@hypersocial/decks-cli 0.1.3 → 0.1.5

package/README.md

@@ -61,7 +61,7 @@ share rm <token>
 share url <token>
 
 recipient archive|unarchive <name>
-skills install [--path <dir>] [--force]
+skills install [--agent codex,claude-code] [--all-agents]
 activity [--deck <slug>] [--limit <n>] [--json]
 ```
 
@@ -76,3 +76,6 @@ Use dev only for local implementation/testing:
 decks --dev --convex https://your-dev.convex.cloud --broker https://decks.localhost whoami
 HSDECKS_PROD=0 HSDECKS_CONVEX_URL=https://your-dev.convex.cloud HSDECKS_BROKER_BASE=https://decks.localhost decks whoami
 ```
+
+Legacy unauthenticated dev access is available with `--admin` or
+`HSDECKS_ADMIN=1`. It is rejected for production.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hypersocial/decks-cli",
-  "version": "0.1.3",
+  "version": "0.1.5",
   "description": "Command-line client for Hypersocial Decks live analytics and share management.",
   "type": "module",
   "main": "./src/commands.mjs",

package/src/commands.mjs

@@ -155,14 +155,15 @@ commands:
   deck list|stats|open
   share new|list|on|off|rm|url
   recipient archive|unarchive
-  skill install [--path <dir>] [--force]
-  skills install [--path <dir>] [--force]
+  skill install [--agent codex,claude-code] [--all-agents]
+  skills install [--agent codex,claude-code] [--all-agents]
   activity [--deck <slug>] [--limit <n>] [--json]
 
 global:
   --json
   --prod        production target (default)
   --dev         development target (requires Convex URL)
+  --admin       legacy unauthenticated dev access
   --broker URL  override auth broker URL
 `);
 }
@@ -195,8 +196,8 @@ export async function runCli(argv = process.argv.slice(2)) {
     "share url": () => shareUrl(rest, opts),
     "recipient archive": () => recipientArchive(rest, opts, true),
     "recipient unarchive": () => recipientArchive(rest, opts, false),
-    "skill install": () => installHyperdecksSkill(opts),
-    "skills install": () => installHyperdecksSkill(opts),
+    "skill install": () => installHyperdecksSkill(opts, rest),
+    "skills install": () => installHyperdecksSkill(opts, rest),
     activity: () => activity(pos.slice(1), opts),
   };
 

package/src/runtime.mjs

@@ -1,14 +1,14 @@
-import { execFile } from "node:child_process";
+import { execFile, spawnSync } from "node:child_process";
 import { createHash, randomBytes } from "node:crypto";
 import { createServer } from "node:http";
-import { cpSync, existsSync, mkdirSync, readFileSync, rmSync, writeFileSync } from "node:fs";
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
 import { homedir } from "node:os";
 import { dirname, join } from "node:path";
 import { fileURLToPath } from "node:url";
 import { ConvexHttpClient } from "convex/browser";
 import { makeFunctionReference } from "convex/server";
 
-export const VERSION = "0.1.3";
+export const VERSION = "0.1.5";
 
 export const PROD = {
   name: "prod",
@@ -38,12 +38,12 @@ export const api = {
   },
 };
 
-const BOOL = new Set(["prod", "dev", "json", "require-email", "help", "version", "force"]);
+const BOOL = new Set(["prod", "dev", "admin", "json", "require-email", "help", "version", "all-agents", "global", "project"]);
 
 export const CRED_DIR = join(homedir(), ".config", "hypersocial-decks");
 export const CRED_FILE = join(CRED_DIR, "credentials.json");
 const SRC_DIR = dirname(fileURLToPath(import.meta.url));
-const PACKAGED_SKILL_DIR = join(SRC_DIR, "..", "skills", "hyperdecks");
+const PACKAGED_SKILLS_DIR = join(SRC_DIR, "..", "skills");
 
 export function parse(args) {
   const opts = {};
@@ -53,7 +53,10 @@ export function parse(args) {
     if (a.startsWith("--")) {
       const k = a.slice(2);
       if (BOOL.has(k)) opts[k] = true;
-      else opts[k] = args[++i];
+      else {
+        const v = args[++i];
+        opts[k] = k === "agent" && opts[k] ? `${opts[k]},${v}` : v;
+      }
     } else {
       pos.push(a);
     }
@@ -79,11 +82,12 @@ export function target(opts = {}) {
   if (!convexUrl) {
     throw new Error("dev target needs --convex <url>, HSDECKS_CONVEX_URL, or CONVEX_URL");
   }
+  const brokerBase = normalizeBase(opts.broker || process.env.HSDECKS_BROKER_BASE || "http://localhost:3000");
   return {
     name: "dev",
     convexUrl,
-    brokerBase: normalizeBase(opts.broker || process.env.HSDECKS_BROKER_BASE || "http://localhost:3000"),
-    shareBase: normalizeBase(process.env.HSDECKS_SHARE_BASE || "https://decks.localhost"),
+    brokerBase,
+    shareBase: normalizeBase(process.env.HSDECKS_SHARE_BASE || brokerBase),
   };
 }
 
@@ -156,9 +160,17 @@ async function jwtFor(brokerBase, refreshToken) {
 export async function client(opts = {}) {
   const t = target(opts);
   const c = new ConvexHttpClient(t.convexUrl);
+  const admin = opts.admin || process.env.HSDECKS_ADMIN === "1";
+  if (admin) {
+    if (t.name === "prod") throw new Error("legacy --admin is dev-only; run `decks login` for prod");
+    return c;
+  }
   const refreshToken = resolveRefreshToken(t, opts);
   if (!refreshToken) {
-    throw new Error(`not authenticated for ${t.name} - run \`decks login${t.name === "dev" ? " --dev" : ""}\``);
+    throw new Error(
+      `not authenticated for ${t.name} - run \`decks login${t.name === "dev" ? " --dev" : ""}\`` +
+        (t.name === "dev" ? " (or pass --admin for legacy unauthenticated dev access)" : ""),
+    );
   }
   c.setAuth(await jwtFor(t.brokerBase, refreshToken));
   return c;
@@ -170,29 +182,41 @@ export function openBrowser(url) {
   execFile(cmd, args, () => {});
 }
 
-export function defaultSkillRoot() {
-  return process.env.CODEX_HOME ? join(process.env.CODEX_HOME, "skills") : join(homedir(), ".codex", "skills");
+function splitAgents(value) {
+  return String(value || "").split(/[,\s]+/).filter(Boolean);
 }
 
-export function installHyperdecksSkill(opts = {}) {
-  const root = opts.path || opts.dir || defaultSkillRoot();
-  const dest = join(root, "hyperdecks");
-  if (!existsSync(PACKAGED_SKILL_DIR)) {
-    throw new Error(`packaged hyperdecks skill not found at ${PACKAGED_SKILL_DIR}`);
+export function installHyperdecksSkill(opts = {}, extraArgs = []) {
+  const skillDir = join(PACKAGED_SKILLS_DIR, "hyperdecks");
+  if (!existsSync(skillDir)) {
+    throw new Error(`packaged hyperdecks skill not found at ${skillDir}`);
   }
-  if (existsSync(dest)) {
-    if (!opts.force) {
-      console.log(`hyperdecks skill already installed at ${dest}`);
-      console.log("Run `hyperdecks skills install --force` to refresh it.");
-      return { installed: false, path: dest };
-    }
-    rmSync(dest, { recursive: true, force: true });
+  if (opts.path || opts.dir) {
+    throw new Error("skills install now uses `npx skills add`; use --agent instead of --path");
+  }
+  if (opts.project) {
+    throw new Error("project-local skill installs are not supported yet; use the default global install");
+  }
+  if (opts["all-agents"] && (opts.agent || extraArgs.length)) {
+    throw new Error("use either --all-agents or --agent, not both");
+  }
+  if (!opts.agent && extraArgs.length) {
+    throw new Error(`unexpected argument(s): ${extraArgs.join(" ")}; pass agent ids with --agent`);
+  }
+
+  const agents = opts["all-agents"]
+    ? ["*"]
+    : [...splitAgents(opts.agent || "codex,claude-code"), ...extraArgs.flatMap(splitAgents)];
+  const args = ["-y", "skills@latest", "add", PACKAGED_SKILLS_DIR, "-g"];
+  args.push("-a", ...agents, "-s", "hyperdecks", "--copy", "-y", "--full-depth");
+
+  const command = process.platform === "win32" ? "npx.cmd" : "npx";
+  const result = spawnSync(command, args, { stdio: "inherit" });
+  if (result.error) throw result.error;
+  if (result.status !== 0) {
+    throw new Error(`skills add failed with exit code ${result.status}`);
   }
-  mkdirSync(root, { recursive: true });
-  cpSync(PACKAGED_SKILL_DIR, dest, { recursive: true });
-  console.log(`OK installed hyperdecks skill to ${dest}`);
-  console.log("Restart Codex or start a new session if the skill list is already loaded.");
-  return { installed: true, path: dest };
+  return { installed: true };
 }
 
 async function verifyAndStampEmail(t, opts) {