komplian 0.6.1 → 0.7.1

package/komplian-onboard.mjs

@@ -37,6 +37,7 @@ const c = {
 };
 
 function log(s = "") {
+  if (process.env.KOMPLIAN_CLI_QUIET === "1") return;
   console.log(s);
 }
 
@@ -247,12 +248,14 @@ function cloudLine(org, name, status) {
 }
 
 function cloneOne(org, name, workspace, useSsh) {
+  const q = process.env.KOMPLIAN_CLI_QUIET === "1";
   const gitDir = join(workspace, name, ".git");
   if (existsSync(gitDir)) {
-    log(cloudLine(org, name, "skip"));
+    if (q) console.log(`${c.yellow}○${c.reset} ${name}`);
+    else log(cloudLine(org, name, "skip"));
     return true;
   }
-  process.stdout.write(`\r${cloudLine(org, name, "pending")}`);
+  if (!q) process.stdout.write(`\r${cloudLine(org, name, "pending")}`);
   const args = useSsh
     ? ["clone", `git@github.com:${org}/${name}.git`, name]
     : ["repo", "clone", `${org}/${name}`, name];
@@ -264,13 +267,17 @@ function cloneOne(org, name, workspace, useSsh) {
       stdio: ["ignore", "pipe", "pipe"],
     }),
   });
-  process.stdout.write("\r\x1b[K");
+  if (!q) process.stdout.write("\r\x1b[K");
   if (r.status === 0) {
-    log(cloudLine(org, name, "ok"));
+    if (q) console.log(`${c.green}✓${c.reset} ${name}`);
+    else log(cloudLine(org, name, "ok"));
     return true;
   }
-  log(cloudLine(org, name, "fail"));
-  if (r.stderr) log(`${c.dim}${r.stderr.trim()}${c.reset}`);
+  if (q) console.error(`${c.red}✗${c.reset} ${name}`);
+  else {
+    log(cloudLine(org, name, "fail"));
+    if (r.stderr) log(`${c.dim}${r.stderr.trim()}${c.reset}`);
+  }
   return false;
 }
 
@@ -315,6 +322,9 @@ function npmInstallOneRepo(dir, name) {
   const pkg = join(dir, "package.json");
   if (!existsSync(pkg)) return { ok: true, skipped: true };
 
+  const stdio =
+    process.env.KOMPLIAN_CLI_QUIET === "1" ? "ignore" : "inherit";
+
   const yarnLock = join(dir, "yarn.lock");
   const pnpmLock = join(dir, "pnpm-lock.yaml");
   const npmLock = join(dir, "package-lock.json");
@@ -330,7 +340,7 @@ function npmInstallOneRepo(dir, name) {
     const r = spawnSync(
       "yarn",
       ["install", "--frozen-lockfile"],
-      spawnWin({ cwd: dir, stdio: "inherit" })
+      spawnWin({ cwd: dir, stdio })
     );
     return { ok: r.status === 0, skipped: false };
   }
@@ -346,7 +356,7 @@ function npmInstallOneRepo(dir, name) {
     const r = spawnSync(
       "pnpm",
       ["install", "--frozen-lockfile"],
-      spawnWin({ cwd: dir, stdio: "inherit" })
+      spawnWin({ cwd: dir, stdio })
     );
     return { ok: r.status === 0, skipped: false };
   }
@@ -360,7 +370,7 @@ function npmInstallOneRepo(dir, name) {
 
   if (existsSync(npmLock)) {
     log(`${c.dim}→${c.reset} ${name} ${c.dim}(npm ci — lock sin cambios)${c.reset}`);
-    const r = spawnSync("npm", ["ci", ...quiet], spawnWin({ cwd: dir, stdio: "inherit" }));
+    const r = spawnSync("npm", ["ci", ...quiet], spawnWin({ cwd: dir, stdio }));
     if (r.status === 0) return { ok: true, skipped: false };
     log(
       `${c.yellow}○${c.reset} ${name}: npm ci falló (¿lock desincronizado?). ${c.dim}Revisa con npm install en ese repo.${c.reset}`
@@ -372,20 +382,25 @@ function npmInstallOneRepo(dir, name) {
   const r = spawnSync(
     "npm",
     ["install", ...quiet, "--no-package-lock"],
-    spawnWin({ cwd: dir, stdio: "inherit" })
+    spawnWin({ cwd: dir, stdio })
   );
   return { ok: r.status === 0, skipped: false };
 }
 
 function npmInstallEach(workspace) {
-  log("");
-  log(`${c.cyan}━━ Dependencias por repo ━━${c.reset}`);
+  const q = process.env.KOMPLIAN_CLI_QUIET === "1";
+  if (!q) {
+    log("");
+    log(`${c.cyan}━━ dependencies ━━${c.reset}`);
+  }
   for (const ent of readdirSync(workspace)) {
     const d = join(workspace, ent);
     if (!statSync(d).isDirectory()) continue;
     const { ok, skipped } = npmInstallOneRepo(d, ent);
     if (skipped) continue;
-    if (ok) {
+    if (q) {
+      console.log(`${ok ? c.green + "✓" + c.reset : c.yellow + "○" + c.reset} ${ent}`);
+    } else if (ok) {
       log(`${c.green}✓${c.reset} ${ent}`);
     } else {
       log(`${c.yellow}○${c.reset} ${ent}`);
@@ -394,10 +409,11 @@ function npmInstallEach(workspace) {
 }
 
 function usage() {
-  log(`Uso: komplian onboard | postman | mcp-tools | db:all:dev | localhost | db …`);
-  log(`  ${c.bold}Setup estándar (orden):${c.reset}`);
+  log(`Uso: komplian setup | onboard | postman | mcp-tools | db:all:dev | localhost | db …`);
+  log(`  ${c.bold}Todo en uno:${c.reset} ${c.cyan}npx komplian setup${c.reset} ${c.dim}(onboard+postman+mcp+db+localhost; formulario en navegador si hace falta)${c.reset}`);
+  log(`  ${c.bold}Setup por pasos:${c.reset}`);
   log(`  1. npx komplian onboard --yes`);
-  log(`  2. npx komplian postman login → npx komplian postman --yes  ${c.dim}(@komplian.com)${c.reset}`);
+  log(`  2. npx komplian postman --yes  ${c.dim}(@komplian.com)${c.reset}`);
   log(`  3. npx komplian mcp-tools --yes`);
   log(`  4. npx komplian db:all:dev  ${c.dim}(Postman + 3 URLs dev → ~/.komplian + .env.local)${c.reset}`);
   log(`  5. npx komplian localhost --yes`);
@@ -486,6 +502,11 @@ function normalizeArgv(argv) {
 
 async function main() {
   const rawArgv = process.argv.slice(2);
+  if (rawArgv[0] === "setup") {
+    const { runSetup } = await import("./komplian-setup.mjs");
+    await runSetup(rawArgv.slice(1));
+    return;
+  }
   if (rawArgv[0] === "postman") {
     const { runPostman } = await import("./komplian-postman.mjs");
     await runPostman(rawArgv.slice(1));
@@ -566,13 +587,15 @@ async function main() {
   );
 
   if (!ghOk()) {
-    log(`${c.red}✗${c.reset} No hay sesión en GitHub CLI.`);
+    console.error(`${c.red}✗${c.reset} GitHub CLI not logged in.`);
     if (!runGhAuth()) {
-      log(`${c.red}✗${c.reset} Autenticación cancelada.`);
+      console.error(`${c.red}✗${c.reset} GitHub auth cancelled.`);
       process.exit(1);
     }
   }
-  log(`${c.green}✓${c.reset} GitHub CLI OK`);
+  if (!process.env.KOMPLIAN_CLI_QUIET) {
+    log(`${c.green}✓${c.reset} GitHub CLI OK`);
+  }
 
   const org = process.env.KOMPLIAN_ORG || cfg.org || "Komplian";
   verifyOrgMembership(org);

package/komplian-postman.mjs

@@ -35,6 +35,7 @@ const c = {
 };
 
 function log(s = "") {
+  if (process.env.KOMPLIAN_CLI_QUIET === "1") return;
   console.log(s);
 }
 
@@ -126,9 +127,8 @@ function logApiFailure(context, status, body) {
       extra = " [debug: no serializable]";
     }
   }
-  log(
-    `${c.yellow}○${c.reset} ${context}: HTTP ${status}${hint ? ` — ${hint}` : ""}${extra}`
-  );
+  const line = `${c.yellow}○${c.reset} ${context}: HTTP ${status}${hint ? ` — ${hint}` : ""}${extra}`;
+  console.error(line);
 }
 
 function ensureSecureKomplianDir() {
@@ -216,7 +216,7 @@ function defaultKeyPath() {
 /**
  * Orden: POSTMAN_API_KEY → ~/.komplian/postman-api-key (o KOMPLIAN_POSTMAN_KEY_FILE).
  */
-function resolveApiKey() {
+export function resolveApiKey() {
   const env = process.env.POSTMAN_API_KEY?.trim();
   if (env) return { key: env, source: "POSTMAN_API_KEY" };
   const path = defaultKeyPath();
@@ -227,22 +227,31 @@ function resolveApiKey() {
   return { key: "", source: null };
 }
 
+/** Guarda la clave en ~/.komplian/postman-api-key (uso: `komplian setup` vía navegador). */
+export function savePostmanApiKeyToKomplianHome(apiKey) {
+  const k = (apiKey || "").trim();
+  if (!k) return false;
+  const keyPath = defaultKeyPath();
+  ensureSecureKomplianDir();
+  writeFileSync(keyPath, `${k}\n`, { encoding: "utf8", mode: 0o600 });
+  try {
+    chmodSync(keyPath, 0o600);
+  } catch {
+    /* Windows u otros */
+  }
+  return true;
+}
+
 function printMissingKeyHelp() {
-  log(`${c.red}✗${c.reset} No hay API key de Postman.`);
-  log(``);
-  log(`  ${c.bold}Terminal interactiva (primera vez):${c.reset}`);
-  log(
-    `    ${c.cyan}npx komplian postman --yes${c.reset}  (pide la clave y sigue con el sync)`
-  );
-  log(
-    `    ${c.cyan}npx komplian postman login${c.reset}  (solo guardar clave; luego postman --yes)`
-  );
-  log(``);
-  log(`  ${c.bold}Sin TTY (CI, pipes):${c.reset}`);
-  log(`  ${c.dim}export POSTMAN_API_KEY=…${c.reset}`);
-  log(
-    `${c.dim}  Archivo: ${formatHomePath(defaultKeyPath())} (permiso 600)${c.reset}`
-  );
+  const w = (s) => console.error(s);
+  w(`${c.red}✗${c.reset} No Postman API key.`);
+  w(``);
+  w(`  ${c.bold}Interactive terminal:${c.reset}`);
+  w(`    ${c.cyan}npx komplian postman --yes${c.reset}`);
+  w(`    ${c.cyan}npx komplian postman login${c.reset}`);
+  w(``);
+  w(`  ${c.bold}CI / no TTY:${c.reset} ${c.dim}POSTMAN_API_KEY${c.reset}`);
+  w(`${c.dim}  ${formatHomePath(defaultKeyPath())}${c.reset}`);
   process.exit(1);
 }
 
@@ -656,6 +665,32 @@ async function pickWorkspaceId(apiKey, explicit) {
   return w.id;
 }
 
+/** Validación sin `process.exit` (p. ej. formulario web local en `komplian setup`). */
+export async function validatePostmanApiKeyForKomplian(apiKey, domain) {
+  const d = (domain || "komplian.com").trim().replace(/^@/, "");
+  const { ok, status, body } = await pmFetch(apiKey, "/me");
+  if (!ok) {
+    return {
+      ok: false,
+      error: `Postman rechazó la clave (HTTP ${status}).`,
+    };
+  }
+  const email = extractEmail(body);
+  if (!email) {
+    return {
+      ok: false,
+      error: "La API de Postman no devolvió email en /me.",
+    };
+  }
+  if (!emailAllowed(email, d)) {
+    return {
+      ok: false,
+      error: `Se requiere una cuenta con email @${d}.`,
+    };
+  }
+  return { ok: true };
+}
+
 async function verifyKomplianEmail(apiKey, domain, opts = {}) {
   const quietOk = opts.quietSuccess === true;
   const { ok, status, body } = await pmFetch(apiKey, "/me");
@@ -994,6 +1029,9 @@ export async function runPostman(argv) {
       `${c.dim}  Para rellenar apiKey: exporta API_KEY o pon api/.env y vuelve a ejecutar este comando.${c.reset}`
     );
   }
+  if (process.env.KOMPLIAN_CLI_QUIET === "1") {
+    console.log(`${c.green}✓${c.reset} postman`);
+  }
 }
 
 /**