[nomark-dev]

Summary

Implements the nomark CLI cloud authentication and import flow as specified in brief BRF-2026-04-12-nomark-cli.

• nomark login — prompts for API key (or reads NOMARK_TOKEN env var), validates against the process-import edge function, saves to ~/.nomark/config.json (api_key field, mode 0600)
• nomark whoami — probes auth and prints uid/email; exits non-zero if unauthenticated
• nomark import --platform <chatgpt|claude|gemini> — when authenticated, POSTs to the process-import Supabase edge function; falls back to local parser mode when no API key is present
• VERSION bumped to 0.2.0

Changes

File	Change
src/cli/auth.ts	New — loadApiKey / saveApiKey / clearApiKey (0600 config, NOMARK_TOKEN env var)
src/cli/http.ts	New — cloudImport / probeAuth (edge function client)
src/cli/login.ts	New — login command
src/cli/whoami.ts	New — whoami command
src/cli/import.ts	Modified — cloud mode when authenticated; fixed dryRun bug (was always true)
src/cli/index.ts	Modified — async main, login/whoami registered, VERSION 0.2.0
README.md	Added Install, Authenticate, Import, Managing API Keys sections
package.json	Fixed @vitest/coverage-v8 version to match vitest ^2.0.0
tests/cli/auth.test.ts	New — 15 tests (TDD)
tests/cli/http.test.ts	New — 12 tests (TDD)

Test plan

• All 288 tests pass (npm test)
• Build succeeds (npm run build)
• Line coverage ≥80% on src/ — 84.11% ✓
• npx nomark --version prints 0.2.0
• npx nomark login with NOMARK_TOKEN env var validates and saves key
• npx nomark whoami prints uid/email or masked key
• npx nomark import --platform chatgpt --file conversations.json routes to cloud when key is present
• Config file written with mode 0600
• API key never appears in request body (Authorization header only)

Security

• CHARTER II.5: credentials only sent in Authorization: Bearer header; never logged, echoed, or in request body; config written 0600
• CHARTER II.6: no tag/publish in this PR — publish gate is in existing .github/workflows/publish.yml

Notes

• No changes to the process-import edge function or nomark-cloud schema (governance constraint respected)
• ~/.nomark/config.json coexists with the existing apiKey (camelCase, local LLM key from config.ts) and new api_key (snake_case, NOMARK cloud key from auth.ts)
• Gemini in local mode shows a clear error directing the user to nomark login

---

Generated by Claude Code