@synap-core/cli 1.8.0 → 1.11.0

package/dist/commands/whoami.js

@@ -0,0 +1,129 @@
+/**
+ * synap whoami
+ *
+ * Answers the one question `synap status` can't: WHICH key is this session
+ * actually authenticating with, and does the ambient `SYNAP_HUB_API_KEY`
+ * silently disagree with the pinned `claude-code` surface key?
+ *
+ * `synap status` probes via `resolveHubConfig()` and prints a single "Valid"
+ * off whichever key wins — which HIDES the case where the env key is revoked
+ * but a valid surface key is pinned (or vice-versa). This command:
+ *   1. resolves the winning cfg (the key every command uses),
+ *   2. independently reads env key + `claude-code` surface key and reproduces
+ *      the surface-over-env preference rule from hub-client.ts:394-403,
+ *   3. introspects the winner via `/auth/status`, and
+ *   4. when env and surface keys diverge, names the winner AND the ignored key,
+ *      probing the loser too so the operator sees both states side by side.
+ *
+ * It never mutates state and never relies on resolveHubConfig's stderr swap
+ * warning (hub-client.ts:398-400) — it reads the divergence itself.
+ */
+import chalk from "chalk";
+import { log, banner } from "../utils/logger.js";
+import { resolveHubConfig, hubGet, HubError } from "../lib/hub-client.js";
+import { getSurfaceAgentKey } from "../lib/pod.js";
+/** Last 6+ chars of a key, for eyeballing which secret is in play without leaking it. */
+function keyTail(apiKey) {
+    return apiKey.length <= 8 ? "…" : `…${apiKey.slice(-6)}`;
+}
+/** Introspect a specific key by cloning the winning cfg and swapping the secret. */
+async function probeKey(cfg, apiKey) {
+    try {
+        const status = (await hubGet("/auth/status", {}, { ...cfg, apiKey }));
+        return { kind: "ok", status };
+    }
+    catch (err) {
+        const is401 = err instanceof HubError
+            ? err.status === 401
+            : String(err instanceof Error ? err.message : err).toLowerCase().includes("unauthorized");
+        if (is401)
+            return { kind: "revoked" };
+        return { kind: "error", message: err instanceof Error ? err.message : String(err) };
+    }
+}
+function renderAuthStatus(s) {
+    log.info(`Key ID     : ${s.keyIdPrefix ?? "unknown"}`);
+    log.info(`Key type   : ${s.keyType ?? chalk.dim("unknown")}`);
+    log.info(`Identity   : ${s.userEmail ?? s.userName ?? s.userId ?? "unknown"}`);
+    if (s.name)
+        log.info(`Key name   : ${s.name}`);
+    log.info(`Workspace  : ${s.workspaceId ?? chalk.dim("unknown")}`);
+    log.info(`Scopes     : ${s.scopes && s.scopes.length ? s.scopes.join(", ") : chalk.dim("(none)")}`);
+    const active = s.isActive === true ? chalk.green("active") : s.isActive === false ? chalk.red("revoked") : chalk.dim("unknown");
+    log.info(`Status     : ${active}`);
+    log.info(`Expires    : ${s.expiresAt ?? chalk.dim("never")}`);
+}
+export async function whoami() {
+    banner();
+    // 1. The key that actually authenticates every command.
+    let cfg;
+    try {
+        cfg = await resolveHubConfig();
+    }
+    catch (err) {
+        log.error(err instanceof Error ? err.message : String(err));
+        return;
+    }
+    // 2. Independently read the two candidate keys and reproduce the preference
+    //    rule from hub-client.ts:394-403 — do NOT depend on resolveHubConfig's
+    //    stderr swap warning, read the state ourselves.
+    const envKey = process.env.SYNAP_HUB_API_KEY;
+    const envPod = process.env.SYNAP_POD_URL;
+    const surfaceKey = getSurfaceAgentKey("claude-code");
+    const surfacePinnedHere = !!surfaceKey && !!surfaceKey.hubApiKey && surfaceKey.podUrl === envPod;
+    const diverges = !!envKey &&
+        surfacePinnedHere &&
+        surfaceKey.hubApiKey !== envKey;
+    // Which candidate did resolveHubConfig actually pick?
+    const winner = diverges
+        ? cfg.apiKey === surfaceKey.hubApiKey
+            ? "surface"
+            : "env"
+        : "other";
+    // 3. Introspect the winning key.
+    log.heading("Winning key (resolved)");
+    log.info(`Pod        : ${cfg.podUrl}`);
+    log.dim(`Secret     : ${keyTail(cfg.apiKey)}`);
+    const winnerProbe = await probeKey(cfg, cfg.apiKey);
+    if (winnerProbe.kind === "ok") {
+        renderAuthStatus(winnerProbe.status);
+    }
+    else if (winnerProbe.kind === "revoked") {
+        log.error("This key is revoked or expired — /auth/status returned 401.");
+        log.hint("Refresh it with: synap login --reconnect");
+    }
+    else {
+        log.warn(`Could not introspect key: ${winnerProbe.message}`);
+    }
+    // 4. Divergence report — the whole point of the command.
+    if (!diverges) {
+        if (envKey && surfacePinnedHere) {
+            log.dim("\nEnv key and claude-code surface key agree — no divergence.");
+        }
+        log.blank();
+        return;
+    }
+    log.heading("⚠ Key divergence detected");
+    const winnerLabel = winner === "surface" ? "claude-code surface key" : "ambient SYNAP_HUB_API_KEY";
+    const loserLabel = winner === "surface" ? "ambient SYNAP_HUB_API_KEY" : "claude-code surface key";
+    const loserSecret = winner === "surface" ? envKey : surfaceKey.hubApiKey;
+    // Mirror the surface-key warning wording at hub-client.ts:398-400.
+    log.warn(`ambient SYNAP_HUB_API_KEY does not match the claude-code surface key pinned to ${envPod}.`);
+    log.info(`Winner  (used)    : ${chalk.bold(winnerLabel)}  ${chalk.dim(keyTail(cfg.apiKey))}`);
+    log.info(`Ignored (in play) : ${loserLabel}  ${chalk.dim(keyTail(loserSecret))}`);
+    // Probe the LOSING key so both states are visible side by side.
+    const loserProbe = await probeKey(cfg, loserSecret);
+    if (loserProbe.kind === "ok") {
+        const s = loserProbe.status;
+        const active = s.isActive === false ? chalk.red("revoked") : chalk.green("valid");
+        log.info(`  ${loserLabel} → ${active} (${s.keyIdPrefix ?? "?"}, ${s.userEmail ?? s.userId ?? "?"})`);
+    }
+    else if (loserProbe.kind === "revoked") {
+        log.warn(`  ${loserLabel} → ${chalk.red("revoked")} (401 from /auth/status)`);
+    }
+    else {
+        log.dim(`  ${loserLabel} → could not verify: ${loserProbe.message}`);
+    }
+    log.blank();
+}
+//# sourceMappingURL=whoami.js.map

package/dist/commands/whoami.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"whoami.js","sourceRoot":"","sources":["../../src/commands/whoami.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,gBAAgB,EAAE,MAAM,EAAE,QAAQ,EAAkB,MAAM,sBAAsB,CAAC;AAC1F,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAsBnD,yFAAyF;AACzF,SAAS,OAAO,CAAC,MAAc;IAC7B,OAAO,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAC3D,CAAC;AAOD,oFAAoF;AACpF,KAAK,UAAU,QAAQ,CAAC,GAAc,EAAE,MAAc;IACpD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,CAAC,MAAM,MAAM,CAAC,cAAc,EAAE,EAAE,EAAE,EAAE,GAAG,GAAG,EAAE,MAAM,EAAE,CAAC,CAAe,CAAC;QACpF,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAChC,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,MAAM,KAAK,GACT,GAAG,YAAY,QAAQ;YACrB,CAAC,CAAC,GAAG,CAAC,MAAM,KAAK,GAAG;YACpB,CAAC,CAAC,MAAM,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;QAC9F,IAAI,KAAK;YAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;QACtC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;IACtF,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,CAAa;IACrC,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,WAAW,IAAI,SAAS,EAAE,CAAC,CAAC;IACvD,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IAC9D,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,MAAM,IAAI,SAAS,EAAE,CAAC,CAAC;IAC/E,IAAI,CAAC,CAAC,IAAI;QAAE,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAC/C,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,WAAW,IAAI,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IAClE,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IACpG,MAAM,MAAM,GAAG,CAAC,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAChI,GAAG,CAAC,IAAI,CAAC,gBAAgB,MAAM,EAAE,CAAC,CAAC;IACnC,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,SAAS,IAAI,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;AAChE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,MAAM;IAC1B,MAAM,EAAE,CAAC;IAET,wDAAwD;IACxD,IAAI,GAAc,CAAC;IACnB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,gBAAgB,EAAE,CAAC;IACjC,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,GAAG,CAAC,KAAK,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QAC5D,OAAO;IACT,CAAC;IAED,4EAA4E;IAC5E,2EAA2E;IAC3E,oDAAoD;IACpD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;IAC7C,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;IACzC,MAAM,UAAU,GAAG,kBAAkB,CAAC,aAAa,CAAC,CAAC;IACrD,MAAM,iBAAiB,GACrB,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,UAAU,CAAC,SAAS,IAAI,UAAU,CAAC,MAAM,KAAK,MAAM,CAAC;IACzE,MAAM,QAAQ,GACZ,CAAC,CAAC,MAAM;QACR,iBAAiB;QACjB,UAAW,CAAC,SAAS,KAAK,MAAM,CAAC;IACnC,sDAAsD;IACtD,MAAM,MAAM,GAAgC,QAAQ;QAClD,CAAC,CAAC,GAAG,CAAC,MAAM,KAAK,UAAW,CAAC,SAAS;YACpC,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,KAAK;QACT,CAAC,CAAC,OAAO,CAAC;IAEZ,iCAAiC;IACjC,GAAG,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC;IACtC,GAAG,CAAC,IAAI,CAAC,gBAAgB,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;IACvC,GAAG,CAAC,GAAG,CAAC,gBAAgB,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC/C,MAAM,WAAW,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IACpD,IAAI,WAAW,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;QAC9B,gBAAgB,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IACvC,CAAC;SAAM,IAAI,WAAW,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC1C,GAAG,CAAC,KAAK,CAAC,6DAA6D,CAAC,CAAC;QACzE,GAAG,CAAC,IAAI,CAAC,0CAA0C,CAAC,CAAC;IACvD,CAAC;SAAM,CAAC;QACN,GAAG,CAAC,IAAI,CAAC,6BAA6B,WAAW,CAAC,OAAO,EAAE,CAAC,CAAC;IAC/D,CAAC;IAED,yDAAyD;IACzD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,IAAI,MAAM,IAAI,iBAAiB,EAAE,CAAC;YAChC,GAAG,CAAC,GAAG,CAAC,8DAA8D,CAAC,CAAC;QAC1E,CAAC;QACD,GAAG,CAAC,KAAK,EAAE,CAAC;QACZ,OAAO;IACT,CAAC;IAED,GAAG,CAAC,OAAO,CAAC,2BAA2B,CAAC,CAAC;IACzC,MAAM,WAAW,GAAG,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,2BAA2B,CAAC;IACnG,MAAM,UAAU,GAAG,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,2BAA2B,CAAC,CAAC,CAAC,yBAAyB,CAAC;IAClG,MAAM,WAAW,GAAG,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,MAAO,CAAC,CAAC,CAAC,UAAW,CAAC,SAAS,CAAC;IAC3E,mEAAmE;IACnE,GAAG,CAAC,IAAI,CACN,kFAAkF,MAAM,GAAG,CAC5F,CAAC;IACF,GAAG,CAAC,IAAI,CAAC,uBAAuB,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC;IAC9F,GAAG,CAAC,IAAI,CAAC,uBAAuB,UAAU,KAAK,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC,CAAC;IAElF,gEAAgE;IAChE,MAAM,UAAU,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IACpD,IAAI,UAAU,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;QAC7B,MAAM,CAAC,GAAG,UAAU,CAAC,MAAM,CAAC;QAC5B,MAAM,MAAM,GAAG,CAAC,CAAC,QAAQ,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAClF,GAAG,CAAC,IAAI,CAAC,KAAK,UAAU,MAAM,MAAM,KAAK,CAAC,CAAC,WAAW,IAAI,GAAG,KAAK,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC;IACvG,CAAC;SAAM,IAAI,UAAU,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QACzC,GAAG,CAAC,IAAI,CAAC,KAAK,UAAU,MAAM,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,0BAA0B,CAAC,CAAC;IAChF,CAAC;SAAM,CAAC;QACN,GAAG,CAAC,GAAG,CAAC,KAAK,UAAU,wBAAwB,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC;IACvE,CAAC;IAED,GAAG,CAAC,KAAK,EAAE,CAAC;AACd,CAAC"}