agentradar-cli 0.3.16 → 0.3.17

package/dist/index.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { readFileSync } from "node:fs";
+import { readFileSync, statSync } from "node:fs";
 import { createRequire } from "node:module";
 import { homedir } from "node:os";
 import { resolve } from "node:path";
@@ -23,9 +23,13 @@ export const runArgs = (raw) => raw[0] !== "run" ? raw
             : ["call", ...raw.slice(1)];
 // The join link carries the secret that claims the agent's key, and ps shows argv to every user on the machine:
 // `--link-file <path>` or `-` (stdin) keeps it off. `again` is how the CLI's own "run it again" lines name it.
-export const joinLink = (urls, linkFile, stdin = () => readFileSync(0, "utf8")) => linkFile ? { link: readFileSync(linkFile, "utf8").trim(), again: `--link-file ${resolve(linkFile)}` }
-    : urls[0] === "-" ? { link: stdin().trim(), again: "-" }
-        : { link: urls[0], again: undefined };
+export const joinLink = (urls, linkFile, stdin = () => readFileSync(0, "utf8"), warn = console.error) => {
+    if (linkFile && statSync(linkFile).mode & 0o077)
+        warn(`Warning: ${linkFile} is readable by other users on this machine; chmod 600 it.`);
+    return linkFile ? { link: readFileSync(linkFile, "utf8").trim(), again: `--link-file ${resolve(linkFile)}` }
+        : urls[0] === "-" ? { link: stdin().trim(), again: "-" }
+            : { link: urls[0], again: undefined };
+};
 const USAGE = [
     "Usage: agentradar <noun> [<sub-noun>] <verb> [--<flag> <value> | --<flag>-file <path> ...] [--dry-run] [--json] [--runner <id>]",
     "  Every agent command comes from the server. agentradar --help lists the groups (as $AR_CLI_RUNNER_ID),",
@@ -38,7 +42,7 @@ const USAGE = [
     "  Exit codes: 0 done; 1 refused or unreachable (the reason is on stderr); 2 the command was wrong.",
     "Local commands:",
     "  agentradar join <join-link> | --link-file <path> | - (link on stdin) [--name <n>] [--model <m>] [--runtime claude|codex|other] [--trust] [--attach-tmux <pane> | --attach-current] [--session <id>] [--no-service | --service]",
-    "  agentradar join cancel <join-link|request-id>",
+    "  agentradar join cancel <request-id> | --link-file <path> | - (link on stdin) | <join-link>",
     "  agentradar setup [--trust] [--harness claude|codex]",
     "  agentradar leave <runner-id>",
     "  agentradar channel <runner-id>",
@@ -126,12 +130,13 @@ async function main() {
         return;
     }
     if (args[0] === "join" && args[1] === "cancel") {
-        if (args.length !== 3 || args[2].startsWith("-")) {
-            console.error("Usage: agentradar join cancel <join-link|request-id>");
+        const fromFile = args.length === 4 && args[2] === "--link-file";
+        if (!fromFile && (args.length !== 3 || (args[2].startsWith("-") && args[2] !== "-"))) {
+            console.error("Usage: agentradar join cancel <request-id> | --link-file <path> | - (link on stdin) | <join-link>");
             process.exitCode = 1;
             return;
         }
-        process.exitCode = await cancelJoin(args[2]);
+        process.exitCode = await cancelJoin(fromFile || args[2] === "-" ? joinLink([args[2]], fromFile ? args[3] : undefined).link : args[2]);
         return;
     }
     if (args[0] === "join") {

package/dist/setup.js

@@ -1138,7 +1138,8 @@ export async function cancelJoin(target, deps = {}) {
         }
     }
     if (!state || !statePath) {
-        log(`No join request from this machine for ${target}.`);
+        // A link carries the claim token; never echo it.
+        log(`No join request from this machine for ${/^https?:\/\//.test(target) ? "that join link" : target}.`);
         return 1;
     }
     if (state.agentId) {
@@ -1148,7 +1149,7 @@ export async function cancelJoin(target, deps = {}) {
     // The secret goes only back to the AgentRadar host that issued it.
     const origin = token ? new URL(target).origin : state.approvalUrl ? new URL(state.approvalUrl).origin : "";
     if (!origin || !trustedMcpEndpoint(origin)) {
-        log("Pass the join link instead of the request id: agentradar join cancel <join-link>");
+        log("Pass the join link instead of the request id: agentradar join cancel --link-file <path>");
         return 1;
     }
     const response = await postJson(fetchImpl, new URL(`/api/join-requests/${encodeURIComponent(state.requestId)}/cancel`, origin), { claimSecret: state.claimSecret });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agentradar-cli",
-  "version": "0.3.16",
+  "version": "0.3.17",
   "engines": {
     "node": ">=20"
   },