feat: OAuth access/refresh token flow for CLI login

- Add CredentialStore for persisting tokens to ~/.config/indra/credentials.json
- CLI login now polls API and auto-saves tokens (no manual copy needed)
- API supports both legacy API keys and access tokens
- Add /auth/cli/poll/:state and /auth/refresh endpoints
- Token auto-refresh on expiry
- Include viz feature in default build

Author: moonstripe

Cargo.lock

@@ -54,7 +54,16 @@ candle-transformers = { version = "0.8", optional = true }
 hf-hub = { version = "0.4", optional = true, features = ["tokio"] }
 tokenizers = { version = "0.21", optional = true }
 tokio = { version = "1.42", optional = true, features = ["full"] }
-reqwest = { version = "0.12", optional = true, features = ["json"] }
+reqwest = { version = "0.12", optional = true, features = ["json", "blocking"] }
+
+# Directories for config storage
+dirs = "5.0"
+
+# Open browser for login
+open = "5.0"
+linfa = { version = "0.8.1", optional = true }
+linfa-reduction = { version = "0.8.1", optional = true }
+ndarray = { version = "0.16", optional = true }
 
 [dev-dependencies]
 tempfile = "3.10"
@@ -65,6 +74,13 @@ lto = true
 codegen-units = 1
 
 [features]
-default = []
+default = ["hf-embeddings", "sync", "viz"]
 hf-embeddings = ["candle-core", "candle-nn", "candle-transformers", "hf-hub", "tokenizers", "tokio"]
 api-embeddings = ["reqwest", "tokio"]
+sync = ["reqwest", "tokio"]
+viz = ["linfa", "linfa-reduction", "ndarray"]
+linfa = ["dep:linfa"]
+linfa-reduction = ["dep:linfa-reduction"]
+ndarray = ["dep:ndarray"]
+# For testing without heavy deps
+mock-embeddings = []

Cargo.toml

@@ -46,4 +46,13 @@ pub enum Error {
 
     #[error("Version mismatch: expected {expected}, found {found}")]
     VersionMismatch { expected: u32, found: u32 },
+
+    #[error("Remote error: {0}")]
+    Remote(String),
+
+    #[error("HTTP error: {0}")]
+    Http(String),
+
+    #[error("Config error: {0}")]
+    Config(String),
 }

src/error.rs

@@ -27,9 +27,11 @@ pub mod embedding;
 pub mod graph;
 pub mod model;
 pub mod ops;
+pub mod remote;
 pub mod search;
 pub mod store;
 pub mod trie;
+pub mod viz;
 
 mod database;
 mod error;
@@ -39,8 +41,15 @@ pub use embedding::{Embedder, MockEmbedder};
 pub use error::{Error, Result};
 pub use graph::TraversalDirection;
 pub use model::{Commit, Edge, EdgeType, Hash, Thought, ThoughtId};
+pub use remote::{Remote, RemoteConfig, SyncClient, SyncConfig, SyncState, PullResult, Auth, CredentialStore, Credentials, UserInfo, DEFAULT_API_URL};
+#[cfg(feature = "sync")]
+pub use remote::refresh_access_token;
 pub use search::SearchResult;
 pub use store::ObjectStore;
+pub use viz::{VizExport, VizMeta, VizThought};
+
+#[cfg(feature = "viz")]
+pub use viz::project_to_3d;
 
 /// Database version for format compatibility
 pub const VERSION: u32 = 1;