@creativeintelligence/abbie 0.1.2 → 0.1.4

package/extensions/abbie/index.ts

@@ -553,51 +553,93 @@ export default function abbieExtension(pi: ExtensionAPI) {
     } catch { return []; }
   }
 
-  // On session start: check if any providers are connected
+  // On session start: check if any providers are connected, try syncing from Convex
   pi.on("session_start", async (_event, ctx) => {
-    const providers = await getConnectedProviders();
-    if (providers.length === 0 && ctx.hasUI) {
-      ctx.ui.notify(
-        "No AI provider connected. Use /login to connect Anthropic, OpenAI, Google, or GitHub Copilot.",
-        "warning",
-      );
+    const localProviders = await getConnectedProviders();
+
+    // If no local providers, try to pull credentials from Convex (for fresh installs)
+    if (localProviders.length === 0) {
+      await syncProvidersFromConvex();
+      const afterSync = await getConnectedProviders();
+      if (afterSync.length === 0 && ctx.hasUI) {
+        ctx.ui.notify(
+          "No AI provider connected. Connect one at Settings → Providers in the web app, or use /login here.",
+          "warning",
+        );
+      }
     }
   });
 
-  // Sync provider status to Convex after bridge is up
-  pi.on("agent_end", async (_event, ctx) => {
-    // After first agent interaction, sync provider info to Convex
-    // This runs once per session via a simple flag
+  // Sync provider credentials to Convex after first agent interaction
+  pi.on("agent_end", async (_event, _ctx) => {
     if ((pi as any).__providersSynced) return;
     (pi as any).__providersSynced = true;
 
     const providers = await getConnectedProviders();
     if (providers.length === 0) return;
 
-    // Sync via bridge if configured
+    // Also sync credentials to Convex for sandbox injection
     try {
       const { existsSync, readFileSync } = await import("node:fs");
       const { join } = await import("node:path");
       const { homedir } = await import("node:os");
+      const authPath = join(homedir(), ".pi", "agent", "auth.json");
       const configPath = join(homedir(), ".abbie", "config.json");
-      if (!existsSync(configPath)) return;
+      if (!existsSync(configPath) || !existsSync(authPath)) return;
       const config = JSON.parse(readFileSync(configPath, "utf8"));
       const convexUrl = config.convexUrl || process.env.NEXT_PUBLIC_CONVEX_URL;
       const bridgeSecret = config.bridgeSecret || process.env.ABBIE_BRIDGE_SECRET;
       if (!convexUrl || !bridgeSecret) return;
 
-      // POST provider list to bridge (no credentials, just IDs)
-      await fetch(`${convexUrl.replace('.convex.cloud', '.convex.site')}/bridge/providers/sync`, {
-        method: "POST",
-        headers: {
-          "Content-Type": "application/json",
-          "Authorization": `Bearer ${bridgeSecret}`,
-        },
-        body: JSON.stringify({ providers }),
-      }).catch(() => {}); // best-effort
+      const siteUrl = convexUrl.replace('.convex.cloud', '.convex.site');
+      const authData = JSON.parse(readFileSync(authPath, "utf8"));
+
+      // Sync each provider's credentials
+      for (const providerId of providers) {
+        const cred = authData[providerId];
+        if (!cred?.access || !cred?.refresh) continue;
+
+        await fetch(`${siteUrl}/bridge/providers/complete`, {
+          method: "POST",
+          headers: {
+            "Content-Type": "application/json",
+            "x-bridge-secret": bridgeSecret,
+          },
+          body: JSON.stringify({
+            // Use a synthetic request ID (the endpoint handles upserts)
+            requestId: null,
+            accessToken: cred.access,
+            refreshToken: cred.refresh,
+            expiresAt: cred.expires || Date.now() + 3600_000,
+            provider: providerId,
+          }),
+        }).catch(() => {}); // best-effort
+      }
     } catch { /* non-fatal */ }
   });
 
+  /**
+   * Pull provider credentials from Convex and write to local auth.json.
+   * Used on fresh installs where user connected via web but auth.json is empty.
+   */
+  async function syncProvidersFromConvex(): Promise<void> {
+    try {
+      const { existsSync, readFileSync, writeFileSync, mkdirSync, chmodSync } = await import("node:fs");
+      const { join } = await import("node:path");
+      const { homedir } = await import("node:os");
+
+      const configPath = join(homedir(), ".abbie", "config.json");
+      if (!existsSync(configPath)) return;
+      const config = JSON.parse(readFileSync(configPath, "utf8"));
+      const convexUrl = config.convexUrl || process.env.NEXT_PUBLIC_CONVEX_URL;
+      const bridgeSecret = config.bridgeSecret || process.env.ABBIE_BRIDGE_SECRET;
+      if (!convexUrl || !bridgeSecret) return;
+
+      // TODO: Add a bridge endpoint that returns stored credentials
+      // For now, the bridge handles credential sync via the poll loop
+    } catch { /* non-fatal */ }
+  }
+
   // ===========================================================================
   // Auto-bridge: start bridge daemon on Pi startup
   // ===========================================================================

package/oclif.manifest.json

@@ -11672,5 +11672,5 @@
       "summary": "Watch workspace windows (tmux panes) and stream updates"
     }
   },
-  "version": "0.1.2"
+  "version": "0.1.4"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@creativeintelligence/abbie",
-  "version": "0.1.2",
+  "version": "0.1.4",
   "type": "module",
   "license": "MIT",
   "description": "Abbie — agent orchestration CLI",
@@ -86,11 +86,13 @@
     "@oclif/core": "^4",
     "@oclif/plugin-help": "^6",
     "@oclif/plugin-not-found": "^3",
-    "@lnittman/convex-encryption": "^0.1.0",
-    "@lnittman/icons": "^0.3.0",
     "convex": "^1.31.6",
     "tar-fs": "^3"
   },
+  "optionalDependencies": {
+    "@lnittman/convex-encryption": "^0.1.0",
+    "@lnittman/icons": "^0.3.0"
+  },
   "devDependencies": {
     "@lnittman/config": "^0.1.1",
     "@types/bun": "^1",