@simonfestl/husky-cli 1.17.0 → 1.18.1

package/dist/commands/auth.js

@@ -311,13 +311,20 @@ authCommand
             process.exit(1);
         }
         const session = await res.json();
-        setSessionConfig(session);
+        // Extract agent id for storage (API returns object with id, name, emoji)
+        setSessionConfig({
+            token: session.token,
+            expiresAt: session.expiresAt,
+            role: session.role,
+            agent: session.agent.id,
+        });
         // Fetch and cache permissions for the new session role
         await fetchAndCacheRole();
         if (options.json) {
             console.log(JSON.stringify({
                 success: true,
-                agent: session.agent,
+                agent: session.agent.id,
+                agentName: session.agent.name,
                 role: session.role,
                 expiresAt: session.expiresAt,
             }, null, 2));
@@ -326,7 +333,7 @@ authCommand
         const expiresAt = new Date(session.expiresAt);
         console.log("\n✅ Session created");
         console.log("─".repeat(40));
-        console.log(`Agent:    ${session.agent}`);
+        console.log(`Agent:    ${session.agent.name} (${session.agent.id})`);
         console.log(`Role:     ${session.role}`);
         console.log(`Expires:  ${expiresAt.toLocaleString()}`);
         console.log("");
@@ -438,20 +445,27 @@ authCommand
             process.exit(1);
         }
         const session = await res.json();
-        setSessionConfig(session);
+        // Extract agent id for storage (API returns object with id, name, emoji)
+        setSessionConfig({
+            token: session.token,
+            expiresAt: session.expiresAt,
+            role: session.role,
+            agent: session.agent.id,
+        });
         // Refresh permissions for the session role
         await fetchAndCacheRole();
         if (options.json) {
             console.log(JSON.stringify({
                 success: true,
-                agent: session.agent,
+                agent: session.agent.id,
+                agentName: session.agent.name,
                 role: session.role,
                 expiresAt: session.expiresAt,
             }, null, 2));
             return;
         }
         const expiresAt = new Date(session.expiresAt);
-        console.log(`✅ Session refreshed for '${session.agent}' (expires: ${expiresAt.toLocaleString()})`);
+        console.log(`✅ Session refreshed for '${session.agent.name}' (expires: ${expiresAt.toLocaleString()})`);
     }
     catch (error) {
         console.error(`Error: ${error instanceof Error ? error.message : "Unknown error"}`);

package/dist/commands/config.d.ts

@@ -79,6 +79,27 @@ export declare function setSessionConfig(session: {
     permissions?: string[];
 }): void;
 export declare function clearSessionConfig(): void;
+/**
+ * Check if there's an active (non-expired) session
+ */
+export declare function isSessionActive(): boolean;
+/**
+ * Check if the API is properly configured for making requests.
+ * Returns true if we have either an active session or an API key.
+ */
+export declare function isApiConfigured(): boolean;
+/**
+ * Get authentication headers for API requests.
+ * Returns Bearer token if session is active, otherwise x-api-key.
+ * Use this for all API calls to ensure consistent auth.
+ */
+export declare function getAuthHeaders(): Record<string, string>;
+/**
+ * Ensure the session is valid, refreshing if needed.
+ * Call this before long-running operations (like watch modes).
+ * Returns true if session is valid (or was refreshed), false if no session/refresh failed.
+ */
+export declare function ensureValidSession(): Promise<boolean>;
 export declare function getSessionConfig(): {
     token?: string;
     expiresAt?: string;

package/dist/commands/config.js

@@ -224,6 +224,91 @@ export function clearSessionConfig() {
     delete config.sessionRole;
     saveConfig(config);
 }
+/**
+ * Check if there's an active (non-expired) session
+ */
+export function isSessionActive() {
+    const config = getConfig();
+    if (!config.sessionToken || !config.sessionExpiresAt) {
+        return false;
+    }
+    const expiresAt = new Date(config.sessionExpiresAt);
+    return expiresAt > new Date();
+}
+/**
+ * Check if the API is properly configured for making requests.
+ * Returns true if we have either an active session or an API key.
+ */
+export function isApiConfigured() {
+    const config = getConfig();
+    return Boolean(config.apiUrl && (config.apiKey || isSessionActive()));
+}
+/**
+ * Get authentication headers for API requests.
+ * Returns Bearer token if session is active, otherwise x-api-key.
+ * Use this for all API calls to ensure consistent auth.
+ */
+export function getAuthHeaders() {
+    const config = getConfig();
+    // Check if there's an active (non-expired) session
+    if (config.sessionToken && config.sessionExpiresAt) {
+        const expiresAt = new Date(config.sessionExpiresAt);
+        if (expiresAt > new Date()) {
+            // Session is active - use Bearer token
+            return { Authorization: `Bearer ${config.sessionToken}` };
+        }
+    }
+    // Fall back to API key
+    if (config.apiKey) {
+        return { "x-api-key": config.apiKey };
+    }
+    return {};
+}
+/**
+ * Ensure the session is valid, refreshing if needed.
+ * Call this before long-running operations (like watch modes).
+ * Returns true if session is valid (or was refreshed), false if no session/refresh failed.
+ */
+export async function ensureValidSession() {
+    const config = getConfig();
+    if (!config.sessionToken || !config.sessionExpiresAt) {
+        return false; // No session, will use API key
+    }
+    const expiresAt = new Date(config.sessionExpiresAt);
+    const now = new Date();
+    const fiveMinutes = 5 * 60 * 1000;
+    // Refresh if expiring within 5 minutes
+    if (expiresAt.getTime() - now.getTime() < fiveMinutes) {
+        if (!config.apiUrl || !config.apiKey || !config.sessionAgent) {
+            return false; // Can't refresh without these
+        }
+        try {
+            const url = new URL("/api/auth/session", config.apiUrl);
+            const res = await fetch(url.toString(), {
+                method: "POST",
+                headers: {
+                    "x-api-key": config.apiKey,
+                    "Content-Type": "application/json",
+                },
+                body: JSON.stringify({ agent: config.sessionAgent }),
+            });
+            if (res.ok) {
+                const data = await res.json();
+                setSessionConfig({
+                    token: data.token,
+                    expiresAt: data.expiresAt,
+                    agent: data.agent,
+                    role: data.role,
+                });
+                return true;
+            }
+        }
+        catch {
+            // Refresh failed, continue with current token if not expired
+        }
+    }
+    return expiresAt > now;
+}
 export function getSessionConfig() {
     const config = getConfig();
     if (!config.sessionToken)

package/dist/commands/interactive/auth.js

@@ -4,7 +4,7 @@
  * Provides menu-based authentication and API key management.
  */
 import { select, input, confirm } from "@inquirer/prompts";
-import { getConfig, setConfig, setSessionConfig, clearSessionConfig } from "../config.js";
+import { getConfig, setConfig, setSessionConfig, clearSessionConfig, getAuthHeaders } from "../config.js";
 import { pressEnterToContinue } from "./utils.js";
 export async function authMenu() {
     console.log("\n  AUTH");
@@ -65,7 +65,7 @@ async function login() {
             method: "POST",
             headers: {
                 "Content-Type": "application/json",
-                ...(config.apiKey ? { "x-api-key": config.apiKey } : {}),
+                ...getAuthHeaders(),
             },
             body: JSON.stringify({ agent: agentName }),
         });

package/dist/commands/interactive/brain.js

@@ -4,6 +4,7 @@
  * Provides menu-based agent memory and learning management.
  */
 import { select, input, confirm } from "@inquirer/prompts";
+import { getAuthHeaders } from "../config.js";
 import { ensureConfig, pressEnterToContinue, truncate } from "./utils.js";
 export async function brainMenu() {
     const config = ensureConfig();
@@ -66,7 +67,7 @@ async function listMemories(config) {
             default: "20",
         });
         const res = await fetch(`${config.apiUrl}/api/brain/memories?limit=${limit}`, {
-            headers: config.apiKey ? { "x-api-key": config.apiKey } : {},
+            headers: getAuthHeaders(),
         });
         if (!res.ok) {
             console.error(`\n  Error: API returned ${res.status}\n`);
@@ -103,7 +104,7 @@ async function recallMemory(config) {
             validate: (v) => (v.length > 0 ? true : "Query is required"),
         });
         const res = await fetch(`${config.apiUrl}/api/brain/recall?query=${encodeURIComponent(query)}`, {
-            headers: config.apiKey ? { "x-api-key": config.apiKey } : {},
+            headers: getAuthHeaders(),
         });
         if (!res.ok) {
             console.error(`\n  Error: API returned ${res.status}\n`);
@@ -147,7 +148,7 @@ async function rememberContent(config) {
             method: "POST",
             headers: {
                 "Content-Type": "application/json",
-                ...(config.apiKey ? { "x-api-key": config.apiKey } : {}),
+                ...(getAuthHeaders()),
             },
             body: JSON.stringify({ content, tags }),
         });
@@ -183,7 +184,7 @@ async function publishMemory(config) {
             method: "POST",
             headers: {
                 "Content-Type": "application/json",
-                ...(config.apiKey ? { "x-api-key": config.apiKey } : {}),
+                ...(getAuthHeaders()),
             },
             body: JSON.stringify({ visibility }),
         });
@@ -204,7 +205,7 @@ async function publishMemory(config) {
 async function sharedMemories(config) {
     try {
         const res = await fetch(`${config.apiUrl}/api/brain/shared`, {
-            headers: config.apiKey ? { "x-api-key": config.apiKey } : {},
+            headers: getAuthHeaders(),
         });
         if (!res.ok) {
             console.error(`\n  Error: API returned ${res.status}\n`);
@@ -242,7 +243,7 @@ async function boostMemory(config) {
         });
         const res = await fetch(`${config.apiUrl}/api/brain/boost/${id}`, {
             method: "POST",
-            headers: config.apiKey ? { "x-api-key": config.apiKey } : {},
+            headers: getAuthHeaders(),
         });
         if (!res.ok) {
             const error = await res.text();
@@ -275,7 +276,7 @@ async function archiveMemory(config) {
         }
         const res = await fetch(`${config.apiUrl}/api/brain/archive/${id}`, {
             method: "POST",
-            headers: config.apiKey ? { "x-api-key": config.apiKey } : {},
+            headers: getAuthHeaders(),
         });
         if (!res.ok) {
             const error = await res.text();
@@ -308,7 +309,7 @@ async function deleteMemory(config) {
         }
         const res = await fetch(`${config.apiUrl}/api/brain/memories/${id}`, {
             method: "DELETE",
-            headers: config.apiKey ? { "x-api-key": config.apiKey } : {},
+            headers: getAuthHeaders(),
         });
         if (!res.ok) {
             const error = await res.text();
@@ -337,7 +338,7 @@ async function cleanupMemories(config) {
         }
         const res = await fetch(`${config.apiUrl}/api/brain/cleanup`, {
             method: "POST",
-            headers: config.apiKey ? { "x-api-key": config.apiKey } : {},
+            headers: getAuthHeaders(),
         });
         if (!res.ok) {
             const error = await res.text();

package/dist/commands/interactive/changelog.js

@@ -1,5 +1,6 @@
 import { select, input, confirm } from "@inquirer/prompts";
 import { execSync } from "child_process";
+import { getAuthHeaders } from "../config.js";
 import { ensureConfig, pressEnterToContinue, truncate, formatDate } from "./utils.js";
 const TYPE_LABELS = {
     feature: "New Features",
@@ -55,7 +56,7 @@ async function fetchChangelogs(config, projectId) {
         url.searchParams.set("projectId", projectId);
     }
     const res = await fetch(url.toString(), {
-        headers: config.apiKey ? { "x-api-key": config.apiKey } : {},
+        headers: getAuthHeaders(),
     });
     if (!res.ok)
         throw new Error(`API returned ${res.status}`);
@@ -63,7 +64,7 @@ async function fetchChangelogs(config, projectId) {
 }
 async function fetchProjects(config) {
     const res = await fetch(`${config.apiUrl}/api/projects`, {
-        headers: config.apiKey ? { "x-api-key": config.apiKey } : {},
+        headers: getAuthHeaders(),
     });
     if (!res.ok)
         throw new Error(`API returned ${res.status}`);
@@ -86,7 +87,7 @@ async function selectChangelog(config, message) {
         return null;
     // Fetch full changelog
     const res = await fetch(`${config.apiUrl}/api/changelogs/${changelogId}`, {
-        headers: config.apiKey ? { "x-api-key": config.apiKey } : {},
+        headers: getAuthHeaders(),
     });
     if (!res.ok)
         return null;
@@ -208,7 +209,7 @@ async function generateChangelog(config) {
             method: "POST",
             headers: {
                 "Content-Type": "application/json",
-                ...(config.apiKey ? { "x-api-key": config.apiKey } : {}),
+                ...(getAuthHeaders()),
             },
             body: JSON.stringify({
                 projectId,
@@ -279,7 +280,7 @@ async function publishChangelog(config) {
             method: "PATCH",
             headers: {
                 "Content-Type": "application/json",
-                ...(config.apiKey ? { "x-api-key": config.apiKey } : {}),
+                ...(getAuthHeaders()),
             },
             body: JSON.stringify({
                 status: "published",
@@ -315,7 +316,7 @@ async function deleteChangelog(config) {
         }
         const res = await fetch(`${config.apiUrl}/api/changelogs/${changelog.id}`, {
             method: "DELETE",
-            headers: config.apiKey ? { "x-api-key": config.apiKey } : {},
+            headers: getAuthHeaders(),
         });
         if (!res.ok) {
             console.error(`\n  Error: API returned ${res.status}\n`);

package/dist/commands/interactive/chat.js

@@ -5,6 +5,7 @@
  */
 import { select, input, confirm } from "@inquirer/prompts";
 import { ensureConfig, pressEnterToContinue, truncate, formatDate } from "./utils.js";
+import { getAuthHeaders, ensureValidSession } from "../config.js";
 export async function chatMenu() {
     const config = ensureConfig();
     console.log("\n  CHAT");
@@ -67,7 +68,7 @@ async function showInbox(config) {
         });
         const url = `${config.apiUrl}/api/supervisor/inbox${unreadOnly ? "?unread=true" : ""}`;
         const res = await fetch(url, {
-            headers: config.apiKey ? { "x-api-key": config.apiKey } : {},
+            headers: getAuthHeaders(),
         });
         if (!res.ok) {
             console.error(`\n  Error: API returned ${res.status}\n`);
@@ -102,7 +103,7 @@ async function showInbox(config) {
 async function showPending(config) {
     try {
         const res = await fetch(`${config.apiUrl}/api/supervisor/pending`, {
-            headers: config.apiKey ? { "x-api-key": config.apiKey } : {},
+            headers: getAuthHeaders(),
         });
         if (!res.ok) {
             console.error(`\n  Error: API returned ${res.status}\n`);
@@ -142,7 +143,7 @@ async function sendMessage(config) {
             method: "POST",
             headers: {
                 "Content-Type": "application/json",
-                ...(config.apiKey ? { "x-api-key": config.apiKey } : {}),
+                ...getAuthHeaders(),
             },
             body: JSON.stringify({ message }),
         });
@@ -174,7 +175,7 @@ async function replyToMessage(config) {
             method: "POST",
             headers: {
                 "Content-Type": "application/json",
-                ...(config.apiKey ? { "x-api-key": config.apiKey } : {}),
+                ...getAuthHeaders(),
             },
             body: JSON.stringify({ response }),
         });
@@ -196,12 +197,15 @@ async function watchMessages(config) {
     console.log("\n  WATCH MODE");
     console.log("  " + "-".repeat(50));
     console.log("  Watching for new messages...");
+    console.log("  (Session token will auto-refresh if needed)");
     console.log("");
     let lastCheck = new Date().toISOString();
     const checkMessages = async () => {
         try {
+            // Ensure session is valid before each poll (auto-refreshes if needed)
+            await ensureValidSession();
             const res = await fetch(`${config.apiUrl}/api/supervisor/inbox?since=${encodeURIComponent(lastCheck)}`, {
-                headers: config.apiKey ? { "x-api-key": config.apiKey } : {},
+                headers: getAuthHeaders(),
             });
             if (res.ok) {
                 const messages = await res.json();
@@ -211,6 +215,9 @@ async function watchMessages(config) {
                     console.log("");
                 }
             }
+            else if (res.status === 401) {
+                console.log(`  [${new Date().toLocaleTimeString()}] Auth error - will retry with refreshed token`);
+            }
             lastCheck = new Date().toISOString();
         }
         catch {
@@ -229,7 +236,7 @@ async function watchMessages(config) {
 async function showConversations(config) {
     try {
         const res = await fetch(`${config.apiUrl}/api/agent-conversations`, {
-            headers: config.apiKey ? { "x-api-key": config.apiKey } : {},
+            headers: getAuthHeaders(),
         });
         if (!res.ok) {
             console.error(`\n  Error: API returned ${res.status}\n`);
@@ -260,7 +267,7 @@ async function showConversations(config) {
 async function showSpaces(config) {
     try {
         const res = await fetch(`${config.apiUrl}/api/chat/spaces`, {
-            headers: config.apiKey ? { "x-api-key": config.apiKey } : {},
+            headers: getAuthHeaders(),
         });
         if (!res.ok) {
             console.error(`\n  Error: API returned ${res.status}\n`);
@@ -303,7 +310,7 @@ async function askQuestion(config) {
             method: "POST",
             headers: {
                 "Content-Type": "application/json",
-                ...(config.apiKey ? { "x-api-key": config.apiKey } : {}),
+                ...getAuthHeaders(),
             },
             body: JSON.stringify({ question, wait: waitForAnswer }),
         });
@@ -342,7 +349,7 @@ async function requestReview(config) {
             method: "POST",
             headers: {
                 "Content-Type": "application/json",
-                ...(config.apiKey ? { "x-api-key": config.apiKey } : {}),
+                ...getAuthHeaders(),
             },
             body: JSON.stringify({ question }),
         });

package/dist/commands/interactive/departments.js

@@ -1,4 +1,5 @@
 import { select, input, confirm } from "@inquirer/prompts";
+import { getAuthHeaders } from "../config.js";
 import { ensureConfig, pressEnterToContinue, truncate } from "./utils.js";
 export async function departmentsMenu() {
     const config = ensureConfig();
@@ -36,7 +37,7 @@ export async function departmentsMenu() {
 }
 async function fetchDepartments(config) {
     const res = await fetch(`${config.apiUrl}/api/departments`, {
-        headers: config.apiKey ? { "x-api-key": config.apiKey } : {},
+        headers: getAuthHeaders(),
     });
     if (!res.ok)
         throw new Error(`API returned ${res.status}`);
@@ -87,7 +88,7 @@ async function viewDepartment(config) {
         if (!dept)
             return;
         const res = await fetch(`${config.apiUrl}/api/departments/${dept.id}`, {
-            headers: config.apiKey ? { "x-api-key": config.apiKey } : {},
+            headers: getAuthHeaders(),
         });
         if (!res.ok) {
             console.error(`\n  Error: API returned ${res.status}\n`);
@@ -128,7 +129,7 @@ async function createDepartment(config) {
             method: "POST",
             headers: {
                 "Content-Type": "application/json",
-                ...(config.apiKey ? { "x-api-key": config.apiKey } : {}),
+                ...(getAuthHeaders()),
             },
             body: JSON.stringify({
                 name,
@@ -192,7 +193,7 @@ async function updateDepartment(config) {
             method: "PATCH",
             headers: {
                 "Content-Type": "application/json",
-                ...(config.apiKey ? { "x-api-key": config.apiKey } : {}),
+                ...(getAuthHeaders()),
             },
             body: JSON.stringify(updateData),
         });
@@ -225,7 +226,7 @@ async function deleteDepartment(config) {
         }
         const res = await fetch(`${config.apiUrl}/api/departments/${dept.id}`, {
             method: "DELETE",
-            headers: config.apiKey ? { "x-api-key": config.apiKey } : {},
+            headers: getAuthHeaders(),
         });
         if (!res.ok) {
             console.error(`\n  Error: API returned ${res.status}\n`);

package/dist/commands/interactive/ideas.js

@@ -1,4 +1,5 @@
 import { select, input, confirm } from "@inquirer/prompts";
+import { getAuthHeaders } from "../config.js";
 import { ensureConfig, pressEnterToContinue, truncate, formatDate } from "./utils.js";
 export async function ideasMenu() {
     const config = ensureConfig();
@@ -40,7 +41,7 @@ export async function ideasMenu() {
 }
 async function fetchIdeas(config) {
     const res = await fetch(`${config.apiUrl}/api/ideas`, {
-        headers: config.apiKey ? { "x-api-key": config.apiKey } : {},
+        headers: getAuthHeaders(),
     });
     if (!res.ok)
         throw new Error(`API returned ${res.status}`);
@@ -93,7 +94,7 @@ async function viewIdea(config) {
         if (!idea)
             return;
         const res = await fetch(`${config.apiUrl}/api/ideas/${idea.id}`, {
-            headers: config.apiKey ? { "x-api-key": config.apiKey } : {},
+            headers: getAuthHeaders(),
         });
         if (!res.ok) {
             console.error(`\n  Error: API returned ${res.status}\n`);
@@ -137,7 +138,7 @@ async function createIdea(config) {
             method: "POST",
             headers: {
                 "Content-Type": "application/json",
-                ...(config.apiKey ? { "x-api-key": config.apiKey } : {}),
+                ...(getAuthHeaders()),
             },
             body: JSON.stringify({
                 title,
@@ -214,7 +215,7 @@ async function updateIdea(config) {
             method: "PATCH",
             headers: {
                 "Content-Type": "application/json",
-                ...(config.apiKey ? { "x-api-key": config.apiKey } : {}),
+                ...(getAuthHeaders()),
             },
             body: JSON.stringify(updateData),
         });
@@ -258,7 +259,7 @@ async function convertIdea(config) {
             method: "POST",
             headers: {
                 "Content-Type": "application/json",
-                ...(config.apiKey ? { "x-api-key": config.apiKey } : {}),
+                ...(getAuthHeaders()),
             },
             body: JSON.stringify({ priority, assignee }),
         });
@@ -294,7 +295,7 @@ async function deleteIdea(config) {
         }
         const res = await fetch(`${config.apiUrl}/api/ideas/${idea.id}`, {
             method: "DELETE",
-            headers: config.apiKey ? { "x-api-key": config.apiKey } : {},
+            headers: getAuthHeaders(),
         });
         if (!res.ok) {
             console.error(`\n  Error: API returned ${res.status}\n`);

package/dist/commands/interactive/infra.js

@@ -4,6 +4,7 @@
  * Provides menu-based infrastructure monitoring and management.
  */
 import { select, input, confirm } from "@inquirer/prompts";
+import { getAuthHeaders } from "../config.js";
 import { ensureConfig, pressEnterToContinue, truncate, formatDate } from "./utils.js";
 export async function infraMenu() {
     const config = ensureConfig();
@@ -51,7 +52,7 @@ async function healthCheck(config) {
     try {
         console.log("\n  Running health checks...\n");
         const res = await fetch(`${config.apiUrl}/api/infra/health`, {
-            headers: config.apiKey ? { "x-api-key": config.apiKey } : {},
+            headers: getAuthHeaders(),
         });
         if (!res.ok) {
             console.error(`\n  Error: API returned ${res.status}\n`);
@@ -84,7 +85,7 @@ async function healthCheck(config) {
 async function serviceStatus(config) {
     try {
         const res = await fetch(`${config.apiUrl}/api/infra/services`, {
-            headers: config.apiKey ? { "x-api-key": config.apiKey } : {},
+            headers: getAuthHeaders(),
         });
         if (!res.ok) {
             console.error(`\n  Error: API returned ${res.status}\n`);
@@ -116,7 +117,7 @@ async function serviceStatus(config) {
 async function vmStatus(config) {
     try {
         const res = await fetch(`${config.apiUrl}/api/vm-sessions`, {
-            headers: config.apiKey ? { "x-api-key": config.apiKey } : {},
+            headers: getAuthHeaders(),
         });
         if (!res.ok) {
             console.error(`\n  Error: API returned ${res.status}\n`);
@@ -148,7 +149,7 @@ async function vmStatus(config) {
 async function showMetrics(config) {
     try {
         const res = await fetch(`${config.apiUrl}/api/infra/metrics`, {
-            headers: config.apiKey ? { "x-api-key": config.apiKey } : {},
+            headers: getAuthHeaders(),
         });
         if (!res.ok) {
             console.error(`\n  Error: API returned ${res.status}\n`);
@@ -177,7 +178,7 @@ async function showMetrics(config) {
 async function showAlerts(config) {
     try {
         const res = await fetch(`${config.apiUrl}/api/infra/alerts`, {
-            headers: config.apiKey ? { "x-api-key": config.apiKey } : {},
+            headers: getAuthHeaders(),
         });
         if (!res.ok) {
             console.error(`\n  Error: API returned ${res.status}\n`);
@@ -225,7 +226,7 @@ async function restartService(config) {
         console.log(`\n  Restarting ${serviceName}...`);
         const res = await fetch(`${config.apiUrl}/api/infra/services/${encodeURIComponent(serviceName)}/restart`, {
             method: "POST",
-            headers: config.apiKey ? { "x-api-key": config.apiKey } : {},
+            headers: getAuthHeaders(),
         });
         if (!res.ok) {
             const error = await res.text();

package/dist/commands/interactive/preview.js

@@ -4,6 +4,7 @@
  * Provides menu-based PR preview deployment management.
  */
 import { select, input, confirm } from "@inquirer/prompts";
+import { getAuthHeaders } from "../config.js";
 import { ensureConfig, pressEnterToContinue, truncate, formatDate } from "./utils.js";
 export async function previewMenu() {
     const config = ensureConfig();
@@ -46,7 +47,7 @@ export async function previewMenu() {
 async function listPreviews(config) {
     try {
         const res = await fetch(`${config.apiUrl}/api/previews`, {
-            headers: config.apiKey ? { "x-api-key": config.apiKey } : {},
+            headers: getAuthHeaders(),
         });
         if (!res.ok) {
             console.error(`\n  Error: API returned ${res.status}\n`);
@@ -88,7 +89,7 @@ async function previewStatus(config) {
             },
         });
         const res = await fetch(`${config.apiUrl}/api/previews/pr/${prNumber}`, {
-            headers: config.apiKey ? { "x-api-key": config.apiKey } : {},
+            headers: getAuthHeaders(),
         });
         if (!res.ok) {
             if (res.status === 404) {
@@ -142,7 +143,7 @@ async function deployPreview(config) {
             method: "POST",
             headers: {
                 "Content-Type": "application/json",
-                ...(config.apiKey ? { "x-api-key": config.apiKey } : {}),
+                ...(getAuthHeaders()),
             },
             body: JSON.stringify({ prNumber: parseInt(prNumber) }),
         });
@@ -189,7 +190,7 @@ async function deletePreview(config) {
         console.log(`\n  Deleting preview for PR #${prNumber}...\n`);
         const res = await fetch(`${config.apiUrl}/api/previews/pr/${prNumber}`, {
             method: "DELETE",
-            headers: config.apiKey ? { "x-api-key": config.apiKey } : {},
+            headers: getAuthHeaders(),
         });
         if (!res.ok) {
             const error = await res.text();
@@ -219,7 +220,7 @@ async function cleanupPreviews(config) {
         console.log("\n  Cleaning up old previews...\n");
         const res = await fetch(`${config.apiUrl}/api/previews/cleanup`, {
             method: "POST",
-            headers: config.apiKey ? { "x-api-key": config.apiKey } : {},
+            headers: getAuthHeaders(),
         });
         if (!res.ok) {
             const error = await res.text();