@simonfestl/husky-cli 1.25.2 → 1.25.3

package/dist/commands/brain.js

@@ -7,7 +7,10 @@ function toDate(value) {
     return value instanceof Date ? value : new Date(value);
 }
 function createBrain(agentId, agentType, options) {
-    if (options?.useApi || (shouldUseApi() && options?.kb)) {
+    // Use API if:
+    // 1. Explicitly requested via --use-api
+    // 2. shouldUseApi() returns true (no Qdrant configured or session token available)
+    if (options?.useApi || shouldUseApi()) {
         return new ApiBrain({
             agentId,
             agentType: isValidAgentType(agentType) ? agentType : undefined,

package/dist/lib/biz/api-brain.js

@@ -2,20 +2,45 @@ import { getConfig } from "../../commands/config.js";
 import { canAccessKnowledgeBase as checkKbAccess } from "../permissions-cache.js";
 async function apiRequest(path, options = {}) {
     const config = getConfig();
-    if (!config.apiUrl || !config.apiKey) {
-        throw new Error("API not configured. Run: husky config set api-url <url> && husky config set api-key <key>");
+    if (!config.apiUrl) {
+        throw new Error("API not configured. Run: husky config set api-url <url>");
+    }
+    // Prefer session token (JWT), fall back to API key for backwards compatibility
+    const headers = {
+        "Content-Type": "application/json",
+    };
+    if (config.sessionToken) {
+        // Check if session is expired
+        if (config.sessionExpiresAt) {
+            const expiresAt = new Date(config.sessionExpiresAt);
+            if (expiresAt < new Date()) {
+                throw new Error("Session expired. Run: husky auth login --agent <name>");
+            }
+        }
+        headers["Authorization"] = `Bearer ${config.sessionToken}`;
+    }
+    else if (config.apiKey) {
+        // Legacy fallback - will be rejected by new API but kept for error message
+        headers["x-api-key"] = config.apiKey;
+    }
+    else {
+        throw new Error("Not authenticated. Run: husky auth login --agent <name>");
     }
     const url = new URL(`/api/brain${path}`, config.apiUrl);
     const res = await fetch(url.toString(), {
         method: options.method || "POST",
-        headers: {
-            "x-api-key": config.apiKey,
-            "Content-Type": "application/json",
-        },
+        headers,
         body: options.body ? JSON.stringify(options.body) : undefined,
     });
     if (!res.ok) {
         const error = await res.json().catch(() => ({ error: res.statusText }));
+        if (res.status === 401) {
+            // Check if it's the new API rejecting API key auth
+            if (error.upgrade) {
+                throw new Error("Session required. Run: husky auth login --agent <name>");
+            }
+            throw new Error(error.message || "Authentication failed");
+        }
         if (res.status === 403) {
             throw new Error(`Access denied: ${error.error || 'Permission denied to this resource'}`);
         }
@@ -191,6 +216,13 @@ export class ApiBrain {
 }
 export function shouldUseApi() {
     const config = getConfig();
-    return Boolean(config.apiUrl && config.apiKey);
+    // Use API if:
+    // 1. No Qdrant URL configured (can't use direct access)
+    // 2. Or session token is available (preferred auth method)
+    if (!config.qdrantUrl) {
+        return Boolean(config.apiUrl);
+    }
+    // If Qdrant is configured, still prefer API if session token exists
+    return Boolean(config.apiUrl && config.sessionToken);
 }
 export default ApiBrain;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@simonfestl/husky-cli",
-  "version": "1.25.2",
+  "version": "1.25.3",
   "description": "CLI for Huskyv0 Task Orchestration with Claude Agent SDK",
   "type": "module",
   "bin": {