@prave/cli 1.0.0 → 1.0.1

package/dist/commands/whoami.js

@@ -17,6 +17,17 @@ export async function whoamiCommand() {
         process.exitCode = 1;
         return;
     }
+    // Detect creds left over from older CLI versions that predate the
+    // refresh-token flow. Without a refresh_token we can't auto-rotate the
+    // expired access_token, so the user gets stuck in a "session expired"
+    // loop. Direct them to `prave login` immediately rather than letting
+    // the API call fail confusingly.
+    if (!creds.refresh_token) {
+        log.warn('Stored credentials predate the refresh-token flow.');
+        log.dim('Run `prave login` once to upgrade — refreshes will be automatic afterwards.');
+        process.exitCode = 1;
+        return;
+    }
     try {
         const { data } = await api.get('/api/v1/me', true);
         const handle = data.username || data.display_name || data.email || creds.email || 'unknown';

package/dist/lib/prompt.js

@@ -1,5 +1,4 @@
 import { stdin, stdout } from 'node:process';
-import readline from 'node:readline';
 import chalk from 'chalk';
 export async function checkboxPrompt(question, items, opts = {}) {
     if (!stdin.isTTY || !stdout.isTTY) {
@@ -8,15 +7,17 @@ export async function checkboxPrompt(question, items, opts = {}) {
     const selected = new Set(opts.initial ?? []);
     let cursor = 0;
     const minSelected = opts.minSelected ?? 0;
+    let dataHandler = null;
     const cleanup = () => {
         if (typeof stdin.setRawMode === 'function')
             stdin.setRawMode(false);
-        stdin.removeAllListeners('keypress');
+        if (dataHandler)
+            stdin.off('data', dataHandler);
         stdin.pause();
         stdout.write(showCursor);
+        stdout.write('\n');
     };
     return new Promise((resolve) => {
-        readline.emitKeypressEvents(stdin);
         if (typeof stdin.setRawMode === 'function')
             stdin.setRawMode(true);
         stdin.resume();
@@ -45,53 +46,109 @@ export async function checkboxPrompt(question, items, opts = {}) {
                 ? `${selected.size} selected · enter to confirm`
                 : `at least ${minSelected} required · ${selected.size} selected`)}\n`);
         };
-        const onKey = (_str, key) => {
-            if (!key)
-                return;
-            if (key.ctrl && key.name === 'c') {
-                cleanup();
-                resolve(null);
-                return;
-            }
-            switch (key.name) {
-                case 'up':
-                case 'k':
-                    cursor = (cursor - 1 + items.length) % items.length;
-                    break;
-                case 'down':
-                case 'j':
-                    cursor = (cursor + 1) % items.length;
-                    break;
-                case 'space': {
+        /**
+         * Raw-byte parser. We listen to `data` directly instead of relying on
+         * `readline.emitKeypressEvents`, which is unreliable on macOS Terminal +
+         * iTerm under raw mode (the keypress event simply never fires for some
+         * users, leaving them stuck on whatever items the prompt prefilled).
+         *
+         * Sequences we care about:
+         *   ESC [ A/B/C/D     → arrow keys
+         *   0x0D / 0x0A       → return
+         *   0x20              → space
+         *   0x03              → ctrl-c
+         *   0x1B (alone)      → escape (heuristic: solo 0x1B with no follow-up)
+         *   "k" / "j" / "a"   → vim-style move + toggle-all
+         *   "q"               → cancel
+         */
+        const handle = (data) => {
+            // An entire keystroke can arrive as one chunk on most terminals, but
+            // we guard against multi-byte chunks by walking the buffer.
+            let i = 0;
+            while (i < data.length) {
+                const b = data[i];
+                // CSI escape sequences: ESC [ X
+                if (b === 0x1b && data[i + 1] === 0x5b && data.length > i + 2) {
+                    const arrow = data[i + 2];
+                    if (arrow === 0x41)
+                        cursor = (cursor - 1 + items.length) % items.length;
+                    else if (arrow === 0x42)
+                        cursor = (cursor + 1) % items.length;
+                    else if (arrow === 0x43) {
+                        // right arrow → toggle (some users default to this)
+                        const v = items[cursor].value;
+                        if (selected.has(v))
+                            selected.delete(v);
+                        else
+                            selected.add(v);
+                    }
+                    i += 3;
+                    continue;
+                }
+                // Bare ESC = cancel.
+                if (b === 0x1b && (data.length === i + 1 || data[i + 1] === undefined)) {
+                    cleanup();
+                    resolve(null);
+                    return;
+                }
+                // Ctrl-C.
+                if (b === 0x03) {
+                    cleanup();
+                    resolve(null);
+                    return;
+                }
+                // Enter — CR or LF.
+                if (b === 0x0d || b === 0x0a) {
+                    if (selected.size < minSelected) {
+                        i += 1;
+                        continue;
+                    }
+                    cleanup();
+                    resolve([...selected]);
+                    return;
+                }
+                // Space — toggle current.
+                if (b === 0x20) {
                     const v = items[cursor].value;
                     if (selected.has(v))
                         selected.delete(v);
                     else
                         selected.add(v);
-                    break;
+                    i += 1;
+                    continue;
                 }
-                case 'a':
+                // Letters: a (toggle all), j (down), k (up), q (cancel).
+                if (b === 0x61) {
                     if (selected.size === items.length)
                         selected.clear();
                     else
-                        for (const i of items)
-                            selected.add(i.value);
-                    break;
-                case 'return':
-                    if (selected.size < minSelected)
-                        return;
-                    cleanup();
-                    resolve([...selected]);
-                    return;
-                case 'escape':
-                case 'q':
+                        for (const it of items)
+                            selected.add(it.value);
+                    i += 1;
+                    continue;
+                }
+                if (b === 0x6a) {
+                    cursor = (cursor + 1) % items.length;
+                    i += 1;
+                    continue;
+                }
+                if (b === 0x6b) {
+                    cursor = (cursor - 1 + items.length) % items.length;
+                    i += 1;
+                    continue;
+                }
+                if (b === 0x71) {
                     cleanup();
                     resolve(null);
                     return;
+                }
+                // Unknown byte — advance and ignore.
+                i += 1;
             }
             render();
         };
-        stdin.on('keypress', onKey);
+        dataHandler = handle;
+        stdin.on('data', handle);
         render();
     });
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@prave/cli",
-  "version": "1.0.0",
+  "version": "1.0.1",
   "description": "Prave CLI — import, export, install, sync Claude Skills.",
   "type": "module",
   "bin": {
@@ -16,7 +16,7 @@
     "open": "^10.1.0",
     "ora": "^8.0.1",
     "undici": "^6.18.0",
-    "@prave/shared": "1.0.0"
+    "@prave/shared": "1.0.1"
   },
   "devDependencies": {
     "@types/node": "^20.12.7",