whale-code 6.5.5 → 6.5.6

package/dist/cli/services/background-processes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"background-processes.js","names":["spawn","readFileSync","existsSync","processes","Map","MAX_BUFFER_LINES","MAX_PROCESSES","generateProcessId","Date","now","Math","random","toString","slice","cleanOldProcesses","procs","Array","from","values","completed","filter","p","status","sort","a","b","startedAt","getTime","size","length","oldest","shift","delete","id","spawnBackground","command","options","cwd","process","timeout","proc","outputBuffer","errorBuffer","lastReadIndex","lastErrorReadIndex","child","shell","env","FORCE_COLOR","stdio","err","message","stdout","on","data","lines","split","line","trim","push","splice","stderr","code","exitCode","undefined","setTimeout","kill","set","Promise","resolve","join","pid","l","readProcessOutput","get","match","keys","find","k","includes","error","newStdout","newStderr","filteredOutput","filteredErrors","regex","RegExp","test","newOutput","newErrors","killProcess","success","listProcesses","map","runtimeMs","runtimeSec","floor","runtime","toISOString","outputLines","errorLines","bgAgents","registerBackgroundAgent","type","outputFile","startTime","getAgentStatus","markAgentDone","agent","readAgentOutput","raw","output","doneIdx","indexOf","json","JSON","parse","clean","result","errIdx","errMsg","content","startsWith","listBackgroundAgents","stopBackgroundAgent","BACKGROUND_TOOL_DEFINITIONS","name","description","input_schema","properties","bash_id","required","shell_id"],"sources":["../../../src/cli/services/background-processes.ts"],"sourcesContent":["/**\n * Background Process Management — Claude Code-style async shell execution\n *\n * Enables running long-running processes (dev servers, watchers, builds)\n * without blocking the agent loop.\n *\n * Tools:\n * - run_command with run_in_background: true\n * - bash_output: Read output from running/completed process\n * - kill_shell: Terminate a background process\n */\n\nimport { spawn, ChildProcess } from \"child_process\";\nimport { readFileSync, existsSync } from \"fs\";\n\n// ============================================================================\n// TYPES\n// ============================================================================\n\nexport interface BackgroundProcess {\n  id: string;\n  command: string;\n  cwd: string;\n  startedAt: Date;\n  status: \"running\" | \"completed\" | \"failed\" | \"killed\";\n  exitCode?: number;\n  outputBuffer: string[];\n  errorBuffer: string[];\n  process: ChildProcess | null;\n  lastReadIndex: number; // Track what's been read (stdout)\n  lastErrorReadIndex: number; // Track what's been read (stderr)\n}\n\nexport interface ProcessOutput {\n  id: string;\n  status: BackgroundProcess[\"status\"];\n  newOutput: string;\n  newErrors: string;\n  exitCode?: number;\n}\n\n// ============================================================================\n// PROCESS REGISTRY — in-memory store of running/completed processes\n// ============================================================================\n\nconst processes = new Map<string, BackgroundProcess>();\nconst MAX_BUFFER_LINES = 10000;\nconst MAX_PROCESSES = 20;\n\n// ============================================================================\n// HELPERS\n// ============================================================================\n\nfunction generateProcessId(): string {\n  return `shell-${Date.now()}-${Math.random().toString(36).slice(2, 6)}`;\n}\n\nfunction cleanOldProcesses(): void {\n  // Remove oldest completed/failed processes if we're at capacity\n  const procs = Array.from(processes.values());\n  const completed = procs\n    .filter((p) => p.status !== \"running\")\n    .sort((a, b) => a.startedAt.getTime() - b.startedAt.getTime());\n\n  while (processes.size >= MAX_PROCESSES && completed.length > 0) {\n    const oldest = completed.shift()!;\n    processes.delete(oldest.id);\n  }\n}\n\n// ============================================================================\n// SPAWN BACKGROUND PROCESS\n// ============================================================================\n\nexport async function spawnBackground(\n  command: string,\n  options: {\n    cwd?: string;\n    timeout?: number; // Max runtime in ms (default: 10 minutes)\n    description?: string;\n  } = {}\n): Promise<{ id: string; message: string; status: \"running\" | \"failed\" }> {\n  cleanOldProcesses();\n\n  const id = generateProcessId();\n  const cwd = options.cwd || process.cwd();\n  const timeout = options.timeout || 600_000; // 10 minutes default\n\n  const proc: BackgroundProcess = {\n    id,\n    command,\n    cwd,\n    startedAt: new Date(),\n    status: \"running\",\n    outputBuffer: [],\n    errorBuffer: [],\n    process: null,\n    lastReadIndex: 0,\n    lastErrorReadIndex: 0,\n  };\n\n  // Spawn with shell\n  let child: ChildProcess;\n  try {\n    child = spawn(command, [], {\n      shell: true,\n      cwd,\n      env: { ...process.env, FORCE_COLOR: \"0\" },\n      stdio: [\"ignore\", \"pipe\", \"pipe\"],\n    });\n  } catch (err: any) {\n    return { id, message: `Failed to spawn: ${err.message}`, status: \"failed\" };\n  }\n\n  proc.process = child;\n\n  // Capture stdout\n  child.stdout?.on(\"data\", (data: Buffer) => {\n    const lines = data.toString().split(\"\\n\");\n    for (const line of lines) {\n      if (line.trim()) {\n        proc.outputBuffer.push(line);\n        if (proc.outputBuffer.length > MAX_BUFFER_LINES) {\n          proc.outputBuffer.splice(0, proc.outputBuffer.length - MAX_BUFFER_LINES);\n        }\n      }\n    }\n  });\n\n  // Capture stderr\n  child.stderr?.on(\"data\", (data: Buffer) => {\n    const lines = data.toString().split(\"\\n\");\n    for (const line of lines) {\n      if (line.trim()) {\n        proc.errorBuffer.push(line);\n        if (proc.errorBuffer.length > MAX_BUFFER_LINES) {\n          proc.errorBuffer.splice(0, proc.errorBuffer.length - MAX_BUFFER_LINES);\n        }\n      }\n    }\n  });\n\n  // Handle exit\n  child.on(\"exit\", (code) => {\n    proc.status = code === 0 ? \"completed\" : \"failed\";\n    proc.exitCode = code ?? undefined;\n    proc.process = null;\n  });\n\n  child.on(\"error\", (err) => {\n    proc.status = \"failed\";\n    proc.errorBuffer.push(`Process error: ${err.message}`);\n    proc.process = null;\n  });\n\n  // Timeout kill\n  setTimeout(() => {\n    if (proc.status === \"running\" && proc.process) {\n      proc.process.kill(\"SIGTERM\");\n      proc.status = \"killed\";\n      proc.errorBuffer.push(`Process killed after ${timeout}ms timeout`);\n    }\n  }, timeout);\n\n  processes.set(id, proc);\n\n  // ── Validation wait — give process 1.5s to start or fail ──\n  await new Promise(resolve => setTimeout(resolve, 1500));\n\n  // Build result with validation\n  const lines: string[] = [];\n  if (proc.status === \"failed\") {\n    lines.push(`✕ Process failed immediately`);\n    lines.push(`  Command: ${command}`);\n    if (proc.errorBuffer.length > 0) lines.push(`  Error: ${proc.errorBuffer.join(\"\\n  \")}`);\n    if (proc.exitCode !== undefined) lines.push(`  Exit code: ${proc.exitCode}`);\n    return { id, message: lines.join(\"\\n\"), status: \"failed\" };\n  }\n\n  lines.push(`✓ Background process running`);\n  lines.push(`  PID: ${child.pid || \"?\"}`);\n  lines.push(`  ID: ${id}`);\n  lines.push(`  Command: ${command}`);\n  if (proc.outputBuffer.length > 0) {\n    lines.push(`  Initial output (${proc.outputBuffer.length} lines):`);\n    for (const l of proc.outputBuffer.slice(0, 8)) {\n      lines.push(`    ${l}`);\n    }\n    if (proc.outputBuffer.length > 8) lines.push(`    ... +${proc.outputBuffer.length - 8} more lines`);\n  }\n  if (proc.errorBuffer.length > 0) {\n    lines.push(`  Stderr (${proc.errorBuffer.length} lines):`);\n    for (const l of proc.errorBuffer.slice(0, 4)) {\n      lines.push(`    ${l}`);\n    }\n  }\n  lines.push(`  Use bash_output(\"${id}\") to check output, kill_shell(\"${id}\") to stop.`);\n\n  return { id, message: lines.join(\"\\n\"), status: \"running\" };\n}\n\n// ============================================================================\n// READ OUTPUT\n// ============================================================================\n\nexport function readProcessOutput(\n  id: string,\n  options: {\n    filter?: string; // Regex to filter lines\n  } = {}\n): ProcessOutput | { error: string } {\n  const proc = processes.get(id);\n  if (!proc) {\n    // Try partial match\n    const match = Array.from(processes.keys()).find(k => k.includes(id));\n    if (match) return readProcessOutput(match, options);\n    return { error: `Process not found: ${id}. Use list_shells to see available processes.` };\n  }\n\n  // Get new output since last read (separate indices for stdout/stderr)\n  const newStdout = proc.outputBuffer.slice(proc.lastReadIndex);\n  const newStderr = proc.errorBuffer.slice(proc.lastErrorReadIndex);\n\n  // Update read indices\n  proc.lastReadIndex = proc.outputBuffer.length;\n  proc.lastErrorReadIndex = proc.errorBuffer.length;\n\n  // Apply filter if provided\n  let filteredOutput = newStdout;\n  let filteredErrors = newStderr;\n\n  if (options.filter) {\n    try {\n      const regex = new RegExp(options.filter, \"i\");\n      filteredOutput = newStdout.filter((line) => regex.test(line));\n      filteredErrors = newStderr.filter((line) => regex.test(line));\n    } catch {\n      // Invalid regex, return unfiltered\n    }\n  }\n\n  return {\n    id,\n    status: proc.status,\n    newOutput: filteredOutput.join(\"\\n\"),\n    newErrors: filteredErrors.join(\"\\n\"),\n    exitCode: proc.exitCode,\n  };\n}\n\n// ============================================================================\n// KILL PROCESS\n// ============================================================================\n\nexport function killProcess(id: string): { success: boolean; message: string } {\n  const proc = processes.get(id);\n  if (!proc) {\n    return { success: false, message: `Process not found: ${id}` };\n  }\n\n  if (proc.status !== \"running\") {\n    return { success: false, message: `Process already ${proc.status}` };\n  }\n\n  if (proc.process) {\n    proc.process.kill(\"SIGTERM\");\n\n    // Force kill after 5 seconds if still running\n    setTimeout(() => {\n      if (proc.process) {\n        proc.process.kill(\"SIGKILL\");\n      }\n    }, 5000);\n  }\n\n  proc.status = \"killed\";\n\n  return { success: true, message: `Process ${id} killed` };\n}\n\n// ============================================================================\n// LIST PROCESSES\n// ============================================================================\n\nexport function listProcesses(): Array<{\n  id: string;\n  pid: number | undefined;\n  command: string;\n  status: BackgroundProcess[\"status\"];\n  startedAt: string;\n  runtime: string;\n  outputLines: number;\n  errorLines: number;\n}> {\n  const now = Date.now();\n  return Array.from(processes.values()).map((p) => {\n    const runtimeMs = now - p.startedAt.getTime();\n    const runtimeSec = Math.floor(runtimeMs / 1000);\n    const runtime =\n      runtimeSec < 60\n        ? `${runtimeSec}s`\n        : runtimeSec < 3600\n          ? `${Math.floor(runtimeSec / 60)}m ${runtimeSec % 60}s`\n          : `${Math.floor(runtimeSec / 3600)}h ${Math.floor((runtimeSec % 3600) / 60)}m`;\n\n    return {\n      id: p.id,\n      pid: p.process?.pid,\n      command: p.command.length > 50 ? p.command.slice(0, 47) + \"...\" : p.command,\n      status: p.status,\n      startedAt: p.startedAt.toISOString(),\n      runtime,\n      outputLines: p.outputBuffer.length,\n      errorLines: p.errorBuffer.length,\n    };\n  });\n}\n\n// ============================================================================\n// BACKGROUND AGENT TRACKING\n// ============================================================================\n\ninterface BackgroundAgent {\n  id: string;\n  type: string;\n  outputFile: string;\n  startTime: number;\n  status: \"running\" | \"completed\" | \"failed\";\n}\n\nconst bgAgents = new Map<string, BackgroundAgent>();\n\nexport function registerBackgroundAgent(id: string, type: string, outputFile: string): void {\n  bgAgents.set(id, { id, type, outputFile, startTime: Date.now(), status: \"running\" });\n}\n\nexport function getAgentStatus(id: string): BackgroundAgent | null {\n  return bgAgents.get(id) || null;\n}\n\nexport function markAgentDone(id: string, success: boolean): void {\n  const agent = bgAgents.get(id);\n  if (agent) agent.status = success ? \"completed\" : \"failed\";\n}\n\nexport function readAgentOutput(id: string): { status: string; output: string } | null {\n  const agent = bgAgents.get(id);\n  if (!agent) return null;\n  try {\n    const raw = existsSync(agent.outputFile) ? readFileSync(agent.outputFile, \"utf-8\") : \"\";\n    if (!raw) return { status: agent.status, output: \"(no output yet)\" };\n\n    // Parse ---DONE--- sentinel: extract .output from the JSON blob after it\n    const doneIdx = raw.indexOf(\"\\n---DONE---\\n\");\n    if (doneIdx !== -1) {\n      try {\n        const json = JSON.parse(raw.slice(doneIdx + \"\\n---DONE---\\n\".length).trim());\n        const clean = (json.output || json.result || json.message || \"\").toString().trim();\n        return { status: agent.status, output: clean || raw.slice(0, doneIdx).trim() };\n      } catch {\n        // JSON parse failed — return content before sentinel\n        return { status: agent.status, output: raw.slice(0, doneIdx).trim() };\n      }\n    }\n\n    // Parse ---ERROR--- sentinel\n    const errIdx = raw.indexOf(\"\\n---ERROR---\\n\");\n    if (errIdx !== -1) {\n      const errMsg = raw.slice(errIdx + \"\\n---ERROR---\\n\".length).trim();\n      return { status: agent.status, output: errMsg || raw.slice(0, errIdx).trim() };\n    }\n\n    // Still running — strip the \"Agent X started\" header line\n    const lines = raw.split(\"\\n\");\n    const content = lines[0]?.startsWith(\"Agent \") ? lines.slice(1).join(\"\\n\").trim() : raw.trim();\n    return { status: agent.status, output: content || \"(running...)\" };\n  } catch {\n    return { status: agent.status, output: \"(failed to read output file)\" };\n  }\n}\n\nexport function listBackgroundAgents(): BackgroundAgent[] {\n  return Array.from(bgAgents.values());\n}\n\nexport function stopBackgroundAgent(id: string): { success: boolean; message: string } {\n  const agent = bgAgents.get(id);\n  if (!agent) return { success: false, message: `Agent not found: ${id}` };\n  if (agent.status !== \"running\") return { success: false, message: `Agent already ${agent.status}` };\n  // We can't kill the async promise, but we mark it as failed so it won't be waited on\n  agent.status = \"failed\";\n  return { success: true, message: `Agent ${id} marked as stopped` };\n}\n\n// ============================================================================\n// TOOL DEFINITIONS\n// ============================================================================\n\nexport const BACKGROUND_TOOL_DEFINITIONS = [\n  {\n    name: \"bash_output\",\n    description: \"Read output from a running or completed background shell process. Returns only NEW output since the last read.\",\n    input_schema: {\n      type: \"object\",\n      properties: {\n        bash_id: {\n          type: \"string\",\n          description: \"The process ID returned when starting the background process\",\n        },\n        filter: {\n          type: \"string\",\n          description: \"Optional regex to filter output lines (only matching lines returned)\",\n        },\n      },\n      required: [\"bash_id\"],\n    },\n  },\n  {\n    name: \"kill_shell\",\n    description: \"Terminate a running background shell process\",\n    input_schema: {\n      type: \"object\",\n      properties: {\n        shell_id: {\n          type: \"string\",\n          description: \"The process ID to kill\",\n        },\n      },\n      required: [\"shell_id\"],\n    },\n  },\n  {\n    name: \"list_shells\",\n    description: \"List all background shell processes (running and recent completed)\",\n    input_schema: {\n      type: \"object\",\n      properties: {},\n      required: [],\n    },\n  },\n];\n"],"mappings":"AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA,SAASA,KAAK,QAAsB,eAAe;AACnD,SAASC,YAAY,EAAEC,UAAU,QAAQ,IAAI;;AAE7C;AACA;AACA;;AAwBA;AACA;AACA;;AAEA,MAAMC,SAAS,GAAG,IAAIC,GAAG,CAA4B,CAAC;AACtD,MAAMC,gBAAgB,GAAG,KAAK;AAC9B,MAAMC,aAAa,GAAG,EAAE;;AAExB;AACA;AACA;;AAEA,SAASC,iBAAiBA,CAAA,EAAW;EACnC,OAAO,SAASC,IAAI,CAACC,GAAG,CAAC,CAAC,IAAIC,IAAI,CAACC,MAAM,CAAC,CAAC,CAACC,QAAQ,CAAC,EAAE,CAAC,CAACC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE;AACxE;AAEA,SAASC,iBAAiBA,CAAA,EAAS;EACjC;EACA,MAAMC,KAAK,GAAGC,KAAK,CAACC,IAAI,CAACd,SAAS,CAACe,MAAM,CAAC,CAAC,CAAC;EAC5C,MAAMC,SAAS,GAAGJ,KAAK,CACpBK,MAAM,CAAEC,CAAC,IAAKA,CAAC,CAACC,MAAM,KAAK,SAAS,CAAC,CACrCC,IAAI,CAAC,CAACC,CAAC,EAAEC,CAAC,KAAKD,CAAC,CAACE,SAAS,CAACC,OAAO,CAAC,CAAC,GAAGF,CAAC,CAACC,SAAS,CAACC,OAAO,CAAC,CAAC,CAAC;EAEhE,OAAOxB,SAAS,CAACyB,IAAI,IAAItB,aAAa,IAAIa,SAAS,CAACU,MAAM,GAAG,CAAC,EAAE;IAC9D,MAAMC,MAAM,GAAGX,SAAS,CAACY,KAAK,CAAC,CAAE;IACjC5B,SAAS,CAAC6B,MAAM,CAACF,MAAM,CAACG,EAAE,CAAC;EAC7B;AACF;;AAEA;AACA;AACA;;AAEA,OAAO,eAAeC,eAAeA,CACnCC,OAAe,EACfC,OAIC,GAAG,CAAC,CAAC,EACkE;EACxEtB,iBAAiB,CAAC,CAAC;EAEnB,MAAMmB,EAAE,GAAG1B,iBAAiB,CAAC,CAAC;EAC9B,MAAM8B,GAAG,GAAGD,OAAO,CAACC,GAAG,IAAIC,OAAO,CAACD,GAAG,CAAC,CAAC;EACxC,MAAME,OAAO,GAAGH,OAAO,CAACG,OAAO,IAAI,OAAO,CAAC,CAAC;;EAE5C,MAAMC,IAAuB,GAAG;IAC9BP,EAAE;IACFE,OAAO;IACPE,GAAG;IACHX,SAAS,EAAE,IAAIlB,IAAI,CAAC,CAAC;IACrBc,MAAM,EAAE,SAAS;IACjBmB,YAAY,EAAE,EAAE;IAChBC,WAAW,EAAE,EAAE;IACfJ,OAAO,EAAE,IAAI;IACbK,aAAa,EAAE,CAAC;IAChBC,kBAAkB,EAAE;EACtB,CAAC;;EAED;EACA,IAAIC,KAAmB;EACvB,IAAI;IACFA,KAAK,GAAG7C,KAAK,CAACmC,OAAO,EAAE,EAAE,EAAE;MACzBW,KAAK,EAAE,IAAI;MACXT,GAAG;MACHU,GAAG,EAAE;QAAE,GAAGT,OAAO,CAACS,GAAG;QAAEC,WAAW,EAAE;MAAI,CAAC;MACzCC,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM;IAClC,CAAC,CAAC;EACJ,CAAC,CAAC,OAAOC,GAAQ,EAAE;IACjB,OAAO;MAAEjB,EAAE;MAAEkB,OAAO,EAAE,oBAAoBD,GAAG,CAACC,OAAO,EAAE;MAAE7B,MAAM,EAAE;IAAS,CAAC;EAC7E;EAEAkB,IAAI,CAACF,OAAO,GAAGO,KAAK;;EAEpB;EACAA,KAAK,CAACO,MAAM,EAAEC,EAAE,CAAC,MAAM,EAAGC,IAAY,IAAK;IACzC,MAAMC,KAAK,GAAGD,IAAI,CAAC1C,QAAQ,CAAC,CAAC,CAAC4C,KAAK,CAAC,IAAI,CAAC;IACzC,KAAK,MAAMC,IAAI,IAAIF,KAAK,EAAE;MACxB,IAAIE,IAAI,CAACC,IAAI,CAAC,CAAC,EAAE;QACflB,IAAI,CAACC,YAAY,CAACkB,IAAI,CAACF,IAAI,CAAC;QAC5B,IAAIjB,IAAI,CAACC,YAAY,CAACZ,MAAM,GAAGxB,gBAAgB,EAAE;UAC/CmC,IAAI,CAACC,YAAY,CAACmB,MAAM,CAAC,CAAC,EAAEpB,IAAI,CAACC,YAAY,CAACZ,MAAM,GAAGxB,gBAAgB,CAAC;QAC1E;MACF;IACF;EACF,CAAC,CAAC;;EAEF;EACAwC,KAAK,CAACgB,MAAM,EAAER,EAAE,CAAC,MAAM,EAAGC,IAAY,IAAK;IACzC,MAAMC,KAAK,GAAGD,IAAI,CAAC1C,QAAQ,CAAC,CAAC,CAAC4C,KAAK,CAAC,IAAI,CAAC;IACzC,KAAK,MAAMC,IAAI,IAAIF,KAAK,EAAE;MACxB,IAAIE,IAAI,CAACC,IAAI,CAAC,CAAC,EAAE;QACflB,IAAI,CAACE,WAAW,CAACiB,IAAI,CAACF,IAAI,CAAC;QAC3B,IAAIjB,IAAI,CAACE,WAAW,CAACb,MAAM,GAAGxB,gBAAgB,EAAE;UAC9CmC,IAAI,CAACE,WAAW,CAACkB,MAAM,CAAC,CAAC,EAAEpB,IAAI,CAACE,WAAW,CAACb,MAAM,GAAGxB,gBAAgB,CAAC;QACxE;MACF;IACF;EACF,CAAC,CAAC;;EAEF;EACAwC,KAAK,CAACQ,EAAE,CAAC,MAAM,EAAGS,IAAI,IAAK;IACzBtB,IAAI,CAAClB,MAAM,GAAGwC,IAAI,KAAK,CAAC,GAAG,WAAW,GAAG,QAAQ;IACjDtB,IAAI,CAACuB,QAAQ,GAAGD,IAAI,IAAIE,SAAS;IACjCxB,IAAI,CAACF,OAAO,GAAG,IAAI;EACrB,CAAC,CAAC;EAEFO,KAAK,CAACQ,EAAE,CAAC,OAAO,EAAGH,GAAG,IAAK;IACzBV,IAAI,CAAClB,MAAM,GAAG,QAAQ;IACtBkB,IAAI,CAACE,WAAW,CAACiB,IAAI,CAAC,kBAAkBT,GAAG,CAACC,OAAO,EAAE,CAAC;IACtDX,IAAI,CAACF,OAAO,GAAG,IAAI;EACrB,CAAC,CAAC;;EAEF;EACA2B,UAAU,CAAC,MAAM;IACf,IAAIzB,IAAI,CAAClB,MAAM,KAAK,SAAS,IAAIkB,IAAI,CAACF,OAAO,EAAE;MAC7CE,IAAI,CAACF,OAAO,CAAC4B,IAAI,CAAC,SAAS,CAAC;MAC5B1B,IAAI,CAAClB,MAAM,GAAG,QAAQ;MACtBkB,IAAI,CAACE,WAAW,CAACiB,IAAI,CAAC,wBAAwBpB,OAAO,YAAY,CAAC;IACpE;EACF,CAAC,EAAEA,OAAO,CAAC;EAEXpC,SAAS,CAACgE,GAAG,CAAClC,EAAE,EAAEO,IAAI,CAAC;;EAEvB;EACA,MAAM,IAAI4B,OAAO,CAACC,OAAO,IAAIJ,UAAU,CAACI,OAAO,EAAE,IAAI,CAAC,CAAC;;EAEvD;EACA,MAAMd,KAAe,GAAG,EAAE;EAC1B,IAAIf,IAAI,CAAClB,MAAM,KAAK,QAAQ,EAAE;IAC5BiC,KAAK,CAACI,IAAI,CAAC,8BAA8B,CAAC;IAC1CJ,KAAK,CAACI,IAAI,CAAC,cAAcxB,OAAO,EAAE,CAAC;IACnC,IAAIK,IAAI,CAACE,WAAW,CAACb,MAAM,GAAG,CAAC,EAAE0B,KAAK,CAACI,IAAI,CAAC,YAAYnB,IAAI,CAACE,WAAW,CAAC4B,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;IACxF,IAAI9B,IAAI,CAACuB,QAAQ,KAAKC,SAAS,EAAET,KAAK,CAACI,IAAI,CAAC,gBAAgBnB,IAAI,CAACuB,QAAQ,EAAE,CAAC;IAC5E,OAAO;MAAE9B,EAAE;MAAEkB,OAAO,EAAEI,KAAK,CAACe,IAAI,CAAC,IAAI,CAAC;MAAEhD,MAAM,EAAE;IAAS,CAAC;EAC5D;EAEAiC,KAAK,CAACI,IAAI,CAAC,8BAA8B,CAAC;EAC1CJ,KAAK,CAACI,IAAI,CAAC,UAAUd,KAAK,CAAC0B,GAAG,IAAI,GAAG,EAAE,CAAC;EACxChB,KAAK,CAACI,IAAI,CAAC,SAAS1B,EAAE,EAAE,CAAC;EACzBsB,KAAK,CAACI,IAAI,CAAC,cAAcxB,OAAO,EAAE,CAAC;EACnC,IAAIK,IAAI,CAACC,YAAY,CAACZ,MAAM,GAAG,CAAC,EAAE;IAChC0B,KAAK,CAACI,IAAI,CAAC,qBAAqBnB,IAAI,CAACC,YAAY,CAACZ,MAAM,UAAU,CAAC;IACnE,KAAK,MAAM2C,CAAC,IAAIhC,IAAI,CAACC,YAAY,CAAC5B,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE;MAC7C0C,KAAK,CAACI,IAAI,CAAC,OAAOa,CAAC,EAAE,CAAC;IACxB;IACA,IAAIhC,IAAI,CAACC,YAAY,CAACZ,MAAM,GAAG,CAAC,EAAE0B,KAAK,CAACI,IAAI,CAAC,YAAYnB,IAAI,CAACC,YAAY,CAACZ,MAAM,GAAG,CAAC,aAAa,CAAC;EACrG;EACA,IAAIW,IAAI,CAACE,WAAW,CAACb,MAAM,GAAG,CAAC,EAAE;IAC/B0B,KAAK,CAACI,IAAI,CAAC,aAAanB,IAAI,CAACE,WAAW,CAACb,MAAM,UAAU,CAAC;IAC1D,KAAK,MAAM2C,CAAC,IAAIhC,IAAI,CAACE,WAAW,CAAC7B,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE;MAC5C0C,KAAK,CAACI,IAAI,CAAC,OAAOa,CAAC,EAAE,CAAC;IACxB;EACF;EACAjB,KAAK,CAACI,IAAI,CAAC,sBAAsB1B,EAAE,mCAAmCA,EAAE,aAAa,CAAC;EAEtF,OAAO;IAAEA,EAAE;IAAEkB,OAAO,EAAEI,KAAK,CAACe,IAAI,CAAC,IAAI,CAAC;IAAEhD,MAAM,EAAE;EAAU,CAAC;AAC7D;;AAEA;AACA;AACA;;AAEA,OAAO,SAASmD,iBAAiBA,CAC/BxC,EAAU,EACVG,OAEC,GAAG,CAAC,CAAC,EAC6B;EACnC,MAAMI,IAAI,GAAGrC,SAAS,CAACuE,GAAG,CAACzC,EAAE,CAAC;EAC9B,IAAI,CAACO,IAAI,EAAE;IACT;IACA,MAAMmC,KAAK,GAAG3D,KAAK,CAACC,IAAI,CAACd,SAAS,CAACyE,IAAI,CAAC,CAAC,CAAC,CAACC,IAAI,CAACC,CAAC,IAAIA,CAAC,CAACC,QAAQ,CAAC9C,EAAE,CAAC,CAAC;IACpE,IAAI0C,KAAK,EAAE,OAAOF,iBAAiB,CAACE,KAAK,EAAEvC,OAAO,CAAC;IACnD,OAAO;MAAE4C,KAAK,EAAE,sBAAsB/C,EAAE;IAAgD,CAAC;EAC3F;;EAEA;EACA,MAAMgD,SAAS,GAAGzC,IAAI,CAACC,YAAY,CAAC5B,KAAK,CAAC2B,IAAI,CAACG,aAAa,CAAC;EAC7D,MAAMuC,SAAS,GAAG1C,IAAI,CAACE,WAAW,CAAC7B,KAAK,CAAC2B,IAAI,CAACI,kBAAkB,CAAC;;EAEjE;EACAJ,IAAI,CAACG,aAAa,GAAGH,IAAI,CAACC,YAAY,CAACZ,MAAM;EAC7CW,IAAI,CAACI,kBAAkB,GAAGJ,IAAI,CAACE,WAAW,CAACb,MAAM;;EAEjD;EACA,IAAIsD,cAAc,GAAGF,SAAS;EAC9B,IAAIG,cAAc,GAAGF,SAAS;EAE9B,IAAI9C,OAAO,CAAChB,MAAM,EAAE;IAClB,IAAI;MACF,MAAMiE,KAAK,GAAG,IAAIC,MAAM,CAAClD,OAAO,CAAChB,MAAM,EAAE,GAAG,CAAC;MAC7C+D,cAAc,GAAGF,SAAS,CAAC7D,MAAM,CAAEqC,IAAI,IAAK4B,KAAK,CAACE,IAAI,CAAC9B,IAAI,CAAC,CAAC;MAC7D2B,cAAc,GAAGF,SAAS,CAAC9D,MAAM,CAAEqC,IAAI,IAAK4B,KAAK,CAACE,IAAI,CAAC9B,IAAI,CAAC,CAAC;IAC/D,CAAC,CAAC,MAAM;MACN;IAAA;EAEJ;EAEA,OAAO;IACLxB,EAAE;IACFX,MAAM,EAAEkB,IAAI,CAAClB,MAAM;IACnBkE,SAAS,EAAEL,cAAc,CAACb,IAAI,CAAC,IAAI,CAAC;IACpCmB,SAAS,EAAEL,cAAc,CAACd,IAAI,CAAC,IAAI,CAAC;IACpCP,QAAQ,EAAEvB,IAAI,CAACuB;EACjB,CAAC;AACH;;AAEA;AACA;AACA;;AAEA,OAAO,SAAS2B,WAAWA,CAACzD,EAAU,EAAyC;EAC7E,MAAMO,IAAI,GAAGrC,SAAS,CAACuE,GAAG,CAACzC,EAAE,CAAC;EAC9B,IAAI,CAACO,IAAI,EAAE;IACT,OAAO;MAAEmD,OAAO,EAAE,KAAK;MAAExC,OAAO,EAAE,sBAAsBlB,EAAE;IAAG,CAAC;EAChE;EAEA,IAAIO,IAAI,CAAClB,MAAM,KAAK,SAAS,EAAE;IAC7B,OAAO;MAAEqE,OAAO,EAAE,KAAK;MAAExC,OAAO,EAAE,mBAAmBX,IAAI,CAAClB,MAAM;IAAG,CAAC;EACtE;EAEA,IAAIkB,IAAI,CAACF,OAAO,EAAE;IAChBE,IAAI,CAACF,OAAO,CAAC4B,IAAI,CAAC,SAAS,CAAC;;IAE5B;IACAD,UAAU,CAAC,MAAM;MACf,IAAIzB,IAAI,CAACF,OAAO,EAAE;QAChBE,IAAI,CAACF,OAAO,CAAC4B,IAAI,CAAC,SAAS,CAAC;MAC9B;IACF,CAAC,EAAE,IAAI,CAAC;EACV;EAEA1B,IAAI,CAAClB,MAAM,GAAG,QAAQ;EAEtB,OAAO;IAAEqE,OAAO,EAAE,IAAI;IAAExC,OAAO,EAAE,WAAWlB,EAAE;EAAU,CAAC;AAC3D;;AAEA;AACA;AACA;;AAEA,OAAO,SAAS2D,aAAaA,CAAA,EAS1B;EACD,MAAMnF,GAAG,GAAGD,IAAI,CAACC,GAAG,CAAC,CAAC;EACtB,OAAOO,KAAK,CAACC,IAAI,CAACd,SAAS,CAACe,MAAM,CAAC,CAAC,CAAC,CAAC2E,GAAG,CAAExE,CAAC,IAAK;IAC/C,MAAMyE,SAAS,GAAGrF,GAAG,GAAGY,CAAC,CAACK,SAAS,CAACC,OAAO,CAAC,CAAC;IAC7C,MAAMoE,UAAU,GAAGrF,IAAI,CAACsF,KAAK,CAACF,SAAS,GAAG,IAAI,CAAC;IAC/C,MAAMG,OAAO,GACXF,UAAU,GAAG,EAAE,GACX,GAAGA,UAAU,GAAG,GAChBA,UAAU,GAAG,IAAI,GACf,GAAGrF,IAAI,CAACsF,KAAK,CAACD,UAAU,GAAG,EAAE,CAAC,KAAKA,UAAU,GAAG,EAAE,GAAG,GACrD,GAAGrF,IAAI,CAACsF,KAAK,CAACD,UAAU,GAAG,IAAI,CAAC,KAAKrF,IAAI,CAACsF,KAAK,CAAED,UAAU,GAAG,IAAI,GAAI,EAAE,CAAC,GAAG;IAEpF,OAAO;MACL9D,EAAE,EAAEZ,CAAC,CAACY,EAAE;MACRsC,GAAG,EAAElD,CAAC,CAACiB,OAAO,EAAEiC,GAAG;MACnBpC,OAAO,EAAEd,CAAC,CAACc,OAAO,CAACN,MAAM,GAAG,EAAE,GAAGR,CAAC,CAACc,OAAO,CAACtB,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,GAAGQ,CAAC,CAACc,OAAO;MAC3Eb,MAAM,EAAED,CAAC,CAACC,MAAM;MAChBI,SAAS,EAAEL,CAAC,CAACK,SAAS,CAACwE,WAAW,CAAC,CAAC;MACpCD,OAAO;MACPE,WAAW,EAAE9E,CAAC,CAACoB,YAAY,CAACZ,MAAM;MAClCuE,UAAU,EAAE/E,CAAC,CAACqB,WAAW,CAACb;IAC5B,CAAC;EACH,CAAC,CAAC;AACJ;;AAEA;AACA;AACA;;AAUA,MAAMwE,QAAQ,GAAG,IAAIjG,GAAG,CAA0B,CAAC;AAEnD,OAAO,SAASkG,uBAAuBA,CAACrE,EAAU,EAAEsE,IAAY,EAAEC,UAAkB,EAAQ;EAC1FH,QAAQ,CAAClC,GAAG,CAAClC,EAAE,EAAE;IAAEA,EAAE;IAAEsE,IAAI;IAAEC,UAAU;IAAEC,SAAS,EAAEjG,IAAI,CAACC,GAAG,CAAC,CAAC;IAAEa,MAAM,EAAE;EAAU,CAAC,CAAC;AACtF;AAEA,OAAO,SAASoF,cAAcA,CAACzE,EAAU,EAA0B;EACjE,OAAOoE,QAAQ,CAAC3B,GAAG,CAACzC,EAAE,CAAC,IAAI,IAAI;AACjC;AAEA,OAAO,SAAS0E,aAAaA,CAAC1E,EAAU,EAAE0D,OAAgB,EAAQ;EAChE,MAAMiB,KAAK,GAAGP,QAAQ,CAAC3B,GAAG,CAACzC,EAAE,CAAC;EAC9B,IAAI2E,KAAK,EAAEA,KAAK,CAACtF,MAAM,GAAGqE,OAAO,GAAG,WAAW,GAAG,QAAQ;AAC5D;AAEA,OAAO,SAASkB,eAAeA,CAAC5E,EAAU,EAA6C;EACrF,MAAM2E,KAAK,GAAGP,QAAQ,CAAC3B,GAAG,CAACzC,EAAE,CAAC;EAC9B,IAAI,CAAC2E,KAAK,EAAE,OAAO,IAAI;EACvB,IAAI;IACF,MAAME,GAAG,GAAG5G,UAAU,CAAC0G,KAAK,CAACJ,UAAU,CAAC,GAAGvG,YAAY,CAAC2G,KAAK,CAACJ,UAAU,EAAE,OAAO,CAAC,GAAG,EAAE;IACvF,IAAI,CAACM,GAAG,EAAE,OAAO;MAAExF,MAAM,EAAEsF,KAAK,CAACtF,MAAM;MAAEyF,MAAM,EAAE;IAAkB,CAAC;;IAEpE;IACA,MAAMC,OAAO,GAAGF,GAAG,CAACG,OAAO,CAAC,gBAAgB,CAAC;IAC7C,IAAID,OAAO,KAAK,CAAC,CAAC,EAAE;MAClB,IAAI;QACF,MAAME,IAAI,GAAGC,IAAI,CAACC,KAAK,CAACN,GAAG,CAACjG,KAAK,CAACmG,OAAO,GAAG,gBAAgB,CAACnF,MAAM,CAAC,CAAC6B,IAAI,CAAC,CAAC,CAAC;QAC5E,MAAM2D,KAAK,GAAG,CAACH,IAAI,CAACH,MAAM,IAAIG,IAAI,CAACI,MAAM,IAAIJ,IAAI,CAAC/D,OAAO,IAAI,EAAE,EAAEvC,QAAQ,CAAC,CAAC,CAAC8C,IAAI,CAAC,CAAC;QAClF,OAAO;UAAEpC,MAAM,EAAEsF,KAAK,CAACtF,MAAM;UAAEyF,MAAM,EAAEM,KAAK,IAAIP,GAAG,CAACjG,KAAK,CAAC,CAAC,EAAEmG,OAAO,CAAC,CAACtD,IAAI,CAAC;QAAE,CAAC;MAChF,CAAC,CAAC,MAAM;QACN;QACA,OAAO;UAAEpC,MAAM,EAAEsF,KAAK,CAACtF,MAAM;UAAEyF,MAAM,EAAED,GAAG,CAACjG,KAAK,CAAC,CAAC,EAAEmG,OAAO,CAAC,CAACtD,IAAI,CAAC;QAAE,CAAC;MACvE;IACF;;IAEA;IACA,MAAM6D,MAAM,GAAGT,GAAG,CAACG,OAAO,CAAC,iBAAiB,CAAC;IAC7C,IAAIM,MAAM,KAAK,CAAC,CAAC,EAAE;MACjB,MAAMC,MAAM,GAAGV,GAAG,CAACjG,KAAK,CAAC0G,MAAM,GAAG,iBAAiB,CAAC1F,MAAM,CAAC,CAAC6B,IAAI,CAAC,CAAC;MAClE,OAAO;QAAEpC,MAAM,EAAEsF,KAAK,CAACtF,MAAM;QAAEyF,MAAM,EAAES,MAAM,IAAIV,GAAG,CAACjG,KAAK,CAAC,CAAC,EAAE0G,MAAM,CAAC,CAAC7D,IAAI,CAAC;MAAE,CAAC;IAChF;;IAEA;IACA,MAAMH,KAAK,GAAGuD,GAAG,CAACtD,KAAK,CAAC,IAAI,CAAC;IAC7B,MAAMiE,OAAO,GAAGlE,KAAK,CAAC,CAAC,CAAC,EAAEmE,UAAU,CAAC,QAAQ,CAAC,GAAGnE,KAAK,CAAC1C,KAAK,CAAC,CAAC,CAAC,CAACyD,IAAI,CAAC,IAAI,CAAC,CAACZ,IAAI,CAAC,CAAC,GAAGoD,GAAG,CAACpD,IAAI,CAAC,CAAC;IAC9F,OAAO;MAAEpC,MAAM,EAAEsF,KAAK,CAACtF,MAAM;MAAEyF,MAAM,EAAEU,OAAO,IAAI;IAAe,CAAC;EACpE,CAAC,CAAC,MAAM;IACN,OAAO;MAAEnG,MAAM,EAAEsF,KAAK,CAACtF,MAAM;MAAEyF,MAAM,EAAE;IAA+B,CAAC;EACzE;AACF;AAEA,OAAO,SAASY,oBAAoBA,CAAA,EAAsB;EACxD,OAAO3G,KAAK,CAACC,IAAI,CAACoF,QAAQ,CAACnF,MAAM,CAAC,CAAC,CAAC;AACtC;AAEA,OAAO,SAAS0G,mBAAmBA,CAAC3F,EAAU,EAAyC;EACrF,MAAM2E,KAAK,GAAGP,QAAQ,CAAC3B,GAAG,CAACzC,EAAE,CAAC;EAC9B,IAAI,CAAC2E,KAAK,EAAE,OAAO;IAAEjB,OAAO,EAAE,KAAK;IAAExC,OAAO,EAAE,oBAAoBlB,EAAE;EAAG,CAAC;EACxE,IAAI2E,KAAK,CAACtF,MAAM,KAAK,SAAS,EAAE,OAAO;IAAEqE,OAAO,EAAE,KAAK;IAAExC,OAAO,EAAE,iBAAiByD,KAAK,CAACtF,MAAM;EAAG,CAAC;EACnG;EACAsF,KAAK,CAACtF,MAAM,GAAG,QAAQ;EACvB,OAAO;IAAEqE,OAAO,EAAE,IAAI;IAAExC,OAAO,EAAE,SAASlB,EAAE;EAAqB,CAAC;AACpE;;AAEA;AACA;AACA;;AAEA,OAAO,MAAM4F,2BAA2B,GAAG,CACzC;EACEC,IAAI,EAAE,aAAa;EACnBC,WAAW,EAAE,gHAAgH;EAC7HC,YAAY,EAAE;IACZzB,IAAI,EAAE,QAAQ;IACd0B,UAAU,EAAE;MACVC,OAAO,EAAE;QACP3B,IAAI,EAAE,QAAQ;QACdwB,WAAW,EAAE;MACf,CAAC;MACD3G,MAAM,EAAE;QACNmF,IAAI,EAAE,QAAQ;QACdwB,WAAW,EAAE;MACf;IACF,CAAC;IACDI,QAAQ,EAAE,CAAC,SAAS;EACtB;AACF,CAAC,EACD;EACEL,IAAI,EAAE,YAAY;EAClBC,WAAW,EAAE,8CAA8C;EAC3DC,YAAY,EAAE;IACZzB,IAAI,EAAE,QAAQ;IACd0B,UAAU,EAAE;MACVG,QAAQ,EAAE;QACR7B,IAAI,EAAE,QAAQ;QACdwB,WAAW,EAAE;MACf;IACF,CAAC;IACDI,QAAQ,EAAE,CAAC,UAAU;EACvB;AACF,CAAC,EACD;EACEL,IAAI,EAAE,aAAa;EACnBC,WAAW,EAAE,oEAAoE;EACjFC,YAAY,EAAE;IACZzB,IAAI,EAAE,QAAQ;IACd0B,UAAU,EAAE,CAAC,CAAC;IACdE,QAAQ,EAAE;EACZ;AACF,CAAC,CACF","ignoreList":[]}

package/dist/cli/services/browser-auth.d.ts

@@ -7,7 +7,7 @@
  *
  * Same pattern as: `gh auth login`, `vercel login`, `claude login`
  */
-import { type SwagManagerConfig } from "./config-store.js";
+import { type WhaleConfig } from "./config-store.js";
 import type { StoreInfo } from "./auth-service.js";
 export interface BrowserAuthCallbacks {
     onBrowserOpening?: (url: string) => void;
@@ -17,7 +17,7 @@ export interface BrowserAuthCallbacks {
 export interface BrowserAuthResult {
     success: boolean;
     error?: string;
-    config?: SwagManagerConfig;
+    config?: WhaleConfig;
     stores?: StoreInfo[];
 }
 export declare function openBrowser(url: string): void;

package/dist/cli/services/browser-auth.js

@@ -7,147 +7,187 @@
  *
  * Same pattern as: `gh auth login`, `vercel login`, `claude login`
  */
+
 import http from "node:http";
 import { exec } from "node:child_process";
 import { loadConfig, saveConfig } from "./config-store.js";
+
+// ============================================================================
+// TYPES
+// ============================================================================
+
 const DEFAULT_PLATFORM_URL = "https://whaletools.dev";
 const DEFAULT_TIMEOUT_MS = 120_000; // 2 minutes
+
 // ============================================================================
 // OPEN BROWSER (cross-platform)
 // ============================================================================
+
 export function openBrowser(url) {
-    const platform = process.platform;
-    const cmd = platform === "darwin" ? "open" :
-        platform === "win32" ? "start" :
-            "xdg-open";
-    exec(`${cmd} "${url}"`, (err) => {
-        if (err) {
-            // Non-fatal — user can manually open the URL
-            console.error(`[browser-auth] Failed to open browser: ${err.message}`);
-        }
-    });
+  const platform = process.platform;
+  const cmd = platform === "darwin" ? "open" : platform === "win32" ? "start" : "xdg-open";
+  exec(`${cmd} "${url}"`, err => {
+    if (err) {
+      // Non-fatal — user can manually open the URL
+      console.error(`[browser-auth] Failed to open browser: ${err.message}`);
+    }
+  });
 }
+
 // ============================================================================
 // BROWSER AUTH FLOW
 // ============================================================================
+
 export async function signInWithBrowser(platformUrl, callbacks, timeoutMs) {
-    const platform = platformUrl || process.env.WHALETOOLS_PLATFORM_URL || loadConfig().platform_url || DEFAULT_PLATFORM_URL;
-    const timeout = timeoutMs || DEFAULT_TIMEOUT_MS;
-    const state = crypto.randomUUID();
-    return new Promise((resolve) => {
-        let settled = false;
-        let timeoutId;
-        let httpServer;
-        function finish(result) {
-            if (settled)
-                return;
-            settled = true;
-            clearTimeout(timeoutId);
-            try {
-                httpServer?.close();
-            }
-            catch { }
-            resolve(result);
+  const platform = platformUrl || process.env.WHALETOOLS_PLATFORM_URL || loadConfig().platform_url || DEFAULT_PLATFORM_URL;
+  const timeout = timeoutMs || DEFAULT_TIMEOUT_MS;
+  const state = crypto.randomUUID();
+  return new Promise(resolve => {
+    let settled = false;
+    let timeoutId;
+    let httpServer;
+    function finish(result) {
+      if (settled) return;
+      settled = true;
+      clearTimeout(timeoutId);
+      try {
+        httpServer?.close();
+      } catch {}
+      resolve(result);
+    }
+
+    // Start localhost callback server on random port
+    httpServer = http.createServer(async (req, res) => {
+      const url = new URL(req.url || "/", `http://localhost`);
+      if (url.pathname !== "/callback") {
+        res.writeHead(404);
+        res.end("Not found");
+        return;
+      }
+      const code = url.searchParams.get("code");
+      const returnedState = url.searchParams.get("state");
+
+      // CSRF check
+      if (returnedState !== state) {
+        res.writeHead(400, {
+          "Content-Type": "text/html"
+        });
+        res.end(errorPage("Security error: state mismatch. Please try again."));
+        finish({
+          success: false,
+          error: "State mismatch — possible CSRF attack"
+        });
+        return;
+      }
+      if (!code) {
+        res.writeHead(400, {
+          "Content-Type": "text/html"
+        });
+        res.end(errorPage("Missing auth code. Please try again."));
+        finish({
+          success: false,
+          error: "No auth code received"
+        });
+        return;
+      }
+
+      // Show success page immediately (before exchange — reduces perceived latency)
+      res.writeHead(200, {
+        "Content-Type": "text/html"
+      });
+      res.end(successPage());
+      callbacks?.onExchangingCode?.();
+
+      // Exchange the one-time code for tokens
+      try {
+        const exchangeRes = await fetch(`${platform}/api/auth/cli/exchange`, {
+          method: "POST",
+          headers: {
+            "Content-Type": "application/json"
+          },
+          body: JSON.stringify({
+            code
+          })
+        });
+        const data = await exchangeRes.json();
+        if (!exchangeRes.ok || data.error) {
+          finish({
+            success: false,
+            error: data.error || "Failed to exchange auth code"
+          });
+          return;
         }
-        // Start localhost callback server on random port
-        httpServer = http.createServer(async (req, res) => {
-            const url = new URL(req.url || "/", `http://localhost`);
-            if (url.pathname !== "/callback") {
-                res.writeHead(404);
-                res.end("Not found");
-                return;
-            }
-            const code = url.searchParams.get("code");
-            const returnedState = url.searchParams.get("state");
-            // CSRF check
-            if (returnedState !== state) {
-                res.writeHead(400, { "Content-Type": "text/html" });
-                res.end(errorPage("Security error: state mismatch. Please try again."));
-                finish({ success: false, error: "State mismatch — possible CSRF attack" });
-                return;
-            }
-            if (!code) {
-                res.writeHead(400, { "Content-Type": "text/html" });
-                res.end(errorPage("Missing auth code. Please try again."));
-                finish({ success: false, error: "No auth code received" });
-                return;
-            }
-            // Show success page immediately (before exchange — reduces perceived latency)
-            res.writeHead(200, { "Content-Type": "text/html" });
-            res.end(successPage());
-            callbacks?.onExchangingCode?.();
-            // Exchange the one-time code for tokens
-            try {
-                const exchangeRes = await fetch(`${platform}/api/auth/cli/exchange`, {
-                    method: "POST",
-                    headers: { "Content-Type": "application/json" },
-                    body: JSON.stringify({ code }),
-                });
-                const data = await exchangeRes.json();
-                if (!exchangeRes.ok || data.error) {
-                    finish({ success: false, error: data.error || "Failed to exchange auth code" });
-                    return;
-                }
-                // data = { access_token, refresh_token, user_id, email, expires_at, stores }
-                const config = {
-                    ...loadConfig(),
-                    access_token: data.access_token,
-                    refresh_token: data.refresh_token,
-                    user_id: data.user_id,
-                    email: data.email,
-                    expires_at: data.expires_at,
-                    platform_url: platform !== DEFAULT_PLATFORM_URL ? platform : undefined,
-                };
-                const stores = data.stores || [];
-                // Auto-select store if user has exactly one
-                if (stores.length === 1) {
-                    config.store_id = stores[0].id;
-                    config.store_name = stores[0].name;
-                }
-                saveConfig(config);
-                finish({
-                    success: true,
-                    config,
-                    stores: stores.length > 1 ? stores : undefined,
-                });
-            }
-            catch (err) {
-                finish({
-                    success: false,
-                    error: `Code exchange failed: ${err instanceof Error ? err.message : String(err)}`,
-                });
-            }
+
+        // data = { access_token, refresh_token, user_id, email, expires_at, stores }
+        const config = {
+          ...loadConfig(),
+          access_token: data.access_token,
+          refresh_token: data.refresh_token,
+          user_id: data.user_id,
+          email: data.email,
+          expires_at: data.expires_at,
+          platform_url: platform !== DEFAULT_PLATFORM_URL ? platform : undefined
+        };
+        const stores = data.stores || [];
+
+        // Auto-select store if user has exactly one
+        if (stores.length === 1) {
+          config.store_id = stores[0].id;
+          config.store_name = stores[0].name;
+        }
+        saveConfig(config);
+        finish({
+          success: true,
+          config,
+          stores: stores.length > 1 ? stores : undefined
         });
-        httpServer.listen(0, "127.0.0.1", () => {
-            const addr = httpServer.address();
-            if (!addr || typeof addr === "string") {
-                finish({ success: false, error: "Failed to bind callback server" });
-                return;
-            }
-            const port = addr.port;
-            const loginUrl = `${platform}/auth/cli?port=${port}&state=${state}`;
-            callbacks?.onBrowserOpening?.(loginUrl);
-            openBrowser(loginUrl);
-            callbacks?.onWaitingForCallback?.();
+      } catch (err) {
+        finish({
+          success: false,
+          error: `Code exchange failed: ${err instanceof Error ? err.message : String(err)}`
         });
-        // Timeout
-        timeoutId = setTimeout(() => {
-            finish({
-                success: false,
-                error: "Login timed out. Please try again with `whale login`.",
-            });
-        }, timeout);
-        // Handle server errors
-        httpServer.on("error", (err) => {
-            finish({ success: false, error: `Callback server error: ${err.message}` });
+      }
+    });
+    httpServer.listen(0, "127.0.0.1", () => {
+      const addr = httpServer.address();
+      if (!addr || typeof addr === "string") {
+        finish({
+          success: false,
+          error: "Failed to bind callback server"
         });
+        return;
+      }
+      const port = addr.port;
+      const loginUrl = `${platform}/auth/cli?port=${port}&state=${state}`;
+      callbacks?.onBrowserOpening?.(loginUrl);
+      openBrowser(loginUrl);
+      callbacks?.onWaitingForCallback?.();
+    });
+
+    // Timeout
+    timeoutId = setTimeout(() => {
+      finish({
+        success: false,
+        error: "Login timed out. Please try again with `whale login`."
+      });
+    }, timeout);
+
+    // Handle server errors
+    httpServer.on("error", err => {
+      finish({
+        success: false,
+        error: `Callback server error: ${err.message}`
+      });
     });
+  });
 }
+
 // ============================================================================
 // HTML PAGES (served by localhost callback)
 // ============================================================================
+
 function successPage() {
-    return `<!DOCTYPE html>
+  return `<!DOCTYPE html>
 <html><head><title>Whale Code — Signed In</title>
 <style>
   body { background: #0a0a0a; color: #f5f5f7; font-family: -apple-system, BlinkMacSystemFont, sans-serif;
@@ -164,7 +204,7 @@ function successPage() {
 </div></body></html>`;
 }
 function errorPage(message) {
-    return `<!DOCTYPE html>
+  return `<!DOCTYPE html>
 <html><head><title>Whale Code — Error</title>
 <style>
   body { background: #0a0a0a; color: #f5f5f7; font-family: -apple-system, BlinkMacSystemFont, sans-serif;
@@ -178,3 +218,4 @@ function errorPage(message) {
   <p>${message}</p>
 </div></body></html>`;
 }
+//# sourceMappingURL=browser-auth.js.map

package/dist/cli/services/browser-auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"browser-auth.js","names":["http","exec","loadConfig","saveConfig","DEFAULT_PLATFORM_URL","DEFAULT_TIMEOUT_MS","openBrowser","url","platform","process","cmd","err","console","error","message","signInWithBrowser","platformUrl","callbacks","timeoutMs","env","WHALETOOLS_PLATFORM_URL","platform_url","timeout","state","crypto","randomUUID","Promise","resolve","settled","timeoutId","httpServer","finish","result","clearTimeout","close","createServer","req","res","URL","pathname","writeHead","end","code","searchParams","get","returnedState","errorPage","success","successPage","onExchangingCode","exchangeRes","fetch","method","headers","body","JSON","stringify","data","json","ok","config","access_token","refresh_token","user_id","email","expires_at","undefined","stores","length","store_id","id","store_name","name","Error","String","listen","addr","address","port","loginUrl","onBrowserOpening","onWaitingForCallback","setTimeout","on"],"sources":["../../../src/cli/services/browser-auth.ts"],"sourcesContent":["/**\n * Browser-based OAuth login for CLI and MCP\n *\n * Opens the user's browser to whaletools.dev/auth/cli, which handles\n * email/password (and future SSO), then redirects back to a localhost\n * callback with a one-time code. The CLI exchanges that code for tokens.\n *\n * Same pattern as: `gh auth login`, `vercel login`, `claude login`\n */\n\nimport http from \"node:http\";\nimport { exec } from \"node:child_process\";\nimport { loadConfig, saveConfig, updateConfig, type WhaleConfig } from \"./config-store.js\";\nimport type { StoreInfo } from \"./auth-service.js\";\n\n// ============================================================================\n// TYPES\n// ============================================================================\n\nexport interface BrowserAuthCallbacks {\n  onBrowserOpening?: (url: string) => void;\n  onWaitingForCallback?: () => void;\n  onExchangingCode?: () => void;\n}\n\nexport interface BrowserAuthResult {\n  success: boolean;\n  error?: string;\n  config?: WhaleConfig;\n  stores?: StoreInfo[];\n}\n\nconst DEFAULT_PLATFORM_URL = \"https://whaletools.dev\";\nconst DEFAULT_TIMEOUT_MS = 120_000; // 2 minutes\n\n// ============================================================================\n// OPEN BROWSER (cross-platform)\n// ============================================================================\n\nexport function openBrowser(url: string): void {\n  const platform = process.platform;\n  const cmd =\n    platform === \"darwin\" ? \"open\" :\n    platform === \"win32\" ? \"start\" :\n    \"xdg-open\";\n\n  exec(`${cmd} \"${url}\"`, (err) => {\n    if (err) {\n      // Non-fatal — user can manually open the URL\n      console.error(`[browser-auth] Failed to open browser: ${err.message}`);\n    }\n  });\n}\n\n// ============================================================================\n// BROWSER AUTH FLOW\n// ============================================================================\n\nexport async function signInWithBrowser(\n  platformUrl?: string,\n  callbacks?: BrowserAuthCallbacks,\n  timeoutMs?: number,\n): Promise<BrowserAuthResult> {\n  const platform = platformUrl || process.env.WHALETOOLS_PLATFORM_URL || loadConfig().platform_url || DEFAULT_PLATFORM_URL;\n  const timeout = timeoutMs || DEFAULT_TIMEOUT_MS;\n  const state = crypto.randomUUID();\n\n  return new Promise((resolve) => {\n    let settled = false;\n    let timeoutId: ReturnType<typeof setTimeout>;\n    let httpServer: http.Server;\n\n    function finish(result: BrowserAuthResult) {\n      if (settled) return;\n      settled = true;\n      clearTimeout(timeoutId);\n      try { httpServer?.close(); } catch {}\n      resolve(result);\n    }\n\n    // Start localhost callback server on random port\n    httpServer = http.createServer(async (req, res) => {\n      const url = new URL(req.url || \"/\", `http://localhost`);\n\n      if (url.pathname !== \"/callback\") {\n        res.writeHead(404);\n        res.end(\"Not found\");\n        return;\n      }\n\n      const code = url.searchParams.get(\"code\");\n      const returnedState = url.searchParams.get(\"state\");\n\n      // CSRF check\n      if (returnedState !== state) {\n        res.writeHead(400, { \"Content-Type\": \"text/html\" });\n        res.end(errorPage(\"Security error: state mismatch. Please try again.\"));\n        finish({ success: false, error: \"State mismatch — possible CSRF attack\" });\n        return;\n      }\n\n      if (!code) {\n        res.writeHead(400, { \"Content-Type\": \"text/html\" });\n        res.end(errorPage(\"Missing auth code. Please try again.\"));\n        finish({ success: false, error: \"No auth code received\" });\n        return;\n      }\n\n      // Show success page immediately (before exchange — reduces perceived latency)\n      res.writeHead(200, { \"Content-Type\": \"text/html\" });\n      res.end(successPage());\n\n      callbacks?.onExchangingCode?.();\n\n      // Exchange the one-time code for tokens\n      try {\n        const exchangeRes = await fetch(`${platform}/api/auth/cli/exchange`, {\n          method: \"POST\",\n          headers: { \"Content-Type\": \"application/json\" },\n          body: JSON.stringify({ code }),\n        });\n\n        const data = await exchangeRes.json();\n\n        if (!exchangeRes.ok || data.error) {\n          finish({ success: false, error: data.error || \"Failed to exchange auth code\" });\n          return;\n        }\n\n        // data = { access_token, refresh_token, user_id, email, expires_at, stores }\n        const config: WhaleConfig = {\n          ...loadConfig(),\n          access_token: data.access_token,\n          refresh_token: data.refresh_token,\n          user_id: data.user_id,\n          email: data.email,\n          expires_at: data.expires_at,\n          platform_url: platform !== DEFAULT_PLATFORM_URL ? platform : undefined,\n        };\n\n        const stores: StoreInfo[] = data.stores || [];\n\n        // Auto-select store if user has exactly one\n        if (stores.length === 1) {\n          config.store_id = stores[0].id;\n          config.store_name = stores[0].name;\n        }\n\n        saveConfig(config);\n\n        finish({\n          success: true,\n          config,\n          stores: stores.length > 1 ? stores : undefined,\n        });\n      } catch (err) {\n        finish({\n          success: false,\n          error: `Code exchange failed: ${err instanceof Error ? err.message : String(err)}`,\n        });\n      }\n    });\n\n    httpServer.listen(0, \"127.0.0.1\", () => {\n      const addr = httpServer.address();\n      if (!addr || typeof addr === \"string\") {\n        finish({ success: false, error: \"Failed to bind callback server\" });\n        return;\n      }\n\n      const port = addr.port;\n      const loginUrl = `${platform}/auth/cli?port=${port}&state=${state}`;\n\n      callbacks?.onBrowserOpening?.(loginUrl);\n      openBrowser(loginUrl);\n      callbacks?.onWaitingForCallback?.();\n    });\n\n    // Timeout\n    timeoutId = setTimeout(() => {\n      finish({\n        success: false,\n        error: \"Login timed out. Please try again with `whale login`.\",\n      });\n    }, timeout);\n\n    // Handle server errors\n    httpServer.on(\"error\", (err) => {\n      finish({ success: false, error: `Callback server error: ${err.message}` });\n    });\n  });\n}\n\n// ============================================================================\n// HTML PAGES (served by localhost callback)\n// ============================================================================\n\nfunction successPage(): string {\n  return `<!DOCTYPE html>\n<html><head><title>Whale Code — Signed In</title>\n<style>\n  body { background: #0a0a0a; color: #f5f5f7; font-family: -apple-system, BlinkMacSystemFont, sans-serif;\n    display: flex; align-items: center; justify-content: center; min-height: 100vh; margin: 0; }\n  .box { text-align: center; max-width: 400px; }\n  h1 { font-size: 1.5rem; margin-bottom: 0.5rem; }\n  p { color: #a1a1a6; font-size: 0.9rem; }\n  .check { font-size: 3rem; margin-bottom: 1rem; color: #30d158; }\n</style></head>\n<body><div class=\"box\">\n  <div class=\"check\">&#10003;</div>\n  <h1>Signed in!</h1>\n  <p>You can close this window and return to your terminal.</p>\n</div></body></html>`;\n}\n\nfunction errorPage(message: string): string {\n  return `<!DOCTYPE html>\n<html><head><title>Whale Code — Error</title>\n<style>\n  body { background: #0a0a0a; color: #f5f5f7; font-family: -apple-system, BlinkMacSystemFont, sans-serif;\n    display: flex; align-items: center; justify-content: center; min-height: 100vh; margin: 0; }\n  .box { text-align: center; max-width: 400px; }\n  h1 { font-size: 1.5rem; margin-bottom: 0.5rem; color: #ff453a; }\n  p { color: #a1a1a6; font-size: 0.9rem; }\n</style></head>\n<body><div class=\"box\">\n  <h1>Authentication Error</h1>\n  <p>${message}</p>\n</div></body></html>`;\n}\n"],"mappings":"AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA,OAAOA,IAAI,MAAM,WAAW;AAC5B,SAASC,IAAI,QAAQ,oBAAoB;AACzC,SAASC,UAAU,EAAEC,UAAU,QAAwC,mBAAmB;;AAG1F;AACA;AACA;;AAeA,MAAMC,oBAAoB,GAAG,wBAAwB;AACrD,MAAMC,kBAAkB,GAAG,OAAO,CAAC,CAAC;;AAEpC;AACA;AACA;;AAEA,OAAO,SAASC,WAAWA,CAACC,GAAW,EAAQ;EAC7C,MAAMC,QAAQ,GAAGC,OAAO,CAACD,QAAQ;EACjC,MAAME,GAAG,GACPF,QAAQ,KAAK,QAAQ,GAAG,MAAM,GAC9BA,QAAQ,KAAK,OAAO,GAAG,OAAO,GAC9B,UAAU;EAEZP,IAAI,CAAC,GAAGS,GAAG,KAAKH,GAAG,GAAG,EAAGI,GAAG,IAAK;IAC/B,IAAIA,GAAG,EAAE;MACP;MACAC,OAAO,CAACC,KAAK,CAAC,0CAA0CF,GAAG,CAACG,OAAO,EAAE,CAAC;IACxE;EACF,CAAC,CAAC;AACJ;;AAEA;AACA;AACA;;AAEA,OAAO,eAAeC,iBAAiBA,CACrCC,WAAoB,EACpBC,SAAgC,EAChCC,SAAkB,EACU;EAC5B,MAAMV,QAAQ,GAAGQ,WAAW,IAAIP,OAAO,CAACU,GAAG,CAACC,uBAAuB,IAAIlB,UAAU,CAAC,CAAC,CAACmB,YAAY,IAAIjB,oBAAoB;EACxH,MAAMkB,OAAO,GAAGJ,SAAS,IAAIb,kBAAkB;EAC/C,MAAMkB,KAAK,GAAGC,MAAM,CAACC,UAAU,CAAC,CAAC;EAEjC,OAAO,IAAIC,OAAO,CAAEC,OAAO,IAAK;IAC9B,IAAIC,OAAO,GAAG,KAAK;IACnB,IAAIC,SAAwC;IAC5C,IAAIC,UAAuB;IAE3B,SAASC,MAAMA,CAACC,MAAyB,EAAE;MACzC,IAAIJ,OAAO,EAAE;MACbA,OAAO,GAAG,IAAI;MACdK,YAAY,CAACJ,SAAS,CAAC;MACvB,IAAI;QAAEC,UAAU,EAAEI,KAAK,CAAC,CAAC;MAAE,CAAC,CAAC,MAAM,CAAC;MACpCP,OAAO,CAACK,MAAM,CAAC;IACjB;;IAEA;IACAF,UAAU,GAAG9B,IAAI,CAACmC,YAAY,CAAC,OAAOC,GAAG,EAAEC,GAAG,KAAK;MACjD,MAAM9B,GAAG,GAAG,IAAI+B,GAAG,CAACF,GAAG,CAAC7B,GAAG,IAAI,GAAG,EAAE,kBAAkB,CAAC;MAEvD,IAAIA,GAAG,CAACgC,QAAQ,KAAK,WAAW,EAAE;QAChCF,GAAG,CAACG,SAAS,CAAC,GAAG,CAAC;QAClBH,GAAG,CAACI,GAAG,CAAC,WAAW,CAAC;QACpB;MACF;MAEA,MAAMC,IAAI,GAAGnC,GAAG,CAACoC,YAAY,CAACC,GAAG,CAAC,MAAM,CAAC;MACzC,MAAMC,aAAa,GAAGtC,GAAG,CAACoC,YAAY,CAACC,GAAG,CAAC,OAAO,CAAC;;MAEnD;MACA,IAAIC,aAAa,KAAKtB,KAAK,EAAE;QAC3Bc,GAAG,CAACG,SAAS,CAAC,GAAG,EAAE;UAAE,cAAc,EAAE;QAAY,CAAC,CAAC;QACnDH,GAAG,CAACI,GAAG,CAACK,SAAS,CAAC,mDAAmD,CAAC,CAAC;QACvEf,MAAM,CAAC;UAAEgB,OAAO,EAAE,KAAK;UAAElC,KAAK,EAAE;QAAwC,CAAC,CAAC;QAC1E;MACF;MAEA,IAAI,CAAC6B,IAAI,EAAE;QACTL,GAAG,CAACG,SAAS,CAAC,GAAG,EAAE;UAAE,cAAc,EAAE;QAAY,CAAC,CAAC;QACnDH,GAAG,CAACI,GAAG,CAACK,SAAS,CAAC,sCAAsC,CAAC,CAAC;QAC1Df,MAAM,CAAC;UAAEgB,OAAO,EAAE,KAAK;UAAElC,KAAK,EAAE;QAAwB,CAAC,CAAC;QAC1D;MACF;;MAEA;MACAwB,GAAG,CAACG,SAAS,CAAC,GAAG,EAAE;QAAE,cAAc,EAAE;MAAY,CAAC,CAAC;MACnDH,GAAG,CAACI,GAAG,CAACO,WAAW,CAAC,CAAC,CAAC;MAEtB/B,SAAS,EAAEgC,gBAAgB,GAAG,CAAC;;MAE/B;MACA,IAAI;QACF,MAAMC,WAAW,GAAG,MAAMC,KAAK,CAAC,GAAG3C,QAAQ,wBAAwB,EAAE;UACnE4C,MAAM,EAAE,MAAM;UACdC,OAAO,EAAE;YAAE,cAAc,EAAE;UAAmB,CAAC;UAC/CC,IAAI,EAAEC,IAAI,CAACC,SAAS,CAAC;YAAEd;UAAK,CAAC;QAC/B,CAAC,CAAC;QAEF,MAAMe,IAAI,GAAG,MAAMP,WAAW,CAACQ,IAAI,CAAC,CAAC;QAErC,IAAI,CAACR,WAAW,CAACS,EAAE,IAAIF,IAAI,CAAC5C,KAAK,EAAE;UACjCkB,MAAM,CAAC;YAAEgB,OAAO,EAAE,KAAK;YAAElC,KAAK,EAAE4C,IAAI,CAAC5C,KAAK,IAAI;UAA+B,CAAC,CAAC;UAC/E;QACF;;QAEA;QACA,MAAM+C,MAAmB,GAAG;UAC1B,GAAG1D,UAAU,CAAC,CAAC;UACf2D,YAAY,EAAEJ,IAAI,CAACI,YAAY;UAC/BC,aAAa,EAAEL,IAAI,CAACK,aAAa;UACjCC,OAAO,EAAEN,IAAI,CAACM,OAAO;UACrBC,KAAK,EAAEP,IAAI,CAACO,KAAK;UACjBC,UAAU,EAAER,IAAI,CAACQ,UAAU;UAC3B5C,YAAY,EAAEb,QAAQ,KAAKJ,oBAAoB,GAAGI,QAAQ,GAAG0D;QAC/D,CAAC;QAED,MAAMC,MAAmB,GAAGV,IAAI,CAACU,MAAM,IAAI,EAAE;;QAE7C;QACA,IAAIA,MAAM,CAACC,MAAM,KAAK,CAAC,EAAE;UACvBR,MAAM,CAACS,QAAQ,GAAGF,MAAM,CAAC,CAAC,CAAC,CAACG,EAAE;UAC9BV,MAAM,CAACW,UAAU,GAAGJ,MAAM,CAAC,CAAC,CAAC,CAACK,IAAI;QACpC;QAEArE,UAAU,CAACyD,MAAM,CAAC;QAElB7B,MAAM,CAAC;UACLgB,OAAO,EAAE,IAAI;UACba,MAAM;UACNO,MAAM,EAAEA,MAAM,CAACC,MAAM,GAAG,CAAC,GAAGD,MAAM,GAAGD;QACvC,CAAC,CAAC;MACJ,CAAC,CAAC,OAAOvD,GAAG,EAAE;QACZoB,MAAM,CAAC;UACLgB,OAAO,EAAE,KAAK;UACdlC,KAAK,EAAE,yBAAyBF,GAAG,YAAY8D,KAAK,GAAG9D,GAAG,CAACG,OAAO,GAAG4D,MAAM,CAAC/D,GAAG,CAAC;QAClF,CAAC,CAAC;MACJ;IACF,CAAC,CAAC;IAEFmB,UAAU,CAAC6C,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM;MACtC,MAAMC,IAAI,GAAG9C,UAAU,CAAC+C,OAAO,CAAC,CAAC;MACjC,IAAI,CAACD,IAAI,IAAI,OAAOA,IAAI,KAAK,QAAQ,EAAE;QACrC7C,MAAM,CAAC;UAAEgB,OAAO,EAAE,KAAK;UAAElC,KAAK,EAAE;QAAiC,CAAC,CAAC;QACnE;MACF;MAEA,MAAMiE,IAAI,GAAGF,IAAI,CAACE,IAAI;MACtB,MAAMC,QAAQ,GAAG,GAAGvE,QAAQ,kBAAkBsE,IAAI,UAAUvD,KAAK,EAAE;MAEnEN,SAAS,EAAE+D,gBAAgB,GAAGD,QAAQ,CAAC;MACvCzE,WAAW,CAACyE,QAAQ,CAAC;MACrB9D,SAAS,EAAEgE,oBAAoB,GAAG,CAAC;IACrC,CAAC,CAAC;;IAEF;IACApD,SAAS,GAAGqD,UAAU,CAAC,MAAM;MAC3BnD,MAAM,CAAC;QACLgB,OAAO,EAAE,KAAK;QACdlC,KAAK,EAAE;MACT,CAAC,CAAC;IACJ,CAAC,EAAES,OAAO,CAAC;;IAEX;IACAQ,UAAU,CAACqD,EAAE,CAAC,OAAO,EAAGxE,GAAG,IAAK;MAC9BoB,MAAM,CAAC;QAAEgB,OAAO,EAAE,KAAK;QAAElC,KAAK,EAAE,0BAA0BF,GAAG,CAACG,OAAO;MAAG,CAAC,CAAC;IAC5E,CAAC,CAAC;EACJ,CAAC,CAAC;AACJ;;AAEA;AACA;AACA;;AAEA,SAASkC,WAAWA,CAAA,EAAW;EAC7B,OAAO;AACT;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,qBAAqB;AACrB;AAEA,SAASF,SAASA,CAAChC,OAAe,EAAU;EAC1C,OAAO;AACT;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAOA,OAAO;AACd,qBAAqB;AACrB","ignoreList":[]}

package/dist/cli/services/claude-md-loader.js

@@ -4,55 +4,59 @@
  * Extracted from agent-loop.ts for single-responsibility.
  * All consumers should import from agent-loop.ts (re-export facade).
  */
+
 import { readFileSync, existsSync } from "fs";
 import { join, resolve, dirname } from "path";
+
 /** CLI-only: cached CLAUDE.md content (cleared by reloadClaudeMd/resetClaudeMdCache) */
 let cachedClaudeMd = null;
 /** CLI-only: cached CLAUDE.md path */
 let cachedClaudeMdPath = null;
 function findClaudeMd(startDir) {
-    const cwd = startDir || process.cwd();
-    const checked = new Set();
-    // Walk up from cwd looking for CLAUDE.md
-    let dir = resolve(cwd);
-    while (dir && !checked.has(dir)) {
-        checked.add(dir);
-        const candidates = [
-            join(dir, "CLAUDE.md"),
-            join(dir, ".claude", "CLAUDE.md"),
-        ];
-        for (const candidate of candidates) {
-            if (existsSync(candidate)) {
-                try {
-                    const content = readFileSync(candidate, "utf-8");
-                    if (content.trim())
-                        return { content: content.trim(), path: candidate };
-                }
-                catch { /* skip unreadable */ }
-            }
-        }
-        const parent = dirname(dir);
-        if (parent === dir)
-            break;
-        dir = parent;
+  const cwd = startDir || process.cwd();
+  const checked = new Set();
+
+  // Walk up from cwd looking for CLAUDE.md
+  let dir = resolve(cwd);
+  while (dir && !checked.has(dir)) {
+    checked.add(dir);
+    const candidates = [join(dir, "CLAUDE.md"), join(dir, ".claude", "CLAUDE.md")];
+    for (const candidate of candidates) {
+      if (existsSync(candidate)) {
+        try {
+          const content = readFileSync(candidate, "utf-8");
+          if (content.trim()) return {
+            content: content.trim(),
+            path: candidate
+          };
+        } catch {/* skip unreadable */}
+      }
     }
-    return null;
+    const parent = dirname(dir);
+    if (parent === dir) break;
+    dir = parent;
+  }
+  return null;
 }
 export function loadClaudeMd() {
-    if (cachedClaudeMd !== null)
-        return cachedClaudeMd ? { content: cachedClaudeMd, path: cachedClaudeMdPath } : null;
-    const result = findClaudeMd();
-    cachedClaudeMd = result?.content || "";
-    cachedClaudeMdPath = result?.path || null;
-    return result;
+  if (cachedClaudeMd !== null) return cachedClaudeMd ? {
+    content: cachedClaudeMd,
+    path: cachedClaudeMdPath
+  } : null;
+  const result = findClaudeMd();
+  cachedClaudeMd = result?.content || "";
+  cachedClaudeMdPath = result?.path || null;
+  return result;
 }
 export function reloadClaudeMd() {
-    cachedClaudeMd = null;
-    cachedClaudeMdPath = null;
-    return loadClaudeMd();
+  cachedClaudeMd = null;
+  cachedClaudeMdPath = null;
+  return loadClaudeMd();
 }
+
 /** Reset CLAUDE.md cache (called by resetSessionState) */
 export function resetClaudeMdCache() {
-    cachedClaudeMd = null;
-    cachedClaudeMdPath = null;
+  cachedClaudeMd = null;
+  cachedClaudeMdPath = null;
 }
+//# sourceMappingURL=claude-md-loader.js.map

package/dist/cli/services/claude-md-loader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude-md-loader.js","names":["readFileSync","existsSync","join","resolve","dirname","cachedClaudeMd","cachedClaudeMdPath","findClaudeMd","startDir","cwd","process","checked","Set","dir","has","add","candidates","candidate","content","trim","path","parent","loadClaudeMd","result","reloadClaudeMd","resetClaudeMdCache"],"sources":["../../../src/cli/services/claude-md-loader.ts"],"sourcesContent":["/**\n * CLAUDE.md Loader — auto-load project instructions from cwd + parents\n *\n * Extracted from agent-loop.ts for single-responsibility.\n * All consumers should import from agent-loop.ts (re-export facade).\n */\n\nimport { readFileSync, existsSync } from \"fs\";\nimport { join, resolve, dirname } from \"path\";\n\n/** CLI-only: cached CLAUDE.md content (cleared by reloadClaudeMd/resetClaudeMdCache) */\nlet cachedClaudeMd: string | null = null;\n/** CLI-only: cached CLAUDE.md path */\nlet cachedClaudeMdPath: string | null = null;\n\nfunction findClaudeMd(startDir?: string): { content: string; path: string } | null {\n  const cwd = startDir || process.cwd();\n  const checked = new Set<string>();\n\n  // Walk up from cwd looking for CLAUDE.md\n  let dir = resolve(cwd);\n  while (dir && !checked.has(dir)) {\n    checked.add(dir);\n    const candidates = [\n      join(dir, \"CLAUDE.md\"),\n      join(dir, \".claude\", \"CLAUDE.md\"),\n    ];\n    for (const candidate of candidates) {\n      if (existsSync(candidate)) {\n        try {\n          const content = readFileSync(candidate, \"utf-8\");\n          if (content.trim()) return { content: content.trim(), path: candidate };\n        } catch { /* skip unreadable */ }\n      }\n    }\n    const parent = dirname(dir);\n    if (parent === dir) break;\n    dir = parent;\n  }\n  return null;\n}\n\nexport function loadClaudeMd(): { content: string; path: string } | null {\n  if (cachedClaudeMd !== null) return cachedClaudeMd ? { content: cachedClaudeMd, path: cachedClaudeMdPath! } : null;\n  const result = findClaudeMd();\n  cachedClaudeMd = result?.content || \"\";\n  cachedClaudeMdPath = result?.path || null;\n  return result;\n}\n\nexport function reloadClaudeMd(): { content: string; path: string } | null {\n  cachedClaudeMd = null;\n  cachedClaudeMdPath = null;\n  return loadClaudeMd();\n}\n\n/** Reset CLAUDE.md cache (called by resetSessionState) */\nexport function resetClaudeMdCache(): void {\n  cachedClaudeMd = null;\n  cachedClaudeMdPath = null;\n}\n"],"mappings":"AAAA;AACA;AACA;AACA;AACA;AACA;;AAEA,SAASA,YAAY,EAAEC,UAAU,QAAQ,IAAI;AAC7C,SAASC,IAAI,EAAEC,OAAO,EAAEC,OAAO,QAAQ,MAAM;;AAE7C;AACA,IAAIC,cAA6B,GAAG,IAAI;AACxC;AACA,IAAIC,kBAAiC,GAAG,IAAI;AAE5C,SAASC,YAAYA,CAACC,QAAiB,EAA4C;EACjF,MAAMC,GAAG,GAAGD,QAAQ,IAAIE,OAAO,CAACD,GAAG,CAAC,CAAC;EACrC,MAAME,OAAO,GAAG,IAAIC,GAAG,CAAS,CAAC;;EAEjC;EACA,IAAIC,GAAG,GAAGV,OAAO,CAACM,GAAG,CAAC;EACtB,OAAOI,GAAG,IAAI,CAACF,OAAO,CAACG,GAAG,CAACD,GAAG,CAAC,EAAE;IAC/BF,OAAO,CAACI,GAAG,CAACF,GAAG,CAAC;IAChB,MAAMG,UAAU,GAAG,CACjBd,IAAI,CAACW,GAAG,EAAE,WAAW,CAAC,EACtBX,IAAI,CAACW,GAAG,EAAE,SAAS,EAAE,WAAW,CAAC,CAClC;IACD,KAAK,MAAMI,SAAS,IAAID,UAAU,EAAE;MAClC,IAAIf,UAAU,CAACgB,SAAS,CAAC,EAAE;QACzB,IAAI;UACF,MAAMC,OAAO,GAAGlB,YAAY,CAACiB,SAAS,EAAE,OAAO,CAAC;UAChD,IAAIC,OAAO,CAACC,IAAI,CAAC,CAAC,EAAE,OAAO;YAAED,OAAO,EAAEA,OAAO,CAACC,IAAI,CAAC,CAAC;YAAEC,IAAI,EAAEH;UAAU,CAAC;QACzE,CAAC,CAAC,MAAM,CAAE;MACZ;IACF;IACA,MAAMI,MAAM,GAAGjB,OAAO,CAACS,GAAG,CAAC;IAC3B,IAAIQ,MAAM,KAAKR,GAAG,EAAE;IACpBA,GAAG,GAAGQ,MAAM;EACd;EACA,OAAO,IAAI;AACb;AAEA,OAAO,SAASC,YAAYA,CAAA,EAA6C;EACvE,IAAIjB,cAAc,KAAK,IAAI,EAAE,OAAOA,cAAc,GAAG;IAAEa,OAAO,EAAEb,cAAc;IAAEe,IAAI,EAAEd;EAAoB,CAAC,GAAG,IAAI;EAClH,MAAMiB,MAAM,GAAGhB,YAAY,CAAC,CAAC;EAC7BF,cAAc,GAAGkB,MAAM,EAAEL,OAAO,IAAI,EAAE;EACtCZ,kBAAkB,GAAGiB,MAAM,EAAEH,IAAI,IAAI,IAAI;EACzC,OAAOG,MAAM;AACf;AAEA,OAAO,SAASC,cAAcA,CAAA,EAA6C;EACzEnB,cAAc,GAAG,IAAI;EACrBC,kBAAkB,GAAG,IAAI;EACzB,OAAOgB,YAAY,CAAC,CAAC;AACvB;;AAEA;AACA,OAAO,SAASG,kBAAkBA,CAAA,EAAS;EACzCpB,cAAc,GAAG,IAAI;EACrBC,kBAAkB,GAAG,IAAI;AAC3B","ignoreList":[]}

package/dist/cli/services/config-store.d.ts

@@ -10,7 +10,7 @@
  *
  * Environment variables always override file-based config for MCP server mode.
  */
-export interface SwagManagerConfig {
+export interface WhaleConfig {
     supabase_url?: string;
     supabase_key?: string;
     anthropic_api_key?: string;
@@ -27,6 +27,11 @@ export interface SwagManagerConfig {
     permission_mode?: string;
     agent_api_key?: string;
     platform_url?: string;
+    stores?: Array<{
+        id: string;
+        name: string;
+        role?: string;
+    }>;
 }
 /** Preferences that survive sign-out (stored in preferences.json) */
 export interface WhalePreferences {
@@ -36,9 +41,9 @@ export interface WhalePreferences {
     platform_url?: string;
     theme?: string;
 }
-export declare function loadConfig(): SwagManagerConfig;
-export declare function saveConfig(config: SwagManagerConfig): void;
-export declare function updateConfig(partial: Partial<SwagManagerConfig>): void;
+export declare function loadConfig(): WhaleConfig;
+export declare function saveConfig(config: WhaleConfig): void;
+export declare function updateConfig(partial: Partial<WhaleConfig>): void;
 export declare function clearConfig(): void;
 export declare function loadPreferences(): WhalePreferences;
 export declare function savePreferences(prefs: WhalePreferences): void;