Bun + TypeScript single-file executable with: - App-password auth, multi-account, macOS keychain storage - repo create (knot picker, two-step with PDS putRecord rollback) - clone (handle/name resolution → git clone) - collab add (writes sh.tangled.repo.collaborator record) - pipeline status (joins knot+spindle event streams) - pipeline logs (live tail via spindle websocket)