@writepanda/cli 1.272.0 → 1.276.0

package/bin/pandastudio.mjs

@@ -40,7 +40,7 @@ for (const stream of [process.stdout, process.stderr]) {
 	});
 }
 
-const VERSION = "1.272.0";
+const VERSION = "1.276.0";
 
 function configDir() {
 	// PANDASTUDIO_CONFIG_DIR mirrors the override the main process
@@ -356,7 +356,20 @@ function parseScalar(value) {
 	return value;
 }
 
+/** Access handed over in the environment. Inside PandaStudio's own agent
+ *  shell sandbox the token and port files can't be read, so the shell wrapper
+ *  passes the same values this way (see electron/agent/shellSandbox.ts). */
+function envCredentials() {
+	const token = (process.env.PANDASTUDIO_AUTOMATION_TOKEN ?? "").trim();
+	const port = Number((process.env.PANDASTUDIO_AUTOMATION_PORT ?? "").trim());
+	return token && Number.isInteger(port) && port > 0 ? { port, token } : null;
+}
+
 async function readCredentials(opts) {
+	if (opts.portOverride === undefined && opts.tokenOverride === undefined) {
+		const fromEnv = envCredentials();
+		if (fromEnv) return fromEnv;
+	}
 	const port = opts.portOverride ?? Number((await fs.readFile(PORT_FILE, "utf-8")).trim());
 	const token = opts.tokenOverride ?? (await fs.readFile(TOKEN_FILE, "utf-8")).trim();
 	if (!Number.isInteger(port) || port <= 0) throw new Error(`invalid port in ${PORT_FILE}`);
@@ -551,8 +564,11 @@ async function lastLaunchAgeMs() {
 
 async function recordLaunch() {
 	try {
-		await fs.mkdir(configDir(), { recursive: true });
-		await fs.writeFile(path.join(configDir(), "launch-requested"), String(Date.now()), "utf-8");
+		await fs.mkdir(configDir(), { recursive: true, mode: 0o700 });
+		await fs.writeFile(path.join(configDir(), "launch-requested"), String(Date.now()), {
+			encoding: "utf-8",
+			mode: 0o600,
+		});
 	} catch {
 		/* best-effort */
 	}
@@ -630,7 +646,7 @@ async function autoLaunchAndWait(opts, log) {
 	}
 	if (last.alive) {
 		throw new Error(
-			`PandaStudio is running but its automation server didn't answer within ${secs}s. In PandaStudio open Settings → Automation and make sure Local automation is on.`,
+			`PandaStudio is running but its automation server didn't answer within ${secs}s. In PandaStudio open Settings → Other AI apps and make sure Local automation is on.`,
 		);
 	}
 	if (last.preferred === "up") {
@@ -639,7 +655,7 @@ async function autoLaunchAndWait(opts, log) {
 		);
 	}
 	throw new Error(
-		`PandaStudio did not become ready within ${secs}s. Open PandaStudio, go to Settings → Automation and turn on Local automation.`,
+		`PandaStudio did not become ready within ${secs}s. Open PandaStudio, go to Settings → Other AI apps and turn on Local automation.`,
 	);
 }
 
@@ -782,7 +798,7 @@ async function main() {
 	if (!alive) {
 		if (opts.noLaunch) {
 			process.stderr.write(
-				"error: PandaStudio is not reachable and --no-launch was set.\n  Open PandaStudio, go to Settings → Automation and turn on Local automation.\n",
+				"error: PandaStudio is not reachable and --no-launch was set.\n  Open PandaStudio, go to Settings → Other AI apps and turn on Local automation.\n",
 			);
 			return 3;
 		}
@@ -805,6 +821,10 @@ async function main() {
 			headers: {
 				"Content-Type": "application/json",
 				Authorization: `Bearer ${c.token}`,
+				// Run from the in-app agent's shell: confirmations show in its chat.
+				...(process.env.PANDASTUDIO_CALLER === "in-app"
+					? { "X-PandaStudio-Caller": "in-app" }
+					: {}),
 			},
 			body: JSON.stringify(callBody),
 		});

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@writepanda/cli",
-	"version": "1.272.0",
+	"version": "1.276.0",
 	"description": "Drive PandaStudio (a desktop video editor for YouTube creators) from the command line. Talks to a localhost HTTP API the desktop app exposes.",
 	"keywords": [
 		"pandastudio",