studiograph 1.3.48-next.13 → 1.3.48-next.131

package/dist/cli/commands/about.js.map

@@ -1 +1 @@
-{"version":3,"file":"about.js","sourceRoot":"","sources":["../../../src/cli/commands/about.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,IAAI,CAAC;AAC9C,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzC,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC5D,OAAO,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AAEpD,MAAM,QAAQ,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,cAAc,EAAE,QAAQ,CAAU,CAAC;AAErF,MAAM,QAAQ,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAE3D,MAAM,CAAC,MAAM,YAAY,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC;KAC7C,WAAW,CAAC,oCAAoC,CAAC;KACjD,MAAM,CAAC,YAAY,EAAE,0BAA0B,CAAC;KAChD,MAAM,CAAC,mBAAmB,EAAE,yCAAyC,CAAC;KACtE,MAAM,CAAC,kBAAkB,EAAE,0BAA0B,CAAC;KACtD,MAAM,CAAC,KAAK,EAAE,IAA6D,EAAE,EAAE;IAC9E,MAAM,SAAS,GAAG,IAAI,SAAS,EAAE,CAAC;IAClC,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,EAAE,CAAC;QAC7B,OAAO,CAAC,KAAK,CAAC,4DAA4D,CAAC,CAAC;QAC5E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,gBAAgB,EAAE,EAAE,cAAc,EAAE,UAAU,CAAC,CAAC;IAEjF,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1B,OAAO,CAAC,KAAK,CAAC,mBAAmB,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YAC7C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAChD,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QAC9B,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;QACjC,OAAO;IACT,CAAC;IAED,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;QACrB,8CAA8C;QAC9C,MAAM,QAAQ,GAAG,SAAS,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC;QAC7C,MAAM,cAAc,GAA2B,EAAE,CAAC;QAClD,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,MAAM,OAAO,iCAAiC,CAAC,CAAC;YACzE,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACpC,cAAc,CAAC,OAAO,CAAC,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QACrD,CAAC;QAED,GAAG,CAAC,IAAI,CAAC,0DAA0D,CAAC,CAAC;QAErE,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC;gBACvB,OAAO,EAAE,OAAO;gBAChB,WAAW,EAAE,cAAc,CAAC,OAAO,CAAC,IAAI,iBAAiB,OAAO,CAAC,WAAW,EAAE,KAAK;gBACnF,YAAY,EAAE,cAAc,CAAC,OAAO,CAAC;aACtC,CAAC,CAAC;YAEH,IAAI,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;gBACpB,KAAK,CAAC,WAAW,CAAC,CAAC;gBACnB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;YAED,cAAc,CAAC,OAAO,CAAC,GAAI,KAAgB,CAAC,IAAI,EAAE,CAAC;QACrD,CAAC;QAED,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,KAAK,CAAC,IAAI,CAAC,MAAM,OAAO,IAAI,CAAC,CAAC;YAC9B,IAAI,cAAc,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC5B,KAAK,CAAC,IAAI,CAAC,GAAG,cAAc,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAC7C,CAAC;QACH,CAAC;QAED,SAAS,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QACvC,KAAK,CAAC,mBAAmB,CAAC,CAAC;QAC3B,OAAO;IACT,CAAC;IAED,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACd,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAC3B,SAAS,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QACjC,CAAC;QACD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,IAAI,IAAI,CAAC;QAChE,IAAI,CAAC;YACH,QAAQ,CAAC,GAAG,MAAM,KAAK,SAAS,GAAG,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;QAC7D,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,KAAK,CAAC,0BAA0B,MAAM,EAAE,CAAC,CAAC;YAClD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,OAAO;IACT,CAAC;IAED,mBAAmB;IACnB,MAAM,OAAO,GAAG,SAAS,CAAC,SAAS,EAAE,CAAC;IACtC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,CAAC,GAAG,CAAC,kEAAkE,CAAC,CAAC;QAChF,OAAO;IACT,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;AACvB,CAAC,CAAC,CAAC"}
+{"version":3,"file":"about.js","sourceRoot":"","sources":["../../../src/cli/commands/about.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,IAAI,CAAC;AAC9C,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAC1C,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC5D,OAAO,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AAEpD,MAAM,QAAQ,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,cAAc,EAAE,QAAQ,CAAU,CAAC;AAErF,MAAM,QAAQ,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAE3D,MAAM,UAAU,kBAAkB,CAAC,MAAc;IAC/C,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,IAAI,OAAO,GAAG,EAAE,CAAC;IACjB,IAAI,KAAK,GAAqB,IAAI,CAAC;IACnC,IAAI,QAAQ,GAAG,KAAK,CAAC;IAErB,KAAK,MAAM,EAAE,IAAI,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;QAC/B,IAAI,QAAQ,EAAE,CAAC;YACb,OAAO,IAAI,EAAE,CAAC;YACd,QAAQ,GAAG,KAAK,CAAC;YACjB,SAAS;QACX,CAAC;QACD,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;YAChB,QAAQ,GAAG,IAAI,CAAC;YAChB,SAAS;QACX,CAAC;QACD,IAAI,KAAK,EAAE,CAAC;YACV,IAAI,EAAE,KAAK,KAAK;gBAAE,KAAK,GAAG,IAAI,CAAC;;gBAC1B,OAAO,IAAI,EAAE,CAAC;YACnB,SAAS;QACX,CAAC;QACD,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YAC7B,KAAK,GAAG,EAAE,CAAC;YACX,SAAS;QACX,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;YAClB,IAAI,OAAO,EAAE,CAAC;gBACZ,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBACnB,OAAO,GAAG,EAAE,CAAC;YACf,CAAC;YACD,SAAS;QACX,CAAC;QACD,OAAO,IAAI,EAAE,CAAC;IAChB,CAAC;IAED,IAAI,QAAQ;QAAE,OAAO,IAAI,IAAI,CAAC;IAC9B,IAAI,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IAC/D,IAAI,OAAO;QAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAChC,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,MAAM,YAAY,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC;KAC7C,WAAW,CAAC,oCAAoC,CAAC;KACjD,MAAM,CAAC,YAAY,EAAE,0BAA0B,CAAC;KAChD,MAAM,CAAC,mBAAmB,EAAE,yCAAyC,CAAC;KACtE,MAAM,CAAC,kBAAkB,EAAE,0BAA0B,CAAC;KACtD,MAAM,CAAC,KAAK,EAAE,IAA6D,EAAE,EAAE;IAC9E,MAAM,SAAS,GAAG,IAAI,SAAS,EAAE,CAAC;IAClC,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,EAAE,CAAC;QAC7B,OAAO,CAAC,KAAK,CAAC,4DAA4D,CAAC,CAAC;QAC5E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,gBAAgB,EAAE,EAAE,cAAc,EAAE,UAAU,CAAC,CAAC;IAEjF,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1B,OAAO,CAAC,KAAK,CAAC,mBAAmB,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YAC7C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAChD,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QAC9B,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;QACjC,OAAO;IACT,CAAC;IAED,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;QACrB,8CAA8C;QAC9C,MAAM,QAAQ,GAAG,SAAS,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC;QAC7C,MAAM,cAAc,GAA2B,EAAE,CAAC;QAClD,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,MAAM,OAAO,iCAAiC,CAAC,CAAC;YACzE,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACpC,cAAc,CAAC,OAAO,CAAC,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QACrD,CAAC;QAED,GAAG,CAAC,IAAI,CAAC,0DAA0D,CAAC,CAAC;QAErE,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC;gBACvB,OAAO,EAAE,OAAO;gBAChB,WAAW,EAAE,cAAc,CAAC,OAAO,CAAC,IAAI,iBAAiB,OAAO,CAAC,WAAW,EAAE,KAAK;gBACnF,YAAY,EAAE,cAAc,CAAC,OAAO,CAAC;aACtC,CAAC,CAAC;YAEH,IAAI,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;gBACpB,KAAK,CAAC,WAAW,CAAC,CAAC;gBACnB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;YAED,cAAc,CAAC,OAAO,CAAC,GAAI,KAAgB,CAAC,IAAI,EAAE,CAAC;QACrD,CAAC;QAED,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,KAAK,CAAC,IAAI,CAAC,MAAM,OAAO,IAAI,CAAC,CAAC;YAC9B,IAAI,cAAc,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC5B,KAAK,CAAC,IAAI,CAAC,GAAG,cAAc,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAC7C,CAAC;QACH,CAAC;QAED,SAAS,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QACvC,KAAK,CAAC,mBAAmB,CAAC,CAAC;QAC3B,OAAO;IACT,CAAC;IAED,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACd,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAC3B,SAAS,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QACjC,CAAC;QACD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,IAAI,IAAI,CAAC;QAChE,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,EAAE,GAAG,UAAU,CAAC,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;YACxD,IAAI,CAAC,GAAG;gBAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;YACrD,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,EAAE,CAAC,GAAG,UAAU,EAAE,SAAS,CAAC,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;YAC9F,IAAI,MAAM,CAAC,KAAK;gBAAE,MAAM,MAAM,CAAC,KAAK,CAAC;YACrC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,MAAM,CAAC,MAAM,IAAI,SAAS,EAAE,CAAC,CAAC;QACtG,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,OAAO,CAAC,KAAK,CAAC,0BAA0B,MAAM,EAAE,CAAC,CAAC;YAClD,IAAI,GAAG,EAAE,OAAO;gBAAE,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAC7C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,OAAO;IACT,CAAC;IAED,mBAAmB;IACnB,MAAM,OAAO,GAAG,SAAS,CAAC,SAAS,EAAE,CAAC;IACtC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,CAAC,GAAG,CAAC,kEAAkE,CAAC,CAAC;QAChF,OAAO;IACT,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;AACvB,CAAC,CAAC,CAAC"}

package/dist/cli/commands/audit.d.ts

@@ -0,0 +1,21 @@
+/**
+ * studiograph audit — read-only operator view of the append-only audit log.
+ *
+ *   studiograph audit list [filters]
+ *     --key <pattern>            Filter by key name (exact match)
+ *     --actor <user-id>          Filter by actor user-id
+ *     --action <action>          Filter by action type
+ *                                (set|delete|test|describe|migrate|...)
+ *     --since <iso-date>         Only events at-or-after this time
+ *     --until <iso-date>         Only events at-or-before this time
+ *     --limit <n>                Page size (default 50, max 500)
+ *     --offset <n>               Pagination offset
+ *     --format <table|json>      Output format (default table)
+ *
+ * Audit reads aren't audited themselves (append-only log; reading
+ * doesn't change state). The UI used to surface this as a Settings →
+ * Audit Log tab; removed because filtering and exporting are much
+ * better in a terminal.
+ */
+import { Command } from 'commander';
+export declare const auditCommand: Command;

package/dist/cli/commands/audit.js

@@ -0,0 +1,174 @@
+/**
+ * studiograph audit — read-only operator view of the append-only audit log.
+ *
+ *   studiograph audit list [filters]
+ *     --key <pattern>            Filter by key name (exact match)
+ *     --actor <user-id>          Filter by actor user-id
+ *     --action <action>          Filter by action type
+ *                                (set|delete|test|describe|migrate|...)
+ *     --since <iso-date>         Only events at-or-after this time
+ *     --until <iso-date>         Only events at-or-before this time
+ *     --limit <n>                Page size (default 50, max 500)
+ *     --offset <n>               Pagination offset
+ *     --format <table|json>      Output format (default table)
+ *
+ * Audit reads aren't audited themselves (append-only log; reading
+ * doesn't change state). The UI used to surface this as a Settings →
+ * Audit Log tab; removed because filtering and exporting are much
+ * better in a terminal.
+ */
+import { Command } from 'commander';
+import { log } from '@clack/prompts';
+import { homedir } from 'os';
+import { existsSync } from 'fs';
+import { join } from 'path';
+import { SqliteEncryptedStore, loadMasterKey, loadPreviousMasterKey, setSecretStore, } from '../../core/secrets/index.js';
+function openStore() {
+    const loaded = loadMasterKey();
+    const previous = loadPreviousMasterKey();
+    const sgRoot = process.env.RAILWAY_ENVIRONMENT && existsSync('/workspace')
+        ? '/workspace'
+        : join(homedir(), '.studiograph');
+    const dbPath = join(sgRoot, 'secrets.db');
+    if (!existsSync(dbPath)) {
+        log.error(`Secrets store not found at ${dbPath}`);
+        log.info('Run `studiograph init` first, or start `studiograph serve` to initialize the store.');
+        process.exit(1);
+    }
+    const store = new SqliteEncryptedStore({
+        dbPath,
+        masterKey: loaded.key,
+        previousMasterKey: previous,
+    });
+    setSecretStore(store);
+    return store;
+}
+function parseTs(v) {
+    if (!v)
+        return undefined;
+    const n = Number(v);
+    if (Number.isFinite(n) && n > 0)
+        return n;
+    const d = Date.parse(v);
+    return Number.isFinite(d) ? d : undefined;
+}
+function fmtTs(ms) {
+    return new Date(ms).toISOString();
+}
+function fmtActor(row) {
+    return row.actor_type === 'user'
+        ? `user:${row.actor_user_id ?? '?'}`
+        : `system:${row.actor_system_id ?? '?'}`;
+}
+function fmtTable(rows) {
+    if (rows.length === 0)
+        return '';
+    const cols = Object.keys(rows[0]);
+    const widths = cols.map((c) => Math.max(c.length, ...rows.map((r) => r[c]?.length ?? 0)));
+    const header = cols.map((c, i) => c.padEnd(widths[i])).join('  ');
+    const sep = widths.map((w) => '─'.repeat(w)).join('  ');
+    const body = rows.map((r) => cols.map((c, i) => (r[c] ?? '').padEnd(widths[i])).join('  ')).join('\n');
+    return `${header}\n${sep}\n${body}`;
+}
+export const auditCommand = new Command('audit')
+    .description('Read the append-only audit log (formerly the Settings → Audit Log tab)');
+auditCommand
+    .command('list')
+    .description('List recent audit events, newest first. Filters compose with AND.')
+    .option('--key <key>', 'Filter by key name (exact match)')
+    .option('--actor <user-id>', 'Filter by actor user-id')
+    .option('--actor-type <type>', 'Filter by actor type: user or system')
+    .option('--action <action>', 'Filter by action (set, delete, test, describe, migrate, decrypt_fail, rotate_master, bundle_export, bundle_import)')
+    .option('--since <iso-date>', 'Only events at-or-after this time (ISO date or epoch ms)')
+    .option('--until <iso-date>', 'Only events at-or-before this time (ISO date or epoch ms)')
+    .option('--limit <n>', 'Page size, default 50, max 500', '50')
+    .option('--offset <n>', 'Pagination offset', '0')
+    .option('--format <format>', 'Output format: table (default) or json', 'table')
+    .action(async (opts) => {
+    const store = openStore();
+    try {
+        const where = [];
+        const params = [];
+        if (opts.key) {
+            where.push('key = ?');
+            params.push(opts.key);
+        }
+        if (opts.actor) {
+            where.push('actor_user_id = ?');
+            params.push(opts.actor);
+        }
+        if (opts.actorType) {
+            where.push('actor_type = ?');
+            params.push(opts.actorType);
+        }
+        if (opts.action) {
+            where.push('action = ?');
+            params.push(opts.action);
+        }
+        const since = parseTs(opts.since);
+        const until = parseTs(opts.until);
+        if (since !== undefined) {
+            where.push('ts >= ?');
+            params.push(since);
+        }
+        if (until !== undefined) {
+            where.push('ts <= ?');
+            params.push(until);
+        }
+        const limit = Math.min(Math.max(parseInt(opts.limit, 10) || 50, 1), 500);
+        const offset = Math.max(parseInt(opts.offset, 10) || 0, 0);
+        const sql = `SELECT id, ts, actor_type, actor_user_id, actor_system_id, action,
+                key, success, ip, user_agent, detail_json
+           FROM audit_log
+          ${where.length ? `WHERE ${where.join(' AND ')}` : ''}
+          ORDER BY ts DESC
+          LIMIT ? OFFSET ?`;
+        // `store.db` is private; the route code already reaches in via `(store as any).db`
+        // and we follow the same pattern. Refactoring the store to expose a public
+        // query helper is out of scope for this CLI.
+        const rows = (store.db
+            .prepare(sql)
+            .all(...params, limit, offset));
+        const totalRow = (store.db
+            .prepare(`SELECT COUNT(*) AS n FROM audit_log ${where.length ? `WHERE ${where.join(' AND ')}` : ''}`)
+            .get(...params));
+        if (opts.format === 'json') {
+            console.log(JSON.stringify({
+                total: totalRow.n,
+                limit,
+                offset,
+                items: rows.map((r) => ({
+                    id: r.id,
+                    ts: r.ts,
+                    actor_type: r.actor_type,
+                    actor_user_id: r.actor_user_id,
+                    actor_system_id: r.actor_system_id,
+                    action: r.action,
+                    key: r.key,
+                    success: !!r.success,
+                    ip: r.ip,
+                    user_agent: r.user_agent,
+                    detail: r.detail_json ? JSON.parse(r.detail_json) : null,
+                })),
+            }, null, 2));
+            return;
+        }
+        if (rows.length === 0) {
+            log.info(`No audit events found${where.length ? ' for the given filters' : ''}.`);
+            return;
+        }
+        const tableRows = rows.map((r) => ({
+            time: fmtTs(r.ts),
+            actor: fmtActor(r),
+            action: r.action,
+            key: r.key ?? '—',
+            result: r.success ? 'ok' : 'fail',
+        }));
+        console.log(fmtTable(tableRows));
+        console.log(`\nShowing ${rows.length} of ${totalRow.n} events (offset=${offset}, limit=${limit})`);
+    }
+    finally {
+        store.close();
+    }
+});
+//# sourceMappingURL=audit.js.map

package/dist/cli/commands/audit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.js","sourceRoot":"","sources":["../../../src/cli/commands/audit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,GAAG,EAAE,MAAM,gBAAgB,CAAC;AACrC,OAAO,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;AAC7B,OAAO,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AAChC,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EACL,oBAAoB,EACpB,aAAa,EACb,qBAAqB,EACrB,cAAc,GACf,MAAM,6BAA6B,CAAC;AAErC,SAAS,SAAS;IAChB,MAAM,MAAM,GAAG,aAAa,EAAE,CAAC;IAC/B,MAAM,QAAQ,GAAG,qBAAqB,EAAE,CAAC;IACzC,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,UAAU,CAAC,YAAY,CAAC;QACxE,CAAC,CAAC,YAAY;QACd,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,cAAc,CAAC,CAAC;IACpC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IAC1C,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QACxB,GAAG,CAAC,KAAK,CAAC,8BAA8B,MAAM,EAAE,CAAC,CAAC;QAClD,GAAG,CAAC,IAAI,CAAC,qFAAqF,CAAC,CAAC;QAChG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,oBAAoB,CAAC;QACrC,MAAM;QACN,SAAS,EAAE,MAAM,CAAC,GAAG;QACrB,iBAAiB,EAAE,QAAQ;KAC5B,CAAC,CAAC;IACH,cAAc,CAAC,KAAK,CAAC,CAAC;IACtB,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,OAAO,CAAC,CAAqB;IACpC,IAAI,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IACzB,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;IACpB,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,CAAC,CAAC;IAC1C,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACxB,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC5C,CAAC;AAED,SAAS,KAAK,CAAC,EAAU;IACvB,OAAO,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;AACpC,CAAC;AAED,SAAS,QAAQ,CAAC,GAAa;IAC7B,OAAO,GAAG,CAAC,UAAU,KAAK,MAAM;QAC9B,CAAC,CAAC,QAAQ,GAAG,CAAC,aAAa,IAAI,GAAG,EAAE;QACpC,CAAC,CAAC,UAAU,GAAG,CAAC,eAAe,IAAI,GAAG,EAAE,CAAC;AAC7C,CAAC;AAED,SAAS,QAAQ,CAAC,IAAmC;IACnD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACjC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAClC,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1F,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClE,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACxD,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACvG,OAAO,GAAG,MAAM,KAAK,GAAG,KAAK,IAAI,EAAE,CAAC;AACtC,CAAC;AAgBD,MAAM,CAAC,MAAM,YAAY,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC;KAC7C,WAAW,CAAC,wEAAwE,CAAC,CAAC;AAEzF,YAAY;KACT,OAAO,CAAC,MAAM,CAAC;KACf,WAAW,CAAC,mEAAmE,CAAC;KAChF,MAAM,CAAC,aAAa,EAAE,kCAAkC,CAAC;KACzD,MAAM,CAAC,mBAAmB,EAAE,yBAAyB,CAAC;KACtD,MAAM,CAAC,qBAAqB,EAAE,sCAAsC,CAAC;KACrE,MAAM,CAAC,mBAAmB,EAAE,oHAAoH,CAAC;KACjJ,MAAM,CAAC,oBAAoB,EAAE,0DAA0D,CAAC;KACxF,MAAM,CAAC,oBAAoB,EAAE,2DAA2D,CAAC;KACzF,MAAM,CAAC,aAAa,EAAE,gCAAgC,EAAE,IAAI,CAAC;KAC7D,MAAM,CAAC,cAAc,EAAE,mBAAmB,EAAE,GAAG,CAAC;KAChD,MAAM,CAAC,mBAAmB,EAAE,wCAAwC,EAAE,OAAO,CAAC;KAC9E,MAAM,CAAC,KAAK,EAAE,IAUd,EAAE,EAAE;IACH,MAAM,KAAK,GAAG,SAAS,EAAE,CAAC;IAC1B,IAAI,CAAC;QACH,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAc,EAAE,CAAC;QAC7B,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;YAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAAC,CAAC;QAC/D,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAAC,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;YAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAAC,CAAC;QAC7E,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YAAC,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;YAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAAC,CAAC;QAClF,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAAC,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAAC,CAAC;QACxE,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClC,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAAC,CAAC;QACvE,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAAC,CAAC;QAEvE,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QACzE,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QAE3D,MAAM,GAAG,GACP;;;YAGI,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE;;2BAEnC,CAAC;QACtB,mFAAmF;QACnF,2EAA2E;QAC3E,6CAA6C;QAC7C,MAAM,IAAI,GAAG,CAAE,KAAyF,CAAC,EAAE;aACxG,OAAO,CAAC,GAAG,CAAC;aACZ,GAAG,CAAC,GAAG,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,CAAe,CAAC;QAEhD,MAAM,QAAQ,GAAG,CAAE,KAA4F,CAAC,EAAE;aAC/G,OAAO,CAAC,uCAAuC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;aACpG,GAAG,CAAC,GAAG,MAAM,CAAC,CAAkB,CAAC;QAEpC,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC3B,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC;gBACzB,KAAK,EAAE,QAAQ,CAAC,CAAC;gBACjB,KAAK;gBACL,MAAM;gBACN,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;oBACtB,EAAE,EAAE,CAAC,CAAC,EAAE;oBACR,EAAE,EAAE,CAAC,CAAC,EAAE;oBACR,UAAU,EAAE,CAAC,CAAC,UAAU;oBACxB,aAAa,EAAE,CAAC,CAAC,aAAa;oBAC9B,eAAe,EAAE,CAAC,CAAC,eAAe;oBAClC,MAAM,EAAE,CAAC,CAAC,MAAM;oBAChB,GAAG,EAAE,CAAC,CAAC,GAAG;oBACV,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO;oBACpB,EAAE,EAAE,CAAC,CAAC,EAAE;oBACR,UAAU,EAAE,CAAC,CAAC,UAAU;oBACxB,MAAM,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI;iBACzD,CAAC,CAAC;aACJ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YACb,OAAO;QACT,CAAC;QAED,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtB,GAAG,CAAC,IAAI,CAAC,wBAAwB,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YAClF,OAAO;QACT,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACjC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;YACjB,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC;YAClB,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,GAAG,EAAE,CAAC,CAAC,GAAG,IAAI,GAAG;YACjB,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM;SAClC,CAAC,CAAC,CAAC;QACJ,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;QACjC,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,CAAC,MAAM,OAAO,QAAQ,CAAC,CAAC,mBAAmB,MAAM,WAAW,KAAK,GAAG,CAAC,CAAC;IACrG,CAAC;YAAS,CAAC;QACT,KAAK,CAAC,KAAK,EAAE,CAAC;IAChB,CAAC;AACH,CAAC,CAAC,CAAC"}

package/dist/cli/commands/clear.d.ts

@@ -1,5 +1,10 @@
 /**
  * studiograph clear — clear agent sessions and/or memory
+ *
+ * Local mode (default): wipes `~/.studiograph/sessions/` and `/memory/` on
+ * this machine. Remote mode (`--remote <url>`): POSTs to `/api/clear` on a
+ * deployed server, which scopes the wipe to the authed user's per-user
+ * directory only.
  */
 import { Command } from 'commander';
 export declare const clearCommand: Command;

package/dist/cli/commands/clear.js

@@ -1,10 +1,17 @@
 /**
  * studiograph clear — clear agent sessions and/or memory
+ *
+ * Local mode (default): wipes `~/.studiograph/sessions/` and `/memory/` on
+ * this machine. Remote mode (`--remote <url>`): POSTs to `/api/clear` on a
+ * deployed server, which scopes the wipe to the authed user's per-user
+ * directory only.
  */
 import { Command } from 'commander';
 import { existsSync, readdirSync, rmSync } from 'fs';
 import { join } from 'path';
 import { homedir } from 'os';
+import { text, password as passwordPrompt, log } from '@clack/prompts';
+import { getStudiographToken, setStudiographToken, clearStudiographToken } from '../../core/user-config.js';
 const STUDIOGRAPH_DIR = join(homedir(), '.studiograph');
 function clearDir(dirPath, ext) {
     if (!existsSync(dirPath))
@@ -18,12 +25,29 @@ function clearDir(dirPath, ext) {
 export const clearCommand = new Command('clear')
     .description('Clear agent sessions, memory, or both')
     .argument('[target]', 'What to clear: sessions, memory, or all (default: all)', 'all')
-    .action((target) => {
+    .option('--remote <url>', 'Clear on a remote Studiograph server (per-user scope)')
+    .option('--reset', 'Full reset: also wipes DB state (onboarding flag, cached briefing, settings). Implies --remote and target=all.')
+    .option('--token <token>', 'Personal API token for remote auth (or STUDIOGRAPH_TOKEN env)')
+    .option('--email <email>', 'Email for remote auth (or STUDIOGRAPH_EMAIL env)')
+    .option('--password <password>', 'Password for remote auth (or STUDIOGRAPH_PASSWORD env)')
+    .action(async (target, opts) => {
     const validTargets = ['sessions', 'memory', 'all'];
     if (!validTargets.includes(target)) {
         console.error(`Invalid target "${target}". Use: ${validTargets.join(', ')}`);
         process.exit(1);
     }
+    if (opts.reset) {
+        if (!opts.remote) {
+            console.error('--reset requires --remote (DB state lives on the server).');
+            process.exit(1);
+        }
+        await resetRemote(opts.remote, opts);
+        return;
+    }
+    if (opts.remote) {
+        await clearRemote(opts.remote, target, opts);
+        return;
+    }
     if (target === 'sessions' || target === 'all') {
         const count = clearDir(join(STUDIOGRAPH_DIR, 'sessions'), '.json');
         console.log(`Cleared ${count} session${count === 1 ? '' : 's'}`);
@@ -33,4 +57,123 @@ export const clearCommand = new Command('clear')
         console.log(`Cleared ${count} memory file${count === 1 ? '' : 's'}`);
     }
 });
+async function resetRemote(remoteUrl, opts) {
+    const base = remoteUrl.replace(/\/+$/, '');
+    const httpHeader = await resolveAuthHeader(base, opts);
+    const res = await fetch(`${base}/api/reset`, {
+        method: 'POST',
+        headers: { ...httpHeader, 'Content-Type': 'application/json' },
+        body: '{}',
+    });
+    if (!res.ok) {
+        const body = await res.json().catch(() => ({}));
+        console.error(`Failed: ${body.error || res.statusText}`);
+        process.exit(1);
+    }
+    const result = await res.json();
+    const c = result.cleared ?? { sessions: 0, memory: 0 };
+    console.log(`Cleared ${c.sessions} session${c.sessions === 1 ? '' : 's'} and ${c.memory} memory file${c.memory === 1 ? '' : 's'} on ${base}`);
+    if (result.dbStateReset) {
+        console.log('Reset DB state: onboarding flag, cached briefing, settings.');
+    }
+}
+async function clearRemote(remoteUrl, target, opts) {
+    const base = remoteUrl.replace(/\/+$/, '');
+    const httpHeader = await resolveAuthHeader(base, opts);
+    const res = await fetch(`${base}/api/clear`, {
+        method: 'POST',
+        headers: { ...httpHeader, 'Content-Type': 'application/json' },
+        body: JSON.stringify({ target }),
+    });
+    if (!res.ok) {
+        const body = await res.json().catch(() => ({}));
+        console.error(`Failed: ${body.error || res.statusText}`);
+        process.exit(1);
+    }
+    const result = await res.json();
+    const c = result.cleared ?? { sessions: 0, memory: 0 };
+    if (target === 'sessions' || target === 'all') {
+        console.log(`Cleared ${c.sessions} session${c.sessions === 1 ? '' : 's'} on ${base}`);
+    }
+    if (target === 'memory' || target === 'all') {
+        console.log(`Cleared ${c.memory} memory file${c.memory === 1 ? '' : 's'} on ${base}`);
+    }
+}
+/**
+ * Resolve auth headers for the remote server. Mirrors the precedence used by
+ * `studiograph push --remote`: explicit token → STUDIOGRAPH_TOKEN env → email
+ * + password (flags or env) → stored CLI token from ~/.studiograph/user.json
+ * → interactive prompts.
+ */
+async function resolveAuthHeader(base, opts) {
+    const explicitToken = opts.token || process.env.STUDIOGRAPH_TOKEN;
+    if (explicitToken) {
+        return { 'Authorization': `Bearer ${explicitToken.trim()}` };
+    }
+    const email = opts.email || process.env.STUDIOGRAPH_EMAIL;
+    const password = opts.password || process.env.STUDIOGRAPH_PASSWORD;
+    if (email && password) {
+        return loginForCookie(base, email, password);
+    }
+    const storedToken = getStudiographToken(base);
+    if (storedToken) {
+        const header = { 'Authorization': `Bearer ${storedToken}` };
+        const probe = await fetch(`${base}/api/auth/tokens`, { headers: header }).catch(() => null);
+        if (probe?.ok)
+            return header;
+        if (probe?.status === 401) {
+            clearStudiographToken(base);
+            log.info('Stored CLI token is no longer valid — signing in again.');
+        }
+        else if (probe) {
+            return header; // non-401 → keep using it; real request will surface the error
+        }
+    }
+    if (!process.stdin.isTTY) {
+        throw new Error('No credentials provided and stdin is not a TTY. Use --token, --email + --password, or set STUDIOGRAPH_TOKEN.');
+    }
+    const emailPrompt = await text({ message: 'Email:', validate: (v) => v.includes('@') ? undefined : 'Enter a valid email' });
+    if (typeof emailPrompt === 'symbol')
+        process.exit(0);
+    const passPrompt = await passwordPrompt({ message: 'Password:' });
+    if (typeof passPrompt === 'symbol')
+        process.exit(0);
+    const emailStr = String(emailPrompt);
+    const passStr = String(passPrompt);
+    const httpHeader = await loginForCookie(base, emailStr, passStr);
+    // Mint and persist a CLI token so subsequent runs skip the prompt.
+    try {
+        const mintRes = await fetch(`${base}/api/auth/tokens`, {
+            method: 'POST',
+            headers: { ...httpHeader, 'Content-Type': 'application/json' },
+            body: JSON.stringify({ name: `cli-${process.platform}-${Date.now()}` }),
+        });
+        if (mintRes.ok) {
+            const body = await mintRes.json();
+            if (body.token) {
+                setStudiographToken(base, body.token);
+                log.info('Saved personal API token to ~/.studiograph/user.json for future runs');
+            }
+        }
+    }
+    catch { /* non-fatal */ }
+    return httpHeader;
+}
+async function loginForCookie(base, email, password) {
+    const loginRes = await fetch(`${base}/api/auth/login`, {
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json' },
+        body: JSON.stringify({ email, password }),
+    });
+    if (!loginRes.ok) {
+        const body = await loginRes.json().catch(() => ({}));
+        throw new Error(`Login failed: ${body.error || loginRes.statusText}`);
+    }
+    const cookies = loginRes.headers.getSetCookie?.() ?? [];
+    const tokenCookie = cookies.find(c => c.startsWith('__sg_token='));
+    if (!tokenCookie) {
+        throw new Error('Login succeeded but no session cookie was returned');
+    }
+    return { 'Cookie': tokenCookie.split(';')[0] };
+}
 //# sourceMappingURL=clear.js.map

package/dist/cli/commands/clear.js.map

@@ -1 +1 @@
-{"version":3,"file":"clear.js","sourceRoot":"","sources":["../../../src/cli/commands/clear.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,IAAI,CAAC;AACrD,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;AAE7B,MAAM,eAAe,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,cAAc,CAAC,CAAC;AAExD,SAAS,QAAQ,CAAC,OAAe,EAAE,GAAW;IAC5C,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,CAAC,CAAC;IACnC,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;IAChE,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;IAC3B,CAAC;IACD,OAAO,KAAK,CAAC,MAAM,CAAC;AACtB,CAAC;AAED,MAAM,CAAC,MAAM,YAAY,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC;KAC7C,WAAW,CAAC,uCAAuC,CAAC;KACpD,QAAQ,CAAC,UAAU,EAAE,wDAAwD,EAAE,KAAK,CAAC;KACrF,MAAM,CAAC,CAAC,MAAc,EAAE,EAAE;IACzB,MAAM,YAAY,GAAG,CAAC,UAAU,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;IACnD,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACnC,OAAO,CAAC,KAAK,CAAC,mBAAmB,MAAM,WAAW,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC7E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,IAAI,MAAM,KAAK,UAAU,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;QAC9C,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,eAAe,EAAE,UAAU,CAAC,EAAE,OAAO,CAAC,CAAC;QACnE,OAAO,CAAC,GAAG,CAAC,WAAW,KAAK,WAAW,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IACnE,CAAC;IAED,IAAI,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;QAC5C,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,eAAe,EAAE,QAAQ,CAAC,EAAE,KAAK,CAAC,CAAC;QAC/D,OAAO,CAAC,GAAG,CAAC,WAAW,KAAK,eAAe,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IACvE,CAAC;AACH,CAAC,CAAC,CAAC"}
+{"version":3,"file":"clear.js","sourceRoot":"","sources":["../../../src/cli/commands/clear.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,IAAI,CAAC;AACrD,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;AAC7B,OAAO,EAAE,IAAI,EAAE,QAAQ,IAAI,cAAc,EAAE,GAAG,EAAE,MAAM,gBAAgB,CAAC;AACvE,OAAO,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAE5G,MAAM,eAAe,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,cAAc,CAAC,CAAC;AAExD,SAAS,QAAQ,CAAC,OAAe,EAAE,GAAW;IAC5C,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,CAAC,CAAC;IACnC,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;IAChE,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;IAC3B,CAAC;IACD,OAAO,KAAK,CAAC,MAAM,CAAC;AACtB,CAAC;AAED,MAAM,CAAC,MAAM,YAAY,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC;KAC7C,WAAW,CAAC,uCAAuC,CAAC;KACpD,QAAQ,CAAC,UAAU,EAAE,wDAAwD,EAAE,KAAK,CAAC;KACrF,MAAM,CAAC,gBAAgB,EAAE,uDAAuD,CAAC;KACjF,MAAM,CAAC,SAAS,EAAE,gHAAgH,CAAC;KACnI,MAAM,CAAC,iBAAiB,EAAE,+DAA+D,CAAC;KAC1F,MAAM,CAAC,iBAAiB,EAAE,kDAAkD,CAAC;KAC7E,MAAM,CAAC,uBAAuB,EAAE,wDAAwD,CAAC;KACzF,MAAM,CAAC,KAAK,EAAE,MAAc,EAAE,IAA6F,EAAE,EAAE;IAC9H,MAAM,YAAY,GAAG,CAAC,UAAU,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;IACnD,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACnC,OAAO,CAAC,KAAK,CAAC,mBAAmB,MAAM,WAAW,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC7E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACjB,OAAO,CAAC,KAAK,CAAC,2DAA2D,CAAC,CAAC;YAC3E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,MAAM,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACrC,OAAO;IACT,CAAC;IAED,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAChB,MAAM,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;QAC7C,OAAO;IACT,CAAC;IAED,IAAI,MAAM,KAAK,UAAU,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;QAC9C,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,eAAe,EAAE,UAAU,CAAC,EAAE,OAAO,CAAC,CAAC;QACnE,OAAO,CAAC,GAAG,CAAC,WAAW,KAAK,WAAW,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IACnE,CAAC;IAED,IAAI,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;QAC5C,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,eAAe,EAAE,QAAQ,CAAC,EAAE,KAAK,CAAC,CAAC;QAC/D,OAAO,CAAC,GAAG,CAAC,WAAW,KAAK,eAAe,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IACvE,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,KAAK,UAAU,WAAW,CACxB,SAAiB,EACjB,IAA2D;IAE3D,MAAM,IAAI,GAAG,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC3C,MAAM,UAAU,GAAG,MAAM,iBAAiB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAEvD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,YAAY,EAAE;QAC3C,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,GAAG,UAAU,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC9D,IAAI,EAAE,IAAI;KACX,CAAC,CAAC;IAEH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAuB,CAAC;QACtE,OAAO,CAAC,KAAK,CAAC,WAAW,IAAI,CAAC,KAAK,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC;QACzD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,IAAI,EAAgF,CAAC;IAC9G,MAAM,CAAC,GAAG,MAAM,CAAC,OAAO,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;IACvD,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,QAAQ,WAAW,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,CAAC,MAAM,eAAe,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,OAAO,IAAI,EAAE,CAAC,CAAC;IAC9I,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;QACxB,OAAO,CAAC,GAAG,CAAC,6DAA6D,CAAC,CAAC;IAC7E,CAAC;AACH,CAAC;AAED,KAAK,UAAU,WAAW,CACxB,SAAiB,EACjB,MAAc,EACd,IAA2D;IAE3D,MAAM,IAAI,GAAG,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC3C,MAAM,UAAU,GAAG,MAAM,iBAAiB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAEvD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,YAAY,EAAE;QAC3C,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,GAAG,UAAU,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC9D,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;KACjC,CAAC,CAAC;IAEH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAuB,CAAC;QACtE,OAAO,CAAC,KAAK,CAAC,WAAW,IAAI,CAAC,KAAK,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC;QACzD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,IAAI,EAAwD,CAAC;IACtF,MAAM,CAAC,GAAG,MAAM,CAAC,OAAO,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;IACvD,IAAI,MAAM,KAAK,UAAU,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;QAC9C,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,QAAQ,WAAW,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,OAAO,IAAI,EAAE,CAAC,CAAC;IACxF,CAAC;IACD,IAAI,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;QAC5C,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,MAAM,eAAe,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,OAAO,IAAI,EAAE,CAAC,CAAC;IACxF,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,iBAAiB,CAC9B,IAAY,EACZ,IAA2D;IAE3D,MAAM,aAAa,GAAG,IAAI,CAAC,KAAK,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;IAClE,IAAI,aAAa,EAAE,CAAC;QAClB,OAAO,EAAE,eAAe,EAAE,UAAU,aAAa,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC;IAC/D,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;IAC1D,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC;IACnE,IAAI,KAAK,IAAI,QAAQ,EAAE,CAAC;QACtB,OAAO,cAAc,CAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;IAC/C,CAAC;IAED,MAAM,WAAW,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;IAC9C,IAAI,WAAW,EAAE,CAAC;QAChB,MAAM,MAAM,GAAG,EAAE,eAAe,EAAE,UAAU,WAAW,EAAE,EAAE,CAAC;QAC5D,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,kBAAkB,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QAC5F,IAAI,KAAK,EAAE,EAAE;YAAE,OAAO,MAAM,CAAC;QAC7B,IAAI,KAAK,EAAE,MAAM,KAAK,GAAG,EAAE,CAAC;YAC1B,qBAAqB,CAAC,IAAI,CAAC,CAAC;YAC5B,GAAG,CAAC,IAAI,CAAC,yDAAyD,CAAC,CAAC;QACtE,CAAC;aAAM,IAAI,KAAK,EAAE,CAAC;YACjB,OAAO,MAAM,CAAC,CAAC,+DAA+D;QAChF,CAAC;IACH,CAAC;IAED,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,8GAA8G,CAAC,CAAC;IAClI,CAAC;IACD,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,qBAAqB,EAAE,CAAC,CAAC;IAC5H,IAAI,OAAO,WAAW,KAAK,QAAQ;QAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACrD,MAAM,UAAU,GAAG,MAAM,cAAc,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC;IAClE,IAAI,OAAO,UAAU,KAAK,QAAQ;QAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpD,MAAM,QAAQ,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC;IACrC,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC;IACnC,MAAM,UAAU,GAAG,MAAM,cAAc,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;IAEjE,mEAAmE;IACnE,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,kBAAkB,EAAE;YACrD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,GAAG,UAAU,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC9D,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,OAAO,OAAO,CAAC,QAAQ,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,CAAC;SACxE,CAAC,CAAC;QACH,IAAI,OAAO,CAAC,EAAE,EAAE,CAAC;YACf,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAwB,CAAC;YACxD,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;gBACf,mBAAmB,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;gBACtC,GAAG,CAAC,IAAI,CAAC,sEAAsE,CAAC,CAAC;YACnF,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC;IAE3B,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,IAAY,EAAE,KAAa,EAAE,QAAgB;IACzE,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,iBAAiB,EAAE;QACrD,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;KAC1C,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAuB,CAAC;QAC3E,MAAM,IAAI,KAAK,CAAC,iBAAiB,IAAI,CAAC,KAAK,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;IACxE,CAAC;IACD,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,IAAI,EAAE,CAAC;IACxD,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC;IACnE,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxE,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACjD,CAAC"}

package/dist/cli/commands/clone.d.ts

@@ -6,7 +6,7 @@
  * and walks through full admin setup: LLM provider + connectors.
  *
  * Connects to a running Studiograph server using email/password and clones
- * all accessible collections via the embedded git server.
+ * all accessible folders via the embedded git server.
  */
 import { Command } from 'commander';
 export declare const cloneCommand: Command;

package/dist/cli/commands/clone.js

@@ -6,7 +6,7 @@
  * and walks through full admin setup: LLM provider + connectors.
  *
  * Connects to a running Studiograph server using email/password and clones
- * all accessible collections via the embedded git server.
+ * all accessible folders via the embedded git server.
  */
 import { Command } from 'commander';
 import { intro, confirm, outro, spinner, log, text, password as promptPassword, isCancel } from '@clack/prompts';
@@ -15,6 +15,9 @@ import { join, resolve } from 'path';
 import { gitClone } from '../../utils/git.js';
 import { runPreflight } from '../../utils/preflight.js';
 import { reindexWorkspace } from '../../services/vector-service.js';
+import { Workspace } from '../../core/workspace.js';
+import { ConnectorManager } from '../../mcp/connector-manager.js';
+import { AuthService } from '../../services/auth-service.js';
 import { promptLLMSetupIfNeeded, promptConnectorSetup, } from '../setup-wizard.js';
 async function serverFetch(serverUrl, path, email, password) {
     const headers = {
@@ -43,18 +46,42 @@ export const cloneCommand = new Command('clone')
     // Normalize URL — strip trailing slash
     serverUrl = serverUrl.replace(/\/+$/, '');
     try {
-        // Step 1: Credentials
-        const email = await text({ message: 'Email:', validate: (v) => v.includes('@') ? undefined : 'Enter a valid email' });
-        if (isCancel(email)) {
-            outro('Cancelled');
-            process.exit(0);
-            return;
+        // Step 1: Credentials. Prefer env vars when both are set (for
+        // agent / CI use); fall back to interactive prompts otherwise.
+        // Matches feedback_cli_non_interactive.md: every remote CLI
+        // command should be runnable without a TTY.
+        const envEmail = process.env.STUDIOGRAPH_EMAIL?.trim();
+        const envPassword = process.env.STUDIOGRAPH_PASSWORD;
+        let email;
+        let pass;
+        if (envEmail && envPassword) {
+            if (!envEmail.includes('@')) {
+                outro('STUDIOGRAPH_EMAIL is not a valid email address.');
+                process.exit(1);
+                return;
+            }
+            email = envEmail;
+            pass = envPassword;
+            log.info(`Using credentials from STUDIOGRAPH_EMAIL (${envEmail})`);
         }
-        const pass = await promptPassword({ message: 'Password:' });
-        if (isCancel(pass)) {
-            outro('Cancelled');
-            process.exit(0);
-            return;
+        else {
+            if (!process.stdout.isTTY) {
+                outro('No TTY for interactive prompts. Set STUDIOGRAPH_EMAIL and STUDIOGRAPH_PASSWORD env vars to run non-interactively.');
+                process.exit(1);
+                return;
+            }
+            email = await text({ message: 'Email:', validate: (v) => v.includes('@') ? undefined : 'Enter a valid email' });
+            if (isCancel(email)) {
+                outro('Cancelled');
+                process.exit(0);
+                return;
+            }
+            pass = await promptPassword({ message: 'Password:' });
+            if (isCancel(pass)) {
+                outro('Cancelled');
+                process.exit(0);
+                return;
+            }
         }
         // Step 2: Connect and fetch all repos
         const connectSpinner = spinner();
@@ -73,9 +100,9 @@ export const cloneCommand = new Command('clone')
             process.exit(1);
             return;
         }
-        log.info(`${repos.length} collection${repos.length === 1 ? '' : 's'} in workspace`);
+        log.info(`${repos.length} folder${repos.length === 1 ? '' : 's'} in workspace`);
         if (repos.length === 0) {
-            outro('No collections found.');
+            outro('No folders found.');
             process.exit(0);
             return;
         }
@@ -116,7 +143,11 @@ export const cloneCommand = new Command('clone')
                 }
             }
         }
-        // Step 4: Write local workspace config
+        // Step 4: Write local workspace config.
+        //
+        // Phase 9b: route through `Workspace.writeConfig()` so this
+        // freshly-built workspace.json is also validated by the schema
+        // walker. The directory is created first (Workspace expects it).
         mkdirSync(studiographDir, { recursive: true });
         const workspaceConfig = {
             version: '1.0.0',
@@ -129,18 +160,19 @@ export const cloneCommand = new Command('clone')
                 description: r.description,
             })),
         };
-        writeFileSync(join(studiographDir, 'workspace.json'), JSON.stringify(workspaceConfig, null, 2), 'utf-8');
+        new Workspace(targetDir).writeConfig(workspaceConfig);
         writeFileSync(join(studiographDir, '.gitignore'), ['auth.db', 'auth-seed.json', 'server-auth.json', 'populate-cache/', 'memory/', '*.log'].join('\n') + '\n', 'utf-8');
-        // Step 5: Clone all repos
+        // Step 5: Clone all repos (one spinner reused across iterations; @clack's
+        // spinner() registers process listeners per call and never removes them).
         let cloned = 0;
         let failed = 0;
+        const repoSpinner = spinner();
         for (const repo of repos) {
             const repoPath = join(targetDir, repo.name);
             if (existsSync(repoPath)) {
                 log.warn(`Skipping ${repo.name}: directory already exists`);
                 continue;
             }
-            const repoSpinner = spinner();
             repoSpinner.start(`Cloning ${repo.name}...`);
             try {
                 const gitUrl = `${serverUrl}/git/${repo.name}`;
@@ -173,6 +205,27 @@ export const cloneCommand = new Command('clone')
                     });
                     if (bundleRes.ok) {
                         const bundle = await bundleRes.json();
+                        if (bundle.authSeed) {
+                            writeFileSync(join(studiographDir, 'auth-seed.json'), JSON.stringify(bundle.authSeed, null, 2), { encoding: 'utf-8', mode: 0o600 });
+                            // AuthService constructor appends `.studiograph` to the path
+                            // it's given. Passing `studiographDir` here would create
+                            // `.studiograph/.studiograph/auth.db` — a duplicate-pathed DB
+                            // that ends up disjoint from anything the server later opens
+                            // via `targetDir`. Pass the workspace root.
+                            const authService = new AuthService(targetDir);
+                            try {
+                                // overwrite mode: clone is a fresh checkout — there's no
+                                // legitimate local state to preserve, and merge mode would
+                                // shadow real credentials with any setup-wizard rows that
+                                // got created before applySeed ran.
+                                authService.applySeed({ mode: 'overwrite' });
+                                const n = bundle.authSeed.users?.length ?? 0;
+                                log.info(`Restored ${n} user${n === 1 ? '' : 's'} from workspace`);
+                            }
+                            finally {
+                                authService.close();
+                            }
+                        }
                         if (bundle.sources && Object.keys(bundle.sources).length > 0) {
                             const sourcesDir = join(studiographDir, 'sources');
                             mkdirSync(sourcesDir, { recursive: true });
@@ -182,10 +235,10 @@ export const cloneCommand = new Command('clone')
                             log.info(`Synced ${Object.keys(bundle.sources).length} source definition(s)`);
                         }
                         if (bundle.connectors?.length > 0) {
-                            const connectorsDir = join(studiographDir, 'connectors');
-                            mkdirSync(connectorsDir, { recursive: true });
+                            // Phase 9b: route through ConnectorManager.saveWorkspaceConfig
+                            // so the schema validator runs uniformly.
                             for (const conn of bundle.connectors) {
-                                writeFileSync(join(connectorsDir, `${conn.name}.json`), JSON.stringify(conn, null, 2), 'utf-8');
+                                ConnectorManager.saveWorkspaceConfig(conn, targetDir);
                             }
                             log.info(`Synced ${bundle.connectors.length} connector config(s)`);
                         }
@@ -196,8 +249,14 @@ export const cloneCommand = new Command('clone')
                 }
             }
         }
-        catch {
-            // Non-fatal
+        catch (err) {
+            // Phase 9c: a schema violation means the server shipped a literal
+            // secret in the bundle — that's a server-side defect we should
+            // surface, not silently swallow. Everything else stays non-fatal.
+            if (err?.name === 'SchemaViolationError' || err?.code === 'schema_violation') {
+                log.warn(`Connector config validation failed (skipped): ${err.message}`);
+            }
+            // Other errors are non-fatal (network blips, auth, missing bundle endpoint).
         }
         // Step 6: Index
         if (cloned > 0) {