@simonfestl/husky-cli 1.21.0 → 1.22.0

package/dist/commands/auth.js

@@ -1,6 +1,7 @@
 import { Command } from "commander";
 import { getConfig, setSessionConfig, clearSessionConfig, getSessionConfig, fetchAndCacheRole } from "./config.js";
 import { getPermissions, clearPermissionsCache, getCacheStatus, hasPermission, canAccessKnowledgeBase } from "../lib/permissions-cache.js";
+import { apiRequest as hybridApiRequest } from "../lib/api-client.js";
 const API_KEY_ROLES = [
     "admin", "supervisor", "worker", "reviewer", "support",
     "purchasing", "ops", "e2e_agent", "pr_agent"
@@ -164,7 +165,7 @@ authCommand
     .option("--json", "Output as JSON")
     .action(async (options) => {
     try {
-        const data = await apiRequest("/api/auth/whoami");
+        const data = await hybridApiRequest("/api/auth/whoami");
         if (options.json) {
             console.log(JSON.stringify(data, null, 2));
             return;
@@ -172,7 +173,12 @@ authCommand
         console.log("\n🔐 Authentication Info");
         console.log("─".repeat(40));
         console.log(`Role:       ${data.role}`);
-        console.log(`Key ID:     ${data.keyId}`);
+        if (data.keyId) {
+            console.log(`Key ID:     ${data.keyId}`);
+        }
+        if (data.agent) {
+            console.log(`Agent:      ${data.agent}`);
+        }
         console.log(`Source:     ${data.source}`);
         if (data.scopes && data.scopes.length > 0) {
             console.log(`Scopes:     ${data.scopes.join(", ")}`);

package/dist/commands/worktree.js

@@ -12,6 +12,15 @@ export const worktreeCommand = new Command("worktree")
 function getProjectDir(options) {
     return options.project ? path.resolve(options.project) : process.cwd();
 }
+/**
+ * Check if current session has worker role.
+ * Workers have restricted permissions (cannot push/create PRs directly).
+ */
+function isWorkerRole() {
+    const config = getConfig();
+    const role = config.sessionRole || config.role || "";
+    return role === "worker";
+}
 /**
  * Get a WorktreeManager instance.
  */
@@ -733,9 +742,7 @@ worktreeCommand
     .action(async (sessionName, options) => {
     try {
         // Worker role cannot push - must submit for review
-        const config = getConfig();
-        const role = config.sessionRole || config.role || "";
-        if (role === "worker") {
+        if (isWorkerRole()) {
             console.error("Error: Workers cannot push directly.");
             console.error("Submit for review instead: husky task update <id> --status review");
             console.error("The Reviewer agent will push and create the PR.");
@@ -772,15 +779,14 @@ worktreeCommand
     .option("--task-id <id>", "Task ID to update with PR URL")
     .option("--json", "Output as JSON")
     .action(async (sessionName, options) => {
-    const config = getConfig();
     // Worker role cannot create PRs - must submit for review
-    const role = config.sessionRole || config.role || "";
-    if (role === "worker") {
+    if (isWorkerRole()) {
         console.error("Error: Workers cannot create PRs directly.");
         console.error("Submit for review instead: husky task update <id> --status review");
         console.error("The Reviewer agent will create the PR after code review.");
         process.exit(1);
     }
+    const config = getConfig();
     try {
         const manager = getManager(options);
         const info = manager.getWorktree(sessionName);

package/dist/lib/api-client.js

@@ -61,16 +61,21 @@ async function doFetch(url, method, authHeader, body) {
     });
 }
 async function getAuthHeader(session, apiKey) {
+    // DEBUG: console.log('DEBUG session:', session?.token ? 'exists' : 'missing', session?.expiresAt);
     if (session?.token && session.expiresAt) {
+        // DEBUG: console.log('DEBUG: Checking expiration...');
         if (isSessionExpired(session.expiresAt)) {
+            // DEBUG: console.log('DEBUG: Session expired, refreshing...');
             if (session.agent) {
                 const newSession = await refreshSession(session.agent);
                 if (newSession) {
+                    // DEBUG: console.log('DEBUG: Refresh successful, using Bearer token');
                     return { "Authorization": `Bearer ${newSession.token}` };
                 }
             }
             clearSessionConfig();
             if (apiKey) {
+                // DEBUG: console.log('DEBUG: Refresh failed, falling back to API key');
                 return { "x-api-key": apiKey };
             }
             throw new Error("Session expired and no API key available for refresh");
@@ -78,9 +83,11 @@ async function getAuthHeader(session, apiKey) {
         if (isSessionExpiringSoon(session.expiresAt) && session.agent) {
             refreshSession(session.agent).catch(() => { });
         }
+        // DEBUG: console.log('DEBUG: Using existing Bearer token');
         return { "Authorization": `Bearer ${session.token}` };
     }
     if (apiKey) {
+        // DEBUG: console.log('DEBUG: No session, using API key');
         return { "x-api-key": apiKey };
     }
     throw new Error("No authentication configured. Run: husky auth login --agent <name> or husky config set api-key <key>");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@simonfestl/husky-cli",
-  "version": "1.21.0",
+  "version": "1.22.0",
   "description": "CLI for Huskyv0 Task Orchestration with Claude Agent SDK",
   "type": "module",
   "bin": {