@kenkaiiii/gg-pixel 4.3.83 → 4.3.85

package/dist/index.d.ts

@@ -74,6 +74,12 @@ interface InstallOptions {
 interface InstallResult {
     projectId: string;
     projectKey: string;
+    /**
+     * Per-project bearer secret returned by the server on creation. Stored in
+     * ~/.gg/projects.json and required for every /api/* call (read/list/patch/
+     * delete). Never leaves the user's machine — never inlined into source.
+     */
+    projectSecret: string;
     projectName: string;
     projectKind: ProjectKind;
     initFilePath: string;

package/dist/index.js

@@ -457,8 +457,8 @@ async function install(opts = {}) {
   const existingKey = readEnvKey(envFilePath, "GG_PIXEL_KEY");
   let created;
   let reused = false;
-  if (existing && existingKey) {
-    created = { id: existing.id, key: existingKey };
+  if (existing && existing.secret && existingKey) {
+    created = { id: existing.id, key: existingKey, secret: existing.secret };
     reused = true;
   } else {
     created = await createProject(fetchFn, ingestUrl, projectName);
@@ -475,10 +475,11 @@ async function install(opts = {}) {
   if (kind !== "browser" && kind !== "tauri") {
     writeEnvKey(envFilePath, "GG_PIXEL_KEY", created.key);
   }
-  writeProjectsMapping(projectsJsonPath, created.id, projectName, nodeRoot);
+  writeProjectsMapping(projectsJsonPath, created.id, projectName, nodeRoot, created.secret);
   return {
     projectId: created.id,
     projectKey: created.key,
+    projectSecret: created.secret,
     projectName,
     projectKind: kind,
     initFilePath: wired.primaryInitPath,
@@ -535,8 +536,10 @@ async function createProject(fetchFn, ingestUrl, name) {
     throw new Error(`POST /api/projects failed: ${res.status} ${await safeText(res)}`);
   }
   const body = await res.json();
-  if (!body.id || !body.key) throw new Error("response missing id/key");
-  return { id: body.id, key: body.key };
+  if (!body.id || !body.key || !body.secret) {
+    throw new Error("response missing id/key/secret");
+  }
+  return { id: body.id, key: body.key, secret: body.secret };
 }
 async function safeText(r) {
   try {
@@ -882,7 +885,10 @@ function injectNextClientComponent(layoutPath, clientInitPath) {
   const childrenIdx = updated.lastIndexOf("{children}");
   if (childrenIdx === -1) {
     writeFileSync(layoutPath, updated, "utf8");
-    return { kind: "skipped", reason: "added import but couldn't find {children} to render <GGPixelClient />" };
+    return {
+      kind: "skipped",
+      reason: "added import but couldn't find {children} to render <GGPixelClient />"
+    };
   }
   const before = updated.slice(0, childrenIdx);
   const after = updated.slice(childrenIdx);
@@ -1439,8 +1445,8 @@ async function installGo(ctx) {
   const existingKey = readEnvKey(envFilePath, "GG_PIXEL_KEY");
   let created;
   let reused = false;
-  if (existing && existingKey) {
-    created = { id: existing.id, key: existingKey };
+  if (existing && existing.secret && existingKey) {
+    created = { id: existing.id, key: existingKey, secret: existing.secret };
     reused = true;
   } else {
     created = await createProject(fetchFn, ingestUrl, projectName);
@@ -1468,10 +1474,11 @@ func init() {
     "utf8"
   );
   writeEnvKey(envFilePath, "GG_PIXEL_KEY", created.key);
-  writeProjectsMapping(projectsJsonPath, created.id, projectName, projectRoot);
+  writeProjectsMapping(projectsJsonPath, created.id, projectName, projectRoot, created.secret);
   return {
     projectId: created.id,
     projectKey: created.key,
+    projectSecret: created.secret,
     projectName,
     projectKind: "go",
     initFilePath,
@@ -1512,8 +1519,8 @@ async function installRuby(ctx) {
   const existingKey = readEnvKey(envFilePath, "GG_PIXEL_KEY");
   let created;
   let reused = false;
-  if (existing && existingKey) {
-    created = { id: existing.id, key: existingKey };
+  if (existing && existing.secret && existingKey) {
+    created = { id: existing.id, key: existingKey, secret: existing.secret };
     reused = true;
   } else {
     created = await createProject(fetchFn, ingestUrl, projectName);
@@ -1532,10 +1539,11 @@ GGPixel.init(
     "utf8"
   );
   writeEnvKey(envFilePath, "GG_PIXEL_KEY", created.key);
-  writeProjectsMapping(projectsJsonPath, created.id, projectName, projectRoot);
+  writeProjectsMapping(projectsJsonPath, created.id, projectName, projectRoot, created.secret);
   return {
     projectId: created.id,
     projectKey: created.key,
+    projectSecret: created.secret,
     projectName,
     projectKind: "ruby",
     initFilePath,
@@ -1588,8 +1596,8 @@ async function installPython(ctx) {
   const existingKey = readEnvKey(envFilePath, "GG_PIXEL_KEY");
   let created;
   let reused = false;
-  if (existing && existingKey) {
-    created = { id: existing.id, key: existingKey };
+  if (existing && existing.secret && existingKey) {
+    created = { id: existing.id, key: existingKey, secret: existing.secret };
     reused = true;
   } else {
     created = await createProject(fetchFn, ingestUrl, projectName);
@@ -1599,11 +1607,12 @@ async function installPython(ctx) {
   const initFilePath = join2(projectRoot, "gg_pixel_init.py");
   writeFileSync(initFilePath, renderPythonInitFile(ingestUrl, created.key), "utf8");
   writeEnvKey(envFilePath, "GG_PIXEL_KEY", created.key);
-  writeProjectsMapping(projectsJsonPath, created.id, projectName, projectRoot);
+  writeProjectsMapping(projectsJsonPath, created.id, projectName, projectRoot, created.secret);
   const entryWiring = wirePythonEntry(projectRoot, initFilePath);
   return {
     projectId: created.id,
     projectKey: created.key,
+    projectSecret: created.secret,
     projectName,
     projectKind: "python",
     initFilePath,
@@ -1721,7 +1730,7 @@ function findPythonEntryFile(projectRoot) {
   }
   return null;
 }
-function writeProjectsMapping(projectsJsonPath, projectId, name, path) {
+function writeProjectsMapping(projectsJsonPath, projectId, name, path, secret) {
   mkdirSync2(dirname2(projectsJsonPath), { recursive: true });
   let map = {};
   if (existsSync2(projectsJsonPath)) {
@@ -1730,7 +1739,9 @@ function writeProjectsMapping(projectsJsonPath, projectId, name, path) {
     } catch {
     }
   }
-  map[projectId] = { name, path };
+  const entry = { name, path };
+  if (secret) entry.secret = secret;
+  map[projectId] = entry;
   writeFileSync(projectsJsonPath, `${JSON.stringify(map, null, 2)}
 `, "utf8");
 }