trajectories-sh 1.24.0 → 1.24.1

package/dist/cli.js

@@ -1,7 +1,273 @@
 #!/usr/bin/env node
+import {
+  getApiUrl,
+  getAuthHeader
+} from "./chunk-ERO5HP43.js";
 
 // src/cli.ts
 import { Command } from "commander";
+
+// ../../apps/api/app/services/contracts/commonpaper.json
+var commonpaper_default = {
+  id: "commonpaper-mutual-nda-1.0",
+  name: "Common Paper Mutual NDA",
+  version: "1.0",
+  source: "https://commonpaper.com/standards/mutual-nda/1.0",
+  license: "https://creativecommons.org/licenses/by/4.0/",
+  standard_terms: "1. Introduction\n\nThis Mutual Non-Disclosure Agreement (which incorporates these Standard Terms and the Cover Page (defined below)) (\u201CMNDA\u201D) allows each party (\u201CDisclosing Party\u201D) to disclose or make available information in connection with the Purpose which (1) the Disclosing Party identifies to the receiving party (\u201CReceiving Party\u201D) as \u201Cconfidential\u201D, \u201Cproprietary\u201D, or the like or (2) should be reasonably understood as confidential or proprietary due to its nature and the circumstances of its disclosure (\u201CConfidential Information\u201D). Each party\u2019s Confidential Information also includes the existence and status of the parties\u2019 discussions and information on the Cover Page. Confidential Information includes technical or business information, product designs or roadmaps, requirements, pricing, security and compliance documentation, technology, inventions and know-how. To use this MNDA, the parties must complete and sign a cover page incorporating these Standard Terms (\u201CCover Page\u201D). Each party is identified on the Cover Page and capitalized terms have the meanings given herein or on the Cover Page.\n\n2. Use and Protection of Confidential Information\n\nThe Receiving Party shall: (a) use Confidential Information solely for the Purpose; (b) not disclose Confidential Information to third parties without the Disclosing Party\u2019s prior written approval, except that the Receiving Party may disclose Confidential Information to its employees, agents, advisors, contractors and other representatives having a reasonable need to know for the Purpose, provided these representatives are bound by confidentiality obligations no less protective than the applicable terms in this MNDA and the Receiving Party remains responsible for their compliance with this MNDA; and (c) protect Confidential Information using at least the same protections the Receiving Party uses for its own similar information but no less than a reasonable standard of care.\n\n3. Exceptions\n\nThe Receiving Party\u2019s obligations in this MNDA do not apply to information that it can demonstrate: (a) is or becomes publicly available through no fault of the Receiving Party; (b) it rightfully knew or possessed prior to receipt from the Disclosing Party without confidentiality restrictions; (c) it rightfully obtained from a third party without confidentiality restrictions; or (d) it independently developed without using or referencing the Confidential Information.\n\n4. Disclosures Required by Law\n\nThe Receiving Party may disclose Confidential Information to the extent required by law, regulation or regulatory authority, subpoena or court order, provided (to the extent legally permitted) it provides the Disclosing Party reasonable advance notice of the required disclosure and reasonably cooperates, at the Disclosing Party\u2019s expense, with the Disclosing Party\u2019s efforts to obtain confidential treatment for the Confidential Information.\n\n5. Term and Termination\n\nThis MNDA commences on the Effective Date and expires at the end of the MNDA Term. Either party may terminate this MNDA for any or no reason upon written notice to the other party. The Receiving Party\u2019s obligations relating to Confidential Information will survive for the Term of Confidentiality, despite any expiration or termination of this MNDA.\n\n6. Return or Destruction of Confidential Information\n\nUpon expiration or termination of this MNDA or upon the Disclosing Party\u2019s earlier request, the Receiving Party will: (a) cease using Confidential Information; (b) promptly after the Disclosing Party\u2019s written request, destroy all Confidential Information in the Receiving Party\u2019s possession or control or return it to the Disclosing Party; and (c) if requested by the Disclosing Party, confirm its compliance with these obligations in writing. As an exception to subsection (b), the Receiving Party may retain Confidential Information in accordance with its standard backup or record retention policies or as required by law, but the terms of this MNDA will continue to apply to the retained Confidential Information.\n\n7. Proprietary Rights\n\nThe Disclosing Party retains all of its intellectual property and other rights in its Confidential Information and its disclosure to the Receiving Party grants no license under such rights.\n\n8. Disclaimer\n\nALL CONFIDENTIAL INFORMATION IS PROVIDED \u201CAS IS\u201D, WITH ALL FAULTS, AND WITHOUT WARRANTIES, INCLUDING THE IMPLIED WARRANTIES OF TITLE, MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE.\n\n9. Governing Law and Jurisdiction\n\nThis MNDA and all matters relating hereto are governed by, and construed in accordance with, the laws of the State of Governing Law, without regard to the conflict of laws provisions of such Governing Law. Any legal suit, action, or proceeding relating to this MNDA must be instituted in the federal or state courts located in Jurisdiction. Each party irrevocably submits to the exclusive jurisdiction of such Jurisdiction in any such suit, action, or proceeding.\n\n10. Equitable Relief\n\nA breach of this MNDA may cause irreparable harm for which monetary damages are an insufficient remedy. Upon a breach of this MNDA, the Disclosing Party is entitled to seek appropriate equitable relief, including an injunction, in addition to its other remedies.\n\n11. General\n\nNeither party has an obligation under this MNDA to disclose Confidential Information to the other or proceed with any proposed transaction.Neither party may assign this MNDA without the prior written consent of the other party, except that either party may assign this MNDA in connection with a merger, reorganization, acquisition or other transfer of all or substantially all its assets or voting securities. Any assignment in violation of this Section is null and void. This MNDA will bind and inure to the benefit of each party\u2019s permitted successors and assigns. Waivers must be signed by the waiving party\u2019s authorized representative and cannot be implied from conduct. If any provision of this MNDA is held unenforceable, it will be limited to the minimum extent necessary so the rest of this MNDA remains in effect.This MNDA (including the Cover Page) constitutes the entire agreement of the parties with respect to its subject matter, and supersedes all prior and contemporaneous understandings, agreements, representations, and warranties, whether written or oral, regarding such subject matter. This MNDA may only be amended, modified, waived, or supplemented by an agreement in writing signed by both parties. Notices, requests and approvals under this MNDA must be sent in writing to the email or postal addresses on the Cover Page and are deemed delivered on receipt. This MNDA may be executed in counterparts, including electronic copies, each of which is deemed an original and which together form the same agreement.",
+  sha256: "fc31a8b48aeea31b340de0ec37d13353f3ab60efc591ce244bfb92514b301f2d"
+};
+
+// ../agreements/commonpaper.ts
+var emptyNdaConfig = {
+  refresh_legal_name: "",
+  refresh_notice: "",
+  purpose: "",
+  mnda_years: "1",
+  confidentiality_years: "2",
+  governing_law: "",
+  jurisdiction: "",
+  modifications: ""
+};
+function generateCommonPaperNda(config, recipient) {
+  const pending = [];
+  const value = (key, text) => {
+    if (!text?.trim()) {
+      pending.push(key);
+      return `[To complete: ${key}]`;
+    }
+    return text.trim();
+  };
+  const terms = `COMMON PAPER MUTUAL NDA - COVER PAGE
+
+This Mutual Non-Disclosure Agreement (the \u201CMNDA\u201D) consists of (1) this Cover Page and (2) the Common Paper Mutual NDA Standard Terms Version 1.0 posted at ${commonpaper_default.source}. A copy of the Standard Terms is included below. Any modifications to the Standard Terms are listed on this Cover Page, which controls over conflicts with the Standard Terms.
+
+Party 1: ${value("Refresh legal name", config.refresh_legal_name)}
+Notice address: ${value("Refresh notice address", config.refresh_notice)}
+
+Party 2: ${value("Collaborator legal name", recipient.recipient_name)}
+Notice address: ${value("Collaborator notice address", recipient.recipient_email)}
+
+Purpose: ${value("Purpose", config.purpose)}
+
+Effective Date: Date of the last party's NDA signature.
+
+MNDA Term: Expires ${value("MNDA years", config.mnda_years)} year(s) from the Effective Date.
+
+Term of Confidentiality: ${value("Confidentiality years", config.confidentiality_years)} year(s) from the date of last disclosure, but in the case of trade secrets, until Confidential Information is no longer considered a trade secret under applicable laws.
+
+Governing Law: The laws of the State of ${value("Governing law", config.governing_law)}.
+Jurisdiction: The state and federal courts located in ${value("Jurisdiction", config.jurisdiction)}.
+
+Changes to Standard Terms: ${config.modifications.trim() || "None."}
+
+By signing this Cover Page, each party agrees to enter into this MNDA as of the Effective Date. The parties' names and electronic signature dates are recorded with this agreement.
+
+Common Paper Mutual Non-Disclosure Agreement, Version 1.0. Used under CC BY 4.0 (${commonpaper_default.license}). Cover Page adapted for Refresh's electronic agreement workflow; Standard Terms reproduced without substantive changes.
+
+STANDARD TERMS
+
+${commonpaper_default.standard_terms}`;
+  return { nda_terms: terms, nda_template: commonpaper_default.id, terms_approved: false, pending };
+}
+
+// src/contracts.ts
+import { readFile, writeFile } from "fs/promises";
+var ContractError = class extends Error {
+  constructor(status, detail) {
+    super(typeof detail === "string" ? detail : JSON.stringify(detail));
+    this.status = status;
+    this.detail = detail;
+  }
+  status;
+  detail;
+};
+async function contractRequest(path, init = {}) {
+  const auth2 = await getAuthHeader();
+  if (!auth2)
+    throw new ContractError(401, {
+      code: "unauthenticated",
+      message: "Run trajectories auth login with a named Refresh account."
+    });
+  const response = await fetch(getApiUrl() + "/api/contracts" + path, {
+    ...init,
+    headers: {
+      Authorization: auth2,
+      "Content-Type": "application/json",
+      ...init.headers
+    },
+    signal: AbortSignal.timeout(12e4)
+  });
+  if (!response.ok) {
+    const body = await response.json().catch(() => ({ detail: "Contract request failed" }));
+    throw new ContractError(response.status, body.detail);
+  }
+  if (response.headers.get("content-type")?.includes("application/pdf"))
+    return Buffer.from(await response.arrayBuffer());
+  return response.json();
+}
+function errorExit(status) {
+  return status === 401 ? 3 : status === 403 ? 4 : status === 409 ? 5 : status === 422 ? 2 : 1;
+}
+function registerContracts(program2) {
+  const group = program2.command("contracts").description(
+    "Draft, issue and manage private Refresh contracts. Never signs for a recipient."
+  );
+  const wrap = (fn) => async (...args) => {
+    try {
+      const data = await fn(...args);
+      process.stdout.write(
+        JSON.stringify({ schema_version: "1", data }) + "\n"
+      );
+    } catch (e) {
+      const status = e instanceof ContractError ? e.status : 0;
+      process.stdout.write(
+        JSON.stringify({
+          schema_version: "1",
+          error: e instanceof ContractError ? e.detail : { code: "client_error", message: e.message }
+        }) + "\n"
+      );
+      process.exitCode = errorExit(status);
+    }
+  };
+  const json = (cmd) => cmd.option("--json", "Machine-readable JSON (also the default)");
+  json(
+    group.command("preview-file").description(
+      "Render a local HTML draft without logging in, issuing or sending. Does not create a server record."
+    ).requiredOption("--file <path>").requiredOption("--output <path>")
+  ).action(
+    wrap(async (opts) => {
+      const { previewContractFile } = await import("./contracts-preview-3J2PLT3U.js");
+      return previewContractFile(opts.file, opts.output);
+    })
+  );
+  for (const name of ["capabilities", "schema"])
+    json(group.command(name)).action(wrap(() => contractRequest("/" + name)));
+  const templates = group.command("templates").description("Discover and generate reviewable legal templates");
+  json(templates.command("list")).action(
+    wrap(() => contractRequest("/templates"))
+  );
+  json(templates.command("generate").description("Generate a Common Paper Mutual NDA into a new draft file; no network calls or issuance").requiredOption("--file <draft.json>").requiredOption("--config <nda-config.json>").requiredOption("--output <draft-with-nda.json>")).action(wrap(async (opts) => {
+    const draft = JSON.parse(await readFile(opts.file, "utf8"));
+    const config = JSON.parse(await readFile(opts.config, "utf8"));
+    for (const key of Object.keys(config)) {
+      if (!(key in emptyNdaConfig) || typeof config[key] !== "string") throw new Error(`Invalid NDA configuration: ${key}`);
+    }
+    const result = generateCommonPaperNda({ ...emptyNdaConfig, ...config }, draft);
+    const { pending, ...patch } = result;
+    await writeFile(opts.output, JSON.stringify({ ...draft, ...patch, nda_required: true }, null, 2) + "\n", { flag: "wx", mode: 384 });
+    return { output: opts.output, template: result.nda_template, terms_approved: false, pending, issued: false, sent: false };
+  }));
+  json(
+    group.command("list").option("--status <status>").option("--offset <number>", "Pagination offset", "0").option("--limit <number>", "Page size", "50").option("--archived")
+  ).action(
+    wrap(
+      (opts) => contractRequest(
+        "?" + new URLSearchParams({
+          offset: opts.offset,
+          limit: opts.limit,
+          archived: String(!!opts.archived),
+          ...opts.status ? { status: opts.status } : {}
+        })
+      )
+    )
+  );
+  const body = async (file) => JSON.stringify(JSON.parse(await readFile(file, "utf8")));
+  json(group.command("validate").requiredOption("--file <path>")).action(
+    wrap(
+      async (opts) => contractRequest("/validate", {
+        method: "POST",
+        body: await body(opts.file)
+      })
+    )
+  );
+  json(
+    group.command("create").requiredOption("--file <path>").requiredOption(
+      "--idempotency-key <key>",
+      "Reuse the same key on retries"
+    )
+  ).action(
+    wrap(
+      async (opts) => contractRequest("", {
+        method: "POST",
+        headers: { "Idempotency-Key": opts.idempotencyKey },
+        body: await body(opts.file)
+      })
+    )
+  );
+  for (const name of ["get", "status", "preview"])
+    json(group.command(name + " <id>")).action(
+      wrap((id) => contractRequest("/" + encodeURIComponent(id)))
+    );
+  json(
+    group.command("update <id>").requiredOption("--file <path>").requiredOption("--if-match <revision>")
+  ).action(
+    wrap(
+      async (id, opts) => contractRequest("/" + encodeURIComponent(id), {
+        method: "PUT",
+        headers: { "If-Match": opts.ifMatch },
+        body: await body(opts.file)
+      })
+    )
+  );
+  json(
+    group.command("publish <id>").description(
+      "Freeze this reviewed revision and activate signing; does not send email"
+    ).requiredOption("--if-match <revision>")
+  ).action(
+    wrap(
+      (id, opts) => contractRequest(`/${encodeURIComponent(id)}/publish`, {
+        method: "POST",
+        headers: { "If-Match": opts.ifMatch }
+      })
+    )
+  );
+  json(
+    group.command("send <id>").description(
+      "Email an issued invitation; invoke only when delivery was requested"
+    ).requiredOption("--idempotency-key <key>")
+  ).action(
+    wrap(
+      (id, opts) => contractRequest(`/${encodeURIComponent(id)}/send`, {
+        method: "POST",
+        headers: { "Idempotency-Key": opts.idempotencyKey }
+      })
+    )
+  );
+  for (const name of ["sync", "revoke"])
+    json(group.command(name + " <id>")).action(
+      wrap(
+        (id) => contractRequest(`/${encodeURIComponent(id)}/${name}`, {
+          method: "POST"
+        })
+      )
+    );
+  json(
+    group.command("archive <id>").option("--undo", "Restore to active list")
+  ).action(
+    wrap(
+      (id, opts) => contractRequest(`/${encodeURIComponent(id)}/archive`, {
+        method: "POST",
+        body: JSON.stringify({ archived: !opts.undo })
+      })
+    )
+  );
+  json(
+    group.command("download <id>").requiredOption("--document <kind>", "agreement or nda").requiredOption("--output <path>")
+  ).action(
+    wrap(async (id, opts) => {
+      if (!["agreement", "nda"].includes(opts.document))
+        throw new ContractError(422, "Document must be agreement or nda");
+      const bytes = await contractRequest(
+        `/${encodeURIComponent(id)}/documents/${opts.document}/download`
+      );
+      await writeFile(opts.output, bytes, { flag: "wx", mode: 384 });
+      return { path: opts.output };
+    })
+  );
+}
+
+// src/cli.ts
 import { readFileSync } from "fs";
 import { fileURLToPath } from "url";
 import { dirname, join } from "path";
@@ -193,7 +459,7 @@ async function uploadTaskAction(directory, opts) {
   Uploading task ${directory} \u2192 ${chalk.cyan(name)}
 `));
   try {
-    const { pushTask } = await import("./push-task-JGGRVTJ3.js");
+    const { pushTask } = await import("./push-task-FN4XODRC.js");
     const result = await pushTask(directory, {
       name: opts.name,
       visibility: opts.visibility
@@ -320,18 +586,18 @@ async function downloadProjectAction(url, opts) {
 async function deleteTrajectoryAction(url, opts) {
   const chalk = (await import("chalk")).default;
   const { parseJobId } = await import("./download-BWJDAVMM.js");
-  const { getApiUrl, getAuthHeader } = await import("./config-QS2IT5DI.js");
+  const { getApiUrl: getApiUrl2, getAuthHeader: getAuthHeader2 } = await import("./config-QS2IT5DI.js");
   let jobId = parseJobId(url);
   if (jobId.startsWith("org:")) {
     console.error(chalk.red("\n  \u2717 Please use a direct job URL or UUID for deletion.\n"));
     process.exit(1);
   }
-  const authHeader = await getAuthHeader();
+  const authHeader = await getAuthHeader2();
   if (!authHeader) {
     console.error(chalk.red("  \u2717 Not authenticated. Run: trajectories auth login"));
     process.exit(1);
   }
-  const apiUrl = getApiUrl();
+  const apiUrl = getApiUrl2();
   const headers = { Authorization: authHeader };
   try {
     const previewResp = await fetch(`${apiUrl}/api/cli/delete/${jobId}/preview`, { headers });
@@ -708,12 +974,12 @@ project.command("remove <project|set> [sets...]").description("Remove trajectory
 program.command("whoami").description("Show current authentication status").action(async () => {
   const chalk = (await import("chalk")).default;
   const { status } = await import("./auth-NNBHKNIF.js");
-  const { getApiUrl } = await import("./config-QS2IT5DI.js");
+  const { getApiUrl: getApiUrl2 } = await import("./config-QS2IT5DI.js");
   const s = status();
   if (s.loggedIn) {
     console.log(chalk.green("  \u2713 Authenticated"));
     if (s.email) console.log(`    Email: ${s.email}`);
-    console.log(`    API: ${getApiUrl()}`);
+    console.log(`    API: ${getApiUrl2()}`);
   } else {
     console.log(chalk.dim("  Not logged in. Run: trajectories auth login"));
   }
@@ -723,4 +989,5 @@ if (process.argv.length <= 2) {
   program.outputHelp();
   process.exit(1);
 }
+registerContracts(program);
 await program.parseAsync();