@ritualai/cli 0.7.5 → 0.7.7

package/dist/lib/pat-store.js

@@ -4,32 +4,164 @@ exports.mintAgentPat = mintAgentPat;
 exports.defaultAgentTokenName = defaultAgentTokenName;
 const node_os_1 = require("node:os");
 const api_client_1 = require("./api-client");
+const prompt_1 = require("./prompt");
+const DEFAULT_WEB_APP_URL = 'https://app.ritualapp.cloud';
 async function mintAgentPat(opts) {
     const name = opts.nameOverride ?? defaultAgentTokenName();
-    let response;
+    const webAppUrl = opts.webAppUrl ?? DEFAULT_WEB_APP_URL;
+    return mintWithCapRecovery(opts, name, webAppUrl);
+}
+/**
+ * Attempt to mint a PAT. On 409 (active-token cap reached — currently
+ * 10 per user, enforced in apps/api/src/modules/auth/tokens/pat.service.ts),
+ * try to recover automatically:
+ *
+ *   1. GET /auth/tokens to see what's outstanding.
+ *   2. Find existing tokens named for THIS hostname (very likely
+ *      stale entries from prior `ritual init` runs on this machine).
+ *   3. If we find at least one, ask the user once whether we can
+ *      revoke the oldest such token to free a slot.
+ *   4. On Y: revoke, then retry the mint exactly once.
+ *   5. On N (or no same-hostname tokens to revoke, or we already
+ *      retried): re-raise with the corrected /u/tokens URL so the
+ *      user can clean up manually.
+ *
+ * Why "same hostname only" rather than the absolute oldest:
+ *   Tokens for OTHER devices (`Ritual CLI — work-laptop`) should
+ *   never get auto-revoked by `ritual init` running on a different
+ *   machine — that would break the user's other agents silently. We
+ *   only ever rotate THIS machine's own historical tokens.
+ *
+ * The `retrying` flag prevents an infinite loop if revoke succeeds
+ * but a different concurrent caller mints another token before our
+ * retry. Single retry is enough; if it fails again, fall back to
+ * the manual-cleanup error.
+ */
+async function mintWithCapRecovery(opts, name, webAppUrl, retrying = false) {
     try {
-        response = await opts.api.post('/auth/tokens', {
+        const response = await opts.api.post('/auth/tokens', {
             name,
             scopes: opts.scopes ?? ['admin'],
             // undefined → service-layer default; null → no expiry.
             expiresInDays: opts.expiresInDays ?? 365,
         });
+        return {
+            plaintextToken: response.plaintextToken,
+            id: response.id,
+            name: response.name,
+            expiresAt: response.expiresAt,
+        };
     }
     catch (err) {
-        if (err instanceof api_client_1.ApiError && err.status === 409) {
-            // Active-token cap hit. Re-surface with a hint about the
-            // management UI so the user can revoke an old one.
-            throw new Error('Personal access token limit reached. Revoke an old token at ' +
-                'https://app.ritualapp.cloud/settings/tokens and re-run `ritual init`.');
+        if (!(err instanceof api_client_1.ApiError) || err.status !== 409)
+            throw err;
+        if (retrying) {
+            // Second-time hit on the cap means a concurrent caller is
+            // also minting; fall back to manual cleanup rather than
+            // looping. Rare; safe.
+            throw manualCleanupError(webAppUrl);
+        }
+        // Try to revoke an old token from THIS machine. Quiet about
+        // what we'd do unless we can actually do it (no false promises).
+        const candidate = await findOldestRevocableForThisHost(opts.api, name);
+        if (!candidate) {
+            // All 10 slots are taken by tokens NOT named for this
+            // machine — we won't touch them. User has to choose.
+            throw manualCleanupError(webAppUrl);
+        }
+        const accepted = await askToRevoke(candidate);
+        if (!accepted)
+            throw manualCleanupError(webAppUrl);
+        // Defensive: if DELETE fails (network blip, token already
+        // revoked by another caller, 5xx), fall back to the manual-
+        // cleanup error rather than surfacing a less-helpful ApiError.
+        // Behavior is identical to pre-0.7.7 (which couldn't auto-
+        // rotate at all) — we just don't make things worse on this
+        // edge.
+        try {
+            await opts.api.delete(`/auth/tokens/${candidate.id}`);
         }
-        throw err;
+        catch {
+            throw manualCleanupError(webAppUrl);
+        }
+        console.error(`  ✓ Revoked old token "${candidate.name}" (last used ${formatRelative(candidate.lastUsedAt)})`);
+        return mintWithCapRecovery(opts, name, webAppUrl, /* retrying */ true);
     }
-    return {
-        plaintextToken: response.plaintextToken,
-        id: response.id,
-        name: response.name,
-        expiresAt: response.expiresAt,
-    };
+}
+/**
+ * Fetch the user's active tokens, filter to ones named for the
+ * current host's `defaultAgentTokenName()` shape, and return the
+ * oldest. Returns `undefined` when there's nothing safely revocable
+ * (any of: GET fails, the response is empty, or no token matches
+ * this machine's name).
+ */
+async function findOldestRevocableForThisHost(api, currentName) {
+    let list;
+    try {
+        list = await api.get('/auth/tokens');
+    }
+    catch {
+        // If we can't list, don't try to be clever — let the caller
+        // fall back to the manual-cleanup error.
+        return undefined;
+    }
+    const candidates = list.tokens.filter((t) => !t.revokedAt && t.name === currentName);
+    if (candidates.length === 0)
+        return undefined;
+    // Oldest first (createdAt ascending). The server returns
+    // createdAt descending; we just re-sort to be explicit.
+    candidates.sort((a, b) => a.createdAt.localeCompare(b.createdAt));
+    return candidates[0];
+}
+async function askToRevoke(candidate) {
+    // CI / piped stdin / non-TTY → don't try to prompt. User has to
+    // clean up manually; we surface the same actionable error.
+    if (!process.stdin.isTTY)
+        return false;
+    const created = formatRelative(candidate.createdAt);
+    const lastUsed = candidate.lastUsedAt
+        ? formatRelative(candidate.lastUsedAt)
+        : 'never used';
+    const answer = (await (0, prompt_1.prompt)(`\n  Access-token cap reached (10 active tokens). An older token from this machine\n` +
+        `  is available to rotate:\n` +
+        `    "${candidate.name}" · created ${created} · ${lastUsed}\n` +
+        `  Revoke it and continue? [Y/n]: `))
+        .trim()
+        .toLowerCase();
+    // Default-yes (empty input or 'y' / 'yes'). Anything else = no.
+    return answer === '' || answer === 'y' || answer === 'yes';
+}
+function manualCleanupError(webAppUrl) {
+    return new Error(`Personal access token limit reached. Revoke an old token at ${webAppUrl}/u/tokens ` +
+        'and re-run `ritual init`.');
+}
+/**
+ * Format an ISO 8601 timestamp as "N days ago" / "N hours ago" /
+ * "just now". Kept tiny — no dep on date-fns / dayjs.
+ */
+function formatRelative(iso) {
+    if (!iso)
+        return 'unknown';
+    const then = Date.parse(iso);
+    if (Number.isNaN(then))
+        return iso;
+    const diffMs = Date.now() - then;
+    const minutes = Math.floor(diffMs / 60_000);
+    if (minutes < 1)
+        return 'just now';
+    if (minutes < 60)
+        return `${minutes}m ago`;
+    const hours = Math.floor(minutes / 60);
+    if (hours < 24)
+        return `${hours}h ago`;
+    const days = Math.floor(hours / 24);
+    if (days < 30)
+        return `${days}d ago`;
+    const months = Math.floor(days / 30);
+    if (months < 12)
+        return `${months}mo ago`;
+    const years = Math.floor(days / 365);
+    return `${years}y ago`;
 }
 /**
  * `Ritual CLI — <hostname>`, truncated to fit the API's 80-char limit

package/dist/lib/pat-store.js.map

@@ -1 +1 @@
-{"version":3,"file":"pat-store.js","sourceRoot":"","sources":["../../src/lib/pat-store.ts"],"names":[],"mappings":";;AA8EA,oCA6BC;AAOD,sDAIC;AAtHD,qCAAmC;AACnC,6CAAmD;AA6E5C,KAAK,UAAU,YAAY,CAAC,IAAoB;IACtD,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,IAAI,qBAAqB,EAAE,CAAC;IAE1D,IAAI,QAA2B,CAAC;IAChC,IAAI,CAAC;QACJ,QAAQ,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,IAAI,CAAoB,cAAc,EAAE;YACjE,IAAI;YACJ,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC;YAChC,uDAAuD;YACvD,aAAa,EAAE,IAAI,CAAC,aAAa,IAAI,GAAG;SACxC,CAAC,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,IAAI,GAAG,YAAY,qBAAQ,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACnD,yDAAyD;YACzD,mDAAmD;YACnD,MAAM,IAAI,KAAK,CACd,8DAA8D;gBAC7D,uEAAuE,CACxE,CAAC;QACH,CAAC;QACD,MAAM,GAAG,CAAC;IACX,CAAC;IAED,OAAO;QACN,cAAc,EAAE,QAAQ,CAAC,cAAc;QACvC,EAAE,EAAE,QAAQ,CAAC,EAAE;QACf,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,SAAS,EAAE,QAAQ,CAAC,SAAS;KAC7B,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAgB,qBAAqB;IACpC,MAAM,IAAI,GAAG,IAAA,kBAAQ,GAAE,IAAI,cAAc,CAAC;IAC1C,MAAM,IAAI,GAAG,gBAAgB,IAAI,EAAE,CAAC;IACpC,OAAO,IAAI,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AAC5D,CAAC"}
+{"version":3,"file":"pat-store.js","sourceRoot":"","sources":["../../src/lib/pat-store.ts"],"names":[],"mappings":";;AAgHA,oCAIC;AA+KD,sDAIC;AAvSD,qCAAmC;AACnC,6CAAmD;AACnD,qCAAkC;AA2FlC,MAAM,mBAAmB,GAAG,6BAA6B,CAAC;AAmBnD,KAAK,UAAU,YAAY,CAAC,IAAoB;IACtD,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,IAAI,qBAAqB,EAAE,CAAC;IAC1D,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,mBAAmB,CAAC;IACxD,OAAO,mBAAmB,CAAC,IAAI,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;AACnD,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,KAAK,UAAU,mBAAmB,CACjC,IAAoB,EACpB,IAAY,EACZ,SAAiB,EACjB,QAAQ,GAAG,KAAK;IAEhB,IAAI,CAAC;QACJ,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,IAAI,CAAoB,cAAc,EAAE;YACvE,IAAI;YACJ,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC;YAChC,uDAAuD;YACvD,aAAa,EAAE,IAAI,CAAC,aAAa,IAAI,GAAG;SACxC,CAAC,CAAC;QACH,OAAO;YACN,cAAc,EAAE,QAAQ,CAAC,cAAc;YACvC,EAAE,EAAE,QAAQ,CAAC,EAAE;YACf,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,SAAS,EAAE,QAAQ,CAAC,SAAS;SAC7B,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,IAAI,CAAC,CAAC,GAAG,YAAY,qBAAQ,CAAC,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;YAAE,MAAM,GAAG,CAAC;QAChE,IAAI,QAAQ,EAAE,CAAC;YACd,0DAA0D;YAC1D,wDAAwD;YACxD,uBAAuB;YACvB,MAAM,kBAAkB,CAAC,SAAS,CAAC,CAAC;QACrC,CAAC;QAED,4DAA4D;QAC5D,iEAAiE;QACjE,MAAM,SAAS,GAAG,MAAM,8BAA8B,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACvE,IAAI,CAAC,SAAS,EAAE,CAAC;YAChB,sDAAsD;YACtD,qDAAqD;YACrD,MAAM,kBAAkB,CAAC,SAAS,CAAC,CAAC;QACrC,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,SAAS,CAAC,CAAC;QAC9C,IAAI,CAAC,QAAQ;YAAE,MAAM,kBAAkB,CAAC,SAAS,CAAC,CAAC;QAEnD,0DAA0D;QAC1D,4DAA4D;QAC5D,+DAA+D;QAC/D,2DAA2D;QAC3D,2DAA2D;QAC3D,QAAQ;QACR,IAAI,CAAC;YACJ,MAAM,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,gBAAgB,SAAS,CAAC,EAAE,EAAE,CAAC,CAAC;QACvD,CAAC;QAAC,MAAM,CAAC;YACR,MAAM,kBAAkB,CAAC,SAAS,CAAC,CAAC;QACrC,CAAC;QACD,OAAO,CAAC,KAAK,CAAC,0BAA0B,SAAS,CAAC,IAAI,gBAAgB,cAAc,CAAC,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QAE/G,OAAO,mBAAmB,CAAC,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,cAAc,CAAC,IAAI,CAAC,CAAC;IACxE,CAAC;AACF,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,8BAA8B,CAC5C,GAAc,EACd,WAAmB;IAEnB,IAAI,IAAqB,CAAC;IAC1B,IAAI,CAAC;QACJ,IAAI,GAAG,MAAM,GAAG,CAAC,GAAG,CAAkB,cAAc,CAAC,CAAC;IACvD,CAAC;IAAC,MAAM,CAAC;QACR,4DAA4D;QAC5D,yCAAyC;QACzC,OAAO,SAAS,CAAC;IAClB,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CACpC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW,CAC7C,CAAC;IACF,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAE9C,yDAAyD;IACzD,wDAAwD;IACxD,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;IAClE,OAAO,UAAU,CAAC,CAAC,CAAC,CAAC;AACtB,CAAC;AAED,KAAK,UAAU,WAAW,CACzB,SAA4C;IAE5C,gEAAgE;IAChE,2DAA2D;IAC3D,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IAEvC,MAAM,OAAO,GAAG,cAAc,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;IACpD,MAAM,QAAQ,GAAG,SAAS,CAAC,UAAU;QACpC,CAAC,CAAC,cAAc,CAAC,SAAS,CAAC,UAAU,CAAC;QACtC,CAAC,CAAC,YAAY,CAAC;IAChB,MAAM,MAAM,GAAG,CACd,MAAM,IAAA,eAAM,EACX,qFAAqF;QACpF,6BAA6B;QAC7B,QAAQ,SAAS,CAAC,IAAI,eAAe,OAAO,MAAM,QAAQ,IAAI;QAC9D,mCAAmC,CACpC,CACD;SACC,IAAI,EAAE;SACN,WAAW,EAAE,CAAC;IAChB,gEAAgE;IAChE,OAAO,MAAM,KAAK,EAAE,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,KAAK,CAAC;AAC5D,CAAC;AAED,SAAS,kBAAkB,CAAC,SAAiB;IAC5C,OAAO,IAAI,KAAK,CACf,+DAA+D,SAAS,YAAY;QACnF,2BAA2B,CAC5B,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,cAAc,CAAC,GAAkB;IACzC,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC3B,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC7B,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC;QAAE,OAAO,GAAG,CAAC;IACnC,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;IACjC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC;IAC5C,IAAI,OAAO,GAAG,CAAC;QAAE,OAAO,UAAU,CAAC;IACnC,IAAI,OAAO,GAAG,EAAE;QAAE,OAAO,GAAG,OAAO,OAAO,CAAC;IAC3C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,EAAE,CAAC,CAAC;IACvC,IAAI,KAAK,GAAG,EAAE;QAAE,OAAO,GAAG,KAAK,OAAO,CAAC;IACvC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,EAAE,CAAC,CAAC;IACpC,IAAI,IAAI,GAAG,EAAE;QAAE,OAAO,GAAG,IAAI,OAAO,CAAC;IACrC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC;IACrC,IAAI,MAAM,GAAG,EAAE;QAAE,OAAO,GAAG,MAAM,QAAQ,CAAC;IAC1C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC;IACrC,OAAO,GAAG,KAAK,OAAO,CAAC;AACxB,CAAC;AAED;;;;GAIG;AACH,SAAgB,qBAAqB;IACpC,MAAM,IAAI,GAAG,IAAA,kBAAQ,GAAE,IAAI,cAAc,CAAC;IAC1C,MAAM,IAAI,GAAG,gBAAgB,IAAI,EAAE,CAAC;IACpC,OAAO,IAAI,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AAC5D,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ritualai/cli",
-  "version": "0.7.5",
+  "version": "0.7.7",
   "description": "Ritual CLI — scaffold AI coding agent skills + register MCP servers. Connects Claude Code, Cursor, Windsurf, Kiro, Gemini CLI, VS Code/Copilot, and Codex to Ritual Cloud.",
   "private": false,
   "license": "Apache-2.0",

package/skills/claude-code/ritual/manifest.json

@@ -0,0 +1,57 @@
+[
+  {
+    "path": "DESIGN.md",
+    "lines": 36,
+    "bytes": 2226
+  },
+  {
+    "path": "SKILL.md",
+    "lines": 72,
+    "bytes": 5915
+  },
+  {
+    "path": "agents/openai.yaml",
+    "lines": 6,
+    "bytes": 213
+  },
+  {
+    "path": "references/async-polling.md",
+    "lines": 27,
+    "bytes": 1197
+  },
+  {
+    "path": "references/build-flow.md",
+    "lines": 1519,
+    "bytes": 88142
+  },
+  {
+    "path": "references/cli-output-contract.md",
+    "lines": 225,
+    "bytes": 11559
+  },
+  {
+    "path": "references/context-pulse-flow.md",
+    "lines": 357,
+    "bytes": 25358
+  },
+  {
+    "path": "references/discovery-classification.md",
+    "lines": 176,
+    "bytes": 10275
+  },
+  {
+    "path": "references/lineage-flow.md",
+    "lines": 154,
+    "bytes": 8774
+  },
+  {
+    "path": "references/resume-flow.md",
+    "lines": 157,
+    "bytes": 9950
+  },
+  {
+    "path": "references/scoring-fallback.md",
+    "lines": 126,
+    "bytes": 6494
+  }
+]