unfairly 0.6.1 → 0.8.0

package/CHANGELOG.md

@@ -1,5 +1,11 @@
 # Changelog
 
+## 0.8.0 — 2026-05-15
+
+- **`unfairly connect <urlOrId>`** — wire a shared vault from a share link in one command, no browser OAuth, no signup. POSTs the link to the new `/api/share-links/<id>/mint-token` endpoint (Phase B), receives a ≤24h read-only token, and writes it to Claude Desktop, Claude Code, and Codex as scoped MCP entries keyed by `unfairly-<org>-<room>`. Accepts the full URL, `s/<uuid>` short form, or a bare UUID. `--as <email>` and `--label <text>` flow through to the audit log. Re-connecting the same share link is idempotent — strips the old entry and writes a fresh token at the same key. Hosts that aren't installed are skipped, not errored.
+- **Multi-entry host writers** — new `addScopedClaudeDesktopEntry`, `addScopedClaudeCodeEntry`, and `addScopedCodexEntry` write per-share_link entries alongside the canonical `unfairly` entry. JSON-host entries carry `_meta.shareLinkId` for idempotent rotation; Codex blocks use a `# share_link_id = "<id>"` comment line as the equivalent tag. Numbered-slot collision handling reuses gaps (e.g. with `unfairly-org-hq` + `unfairly-org-hq-3` taken, the next new entry lands at `unfairly-org-hq-2`). Scoped Codex blocks inline the literal bearer_token — these tokens are short-lived one-offs, env-var indirection isn't worth the setup friction.
+- **`parseShareInput`** — pure parser exported from `cmd/parse-share-input.ts`. Handles `https://app.unfairly.ai/s/<uuid>`, `https://preview.../s/<uuid>` (preserves origin so we mint against the same host), `s/<uuid>`, and bare UUIDs. Throws friendly errors on junk input.
+
 ## 0.6.1 — 2026-05-14
 
 - **Fix(Claude Code wiring)** — `unfairly setup` now writes the user-scope `unfairly` entry directly to `~/.claude.json` instead of shelling out to `claude mcp add --header=…`. The shell-out form previously omitted the bearer entirely (`claude mcp list` showed "Needs authentication"), and even when fixed would have placed the raw token in process argv for the lifetime of the subprocess — visible to same-user processes via `ps aux` / `/proc/<pid>/cmdline`. Direct JSON edit keeps the token off the process table, same threat model as the Claude Desktop wiring. Strips any stale project-scope `projects[<cwd>].mcpServers.unfairly` left over from earlier local-scope installs so they don't shadow the user-scope entry.

package/dist/auth/browser-flow.d.ts

@@ -1,3 +1,4 @@
+export declare function openBrowser(url: string): void;
 export type BrowserAuthOptions = {
     tokenName?: string;
     timeoutMs?: number;

package/dist/auth/browser-flow.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"browser-flow.d.ts","sourceRoot":"","sources":["../../src/auth/browser-flow.ts"],"names":[],"mappings":"AAsBA,MAAM,MAAM,kBAAkB,GAAG;IAC/B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF;;;;;;;;GAQG;AACH,wBAAsB,eAAe,CACnC,MAAM,EAAE,MAAM,EACd,IAAI,GAAE,kBAAuB,GAC5B,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CA+CxB"}
+{"version":3,"file":"browser-flow.d.ts","sourceRoot":"","sources":["../../src/auth/browser-flow.ts"],"names":[],"mappings":"AAMA,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAc7C;AAED,MAAM,MAAM,kBAAkB,GAAG;IAC/B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF;;;;;;;;GAQG;AACH,wBAAsB,eAAe,CACnC,MAAM,EAAE,MAAM,EACd,IAAI,GAAE,kBAAuB,GAC5B,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CA+CxB"}

package/dist/auth/browser-flow.js

@@ -2,7 +2,7 @@ import http from "node:http";
 import crypto from "node:crypto";
 import { spawn } from "node:child_process";
 const SUCCESS_HTML = `<!doctype html><html><head><meta charset="utf-8"><title>Unfairly CLI authorized</title><style>body{margin:0;background:#FAF5EB;font-family:system-ui;color:#1a1612;display:flex;align-items:center;justify-content:center;min-height:100vh}.card{background:#fff;border:3px solid #1a1612;border-radius:20px;box-shadow:6px 6px 0 #1a1612;padding:36px;max-width:420px;text-align:center}h1{margin:0 0 8px;font-size:28px}p{margin:0;color:rgba(26,22,18,.7)}</style></head><body><div class="card"><h1>Authorized.</h1><p>You can close this window and return to your terminal.</p></div></body></html>`;
-function openBrowser(url) {
+export function openBrowser(url) {
     const opener = process.platform === "darwin"
         ? "open"
         : process.platform === "win32"

package/dist/auth/browser-flow.js.map

@@ -1 +1 @@
-{"version":3,"file":"browser-flow.js","sourceRoot":"","sources":["../../src/auth/browser-flow.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAE3C,MAAM,YAAY,GAAG,2kBAA2kB,CAAC;AAEjmB,SAAS,WAAW,CAAC,GAAW;IAC9B,MAAM,MAAM,GACV,OAAO,CAAC,QAAQ,KAAK,QAAQ;QAC3B,CAAC,CAAC,MAAM;QACR,CAAC,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO;YAC5B,CAAC,CAAC,KAAK;YACP,CAAC,CAAC,UAAU,CAAC;IACnB,MAAM,IAAI,GACR,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAClE,IAAI,CAAC;QACH,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;IACnE,CAAC;IAAC,MAAM,CAAC;QACP,cAAc;IAChB,CAAC;AACH,CAAC;AAOD;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,MAAc,EACd,OAA2B,EAAE;IAE7B,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,cAAc,CAAC;IACnD,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,CAAC,GAAG,MAAM,CAAC;IAC/C,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAE3D,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,MAAM,OAAO,GAAG,CAAC,GAAkB,EAAE,EAAE;YACrC,IAAI,QAAQ;gBAAE,OAAO;YACrB,QAAQ,GAAG,IAAI,CAAC;YAChB,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,GAAG,CAAC,CAAC;YACtC,OAAO,CAAC,GAAG,CAAC,CAAC;QACf,CAAC,CAAC;QACF,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;YAC5C,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,kBAAkB,CAAC,CAAC;YACxD,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;gBAC7B,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;gBACzB,OAAO;YACT,CAAC;YACD,MAAM,SAAS,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YACtD,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YAClD,IAAI,SAAS,KAAK,KAAK,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;gBACrD,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;gBACtC,OAAO,CAAC,IAAI,CAAC,CAAC;gBACd,OAAO;YACT,CAAC;YACD,GAAG;iBACA,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,0BAA0B,EAAE,CAAC;iBAC9D,GAAG,CAAC,YAAY,CAAC,CAAC;YACrB,OAAO,CAAC,KAAK,CAAC,CAAC;QACjB,CAAC,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,SAAS,CAAC,CAAC;QAC3D,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;QAChD,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE;YACjC,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;YAC9B,MAAM,IAAI,GAAG,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YAC9D,MAAM,EAAE,GAAG,oBAAoB,IAAI,OAAO,CAAC;YAC3C,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;YAC7C,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YACnC,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YACzC,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;YAC5C,OAAO,CAAC,KAAK,CACX,sCAAsC,OAAO,CAAC,QAAQ,EAAE,gDAAgD,CACzG,CAAC;YACF,WAAW,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;QAClC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"browser-flow.js","sourceRoot":"","sources":["../../src/auth/browser-flow.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAE3C,MAAM,YAAY,GAAG,2kBAA2kB,CAAC;AAEjmB,MAAM,UAAU,WAAW,CAAC,GAAW;IACrC,MAAM,MAAM,GACV,OAAO,CAAC,QAAQ,KAAK,QAAQ;QAC3B,CAAC,CAAC,MAAM;QACR,CAAC,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO;YAC5B,CAAC,CAAC,KAAK;YACP,CAAC,CAAC,UAAU,CAAC;IACnB,MAAM,IAAI,GACR,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAClE,IAAI,CAAC;QACH,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;IACnE,CAAC;IAAC,MAAM,CAAC;QACP,cAAc;IAChB,CAAC;AACH,CAAC;AAOD;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,MAAc,EACd,OAA2B,EAAE;IAE7B,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,cAAc,CAAC;IACnD,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,CAAC,GAAG,MAAM,CAAC;IAC/C,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAE3D,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,MAAM,OAAO,GAAG,CAAC,GAAkB,EAAE,EAAE;YACrC,IAAI,QAAQ;gBAAE,OAAO;YACrB,QAAQ,GAAG,IAAI,CAAC;YAChB,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,GAAG,CAAC,CAAC;YACtC,OAAO,CAAC,GAAG,CAAC,CAAC;QACf,CAAC,CAAC;QACF,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;YAC5C,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,kBAAkB,CAAC,CAAC;YACxD,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;gBAC7B,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;gBACzB,OAAO;YACT,CAAC;YACD,MAAM,SAAS,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YACtD,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YAClD,IAAI,SAAS,KAAK,KAAK,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;gBACrD,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;gBACtC,OAAO,CAAC,IAAI,CAAC,CAAC;gBACd,OAAO;YACT,CAAC;YACD,GAAG;iBACA,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,0BAA0B,EAAE,CAAC;iBAC9D,GAAG,CAAC,YAAY,CAAC,CAAC;YACrB,OAAO,CAAC,KAAK,CAAC,CAAC;QACjB,CAAC,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,SAAS,CAAC,CAAC;QAC3D,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;QAChD,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE;YACjC,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;YAC9B,MAAM,IAAI,GAAG,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YAC9D,MAAM,EAAE,GAAG,oBAAoB,IAAI,OAAO,CAAC;YAC3C,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;YAC7C,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YACnC,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YACzC,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;YAC5C,OAAO,CAAC,KAAK,CACX,sCAAsC,OAAO,CAAC,QAAQ,EAAE,gDAAgD,CACzG,CAAC;YACF,WAAW,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;QAClC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/cmd/connect.d.ts

@@ -0,0 +1,61 @@
+import type { Argv } from "yargs";
+import { type AddScopedEntryInput, type AddScopedEntryResult } from "../hosts/claude-desktop.js";
+import { type AddScopedCodexResult } from "../hosts/codex.js";
+type ConnectArgs = {
+    urlOrId: string;
+    as?: string;
+    label?: string;
+    api?: string;
+};
+export type MintResponseOk = {
+    token: string;
+    mcp_url: string;
+    org_slug: string | null;
+    room_slug: string | null;
+    expires_at: string | null;
+};
+export type MintResponseErr = {
+    error: string;
+    message?: string;
+};
+export type ConnectDeps = {
+    fetch: typeof fetch;
+    addClaudeDesktop: (input: AddScopedEntryInput) => Promise<AddScopedEntryResult>;
+    addClaudeCode: (input: AddScopedEntryInput) => Promise<AddScopedEntryResult>;
+    addCodex: (input: AddScopedEntryInput) => Promise<AddScopedCodexResult>;
+    log: (line: string) => void;
+    errLog: (line: string) => void;
+};
+export type ConnectOutcome = {
+    ok: boolean;
+    exitCode: number;
+    shareId?: string;
+    hosts?: {
+        claudeDesktop: AddScopedEntryResult;
+        claudeCode: AddScopedEntryResult;
+        codex: AddScopedCodexResult;
+    };
+    mint?: MintResponseOk;
+    errorCode?: string;
+};
+/**
+ * Pure-ish implementation. Tests inject `deps` to drive without hitting
+ * the network or touching real config files.
+ */
+export declare function runConnect(args: ConnectArgs, deps: ConnectDeps): Promise<ConnectOutcome>;
+export declare const connectCommand: {
+    command: string;
+    describe: string;
+    builder: (yargs: Argv) => Argv<{
+        urlOrId: string;
+    } & {
+        as: string | undefined;
+    } & {
+        label: string | undefined;
+    } & {
+        api: string | undefined;
+    }>;
+    handler: (args: ConnectArgs) => Promise<void>;
+};
+export {};
+//# sourceMappingURL=connect.d.ts.map

package/dist/cmd/connect.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"connect.d.ts","sourceRoot":"","sources":["../../src/cmd/connect.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,OAAO,CAAC;AAElC,OAAO,EAEL,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EAC1B,MAAM,4BAA4B,CAAC;AAEpC,OAAO,EAEL,KAAK,oBAAoB,EAC1B,MAAM,mBAAmB,CAAC;AAI3B,KAAK,WAAW,GAAG;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,CAAC;CACd,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG;IACxB,KAAK,EAAE,OAAO,KAAK,CAAC;IACpB,gBAAgB,EAAE,CAAC,KAAK,EAAE,mBAAmB,KAAK,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAChF,aAAa,EAAE,CAAC,KAAK,EAAE,mBAAmB,KAAK,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAC7E,QAAQ,EAAE,CAAC,KAAK,EAAE,mBAAmB,KAAK,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACxE,GAAG,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC5B,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CAChC,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IAC3B,EAAE,EAAE,OAAO,CAAC;IACZ,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE;QACN,aAAa,EAAE,oBAAoB,CAAC;QACpC,UAAU,EAAE,oBAAoB,CAAC;QACjC,KAAK,EAAE,oBAAoB,CAAC;KAC7B,CAAC;IACF,IAAI,CAAC,EAAE,cAAc,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,CAAC;AAqBF;;;GAGG;AACH,wBAAsB,UAAU,CAC9B,IAAI,EAAE,WAAW,EACjB,IAAI,EAAE,WAAW,GAChB,OAAO,CAAC,cAAc,CAAC,CA4GzB;AAED,eAAO,MAAM,cAAc;;;qBAGR,IAAI;;;;;;;;;oBAmBC,WAAW;CAWlC,CAAC"}

package/dist/cmd/connect.js

@@ -0,0 +1,164 @@
+import { parseShareInput } from "./parse-share-input.js";
+import { addScopedClaudeDesktopEntry, } from "../hosts/claude-desktop.js";
+import { addScopedClaudeCodeEntry } from "../hosts/claude-code.js";
+import { addScopedCodexEntry, } from "../hosts/codex.js";
+const API_DEFAULT = "https://app.unfairly.ai";
+/**
+ * Map a mint endpoint error code to a user-facing message.
+ */
+function describeMintError(status, code) {
+    if (status === 404 || code === "not_found") {
+        return "share link not found — double-check the URL or ask the sender to issue a new one.";
+    }
+    if (status === 410 || code === "revoked_or_expired") {
+        return "share link expired or was revoked — ask the sender for a fresh one.";
+    }
+    if (status === 429 || code === "rate_limited") {
+        return "rate limited (10 mints / hour per link) — try again in an hour.";
+    }
+    if (status === 400 || code === "no_room") {
+        return "invalid share link — it isn't bound to a vault.";
+    }
+    return `server error while minting (${status} ${code}).`;
+}
+/**
+ * Pure-ish implementation. Tests inject `deps` to drive without hitting
+ * the network or touching real config files.
+ */
+export async function runConnect(args, deps) {
+    let parsed;
+    try {
+        parsed = parseShareInput(args.urlOrId);
+    }
+    catch (err) {
+        deps.errLog(`✗ ${err.message}`);
+        return { ok: false, exitCode: 1 };
+    }
+    const apiOrigin = args.api ?? parsed.origin ?? API_DEFAULT;
+    const mintUrl = `${apiOrigin.replace(/\/$/, "")}/api/share-links/${parsed.shareId}/mint-token`;
+    const body = {};
+    if (args.as)
+        body.email = args.as;
+    if (args.label)
+        body.label = args.label;
+    deps.log("✦ Minting a 24-hour vault token…");
+    let res;
+    try {
+        res = await deps.fetch(mintUrl, {
+            method: "POST",
+            headers: { "Content-Type": "application/json" },
+            body: JSON.stringify(body),
+        });
+    }
+    catch (err) {
+        deps.errLog(`✗ network error reaching ${apiOrigin}: ${err.message}`);
+        return { ok: false, exitCode: 1, shareId: parsed.shareId };
+    }
+    if (!res.ok) {
+        let parsedErr = { error: "unknown" };
+        try {
+            parsedErr = (await res.json());
+        }
+        catch {
+            // body wasn't JSON — fall through with default
+        }
+        const message = describeMintError(res.status, parsedErr.error ?? "unknown");
+        deps.errLog(`✗ ${message}`);
+        return {
+            ok: false,
+            exitCode: 1,
+            shareId: parsed.shareId,
+            errorCode: parsedErr.error,
+        };
+    }
+    let mint;
+    try {
+        mint = (await res.json());
+    }
+    catch (err) {
+        deps.errLog(`✗ mint endpoint returned non-JSON: ${err.message}`);
+        return { ok: false, exitCode: 1, shareId: parsed.shareId };
+    }
+    if (!mint.token || !mint.mcp_url) {
+        deps.errLog("✗ mint endpoint response missing token or mcp_url");
+        return { ok: false, exitCode: 1, shareId: parsed.shareId };
+    }
+    const input = {
+        orgSlug: mint.org_slug,
+        roomSlug: mint.room_slug,
+        shareLinkId: parsed.shareId,
+        token: mint.token,
+        mcpUrl: mint.mcp_url,
+    };
+    const [claudeDesktop, claudeCode, codex] = await Promise.all([
+        deps.addClaudeDesktop(input),
+        deps.addClaudeCode(input),
+        deps.addCodex(input),
+    ]);
+    // Per-host success line.
+    const reportHost = (name, result) => {
+        if (result.status === "configured") {
+            const verb = "replaced" in result && result.replaced ? "Updated" : "Wired";
+            deps.log(`✓ ${verb} ${name} · ${result.key}`);
+        }
+        else if (result.status === "not-installed") {
+            deps.log(`  (${name} not installed — skipped)`);
+        }
+        else {
+            deps.errLog(`✗ ${name}: ${result.message ?? "unknown error"}`);
+        }
+    };
+    reportHost("Claude Desktop", claudeDesktop);
+    reportHost("Claude Code", claudeCode);
+    reportHost("Codex", codex);
+    deps.log("");
+    deps.log("→ Open your AI host. Ask: \"what's in this vault?\"");
+    if (mint.expires_at) {
+        deps.log(`  Token expires at ${mint.expires_at} (≤24h).`);
+    }
+    else {
+        deps.log("  Token expires in 24h.");
+    }
+    return {
+        ok: true,
+        exitCode: 0,
+        shareId: parsed.shareId,
+        hosts: { claudeDesktop, claudeCode, codex },
+        mint,
+    };
+}
+export const connectCommand = {
+    command: "connect <urlOrId>",
+    describe: "Connect to a shared vault via share link — mints a 24h token, wires all hosts",
+    builder: (yargs) => yargs
+        .positional("urlOrId", {
+        type: "string",
+        demandOption: true,
+        describe: "Share link URL (https://app.unfairly.ai/s/<uuid>), short form (s/<uuid>), or bare UUID",
+    })
+        .option("as", {
+        type: "string",
+        describe: "Email to attribute the token to (audit only)",
+    })
+        .option("label", {
+        type: "string",
+        describe: "Human label for the audit log (≤100 chars)",
+    })
+        .option("api", {
+        type: "string",
+        describe: "Override the API origin (defaults to the URL's origin or app.unfairly.ai)",
+    }),
+    handler: async (args) => {
+        const outcome = await runConnect(args, {
+            fetch: globalThis.fetch.bind(globalThis),
+            addClaudeDesktop: addScopedClaudeDesktopEntry,
+            addClaudeCode: addScopedClaudeCodeEntry,
+            addCodex: addScopedCodexEntry,
+            log: (line) => console.log(line),
+            errLog: (line) => console.error(line),
+        });
+        if (!outcome.ok)
+            process.exit(outcome.exitCode);
+    },
+};
+//# sourceMappingURL=connect.js.map

package/dist/cmd/connect.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connect.js","sourceRoot":"","sources":["../../src/cmd/connect.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EACL,2BAA2B,GAG5B,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AACnE,OAAO,EACL,mBAAmB,GAEpB,MAAM,mBAAmB,CAAC;AAE3B,MAAM,WAAW,GAAG,yBAAyB,CAAC;AA4C9C;;GAEG;AACH,SAAS,iBAAiB,CAAC,MAAc,EAAE,IAAY;IACrD,IAAI,MAAM,KAAK,GAAG,IAAI,IAAI,KAAK,WAAW,EAAE,CAAC;QAC3C,OAAO,mFAAmF,CAAC;IAC7F,CAAC;IACD,IAAI,MAAM,KAAK,GAAG,IAAI,IAAI,KAAK,oBAAoB,EAAE,CAAC;QACpD,OAAO,qEAAqE,CAAC;IAC/E,CAAC;IACD,IAAI,MAAM,KAAK,GAAG,IAAI,IAAI,KAAK,cAAc,EAAE,CAAC;QAC9C,OAAO,iEAAiE,CAAC;IAC3E,CAAC;IACD,IAAI,MAAM,KAAK,GAAG,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACzC,OAAO,iDAAiD,CAAC;IAC3D,CAAC;IACD,OAAO,+BAA+B,MAAM,IAAI,IAAI,IAAI,CAAC;AAC3D,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,IAAiB,EACjB,IAAiB;IAEjB,IAAI,MAAkD,CAAC;IACvD,IAAI,CAAC;QACH,MAAM,GAAG,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACzC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,MAAM,CAAC,KAAM,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QAC3C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;IACpC,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,IAAI,MAAM,CAAC,MAAM,IAAI,WAAW,CAAC;IAC3D,MAAM,OAAO,GAAG,GAAG,SAAS,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,oBAAoB,MAAM,CAAC,OAAO,aAAa,CAAC;IAE/F,MAAM,IAAI,GAA2B,EAAE,CAAC;IACxC,IAAI,IAAI,CAAC,EAAE;QAAE,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,EAAE,CAAC;IAClC,IAAI,IAAI,CAAC,KAAK;QAAE,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;IAExC,IAAI,CAAC,GAAG,CAAC,kCAAkC,CAAC,CAAC;IAE7C,IAAI,GAAa,CAAC;IAClB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE;YAC9B,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;SAC3B,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,MAAM,CAAC,4BAA4B,SAAS,KAAM,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QAChF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC;IAC7D,CAAC;IAED,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,IAAI,SAAS,GAAoB,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;QACtD,IAAI,CAAC;YACH,SAAS,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAoB,CAAC;QACpD,CAAC;QAAC,MAAM,CAAC;YACP,+CAA+C;QACjD,CAAC;QACD,MAAM,OAAO,GAAG,iBAAiB,CAAC,GAAG,CAAC,MAAM,EAAE,SAAS,CAAC,KAAK,IAAI,SAAS,CAAC,CAAC;QAC5E,IAAI,CAAC,MAAM,CAAC,KAAK,OAAO,EAAE,CAAC,CAAC;QAC5B,OAAO;YACL,EAAE,EAAE,KAAK;YACT,QAAQ,EAAE,CAAC;YACX,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,SAAS,EAAE,SAAS,CAAC,KAAK;SAC3B,CAAC;IACJ,CAAC;IAED,IAAI,IAAoB,CAAC;IACzB,IAAI,CAAC;QACH,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAmB,CAAC;IAC9C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,MAAM,CAAC,sCAAuC,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QAC5E,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC;IAC7D,CAAC;IAED,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QACjC,IAAI,CAAC,MAAM,CAAC,mDAAmD,CAAC,CAAC;QACjE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC;IAC7D,CAAC;IAED,MAAM,KAAK,GAAwB;QACjC,OAAO,EAAE,IAAI,CAAC,QAAQ;QACtB,QAAQ,EAAE,IAAI,CAAC,SAAS;QACxB,WAAW,EAAE,MAAM,CAAC,OAAO;QAC3B,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,MAAM,EAAE,IAAI,CAAC,OAAO;KACrB,CAAC;IAEF,MAAM,CAAC,aAAa,EAAE,UAAU,EAAE,KAAK,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAC3D,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC;QAC5B,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC;QACzB,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;KACrB,CAAC,CAAC;IAEH,yBAAyB;IACzB,MAAM,UAAU,GAAG,CACjB,IAAY,EACZ,MAAmD,EACnD,EAAE;QACF,IAAI,MAAM,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;YACnC,MAAM,IAAI,GAAG,UAAU,IAAI,MAAM,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC;YAC3E,IAAI,CAAC,GAAG,CAAC,KAAK,IAAI,IAAI,IAAI,MAAM,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC;QAChD,CAAC;aAAM,IAAI,MAAM,CAAC,MAAM,KAAK,eAAe,EAAE,CAAC;YAC7C,IAAI,CAAC,GAAG,CAAC,MAAM,IAAI,2BAA2B,CAAC,CAAC;QAClD,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,KAAK,MAAM,CAAC,OAAO,IAAI,eAAe,EAAE,CAAC,CAAC;QACjE,CAAC;IACH,CAAC,CAAC;IAEF,UAAU,CAAC,gBAAgB,EAAE,aAAa,CAAC,CAAC;IAC5C,UAAU,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC;IACtC,UAAU,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAE3B,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACb,IAAI,CAAC,GAAG,CAAC,qDAAqD,CAAC,CAAC;IAChE,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;QACpB,IAAI,CAAC,GAAG,CAAC,sBAAsB,IAAI,CAAC,UAAU,UAAU,CAAC,CAAC;IAC5D,CAAC;SAAM,CAAC;QACN,IAAI,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;IACtC,CAAC;IAED,OAAO;QACL,EAAE,EAAE,IAAI;QACR,QAAQ,EAAE,CAAC;QACX,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,KAAK,EAAE,EAAE,aAAa,EAAE,UAAU,EAAE,KAAK,EAAE;QAC3C,IAAI;KACL,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,OAAO,EAAE,mBAAmB;IAC5B,QAAQ,EAAE,+EAA+E;IACzF,OAAO,EAAE,CAAC,KAAW,EAAE,EAAE,CACvB,KAAK;SACF,UAAU,CAAC,SAAS,EAAE;QACrB,IAAI,EAAE,QAAQ;QACd,YAAY,EAAE,IAAI;QAClB,QAAQ,EAAE,wFAAwF;KACnG,CAAC;SACD,MAAM,CAAC,IAAI,EAAE;QACZ,IAAI,EAAE,QAAQ;QACd,QAAQ,EAAE,8CAA8C;KACzD,CAAC;SACD,MAAM,CAAC,OAAO,EAAE;QACf,IAAI,EAAE,QAAQ;QACd,QAAQ,EAAE,4CAA4C;KACvD,CAAC;SACD,MAAM,CAAC,KAAK,EAAE;QACb,IAAI,EAAE,QAAQ;QACd,QAAQ,EAAE,2EAA2E;KACtF,CAAC;IACN,OAAO,EAAE,KAAK,EAAE,IAAiB,EAAE,EAAE;QACnC,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,IAAI,EAAE;YACrC,KAAK,EAAE,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC;YACxC,gBAAgB,EAAE,2BAA2B;YAC7C,aAAa,EAAE,wBAAwB;YACvC,QAAQ,EAAE,mBAAmB;YAC7B,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;YAChC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC;SACtC,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,CAAC,EAAE;YAAE,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAClD,CAAC;CACF,CAAC"}

package/dist/cmd/invite.d.ts

@@ -0,0 +1,26 @@
+import type { Argv } from "yargs";
+type InviteArgs = {
+    email: string;
+    "persona-surface": string;
+    "persona-workflow"?: string;
+    org?: string;
+    api: string;
+};
+export declare const inviteCommand: {
+    command: string;
+    describe: string;
+    builder: (yargs: Argv) => Argv<{
+        email: string;
+    } & {
+        "persona-surface": string;
+    } & {
+        "persona-workflow": string | undefined;
+    } & {
+        org: string | undefined;
+    } & {
+        api: string;
+    }>;
+    handler: (args: InviteArgs) => Promise<void>;
+};
+export {};
+//# sourceMappingURL=invite.d.ts.map

package/dist/cmd/invite.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"invite.d.ts","sourceRoot":"","sources":["../../src/cmd/invite.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,OAAO,CAAC;AAGlC,KAAK,UAAU,GAAG;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,iBAAiB,EAAE,MAAM,CAAC;IAC1B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;CACb,CAAC;AAIF,eAAO,MAAM,aAAa;;;qBAGP,IAAI;;;;;;;;;;;oBAkCC,UAAU;CAsCjC,CAAC"}

package/dist/cmd/invite.js

@@ -0,0 +1,73 @@
+import { getToken } from "../sync/credentials.js";
+const API_DEFAULT = "https://app.unfairly.ai";
+export const inviteCommand = {
+    command: "invite",
+    describe: "Generate a persona-tagged invite link for a teammate",
+    builder: (yargs) => yargs
+        .option("email", {
+        type: "string",
+        demandOption: true,
+        describe: "Email of the person you're inviting",
+    })
+        .option("persona-surface", {
+        type: "string",
+        demandOption: true,
+        choices: ["builder-terminal", "oracle-cowork", "player-web"],
+        describe: "Which surface they'll primarily use",
+    })
+        .option("persona-workflow", {
+        type: "string",
+        choices: [
+            "strategy",
+            "synthesis",
+            "clinical-operations",
+            "credentialing",
+            "technical",
+            "recruiting",
+        ],
+        describe: "What workflow they own",
+    })
+        .option("org", {
+        type: "string",
+        describe: "Org slug or id (required for CLI; web infers from cookie)",
+    })
+        .option("api", {
+        type: "string",
+        default: API_DEFAULT,
+        describe: "API origin",
+    }),
+    handler: async (args) => {
+        const token = await getToken();
+        if (!token) {
+            console.error("Not signed in. Run `unfairly login` first, then re-run `unfairly invite`.");
+            process.exit(1);
+        }
+        const res = await fetch(`${args.api}/api/onboard/invite`, {
+            method: "POST",
+            headers: {
+                "Content-Type": "application/json",
+                Authorization: `Bearer ${token}`,
+            },
+            body: JSON.stringify({
+                email: args.email,
+                persona_surface: args["persona-surface"],
+                persona_workflow: args["persona-workflow"],
+                org_slug: args.org,
+            }),
+        });
+        if (!res.ok) {
+            const err = await res.text();
+            console.error(`Failed to create invite: ${res.status} ${err}`);
+            process.exit(1);
+        }
+        const data = await res.json();
+        console.log(`\n✦ Invite ready for ${data.target_email}`);
+        console.log(`   Surface:  ${data.persona_surface}`);
+        if (data.persona_workflow) {
+            console.log(`   Workflow: ${data.persona_workflow}`);
+        }
+        console.log(`\n   ${data.url}\n`);
+        console.log(`Send that to them. They'll paste-run \`npx unfairly join\` from there.\n`);
+    },
+};
+//# sourceMappingURL=invite.js.map

package/dist/cmd/invite.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"invite.js","sourceRoot":"","sources":["../../src/cmd/invite.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AAUlD,MAAM,WAAW,GAAG,yBAAyB,CAAC;AAE9C,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,OAAO,EAAE,QAAQ;IACjB,QAAQ,EAAE,sDAAsD;IAChE,OAAO,EAAE,CAAC,KAAW,EAAE,EAAE,CACvB,KAAK;SACF,MAAM,CAAC,OAAO,EAAE;QACf,IAAI,EAAE,QAAQ;QACd,YAAY,EAAE,IAAI;QAClB,QAAQ,EAAE,qCAAqC;KAChD,CAAC;SACD,MAAM,CAAC,iBAAiB,EAAE;QACzB,IAAI,EAAE,QAAQ;QACd,YAAY,EAAE,IAAI;QAClB,OAAO,EAAE,CAAC,kBAAkB,EAAE,eAAe,EAAE,YAAY,CAAC;QAC5D,QAAQ,EAAE,qCAAqC;KAChD,CAAC;SACD,MAAM,CAAC,kBAAkB,EAAE;QAC1B,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE;YACP,UAAU;YACV,WAAW;YACX,qBAAqB;YACrB,eAAe;YACf,WAAW;YACX,YAAY;SACb;QACD,QAAQ,EAAE,wBAAwB;KACnC,CAAC;SACD,MAAM,CAAC,KAAK,EAAE;QACb,IAAI,EAAE,QAAQ;QACd,QAAQ,EAAE,2DAA2D;KACtE,CAAC;SACD,MAAM,CAAC,KAAK,EAAE;QACb,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,WAAW;QACpB,QAAQ,EAAE,YAAY;KACvB,CAAC;IACN,OAAO,EAAE,KAAK,EAAE,IAAgB,EAAE,EAAE;QAClC,MAAM,KAAK,GAAG,MAAM,QAAQ,EAAE,CAAC;QAC/B,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,CAAC,KAAK,CACX,2EAA2E,CAC5E,CAAC;YACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,GAAG,qBAAqB,EAAE;YACxD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,aAAa,EAAE,UAAU,KAAK,EAAE;aACjC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,eAAe,EAAE,IAAI,CAAC,iBAAiB,CAAC;gBACxC,gBAAgB,EAAE,IAAI,CAAC,kBAAkB,CAAC;gBAC1C,QAAQ,EAAE,IAAI,CAAC,GAAG;aACnB,CAAC;SACH,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;YAC7B,OAAO,CAAC,KAAK,CAAC,4BAA4B,GAAG,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC,CAAC;YAC/D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC9B,OAAO,CAAC,GAAG,CAAC,wBAAwB,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;QACzD,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,CAAC,eAAe,EAAE,CAAC,CAAC;QACpD,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC1B,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,CAAC,gBAAgB,EAAE,CAAC,CAAC;QACvD,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;QAClC,OAAO,CAAC,GAAG,CACT,0EAA0E,CAC3E,CAAC;IACJ,CAAC;CACF,CAAC"}

package/dist/cmd/join.d.ts

@@ -0,0 +1,20 @@
+import type { Argv } from "yargs";
+type JoinArgs = {
+    token: string;
+    api: string;
+    host?: string;
+};
+export declare const joinCommand: {
+    command: string;
+    describe: string;
+    builder: (yargs: Argv) => Argv<{
+        token: string;
+    } & {
+        api: string;
+    } & {
+        host: string | undefined;
+    }>;
+    handler: (args: JoinArgs) => Promise<void>;
+};
+export {};
+//# sourceMappingURL=join.d.ts.map

package/dist/cmd/join.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"join.d.ts","sourceRoot":"","sources":["../../src/cmd/join.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,OAAO,CAAC;AAKlC,KAAK,QAAQ,GAAG;IACd,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,CAAC,EAAE,MAAM,CAAC;CACf,CAAC;AAyBF,eAAO,MAAM,WAAW;;;qBAGL,IAAI;;;;;;;oBASC,QAAQ;CA0F/B,CAAC"}

package/dist/cmd/join.js

@@ -0,0 +1,91 @@
+import { setTimeout as sleep } from "node:timers/promises";
+import { openBrowser } from "../auth/browser-flow.js";
+import { setToken } from "../sync/credentials.js";
+const API_DEFAULT = "https://app.unfairly.ai";
+export const joinCommand = {
+    command: "join <token>",
+    describe: "Join an Unfairly org via a persona-tagged invite token",
+    builder: (yargs) => yargs
+        .positional("token", { type: "string", demandOption: true })
+        .option("api", { type: "string", default: API_DEFAULT })
+        .option("host", {
+        type: "string",
+        choices: ["claude-code", "codex", "cowork"],
+        describe: "Force a specific host (default: pick by persona)",
+    }),
+    handler: async (args) => {
+        // 1. Init session
+        console.log("✦ Initializing join session…");
+        const initRes = await fetch(`${args.api}/api/cli/join/init`, {
+            method: "POST",
+            headers: { "Content-Type": "application/json" },
+            body: JSON.stringify({ token: args.token }),
+        });
+        if (!initRes.ok) {
+            const err = await initRes.text();
+            console.error(`Failed to init: ${initRes.status} ${err}`);
+            process.exit(1);
+        }
+        const init = await initRes.json();
+        // 2. Open browser
+        console.log(`✓ Opening browser to authorize…`);
+        console.log(`  (if it doesn't open: ${init.auth_url})`);
+        openBrowser(init.auth_url);
+        // 3. Poll for completion
+        let waited = 0;
+        let interval = init.poll_interval_seconds * 1000;
+        let result = null;
+        while (waited < init.ttl_seconds * 1000) {
+            await sleep(interval);
+            waited += interval;
+            const pollRes = await fetch(init.poll_url);
+            if (!pollRes.ok) {
+                console.error(`Poll error: ${pollRes.status}`);
+                process.exit(1);
+            }
+            const poll = await pollRes.json();
+            if (poll.status === "completed") {
+                result = poll;
+                break;
+            }
+            if (poll.status === "expired") {
+                console.error("Session expired. Re-run the command.");
+                process.exit(1);
+            }
+            if (waited > init.poll_backoff_after_seconds * 1000) {
+                interval = init.poll_backoff_interval_seconds * 1000;
+            }
+        }
+        if (!result) {
+            console.error("Timed out waiting for browser auth. Re-run the command.");
+            process.exit(1);
+        }
+        console.log(`✓ You're in. Joining as: ${result.display_name} (${result.persona_surface}/${result.persona_workflow ?? "—"})`);
+        // 4. Pick host (default by persona surface)
+        const host = args.host ??
+            (result.persona_surface === "oracle-cowork" ? "cowork" : "claude-code");
+        // 5. Persist the join JWT via existing credential store + configure host.
+        //    Existing host writers take a single `apiUrl: string` arg and read
+        //    the token from credentials.
+        await setToken(result.jwt);
+        console.log(`✓ Configuring ${host}…`);
+        if (host === "claude-code") {
+            const { configureClaudeCode } = await import("../hosts/claude-code.js");
+            await configureClaudeCode(args.api, result.jwt);
+        }
+        else if (host === "codex") {
+            const { configureCodex } = await import("../hosts/codex.js");
+            await configureCodex(args.api);
+        }
+        else if (host === "cowork") {
+            const { configureClaudeDesktop } = await import("../hosts/claude-desktop.js");
+            await configureClaudeDesktop(args.api, result.jwt);
+            console.log("⚠  Quit and relaunch Claude Desktop to load the new MCP server.");
+        }
+        // 6. Print persona-shaped welcome
+        const welcomeRes = await fetch(`${args.api}/api/cli/welcome?persona=${result.persona_surface}&workflow=${result.persona_workflow ?? ""}`);
+        const welcome = await welcomeRes.text();
+        console.log(welcome);
+    },
+};
+//# sourceMappingURL=join.js.map

package/dist/cmd/join.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"join.js","sourceRoot":"","sources":["../../src/cmd/join.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,IAAI,KAAK,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AACtD,OAAO,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AAQlD,MAAM,WAAW,GAAG,yBAAyB,CAAC;AAuB9C,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,OAAO,EAAE,cAAc;IACvB,QAAQ,EAAE,wDAAwD;IAClE,OAAO,EAAE,CAAC,KAAW,EAAE,EAAE,CACvB,KAAK;SACF,UAAU,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;SAC3D,MAAM,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;SACvD,MAAM,CAAC,MAAM,EAAE;QACd,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,CAAC,aAAa,EAAE,OAAO,EAAE,QAAQ,CAAC;QAC3C,QAAQ,EAAE,kDAAkD;KAC7D,CAAC;IACN,OAAO,EAAE,KAAK,EAAE,IAAc,EAAE,EAAE;QAChC,kBAAkB;QAClB,OAAO,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAC;QAC5C,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,GAAG,oBAAoB,EAAE;YAC3D,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;SAC5C,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;YAChB,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;YACjC,OAAO,CAAC,KAAK,CAAC,mBAAmB,OAAO,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC,CAAC;YAC1D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,MAAM,IAAI,GAAiB,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;QAEhD,kBAAkB;QAClB,OAAO,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC;QAC/C,OAAO,CAAC,GAAG,CAAC,0BAA0B,IAAI,CAAC,QAAQ,GAAG,CAAC,CAAC;QACxD,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAE3B,yBAAyB;QACzB,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,IAAI,QAAQ,GAAG,IAAI,CAAC,qBAAqB,GAAG,IAAI,CAAC;QACjD,IAAI,MAAM,GAAuB,IAAI,CAAC;QAEtC,OAAO,MAAM,GAAG,IAAI,CAAC,WAAW,GAAG,IAAI,EAAE,CAAC;YACxC,MAAM,KAAK,CAAC,QAAQ,CAAC,CAAC;YACtB,MAAM,IAAI,QAAQ,CAAC;YACnB,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC3C,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;gBAChB,OAAO,CAAC,KAAK,CAAC,eAAe,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;gBAC/C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;YACD,MAAM,IAAI,GAAiB,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;YAChD,IAAI,IAAI,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;gBAChC,MAAM,GAAG,IAAmB,CAAC;gBAC7B,MAAM;YACR,CAAC;YACD,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBAC9B,OAAO,CAAC,KAAK,CAAC,sCAAsC,CAAC,CAAC;gBACtD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;YACD,IAAI,MAAM,GAAG,IAAI,CAAC,0BAA0B,GAAG,IAAI,EAAE,CAAC;gBACpD,QAAQ,GAAG,IAAI,CAAC,6BAA6B,GAAG,IAAI,CAAC;YACvD,CAAC;QACH,CAAC;QAED,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,CAAC,KAAK,CAAC,yDAAyD,CAAC,CAAC;YACzE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,OAAO,CAAC,GAAG,CACT,4BAA4B,MAAM,CAAC,YAAY,KAAK,MAAM,CAAC,eAAe,IAAI,MAAM,CAAC,gBAAgB,IAAI,GAAG,GAAG,CAChH,CAAC;QAEF,4CAA4C;QAC5C,MAAM,IAAI,GACR,IAAI,CAAC,IAAI;YACT,CAAC,MAAM,CAAC,eAAe,KAAK,eAAe,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC;QAE1E,0EAA0E;QAC1E,uEAAuE;QACvE,iCAAiC;QACjC,MAAM,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAE3B,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,GAAG,CAAC,CAAC;QACtC,IAAI,IAAI,KAAK,aAAa,EAAE,CAAC;YAC3B,MAAM,EAAE,mBAAmB,EAAE,GAAG,MAAM,MAAM,CAAC,yBAAyB,CAAC,CAAC;YACxE,MAAM,mBAAmB,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;QAClD,CAAC;aAAM,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;YAC5B,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAAC,CAAC;YAC7D,MAAM,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACjC,CAAC;aAAM,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7B,MAAM,EAAE,sBAAsB,EAAE,GAAG,MAAM,MAAM,CAC7C,4BAA4B,CAC7B,CAAC;YACF,MAAM,sBAAsB,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;YACnD,OAAO,CAAC,GAAG,CACT,iEAAiE,CAClE,CAAC;QACJ,CAAC;QAED,kCAAkC;QAClC,MAAM,UAAU,GAAG,MAAM,KAAK,CAC5B,GAAG,IAAI,CAAC,GAAG,4BAA4B,MAAM,CAAC,eAAe,aAAa,MAAM,CAAC,gBAAgB,IAAI,EAAE,EAAE,CAC1G,CAAC;QACF,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,IAAI,EAAE,CAAC;QACxC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACvB,CAAC;CACF,CAAC"}

package/dist/cmd/parse-share-input.d.ts

@@ -0,0 +1,6 @@
+export type ParsedShareInput = {
+    shareId: string;
+    origin: string | null;
+};
+export declare function parseShareInput(input: string): ParsedShareInput;
+//# sourceMappingURL=parse-share-input.d.ts.map

package/dist/cmd/parse-share-input.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"parse-share-input.d.ts","sourceRoot":"","sources":["../../src/cmd/parse-share-input.ts"],"names":[],"mappings":"AAcA,MAAM,MAAM,gBAAgB,GAAG;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB,CAAC;AAEF,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,gBAAgB,CA+C/D"}

package/dist/cmd/parse-share-input.js

@@ -0,0 +1,56 @@
+// cli/src/cmd/parse-share-input.ts
+//
+// Parse the positional arg to `unfairly connect`. Accepts:
+//   - Full URL:  https://app.unfairly.ai/s/<uuid>
+//   - Short form: s/<uuid>
+//   - Bare UUID:  <uuid>
+//
+// Returns the share_link UUID + the origin (when present in the input)
+// so `connect` can POST to the same host the link came from. A bare UUID
+// or short form yields `origin: null` — callers should fall back to the
+// production app origin.
+const UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+export function parseShareInput(input) {
+    if (typeof input !== "string") {
+        throw new Error("share link is required");
+    }
+    const trimmed = input.trim();
+    if (trimmed.length === 0) {
+        throw new Error("share link is required");
+    }
+    // Full URL form: https://host/s/<uuid> (with optional trailing slash / query).
+    if (/^https?:\/\//i.test(trimmed)) {
+        let url;
+        try {
+            url = new URL(trimmed);
+        }
+        catch {
+            throw new Error(`not a valid URL: ${trimmed}`);
+        }
+        const segments = url.pathname.split("/").filter(Boolean);
+        // Expect [..., "s", "<uuid>"] — find the "s/" marker.
+        const sIdx = segments.indexOf("s");
+        if (sIdx === -1 || sIdx === segments.length - 1) {
+            throw new Error(`share link URL must include /s/<id>: ${trimmed}`);
+        }
+        const candidate = segments[sIdx + 1] ?? "";
+        if (!UUID_RE.test(candidate)) {
+            throw new Error(`share id must be a UUID, got "${candidate}"`);
+        }
+        return { shareId: candidate.toLowerCase(), origin: url.origin };
+    }
+    // Short form: s/<uuid>
+    if (/^s\//i.test(trimmed)) {
+        const candidate = trimmed.slice(2);
+        if (!UUID_RE.test(candidate)) {
+            throw new Error(`share id must be a UUID, got "${candidate}"`);
+        }
+        return { shareId: candidate.toLowerCase(), origin: null };
+    }
+    // Bare UUID
+    if (UUID_RE.test(trimmed)) {
+        return { shareId: trimmed.toLowerCase(), origin: null };
+    }
+    throw new Error(`not a recognized share link: "${input}" — expected a URL like https://app.unfairly.ai/s/<uuid>, "s/<uuid>", or a bare UUID`);
+}
+//# sourceMappingURL=parse-share-input.js.map

package/dist/cmd/parse-share-input.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"parse-share-input.js","sourceRoot":"","sources":["../../src/cmd/parse-share-input.ts"],"names":[],"mappings":"AAAA,mCAAmC;AACnC,EAAE;AACF,2DAA2D;AAC3D,kDAAkD;AAClD,2BAA2B;AAC3B,yBAAyB;AACzB,EAAE;AACF,uEAAuE;AACvE,yEAAyE;AACzE,wEAAwE;AACxE,yBAAyB;AAEzB,MAAM,OAAO,GAAG,iEAAiE,CAAC;AAOlF,MAAM,UAAU,eAAe,CAAC,KAAa;IAC3C,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAC5C,CAAC;IACD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAC5C,CAAC;IAED,+EAA+E;IAC/E,IAAI,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAClC,IAAI,GAAQ,CAAC;QACb,IAAI,CAAC;YACH,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;QACzB,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CAAC,oBAAoB,OAAO,EAAE,CAAC,CAAC;QACjD,CAAC;QACD,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACzD,sDAAsD;QACtD,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACnC,IAAI,IAAI,KAAK,CAAC,CAAC,IAAI,IAAI,KAAK,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAChD,MAAM,IAAI,KAAK,CAAC,wCAAwC,OAAO,EAAE,CAAC,CAAC;QACrE,CAAC;QACD,MAAM,SAAS,GAAG,QAAQ,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;QAC3C,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CAAC,iCAAiC,SAAS,GAAG,CAAC,CAAC;QACjE,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC;IAClE,CAAC;IAED,uBAAuB;IACvB,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1B,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACnC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CAAC,iCAAiC,SAAS,GAAG,CAAC,CAAC;QACjE,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAC5D,CAAC;IAED,YAAY;IACZ,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1B,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAC1D,CAAC;IAED,MAAM,IAAI,KAAK,CACb,iCAAiC,KAAK,sFAAsF,CAC7H,CAAC;AACJ,CAAC"}

package/dist/hosts/claude-code.d.ts

@@ -1,3 +1,4 @@
+import { type AddScopedEntryInput, type AddScopedEntryResult } from "./claude-desktop.js";
 export type ClaudeCodeResult = {
     status: "configured";
     path: string;
@@ -57,5 +58,18 @@ export declare function mergeIntoConfig(existing: ClaudeConfig, apiUrl: string,
  * `claude mcp add` would have done implicitly.
  */
 export declare function configureClaudeCode(apiUrl: string, token: string): Promise<ClaudeCodeResult>;
+/**
+ * Add a scoped, per-share_link MCP entry to Claude Code's ~/.claude.json.
+ * Reuses the Claude Desktop entry-shape + key-picker logic (same JSON
+ * config format). Idempotent by `_meta.shareLinkId`.
+ *
+ * If the `claude` binary is not in PATH → not-installed (we don't create
+ * ~/.claude.json out of thin air for a user who hasn't installed Claude
+ * Code yet — matches `configureClaudeCode` behavior).
+ *
+ * If the binary exists but ~/.claude.json doesn't → create it with the
+ * scoped entry (fresh-install case).
+ */
+export declare function addScopedClaudeCodeEntry(input: AddScopedEntryInput): Promise<AddScopedEntryResult>;
 export {};
 //# sourceMappingURL=claude-code.d.ts.map

package/dist/hosts/claude-code.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"claude-code.d.ts","sourceRoot":"","sources":["../../src/hosts/claude-code.ts"],"names":[],"mappings":"AAKA,MAAM,MAAM,gBAAgB,GACxB;IAAE,MAAM,EAAE,YAAY,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACvD;IAAE,MAAM,EAAE,eAAe,CAAA;CAAE,GAC3B;IAAE,MAAM,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAEzC,MAAM,MAAM,eAAe,GAAG;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE;QAAE,aAAa,EAAE,MAAM,CAAA;KAAE,CAAC;CACpC,CAAC;AAEF,KAAK,YAAY,GAAG;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,CAAC,CAAC;IACpE,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB,CAAC;AAEF;;;GAGG;AACH,wBAAgB,UAAU,IAAI,MAAM,CAEnC;AAED;;;;;GAKG;AACH,wBAAgB,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,eAAe,CAMzE;AAED;;;;;;;;GAQG;AACH,wBAAgB,eAAe,CAC7B,QAAQ,EAAE,YAAY,EACtB,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,MAAM,GACZ,YAAY,CAuBd;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,mBAAmB,CACvC,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,gBAAgB,CAAC,CA6C3B"}
+{"version":3,"file":"claude-code.d.ts","sourceRoot":"","sources":["../../src/hosts/claude-code.ts"],"names":[],"mappings":"AAIA,OAAO,EAEL,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EAC1B,MAAM,qBAAqB,CAAC;AAE7B,MAAM,MAAM,gBAAgB,GACxB;IAAE,MAAM,EAAE,YAAY,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACvD;IAAE,MAAM,EAAE,eAAe,CAAA;CAAE,GAC3B;IAAE,MAAM,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAEzC,MAAM,MAAM,eAAe,GAAG;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE;QAAE,aAAa,EAAE,MAAM,CAAA;KAAE,CAAC;CACpC,CAAC;AAEF,KAAK,YAAY,GAAG;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,CAAC,CAAC;IACpE,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB,CAAC;AAEF;;;GAGG;AACH,wBAAgB,UAAU,IAAI,MAAM,CAEnC;AAED;;;;;GAKG;AACH,wBAAgB,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,eAAe,CAMzE;AAED;;;;;;;;GAQG;AACH,wBAAgB,eAAe,CAC7B,QAAQ,EAAE,YAAY,EACtB,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,MAAM,GACZ,YAAY,CAuBd;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,mBAAmB,CACvC,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,gBAAgB,CAAC,CA6C3B;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,wBAAwB,CAC5C,KAAK,EAAE,mBAAmB,GACzB,OAAO,CAAC,oBAAoB,CAAC,CAgD/B"}