@ivotoby/postgram-cli 0.1.0 → 1.0.4

package/dist/src/client.js

@@ -43,8 +43,13 @@ export function createPgmClient(options) {
                 body: input
             });
         },
-        recallEntity(id) {
-            return request(options, `/api/entities/${id}`);
+        recallEntity(id, input = {}) {
+            const params = new URLSearchParams();
+            if (input.owner) {
+                params.set('owner', input.owner);
+            }
+            const query = params.toString();
+            return request(options, `/api/entities/${id}${query ? `?${query}` : ''}`);
         },
         searchEntities(input) {
             return request(options, '/api/search', {
@@ -74,6 +79,9 @@ export function createPgmClient(options) {
             if (input.visibility) {
                 params.set('visibility', input.visibility);
             }
+            if (input.owner) {
+                params.set('owner', input.owner);
+            }
             if (input.tags?.length) {
                 params.set('tags', input.tags.join(','));
             }
@@ -146,6 +154,8 @@ export function createPgmClient(options) {
                 qs.set('relation', params.relation);
             if (params.direction)
                 qs.set('direction', params.direction);
+            if (params.owner)
+                qs.set('owner', params.owner);
             const query = qs.toString();
             return request(options, `/api/entities/${entityId}/edges${query ? `?${query}` : ''}`);
         },
@@ -155,6 +165,8 @@ export function createPgmClient(options) {
                 qs.set('depth', String(params.depth));
             if (params.relationTypes?.length)
                 qs.set('relation_types', params.relationTypes.join(','));
+            if (params.owner)
+                qs.set('owner', params.owner);
             const query = qs.toString();
             return request(options, `/api/entities/${entityId}/graph${query ? `?${query}` : ''}`);
         }

package/dist/src/pgm.js

@@ -13,6 +13,7 @@ function formatStoredEntity(entity) {
     return [
         `${entity.type} ${shortId(entity.id)}${entity.status ? ` [${entity.status}]` : ''}`,
         `visibility: ${entity.visibility}`,
+        `owner: ${entity.owner ?? 'shared'}`,
         `tags: ${entity.tags.join(', ') || '-'}`,
         entity.content ? `content: ${entity.content}` : 'content: -'
     ];
@@ -190,10 +191,12 @@ program
     .option('--json', 'emit JSON output');
 program
     .command('store')
+    .alias('add')
     .description('Store an entity')
     .argument('[content]', 'entity content')
     .option('--type <type>', 'entity type', 'memory')
     .option('--visibility <visibility>', 'entity visibility', 'shared')
+    .option('--owner <owner>', 'entity owner or namespace')
     .option('--status <status>', 'entity status')
     .option('--tags <tags>', 'comma-separated tags')
     .option('--source <source>', 'entity source')
@@ -204,6 +207,7 @@ program
             type: options.type,
             content: await resolveStoreContent(content),
             visibility: options.visibility,
+            owner: options.owner,
             status: options.status,
             tags: parseCommaList(options.tags),
             source: options.source,
@@ -217,6 +221,7 @@ program
                 content: body.entity.content,
                 status: body.entity.status,
                 visibility: body.entity.visibility,
+                owner: body.entity.owner,
                 tags: body.entity.tags
             });
     });
@@ -228,6 +233,7 @@ program
     .option('--type <type>', 'entity type')
     .option('--tags <tags>', 'comma-separated tags')
     .option('--visibility <visibility>', 'entity visibility filter')
+    .option('--owner <owner>', 'entity owner filter')
     .option('--limit <limit>', 'result limit', '10')
     .option('--threshold <threshold>', 'similarity threshold', '0.35')
     .option('--recency-weight <recencyWeight>', 'recency weight', '0.1')
@@ -238,6 +244,7 @@ program
             type: options.type,
             tags: parseCommaList(options.tags),
             visibility: options.visibility,
+            owner: options.owner,
             limit: Number(options.limit),
             threshold: Number(options.threshold),
             recency_weight: Number(options.recencyWeight)
@@ -249,9 +256,12 @@ program
     .command('recall')
     .description('Recall an entity by ID')
     .argument('id', 'entity ID')
-    .action(async (id, _options, command) => {
+    .option('--owner <owner>', 'entity owner filter')
+    .action(async (id, options, command) => {
     await runWithClient(command, async (client, json) => {
-        const body = await client.recallEntity(id);
+        const body = await client.recallEntity(id, {
+            owner: options.owner
+        });
         return json ? body : formatStoredEntity(body.entity);
     });
 });
@@ -261,6 +271,7 @@ program
     .option('--type <type>', 'filter by type')
     .option('--status <status>', 'filter by status')
     .option('--visibility <visibility>', 'filter by visibility')
+    .option('--owner <owner>', 'filter by owner')
     .option('--tags <tags>', 'comma-separated tags')
     .option('--limit <limit>', 'result limit', '50')
     .option('--offset <offset>', 'result offset', '0')
@@ -270,6 +281,7 @@ program
             type: options.type,
             status: options.status,
             visibility: options.visibility,
+            owner: options.owner,
             tags: parseCommaList(options.tags),
             limit: Number(options.limit),
             offset: Number(options.offset)
@@ -288,7 +300,7 @@ program
                 : '-';
             return [
                 `${item.type} ${shortId(item.id)}  ${preview}`,
-                `  tags: ${item.tags.join(', ') || '-'} | ${item.visibility} | ${item.created_at.slice(0, 10)}`
+                `  tags: ${item.tags.join(', ') || '-'} | owner=${item.owner ?? 'shared'} | ${item.visibility} | ${item.created_at.slice(0, 10)}`
             ];
         });
         lines.push('');
@@ -377,6 +389,7 @@ taskCommand
                 content: body.entity.content,
                 status: body.entity.status,
                 visibility: body.entity.visibility,
+                owner: body.entity.owner,
                 tags: body.entity.tags
             });
     });
@@ -434,6 +447,7 @@ taskCommand
                 content: body.entity.content,
                 status: body.entity.status,
                 visibility: body.entity.visibility,
+                owner: body.entity.owner,
                 tags: body.entity.tags
             });
     });
@@ -457,6 +471,7 @@ taskCommand
                 content: body.entity.content,
                 status: body.entity.status,
                 visibility: body.entity.visibility,
+                owner: body.entity.owner,
                 tags: body.entity.tags
             });
     });
@@ -608,12 +623,14 @@ program
     .argument('<entity-id>', 'entity ID')
     .option('--depth <n>', 'traversal depth (1-3)', '1')
     .option('--relation <types>', 'comma-separated relation types')
+    .option('--owner <owner>', 'owner filter')
     .action(async (entityId, options, command) => {
     await runWithClient(command, async (client, json) => {
         const relationTypes = parseCommaList(options.relation);
         const body = await client.expandGraph(entityId, {
             depth: Number(options.depth),
-            ...(relationTypes !== undefined ? { relationTypes } : {})
+            ...(relationTypes !== undefined ? { relationTypes } : {}),
+            ...(options.owner !== undefined ? { owner: options.owner } : {})
         });
         if (json)
             return body;

package/dist/src/shared.js

@@ -1,3 +1,4 @@
+import { statSync } from 'node:fs';
 import { readFile } from 'node:fs/promises';
 import os from 'node:os';
 import path from 'node:path';
@@ -19,7 +20,13 @@ export function parseJsonObject(value, fallback = {}) {
     if (value === undefined) {
         return fallback;
     }
-    const parsed = JSON.parse(value);
+    let parsed;
+    try {
+        parsed = JSON.parse(value);
+    }
+    catch (error) {
+        throw new AppError(ErrorCode.VALIDATION, `Invalid JSON: ${error instanceof Error ? error.message : 'parse failed'}`);
+    }
     if (!parsed || typeof parsed !== 'object' || Array.isArray(parsed)) {
         throw new AppError(ErrorCode.VALIDATION, 'Metadata must be a JSON object');
     }
@@ -39,6 +46,7 @@ export async function readStdinText() {
         process.stdin.on('error', reject);
     });
 }
+const INSECURE_PGMRC_MODE_MASK = 0o077;
 function normalizeUrl(url) {
     return url.replace(/\/+$/, '');
 }
@@ -54,6 +62,10 @@ export async function resolvePgmConfig() {
     const rcPath = path.join(os.homedir(), '.pgmrc');
     try {
         const raw = await readFile(rcPath, 'utf8');
+        const fileStat = statSync(rcPath);
+        if ((fileStat.mode & INSECURE_PGMRC_MODE_MASK) !== 0) {
+            process.stderr.write("Warning: ~/.pgmrc is accessible by other users. Run 'chmod 600 ~/.pgmrc' to fix.\n");
+        }
         const parsed = JSON.parse(raw);
         if (!parsed.api_url || !parsed.api_key) {
             throw new Error('missing api_url or api_key');

package/package.json

@@ -1,13 +1,13 @@
 {
   "name": "@ivotoby/postgram-cli",
-  "version": "0.1.0",
+  "version": "1.0.4",
   "description": "Postgram CLI — store, search, and manage entities from the command line",
   "type": "module",
   "bin": {
     "pgm": "dist/src/pgm.js"
   },
   "files": [
-    "dist",
+    "dist/src",
     "README.md"
   ],
   "repository": {
@@ -45,6 +45,7 @@
     "@eslint/js": "^9.38.0",
     "@semantic-release/changelog": "^6.0.3",
     "@semantic-release/commit-analyzer": "^13.0.1",
+    "@semantic-release/exec": "^7.1.0",
     "@semantic-release/git": "^10.0.1",
     "@semantic-release/github": "^11.0.6",
     "@semantic-release/npm": "^12.0.2",

package/dist/tests/unit/errors.test.js

@@ -1,38 +0,0 @@
-import { describe, expect, it } from 'vitest';
-import { AppError, ErrorCode, toErrorResponse } from '../../src/errors.js';
-describe('AppError', () => {
-    it('creates an error with code and message', () => {
-        const error = new AppError(ErrorCode.VALIDATION, 'test message');
-        expect(error.code).toBe(ErrorCode.VALIDATION);
-        expect(error.message).toBe('test message');
-        expect(error.details).toEqual({});
-    });
-    it('creates an error with details', () => {
-        const error = new AppError(ErrorCode.INTERNAL, 'fail', { key: 'value' });
-        expect(error.details).toEqual({ key: 'value' });
-    });
-});
-describe('toErrorResponse', () => {
-    it('formats error response', () => {
-        const error = new AppError(ErrorCode.NOT_FOUND, 'missing', { id: 'abc' });
-        const response = toErrorResponse(error);
-        expect(response).toEqual({
-            error: {
-                code: 'NOT_FOUND',
-                message: 'missing',
-                details: { id: 'abc' }
-            }
-        });
-    });
-});
-describe('ErrorCode', () => {
-    it('contains all expected codes', () => {
-        expect(ErrorCode.VALIDATION).toBe('VALIDATION');
-        expect(ErrorCode.UNAUTHORIZED).toBe('UNAUTHORIZED');
-        expect(ErrorCode.FORBIDDEN).toBe('FORBIDDEN');
-        expect(ErrorCode.NOT_FOUND).toBe('NOT_FOUND');
-        expect(ErrorCode.CONFLICT).toBe('CONFLICT');
-        expect(ErrorCode.EMBEDDING_FAILED).toBe('EMBEDDING_FAILED');
-        expect(ErrorCode.INTERNAL).toBe('INTERNAL');
-    });
-});

package/dist/tests/unit/shared.test.js

@@ -1,36 +0,0 @@
-import { describe, expect, it } from 'vitest';
-import { parseCommaList, parseJsonObject, shortId } from '../../src/shared.js';
-import { AppError, ErrorCode } from '../../src/errors.js';
-describe('parseCommaList', () => {
-    it('returns undefined for undefined input', () => {
-        expect(parseCommaList(undefined)).toBeUndefined();
-    });
-    it('splits comma-separated values and trims whitespace', () => {
-        expect(parseCommaList('a, b, c')).toEqual(['a', 'b', 'c']);
-    });
-    it('filters empty strings', () => {
-        expect(parseCommaList('a,,b')).toEqual(['a', 'b']);
-    });
-    it('returns undefined for all-empty result', () => {
-        expect(parseCommaList(' , , ')).toBeUndefined();
-    });
-});
-describe('parseJsonObject', () => {
-    it('returns fallback for undefined', () => {
-        expect(parseJsonObject(undefined)).toEqual({});
-    });
-    it('parses valid JSON object', () => {
-        expect(parseJsonObject('{"key":"value"}')).toEqual({ key: 'value' });
-    });
-    it('throws for non-object JSON', () => {
-        expect(() => parseJsonObject('[1,2]')).toThrow(AppError);
-    });
-    it('throws for invalid JSON', () => {
-        expect(() => parseJsonObject('not json')).toThrow();
-    });
-});
-describe('shortId', () => {
-    it('returns first 8 characters', () => {
-        expect(shortId('abcdefgh-1234-5678')).toBe('abcdefgh');
-    });
-});

package/dist/vitest.config.js

@@ -1,7 +0,0 @@
-import { defineConfig } from 'vitest/config';
-export default defineConfig({
-    test: {
-        environment: 'node',
-        include: ['tests/**/*.test.ts']
-    }
-});