@pachca/cli 2026.3.7 → 2026.3.9

package/dist/commands/tasks/delete.js

@@ -38,7 +38,6 @@ export default class TasksDelete extends BaseCommand {
                 this.exit(0);
             }
         }
-        this.checkScope("tasks:delete");
         const { data } = await this.apiRequest({
             method: 'DELETE',
             path: `/tasks/${args.id}`,

package/dist/commands/tasks/get.js

@@ -24,7 +24,6 @@ export default class TasksGet extends BaseCommand {
     async run() {
         const { args, flags } = await this.parse(TasksGet);
         this.parsedFlags = flags;
-        this.checkScope("tasks:read");
         const { data } = await this.apiRequest({
             method: 'GET',
             path: `/tasks/${args.id}`,

package/dist/commands/tasks/list.js

@@ -29,7 +29,6 @@ export default class TasksList extends BaseCommand {
     async run() {
         const { args, flags } = await this.parse(TasksList);
         this.parsedFlags = flags;
-        this.checkScope("tasks:read");
         if (flags.all) {
             // Auto-pagination
             const allData = [];

package/dist/commands/tasks/update.js

@@ -60,7 +60,6 @@ export default class TasksUpdate extends BaseCommand {
             }
             flags['content'] = Buffer.concat(chunks).toString('utf-8').trimEnd();
         }
-        this.checkScope("tasks:update");
         const body = { task: {
                 kind: flags['kind'],
                 content: flags['content'],

package/dist/commands/threads/add.js

@@ -23,7 +23,6 @@ export default class ThreadsAdd extends BaseCommand {
     async run() {
         const { args, flags } = await this.parse(ThreadsAdd);
         this.parsedFlags = flags;
-        this.checkScope("threads:create");
         const { data } = await this.apiRequest({
             method: 'POST',
             path: `/messages/${args.id}/thread`,

package/dist/commands/threads/get.js

@@ -19,7 +19,6 @@ export default class ThreadsGet extends BaseCommand {
     async run() {
         const { args, flags } = await this.parse(ThreadsGet);
         this.parsedFlags = flags;
-        this.checkScope("threads:read");
         const { data } = await this.apiRequest({
             method: 'GET',
             path: `/threads/${args.id}`,

package/dist/commands/upgrade.js

@@ -0,0 +1,111 @@
+import { execFileSync } from 'node:child_process';
+import * as fs from 'node:fs';
+import * as path from 'node:path';
+import semver from 'semver';
+import { BaseCommand } from '../base-command.js';
+/**
+ * Detect how CLI was installed by examining the executable path.
+ */
+function detectPackageManager(binPath) {
+    const resolved = fs.realpathSync(binPath);
+    // Homebrew: /opt/homebrew/... or /usr/local/Cellar/...
+    if (resolved.includes('/homebrew/') || resolved.includes('/Cellar/')) {
+        return { name: 'homebrew', cmd: 'brew', args: ['upgrade', '@pachca/cli'] };
+    }
+    // Bun global: ~/.bun/install/global/ or contains /bun/
+    if (resolved.includes('/bun/') || resolved.includes('.bun/')) {
+        return { name: 'bun', cmd: 'bun', args: ['install', '-g', '@pachca/cli@latest'] };
+    }
+    // pnpm global: contains /pnpm/
+    if (resolved.includes('/pnpm/')) {
+        return { name: 'pnpm', cmd: 'pnpm', args: ['install', '-g', '@pachca/cli@latest'] };
+    }
+    // yarn global: contains /yarn/
+    if (resolved.includes('/yarn/')) {
+        return { name: 'yarn', cmd: 'yarn', args: ['global', 'add', '@pachca/cli@latest'] };
+    }
+    // Default: npm
+    return { name: 'npm', cmd: 'npm', args: ['install', '-g', '@pachca/cli@latest'] };
+}
+export default class Upgrade extends BaseCommand {
+    static description = 'Обновить CLI до последней версии';
+    static examples = [
+        '<%= config.bin %> upgrade',
+    ];
+    static flags = {
+        ...BaseCommand.baseFlags,
+    };
+    async run() {
+        const { flags } = await this.parse(Upgrade);
+        this.parsedFlags = flags;
+        const currentVersion = this.config.version;
+        const format = this.getOutputFormat();
+        // Fetch latest version from npm registry
+        let latest;
+        try {
+            const response = await fetch('https://registry.npmjs.org/@pachca/cli');
+            if (response.ok) {
+                const data = (await response.json());
+                latest = data['dist-tags']?.latest;
+            }
+        }
+        catch {
+            // Fallback: try cached version
+        }
+        if (!latest) {
+            try {
+                const versionFile = path.join(this.config.cacheDir, 'version');
+                if (fs.existsSync(versionFile)) {
+                    const cached = JSON.parse(fs.readFileSync(versionFile, 'utf-8'));
+                    latest = cached.latest;
+                }
+            }
+            catch {
+                // ignore
+            }
+        }
+        if (!latest) {
+            if (format === 'json') {
+                this.output({ upgraded: false, current: currentVersion, error: 'Cannot determine latest version' });
+            }
+            else {
+                process.stderr.write('✗ Не удалось определить последнюю версию\n');
+            }
+            this.exit(1);
+        }
+        if (semver.valid(currentVersion) && semver.valid(latest) && !semver.gt(latest, currentVersion)) {
+            if (format === 'json') {
+                this.output({ upgraded: false, current: currentVersion, latest });
+            }
+            else {
+                process.stderr.write(`✔ CLI уже обновлён (${currentVersion})\n`);
+            }
+            return;
+        }
+        const pm = detectPackageManager(process.argv[1] || this.config.binPath || '');
+        if (format !== 'json' && process.stderr.isTTY) {
+            process.stderr.write(`Обновление ${currentVersion} → ${latest} (${pm.name})...\n`);
+        }
+        try {
+            execFileSync(pm.cmd, pm.args, {
+                stdio: format === 'json' ? 'ignore' : 'inherit',
+            });
+            if (format === 'json') {
+                this.output({ upgraded: true, from: currentVersion, to: latest, package_manager: pm.name });
+            }
+            else {
+                process.stderr.write(`\n✔ Обновлено до ${latest}\n`);
+            }
+        }
+        catch {
+            if (format === 'json') {
+                this.output({ upgraded: false, current: currentVersion, latest, package_manager: pm.name, error: `${pm.cmd} failed` });
+            }
+            else {
+                process.stderr.write(`\n✗ Не удалось обновить через ${pm.name}. Попробуйте вручную:\n`);
+                process.stderr.write(`  ${pm.cmd} ${pm.args.join(' ')}\n`);
+            }
+            this.exit(1);
+        }
+    }
+}

package/dist/commands/upload.js

@@ -21,7 +21,6 @@ export default class Upload extends BaseCommand {
     async run() {
         const { args, flags } = await this.parse(Upload);
         this.parsedFlags = flags;
-        this.checkScope('uploads:write');
         // Step 1: Get upload params
         const { data: uploadData } = await this.apiRequest({
             method: 'POST',

package/dist/commands/users/create.js

@@ -85,7 +85,6 @@ export default class UsersCreate extends BaseCommand {
                 this.validationError(missingRequired.map((f) => ({ message: `Обязательный флаг --${f.flag} не передан`, flag: f.flag })), { hint: "Обязательные: --email <string>. pachca introspect users create" });
             }
         }
-        this.checkScope("users:create");
         const body = {
             user: {
                 first_name: flags['first-name'],

package/dist/commands/users/delete.js

@@ -38,7 +38,6 @@ export default class UsersDelete extends BaseCommand {
                 this.exit(0);
             }
         }
-        this.checkScope("users:delete");
         const { data } = await this.apiRequest({
             method: 'DELETE',
             path: `/users/${args.id}`,

package/dist/commands/users/get-status.js

@@ -24,7 +24,6 @@ export default class UsersGetStatus extends BaseCommand {
     async run() {
         const { args, flags } = await this.parse(UsersGetStatus);
         this.parsedFlags = flags;
-        this.checkScope("user_status:read");
         const { data } = await this.apiRequest({
             method: 'GET',
             path: `/users/${args.user_id}/status`,

package/dist/commands/users/get.js

@@ -24,7 +24,6 @@ export default class UsersGet extends BaseCommand {
     async run() {
         const { args, flags } = await this.parse(UsersGet);
         this.parsedFlags = flags;
-        this.checkScope("users:read");
         const { data } = await this.apiRequest({
             method: 'GET',
             path: `/users/${args.id}`,

package/dist/commands/users/list.js

@@ -32,7 +32,6 @@ export default class UsersList extends BaseCommand {
     async run() {
         const { args, flags } = await this.parse(UsersList);
         this.parsedFlags = flags;
-        this.checkScope("users:read");
         if (flags.all) {
             // Auto-pagination
             const allData = [];

package/dist/commands/users/remove-status.js

@@ -38,7 +38,6 @@ export default class UsersRemoveStatus extends BaseCommand {
                 this.exit(0);
             }
         }
-        this.checkScope("user_status:write");
         const { data } = await this.apiRequest({
             method: 'DELETE',
             path: `/users/${args.user_id}/status`,

package/dist/commands/users/update-status.js

@@ -76,7 +76,6 @@ export default class UsersUpdateStatus extends BaseCommand {
         if (validationErrors.length > 0) {
             this.validationError(validationErrors);
         }
-        this.checkScope("user_status:write");
         const body = { status: {
                 emoji: flags['emoji'],
                 title: flags['title'],

package/dist/commands/users/update.js

@@ -58,7 +58,6 @@ export default class UsersUpdate extends BaseCommand {
     async run() {
         const { args, flags } = await this.parse(UsersUpdate);
         this.parsedFlags = flags;
-        this.checkScope("users:update");
         const body = { user: {
                 first_name: flags['first-name'],
                 last_name: flags['last-name'],

package/dist/commands/views/open.js

@@ -96,7 +96,6 @@ export default class ViewsOpen extends BaseCommand {
         if (validationErrors.length > 0) {
             this.validationError(validationErrors);
         }
-        this.checkScope("views:write");
         const body = {
             view: {
                 title: flags['title'],

package/dist/data/changelog.json

@@ -1,4 +1,46 @@
 [
+    {
+        "version": "2026.3.9",
+        "date": "19 марта 2026",
+        "changes": [
+            {
+                "type": "~",
+                "command": "all",
+                "description": "Убрана клиентская валидация скоупов — проверка разрешений теперь только на стороне API (403)"
+            },
+            {
+                "type": "~",
+                "command": "auth login",
+                "description": "Профиль больше не сохраняет список скоупов — только тип, имя и email"
+            },
+            {
+                "type": "-",
+                "command": "auth refresh",
+                "description": "Команда удалена — кеширование скоупов больше не используется"
+            }
+        ]
+    },
+    {
+        "version": "2026.3.8",
+        "date": "17 марта 2026",
+        "changes": [
+            {
+                "type": "+",
+                "command": "upgrade",
+                "description": "Команда pachca upgrade — обновление CLI до последней версии"
+            },
+            {
+                "type": "-",
+                "command": "init hook",
+                "description": "Ошибки авторизации теперь выводятся в JSON при -o json (раньше формат игнорировался)"
+            },
+            {
+                "type": "-",
+                "command": "update banner",
+                "description": "Баннер обновления теперь показывается даже при ошибках команд"
+            }
+        ]
+    },
     {
         "version": "2026.3.7",
         "date": "16 марта 2026",

package/dist/hooks/init.js

@@ -1,7 +1,29 @@
-import { setProfile, resolveToken, TokenNotFoundError, ProfileNotFoundError, } from '../profiles.js';
-import { request } from '../client.js';
+import * as fs from 'node:fs';
+import * as path from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { spawn } from 'node:child_process';
+import semver from 'semver';
+import ansis from 'ansis';
+import { getDefaults, resolveToken, TokenNotFoundError, ProfileNotFoundError, } from '../profiles.js';
 import { outputError } from '../output.js';
-import { defaultOutputFormat } from '../utils.js';
+import { defaultOutputFormat, isInteractive } from '../utils.js';
+/**
+ * Resolve output format from argv before flags are parsed by oclif.
+ */
+function resolveOutputFromArgv() {
+    if (process.argv.includes('--json'))
+        return 'json';
+    const outputIdx = Math.max(process.argv.indexOf('-o'), process.argv.indexOf('--output'));
+    if (outputIdx !== -1) {
+        const val = process.argv[outputIdx + 1];
+        if (val && ['json', 'yaml', 'csv', 'table'].includes(val))
+            return val;
+    }
+    const defaults = getDefaults();
+    if (defaults.output)
+        return defaults.output;
+    return defaultOutputFormat();
+}
 // Commands that don't require auth
 const SKIP_AUTH = new Set([
     'auth:login',
@@ -20,12 +42,62 @@ const SKIP_AUTH = new Set([
     'guide',
     'introspect',
     'changelog',
+    'upgrade',
     'help',
 ]);
 const hook = async function (opts) {
     const commandId = opts.id;
     if (!commandId)
         return;
+    // Register update banner on process exit (fires even when command fails)
+    if (isInteractive() && !process.env.PACHCA_SKIP_NEW_VERSION_CHECK) {
+        const cacheDir = opts.config.cacheDir;
+        const versionFile = path.join(cacheDir, 'version');
+        const currentVersion = opts.config.version;
+        process.on('exit', () => {
+            try {
+                if (fs.existsSync(versionFile)) {
+                    const cached = JSON.parse(fs.readFileSync(versionFile, 'utf-8'));
+                    const latest = cached.latest;
+                    if (latest && semver.valid(latest) && semver.valid(currentVersion) && semver.gt(latest, currentVersion)) {
+                        const box = [
+                            '',
+                            ansis.yellow(`╭${'─'.repeat(37)}╮`),
+                            ansis.yellow(`│  Доступна новая версия: ${latest.padEnd(12)}│`),
+                            ansis.yellow(`│  pachca upgrade${' '.repeat(21)}│`),
+                            ansis.yellow(`╰${'─'.repeat(37)}╯`),
+                            '',
+                        ].join('\n');
+                        process.stderr.write(box);
+                    }
+                }
+            }
+            catch {
+                // ignore
+            }
+        });
+        // Background refresh if cache is stale (>1h)
+        try {
+            let shouldRefresh = true;
+            if (fs.existsSync(versionFile)) {
+                const stat = fs.statSync(versionFile);
+                shouldRefresh = Date.now() - stat.mtimeMs > 60 * 60 * 1000;
+            }
+            if (shouldRefresh) {
+                if (!fs.existsSync(cacheDir)) {
+                    fs.mkdirSync(cacheDir, { recursive: true });
+                }
+                const scriptPath = path.join(path.dirname(fileURLToPath(import.meta.url)), '..', 'get-version.js');
+                if (fs.existsSync(scriptPath)) {
+                    const child = spawn(process.execPath, [scriptPath, versionFile], { detached: true, stdio: 'ignore' });
+                    child.unref();
+                }
+            }
+        }
+        catch {
+            // ignore
+        }
+    }
     // Skip auth for exempt commands
     if (SKIP_AUTH.has(commandId))
         return;
@@ -58,28 +130,10 @@ const hook = async function (opts) {
     // Verify auth exists
     try {
         const { profileName, profile } = resolveToken({ token: argvToken, profile: argvProfile });
-        // Refresh bot scopes if stale (>24h)
-        if (profileName && profile?.type === 'bot' && profile.scopes_refreshed_at) {
-            const refreshedAt = new Date(profile.scopes_refreshed_at).getTime();
-            const now = Date.now();
-            const twentyFourHours = 24 * 60 * 60 * 1000;
-            if (now - refreshedAt > twentyFourHours) {
-                try {
-                    const response = await request({ method: 'GET', path: '/oauth/token/info', token: profile.token }, { quiet: true });
-                    const wrapper = response.data;
-                    profile.scopes = wrapper.data.scopes || [];
-                    profile.scopes_refreshed_at = new Date().toISOString();
-                    setProfile(profileName, profile);
-                }
-                catch {
-                    // Silently ignore refresh errors — use cached scopes
-                }
-            }
-        }
     }
     catch (error) {
         if (error instanceof TokenNotFoundError) {
-            const format = defaultOutputFormat();
+            const format = resolveOutputFromArgv();
             if (format === 'json' || !process.stderr.isTTY) {
                 outputError({ error: 'Token not found', type: 'PACHCA_AUTH_ERROR', code: null, hint: 'pachca auth login --token <your-token>' }, format);
             }
@@ -94,7 +148,7 @@ const hook = async function (opts) {
             process.exit(3);
         }
         if (error instanceof ProfileNotFoundError) {
-            const format = defaultOutputFormat();
+            const format = resolveOutputFromArgv();
             outputError({ error: `Profile "${error.profileName}" not found`, type: 'PACHCA_USAGE_ERROR', code: null, hint: 'pachca auth list' }, format);
             process.exit(2);
         }

package/dist/hooks/postrun.js

@@ -1,67 +1,4 @@
-import * as fs from 'node:fs';
-import * as path from 'node:path';
-import { fileURLToPath } from 'node:url';
-import { spawn } from 'node:child_process';
-import semver from 'semver';
-import ansis from 'ansis';
-import { isInteractive } from '../utils.js';
-const hook = async function (opts) {
-    // Don't show update banner in non-interactive mode
-    if (!isInteractive())
-        return;
-    if (process.env.PACHCA_SKIP_NEW_VERSION_CHECK)
-        return;
-    const cacheDir = opts.config.cacheDir;
-    const versionFile = path.join(cacheDir, 'version');
-    // Check if version file exists and show banner
-    try {
-        if (fs.existsSync(versionFile)) {
-            const cached = JSON.parse(fs.readFileSync(versionFile, 'utf-8'));
-            const latest = cached.latest;
-            const currentVersion = opts.config.version;
-            if (latest && semver.valid(latest) && semver.valid(currentVersion)) {
-                if (semver.gt(latest, currentVersion)) {
-                    const box = [
-                        '',
-                        ansis.yellow(`╭${'─'.repeat(37)}╮`),
-                        ansis.yellow(`│  Доступна новая версия: ${latest.padEnd(12)}│`),
-                        ansis.yellow(`│  npm install -g @pachca/cli${' '.repeat(9)}│`),
-                        ansis.yellow(`╰${'─'.repeat(37)}╯`),
-                        '',
-                    ].join('\n');
-                    process.stderr.write(box);
-                }
-            }
-        }
-    }
-    catch {
-        // Ignore cache read errors
-    }
-    // Check if we should refresh version cache (mtime > 24h)
-    try {
-        let shouldRefresh = true;
-        if (fs.existsSync(versionFile)) {
-            const stat = fs.statSync(versionFile);
-            const ageMs = Date.now() - stat.mtimeMs;
-            shouldRefresh = ageMs > 60 * 60 * 1000;
-        }
-        if (shouldRefresh) {
-            if (!fs.existsSync(cacheDir)) {
-                fs.mkdirSync(cacheDir, { recursive: true });
-            }
-            // Spawn detached background process to fetch latest version
-            const scriptPath = path.join(path.dirname(fileURLToPath(import.meta.url)), '..', 'get-version.js');
-            if (fs.existsSync(scriptPath)) {
-                const child = spawn(process.execPath, [scriptPath, versionFile], {
-                    detached: true,
-                    stdio: 'ignore',
-                });
-                child.unref();
-            }
-        }
-    }
-    catch {
-        // Ignore errors in update check
-    }
-};
+// Banner and version refresh moved to init hook (process.on('exit'))
+// so they fire even when commands fail.
+const hook = async function () { };
 export default hook;

package/dist/profiles.js

@@ -171,14 +171,6 @@ export function getConfigFilePermissions() {
     const stat = fs.statSync(configPath);
     return (stat.mode & 0o777).toString(8);
 }
-export function invalidateScopes(profileName) {
-    const config = readConfig();
-    if (config.profiles?.[profileName]) {
-        config.profiles[profileName].scopes = [];
-        config.profiles[profileName].scopes_refreshed_at = undefined;
-        writeConfig(config);
-    }
-}
 export class TokenNotFoundError extends Error {
     constructor() {
         super('Token not found');