summer-engine 2.8.1 → 3.0.0

package/dist/cli/commands/install.js

@@ -0,0 +1,447 @@
+import { Command } from "commander";
+import { execSync } from "child_process";
+import { createInterface } from "node:readline/promises";
+import { createHash } from "crypto";
+import { chmodSync, createWriteStream, existsSync, mkdirSync, readdirSync, renameSync, rmSync, symlinkSync, } from "fs";
+import { pipeline } from "stream/promises";
+import { Readable } from "stream";
+import { tmpdir, platform } from "os";
+import { join, resolve } from "path";
+import { ENGINE_BINARY_ENV, LINUX_ENGINE_BINARY_NAME, findExtractedEngineBinary, linuxArchiveKind, linuxEngineInstallDir, pickLinuxReleaseAsset, resolveLinuxInstallSource, } from "../../core/engine-install.js";
+const RELEASES_URL = "https://www.summerengine.com/api/desktop/releases";
+/** Guard a download URL from the releases endpoint. A missing/empty URL (an
+ *  outdated or misconfigured endpoint) otherwise becomes a cryptic
+ *  fetch(undefined) failure — surface it clearly with a manual fallback. */
+export function requireDownloadUrl(value, label) {
+    if (!value || value.trim().length === 0) {
+        throw new Error(`Release info is missing the ${label} download URL — the releases endpoint may be ` +
+            `outdated. Download manually from https://summerengine.com/download`);
+    }
+    return value;
+}
+/** Verify a downloaded file's sha256 against the expected hash from the releases
+ *  endpoint. Skipped when no expected hash is published. Catches a truncated or
+ *  corrupted download (a ~1GB install over a flaky network) before it becomes a
+ *  confusing DMG-mount / installer failure downstream. */
+export function verifyChecksum(actual, expected, label) {
+    if (!expected || expected.trim().length === 0)
+        return; // nothing published to verify against
+    if (actual.toLowerCase() !== expected.toLowerCase()) {
+        throw new Error(`${label} checksum mismatch — the download was corrupted or incomplete ` +
+            `(expected ${expected.slice(0, 12)}…, got ${actual.slice(0, 12)}…). Re-run \`summer install\`.`);
+    }
+}
+// The bundle-version readers live in core (src/core/launch-posture.ts) because
+// `summer run` needs the installed version BEFORE the engine is up to decide
+// whether it may pass --summer-background; re-exported here for install.test.ts.
+import { parseMacBundleVersion, readMacBundleVersion } from "../../core/launch-posture.js";
+export { parseMacBundleVersion, readMacBundleVersion };
+export function isSameVersion(installed, latest) {
+    if (!installed)
+        return false;
+    const norm = (value) => value.trim().replace(/^v/i, "");
+    return norm(installed) === norm(latest);
+}
+/** Decide what `summer install` may do about an existing /Applications/Summer.app.
+ *  Replacing an installed engine is destructive, so it needs --yes or a TTY
+ *  prompt; an equal version is a no-op success. */
+export function planMacInstall(input) {
+    if (!input.exists)
+        return { action: "install" };
+    if (isSameVersion(input.installedVersion, input.latestVersion)) {
+        return { action: "up-to-date", version: input.latestVersion };
+    }
+    if (input.yes)
+        return { action: "install" };
+    if (input.isTTY)
+        return { action: "needs-confirmation", installed: input.installedVersion };
+    return {
+        action: "refuse",
+        reason: `Summer Engine ${input.installedVersion ?? "(unknown version)"} is already installed; ` +
+            `updating to v${input.latestVersion} replaces it. Re-run with --yes to confirm.`,
+    };
+}
+/** Replace destApp with the bundle on the mounted DMG WITHOUT a window where
+ *  no engine exists: copy to <destApp>.new first, and only after that
+ *  succeeds remove the old bundle and rename the staged copy into place. A
+ *  failed copy leaves the existing install untouched. */
+export function replaceMacApp(mountPoint, destApp, exec) {
+    const staged = `${destApp}.new`;
+    exec(`rm -rf "${staged}"`);
+    try {
+        exec(`cp -R "${mountPoint}/Summer.app" "${staged}"`);
+    }
+    catch (err) {
+        try {
+            exec(`rm -rf "${staged}"`);
+        }
+        catch { /* best effort */ }
+        throw err;
+    }
+    exec(`rm -rf "${destApp}"`);
+    exec(`mv "${staged}" "${destApp}"`);
+}
+/** Remove partial downloads / staged bundles when the user interrupts. */
+function cleanupOnSignal(paths) {
+    const handler = () => {
+        for (const path of paths) {
+            try {
+                rmSync(path, { recursive: true, force: true });
+            }
+            catch { /* best effort */ }
+        }
+        process.exit(130);
+    };
+    process.on("SIGINT", handler);
+    process.on("SIGTERM", handler);
+    return () => {
+        process.off("SIGINT", handler);
+        process.off("SIGTERM", handler);
+    };
+}
+async function confirm(question) {
+    const rl = createInterface({ input: process.stdin, output: process.stdout });
+    try {
+        const answer = (await rl.question(`${question} [y/N] `)).trim().toLowerCase();
+        return answer === "y" || answer === "yes";
+    }
+    finally {
+        rl.close();
+    }
+}
+/** Velopack Setup.exe install args. Velopack is NOT NSIS: silent install is
+ *  `--silent` and a custom directory is `--installto <dir>` (per Velopack's
+ *  setup.exe CLI). The old NSIS flags (/S, /D=) are rejected by the Velopack
+ *  installer with "unexpected argument '/S' found" — this is the wizard bug. */
+export function windowsInstallerArgs(customPath) {
+    return customPath ? `--silent --installto "${customPath}"` : "--silent";
+}
+export const installCommand = new Command("install")
+    .description("Download and install Summer Engine")
+    .option("--path <dir>", "Custom install directory")
+    .option("--yes", "Replace an already-installed engine without prompting")
+    .action(async (opts) => {
+    const os = platform();
+    if (os === "linux") {
+        await installLinux(opts.path);
+        return;
+    }
+    if (os !== "darwin" && os !== "win32") {
+        console.error(`Unsupported platform: ${os}.\n` +
+            "Summer Engine installs on macOS, Windows, and Linux (x86_64).\n" +
+            "Download from: https://summerengine.com/download");
+        process.exit(1);
+    }
+    console.log("Fetching latest release info...");
+    let releases;
+    try {
+        const res = await fetch(RELEASES_URL, { signal: AbortSignal.timeout(10000) });
+        if (!res.ok)
+            throw new Error(`HTTP ${res.status}`);
+        releases = (await res.json());
+    }
+    catch (err) {
+        console.error("Could not fetch release info. Download manually from:\n" +
+            "  https://summerengine.com/download");
+        process.exit(1);
+    }
+    if (os === "darwin") {
+        await installMac(releases, opts.path, Boolean(opts.yes));
+    }
+    else {
+        await installWindows(releases, opts.path);
+    }
+});
+async function installMac(releases, customPath, yes = false) {
+    const info = releases.latest.macos;
+    if (!info) {
+        console.error("No macOS release found.");
+        process.exit(1);
+    }
+    const dmgUrl = requireDownloadUrl(info.dmg_url, "macOS DMG");
+    console.log(`Latest version: ${info.version}`);
+    const destApp = customPath || "/Applications/Summer.app";
+    const exists = existsSync(destApp);
+    const installedVersion = exists ? readMacBundleVersion(destApp) : null;
+    const plan = planMacInstall({
+        exists,
+        installedVersion,
+        latestVersion: info.version,
+        yes,
+        isTTY: Boolean(process.stdin.isTTY),
+    });
+    if (plan.action === "up-to-date") {
+        console.log(`Summer Engine v${plan.version} is already installed at ${destApp} (up to date).`);
+        return;
+    }
+    if (plan.action === "refuse") {
+        console.error(plan.reason);
+        process.exitCode = 1;
+        return;
+    }
+    if (plan.action === "needs-confirmation") {
+        console.log(`Summer Engine ${plan.installed ?? "(unknown version)"} is installed at ${destApp}.`);
+        if (!(await confirm(`Replace it with v${info.version}?`))) {
+            console.log("Cancelled. Nothing was changed.");
+            return;
+        }
+    }
+    const dmgPath = join(tmpdir(), `Summer-v${info.version}.dmg`);
+    const stagedApp = `${destApp}.new`;
+    const releaseSignals = cleanupOnSignal([dmgPath, stagedApp]);
+    console.log(`Downloading Summer Engine v${info.version} (~1 GB, includes bundled Git + runtime)...`);
+    try {
+        const { sha256 } = await downloadFile(dmgUrl, dmgPath);
+        verifyChecksum(sha256, info.dmg_sha256, "DMG");
+    }
+    catch (err) {
+        releaseSignals();
+        try {
+            execSync(`rm -f "${dmgPath}"`, { stdio: "ignore" });
+        }
+        catch { /* best effort */ }
+        console.error(err instanceof Error ? err.message : String(err));
+        process.exit(1);
+    }
+    console.log("Mounting DMG...");
+    const mountOutput = execSync(`hdiutil attach "${dmgPath}" -nobrowse -noverify -noautoopen`, {
+        encoding: "utf-8",
+    });
+    const mountPoint = mountOutput
+        .split("\n")
+        .filter((line) => line.includes("/Volumes/"))
+        .map((line) => line.trim().split("\t").pop()?.trim())
+        .find(Boolean);
+    if (!mountPoint) {
+        console.error("Failed to find mount point. Install manually from the DMG.");
+        process.exit(1);
+    }
+    try {
+        console.log("Installing to " + destApp + "...");
+        replaceMacApp(mountPoint, destApp, (command) => execSync(command, { stdio: "ignore" }));
+        console.log("Done!");
+    }
+    catch (err) {
+        console.error(`Install failed: ${err instanceof Error ? err.message : String(err)}\n` +
+            (exists ? `The existing ${destApp} was left in place.` : "Nothing was installed."));
+        process.exitCode = 1;
+        return;
+    }
+    finally {
+        execSync(`hdiutil detach "${mountPoint}" -quiet`, { stdio: "ignore" });
+        try {
+            execSync(`rm "${dmgPath}"`, { stdio: "ignore" });
+        }
+        catch { }
+        releaseSignals();
+    }
+    console.log(`\nSummer Engine v${info.version} installed to ${destApp}`);
+    console.log("\nNext steps:");
+    console.log("  summer login    # Sign in to your account");
+    console.log("  summer run      # Launch the engine");
+}
+async function installWindows(releases, customPath) {
+    const info = releases.latest.windows;
+    if (!info) {
+        console.error("No Windows release found.");
+        process.exit(1);
+    }
+    const exeUrl = requireDownloadUrl(info.url, "Windows installer");
+    console.log(`Latest version: ${info.version}`);
+    const exePath = join(tmpdir(), `Summer-v${info.version}.exe`);
+    console.log(`Downloading Summer Engine v${info.version} (~1 GB, includes bundled Git + runtime)...`);
+    try {
+        const { sha256 } = await downloadFile(exeUrl, exePath);
+        verifyChecksum(sha256, info.sha256, "installer");
+    }
+    catch (err) {
+        try {
+            execSync(`del "${exePath}"`, { stdio: "ignore" });
+        }
+        catch { /* best effort */ }
+        console.error(err instanceof Error ? err.message : String(err));
+        process.exit(1);
+    }
+    console.log("Running installer...");
+    try {
+        execSync(`"${exePath}" ${windowsInstallerArgs(customPath)}`, {
+            stdio: "inherit",
+        });
+    }
+    catch {
+        console.error("Installer failed. Try running it manually:\n  " + exePath);
+        process.exit(1);
+    }
+    try {
+        execSync(`del "${exePath}"`, { stdio: "ignore" });
+    }
+    catch { }
+    console.log(`\nSummer Engine v${info.version} installed!`);
+    console.log("\nNext steps:");
+    console.log("  summer login    # Sign in to your account");
+    console.log("  summer run      # Launch the engine");
+}
+// ------------------------------------------------------------------- Linux
+// Source resolution, release picking, and archive detection live in
+// core/engine-install.ts; this section is the process I/O around them.
+function walkFiles(dir) {
+    const out = [];
+    for (const entry of readdirSync(dir, { withFileTypes: true })) {
+        const path = join(dir, entry.name);
+        if (entry.isDirectory())
+            out.push(...walkFiles(path));
+        else if (entry.isFile())
+            out.push(path);
+    }
+    return out;
+}
+/** Register an existing binary the same way a download install does: the
+ *  canonical ~/.summer/engine/summer-linux-x86_64 path points at it, so
+ *  `summer run`/`summer doctor` find it even when the env var is not set. */
+function registerExistingLinuxBinary(sourcePath, destDir, destBinary) {
+    const absolute = resolve(sourcePath);
+    if (!existsSync(absolute)) {
+        console.error(`${ENGINE_BINARY_ENV} points at ${absolute}, but nothing exists there.`);
+        process.exit(1);
+    }
+    try {
+        chmodSync(absolute, 0o755);
+    }
+    catch {
+        // Best effort — a read-only mount still works if already executable.
+    }
+    mkdirSync(destDir, { recursive: true });
+    if (absolute !== destBinary) {
+        rmSync(destBinary, { force: true });
+        symlinkSync(absolute, destBinary);
+    }
+    console.log(`Registered existing engine binary: ${absolute}`);
+    console.log(`  -> ${destBinary}`);
+}
+async function fetchLinuxReleaseAsset(apiUrl) {
+    const res = await fetch(apiUrl, {
+        headers: { Accept: "application/vnd.github+json" },
+        signal: AbortSignal.timeout(15000),
+    });
+    if (!res.ok)
+        throw new Error(`HTTP ${res.status}`);
+    return pickLinuxReleaseAsset(await res.json());
+}
+async function installLinux(customPath) {
+    if (process.arch !== "x64") {
+        console.error(`Linux ${process.arch} has no published Summer Engine artifact yet (x86_64 only).\n` +
+            `Build from source, then set ${ENGINE_BINARY_ENV} to the binary and re-run \`summer install\`.`);
+        process.exit(1);
+    }
+    const destDir = customPath ? resolve(customPath) : linuxEngineInstallDir();
+    const destBinary = join(destDir, LINUX_ENGINE_BINARY_NAME);
+    const source = resolveLinuxInstallSource();
+    if (source.kind === "binary") {
+        registerExistingLinuxBinary(source.path, destDir, destBinary);
+        printLinuxNextSteps(destBinary);
+        return;
+    }
+    let url = source.kind === "url" ? source.url : "";
+    let sha256Url;
+    let versionLabel = "custom";
+    if (source.kind === "release") {
+        console.log("Fetching latest Linux release info...");
+        try {
+            const asset = await fetchLinuxReleaseAsset(source.apiUrl);
+            url = asset.url;
+            sha256Url = asset.sha256Url;
+            versionLabel = asset.version;
+        }
+        catch (err) {
+            console.error(`Could not resolve a Linux release artifact: ${err instanceof Error ? err.message : String(err)}`);
+            process.exit(1);
+        }
+        console.log(`Latest Linux release: ${versionLabel}`);
+    }
+    const kind = linuxArchiveKind(url);
+    const downloadPath = join(tmpdir(), `summer-engine-${Date.now()}.${kind === "binary" ? "bin" : kind === "zip" ? "zip" : "tar.gz"}`);
+    console.log(`Downloading ${url} ...`);
+    try {
+        const { sha256 } = await downloadFile(url, downloadPath);
+        if (sha256Url) {
+            const shaRes = await fetch(sha256Url, { signal: AbortSignal.timeout(15000) });
+            if (shaRes.ok) {
+                const expected = (await shaRes.text()).trim().split(/\s+/, 1)[0];
+                verifyChecksum(sha256, expected, "Linux artifact");
+            }
+        }
+        mkdirSync(destDir, { recursive: true });
+        let extractedBinary = downloadPath;
+        let extractDir = null;
+        if (kind !== "binary") {
+            extractDir = join(tmpdir(), `summer-engine-extract-${Date.now()}`);
+            mkdirSync(extractDir, { recursive: true });
+            if (kind === "tar.gz") {
+                execSync(`tar -xzf "${downloadPath}" -C "${extractDir}"`, { stdio: "ignore" });
+            }
+            else {
+                execSync(`unzip -oq "${downloadPath}" -d "${extractDir}"`, { stdio: "ignore" });
+            }
+            const found = findExtractedEngineBinary(walkFiles(extractDir));
+            if (!found) {
+                throw new Error(`The downloaded archive contains no engine binary (expected ${LINUX_ENGINE_BINARY_NAME}).`);
+            }
+            extractedBinary = found;
+        }
+        // Replace, never edit in place: an engine reading its own binary mid-write
+        // is worse than a moment with no file. rename first (same tmpfs), copy as
+        // the cross-device fallback.
+        rmSync(destBinary, { force: true });
+        try {
+            renameSync(extractedBinary, destBinary);
+        }
+        catch {
+            execSync(`cp "${extractedBinary}" "${destBinary}"`, { stdio: "ignore" });
+        }
+        chmodSync(destBinary, 0o755);
+        if (extractDir)
+            rmSync(extractDir, { recursive: true, force: true });
+    }
+    catch (err) {
+        console.error(err instanceof Error ? err.message : String(err));
+        process.exit(1);
+    }
+    finally {
+        rmSync(downloadPath, { force: true });
+    }
+    console.log(`\nSummer Engine (${versionLabel}) installed to ${destBinary}`);
+    printLinuxNextSteps(destBinary);
+}
+function printLinuxNextSteps(binary) {
+    console.log("\nNext steps:");
+    console.log("  summer doctor   # Verify the setup");
+    console.log(`  ${binary} --headless --editor --path <project>   # Headless engine`);
+    console.log("  summer login    # Optional: only gateway features (asset search/generation) need it");
+}
+export async function downloadFile(url, dest) {
+    const res = await fetch(url);
+    if (!res.ok || !res.body) {
+        throw new Error(`Download failed: HTTP ${res.status}`);
+    }
+    const dir = join(dest, "..");
+    if (!existsSync(dir))
+        mkdirSync(dir, { recursive: true });
+    const fileStream = createWriteStream(dest);
+    const readable = Readable.fromWeb(res.body);
+    // Hash while streaming (the 'data' listener and the pipe both see every chunk
+    // in flowing mode), so we get integrity for free without a second read pass.
+    const hash = createHash("sha256");
+    let downloaded = 0;
+    const total = parseInt(res.headers.get("content-length") || "0", 10);
+    readable.on("data", (chunk) => {
+        hash.update(chunk);
+        downloaded += chunk.length;
+        if (total > 0) {
+            const pct = Math.round((downloaded / total) * 100);
+            process.stdout.write(`\r  ${pct}% (${(downloaded / 1024 / 1024).toFixed(1)}MB)`);
+        }
+    });
+    await pipeline(readable, fileStream);
+    process.stdout.write("\n");
+    return { sha256: hash.digest("hex") };
+}

package/dist/cli/commands/list.js

@@ -0,0 +1,72 @@
+import { Command } from "commander";
+import { readdirSync, existsSync } from "fs";
+import { join } from "path";
+import { getTemplateRegistry } from "../../core/templates.js";
+export const listCommand = new Command("list")
+    .description("List available templates or local projects")
+    .argument("<what>", "'templates' or 'projects'")
+    .action(async (what) => {
+    if (what === "templates") {
+        listTemplates();
+    }
+    else if (what === "projects") {
+        listProjects();
+    }
+    else {
+        console.error(`Unknown: '${what}'. Use 'templates' or 'projects'.`);
+        process.exit(1);
+    }
+});
+/**
+ * Registry-only listing (CONTRACT.md §7): every template shown here resolves
+ * through its library pin manifest. There is no live GitHub-org listing —
+ * anything not in the registry is not installable by `summer create`.
+ */
+function listTemplates() {
+    const entries = getTemplateRegistry();
+    const builtins = entries.filter((e) => e.builtin);
+    const pinned = entries.filter((e) => !e.builtin);
+    const pad = Math.max(16, ...entries.map((e) => e.slug.length));
+    const line = (t) => {
+        const flag = t.status === "stable" ? "" : ` [${t.status}]`;
+        return `  ${t.slug.padEnd(pad)}  ${t.summary}${flag}`;
+    };
+    console.log("Built-in templates (generated locally, no download):\n");
+    for (const t of builtins)
+        console.log(line(t));
+    console.log("\nPinned templates (fetched at an exact commit; tree digest verified before use):\n");
+    for (const t of pinned) {
+        console.log(line(t));
+        if (t.systems.length > 0)
+            console.log(`  ${"".padEnd(pad)}  systems: ${t.systems.join(", ")}`);
+        if (t.status !== "stable")
+            for (const note of t.do_not_use_when)
+                console.log(`  ${"".padEnd(pad)}  note: ${note}`);
+    }
+    console.log("\nCreate a project: summer create <template> [name]");
+    console.log("Example:          summer create 3d-third-person-controller my-game");
+    console.log("Pinning rules:    library/templates/README.md");
+}
+function listProjects() {
+    const cwd = process.cwd();
+    const entries = readdirSync(cwd, { withFileTypes: true });
+    const projects = [];
+    for (const entry of entries) {
+        if (entry.isDirectory()) {
+            const projectFile = join(cwd, entry.name, "project.godot");
+            if (existsSync(projectFile)) {
+                projects.push(entry.name);
+            }
+        }
+    }
+    if (projects.length === 0) {
+        console.log("No Summer Engine projects found in current directory.");
+        console.log("\nCreate one: summer create 3d-basic my-game");
+        return;
+    }
+    console.log(`Projects in ${cwd}:\n`);
+    for (const p of projects) {
+        console.log(`  ${p}/`);
+    }
+    console.log(`\nOpen a project: summer run <name>`);
+}

package/dist/{commands → cli/commands}/login.js

@@ -1,8 +1,8 @@
 import { Command } from "commander";
 import { randomUUID } from "crypto";
 import open from "open";
-import { getAuthToken, getCreatorToken, saveCreatorToken, saveLoginSession, } from "../lib/auth.js";
-import { getCreatorApiUrl, getGatewayUrl } from "../lib/config.js";
+import { getAuthToken, getCreatorToken, saveCreatorToken, saveLoginSession, } from "../../core/auth.js";
+import { getCreatorApiUrl, resolveGatewayUrl } from "../../core/config.js";
 const POLL_INTERVAL_MS = 2000;
 // One generous window on ONE session id. First-time users may need to create an
 // account and confirm an email before they can approve the CLI. The gateway
@@ -102,6 +102,9 @@ export async function runCreatorLogin(overrides = {}) {
     await saveCreatorToken(token);
     deps.log("Creator publishing connected. Your core Summer login token was not changed.");
 }
+/** The gateway answered with a terminal 4xx — retrying the same URL cannot help. */
+class LoginRejectedError extends Error {
+}
 const defaultDependencies = {
     fetch,
     openUrl: open,
@@ -112,7 +115,7 @@ const defaultDependencies = {
 };
 export async function runLogin(overrides = {}) {
     const deps = { ...defaultDependencies, ...overrides };
-    const gatewayUrl = await getGatewayUrl();
+    const gatewayUrl = await resolveGatewayUrl();
     const sessionId = deps.randomId();
     const loginUrl = `${gatewayUrl}/login?cli_session=${encodeURIComponent(sessionId)}`;
     deps.log("Sign in at: " + loginUrl);
@@ -134,8 +137,15 @@ export async function runLogin(overrides = {}) {
         if (deps.now() - lastHeartbeat >= HEARTBEAT_MS) {
             lastHeartbeat = deps.now();
             deps.log('Still waiting — finish signing in (or creating your account) in the browser, then click "Yes, Sign In". Same link: ' +
-                loginUrl);
+                loginUrl +
+                (lastError ? ` (last error: ${lastError})` : ""));
         }
+        // Only the network round-trip is retried. A completed session is handled
+        // OUTSIDE this try: saveLoginSession rejecting the token (mismatched sub,
+        // non-CLI token type, already expired) is terminal — the gateway will
+        // return the same payload forever, so polling on would only bury the
+        // recovery message under a 15-minute timeout.
+        let completed = null;
         try {
             const res = await deps.fetch(pollUrl, {
                 signal: AbortSignal.timeout(5000),
@@ -145,33 +155,39 @@ export async function runLogin(overrides = {}) {
                     lastError =
                         "The login service is unavailable (Redis/auth is not configured).";
                 }
-                else if (res.status >= 400 && res.status < 500) {
-                    lastError = `The login request was rejected (${res.status}).`;
-                }
                 else if (res.status >= 500) {
                     lastError = `The login service failed (${res.status}).`;
                 }
+                else if (res.status === 429 || res.status === 408) {
+                    lastError = `The login service asked us to slow down (${res.status}).`;
+                }
+                else {
+                    // 401/403/404 and the other 4xx are terminal: this URL will not
+                    // start succeeding on its own.
+                    throw new LoginRejectedError(`The login request was rejected (${res.status}). Recovery: check that gateway.url (${gatewayUrl}) is the Summer gateway you meant, then run "summer login" again.`);
+                }
                 continue;
             }
             const data = (await res.json());
             if (data.status === "pending")
                 continue;
             if (data.status === "complete" && data.token) {
-                await saveLoginSession({
-                    token: data.token,
-                    cloudToken: data.cloudToken,
-                    user: data.user,
-                    scopes: data.scopes,
-                    cloudScopes: data.cloudScopes,
-                });
-                deps.log(`\nLogged in as ${data.user?.email || "unknown"}`);
-                return;
+                completed = { token: data.token, user: data.user, scopes: data.scopes };
+            }
+            else {
+                lastError = "The login service returned an incomplete authentication result.";
             }
-            lastError = "The login service returned an incomplete authentication result.";
         }
         catch (err) {
+            if (err instanceof LoginRejectedError)
+                throw err;
             lastError = err instanceof Error ? err.message : "Network error";
         }
+        if (completed) {
+            await saveLoginSession(completed);
+            deps.log(`\nLogged in as ${completed.user?.email || "unknown"}`);
+            return;
+        }
     }
     throw new Error(`Login timed out after ${Math.round(POLL_TIMEOUT_MS / 60000)} minutes.${lastError ? ` Last error: ${lastError}` : ""} Recovery: run "summer login" again and complete "Yes, Sign In" in the browser tab it opens.`);
 }

package/dist/{commands → cli/commands}/logout.d.ts

@@ -1,2 +1,3 @@
 import { Command } from "commander";
 export declare const logoutCommand: Command;
+export declare function runLogout(log: (message: string) => void): Promise<void>;

package/dist/cli/commands/logout.js

@@ -0,0 +1,19 @@
+import { Command } from "commander";
+import { clearAuthCredentials, hasEnvAuthToken } from "../../core/auth.js";
+export const logoutCommand = new Command("logout")
+    .description("Sign out and clear stored auth tokens")
+    .action(async () => {
+    await runLogout(console.log);
+});
+export async function runLogout(log) {
+    const removed = await clearAuthCredentials();
+    if (removed > 0) {
+        log("Logged out. Stored auth tokens cleared.");
+    }
+    else {
+        log("Already logged out (no stored tokens found).");
+    }
+    if (hasEnvAuthToken()) {
+        log("Note: SUMMER_TOKEN is set in this environment and still authenticates gateway calls — logout does not affect it. Unset SUMMER_TOKEN to sign out here.");
+    }
+}

package/dist/{commands → cli/commands}/memory.d.ts

@@ -1,14 +1,7 @@
 import { Command } from "commander";
-import { type ProjectMemorySummary } from "../lib/project-memory.js";
-interface ResolvedMemoryProject {
-    projectPath: string | null;
-    source: "option" | "engine" | "cwd" | "none";
-    reason?: string;
-}
+import { type ProjectMemorySummary } from "../../project-memory/project-memory.js";
 export declare const memoryCommand: Command;
-export declare function resolveMemoryProject(projectOption?: string): Promise<ResolvedMemoryProject>;
 export declare function findProjectRoot(startDir: string): string | null;
 export declare function resolveMemoryFilePath(projectPath: string, requested: string): string;
 export declare function formatMemorySummary(projectPath: string, summary: ProjectMemorySummary): string;
 export declare function formatStatusMemoryLine(summary: ProjectMemorySummary): string;
-export {};