@agentic-kit/cli 0.8.1 → 0.9.0

package/esm/db-tools.js

@@ -2,8 +2,8 @@ import * as fs from 'fs';
 import * as path from 'path';
 const EXTENSION_FILE = 'constructive-db-tools.js';
 /**
- * Environment variables the generated extension reads at tool-call time.
- * Without CONSTRUCTIVE_ACCESS_TOKEN the tools load but report "not signed in".
+ * Environment variables that override the stored session at tool-call time.
+ * Without env vars or a stored session the tools load but report "not signed in".
  */
 export const HOST_ENV_VARS = [
     'CONSTRUCTIVE_USER_ID',
@@ -14,26 +14,21 @@ export const HOST_ENV_VARS = [
 ];
 // pi's TUI loads extensions from files under <agentDir>/extensions (via jiti),
 // not from factories, so the db tools are wired by materializing a small
-// generated entry there. The @agentic-kit/pi entry path is resolved from THIS
-// package at assembly time and baked in, because node resolution from the
-// appstash agent dir would not find it.
-function extensionSource(pkgEntry) {
+// generated entry there. Both entry paths are resolved from THIS package at
+// assembly time and baked in, because node resolution from the appstash agent
+// dir would not find them.
+function extensionSource(pkgEntry, credentialsEntry) {
     return `// Generated by @agentic-kit/cli — do not edit (rewritten on every \`agent\` run).
 // Registers the Constructive typed db tools + confirm gate (@agentic-kit/pi)
-// with credentials read from the environment on each call.
+// with credentials resolved on each call: CONSTRUCTIVE_* env vars first, then
+// the \`agent login\` session store.
 const { createDbTools } = require(${JSON.stringify(pkgEntry)});
+const { resolveAccount, resolveBackendConfig } = require(${JSON.stringify(credentialsEntry)});
 
 module.exports = createDbTools({
-  account: () => {
-    const userId = process.env.CONSTRUCTIVE_USER_ID;
-    const accessToken = process.env.CONSTRUCTIVE_ACCESS_TOKEN;
-    if (!userId || !accessToken) return null;
-    return { userId, accessToken, apiKey: process.env.CONSTRUCTIVE_API_KEY };
-  },
-  backendConfig: () => ({
-    apiEndpoint: process.env.CONSTRUCTIVE_API_ENDPOINT,
-    modulesEndpoint: process.env.CONSTRUCTIVE_MODULES_ENDPOINT
-  })
+  account: resolveAccount,
+  backendConfig: resolveBackendConfig,
+  signInHint: 'Run \`agent login\` to sign in.'
 });
 `;
 }
@@ -50,9 +45,10 @@ export function materializeDbTools(config, log) {
         log('db tools unavailable (@agentic-kit/pi not installed) — continuing without them');
         return null;
     }
+    const credentialsEntry = require.resolve('./credentials');
     const dir = path.join(config.agentDir, 'extensions');
     fs.mkdirSync(dir, { recursive: true });
     const file = path.join(dir, EXTENSION_FILE);
-    fs.writeFileSync(file, extensionSource(pkgEntry));
+    fs.writeFileSync(file, extensionSource(pkgEntry, credentialsEntry));
     return file;
 }

package/esm/index.js

@@ -1,5 +1,7 @@
 #!/usr/bin/env node
-import { init, skillsList, skillsUpdate, usage } from './commands';
+import { refreshApiKeyIfNeeded } from './auth';
+import { BACKEND_PRESETS, loadBackendConfig } from './backend-store';
+import { init, login, logout, skillsList, skillsUpdate, usage, whoami } from './commands';
 import { loadConfig } from './config';
 import { materializeDbTools } from './db-tools';
 import { assembleSkills } from './skills';
@@ -20,6 +22,18 @@ async function run(args) {
         await init(config, {});
         return;
     }
+    if (first === 'login') {
+        await login(config, {});
+        return;
+    }
+    if (first === 'logout') {
+        await logout(config);
+        return;
+    }
+    if (first === 'whoami') {
+        whoami(config);
+        return;
+    }
     if (first === 'skills') {
         if (second === 'update')
             await skillsUpdate(config);
@@ -30,6 +44,15 @@ async function run(args) {
     const log = (msg) => console.log(`[agent] ${msg}`);
     await assembleSkills(config, log);
     materializeDbTools(config, log);
+    // Fire-and-forget: keep the stored API key fresh (<7 days to expiry re-mints)
+    // without ever blocking startup. Only an expired login session gets a line.
+    const backend = loadBackendConfig(config.store) ?? BACKEND_PRESETS.localnet;
+    void refreshApiKeyIfNeeded({ store: config.store, authEndpoint: backend.authEndpoint })
+        .then((status) => {
+        if (status === 'reauth-required')
+            log('API key expired — run `agent login`');
+    })
+        .catch(() => { });
     // pi is ESM-only; tsc's CJS output would downlevel a plain `await import()`
     // into `require()`, which cannot load it. Indirect the import so it survives
     // transpilation in the CJS build.

package/index.js

@@ -2,6 +2,8 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.assembleSkills = exports.materializeDbTools = exports.HOST_ENV_VARS = exports.loadConfig = void 0;
+const auth_1 = require("./auth");
+const backend_store_1 = require("./backend-store");
 const commands_1 = require("./commands");
 const config_1 = require("./config");
 const db_tools_1 = require("./db-tools");
@@ -27,6 +29,18 @@ async function run(args) {
         await (0, commands_1.init)(config, {});
         return;
     }
+    if (first === 'login') {
+        await (0, commands_1.login)(config, {});
+        return;
+    }
+    if (first === 'logout') {
+        await (0, commands_1.logout)(config);
+        return;
+    }
+    if (first === 'whoami') {
+        (0, commands_1.whoami)(config);
+        return;
+    }
     if (first === 'skills') {
         if (second === 'update')
             await (0, commands_1.skillsUpdate)(config);
@@ -37,6 +51,15 @@ async function run(args) {
     const log = (msg) => console.log(`[agent] ${msg}`);
     await (0, skills_1.assembleSkills)(config, log);
     (0, db_tools_1.materializeDbTools)(config, log);
+    // Fire-and-forget: keep the stored API key fresh (<7 days to expiry re-mints)
+    // without ever blocking startup. Only an expired login session gets a line.
+    const backend = (0, backend_store_1.loadBackendConfig)(config.store) ?? backend_store_1.BACKEND_PRESETS.localnet;
+    void (0, auth_1.refreshApiKeyIfNeeded)({ store: config.store, authEndpoint: backend.authEndpoint })
+        .then((status) => {
+        if (status === 'reauth-required')
+            log('API key expired — run `agent login`');
+    })
+        .catch(() => { });
     // pi is ESM-only; tsc's CJS output would downlevel a plain `await import()`
     // into `require()`, which cannot load it. Indirect the import so it survives
     // transpilation in the CJS build.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agentic-kit/cli",
-  "version": "0.8.1",
+  "version": "0.9.0",
   "author": "Dan Lynch <pyramation@gmail.com>",
   "description": "agent — the pi coding agent with the Constructive harness baked in, purely a shell",
   "main": "index.js",
@@ -32,10 +32,12 @@
     "test:watch": "jest --watch"
   },
   "dependencies": {
-    "@agentic-kit/harness": "0.9.0",
-    "@agentic-kit/pi": "0.9.1",
+    "@agentic-kit/harness": "0.10.0",
+    "@agentic-kit/pi": "0.10.0",
+    "@constructive-io/sdk": "^1.11.3",
     "@earendil-works/pi-coding-agent": "0.79.6",
-    "inquirerer": "^4.9.1"
+    "appstash": "^0.8.0",
+    "inquirerer": "^4.9.3"
   },
   "keywords": [
     "agentic-kit",
@@ -43,5 +45,5 @@
     "pi",
     "harness"
   ],
-  "gitHead": "6da0705f8aa49d62dc2defb8b135b71674611483"
+  "gitHead": "43121004a8bedd2c5fcf7bf33208079d55bad01f"
 }