@zeph-to/cli 1.21.0 → 1.22.0

package/README.md

@@ -33,36 +33,50 @@ npx @zeph-to/cli notify --title "Hello"
 
 ## Quick Start
 
-```bash
-# Sign in via browser — auto-fetches your API key + hook into
-# ~/.zeph/config.json (no copy-paste)
-npx @zeph-to/cli login
+Install the CLI globally, then run setup:
 
-# Install for your AI agents (rules + hooks + MCP). Reuses the saved
-# config; detects Claude Code / Cursor / Windsurf / Gemini / Codex / …
-npx @zeph-to/cli install
+```bash
+npm install -g @zeph-to/cli
+zeph install
 ```
 
-`login` opens a browser to the Zeph web app, asks you to confirm "connect
-this computer", then issues a fresh API key (labelled with your hostname)
-and reuses or creates a hook — writing both back to `~/.zeph/config.json`
-over a localhost loopback. No credential ever gets pasted into the
-terminal.
+`zeph install` opens a browser sign-in on a fresh machine — the web app
+issues an API key + hook as a matched pair and the CLI writes them to
+`~/.zeph/config.json` (no copy-paste). Then it installs rules + hooks +
+MCP for every detected agent (Claude Code / Cursor / Windsurf / Gemini /
+Codex / …). Safe to re-run: a saved login is reused untouched (no
+prompts), so a re-run just refreshes the agent integrations. To switch
+account, `zeph install --relogin` forces a fresh sign-in.
+
+**Why global, not `npx`?** `zeph cc` (drive a session from your phone)
+needs `zeph` on your `PATH`, and the agent hooks this installs are
+`$(command -v zeph || npx …)` — a global binary skips an npx cold-start
+on *every* notification. For notifications only, with no phone control,
+`npx @zeph-to/cli install` is a lighter alternative that skips the global
+binary.
 
-Prefer to paste credentials yourself (or on a headless box with no
-browser)? Skip `login` and pass them to `install` directly:
+`~/.zeph/config.json` is the single source of truth — the CLI, the MCP
+server, the plugin hooks, and the listener all read it. You never need
+`ZEPH_API_KEY`-style env vars for a normal setup; they exist as overrides
+(second account, CI).
+
+Variants:
 
 ```bash
-npx @zeph-to/cli install --key ak_... --hook hook_...
-```
+# Headless box (no browser): paste credentials from another machine's
+# ~/.zeph/config.json
+zeph install --key ak_... --hook hook_...
 
-Either way it saves to `~/.zeph/config.json`. All Zeph tools (CLI, MCP
-server, plugin hooks, listener) read this file.
+# Skip the interactive agent picker
+zeph install --only claude,cursor
 
-On a fresh machine `install` alone is enough: with no `--key` and no
-saved config it opens the same browser login automatically (headless
-boxes fall back to manual key entry). Pass `--only claude,cursor,…` to
-skip the interactive agent picker.
+# Switch account — force a fresh browser sign-in over a saved login
+zeph install --relogin
+
+# Refresh credentials only (no agent re-install) — assumes you already
+# ran `zeph install` once; on its own it does NOT wire MCP into agents
+zeph login
+```
 
 To **send** notifications:
 

package/dist/cli.js

@@ -107,10 +107,13 @@ Login options:
 
 Install options:
   (no --key, no saved config → opens browser login automatically;
-   headless falls back to manual key entry)
+   a saved login is reused untouched on re-run; headless falls back
+   to manual key entry)
   --key <api-key>    API key (non-interactive; skips browser login)
   --hook <hook-id>   Hook ID (non-interactive)
   --base-url <url>   Base URL (non-interactive)
+  --relogin          Force a fresh browser sign-in even if a login is
+                     already saved (switch account)
   --web-url <url>    Login web app URL [default: https://app.zeph.to]
   --only <agents>    Comma-separated agent ids to install for
                      (claude,cursor,windsurf,gemini,codex,copilot,cline,aider).

package/dist/installer.d.ts

@@ -3,7 +3,12 @@ import type { Agent } from './agents.js';
  * True when install should auto-open browser login (ADR 0002): interactive
  * context with no existing credential (--key/env/config all absent).
  */
-export declare const shouldTriggerLogin: (nonInteractive: boolean, currentKey: string | undefined) => boolean;
+/**
+ * Interactive install, past the `--key` path: open a browser login only when
+ * there's nothing saved yet, or the user explicitly asked to re-authenticate
+ * with `--relogin`. A plain re-run keeps the saved login untouched.
+ */
+export declare const shouldReauth: (currentKey: string | undefined, relogin: boolean) => boolean;
 /** Exported for tests (installGemini shells out to the real `gemini` binary,
  *  so the merge semantics can't be covered through it deterministically). */
 export declare const mergeJsonFile: (filePath: string, patch: Record<string, unknown>) => void;

package/dist/installer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"installer.d.ts","sourceRoot":"","sources":["../src/installer.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AA4BzC;;;GAGG;AACH,eAAO,MAAM,kBAAkB,GAAI,gBAAgB,OAAO,EAAE,YAAY,MAAM,GAAG,SAAS,KAAG,OAC7D,CAAC;AAoBjC;6EAC6E;AAC7E,eAAO,MAAM,aAAa,GAAI,UAAU,MAAM,EAAE,OAAO,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAG,IAqBhF,CAAC;AAgQF;;;;GAIG;AACH,eAAO,MAAM,iBAAiB,GAAI,UAAU,KAAK,EAAE,EAAE,MAAM,MAAM,KAAG,KAAK,EAKxE,CAAC;AA4FF,eAAO,MAAM,aAAa,GAAU,MAAM,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,KAAG,OAAO,CAAC,MAAM,CAkG1F,CAAC"}
+{"version":3,"file":"installer.d.ts","sourceRoot":"","sources":["../src/installer.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AA4BzC;;;GAGG;AACH;;;;GAIG;AACH,eAAO,MAAM,YAAY,GAAI,YAAY,MAAM,GAAG,SAAS,EAAE,SAAS,OAAO,KAAG,OACxD,CAAC;AAoBzB;6EAC6E;AAC7E,eAAO,MAAM,aAAa,GAAI,UAAU,MAAM,EAAE,OAAO,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAG,IAqBhF,CAAC;AAgQF;;;;GAIG;AACH,eAAO,MAAM,iBAAiB,GAAI,UAAU,KAAK,EAAE,EAAE,MAAM,MAAM,KAAG,KAAK,EAKxE,CAAC;AA8EF,eAAO,MAAM,aAAa,GAAU,MAAM,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,KAAG,OAAO,CAAC,MAAM,CAkG1F,CAAC"}

package/dist/installer.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.handleInstall = exports.filterAgentsByIds = exports.mergeJsonFile = exports.shouldTriggerLogin = void 0;
+exports.handleInstall = exports.filterAgentsByIds = exports.mergeJsonFile = exports.shouldReauth = void 0;
 const child_process_1 = require("child_process");
 const fs_1 = require("fs");
 const os_1 = require("os");
@@ -19,8 +19,13 @@ const fail = (msg) => console.log(`    - ${msg}`);
  * True when install should auto-open browser login (ADR 0002): interactive
  * context with no existing credential (--key/env/config all absent).
  */
-const shouldTriggerLogin = (nonInteractive, currentKey) => !nonInteractive && !currentKey;
-exports.shouldTriggerLogin = shouldTriggerLogin;
+/**
+ * Interactive install, past the `--key` path: open a browser login only when
+ * there's nothing saved yet, or the user explicitly asked to re-authenticate
+ * with `--relogin`. A plain re-run keeps the saved login untouched.
+ */
+const shouldReauth = (currentKey, relogin) => !currentKey || relogin;
+exports.shouldReauth = shouldReauth;
 const promptInput = (question) => {
     const rl = (0, readline_1.createInterface)({ input: process.stdin, output: process.stdout });
     return new Promise((resolve) => {
@@ -348,26 +353,12 @@ const testConnection = async (apiKey, baseUrl) => {
         return false;
     }
 };
-/** Interactive path when a credential already exists: prompt to keep/replace. */
-const promptExistingCredentials = async (currentKey, existing) => {
-    if (currentKey)
-        console.log(`  Current API Key: ${currentKey.slice(0, 12)}...`);
-    const keyInput = await promptInput(currentKey ? '  New API Key (Enter to keep): ' : '  API Key (from app > Settings > API Keys): ');
-    const currentHook = (0, config_js_1.resolvedEnv)('ZEPH_HOOK_ID') || existing.hookId;
-    if (currentHook)
-        console.log(`  Current Hook ID: ${currentHook}`);
-    const hookInput = await promptInput(currentHook ? '  New Hook ID (Enter to keep, "none" to remove): ' : '  Hook ID (optional, for prompt/input): ');
-    return {
-        apiKey: keyInput || currentKey,
-        hookId: hookInput === 'none' ? undefined : (hookInput || currentHook),
-        baseUrl: existing.baseUrl,
-    };
-};
 /**
- * Resolve API key + hook for install. Priority: --key/env/config (non-interactive
- * or "keep existing") → brand-new interactive opens browser login (ADR 0002),
- * falling back to manual paste when headless. wsUrl/deviceId from a login are
- * persisted by runLoginFlow and re-read at config-save time.
+ * Resolve API key + hook for install. Priority: --key/env/config (non-interactive)
+ * → a saved login is reused untouched on re-run → otherwise a brand-new
+ * interactive install opens browser login (ADR 0002), falling back to manual
+ * paste when headless. wsUrl/deviceId from a login are persisted by
+ * runLoginFlow and re-read at config-save time.
  */
 const collectCredentials = async (args, installArgs, nonInteractive, existing) => {
     if (nonInteractive) {
@@ -379,8 +370,15 @@ const collectCredentials = async (args, installArgs, nonInteractive, existing) =
     }
     console.log('');
     const currentKey = (0, config_js_1.resolvedEnv)('ZEPH_API_KEY') || existing.apiKey;
-    if (!(0, exports.shouldTriggerLogin)(nonInteractive, currentKey)) {
-        return promptExistingCredentials(currentKey, existing);
+    // Re-run with a saved login: reuse it silently and move on to agent wiring.
+    // Switching accounts is `zeph login` or `zeph install --relogin`.
+    if (!(0, exports.shouldReauth)(currentKey, args.relogin === true)) {
+        console.log(`  Using saved login (${currentKey.slice(0, 12)}…). Run \`zeph install --relogin\` to switch account.`);
+        return {
+            apiKey: currentKey,
+            hookId: (0, config_js_1.resolvedEnv)('ZEPH_HOOK_ID') || existing.hookId,
+            baseUrl: existing.baseUrl,
+        };
     }
     const result = await (0, login_js_1.runLoginFlow)({
         webUrl: (0, login_js_1.resolveWebUrl)(args['web-url']),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zeph-to/cli",
-  "version": "1.21.0",
+  "version": "1.22.0",
   "description": "Zeph CLI + push notification SDK for AI agents",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",