@insitue/claude-plugin 0.6.3 → 0.7.1

package/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "insitue",
-  "version": "0.5.3",
+  "version": "0.6.1",
   "description": "Drive a Claude Code session from the InSitue browser overlay. Pick an element in your app, claude reads the file and proposes the edit.",
   "mcpServers": {
     "insitue": {
@@ -11,5 +11,10 @@
       ],
       "cwd": "${CLAUDE_PROJECT_DIR}"
     }
-  }
+  },
+  "channels": [
+    {
+      "server": "insitue"
+    }
+  ]
 }

package/CHANGELOG.md

@@ -1,5 +1,13 @@
 # @insitue/claude-plugin
 
+## 0.7.1
+
+- **`/insitue:logout`.** New slash command (+ `logout` MCP tool + `npx @insitue/claude-plugin logout` CLI) that signs you out properly: it revokes this machine's token server-side, then clears the local credentials (`~/.insitue/auth.json`). Revoke is best-effort — your local creds are always cleared even if the network call fails. Pairs with the existing `/insitue:login`.
+
+## 0.7.0
+
+- **Live picks without blocking the chat (channels, opt-in preview).** The MCP server now also PUSHES each pick as a Claude Code channel event (`notifications/claude/channel`). Start your session with `claude --dangerously-load-development-channels --channels plugin:insitue` and picks wake the idle agent instead of you waiting on a poll — the chat stays free for conversation the rest of the time. Plain `claude` + `/insitue:connect` is unchanged (8s poll fallback). The agent de-dupes by pick id, so the push + poll paths never double-handle a pick. Channels are a Claude Code research-preview feature (CLI-only); the flag is required during the preview.
+
 ## 0.6.3
 
 - **Responsive watch — interject without cancelling.** The `next_pick` long-poll is now 8s (was 25s). While the watch is running you can just type a message: Claude Code queues it and delivers it the moment the poll returns (≤~8s), so you no longer have to cancel the watch to ask a question. The connect instructions now make clear the watch never needs to be cancelled to talk — Claude answers and resumes watching.

package/README.md

@@ -177,6 +177,35 @@ before writing. After it writes, your dev server's HMR picks up
 the change and you see it live in the browser. Pick the next
 thing.
 
+### Live picks without blocking the chat (channels, preview)
+
+By default the agent polls `next_pick` every ~8 s — the chat is
+technically available between polls, but the polling loop runs
+continuously in the background.
+
+As an opt-in upgrade (Claude Code CLI only, research preview),
+you can have picks **pushed** directly into the session so the
+chat stays completely free between picks:
+
+```bash
+claude --dangerously-load-development-channels --channels plugin:insitue
+```
+
+With this flag, every pick the user sends from the browser wakes
+Claude immediately via a channel notification — no polling needed,
+and the chat is genuinely idle between picks. Claude still buffers
+picks for `next_pick` in parallel, so a stale session or a missing
+channel listener falls back to the normal poll automatically.
+
+**Notes:**
+- This is a **Claude Code research-preview** feature. The flag
+  `--dangerously-load-development-channels` is required during the
+  preview period and may change or be renamed in a future release.
+- It works only with the CLI (`claude`), not Claude Desktop.
+- The standard `/insitue:connect` workflow (plain `claude`, no
+  extra flags) continues to work exactly as before via polling —
+  channels are purely an opt-in upgrade, not a requirement.
+
 ---
 
 ## What gets shipped to claude

package/commands/connect.md

@@ -25,6 +25,40 @@ that means:
     `read_file` tools exposed by this same MCP server
 Either path is fine; pick whichever your runtime has.
 
+## Pick delivery modes and idempotency
+
+Picks can reach you in one of two ways depending on how `claude`
+was started. **Act on each pick `id` exactly once** regardless of
+which path delivered it — the server always does both, so
+double-delivery is possible and you must de-dupe by `id`.
+
+### Push mode (channels — opt-in, Claude Code only)
+
+If the user started Claude Code with channel support
+(`claude --dangerously-load-development-channels --channels plugin:insitue`),
+picks are PUSHED into this session as
+`<channel source="insitue">…</channel>` events. Each event
+contains the pick's `id`, `userNote`, `source file:line`,
+`confidence`, and URL — everything you need to act.
+
+**In push mode you do NOT need to loop `next_pick`.** Stay idle
+between picks so the user can chat freely. Each pushed pick wakes
+you; handle it exactly like a `next_pick` pick (echo the request,
+read the file, propose the edit, etc.), then go idle again.
+
+### Poll mode (plain `claude` — default)
+
+If no `<channel>` pick events arrive, you are in poll mode. Loop
+`next_pick` as described in §2 below (default 8 s timeout). This
+is the same behaviour as before channels existed and requires no
+extra flags.
+
+### Don't double-handle
+
+If the same pick `id` arrives both via a channel event AND via
+`next_pick`, act on it exactly once. Keep a set of handled ids in
+your context and skip any id you've already processed.
+
 ## Your behaviour
 
 1. Call `mcp__insitue__list_recent_picks` once. If there are

package/commands/logout.md

@@ -0,0 +1,28 @@
+---
+description: Sign out of InSitue Cloud — revokes this machine's token and clears local credentials.
+---
+
+# /insitue:logout
+
+Signs you out of InSitue Cloud. Revokes this machine's token server-side
+and removes local credentials from `~/.insitue/auth.json`.
+Even if the server-side revoke fails (network issue, expired token), local
+credentials are always cleared.
+
+## Your behaviour
+
+1. Call `mcp__insitue__logout` (no arguments).
+
+2. On `{ status: "ok", revoked: true }`:
+   Reply in one line: "Signed out of InSitue."
+
+3. On `{ status: "ok", revoked: false }`:
+   Reply in one line: "Signed out of InSitue. (Token revoke skipped — no token was stored or the server was unreachable, but local credentials have been cleared.)"
+
+4. On any unexpected error: relay the `message` field and suggest running
+   `/insitue:logout` again or clearing `~/.insitue/auth.json` manually.
+
+## Notes
+
+- Logout always clears local credentials, even when the network revoke fails.
+- To sign back in, run `/insitue:login`.

package/dist/{chunk-B3HSTDGI.js → chunk-EDGPZTOV.js}

@@ -40,6 +40,21 @@ function saveAuth(patch) {
     mode: 384
   });
 }
+function clearAuth() {
+  const p = join(homedir(), ".insitue", "auth.json");
+  if (!existsSync(p)) return;
+  let existing = {};
+  try {
+    existing = JSON.parse(readFileSync(p, "utf8"));
+  } catch {
+  }
+  const cleared = {};
+  if (existing.host) cleared.host = existing.host;
+  writeFileSync(p, JSON.stringify(cleared, null, 2) + "\n", {
+    encoding: "utf8",
+    mode: 384
+  });
+}
 function saveProjectLink(projectDir, projectId) {
   const dir = join(projectDir, ".insitue");
   mkdirSync(dir, { recursive: true });
@@ -55,5 +70,6 @@ export {
   loadProjectId,
   resolveHost,
   saveAuth,
+  clearAuth,
   saveProjectLink
 };

package/dist/{chunk-IRPBZWNQ.js → chunk-ESW573VH.js}

@@ -56,11 +56,18 @@ var releaseIssue = (host, token, id) => call(
   "POST",
   `/api/v1/dev/issues/${encodeURIComponent(id)}/release`
 );
+var revokeToken = (host, token) => call(
+  host,
+  token,
+  "POST",
+  `/api/v1/dev/token/revoke`
+);
 
 export {
   CloudApiError,
   listIssues,
   claimIssue,
   resolveIssue,
-  releaseIssue
+  releaseIssue,
+  revokeToken
 };

package/dist/{chunk-KGRPDRYH.js → chunk-ZLNSDVTY.js}

@@ -1,7 +1,7 @@
 import {
   loadAuth,
   loadProjectId
-} from "./chunk-B3HSTDGI.js";
+} from "./chunk-EDGPZTOV.js";
 
 // src/diagnose.ts
 import { existsSync, readdirSync, readFileSync, statSync } from "fs";

package/dist/cloud/api.js

@@ -3,12 +3,14 @@ import {
   claimIssue,
   listIssues,
   releaseIssue,
-  resolveIssue
-} from "../chunk-IRPBZWNQ.js";
+  resolveIssue,
+  revokeToken
+} from "../chunk-ESW573VH.js";
 export {
   CloudApiError,
   claimIssue,
   listIssues,
   releaseIssue,
-  resolveIssue
+  resolveIssue,
+  revokeToken
 };

package/dist/cloud/config.js

@@ -1,11 +1,13 @@
 import {
+  clearAuth,
   loadAuth,
   loadProjectId,
   resolveHost,
   saveAuth,
   saveProjectLink
-} from "../chunk-B3HSTDGI.js";
+} from "../chunk-EDGPZTOV.js";
 export {
+  clearAuth,
   loadAuth,
   loadProjectId,
   resolveHost,

package/dist/cloud-cli.js

@@ -2,12 +2,16 @@ import {
   resolveProjectDir
 } from "./chunk-UNMH2DN4.js";
 import {
+  revokeToken
+} from "./chunk-ESW573VH.js";
+import {
+  clearAuth,
   loadAuth,
   loadProjectId,
   resolveHost,
   saveAuth,
   saveProjectLink
-} from "./chunk-B3HSTDGI.js";
+} from "./chunk-EDGPZTOV.js";
 import {
   detectGitRemote,
   pickProjectIdForRepo,
@@ -182,6 +186,18 @@ Run: npx @insitue/claude-plugin link <projectId>
   }
   return 1;
 }
+async function cmdLogout() {
+  const auth = loadAuth();
+  if (auth.token) {
+    try {
+      await revokeToken(resolveHost(auth), auth.token);
+    } catch {
+    }
+  }
+  clearAuth();
+  process.stdout.write("Signed out of InSitue.\n");
+  return 0;
+}
 function cmdWhoami() {
   const auth = loadAuth();
   const projectDir = resolveProjectDir();
@@ -200,5 +216,6 @@ Project: ${projectId ?? "(not linked)"}
 export {
   cmdLink,
   cmdLogin,
+  cmdLogout,
   cmdWhoami
 };

package/dist/diagnose.js

@@ -1,7 +1,7 @@
 import {
   diagnose
-} from "./chunk-KGRPDRYH.js";
-import "./chunk-B3HSTDGI.js";
+} from "./chunk-ZLNSDVTY.js";
+import "./chunk-EDGPZTOV.js";
 export {
   diagnose
 };

package/dist/dispatcher.js

@@ -2,12 +2,12 @@
 
 // src/dispatcher.ts
 var CLI_SUBCOMMANDS = /* @__PURE__ */ new Set(["setup", "diagnose", "help", "--help", "-h"]);
-var CLOUD_SUBCOMMANDS = /* @__PURE__ */ new Set(["login", "link", "whoami"]);
+var CLOUD_SUBCOMMANDS = /* @__PURE__ */ new Set(["login", "link", "whoami", "logout"]);
 var first = process.argv[2];
 if (first && CLI_SUBCOMMANDS.has(first)) {
   await import("./setup-cli.js");
 } else if (first && CLOUD_SUBCOMMANDS.has(first)) {
-  const { cmdLogin, cmdLink, cmdWhoami } = await import("./cloud-cli.js");
+  const { cmdLogin, cmdLink, cmdWhoami, cmdLogout } = await import("./cloud-cli.js");
   const rest = process.argv.slice(3);
   let code;
   switch (first) {
@@ -20,6 +20,9 @@ if (first && CLI_SUBCOMMANDS.has(first)) {
     case "whoami":
       code = cmdWhoami();
       break;
+    case "logout":
+      code = await cmdLogout();
+      break;
     default:
       code = 0;
   }

package/dist/mcp-server.js

@@ -5,21 +5,23 @@ import {
 } from "./chunk-UNMH2DN4.js";
 import {
   diagnose
-} from "./chunk-KGRPDRYH.js";
+} from "./chunk-ZLNSDVTY.js";
 import {
   CloudApiError,
   claimIssue,
   listIssues,
   releaseIssue,
-  resolveIssue
-} from "./chunk-IRPBZWNQ.js";
+  resolveIssue,
+  revokeToken
+} from "./chunk-ESW573VH.js";
 import {
+  clearAuth,
   loadAuth,
   loadProjectId,
   resolveHost,
   saveAuth,
   saveProjectLink
-} from "./chunk-B3HSTDGI.js";
+} from "./chunk-EDGPZTOV.js";
 import {
   detectGitRemote,
   pickProjectIdForRepo,
@@ -501,6 +503,25 @@ function connectToCompanion(s) {
               `[insitue] \u{1F4E5} pick received \u2014 "${note}" @ ${where}
 `
             );
+            try {
+              const channelContent = `InSitue pick ready (id: ${summary.id})
+Note: ${summary.userNote ?? "(no description)"}
+Source: ${summary.source ? `${summary.source.file}:${summary.source.line ?? "?"}` : "(unknown)"}
+Confidence: ${summary.confidence}
+` + (summary.url ? `URL: ${summary.url}
+` : "");
+              void server.server.notification(
+                {
+                  method: "notifications/claude/channel",
+                  params: {
+                    content: channelContent,
+                    meta: { pick_id: summary.id }
+                  }
+                }
+              ).catch(() => {
+              });
+            } catch {
+            }
           } catch (err) {
             process.stderr.write(
               `[insitue-mcp] dropped malformed pick: ${err.message}
@@ -590,10 +611,21 @@ function endSession() {
   session = null;
   return { closedWs, killedCompanion, removedSessionFile };
 }
-var server = new McpServer({
-  name: "insitue",
-  version: readPackageVersion()
-});
+var server = new McpServer(
+  {
+    name: "insitue",
+    version: readPackageVersion()
+  },
+  {
+    capabilities: {
+      // Declare the Claude Code "channel" experimental capability so the
+      // MCP server is permitted to emit notifications/claude/channel events.
+      // Claude Code checks for this key during its research-preview channel
+      // handshake; without it the push notification is silently dropped.
+      experimental: { "claude/channel": {} }
+    }
+  }
+);
 server.registerTool(
   "next_pick",
   {
@@ -898,6 +930,37 @@ server.registerTool(
     }
   }
 );
+server.registerTool(
+  "logout",
+  {
+    description: "Sign out of InSitue Cloud: best-effort revoke this machine's token server-side, then clear local credentials. Logout always clears local creds even if the revoke call fails (network error, 4xx, etc.).",
+    inputSchema: {}
+  },
+  async () => {
+    const cfg = loadAuth();
+    let revoked = false;
+    if (cfg.token) {
+      try {
+        await revokeToken(resolveHost(cfg), cfg.token);
+        revoked = true;
+      } catch {
+      }
+    }
+    clearAuth();
+    return {
+      content: [
+        {
+          type: "text",
+          text: JSON.stringify({
+            status: "ok",
+            revoked,
+            message: "Signed out of InSitue."
+          })
+        }
+      ]
+    };
+  }
+);
 function cloudSetup() {
   const auth = loadAuth();
   if (!auth.token) {
@@ -1132,6 +1195,30 @@ Show the user the returned URL and userCode, then call
 \`mcp__insitue__complete_authentication\` once they approve in the browser.
 Confirm the result with "Signed in as <login>" and linked project if any.`;
 }
+server.registerPrompt(
+  "logout",
+  {
+    title: "Sign out of InSitue",
+    description: "Sign out of InSitue Cloud \u2014 revokes this machine's token and clears local credentials."
+  },
+  () => ({
+    messages: [
+      {
+        role: "user",
+        content: {
+          type: "text",
+          text: readPkgFile("commands/logout.md") ?? logoutInstructions()
+        }
+      }
+    ]
+  })
+);
+function logoutInstructions() {
+  return `# Sign out of InSitue
+
+Call \`mcp__insitue__logout\` (no arguments).
+Confirm the result in one line, e.g. "Signed out of InSitue." or relay any error message.`;
+}
 function readPkgFile(rel) {
   const here = dirname3(fileURLToPath2(import.meta.url));
   for (const base of [join3(here, ".."), here]) {

package/dist/setup-cli.js

@@ -4,8 +4,8 @@ import {
 } from "./chunk-UNMH2DN4.js";
 import {
   diagnose
-} from "./chunk-KGRPDRYH.js";
-import "./chunk-B3HSTDGI.js";
+} from "./chunk-ZLNSDVTY.js";
+import "./chunk-EDGPZTOV.js";
 
 // src/setup-cli.ts
 import {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@insitue/claude-plugin",
-  "version": "0.6.3",
+  "version": "0.7.1",
   "description": "Drive Claude (Code AND Desktop) from the InSitue browser overlay — pick an element in your app, claude reads the file and proposes the edit.",
   "keywords": [
     "insitue",