAM: 3,
+    ENTERPRISE: 4,
+};
+// ---------------------------------------------------------------------------
+// Feature → Minimum Plan
+// ---------------------------------------------------------------------------
+const FEATURE_MIN_PLAN = {
+    // Jarvis AGI
+    jarvis: 'FREE_PLUS',
+    jarvis_multi: 'PRO',
+    jarvis_unlimited: 'TEAM',
+    jarvis_thinking_deep: 'PRO',
+    jarvis_scheduling: 'PRO',
+    jarvis_triggers: 'PRO',
+    jarvis_parallel: 'TEAM',
+    // Validation
+    validation_basic: 'FREE_PLUS',
+    validation_full: 'PRO',
+    // Security Monitor
+    monitor: 'PRO',
+    // Cloud & Sync
+    cloud_sync: 'PRO',
+    brain_api: 'ENTERPRISE',
+    // Team
+    team_brain_sharing: 'TEAM',
+    team_sessions: 'TEAM',
+    // Support
+    priority_support: 'PRO',
+    // Enterprise
+    benchmark: 'ENTERPRISE',
+    self_hosted: 'ENTERPRISE',
+    sso_saml: 'ENTERPRISE',
+};
+// ---------------------------------------------------------------------------
+// Brain Limits per Plan
+// ---------------------------------------------------------------------------
+const BRAIN_LIMITS = {
+    FREE: null, // No brain registry for FREE — just 1 local brain per project (default behavior)
+    FREE_PLUS: { maxGlobal: 1, maxLocal: 2, maxActive: 3 },
+    PRO: { maxGlobal: 5, maxLocal: 10, maxActive: 10 },
+    TEAM: { maxGlobal: Infinity, maxLocal: Infinity, maxActive: Infinity },
+    ENTERPRISE: { maxGlobal: Infinity, maxLocal: Infinity, maxActive: Infinity },
+};
+// ---------------------------------------------------------------------------
+// Jarvis Instance Limits per Plan
+// ---------------------------------------------------------------------------
+const JARVIS_LIMITS = {
+    FREE: 0,
+    FREE_PLUS: 1,
+    PRO: 3,
+    TEAM: Infinity,
+    ENTERPRISE: Infinity,
+};
+// ---------------------------------------------------------------------------
+// Core Functions
+// ---------------------------------------------------------------------------
+export function isFeatureAvailable(store, feature) {
+    const plan = store.get('relay.plan') ?? 'FREE';
+    const minPlan = FEATURE_MIN_PLAN[feature];
+    return (PLAN_HIERARCHY[plan] ?? 0) >= (PLAN_HIERARCHY[minPlan] ?? 0);
+}
+export function requireFeature(store, feature) {
+    if (!isFeatureAvailable(store, feature)) {
+        const minPlan = FEATURE_MIN_PLAN[feature];
+        throw new FeatureGateError(feature, minPlan);
+    }
+}
+/**
+ * Check if the user is logged in (FREE_PLUS or above).
+ * Used for brain management, Jarvis access, etc.
+ */
+export function isLoggedIn(store) {
+    const plan = store.get('relay.plan') ?? 'FREE';
+    return (PLAN_HIERARCHY[plan] ?? 0) >= PLAN_HIERARCHY.FREE_PLUS;
+}
+/**
+ * Get brain limits for a given plan.
+ * Returns null for FREE (no brain registry active).
+ */
+export function getBrainLimitsForPlan(plan) {
+    return BRAIN_LIMITS[plan] ?? null;
+}
+/**
+ * Get Jarvis instance limit for a given plan.
+ * Returns 0 for FREE (no Jarvis access).
+ */
+export function getJarvisLimitsForPlan(plan) {
+    return JARVIS_LIMITS[plan] ?? 0;
+}
+// ---------------------------------------------------------------------------
+// Error Class
+// ---------------------------------------------------------------------------
+export class FeatureGateError extends Error {
+    feature;
+    requiredPlan;
+    constructor(feature, requiredPlan) {
+        super(`Feature "${feature}" requires ${requiredPlan} plan or higher. ` +
+            'Run `helixmind login` to authenticate or upgrade at your dashboard.');
+        this.feature = feature;
+        this.requiredPlan = requiredPlan;
+        this.name = 'FeatureGateError';
+    }
+}
+// ---------------------------------------------------------------------------
+// Login CTAs
+// ---------------------------------------------------------------------------
+/** Get a login CTA message for the given context */
+export function getLoginCTA(context) {
+    switch (context) {
+        case 'brain':
+            return 'Brain Management requires login. Run `helixmind login` to unlock 3D visualization, Jarvis AGI, and more.';
+        case 'jarvis':
+            return 'Jarvis AGI requires login. Run `helixmind login` — it\'s free!';
+        case 'nudge':
+            return 'Unlock Jarvis AGI + Brain Management → `helixmind login` (free)';
+        case 'banner':
+            return 'Login for Jarvis AGI + Brain Management → helixmind login';
+    }
+}
+// ---------------------------------------------------------------------------
+// Plan Refresh
+// ---------------------------------------------------------------------------
+/**
+ * Refresh plan info from the web platform.
+ * Updates cached plan in config. Returns the plan string or null on failure.
+ */
+export async function refreshPlanInfo(store) {
+    const auth = store.getAuthInfo();
+    if (!auth?.apiKey || !auth.url)
+        return null;
+    try {
+        const url = auth.url.replace(/\/+$/, '');
+        const res = await fetch(`${url}/api/auth/cli/verify`, {
+            headers: { Authorization: `Bearer ${auth.apiKey}` },
+            signal: AbortSignal.timeout(5000),
+        });
+        if (!res.ok) {
+            // Key might be revoked/expired
+            if (res.status === 401) {
+                store.set('relay.plan', 'FREE');
+            }
+            return null;
+        }
+        const data = (await res.json());
+        if (data.plan) {
+            // Logged-in users are at least FREE_PLUS even if server returns FREE
+            const plan = data.plan === 'FREE' ? 'FREE_PLUS' : data.plan;
+            store.set('relay.plan', plan);
+        }
+        if (data.email) {
+            store.set('relay.userEmail', data.email);
+        }
+        if (data.userId) {
+            store.set('relay.userId', data.userId);
+        }
+        return data.plan ?? null;
+    }
+    catch {
+        return null;
+    }
+}
+//# sourceMappingURL=feature-gate.js.map

package/dist/cli/auth/feature-gate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"feature-gate.js","sourceRoot":"","sources":["../../../src/cli/auth/feature-gate.ts"],"names":[],"mappings":"AAgDA,0EAA0E;AAC1E,gFAAgF;AAEhF,8EAA8E;AAC9E,iBAAiB;AACjB,8EAA8E;AAE9E,MAAM,cAAc,GAA2B;IAC7C,IAAI,EAAE,CAAC;IACP,SAAS,EAAE,CAAC;IACZ,GAAG,EAAE,CAAC;IACN,IAAI,EAAE,CAAC;IACP,UAAU,EAAE,CAAC;CACd,CAAC;AAEF,8EAA8E;AAC9E,yBAAyB;AACzB,8EAA8E;AAE9E,MAAM,gBAAgB,GAA4B;IAChD,aAAa;IACb,MAAM,EAAE,WAAW;IACnB,YAAY,EAAE,KAAK;IACnB,gBAAgB,EAAE,MAAM;IACxB,oBAAoB,EAAE,KAAK;IAC3B,iBAAiB,EAAE,KAAK;IACxB,eAAe,EAAE,KAAK;IACtB,eAAe,EAAE,MAAM;IACvB,aAAa;IACb,gBAAgB,EAAE,WAAW;IAC7B,eAAe,EAAE,KAAK;IACtB,mBAAmB;IACnB,OAAO,EAAE,KAAK;IACd,eAAe;IACf,UAAU,EAAE,KAAK;IACjB,SAAS,EAAE,YAAY;IACvB,OAAO;IACP,kBAAkB,EAAE,MAAM;IAC1B,aAAa,EAAE,MAAM;IACrB,UAAU;IACV,gBAAgB,EAAE,KAAK;IACvB,aAAa;IACb,SAAS,EAAE,YAAY;IACvB,WAAW,EAAE,YAAY;IACzB,QAAQ,EAAE,YAAY;CACvB,CAAC;AAEF,8EAA8E;AAC9E,wBAAwB;AACxB,8EAA8E;AAE9E,MAAM,YAAY,GAAuC;IACvD,IAAI,EAAE,IAAI,EAAE,iFAAiF;IAC7F,SAAS,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE;IACtD,GAAG,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE;IAClD,IAAI,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE;IACtE,UAAU,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE;CAC7E,CAAC;AAEF,8EAA8E;AAC9E,kCAAkC;AAClC,8EAA8E;AAE9E,MAAM,aAAa,GAA2B;IAC5C,IAAI,EAAE,CAAC;IACP,SAAS,EAAE,CAAC;IACZ,GAAG,EAAE,CAAC;IACN,IAAI,EAAE,QAAQ;IACd,UAAU,EAAE,QAAQ;CACrB,CAAC;AAEF,8EAA8E;AAC9E,iBAAiB;AACjB,8EAA8E;AAE9E,MAAM,UAAU,kBAAkB,CAAC,KAAkB,EAAE,OAAgB;IACrE,MAAM,IAAI,GAAI,KAAK,CAAC,GAAG,CAAC,YAAY,CAAwB,IAAI,MAAM,CAAC;IACvE,MAAM,OAAO,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAC1C,OAAO,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;AACvE,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,KAAkB,EAAE,OAAgB;IACjE,IAAI,CAAC,kBAAkB,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,CAAC;QACxC,MAAM,OAAO,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;QAC1C,MAAM,IAAI,gBAAgB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC/C,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,UAAU,CAAC,KAAkB;IAC3C,MAAM,IAAI,GAAI,KAAK,CAAC,GAAG,CAAC,YAAY,CAAwB,IAAI,MAAM,CAAC;IACvE,OAAO,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,cAAc,CAAC,SAAS,CAAC;AACjE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CAAC,IAAY;IAChD,OAAO,YAAY,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC;AACpC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CAAC,IAAY;IACjD,OAAO,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAClC,CAAC;AAED,8EAA8E;AAC9E,cAAc;AACd,8EAA8E;AAE9E,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IAEvB;IACA;IAFlB,YACkB,OAAgB,EAChB,YAAoB;QAEpC,KAAK,CACH,YAAY,OAAO,cAAc,YAAY,mBAAmB;YAChE,qEAAqE,CACtE,CAAC;QANc,YAAO,GAAP,OAAO,CAAS;QAChB,iBAAY,GAAZ,YAAY,CAAQ;QAMpC,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;IACjC,CAAC;CACF;AAED,8EAA8E;AAC9E,aAAa;AACb,8EAA8E;AAE9E,oDAAoD;AACpD,MAAM,UAAU,WAAW,CAAC,OAAgD;IAC1E,QAAQ,OAAO,EAAE,CAAC;QAChB,KAAK,OAAO;YACV,OAAO,0GAA0G,CAAC;QACpH,KAAK,QAAQ;YACX,OAAO,gEAAgE,CAAC;QAC1E,KAAK,OAAO;YACV,OAAO,iEAAiE,CAAC;QAC3E,KAAK,QAAQ;YACX,OAAO,2DAA2D,CAAC;IACvE,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,eAAe;AACf,8EAA8E;AAE9E;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,KAAkB;IACtD,MAAM,IAAI,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC;IACjC,IAAI,CAAC,IAAI,EAAE,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IAE5C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACzC,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,GAAG,sBAAsB,EAAE;YACpD,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,IAAI,CAAC,MAAM,EAAE,EAAE;YACnD,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;SAClC,CAAC,CAAC;QAEH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,+BAA+B;YAC/B,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBACvB,KAAK,CAAC,GAAG,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;YAClC,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAK7B,CAAC;QAEF,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,qEAAqE;YACrE,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;YAC5D,KAAK,CAAC,GAAG,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;QAChC,CAAC;QACD,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,KAAK,CAAC,GAAG,CAAC,iBAAiB,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QAC3C,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,KAAK,CAAC,GAAG,CAAC,cAAc,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QACzC,CAAC;QAED,OAAO,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/cli/auth/guard.d.ts

@@ -0,0 +1,11 @@
+import { ConfigStore } from '../config/store.js';
+/**
+ * Auth gate that presents two choices:
+ *  [1] Login (free account → Jarvis + Brain Management + more)
+ *  [2] Open Source (full CLI agent, no account needed)
+ *
+ * Returns the ConfigStore. If user picks Open Source, store stays at FREE plan.
+ * Never exits the process — always lets the user continue.
+ */
+export declare function requireAuth(): Promise<ConfigStore>;
+//# sourceMappingURL=guard.d.ts.map

package/dist/cli/auth/guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"guard.d.ts","sourceRoot":"","sources":["../../../src/cli/auth/guard.ts"],"names":[],"mappings":"AAeA,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AASjD;;;;;;;GAOG;AACH,wBAAsB,WAAW,IAAI,OAAO,CAAC,WAAW,CAAC,CAiDxD"}

package/dist/cli/auth/guard.js

@@ -0,0 +1,94 @@
+/**
+ * Auth guard — presents a choice to the user: login or open source.
+ *
+ * After first login, credentials are cached locally in ~/.helixmind/config.json.
+ * Works offline with cached auth. When online, token validity is checked
+ * in the background (non-blocking).
+ *
+ * If the user chooses "Open Source", they continue with the full CLI agent
+ * (22 tools, spiral memory, all providers) but without Jarvis, brain
+ * management, validation, or monitor features.
+ */
+import chalk from 'chalk';
+import { createInterface } from 'node:readline';
+import { homedir } from 'node:os';
+import { join } from 'node:path';
+import { ConfigStore } from '../config/store.js';
+import { theme } from '../ui/theme.js';
+const w = (s) => process.stdout.write(s);
+const d = chalk.dim;
+const g = chalk.green;
+const p = theme.primary;
+const dim = chalk.gray;
+/**
+ * Auth gate that presents two choices:
+ *  [1] Login (free account → Jarvis + Brain Management + more)
+ *  [2] Open Source (full CLI agent, no account needed)
+ *
+ * Returns the ConfigStore. If user picks Open Source, store stays at FREE plan.
+ * Never exits the process — always lets the user continue.
+ */
+export async function requireAuth() {
+    const configDir = join(homedir(), '.helixmind');
+    const store = new ConfigStore(configDir);
+    if (store.isLoggedIn()) {
+        import('../auth/feature-gate.js')
+            .then(({ refreshPlanInfo }) => refreshPlanInfo(store))
+            .catch(() => { });
+        return store;
+    }
+    // ─── Choice Screen (compact side-by-side) ──────────────────
+    w('\n');
+    w(d('  ╭' + '─'.repeat(76) + '╮') + '\n');
+    w(d('  │  ') + p('\u{1F300} Welcome to HelixMind') + d(' '.repeat(51) + '│') + '\n');
+    w(d('  │' + ' '.repeat(76) + '│') + '\n');
+    w(d('  │  ') + 'Login — free, unlock everything' + '     ' + 'Open Source — no account needed' + d(' '.repeat(8) + '│') + '\n');
+    w(d('  │' + ' '.repeat(76) + '│') + '\n');
+    w(d('  │    ') + g('\u2713') + ' Jarvis AGI' + ' '.repeat(26) + dim('\u2713 AI Agent + 22 Tools') + d(' '.repeat(13) + '│') + '\n');
+    w(d('  │    ') + g('\u2713') + ' Validation Matrix' + ' '.repeat(19) + dim('\u2713 Spiral Memory') + d(' '.repeat(19) + '│') + '\n');
+    w(d('  │    ') + g('\u2713') + ' Security Monitor' + ' '.repeat(20) + dim('\u2713 Anthropic/OpenAI/Ollama') + d(' '.repeat(9) + '│') + '\n');
+    w(d('  │    ') + g('\u2713') + ' Autonomous Mode' + ' '.repeat(21) + chalk.red('\u2717') + dim(' No Jarvis \u00B7 No Validation') + d(' '.repeat(7) + '│') + '\n');
+    w(d('  │    ') + g('\u2713') + ' 3D Brain Management' + ' '.repeat(17) + chalk.red('\u2717') + dim(' No Monitor \u00B7 No Security Audit') + d(' '.repeat(2) + '│') + '\n');
+    w(d('  │    ') + g('\u2713') + ' 3 Brains \u00B7 Live Brain WebSocket' + ' '.repeat(5) + chalk.red('\u2717') + dim(' No Brain Management') + d(' '.repeat(13) + '│') + '\n');
+    w(d('  │' + ' '.repeat(76) + '│') + '\n');
+    w(d('  │    ') + dim('No credit card \u00B7 Free forever \u00B7 works offline') + d(' '.repeat(27) + '│') + '\n');
+    w(d('  ╰' + '─'.repeat(76) + '╯') + '\n\n');
+    const choice = await promptChoice();
+    if (choice === '1') {
+        const { loginFlow } = await import('../auth/login.js');
+        const loggedIn = await loginFlow(store, {});
+        if (!loggedIn) {
+            w('\n');
+            w(d('  Login cancelled — continuing in ') + p('Open Source') + d(' mode.\n'));
+            w(d('  Run ') + chalk.white('helixmind login') + d(' anytime to unlock Jarvis + more.\n\n'));
+        }
+        return store;
+    }
+    // Choice 2: Open Source
+    w('\n');
+    w(d('  ') + p('\u25B8') + d(' Open Source mode — full agent, no limits.\n'));
+    w(d('  Run ') + chalk.white('helixmind login') + d(' anytime to unlock Jarvis AGI + more.\n\n'));
+    return store;
+}
+/**
+ * Prompt the user for [1] or [2]. Defaults to 1 on empty Enter.
+ */
+function promptChoice() {
+    return new Promise((resolve) => {
+        const rl = createInterface({
+            input: process.stdin,
+            output: process.stdout,
+        });
+        rl.question(d('  ') + g('\u2192') + ' ' + chalk.white.bold('[1]') + ' Login / ' + chalk.white.bold('[2]') + ' Open Source: ', (answer) => {
+            rl.close();
+            const trimmed = answer.trim();
+            if (trimmed === '2') {
+                resolve('2');
+            }
+            else {
+                resolve('1');
+            }
+        });
+    });
+}
+//# sourceMappingURL=guard.js.map

package/dist/cli/auth/guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"guard.js","sourceRoot":"","sources":["../../../src/cli/auth/guard.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAC;AAEvC,MAAM,CAAC,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACjD,MAAM,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC;AACpB,MAAM,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC;AACtB,MAAM,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC;AACxB,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC;AAEvB;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW;IAC/B,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,YAAY,CAAC,CAAC;IAChD,MAAM,KAAK,GAAG,IAAI,WAAW,CAAC,SAAS,CAAC,CAAC;IAEzC,IAAI,KAAK,CAAC,UAAU,EAAE,EAAE,CAAC;QACvB,MAAM,CAAC,yBAAyB,CAAC;aAC9B,IAAI,CAAC,CAAC,EAAE,eAAe,EAAE,EAAE,EAAE,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;aACrD,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACnB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,8DAA8D;IAC9D,CAAC,CAAC,IAAI,CAAC,CAAC;IACR,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,gCAAgC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;IACrF,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,iCAAiC,GAAG,OAAO,GAAG,iCAAiC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;IAChI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,GAAG,aAAa,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,4BAA4B,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;IACpI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,GAAG,oBAAoB,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,sBAAsB,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;IACrI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,GAAG,mBAAmB,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,gCAAgC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;IAC7I,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,GAAG,kBAAkB,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,GAAG,CAAC,iCAAiC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;IACnK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,GAAG,sBAAsB,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,GAAG,CAAC,sCAAsC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;IAC5K,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,GAAG,uCAAuC,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,GAAG,CAAC,sBAAsB,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;IAC7K,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,GAAG,CAAC,yDAAyD,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;IAClH,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC;IAE5C,MAAM,MAAM,GAAG,MAAM,YAAY,EAAE,CAAC;IAEpC,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QACnB,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;QACvD,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAE5C,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,CAAC,CAAC,IAAI,CAAC,CAAC;YACR,CAAC,CAAC,CAAC,CAAC,oCAAoC,CAAC,GAAG,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;YAC9E,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,uCAAuC,CAAC,CAAC,CAAC;QAC/F,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED,wBAAwB;IACxB,CAAC,CAAC,IAAI,CAAC,CAAC;IACR,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,8CAA8C,CAAC,CAAC,CAAC;IAC7E,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,2CAA2C,CAAC,CAAC,CAAC;IAEjG,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;GAEG;AACH,SAAS,YAAY;IACnB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,EAAE,GAAG,eAAe,CAAC;YACzB,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,MAAM,EAAE,OAAO,CAAC,MAAM;SACvB,CAAC,CAAC;QAEH,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,GAAG,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,WAAW,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,gBAAgB,EAAE,CAAC,MAAM,EAAE,EAAE;YACvI,EAAE,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;YAC9B,IAAI,OAAO,KAAK,GAAG,EAAE,CAAC;gBACpB,OAAO,CAAC,GAAG,CAAC,CAAC;YACf,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,CAAC,CAAC;YACf,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/cli/auth/login.d.ts

@@ -0,0 +1,22 @@
+import { ConfigStore } from '../config/store.js';
+export interface LoginOptions {
+    apiKey?: string;
+    url?: string;
+    force?: boolean;
+}
+export interface AuthStatus {
+    loggedIn: boolean;
+    email?: string;
+    plan?: string;
+    userId?: string;
+    webappUrl?: string;
+}
+/**
+ * Full login flow: check existing auth, then either manual key or browser flow.
+ */
+export declare function loginFlow(store: ConfigStore, options: LoginOptions): Promise<boolean>;
+/**
+ * Check if the stored API key is still valid. Returns auth status.
+ */
+export declare function checkAuthStatus(store: ConfigStore): Promise<AuthStatus>;
+//# sourceMappingURL=login.d.ts.map

package/dist/cli/auth/login.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"login.d.ts","sourceRoot":"","sources":["../../../src/cli/auth/login.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAKjD,MAAM,WAAW,YAAY;IAC3B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,EAAE,OAAO,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;GAEG;AACH,wBAAsB,SAAS,CAAC,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC,CA4B3F;AA8OD;;GAEG;AACH,wBAAsB,eAAe,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC,CA4C7E"}