@phneakngar/cli 0.0.1 → 0.0.2

package/README.md

@@ -19,11 +19,14 @@ phneakngar version
 npx @phneakngar/cli <command>
 ```
 
-### From a local pack (pre-publish / offline)
+### From a local pack (pre-publish / operator distribution)
+
+The tarball contains the CLI build, but npm still resolves its runtime dependencies from the configured registry unless they are already cached. It is not a fully offline bundle.
 
 ```bash
 # built by an operator from the monorepo
-npm install --global ./phneakngar-cli-0.0.149.tgz
+npm install --global ./phneakngar-cli-X.Y.Z.tgz
+phneakngar version
 ```
 
 ## Quick Start

package/dist/index.js

@@ -24559,33 +24559,99 @@ function detectRuntimes() {
 }
 
 // lib/activate.ts
+var AL_TOKEN_RE = /al_[A-Za-z0-9_-]{8,}/g;
+var MAX_BODY_CHARS = 200;
+function sanitizeActivateBody(bodyText) {
+  const redacted = bodyText.replace(AL_TOKEN_RE, "al_[redacted]");
+  if (redacted.length <= MAX_BODY_CHARS)
+    return redacted;
+  return `${redacted.slice(0, MAX_BODY_CHARS)}…`;
+}
+function extractServerError(bodyText) {
+  const trimmed = bodyText.trim();
+  if (!trimmed)
+    return "";
+  try {
+    const parsed = JSON.parse(trimmed);
+    if (typeof parsed?.error === "string")
+      return parsed.error;
+  } catch {}
+  return trimmed;
+}
+function formatActivateFailure(status, bodyText) {
+  const shortBody = sanitizeActivateBody(bodyText || "(empty body)");
+  const serverError = extractServerError(bodyText).toLowerCase();
+  const hint = activateFailureHint(status, serverError);
+  if (hint) {
+    return `Error: registration failed (${status}): ${shortBody}
+  → ${hint}`;
+  }
+  return `Error: registration failed (${status}): ${shortBody}`;
+}
+function activateFailureHint(status, serverError) {
+  if (status === 404 || serverError.includes("token not found")) {
+    return "Token not found on this server. Check the server URL " + `('${cmdPrefix()} init --server <url>' / config) and copy a fresh token from the UI.`;
+  }
+  if (status === 422 || serverError.includes("workspace_id") || serverError.includes("no workspace")) {
+    return "Token has no workspace. Open or create a workspace in the app first, " + "then generate a new token.";
+  }
+  if (status === 409) {
+    if (serverError.includes("another user")) {
+      return "This machine hostname is already linked to another user. " + "Use a different hostname or create a new token in the UI after resolving ownership.";
+    }
+    if (serverError.includes("already claimed") || serverError.includes("another machine") || serverError.includes("already used") || serverError.includes("could not be finalized")) {
+      return "Token already used on another machine (or a different runtime set). " + "Create a new token in the UI for this machine.";
+    }
+    return "Token activation conflict (already claimed or used). " + "Create a new token in the UI and try again.";
+  }
+  if (status === 503 || serverError.includes("temporarily unavailable")) {
+    return "Token activation temporarily unavailable. Retry in a moment.";
+  }
+  if (status === 400) {
+    return "Invalid activation request. Re-copy the token from the UI and ensure " + "at least one runtime (claude, codex, opencode, or grok) is installed.";
+  }
+  if (status === 401) {
+    return "Server rejected this token. Copy a fresh token from the UI and confirm " + `the server URL ('${cmdPrefix()} init --server <url>' / config).`;
+  }
+  return null;
+}
+function fatalExit(code = 1) {
+  process.exit(code);
+  throw new Error(`process.exit(${code})`);
+}
 async function activateAndSave(opts) {
   const { token, serverUrl, profile } = opts;
   console.log("Scanning for AI runtimes...");
   const runtimes = detectRuntimes();
   if (runtimes.length === 0) {
     console.error("Error: no runtimes found. Install claude, codex, opencode, or grok first.");
-    process.exit(1);
+    fatalExit(1);
   }
   console.log(`Found: ${runtimes.map((r) => r.type).join(", ")}`);
   const host = hostname4();
   console.log("Registering machine...");
   let activateResp;
+  let res;
   try {
-    const res = await fetch(`${serverUrl}/api/machine-tokens/activate`, {
+    res = await fetch(`${serverUrl}/api/machine-tokens/activate`, {
       method: "POST",
       headers: { "Content-Type": "application/json" },
       body: JSON.stringify({ token, hostname: host, runtimes })
     });
-    if (!res.ok) {
-      const text2 = await res.text();
-      console.error(`Error: registration failed (${res.status}): ${text2}`);
-      process.exit(1);
-    }
+  } catch (err) {
+    console.error(`Error: failed to activate: ${err instanceof Error ? err.message : err}`);
+    fatalExit(1);
+  }
+  if (!res.ok) {
+    const text2 = await res.text();
+    console.error(formatActivateFailure(res.status, text2));
+    fatalExit(1);
+  }
+  try {
     activateResp = await res.json();
   } catch (err) {
     console.error(`Error: failed to activate: ${err instanceof Error ? err.message : err}`);
-    process.exit(1);
+    fatalExit(1);
   }
   const client = new APIClient(serverUrl, token);
   let workspaces;
@@ -24593,11 +24659,11 @@ async function activateAndSave(opts) {
     workspaces = await client.getJSON("/api/workspaces");
   } catch (err) {
     console.error(`Error: failed to fetch workspaces: ${err instanceof Error ? err.message : err}`);
-    process.exit(1);
+    fatalExit(1);
   }
   if (!workspaces.length) {
     console.error("Error: no workspaces found for this user");
-    process.exit(1);
+    fatalExit(1);
   }
   const ws = workspaces.find((w) => w.id === activateResp.workspace_id) || workspaces[0];
   const wsClient = new APIClient(serverUrl, token, ws.id);
@@ -24674,22 +24740,24 @@ function registerCommand() {
       console.error(`Error: --token is required
 Usage: ${cmdPrefix()} register --token <token>`);
       process.exit(1);
+      return;
     }
     if (!token.startsWith("al_")) {
       console.error("Error: invalid token format: must start with 'al_'");
       process.exit(1);
+      return;
     }
-    const client = new APIClient(serverUrl, token);
-    let me;
+    const result = await activateAndSave({ token, serverUrl, profile });
+    let email3 = "";
     try {
-      me = await client.getJSON("/api/me");
-    } catch (err) {
-      console.error(`Error: failed to verify token: ${err instanceof Error ? err.message : err}`);
-      process.exit(1);
+      const client = new APIClient(serverUrl, token);
+      const me = await client.getJSON("/api/me");
+      email3 = me.email;
+    } catch {}
+    if (email3) {
+      console.log(`
+Registered as ${email3}`);
     }
-    const result = await activateAndSave({ token, serverUrl, profile });
-    console.log(`
-Registered as ${me.email}`);
     console.log(`Workspace: ${result.workspaceName} (${result.workspaceId})`);
     console.log(`Runtimes: ${result.runtimeProviders.join(", ")}`);
   });
@@ -24969,8 +25037,9 @@ function formatStatusReport(profile) {
   lines.push(`CLI version: ${getCurrentVersion()}`);
   lines.push(`Server: ${server}`);
   if (!ws?.token) {
-    lines.push("Registration: Not registered");
-    lines.push(`Hint: Run '${cmdPrefix()} login' or '${cmdPrefix()} register --token <token>'`);
+    const empty = !cfg.watched_workspaces?.length || !cfg.watched_workspaces.some((w) => w.token && w.status !== "deleted");
+    lines.push(empty && !cfg.watched_workspaces?.length ? "Registration: Not registered (watched_workspaces empty)" : "Registration: Not registered (no active machine token)");
+    lines.push(`Hint: Run '${cmdPrefix()} register --token al_...' (per workspace). Or '${cmdPrefix()} login'.`);
   } else {
     lines.push("Registration: Registered");
     lines.push(`Workspace: ${ws.name || "unknown"} (${ws.id || "no-id"})`);
@@ -26530,6 +26599,7 @@ Workspace initialized: ${res.studio.name || res.workspace.name}`);
 // commands/doctor.ts
 import { Command as Command14 } from "commander";
 import { existsSync as existsSync5, accessSync, constants } from "fs";
+import { join as join15 } from "path";
 var MIN_NODE_MAJOR = 20;
 var MIN_NODE_MINOR = 19;
 function nodeVersionParts(version3 = process.versions.node) {
@@ -26583,19 +26653,45 @@ function checkConfig(profile) {
 }
 function checkRegistration(profile) {
   const cfg = loadCLIConfigForProfile(profile);
-  const ws = cfg.watched_workspaces?.find((w) => w.token && w.status !== "deleted");
+  const list = cfg.watched_workspaces ?? [];
+  const ws = list.find((w) => w.token && w.status !== "deleted");
+  const registerHint = `Run '${cmdPrefix()} register --token al_...' (per workspace; create token in the dashboard). Or '${cmdPrefix()} login'.`;
   if (!ws?.token) {
+    let detail;
+    if (list.length === 0) {
+      detail = "not registered — watched_workspaces empty (no machine token for this PC)";
+    } else {
+      const deleted = list.filter((w) => w.status === "deleted").length;
+      const tokenless = list.filter((w) => !w.token).length;
+      detail = `not registered — no active watched workspace token (${list.length} entries, none usable`;
+      const parts = [];
+      if (deleted)
+        parts.push(`${deleted} deleted`);
+      if (tokenless)
+        parts.push(`${tokenless} without token`);
+      if (parts.length)
+        detail += `; ${parts.join(", ")}`;
+      detail += ")";
+    }
     return {
       name: "Registration",
       status: "fail",
-      detail: "not registered",
-      hint: `Run '${cmdPrefix()} login' or '${cmdPrefix()} register --token al_...'`
+      detail,
+      hint: registerHint
     };
   }
   return {
     name: "Registration",
     status: "pass",
-    detail: `workspace ${ws.name || "unknown"} (${ws.id || "no-id"})`
+    detail: `workspace ${ws.name || "unknown"} (${ws.id || "no-id"}) — agent can use this PC once chhlat is running`
+  };
+}
+function checkAgentWorkdirScope(profile) {
+  const root = join15(configDir(), "workspaces");
+  return {
+    name: "Agent workdir scope",
+    status: "info",
+    detail: `agents only access agent workdirs under ${root} (not the whole PC)`
   };
 }
 function checkRuntimes() {
@@ -26712,6 +26808,7 @@ async function runDoctor(profile, options = {}) {
     checkCliVersion(),
     checkConfig(profile),
     checkRegistration(profile),
+    checkAgentWorkdirScope(profile),
     checkRuntimes(),
     checkChhlat(profile)
   ];
@@ -26769,11 +26866,11 @@ function doctorCommand() {
 // commands/logs.ts
 import { Command as Command15 } from "commander";
 import { existsSync as existsSync6, readdirSync as readdirSync5, readFileSync as readFileSync16, statSync as statSync6 } from "fs";
-import { join as join15 } from "path";
+import { join as join16 } from "path";
 function listLogFiles(dir = chhlatLogDir()) {
   if (!existsSync6(dir))
     return [];
-  return readdirSync5(dir).filter((name) => name.endsWith(".log")).map((name) => join15(dir, name)).sort((a, b) => {
+  return readdirSync5(dir).filter((name) => name.endsWith(".log")).map((name) => join16(dir, name)).sort((a, b) => {
     try {
       return statSync6(b).mtimeMs - statSync6(a).mtimeMs;
     } catch {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@phneakngar/cli",
-  "version": "0.0.1",
+  "version": "0.0.2",
   "description": "ភ្នាក់ងារ CLI — install and run local AI agents on a client machine",
   "license": "Apache-2.0",
   "author": "ភ្នាក់ងារ",