@simonfestl/husky-cli 1.38.4 → 1.38.5

package/dist/commands/agent-msg.js

@@ -1,16 +1,21 @@
 import { Command } from "commander";
-import { getConfig } from "./config.js";
+import { getConfig, getAuthHeaders } from "./config.js";
 async function apiCall(path, options = {}) {
     const config = getConfig();
-    if (!config.apiUrl || !config.apiKey) {
-        console.error("Error: API URL and key required. Run: husky config test");
+    if (!config.apiUrl) {
+        console.error("Error: API URL is required. Run: husky config set api-url <url>");
+        process.exit(1);
+    }
+    const authHeaders = getAuthHeaders();
+    if (!authHeaders.Authorization) {
+        console.error("Error: Active session required. Run: husky auth login --agent <name>");
         process.exit(1);
     }
     const res = await fetch(`${config.apiUrl}${path}`, {
         ...options,
         headers: {
             "Content-Type": "application/json",
-            "x-api-key": config.apiKey,
+            ...authHeaders,
             ...options.headers,
         },
     });

package/dist/commands/biz/gotess.js

@@ -1,6 +1,6 @@
 import { Command } from "commander";
 import { GotessClient } from "../../lib/biz/gotess.js";
-import { getConfig, setGotessConfig } from "../config.js";
+import { getConfig, getAuthHeaders, setGotessConfig } from "../config.js";
 import * as readline from "readline";
 function prompt(question) {
     const rl = readline.createInterface({ input: process.stdin, output: process.stdout });
@@ -11,14 +11,16 @@ function prompt(question) {
         });
     });
 }
-async function pollSmsCode(apiUrl, afterTimestamp, maxRetries = 3) {
+async function pollSmsCode(apiUrl, afterTimestamp, authHeaders, maxRetries = 3) {
     for (let retry = 0; retry < maxRetries; retry++) {
         if (retry > 0) {
             console.log(`\n  Retry ${retry}/${maxRetries - 1}...`);
         }
         await new Promise(r => setTimeout(r, 60000));
         try {
-            const res = await fetch(`${apiUrl}/api/webhooks/sms/latest?after=${afterTimestamp}`);
+            const res = await fetch(`${apiUrl}/api/webhooks/sms/latest?after=${afterTimestamp}`, {
+                headers: authHeaders,
+            });
             const data = await res.json();
             if (data.code) {
                 return data.code;
@@ -56,7 +58,11 @@ gotessCommand
             if (!apiUrl) {
                 throw new Error("API URL not configured. Run: husky config set api-url <url>");
             }
-            const code = await pollSmsCode(apiUrl, smsRequestTime);
+            const authHeaders = getAuthHeaders();
+            if (Object.keys(authHeaders).length === 0) {
+                throw new Error("Not authenticated. Run: husky auth login --agent <name>");
+            }
+            const code = await pollSmsCode(apiUrl, smsRequestTime, authHeaders);
             if (!code) {
                 console.error("\n  ✗ Timeout waiting for SMS code");
                 process.exit(1);

package/dist/commands/chat.js

@@ -1,8 +1,8 @@
 import { Command } from "commander";
-import { getConfig } from "./config.js";
-import { exec } from "child_process";
+import { getAuthHeaders, getConfig } from "./config.js";
+import { execFile } from "child_process";
 import { promisify } from "util";
-const execAsync = promisify(exec);
+const execFileAsync = promisify(execFile);
 // Helper to get the Husky API URL (for Google Chat integration)
 function getHuskyApiUrl() {
     const config = getConfig();
@@ -22,7 +22,7 @@ chatCommand
     }
     try {
         const res = await fetch(`${config.apiUrl}/api/chat/pending`, {
-            headers: config.apiKey ? { "x-api-key": config.apiKey } : {},
+            headers: getAuthHeaders(),
         });
         if (!res.ok) {
             throw new Error(`API error: ${res.status}`);
@@ -66,7 +66,7 @@ chatCommand
     }
     try {
         const res = await fetch(`${config.apiUrl}/api/chat?limit=${options.limit}`, {
-            headers: config.apiKey ? { "x-api-key": config.apiKey } : {},
+            headers: getAuthHeaders(),
         });
         if (!res.ok) {
             throw new Error(`API error: ${res.status}`);
@@ -115,7 +115,7 @@ chatCommand
                 method: "POST",
                 headers: {
                     "Content-Type": "application/json",
-                    ...(config.apiKey ? { "x-api-key": config.apiKey } : {}),
+                    ...getAuthHeaders(),
                 },
                 body: JSON.stringify({
                     text: message,
@@ -134,7 +134,7 @@ chatCommand
                 method: "POST",
                 headers: {
                     "Content-Type": "application/json",
-                    ...(config.apiKey ? { "x-api-key": config.apiKey } : {}),
+                    ...getAuthHeaders(),
                 },
                 body: JSON.stringify({
                     content: message,
@@ -167,7 +167,7 @@ chatCommand
             method: "POST",
             headers: {
                 "Content-Type": "application/json",
-                ...(config.apiKey ? { "x-api-key": config.apiKey } : {}),
+                ...getAuthHeaders(),
             },
             body: JSON.stringify({
                 content: response,
@@ -181,7 +181,7 @@ chatCommand
             method: "PATCH",
             headers: {
                 "Content-Type": "application/json",
-                ...(config.apiKey ? { "x-api-key": config.apiKey } : {}),
+                ...getAuthHeaders(),
             },
             body: JSON.stringify({ messageIds: [messageId] }),
         });
@@ -214,7 +214,7 @@ chatCommand
             method: "POST",
             headers: {
                 "Content-Type": "application/json",
-                ...(config.apiKey ? { "x-api-key": config.apiKey } : {}),
+                ...getAuthHeaders(),
             },
             body: JSON.stringify({
                 agentId: workerId,
@@ -248,7 +248,7 @@ chatCommand
         while (Date.now() - startTime < timeoutMs) {
             await new Promise((resolve) => setTimeout(resolve, pollInterval));
             const pollRes = await fetch(`${huskyApiUrl}/api/google-chat/review/${data.id}/poll`, {
-                headers: config.apiKey ? { "x-api-key": config.apiKey } : {},
+                headers: getAuthHeaders(),
             });
             if (!pollRes.ok)
                 continue;
@@ -286,7 +286,7 @@ chatCommand
     }
     try {
         const res = await fetch(`${huskyApiUrl}/api/google-chat/review/${reviewId}`, {
-            headers: config.apiKey ? { "x-api-key": config.apiKey } : {},
+            headers: getAuthHeaders(),
         });
         if (!res.ok) {
             if (res.status === 404) {
@@ -336,7 +336,7 @@ chatCommand
         if (options.limit)
             params.set("limit", options.limit);
         const res = await fetch(`${huskyApiUrl}/api/google-chat/inbox?${params}`, {
-            headers: config.apiKey ? { "x-api-key": config.apiKey } : {},
+            headers: getAuthHeaders(),
         });
         if (!res.ok) {
             throw new Error(`API error: ${res.status}`);
@@ -382,7 +382,7 @@ chatCommand
             method: "POST",
             headers: {
                 "Content-Type": "application/json",
-                ...(config.apiKey ? { "x-api-key": config.apiKey } : {}),
+                ...getAuthHeaders(),
             },
             body: JSON.stringify({
                 text: message,
@@ -486,7 +486,7 @@ chatCommand
             method: "POST",
             headers: {
                 "Content-Type": "application/json",
-                ...(config.apiKey ? { "x-api-key": config.apiKey } : {}),
+                ...getAuthHeaders(),
             },
             body: JSON.stringify({
                 fileBase64,
@@ -522,7 +522,7 @@ chatCommand
     try {
         // Fetch inbox to find the message
         const inboxRes = await fetch(`${huskyApiUrl}/api/google-chat/inbox?limit=50`, {
-            headers: config.apiKey ? { "x-api-key": config.apiKey } : {},
+            headers: getAuthHeaders(),
         });
         if (!inboxRes.ok) {
             throw new Error(`Failed to fetch inbox: ${inboxRes.status}`);
@@ -545,7 +545,7 @@ chatCommand
                 method: "POST",
                 headers: {
                     "Content-Type": "application/json",
-                    ...(config.apiKey ? { "x-api-key": config.apiKey } : {}),
+                    ...getAuthHeaders(),
                 },
                 body: JSON.stringify({ text: response }),
             });
@@ -561,7 +561,7 @@ chatCommand
                 method: "POST",
                 headers: {
                     "Content-Type": "application/json",
-                    ...(config.apiKey ? { "x-api-key": config.apiKey } : {}),
+                    ...getAuthHeaders(),
                 },
                 body: JSON.stringify({
                     text: response,
@@ -576,7 +576,7 @@ chatCommand
             // Mark as read
             await fetch(`${huskyApiUrl}/api/google-chat/inbox/${msg.id}/read`, {
                 method: "POST",
-                headers: config.apiKey ? { "x-api-key": config.apiKey } : {},
+                headers: getAuthHeaders(),
             });
             // Add reaction to original message if messageName is available
             if (msg.messageName) {
@@ -585,7 +585,7 @@ chatCommand
                         method: "POST",
                         headers: {
                             "Content-Type": "application/json",
-                            ...(config.apiKey ? { "x-api-key": config.apiKey } : {}),
+                            ...getAuthHeaders(),
                         },
                         body: JSON.stringify({ emoji: "✅" }),
                     });
@@ -614,7 +614,7 @@ chatCommand
     try {
         const res = await fetch(`${huskyApiUrl}/api/google-chat/inbox/${messageId}/read`, {
             method: "POST",
-            headers: config.apiKey ? { "x-api-key": config.apiKey } : {},
+            headers: getAuthHeaders(),
         });
         if (!res.ok) {
             throw new Error(`API error: ${res.status}`);
@@ -643,7 +643,7 @@ chatCommand
     const poll = async () => {
         try {
             const res = await fetch(`${huskyApiUrl}/api/google-chat/inbox?unread=true&limit=5`, {
-                headers: config.apiKey ? { "x-api-key": config.apiKey } : {},
+                headers: getAuthHeaders(),
             });
             if (!res.ok)
                 return;
@@ -705,14 +705,10 @@ chatCommand
                 formattedMessage += `\n💡 Tip: Use \`husky chat reply-chat "your response"\` to reply`;
             }
         }
-        const escapedMessage = formattedMessage
-            .replace(/\\/g, "\\\\")
-            .replace(/"/g, '\\"')
-            .replace(/\$/g, "\\$")
-            .replace(/`/g, "\\`")
-            .replace(/'/g, "'\\''");
         try {
-            await execAsync(`tmux send-keys -t "${tmuxTarget}" "${escapedMessage}" Enter`, { timeout: 5000 });
+            await execFileAsync("tmux", ["send-keys", "-t", tmuxTarget, formattedMessage, "Enter"], {
+                timeout: 5000,
+            });
             return true;
         }
         catch (error) {
@@ -725,7 +721,7 @@ chatCommand
         try {
             await fetch(`${huskyApiUrl}/api/google-chat/inbox/${messageId}/read`, {
                 method: "POST",
-                headers: config.apiKey ? { "x-api-key": config.apiKey } : {},
+                headers: getAuthHeaders(),
             });
         }
         catch { }
@@ -733,7 +729,7 @@ chatCommand
     const poll = async () => {
         try {
             const res = await fetch(`${huskyApiUrl}/api/google-chat/inbox?unread=true&limit=10`, {
-                headers: config.apiKey ? { "x-api-key": config.apiKey } : {},
+                headers: getAuthHeaders(),
             });
             if (!res.ok)
                 return;
@@ -824,7 +820,7 @@ chatCommand
             method: "POST",
             headers: {
                 "Content-Type": "application/json",
-                ...(config.apiKey ? { "x-api-key": config.apiKey } : {}),
+                ...getAuthHeaders(),
             },
             body: JSON.stringify({
                 text: formattedMessage,
@@ -846,7 +842,7 @@ chatCommand
             method: "POST",
             headers: {
                 "Content-Type": "application/json",
-                ...(config.apiKey ? { "x-api-key": config.apiKey } : {}),
+                ...getAuthHeaders(),
             },
             body: JSON.stringify({
                 agentId,
@@ -919,7 +915,7 @@ chatCommand
             method: "PATCH",
             headers: {
                 "Content-Type": "application/json",
-                ...(config.apiKey ? { "x-api-key": config.apiKey } : {}),
+                ...getAuthHeaders(),
             },
             body: JSON.stringify({ status: "resolved" }),
         });
@@ -958,7 +954,7 @@ chatCommand
         if (options.agent)
             params.set("agentId", options.agent);
         const res = await fetch(`${huskyApiUrl}/api/agent-conversations?${params}`, {
-            headers: config.apiKey ? { "x-api-key": config.apiKey } : {},
+            headers: getAuthHeaders(),
         });
         if (!res.ok) {
             throw new Error(`API error: ${res.status}`);
@@ -1004,7 +1000,7 @@ chatCommand
     }
     try {
         const res = await fetch(`${huskyApiUrl}/api/google-chat/spaces`, {
-            headers: config.apiKey ? { "x-api-key": config.apiKey } : {},
+            headers: getAuthHeaders(),
         });
         if (!res.ok) {
             throw new Error(`API error: ${res.status}`);
@@ -1059,7 +1055,7 @@ chatCommand
     try {
         while (Date.now() - startTime < timeoutMs) {
             const res = await fetch(`${huskyApiUrl}/api/google-chat/review/${reviewId}/poll`, {
-                headers: config.apiKey ? { "x-api-key": config.apiKey } : {},
+                headers: getAuthHeaders(),
             });
             if (res.ok) {
                 const data = await res.json();

package/dist/commands/config.d.ts

@@ -46,12 +46,16 @@ interface Config {
     gcsBucket?: string;
     shopifyDomain?: string;
     shopifyToken?: string;
+    redditClientId?: string;
+    redditClientSecret?: string;
+    youtubeApiKey?: string;
+    xBearerToken?: string;
 }
 export declare function getConfig(): Config;
 export declare function saveConfig(config: Config): void;
 /**
  * Fetch role and permissions from /api/auth/whoami
- * Uses session token (Bearer) if available, otherwise falls back to API key.
+ * Uses session token (Bearer) only.
  * Caches the result in config for 1 hour.
  */
 export declare function fetchAndCacheRole(): Promise<{
@@ -64,7 +68,7 @@ export declare function fetchAndCacheRole(): Promise<{
 export declare function hasPermission(permission: string): boolean;
 /**
  * Get current role from config.
- * Prefers sessionRole (from auth login) over role (from API key) when session is active.
+ * Uses sessionRole (from auth login) when session is active.
  * Validates that the role is a known valid role before returning.
  */
 export declare function getRole(): AgentRole | undefined;
@@ -88,19 +92,18 @@ export declare function clearSessionConfig(): void;
 export declare function isSessionActive(): boolean;
 /**
  * Check if the API is properly configured for making requests.
- * Returns true if we have either an active session or an API key.
+ * Returns true if we have an API URL and an active session.
  */
 export declare function isApiConfigured(): boolean;
 /**
  * Get authentication headers for API requests.
- * Returns Bearer token if session is active, otherwise x-api-key.
+ * Returns Bearer token if session is active.
  * Use this for all API calls to ensure consistent auth.
  */
 export declare function getAuthHeaders(): Record<string, string>;
 /**
  * Ensure the session is valid, refreshing if needed.
- * Call this before long-running operations (like watch modes).
- * Returns true if session is valid (or was refreshed), false if no session/refresh failed.
+ * Returns true if session is active, false otherwise.
  */
 export declare function ensureValidSession(): Promise<boolean>;
 export declare function getSessionConfig(): {