@tostudy-ai/cli 0.18.13 → 0.18.17

package/dist/main.js

@@ -2330,6 +2330,7 @@ var init_instruction_template_v3 = __esm({
 // src/workspace/runtime-registry.ts
 var runtime_registry_exports = {};
 __export(runtime_registry_exports, {
+  CODEX_LOGIN_NOTICE: () => CODEX_LOGIN_NOTICE,
   RUNTIMES: () => RUNTIMES,
   antigravitySkillMd: () => antigravitySkillMd,
   cursorMdc: () => cursorMdc,
@@ -2405,10 +2406,10 @@ ${content}`;
 function detectedSlashHints(slug, home, cwd) {
   return RUNTIMES.filter((r) => r.slashHint && r.detect(home, cwd)).map((r) => r.slashHint(slug));
 }
-function slashHintLines(slug, home, cwd, fallbackCommand) {
+function slashHintLines(slug, home, cwd) {
   const hints = slug ? detectedSlashHints(slug, home, cwd) : [];
   if (hints.length > 0) return hints.map((h) => `\u2192 ${h}`);
-  return [`\u2192 Na sua plataforma, digite: ${fallbackCommand}`];
+  return ["\u2192 Na sua plataforma, pe\xE7a: vamos estudar (no terminal: tostudy menu)"];
 }
 function needsRootAgentsConsent(cwd) {
   const filePath = join2(cwd, "AGENTS.md");
@@ -2428,7 +2429,7 @@ function upsertRootAgentsBlock(cwd, ctx) {
     "",
     `- **Course:** ${ctx.courseTitle} (${ctx.progress}% complete)`,
     `- Read \`.tostudy/courses/${slug}/AGENTS.md\` for the full tutor instructions.`,
-    "- Study commands: run `/tostudy` (or `tostudy menu` in the terminal).",
+    '- To study, ask in plain language (e.g. "vamos estudar"). In Claude Code or OpenCode you can also run `/tostudy`; in the terminal, `tostudy menu`.',
     "",
     "<!-- tostudy:end -->"
   ].join("\n");
@@ -2464,7 +2465,7 @@ function upsertRootAgentsBlock(cwd, ctx) {
     return null;
   }
 }
-var logger2, detectOpencode, detectGrok, detectAntigravity, RUNTIMES, TOSTUDY_BLOCK_PATTERN, TOSTUDY_BLOCK_PATTERN_GLOBAL, slugifyTitle;
+var logger2, detectOpencode, detectGrok, detectAntigravity, CODEX_LOGIN_NOTICE, RUNTIMES, TOSTUDY_BLOCK_PATTERN, TOSTUDY_BLOCK_PATTERN_GLOBAL, slugifyTitle;
 var init_runtime_registry = __esm({
   "src/workspace/runtime-registry.ts"() {
     "use strict";
@@ -2476,6 +2477,11 @@ var init_runtime_registry = __esm({
     detectOpencode = (home) => existsSync2(join2(home, ".opencode")) || existsSync2(join2(home, ".config", "opencode"));
     detectGrok = (home) => existsSync2(join2(home, ".grok")) || hasBinary("grok");
     detectAntigravity = (home) => existsSync2(join2(home, ".gemini", "antigravity-cli")) || hasBinary("agy");
+    CODEX_LOGIN_NOTICE = [
+      "  \u26A0 No Codex n\xE3o existe o comando /tostudy.",
+      '  \u2192 Abra o Codex na pasta do curso e pe\xE7a: "vamos estudar".',
+      "  \u2192 No terminal, tostudy menu tamb\xE9m funciona."
+    ];
     RUNTIMES = [
       {
         id: "claude",
@@ -2518,11 +2524,15 @@ var init_runtime_registry = __esm({
         detect: (home) => existsSync2(join2(home, ".codex")),
         // No writePerCourse: Codex has no project-level command channel — the
         // root AGENTS.md managed block (generic entry) is its per-course path.
-        writeUniversal({ home, content }) {
-          const file2 = join2(home, ".codex", "prompts", "tostudy.md");
-          writeFile2(join2(home, ".codex", "prompts"), "tostudy.md", content);
-          return [file2];
-        }
+        // GH-2351 follow-up: no writeUniversal either. The hint below already stopped
+        // naming /tostudy, but login still wrote ~10 KB to ~/.codex/prompts/tostudy.md
+        // and printed "✓ Instalado: …/.codex/prompts/tostudy.md" — announcing, as the
+        // last thing on screen, an install of a command that does not exist. Codex
+        // never reads that directory, so nothing consumed the file. A stale one from
+        // an older CLI is left on disk: we do not delete the student's files.
+        // GH-2351: Codex never reads ~/.codex/prompts, so there is no /tostudy there;
+        // asking in plain language works (it reads AGENTS.md and finds the course skill).
+        slashHint: () => "No Codex, abra o Codex e pe\xE7a: vamos estudar"
       },
       {
         id: "opencode",
@@ -3626,7 +3636,7 @@ var loginCommand = new Command("login").description("Autentica no ToStudy via br
       try {
         const { detectIDEs: detectIDEs2 } = await Promise.resolve().then(() => (init_ide_detector(), ide_detector_exports));
         const { installUniversalCommand: installUniversalCommand2 } = await Promise.resolve().then(() => (init_instruction_files(), instruction_files_exports));
-        const { RUNTIMES: RUNTIMES2 } = await Promise.resolve().then(() => (init_runtime_registry(), runtime_registry_exports));
+        const { RUNTIMES: RUNTIMES2, CODEX_LOGIN_NOTICE: CODEX_LOGIN_NOTICE2 } = await Promise.resolve().then(() => (init_runtime_registry(), runtime_registry_exports));
         const { homedir: homedir2 } = await import("node:os");
         const ides = detectIDEs2();
         const detected = ides.filter((ide) => ide.detected);
@@ -3663,6 +3673,10 @@ var loginCommand = new Command("login").description("Autentica no ToStudy via br
             );
           }
         }
+        if (detected.some((ide) => ide.id === "codex")) {
+          console.log("");
+          for (const line of CODEX_LOGIN_NOTICE2) console.log(line);
+        }
       } catch {
       }
       try {
@@ -3739,27 +3753,57 @@ import { Command as Command3 } from "commander";
 
 // src/installer/mcp-setup.ts
 import { spawn } from "node:child_process";
-async function exchangeCliSessionForMcpToken(session, fetchImpl = fetch) {
-  const res = await fetchImpl(`${session.apiUrl}/api/mcp/token`, {
-    method: "POST",
-    headers: {
-      Authorization: `Bearer ${session.token}`
-    }
-  });
+import { hostname } from "node:os";
+
+// src/version.ts
+var CLI_VERSION = true ? "0.18.17" : "0.7.1";
+
+// src/installer/mcp-setup.ts
+function safeServerError(text2) {
+  if (typeof text2 !== "string" || text2.length === 0 || text2.length > 200) return null;
+  return ["Bearer", "mcp_", "eyJ"].some((m) => text2.includes(m)) ? null : text2;
+}
+async function createMcpApiKey(session, fetchImpl = fetch) {
+  let res;
+  try {
+    res = await fetchImpl(`${session.apiUrl}/api/mcp/sessions`, {
+      method: "POST",
+      headers: {
+        Authorization: `Bearer ${session.token}`,
+        "Content-Type": "application/json"
+      },
+      body: JSON.stringify({
+        clientInfo: {
+          source: "tostudy-cli-setup",
+          hostname: hostname(),
+          os: process.platform,
+          version: CLI_VERSION
+        }
+      })
+    });
+  } catch {
+    throw new Error("Falha ao criar a chave MCP: erro de rede");
+  }
   if (!res.ok) {
     const body = await res.json().catch(() => ({}));
-    throw new Error(body.error ?? `Falha ao obter token MCP (${res.status})`);
+    throw new Error(
+      `Falha ao criar a chave MCP: ${safeServerError(body.error) ?? `HTTP ${res.status}`}`
+    );
+  }
+  const { apiKey } = await res.json().catch(() => ({}));
+  if (typeof apiKey !== "string" || !apiKey.startsWith("mcp_")) {
+    throw new Error("Falha ao criar a chave MCP: resposta inv\xE1lida do servidor");
   }
-  return res.json();
+  return apiKey;
 }
-async function runMcpSetup(session, token, spawnImpl = spawn) {
+async function runMcpSetup(session, apiKey, spawnImpl = spawn) {
   const command = process.platform === "win32" ? "npx.cmd" : "npx";
   await new Promise((resolve, reject) => {
     const child = spawnImpl(command, ["-y", "@tostudy-ai/mcp-setup", "--url", session.apiUrl], {
       stdio: "inherit",
       env: {
         ...process.env,
-        TOSTUDY_API_KEY: token
+        TOSTUDY_API_KEY: apiKey
       }
     });
     child.once("error", reject);
@@ -3794,8 +3838,15 @@ async function runSetupMcpSubcommand() {
   const session = await requireSession();
   console.log(`  \u2713 Logado como ${session.userName}
 `);
-  const { token } = await exchangeCliSessionForMcpToken(session);
-  await runMcpSetup(session, token);
+  const apiKey = await createMcpApiKey(session);
+  try {
+    await runMcpSetup(session, apiKey);
+  } catch (error49) {
+    console.error(
+      "  Instala\xE7\xE3o incompleta: a chave MCP criada aparece em Configura\xE7\xF5es \u203A MCP e pode ser revogada."
+    );
+    throw error49;
+  }
   console.log("\n  Setup MCP completo!");
   console.log("  \u2192 Reinicie o IDE para ativar o servidor MCP");
   console.log("  \u2192 tostudy doctor  (verificar conex\xE3o)\n");
@@ -3849,9 +3900,6 @@ init_session_store();
 init_workspace_state();
 init_formatter();
 
-// src/version.ts
-var CLI_VERSION = true ? "0.18.13" : "0.7.1";
-
 // src/update-checker.ts
 init_config_dir();
 import fs8 from "node:fs";
@@ -5210,7 +5258,6 @@ var selectCommand = new Command8("select").description("Activate a course by ID
         { json: true }
       );
     } else {
-      const slashCmd = courseSlug2 ? `/tostudy-${courseSlug2}` : "/tostudy";
       const home = os7.homedir();
       const cwd = process.cwd();
       const namespacedPath = `${cwd}/.tostudy`;
@@ -5242,7 +5289,7 @@ var selectCommand = new Command8("select").description("Activate a course by ID
         lines.push(rootAgentsSkippedHint());
       }
       lines.push("", "\u2192 Abra sua plataforma (claude, codex, cursor...)");
-      lines.push(...slashHintLines(courseSlug2, home, cwd, slashCmd));
+      lines.push(...slashHintLines(courseSlug2, home, cwd));
       lines.push("\u2192 Em outras plataformas: tostudy init");
       output(lines.join("\n"), { json: false });
     }
@@ -5931,7 +5978,7 @@ __export(external_exports, {
   guid: () => guid2,
   hash: () => hash,
   hex: () => hex2,
-  hostname: () => hostname2,
+  hostname: () => hostname3,
   httpUrl: () => httpUrl,
   includes: () => _includes,
   instanceof: () => _instanceof,
@@ -7318,7 +7365,7 @@ __export(regexes_exports, {
   extendedDuration: () => extendedDuration,
   guid: () => guid,
   hex: () => hex,
-  hostname: () => hostname,
+  hostname: () => hostname2,
   html5Email: () => html5Email,
   idnEmail: () => idnEmail,
   integer: () => integer,
@@ -7395,7 +7442,7 @@ var cidrv4 = /^((25[0-5]|2[0-4][0-9]|1[0-9][0-9]|[1-9][0-9]|[0-9])\.){3}(25[0-5]
 var cidrv6 = /^(([0-9a-fA-F]{1,4}:){7}[0-9a-fA-F]{1,4}|::|([0-9a-fA-F]{1,4})?::([0-9a-fA-F]{1,4}:?){0,6})\/(12[0-8]|1[01][0-9]|[1-9]?[0-9])$/;
 var base64 = /^$|^(?:[0-9a-zA-Z+/]{4})*(?:(?:[0-9a-zA-Z+/]{2}==)|(?:[0-9a-zA-Z+/]{3}=))?$/;
 var base64url = /^[A-Za-z0-9_-]*$/;
-var hostname = /^(?=.{1,253}\.?$)[a-zA-Z0-9](?:[a-zA-Z0-9-]{0,61}[a-zA-Z0-9])?(?:\.[a-zA-Z0-9](?:[-0-9a-zA-Z]{0,61}[0-9a-zA-Z])?)*\.?$/;
+var hostname2 = /^(?=.{1,253}\.?$)[a-zA-Z0-9](?:[a-zA-Z0-9-]{0,61}[a-zA-Z0-9])?(?:\.[a-zA-Z0-9](?:[-0-9a-zA-Z]{0,61}[0-9a-zA-Z])?)*\.?$/;
 var domain = /^([a-zA-Z0-9](?:[a-zA-Z0-9-]{0,61}[a-zA-Z0-9])?\.)+[a-zA-Z]{2,}$/;
 var e164 = /^\+[1-9]\d{6,14}$/;
 var dateSource = `(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))`;
@@ -17765,7 +17812,7 @@ __export(schemas_exports2, {
   guid: () => guid2,
   hash: () => hash,
   hex: () => hex2,
-  hostname: () => hostname2,
+  hostname: () => hostname3,
   httpUrl: () => httpUrl,
   instanceof: () => _instanceof,
   int: () => int,
@@ -18269,7 +18316,7 @@ var ZodCustomStringFormat = /* @__PURE__ */ $constructor("ZodCustomStringFormat"
 function stringFormat(format, fnOrRegex, _params = {}) {
   return _stringFormat(ZodCustomStringFormat, format, fnOrRegex, _params);
 }
-function hostname2(_params) {
+function hostname3(_params) {
   return _stringFormat(ZodCustomStringFormat, "hostname", regexes_exports.hostname, _params);
 }
 function hex2(_params) {