studiograph 1.3.47 → 1.3.48-beta.0

package/dist/cli/commands/admin/settings.js

@@ -0,0 +1,284 @@
+/**
+ * studiograph settings — CLI for the non-secret half of the encrypted store.
+ *
+ *   studiograph settings list                    Inventory of stored settings + values
+ *   studiograph settings get <key>               One value
+ *   studiograph settings set <key> <value>       Write or replace a setting
+ *   studiograph settings delete <key>            Clear (reverts to registry default)
+ *   studiograph settings schema                  Show every registered key, default, and constraint
+ *
+ * Targets registry workspace-setting keys (model.provider, model.id,
+ * r2.account_id, r2.bucket, r2.public_url, search.provider,
+ * search.google.cx, …) — the same surface the Web Providers panel
+ * writes via `PUT /api/settings/:key`. Secrets go through
+ * `studiograph secrets`; this command refuses non-setting classifications.
+ *
+ * Mirrors the shape of `studiograph secrets` (list/get/set/delete) so
+ * operators already familiar with that command don't have to relearn
+ * anything. Values are JSON-serialized in the store; for enum/string
+ * settings the value is what you'd type at the prompt. Numeric and
+ * boolean values are accepted as their plain typed form (`true`,
+ * `false`, `42`) — set converts to a JSON value before storage.
+ *
+ * Authentication: same model as `studiograph secrets` — the master key
+ * is the gate. If you can read `~/.studiograph/master-key`, you can
+ * read/write the store.
+ */
+import { Command } from 'commander';
+import { log } from '@clack/prompts';
+import { homedir } from 'os';
+import { existsSync } from 'fs';
+import { join } from 'path';
+import { SqliteEncryptedStore, loadMasterKey, loadPreviousMasterKey, setSecretStore, getKeyDef, listWorkspaceSettingsSchema, } from '../../../core/secrets/index.js';
+function openStore() {
+    const loaded = loadMasterKey();
+    const previous = loadPreviousMasterKey();
+    const sgRoot = process.env.RAILWAY_ENVIRONMENT && existsSync('/workspace')
+        ? '/workspace'
+        : join(homedir(), '.studiograph');
+    const dbPath = join(sgRoot, 'secrets.db');
+    if (!existsSync(dbPath)) {
+        log.error(`Settings store not found at ${dbPath}`);
+        log.info('Run `studiograph init` first, or start `studiograph serve` to initialize the store.');
+        process.exit(1);
+    }
+    const store = new SqliteEncryptedStore({
+        dbPath,
+        masterKey: loaded.key,
+        previousMasterKey: previous,
+    });
+    setSecretStore(store);
+    return store;
+}
+function actor() {
+    return { type: 'system', systemId: 'cli' };
+}
+function fmtTs(ms) {
+    if (!ms)
+        return '—';
+    return new Date(ms).toISOString();
+}
+function fmtTable(rows) {
+    if (rows.length === 0)
+        return '';
+    const cols = Object.keys(rows[0]);
+    const widths = cols.map((c) => Math.max(c.length, ...rows.map((r) => r[c]?.length ?? 0)));
+    const header = cols.map((c, i) => c.padEnd(widths[i])).join('  ');
+    const sep = widths.map((w) => '─'.repeat(w)).join('  ');
+    const body = rows.map((r) => cols.map((c, i) => (r[c] ?? '').padEnd(widths[i])).join('  ')).join('\n');
+    return `${header}\n${sep}\n${body}`;
+}
+/**
+ * Reject classifications that aren't workspace-setting. Mirrors the
+ * server-side guard in routes/settings-api.ts so the CLI presents the
+ * same error contract: secret keys are explicitly routed to
+ * `studiograph secrets`, bootstrap keys are env-only and unsettable.
+ */
+function classificationError(key) {
+    const def = getKeyDef(key);
+    if (!def)
+        return `Unknown key "${key}". Run \`studiograph settings schema\` to list available keys.`;
+    if (def.classification === 'workspace-secret') {
+        return `Key "${key}" is a secret. Use \`studiograph secrets set ${key}\` instead.`;
+    }
+    if (def.classification === 'bootstrap') {
+        return `Key "${key}" is bootstrap-class — set it via environment variables, not the store.`;
+    }
+    if (def.classification.startsWith('user-')) {
+        return `Key "${key}" is user-scoped — managed per-user via the API, not workspace-wide CLI.`;
+    }
+    if (def.classification !== 'workspace-setting') {
+        return `Key "${key}" classification "${def.classification}" is not settable via this command.`;
+    }
+    return null;
+}
+/**
+ * Coerce a CLI string token into a bare primitive (number, boolean) for
+ * registry validators that demand a non-string type. Only consulted as
+ * a fallback after the raw string has already failed validation — this
+ * is important because string-typed registry entries (e.g.
+ * `r2.bucket: z.string()`) may legitimately accept values that look
+ * like primitives (a bucket named `2026`, `true`, `42.0`). Eagerly
+ * coercing those would reject valid input before zod sees the right
+ * type.
+ */
+function coerceCliPrimitive(raw) {
+    if (raw === 'true')
+        return true;
+    if (raw === 'false')
+        return false;
+    if (/^-?\d+$/.test(raw))
+        return parseInt(raw, 10);
+    if (/^-?\d+\.\d+$/.test(raw))
+        return parseFloat(raw);
+    return raw;
+}
+export const settingsCommand = new Command('settings')
+    .description('Manage workspace settings stored in the encrypted store (model.provider, r2.bucket, search.google.cx, …)');
+// ── settings list ─────────────────────────────────────────────────────────
+settingsCommand
+    .command('list')
+    .description('List every setting currently stored, with values')
+    .option('--format <format>', 'Output format: table (default) or json', 'table')
+    .action(async (opts) => {
+    const store = openStore();
+    try {
+        const items = store.list();
+        if (opts.format === 'json') {
+            console.log(JSON.stringify(items.map((s) => {
+                let value;
+                try {
+                    value = JSON.parse(s.valueJson);
+                }
+                catch {
+                    value = s.valueJson;
+                }
+                return { key: s.key, value, updated_at: s.updatedAt, updated_by: s.updatedBy };
+            }), null, 2));
+            return;
+        }
+        if (items.length === 0) {
+            log.info('No settings stored.');
+            return;
+        }
+        const rows = items.map((s) => {
+            let value;
+            try {
+                value = JSON.parse(s.valueJson);
+            }
+            catch {
+                value = s.valueJson;
+            }
+            return {
+                key: s.key,
+                value: typeof value === 'string' ? value : JSON.stringify(value),
+                updated: fmtTs(s.updatedAt),
+                updated_by: s.updatedBy,
+            };
+        });
+        console.log(fmtTable(rows));
+    }
+    finally {
+        store.close();
+    }
+});
+// ── settings get <key> ────────────────────────────────────────────────────
+settingsCommand
+    .command('get <key>')
+    .description('Show the current value of a setting')
+    .option('--format <format>', 'Output format: value (default) or json', 'value')
+    .action(async (key, opts) => {
+    const store = openStore();
+    try {
+        const value = store.get(key);
+        if (value === undefined) {
+            const def = getKeyDef(key);
+            if (def?.classification === 'workspace-setting' && def.default !== undefined) {
+                if (opts.format === 'json') {
+                    console.log(JSON.stringify({ key, value: def.default, source: 'default' }, null, 2));
+                }
+                else {
+                    console.log(def.default);
+                }
+                return;
+            }
+            log.error(`No value stored for "${key}" (and no registry default).`);
+            process.exit(1);
+        }
+        if (opts.format === 'json') {
+            console.log(JSON.stringify({ key, value }, null, 2));
+        }
+        else {
+            console.log(typeof value === 'string' ? value : JSON.stringify(value));
+        }
+    }
+    finally {
+        store.close();
+    }
+});
+// ── settings set <key> <value> ────────────────────────────────────────────
+settingsCommand
+    .command('set <key> <value>')
+    .description('Write or replace a setting. Validates against the registry constraint (enum/string/number).')
+    .action(async (key, rawValue) => {
+    const err = classificationError(key);
+    if (err) {
+        log.error(err);
+        process.exit(1);
+    }
+    const def = getKeyDef(key);
+    // Try the raw string first — most registry settings (model.provider,
+    // r2.bucket, search.google.cx, …) are z.string() / z.enum() and the
+    // CLI token IS the value. Falling through to primitive coercion
+    // would spuriously reject string values that look numeric or
+    // boolean (e.g. `studiograph settings set r2.bucket 2026`).
+    let parsed = def.validate.safeParse(rawValue);
+    if (!parsed.success) {
+        // Raw form rejected — try coerced primitive for genuinely typed
+        // schemas (z.number(), z.boolean()). Skip the retry when coercion
+        // wouldn't change anything: the result would be identical and we'd
+        // surface the same failure twice.
+        const coerced = coerceCliPrimitive(rawValue);
+        if (coerced !== rawValue) {
+            parsed = def.validate.safeParse(coerced);
+        }
+    }
+    if (!parsed.success) {
+        log.error(`Validation failed: ${parsed.error.issues.map((i) => i.message).join('; ')}`);
+        process.exit(1);
+    }
+    const store = openStore();
+    try {
+        const meta = await store.set({ key, value: parsed.data }, actor());
+        log.success(`Stored ${key}=${JSON.stringify(parsed.data)}. updated_at=${fmtTs(meta.updatedAt)}`);
+    }
+    finally {
+        store.close();
+    }
+});
+// ── settings delete <key> ─────────────────────────────────────────────────
+settingsCommand
+    .command('delete <key>')
+    .description('Clear a setting (reverts to the registry default, or empty if no default). Audited.')
+    .action(async (key) => {
+    const err = classificationError(key);
+    if (err) {
+        log.error(err);
+        process.exit(1);
+    }
+    const store = openStore();
+    try {
+        const removed = await store.delete(key, actor());
+        if (removed)
+            log.success(`Cleared ${key}.`);
+        else
+            log.warn(`No stored value for ${key} (nothing to clear).`);
+    }
+    finally {
+        store.close();
+    }
+});
+// ── settings schema ───────────────────────────────────────────────────────
+settingsCommand
+    .command('schema')
+    .description('Show every registered workspace-setting key with default value, env alias, and constraint')
+    .option('--format <format>', 'Output format: table (default) or json', 'table')
+    .action(async (opts) => {
+    const schema = listWorkspaceSettingsSchema();
+    if (opts.format === 'json') {
+        console.log(JSON.stringify(schema, null, 2));
+        return;
+    }
+    const rows = schema.map((s) => ({
+        key: s.key,
+        default: s.default !== undefined ? JSON.stringify(s.default) : '—',
+        constraint: s.constraint
+            ? s.constraint.type === 'enum'
+                ? `enum: ${s.constraint.values.join(' | ')}`
+                : s.constraint.type
+            : '—',
+        env: s.env_aliases?.join(', ') ?? '—',
+    }));
+    console.log(fmtTable(rows));
+});
+//# sourceMappingURL=settings.js.map

package/dist/cli/commands/admin/settings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"settings.js","sourceRoot":"","sources":["../../../../src/cli/commands/admin/settings.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,GAAG,EAAE,MAAM,gBAAgB,CAAC;AACrC,OAAO,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;AAC7B,OAAO,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AAChC,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EACL,oBAAoB,EACpB,aAAa,EACb,qBAAqB,EACrB,cAAc,EACd,SAAS,EACT,2BAA2B,GAE5B,MAAM,gCAAgC,CAAC;AAExC,SAAS,SAAS;IAChB,MAAM,MAAM,GAAG,aAAa,EAAE,CAAC;IAC/B,MAAM,QAAQ,GAAG,qBAAqB,EAAE,CAAC;IACzC,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,UAAU,CAAC,YAAY,CAAC;QACxE,CAAC,CAAC,YAAY;QACd,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,cAAc,CAAC,CAAC;IACpC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IAC1C,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QACxB,GAAG,CAAC,KAAK,CAAC,+BAA+B,MAAM,EAAE,CAAC,CAAC;QACnD,GAAG,CAAC,IAAI,CAAC,qFAAqF,CAAC,CAAC;QAChG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,oBAAoB,CAAC;QACrC,MAAM;QACN,SAAS,EAAE,MAAM,CAAC,GAAG;QACrB,iBAAiB,EAAE,QAAQ;KAC5B,CAAC,CAAC;IACH,cAAc,CAAC,KAAK,CAAC,CAAC;IACtB,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,KAAK;IACZ,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;AAC7C,CAAC;AAED,SAAS,KAAK,CAAC,EAAsB;IACnC,IAAI,CAAC,EAAE;QAAE,OAAO,GAAG,CAAC;IACpB,OAAO,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;AACpC,CAAC;AAED,SAAS,QAAQ,CAAC,IAAmC;IACnD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACjC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAClC,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1F,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClE,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACxD,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACvG,OAAO,GAAG,MAAM,KAAK,GAAG,KAAK,IAAI,EAAE,CAAC;AACtC,CAAC;AAED;;;;;GAKG;AACH,SAAS,mBAAmB,CAAC,GAAW;IACtC,MAAM,GAAG,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;IAC3B,IAAI,CAAC,GAAG;QAAE,OAAO,gBAAgB,GAAG,gEAAgE,CAAC;IACrG,IAAI,GAAG,CAAC,cAAc,KAAK,kBAAkB,EAAE,CAAC;QAC9C,OAAO,QAAQ,GAAG,gDAAgD,GAAG,aAAa,CAAC;IACrF,CAAC;IACD,IAAI,GAAG,CAAC,cAAc,KAAK,WAAW,EAAE,CAAC;QACvC,OAAO,QAAQ,GAAG,yEAAyE,CAAC;IAC9F,CAAC;IACD,IAAI,GAAG,CAAC,cAAc,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3C,OAAO,QAAQ,GAAG,0EAA0E,CAAC;IAC/F,CAAC;IACD,IAAI,GAAG,CAAC,cAAc,KAAK,mBAAmB,EAAE,CAAC;QAC/C,OAAO,QAAQ,GAAG,qBAAqB,GAAG,CAAC,cAAc,qCAAqC,CAAC;IACjG,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,kBAAkB,CAAC,GAAW;IACrC,IAAI,GAAG,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IAChC,IAAI,GAAG,KAAK,OAAO;QAAE,OAAO,KAAK,CAAC;IAClC,IAAI,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IAClD,IAAI,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,UAAU,CAAC,GAAG,CAAC,CAAC;IACrD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,CAAC,MAAM,eAAe,GAAG,IAAI,OAAO,CAAC,UAAU,CAAC;KACnD,WAAW,CAAC,0GAA0G,CAAC,CAAC;AAE3H,6EAA6E;AAE7E,eAAe;KACZ,OAAO,CAAC,MAAM,CAAC;KACf,WAAW,CAAC,kDAAkD,CAAC;KAC/D,MAAM,CAAC,mBAAmB,EAAE,wCAAwC,EAAE,OAAO,CAAC;KAC9E,MAAM,CAAC,KAAK,EAAE,IAAwB,EAAE,EAAE;IACzC,MAAM,KAAK,GAAG,SAAS,EAAE,CAAC;IAC1B,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;QAC3B,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC3B,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CACxB,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;gBACd,IAAI,KAAc,CAAC;gBACnB,IAAI,CAAC;oBAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC;oBAAC,KAAK,GAAG,CAAC,CAAC,SAAS,CAAC;gBAAC,CAAC;gBACvE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC,SAAS,EAAE,UAAU,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC;YACjF,CAAC,CAAC,EACF,IAAI,EACJ,CAAC,CACF,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QACD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,GAAG,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;YAChC,OAAO;QACT,CAAC;QACD,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;YAC3B,IAAI,KAAc,CAAC;YACnB,IAAI,CAAC;gBAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC;gBAAC,KAAK,GAAG,CAAC,CAAC,SAAS,CAAC;YAAC,CAAC;YACvE,OAAO;gBACL,GAAG,EAAE,CAAC,CAAC,GAAG;gBACV,KAAK,EAAE,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;gBAChE,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;gBAC3B,UAAU,EAAE,CAAC,CAAC,SAAS;aACxB,CAAC;QACJ,CAAC,CAAC,CAAC;QACH,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9B,CAAC;YAAS,CAAC;QACT,KAAK,CAAC,KAAK,EAAE,CAAC;IAChB,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,6EAA6E;AAE7E,eAAe;KACZ,OAAO,CAAC,WAAW,CAAC;KACpB,WAAW,CAAC,qCAAqC,CAAC;KAClD,MAAM,CAAC,mBAAmB,EAAE,wCAAwC,EAAE,OAAO,CAAC;KAC9E,MAAM,CAAC,KAAK,EAAE,GAAW,EAAE,IAAwB,EAAE,EAAE;IACtD,MAAM,KAAK,GAAG,SAAS,EAAE,CAAC;IAC1B,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC7B,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,MAAM,GAAG,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;YAC3B,IAAI,GAAG,EAAE,cAAc,KAAK,mBAAmB,IAAI,GAAG,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC7E,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;oBAC3B,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;gBACvF,CAAC;qBAAM,CAAC;oBACN,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;gBAC3B,CAAC;gBACD,OAAO;YACT,CAAC;YACD,GAAG,CAAC,KAAK,CAAC,wBAAwB,GAAG,8BAA8B,CAAC,CAAC;YACrE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC3B,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACvD,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;QACzE,CAAC;IACH,CAAC;YAAS,CAAC;QACT,KAAK,CAAC,KAAK,EAAE,CAAC;IAChB,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,6EAA6E;AAE7E,eAAe;KACZ,OAAO,CAAC,mBAAmB,CAAC;KAC5B,WAAW,CAAC,6FAA6F,CAAC;KAC1G,MAAM,CAAC,KAAK,EAAE,GAAW,EAAE,QAAgB,EAAE,EAAE;IAC9C,MAAM,GAAG,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC;IACrC,IAAI,GAAG,EAAE,CAAC;QACR,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACf,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,MAAM,GAAG,GAAG,SAAS,CAAC,GAAG,CAAE,CAAC;IAC5B,qEAAqE;IACrE,oEAAoE;IACpE,gEAAgE;IAChE,6DAA6D;IAC7D,4DAA4D;IAC5D,IAAI,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IAC9C,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,gEAAgE;QAChE,kEAAkE;QAClE,mEAAmE;QACnE,kCAAkC;QAClC,MAAM,OAAO,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC;QAC7C,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;YACzB,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAC3C,CAAC;IACH,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,GAAG,CAAC,KAAK,CAAC,sBAAsB,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACxF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,KAAK,GAAG,SAAS,EAAE,CAAC;IAC1B,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QACnE,GAAG,CAAC,OAAO,CAAC,UAAU,GAAG,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,gBAAgB,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IACnG,CAAC;YAAS,CAAC;QACT,KAAK,CAAC,KAAK,EAAE,CAAC;IAChB,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,6EAA6E;AAE7E,eAAe;KACZ,OAAO,CAAC,cAAc,CAAC;KACvB,WAAW,CAAC,qFAAqF,CAAC;KAClG,MAAM,CAAC,KAAK,EAAE,GAAW,EAAE,EAAE;IAC5B,MAAM,GAAG,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC;IACrC,IAAI,GAAG,EAAE,CAAC;QACR,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACf,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,MAAM,KAAK,GAAG,SAAS,EAAE,CAAC;IAC1B,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC;QACjD,IAAI,OAAO;YAAE,GAAG,CAAC,OAAO,CAAC,WAAW,GAAG,GAAG,CAAC,CAAC;;YACvC,GAAG,CAAC,IAAI,CAAC,uBAAuB,GAAG,sBAAsB,CAAC,CAAC;IAClE,CAAC;YAAS,CAAC;QACT,KAAK,CAAC,KAAK,EAAE,CAAC;IAChB,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,6EAA6E;AAE7E,eAAe;KACZ,OAAO,CAAC,QAAQ,CAAC;KACjB,WAAW,CAAC,2FAA2F,CAAC;KACxG,MAAM,CAAC,mBAAmB,EAAE,wCAAwC,EAAE,OAAO,CAAC;KAC9E,MAAM,CAAC,KAAK,EAAE,IAAwB,EAAE,EAAE;IACzC,MAAM,MAAM,GAAG,2BAA2B,EAAE,CAAC;IAC7C,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAC3B,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC7C,OAAO;IACT,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC9B,GAAG,EAAE,CAAC,CAAC,GAAG;QACV,OAAO,EAAE,CAAC,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG;QAClE,UAAU,EAAE,CAAC,CAAC,UAAU;YACtB,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,KAAK,MAAM;gBAC5B,CAAC,CAAC,SAAS,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE;gBAC5C,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI;YACrB,CAAC,CAAC,GAAG;QACP,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG;KACtC,CAAC,CAAC,CAAC;IACJ,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;AAC9B,CAAC,CAAC,CAAC"}

package/dist/cli/commands/admin/token.d.ts

@@ -0,0 +1,42 @@
+/**
+ * studiograph admin token — manage CLI API tokens for a Studiograph server.
+ *
+ * Today: just `issue <server-url>`. Future subcommands (revoke, list) can
+ * accumulate here when the workflow calls for them.
+ *
+ * The `issue` flow:
+ *   1. Owner provides email/password (flags, env vars, or interactive prompt).
+ *   2. POST /api/auth/login → JWT cookie.
+ *   3. mintAndStoreCliToken() POSTs /api/auth/tokens with the cookie and
+ *      persists the resulting sg_ token to ~/.studiograph/user.json.
+ *
+ * Once the token is stored, `pull --remote` / `push --remote` resolve it
+ * automatically and the CLI runs non-interactively.
+ *
+ * Pairs with `studiograph deploy`: after deploy completes and the owner
+ * creates their account via the web UI setup form, they run
+ *   studiograph admin token issue <server-url>
+ * from their laptop to bootstrap CLI auth.
+ */
+import { Command } from 'commander';
+/**
+ * Exchange email/password for a JWT session cookie and mint+persist an sg_
+ * CLI token from it. Exported (not a private helper) so tests can exercise
+ * the login → mint flow without booting a real server or commander.
+ *
+ * On success: returns `{ ok: true, token, tokenName }` and the token has
+ * already been persisted via `mintAndStoreCliToken`.
+ * On failure: returns `{ ok: false, reason }` and nothing has been written.
+ */
+export declare function issueCliToken(serverUrl: string, email: string, password: string, opts?: {
+    name?: string;
+    fetchFn?: typeof fetch;
+}): Promise<{
+    ok: true;
+    token: string;
+    tokenName: string;
+} | {
+    ok: false;
+    reason: string;
+}>;
+export declare const adminTokenCommand: Command;

package/dist/cli/commands/admin/token.js

@@ -0,0 +1,126 @@
+/**
+ * studiograph admin token — manage CLI API tokens for a Studiograph server.
+ *
+ * Today: just `issue <server-url>`. Future subcommands (revoke, list) can
+ * accumulate here when the workflow calls for them.
+ *
+ * The `issue` flow:
+ *   1. Owner provides email/password (flags, env vars, or interactive prompt).
+ *   2. POST /api/auth/login → JWT cookie.
+ *   3. mintAndStoreCliToken() POSTs /api/auth/tokens with the cookie and
+ *      persists the resulting sg_ token to ~/.studiograph/user.json.
+ *
+ * Once the token is stored, `pull --remote` / `push --remote` resolve it
+ * automatically and the CLI runs non-interactively.
+ *
+ * Pairs with `studiograph deploy`: after deploy completes and the owner
+ * creates their account via the web UI setup form, they run
+ *   studiograph admin token issue <server-url>
+ * from their laptop to bootstrap CLI auth.
+ */
+import { Command } from 'commander';
+import { intro, outro, text, password as promptPassword, isCancel, log } from '@clack/prompts';
+import { mintAndStoreCliToken } from '../../../core/user-config.js';
+/**
+ * Exchange email/password for a JWT session cookie and mint+persist an sg_
+ * CLI token from it. Exported (not a private helper) so tests can exercise
+ * the login → mint flow without booting a real server or commander.
+ *
+ * On success: returns `{ ok: true, token, tokenName }` and the token has
+ * already been persisted via `mintAndStoreCliToken`.
+ * On failure: returns `{ ok: false, reason }` and nothing has been written.
+ */
+export async function issueCliToken(serverUrl, email, password, opts = {}) {
+    const fetchFn = opts.fetchFn ?? fetch;
+    const tokenName = opts.name?.trim()
+        || `cli-${new URL(serverUrl).hostname}-${new Date().toISOString().slice(0, 10)}`;
+    let cookieHeader;
+    try {
+        const loginRes = await fetchFn(`${serverUrl}/api/auth/login`, {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/json' },
+            body: JSON.stringify({ email, password }),
+        });
+        if (!loginRes.ok) {
+            return { ok: false, reason: `Login failed: ${loginRes.status} ${loginRes.statusText}` };
+        }
+        const cookies = loginRes.headers.getSetCookie?.() ?? [];
+        const tokenCookie = cookies.find((c) => c.startsWith('__sg_token='));
+        if (!tokenCookie) {
+            return { ok: false, reason: 'Server did not return a session cookie.' };
+        }
+        cookieHeader = tokenCookie.split(';')[0];
+    }
+    catch (err) {
+        return { ok: false, reason: `Could not reach server: ${err instanceof Error ? err.message : String(err)}` };
+    }
+    const mint = await mintAndStoreCliToken(serverUrl, cookieHeader, { name: tokenName, fetchFn });
+    if (!mint.ok)
+        return mint;
+    return { ok: true, token: mint.token, tokenName };
+}
+export const adminTokenCommand = new Command('token').description('Manage CLI API tokens for a Studiograph server');
+adminTokenCommand
+    .command('issue')
+    .description('Mint and store a CLI API token for a Studiograph server')
+    .argument('<server-url>', 'URL of the Studiograph server (e.g. https://studio.example.com)')
+    .option('--email <email>', 'Owner email (also reads STUDIOGRAPH_EMAIL env var)')
+    .option('--password <password>', 'Owner password (also reads STUDIOGRAPH_PASSWORD env var)')
+    .option('--name <name>', 'Optional human-readable name for the token (default: cli-<hostname>-<date>)')
+    .action(async (rawServerUrl, opts) => {
+    intro('Issue Studiograph CLI token');
+    const serverUrl = rawServerUrl.replace(/\/+$/, '');
+    // Credentials: flags > env vars > interactive prompt. Mirrors clone's
+    // bootstrap behavior and complies with feedback_cli_non_interactive —
+    // agents and CI never see a prompt as long as flags or env vars are set.
+    const flagEmail = opts.email?.trim();
+    const flagPassword = opts.password;
+    const envEmail = process.env.STUDIOGRAPH_EMAIL?.trim();
+    const envPassword = process.env.STUDIOGRAPH_PASSWORD;
+    let email;
+    let pass;
+    const providedEmail = flagEmail ?? envEmail;
+    const providedPassword = flagPassword ?? envPassword;
+    if (providedEmail && providedPassword) {
+        if (!providedEmail.includes('@')) {
+            outro('Invalid email address.');
+            process.exit(1);
+            return;
+        }
+        email = providedEmail;
+        pass = providedPassword;
+    }
+    else {
+        if (!process.stdout.isTTY) {
+            outro('No TTY for interactive prompts. Pass --email and --password, or set STUDIOGRAPH_EMAIL + STUDIOGRAPH_PASSWORD.');
+            process.exit(1);
+            return;
+        }
+        const emailPrompt = await text({
+            message: 'Owner email:',
+            validate: (v) => (v.includes('@') ? undefined : 'Enter a valid email'),
+        });
+        if (isCancel(emailPrompt)) {
+            outro('Cancelled');
+            process.exit(0);
+            return;
+        }
+        const passPrompt = await promptPassword({ message: 'Owner password:' });
+        if (isCancel(passPrompt)) {
+            outro('Cancelled');
+            process.exit(0);
+            return;
+        }
+        email = String(emailPrompt);
+        pass = String(passPrompt);
+    }
+    const result = await issueCliToken(serverUrl, email, pass, { name: opts.name });
+    if (!result.ok) {
+        outro(result.reason);
+        process.exit(1);
+        return;
+    }
+    log.info(`Token stored in ~/.studiograph/user.json (name: "${result.tokenName}")`);
+    outro(`Done. pull/push against ${serverUrl} will now be non-interactive.`);
+});
+//# sourceMappingURL=token.js.map

package/dist/cli/commands/admin/token.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"token.js","sourceRoot":"","sources":["../../../../src/cli/commands/admin/token.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,IAAI,cAAc,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,gBAAgB,CAAC;AAC/F,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AAQpE;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,SAAiB,EACjB,KAAa,EACb,QAAgB,EAChB,OAAkD,EAAE;IAEpD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,KAAK,CAAC;IACtC,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE;WAC9B,OAAO,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC,QAAQ,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;IAEnF,IAAI,YAAoB,CAAC;IACzB,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,SAAS,iBAAiB,EAAE;YAC5D,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;SAC1C,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,EAAE,EAAE,CAAC;QAC1F,CAAC;QACD,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,IAAI,EAAE,CAAC;QACxD,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC;QACrE,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,yCAAyC,EAAE,CAAC;QAC1E,CAAC;QACD,YAAY,GAAG,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,2BAA2B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;IAC9G,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,oBAAoB,CAAC,SAAS,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC;IAC/F,IAAI,CAAC,IAAI,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC;IAC1B,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,SAAS,EAAE,CAAC;AACpD,CAAC;AAED,MAAM,CAAC,MAAM,iBAAiB,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC,WAAW,CAAC,gDAAgD,CAAC,CAAC;AAEpH,iBAAiB;KACd,OAAO,CAAC,OAAO,CAAC;KAChB,WAAW,CAAC,yDAAyD,CAAC;KACtE,QAAQ,CAAC,cAAc,EAAE,iEAAiE,CAAC;KAC3F,MAAM,CAAC,iBAAiB,EAAE,oDAAoD,CAAC;KAC/E,MAAM,CAAC,uBAAuB,EAAE,0DAA0D,CAAC;KAC3F,MAAM,CAAC,eAAe,EAAE,6EAA6E,CAAC;KACtG,MAAM,CAAC,KAAK,EAAE,YAAoB,EAAE,IAAe,EAAE,EAAE;IACtD,KAAK,CAAC,6BAA6B,CAAC,CAAC;IAErC,MAAM,SAAS,GAAG,YAAY,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAEnD,sEAAsE;IACtE,sEAAsE;IACtE,yEAAyE;IACzE,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC;IACrC,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC;IACnC,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,IAAI,EAAE,CAAC;IACvD,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC;IAErD,IAAI,KAAa,CAAC;IAClB,IAAI,IAAY,CAAC;IAEjB,MAAM,aAAa,GAAG,SAAS,IAAI,QAAQ,CAAC;IAC5C,MAAM,gBAAgB,GAAG,YAAY,IAAI,WAAW,CAAC;IAErD,IAAI,aAAa,IAAI,gBAAgB,EAAE,CAAC;QACtC,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACjC,KAAK,CAAC,wBAAwB,CAAC,CAAC;YAChC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAChB,OAAO;QACT,CAAC;QACD,KAAK,GAAG,aAAa,CAAC;QACtB,IAAI,GAAG,gBAAgB,CAAC;IAC1B,CAAC;SAAM,CAAC;QACN,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YAC1B,KAAK,CAAC,+GAA+G,CAAC,CAAC;YACvH,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAChB,OAAO;QACT,CAAC;QACD,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC;YAC7B,OAAO,EAAE,cAAc;YACvB,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,qBAAqB,CAAC;SACvE,CAAC,CAAC;QACH,IAAI,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YAAC,KAAK,CAAC,WAAW,CAAC,CAAC;YAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QAC3E,MAAM,UAAU,GAAG,MAAM,cAAc,CAAC,EAAE,OAAO,EAAE,iBAAiB,EAAE,CAAC,CAAC;QACxE,IAAI,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;YAAC,KAAK,CAAC,WAAW,CAAC,CAAC;YAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QAC1E,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC;QAC5B,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC;IAC5B,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IAEhF,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACrB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChB,OAAO;IACT,CAAC;IAED,GAAG,CAAC,IAAI,CAAC,oDAAoD,MAAM,CAAC,SAAS,IAAI,CAAC,CAAC;IACnF,KAAK,CAAC,2BAA2B,SAAS,+BAA+B,CAAC,CAAC;AAC7E,CAAC,CAAC,CAAC"}

package/dist/cli/commands/admin/transfer-ownership.d.ts

@@ -0,0 +1,15 @@
+/**
+ * studiograph admin transfer-ownership — flip the workspace owner role.
+ *
+ * One-way change. Wraps POST /api/auth/transfer-ownership, which gates on
+ * `user.role === 'owner'` server-side. The current owner runs this on
+ * their laptop using their stored sg_ token; after the call returns OK
+ * the *new* owner can transfer it back via the web UI or by re-running
+ * this command with their own token. The CLI command itself does not
+ * re-verify roles — that's the server's job.
+ *
+ * Targeting is by email (operator-friendly) rather than userId; we
+ * resolve email → userId via GET /api/auth/users before the POST.
+ */
+import { Command } from 'commander';
+export declare const adminTransferOwnershipCommand: Command;

package/dist/cli/commands/admin/transfer-ownership.js

@@ -0,0 +1,106 @@
+/**
+ * studiograph admin transfer-ownership — flip the workspace owner role.
+ *
+ * One-way change. Wraps POST /api/auth/transfer-ownership, which gates on
+ * `user.role === 'owner'` server-side. The current owner runs this on
+ * their laptop using their stored sg_ token; after the call returns OK
+ * the *new* owner can transfer it back via the web UI or by re-running
+ * this command with their own token. The CLI command itself does not
+ * re-verify roles — that's the server's job.
+ *
+ * Targeting is by email (operator-friendly) rather than userId; we
+ * resolve email → userId via GET /api/auth/users before the POST.
+ */
+import { Command } from 'commander';
+import { intro, outro, log, confirm, isCancel } from '@clack/prompts';
+import { Workspace } from '../../../core/workspace.js';
+import { getStudiographToken } from '../../../core/user-config.js';
+export const adminTransferOwnershipCommand = new Command('transfer-ownership')
+    .description('Transfer workspace ownership to another user (owner only)')
+    .argument('<email>', 'Email of the user who should become the new owner')
+    .option('--token <value>', 'Server API token (also reads STUDIOGRAPH_TOKEN)')
+    .option('--server-url <url>', 'Server URL (default: workspace.server_url from workspace.json)')
+    .option('--yes', 'Skip confirmation prompt')
+    .action(async (targetEmail, opts) => {
+    intro('Transfer workspace ownership');
+    const workspace = new Workspace();
+    if (!workspace.isWorkspace()) {
+        outro('Not a Studiograph workspace. Run from your workspace root.');
+        process.exit(1);
+        return;
+    }
+    const config = await workspace.loadConfig();
+    const serverUrl = (opts.serverUrl ?? config.server_url)?.replace(/\/+$/, '');
+    if (!serverUrl) {
+        outro('No server URL configured. Pass --server-url <url>, or run this from a workspace cloned via `studiograph clone`.');
+        process.exit(1);
+        return;
+    }
+    // Precedence: --token flag → STUDIOGRAPH_TOKEN env → stored token in user.json.
+    const token = opts.token?.trim() || process.env.STUDIOGRAPH_TOKEN?.trim() || getStudiographToken(serverUrl);
+    if (!token) {
+        outro(`No API token for ${serverUrl}. Run \`studiograph admin token issue ${serverUrl}\` first, or pass --token / STUDIOGRAPH_TOKEN.`);
+        process.exit(1);
+        return;
+    }
+    // Step 1: resolve email → userId. /api/auth/users requires authentication
+    // (any user can list, gated by requireUser). With Bearer sg_ accepted at
+    // src/server/routes/auth-api.ts:requireUser the CLI auth flows through.
+    const usersRes = await fetch(`${serverUrl}/api/auth/users`, {
+        headers: { Authorization: `Bearer ${token}`, Accept: 'application/json' },
+    });
+    if (!usersRes.ok) {
+        outro(`Could not list users (${usersRes.status} ${usersRes.statusText}).`);
+        process.exit(1);
+        return;
+    }
+    const { users } = (await usersRes.json());
+    const needle = targetEmail.trim().toLowerCase();
+    const target = users.find((u) => u.email.toLowerCase() === needle);
+    if (!target) {
+        outro(`No user with email ${targetEmail}. Known users: ${users.map((u) => u.email).join(', ') || '(none)'}.`);
+        process.exit(1);
+        return;
+    }
+    if (target.role === 'owner') {
+        outro(`${target.email} is already the workspace owner — nothing to do.`);
+        return;
+    }
+    // Step 2: confirm. Transferring ownership is one-way (the caller
+    // demotes themselves to admin), so the operator gets one explicit
+    // chance to bail unless they passed --yes.
+    if (!opts.yes && process.stdout.isTTY) {
+        const display = target.displayName ?? target.display_name ?? target.email;
+        const ok = await confirm({
+            message: `Transfer ownership to ${display} (${target.email})? You will be demoted to member.`,
+            initialValue: false,
+        });
+        if (!ok || isCancel(ok)) {
+            outro('Cancelled');
+            process.exit(0);
+            return;
+        }
+    }
+    // Step 3: POST. Server enforces caller-is-owner; we just send the request.
+    const res = await fetch(`${serverUrl}/api/auth/transfer-ownership`, {
+        method: 'POST',
+        headers: {
+            Authorization: `Bearer ${token}`,
+            'Content-Type': 'application/json',
+            Accept: 'application/json',
+        },
+        body: JSON.stringify({ targetUserId: target.id }),
+    });
+    if (!res.ok) {
+        const text = await res.text();
+        outro(`Transfer failed (${res.status}): ${text}`);
+        process.exit(1);
+        return;
+    }
+    log.success(`Ownership transferred to ${target.email}.`);
+    log.message('Your role is now `member`. The new owner can transfer it back via\n' +
+        '  studiograph admin transfer-ownership <your-email>\n' +
+        'or from the web UI (Settings → Team).');
+    outro('Done.');
+});
+//# sourceMappingURL=transfer-ownership.js.map

package/dist/cli/commands/admin/transfer-ownership.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"transfer-ownership.js","sourceRoot":"","sources":["../../../../src/cli/commands/admin/transfer-ownership.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AACtE,OAAO,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAC;AACvD,OAAO,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AAgBnE,MAAM,CAAC,MAAM,6BAA6B,GAAG,IAAI,OAAO,CAAC,oBAAoB,CAAC;KAC3E,WAAW,CAAC,2DAA2D,CAAC;KACxE,QAAQ,CAAC,SAAS,EAAE,mDAAmD,CAAC;KACxE,MAAM,CAAC,iBAAiB,EAAE,iDAAiD,CAAC;KAC5E,MAAM,CAAC,oBAAoB,EAAE,gEAAgE,CAAC;KAC9F,MAAM,CAAC,OAAO,EAAE,0BAA0B,CAAC;KAC3C,MAAM,CAAC,KAAK,EAAE,WAAmB,EAAE,IAAkB,EAAE,EAAE;IACxD,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAEtC,MAAM,SAAS,GAAG,IAAI,SAAS,EAAE,CAAC;IAClC,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,EAAE,CAAC;QAC7B,KAAK,CAAC,4DAA4D,CAAC,CAAC;QACpE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChB,OAAO;IACT,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,UAAU,EAAE,CAAC;IAC5C,MAAM,SAAS,GAAG,CAAC,IAAI,CAAC,SAAS,IAAK,MAAc,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACtF,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,KAAK,CACH,iHAAiH,CAClH,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChB,OAAO;IACT,CAAC;IAED,gFAAgF;IAChF,MAAM,KAAK,GACT,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,IAAI,EAAE,IAAI,mBAAmB,CAAC,SAAS,CAAC,CAAC;IAChG,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,KAAK,CACH,oBAAoB,SAAS,yCAAyC,SAAS,gDAAgD,CAChI,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChB,OAAO;IACT,CAAC;IAED,0EAA0E;IAC1E,yEAAyE;IACzE,wEAAwE;IACxE,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,SAAS,iBAAiB,EAAE;QAC1D,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;KAC1E,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,KAAK,CAAC,yBAAyB,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,IAAI,CAAC,CAAC;QAC3E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChB,OAAO;IACT,CAAC;IACD,MAAM,EAAE,KAAK,EAAE,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAyB,CAAC;IAClE,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAChD,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,CAAC;IACnE,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,KAAK,CAAC,sBAAsB,WAAW,kBAAkB,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,QAAQ,GAAG,CAAC,CAAC;QAC9G,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChB,OAAO;IACT,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAC5B,KAAK,CAAC,GAAG,MAAM,CAAC,KAAK,kDAAkD,CAAC,CAAC;QACzE,OAAO;IACT,CAAC;IAED,iEAAiE;IACjE,kEAAkE;IAClE,2CAA2C;IAC3C,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QACtC,MAAM,OAAO,GAAG,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,YAAY,IAAI,MAAM,CAAC,KAAK,CAAC;QAC1E,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC;YACvB,OAAO,EAAE,yBAAyB,OAAO,KAAK,MAAM,CAAC,KAAK,mCAAmC;YAC7F,YAAY,EAAE,KAAK;SACpB,CAAC,CAAC;QACH,IAAI,CAAC,EAAE,IAAI,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;YAAC,KAAK,CAAC,WAAW,CAAC,CAAC;YAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;IAC3E,CAAC;IAED,2EAA2E;IAC3E,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,SAAS,8BAA8B,EAAE;QAClE,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,aAAa,EAAE,UAAU,KAAK,EAAE;YAChC,cAAc,EAAE,kBAAkB;YAClC,MAAM,EAAE,kBAAkB;SAC3B;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC;KAClD,CAAC,CAAC;IACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC9B,KAAK,CAAC,oBAAoB,GAAG,CAAC,MAAM,MAAM,IAAI,EAAE,CAAC,CAAC;QAClD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChB,OAAO;IACT,CAAC;IAED,GAAG,CAAC,OAAO,CAAC,4BAA4B,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC;IACzD,GAAG,CAAC,OAAO,CACT,qEAAqE;QACnE,uDAAuD;QACvD,uCAAuC,CAC1C,CAAC;IACF,KAAK,CAAC,OAAO,CAAC,CAAC;AACjB,CAAC,CAAC,CAAC"}

package/dist/cli/commands/admin/user.d.ts

@@ -0,0 +1,11 @@
+/**
+ * studiograph user command — manage server user accounts.
+ *
+ * Phase C6 surface: every password input is a flag (`--password` or
+ * `--password-stdin`), no interactive prompts. The CLI now works in CI
+ * and agent flows out of the box. The web UI (Settings → Team) is the
+ * canonical surface for member-tier owner UX; this command is the
+ * break-glass recovery path.
+ */
+import { Command } from 'commander';
+export declare const userCommand: Command;