@hypersocial/decks-cli 0.1.4 → 0.1.6

package/README.md

@@ -61,7 +61,7 @@ share rm <token>
 share url <token>
 
 recipient archive|unarchive <name>
-skills install [--agent codex,claude-code] [--project]
+skills install [--agent codex,claude-code] [--all-agents]
 activity [--deck <slug>] [--limit <n>] [--json]
 ```
 
@@ -76,3 +76,6 @@ Use dev only for local implementation/testing:
 decks --dev --convex https://your-dev.convex.cloud --broker https://decks.localhost whoami
 HSDECKS_PROD=0 HSDECKS_CONVEX_URL=https://your-dev.convex.cloud HSDECKS_BROKER_BASE=https://decks.localhost decks whoami
 ```
+
+Legacy unauthenticated dev access is available with `--admin` or
+`HSDECKS_ADMIN=1`. It is rejected for production.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hypersocial/decks-cli",
-  "version": "0.1.4",
+  "version": "0.1.6",
   "description": "Command-line client for Hypersocial Decks live analytics and share management.",
   "type": "module",
   "main": "./src/commands.mjs",

package/src/commands.mjs

@@ -155,14 +155,15 @@ commands:
   deck list|stats|open
   share new|list|on|off|rm|url
   recipient archive|unarchive
-  skill install [--agent codex,claude-code] [--project]
-  skills install [--agent codex,claude-code] [--project]
+  skill install [--agent codex,claude-code] [--all-agents]
+  skills install [--agent codex,claude-code] [--all-agents]
   activity [--deck <slug>] [--limit <n>] [--json]
 
 global:
   --json
   --prod        production target (default)
   --dev         development target (requires Convex URL)
+  --admin       legacy unauthenticated dev access
   --broker URL  override auth broker URL
 `);
 }
@@ -195,8 +196,8 @@ export async function runCli(argv = process.argv.slice(2)) {
     "share url": () => shareUrl(rest, opts),
     "recipient archive": () => recipientArchive(rest, opts, true),
     "recipient unarchive": () => recipientArchive(rest, opts, false),
-    "skill install": () => installHyperdecksSkill(opts),
-    "skills install": () => installHyperdecksSkill(opts),
+    "skill install": () => installHyperdecksSkill(opts, rest),
+    "skills install": () => installHyperdecksSkill(opts, rest),
     activity: () => activity(pos.slice(1), opts),
   };
 

package/src/runtime.mjs

@@ -8,7 +8,7 @@ import { fileURLToPath } from "node:url";
 import { ConvexHttpClient } from "convex/browser";
 import { makeFunctionReference } from "convex/server";
 
-export const VERSION = "0.1.4";
+export const VERSION = "0.1.6";
 
 export const PROD = {
   name: "prod",
@@ -38,7 +38,7 @@ export const api = {
   },
 };
 
-const BOOL = new Set(["prod", "dev", "json", "require-email", "help", "version", "all-agents", "global", "project"]);
+const BOOL = new Set(["prod", "dev", "admin", "json", "require-email", "help", "version", "all-agents", "global", "project"]);
 
 export const CRED_DIR = join(homedir(), ".config", "hypersocial-decks");
 export const CRED_FILE = join(CRED_DIR, "credentials.json");
@@ -53,7 +53,10 @@ export function parse(args) {
     if (a.startsWith("--")) {
       const k = a.slice(2);
       if (BOOL.has(k)) opts[k] = true;
-      else opts[k] = args[++i];
+      else {
+        const v = args[++i];
+        opts[k] = k === "agent" && opts[k] ? `${opts[k]},${v}` : v;
+      }
     } else {
       pos.push(a);
     }
@@ -79,11 +82,12 @@ export function target(opts = {}) {
   if (!convexUrl) {
     throw new Error("dev target needs --convex <url>, HSDECKS_CONVEX_URL, or CONVEX_URL");
   }
+  const brokerBase = normalizeBase(opts.broker || process.env.HSDECKS_BROKER_BASE || "http://localhost:3000");
   return {
     name: "dev",
     convexUrl,
-    brokerBase: normalizeBase(opts.broker || process.env.HSDECKS_BROKER_BASE || "http://localhost:3000"),
-    shareBase: normalizeBase(process.env.HSDECKS_SHARE_BASE || "https://decks.localhost"),
+    brokerBase,
+    shareBase: normalizeBase(process.env.HSDECKS_SHARE_BASE || brokerBase),
   };
 }
 
@@ -156,9 +160,17 @@ async function jwtFor(brokerBase, refreshToken) {
 export async function client(opts = {}) {
   const t = target(opts);
   const c = new ConvexHttpClient(t.convexUrl);
+  const admin = opts.admin || process.env.HSDECKS_ADMIN === "1";
+  if (admin) {
+    if (t.name === "prod") throw new Error("legacy --admin is dev-only; run `decks login` for prod");
+    return c;
+  }
   const refreshToken = resolveRefreshToken(t, opts);
   if (!refreshToken) {
-    throw new Error(`not authenticated for ${t.name} - run \`decks login${t.name === "dev" ? " --dev" : ""}\``);
+    throw new Error(
+      `not authenticated for ${t.name} - run \`decks login${t.name === "dev" ? " --dev" : ""}\`` +
+        (t.name === "dev" ? " (or pass --admin for legacy unauthenticated dev access)" : ""),
+    );
   }
   c.setAuth(await jwtFor(t.brokerBase, refreshToken));
   return c;
@@ -170,20 +182,32 @@ export function openBrowser(url) {
   execFile(cmd, args, () => {});
 }
 
-export function installHyperdecksSkill(opts = {}) {
+function splitAgents(value) {
+  return String(value || "").split(/[,\s]+/).filter(Boolean);
+}
+
+export function installHyperdecksSkill(opts = {}, extraArgs = []) {
   const skillDir = join(PACKAGED_SKILLS_DIR, "hyperdecks");
   if (!existsSync(skillDir)) {
     throw new Error(`packaged hyperdecks skill not found at ${skillDir}`);
   }
   if (opts.path || opts.dir) {
-    throw new Error("skills install now uses `npx skills add`; use --agent/--project instead of --path");
+    throw new Error("skills install now uses `npx skills add`; use --agent instead of --path");
+  }
+  if (opts.project) {
+    throw new Error("project-local skill installs are not supported yet; use the default global install");
+  }
+  if (opts["all-agents"] && (opts.agent || extraArgs.length)) {
+    throw new Error("use either --all-agents or --agent, not both");
+  }
+  if (!opts.agent && extraArgs.length) {
+    throw new Error(`unexpected argument(s): ${extraArgs.join(" ")}; pass agent ids with --agent`);
   }
 
   const agents = opts["all-agents"]
     ? ["*"]
-    : String(opts.agent || "codex,claude-code").split(/[,\s]+/).filter(Boolean);
-  const args = ["-y", "skills@latest", "add", PACKAGED_SKILLS_DIR];
-  if (!opts.project) args.push("-g");
+    : [...splitAgents(opts.agent || "codex,claude-code"), ...extraArgs.flatMap(splitAgents)];
+  const args = ["-y", "skills@latest", "add", PACKAGED_SKILLS_DIR, "-g"];
   args.push("-a", ...agents, "-s", "hyperdecks", "--copy", "-y", "--full-depth");
 
   const command = process.platform === "win32" ? "npx.cmd" : "npx";
@@ -229,7 +253,8 @@ export async function login(opts) {
       done = true;
       clearTimeout(timer);
       server.close();
-      err ? reject(err) : resolve();
+      if (err) reject(err);
+      else resolve();
     };
 
     server = createServer((req, res) => {