agy-cli-usage 0.2.0 → 0.3.1

package/CHANGELOG.md

@@ -0,0 +1,30 @@
+## [0.3.0](https://github.com/abruption/agy-cli-usage/compare/v0.2.0...v0.3.0) (2026-06-24)
+
+
+### Features
+
+* add --version flag and self-update command ([#8](https://github.com/abruption/agy-cli-usage/issues/8)) ([811e82f](https://github.com/abruption/agy-cli-usage/commit/811e82f057e709b92b7a7665b01c54dde913b0d4)), closes [#7](https://github.com/abruption/agy-cli-usage/issues/7)
+
+
+### Bug Fixes
+
+* use plain v* tags in release-please ([#12](https://github.com/abruption/agy-cli-usage/issues/12)) ([74b648d](https://github.com/abruption/agy-cli-usage/commit/74b648df24967f71a43095a80e7340a6b5ac2e39)), closes [#9](https://github.com/abruption/agy-cli-usage/issues/9)
+
+## [0.3.1](https://github.com/abruption/agy-cli-usage/compare/v0.3.0...v0.3.1) (2026-06-24)
+
+
+### Bug Fixes
+
+* read agy token from Windows Credential Manager ([#14](https://github.com/abruption/agy-cli-usage/issues/14)) ([e5cb274](https://github.com/abruption/agy-cli-usage/commit/e5cb274c6a0a6aa1ddf6b491d417bfc81c04916a)), closes [#13](https://github.com/abruption/agy-cli-usage/issues/13)
+
+## [0.2.0](https://github.com/abruption/agy-cli-usage/compare/v0.1.0...v0.2.0) (2026-06-24)
+
+### Features
+
+* **credentials:** read agy token file for headless Linux (no keyring) ([5914e6c](https://github.com/abruption/agy-cli-usage/commit/5914e6cc3cf3977bb6c6f974f68bd40209bc376e))
+
+## [0.1.0](https://github.com/abruption/agy-cli-usage/compare/e1d582dd618fe06fd607d00846f5b7a66acf924d...v0.1.0) (2026-06-24)
+
+### Features
+
+* headless usage/quota monitor for Antigravity CLI (agy) ([e1d582d](https://github.com/abruption/agy-cli-usage/commit/e1d582dd618fe06fd607d00846f5b7a66acf924d))

package/README.md

@@ -73,12 +73,14 @@ npm run check     # 구문 검사
 ```
 
 - **CI** (`.github/workflows/ci.yml`): push/PR마다 ubuntu(Node 18/20/22) + macOS/Windows(Node 22)에서 테스트.
-- **Release** (`.github/workflows/release.yml`): `v*` 태그 push 시 빌드·테스트 후 npm publish(provenance) + GitHub Release 생성. `NPM_TOKEN` 시크릿 필요.
+- **Release** ([release-please](https://github.com/googleapis/release-please), `.github/workflows/release-please.yml`): Conventional Commits 기반 **완전 자동화**. `NPM_TOKEN` 시크릿 필요.
 
-```bash
-npm version patch        # package.json 버전 +0.0.1 & v* 태그 생성
-git push --follow-tags   # → Release 워크플로 실행 → npm 자동 배포
-```
+릴리스 절차 — 수동 버전 범프 없음:
+
+1. `feat:`/`fix:` 등 Conventional Commits를 main에 머지하면, release-please가 **Release PR**(버전 범프 + CHANGELOG 갱신)을 자동 생성·유지.
+2. 그 **Release PR을 머지**하면 → GitHub Release + 태그 생성 → 같은 워크플로가 `npm publish --provenance` 실행.
+
+> 즉 "Release PR 머지" 한 번이 전체 배포다.
 
 ## 주의
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agy-cli-usage",
-  "version": "0.2.0",
+  "version": "0.3.1",
   "description": "Headless usage/quota monitor for the Antigravity CLI (agy) — reads Cloud Code quota directly, with a PTY fallback. No IDE required.",
   "type": "module",
   "bin": {
@@ -20,6 +20,7 @@
     "src/",
     "server.js",
     "README.md",
+    "CHANGELOG.md",
     "LICENSE"
   ],
   "keywords": [

package/src/credentials.js

@@ -8,9 +8,11 @@
 //     "auth_method": "consumer" }
 //
 // Read backends, tried in order:
-//   1. @napi-rs/keyring native module  (macOS / Windows / Linux Secret Service)
+//   1. @napi-rs/keyring native module  (macOS / Linux Secret Service)
 //   2. OS CLI fallback                  (`security` on macOS, `secret-tool` on Linux)
-//   3. File fallback                    (headless Linux: agy can't reach a keyring
+//   3. Windows Credential Manager       (CredRead via powershell.exe — go-keyring's
+//                                        target format differs from keyring-rs's)
+//   4. File fallback                    (headless Linux: agy can't reach a keyring
 //                                        and writes the token to a plain-JSON file)
 // If every backend fails, the caller falls back to the PTY path which drives
 // `agy` itself.
@@ -73,6 +75,67 @@ function readViaCli() {
   return null;
 }
 
+// On Windows, agy stores the token in Credential Manager via Go's
+// zalando/go-keyring, whose target name is `service:account` ("gemini:antigravity").
+// @napi-rs/keyring (keyring-rs) uses a different target format and can't find it,
+// so we read the credential blob directly via the Win32 CredRead API through the
+// built-in powershell.exe (no extra dependency).
+const WIN_CRED_TARGET = `${KEYRING_SERVICE}:${KEYRING_ACCOUNT}`;
+
+const PS_READ_CRED = `$ErrorActionPreference='Stop'
+$sig=@'
+using System;
+using System.Runtime.InteropServices;
+public class CredApi {
+  [DllImport("advapi32.dll", SetLastError=true, CharSet=CharSet.Unicode)]
+  public static extern bool CredRead(string target, int type, int flags, out IntPtr cred);
+  [DllImport("advapi32.dll")] public static extern void CredFree(IntPtr cred);
+  [StructLayout(LayoutKind.Sequential)]
+  public struct CREDENTIAL {
+    public int Flags; public int Type; public IntPtr TargetName; public IntPtr Comment;
+    public System.Runtime.InteropServices.ComTypes.FILETIME LastWritten;
+    public int CredentialBlobSize; public IntPtr CredentialBlob; public int Persist;
+    public int AttributeCount; public IntPtr Attributes; public IntPtr TargetAlias; public IntPtr UserName;
+  }
+  public static byte[] Read(string target){
+    IntPtr p; if(!CredRead(target,1,0,out p)) return null;
+    try {
+      var c=(CREDENTIAL)Marshal.PtrToStructure(p,typeof(CREDENTIAL));
+      var b=new byte[c.CredentialBlobSize];
+      if(c.CredentialBlobSize>0) Marshal.Copy(c.CredentialBlob,b,0,c.CredentialBlobSize);
+      return b;
+    } finally { CredFree(p); }
+  }
+}
+'@
+Add-Type -TypeDefinition $sig | Out-Null
+$b=[CredApi]::Read('${WIN_CRED_TARGET}')
+if($b -eq $null){ exit 1 }
+[Console]::Out.Write([Convert]::ToBase64String($b))`;
+
+function readViaWindowsCredman() {
+  if (process.platform !== 'win32') return null;
+  try {
+    const encoded = Buffer.from(PS_READ_CRED, 'utf16le').toString('base64');
+    const b64 = execFileSync(
+      'powershell.exe',
+      ['-NoProfile', '-NonInteractive', '-EncodedCommand', encoded],
+      { encoding: 'utf8' },
+    ).trim();
+    if (!b64) return null;
+    const raw = Buffer.from(b64, 'base64');
+    // go-keyring writes the value as UTF-8; tolerate UTF-16LE just in case.
+    const utf8 = raw.toString('utf8');
+    const looksValid = (s) => s.startsWith(B64_PREFIX) || s.trimStart().startsWith('{');
+    if (looksValid(utf8)) return utf8;
+    const utf16 = raw.toString('utf16le');
+    if (looksValid(utf16)) return utf16;
+    return utf8;
+  } catch {
+    return null;
+  }
+}
+
 // On headless Linux (no Secret Service) agy persists the token to a plain-JSON
 // file instead of the keyring. Same payload shape, no `go-keyring-base64:` prefix.
 function readViaFile() {
@@ -98,6 +161,8 @@ async function readRawSecret() {
   if (fromNapi) return fromNapi;
   const fromCli = readViaCli();
   if (fromCli) return fromCli;
+  const fromWin = readViaWindowsCredman();
+  if (fromWin) return fromWin;
   const fromFile = readViaFile();
   if (fromFile) return fromFile;
   return null;

package/src/main.js

@@ -9,12 +9,15 @@
 //   agy-usage --channel daily|prod    Cloud Code host (default: auto-detect)
 //   agy-usage --no-cache      bypass the 5-minute cache
 //   agy-usage --refresh       force a fresh fetch (alias for --no-cache)
+//   agy-usage update [--check]  self-update via npm
+//   agy-usage --version | -v  print the installed version
 
 import { getAccessToken, CredentialError } from './credentials.js';
 import { fetchQuotaSummary } from './api.js';
 import { captureUsageViaPty } from './pty-fallback.js';
 import { fromApi, fromPty } from './quota.js';
 import { renderPanel } from './render.js';
+import { currentVersion, runUpdate } from './update.js';
 import { readFileSync, writeFileSync, mkdirSync } from 'node:fs';
 import { homedir } from 'node:os';
 import { join } from 'node:path';
@@ -24,16 +27,19 @@ const CACHE_FILE = join(CACHE_DIR, 'quota.json');
 const CACHE_TTL_MS = 5 * 60 * 1000;
 
 function parseArgs(argv) {
-  const o = { json: false, watch: null, source: 'auto', channel: 'auto', cache: true };
+  const o = { json: false, watch: null, source: 'auto', channel: 'auto', cache: true, command: null, check: false };
   for (let i = 0; i < argv.length; i++) {
     const a = argv[i];
-    if (a === '--json') o.json = true;
+    if (a === 'update' && o.command == null) o.command = 'update';
+    else if (a === '--json') o.json = true;
     else if (a === '--watch') {
       const n = Number(argv[i + 1]);
       if (Number.isFinite(n)) { o.watch = n; i++; } else o.watch = 60;
     } else if (a === '--source') o.source = argv[++i];
     else if (a === '--channel') o.channel = argv[++i];
     else if (a === '--no-cache' || a === '--refresh') o.cache = false;
+    else if (a === '--check') o.check = true;
+    else if (a === '-v' || a === '--version') o.version = true;
     else if (a === '-h' || a === '--help') o.help = true;
   }
   return o;
@@ -47,6 +53,8 @@ const HELP = `agy-usage — Antigravity CLI (agy) usage/quota monitor
   agy-usage --source <auto|api|pty>
   agy-usage --channel <auto|daily|prod>
   agy-usage --no-cache | --refresh
+  agy-usage update [--check]  self-update via npm (--check: report only)
+  agy-usage --version | -v
 `;
 
 // --- cache -------------------------------------------------------------------
@@ -104,6 +112,8 @@ async function once(opts) {
 async function main() {
   const opts = parseArgs(process.argv.slice(2));
   if (opts.help) { process.stdout.write(HELP); return; }
+  if (opts.version) { process.stdout.write(currentVersion() + '\n'); return; }
+  if (opts.command === 'update') { process.exit(await runUpdate({ checkOnly: opts.check })); }
 
   if (opts.watch != null) {
     const intervalMs = Math.max(5, opts.watch) * 1000;

package/src/update.js

@@ -0,0 +1,87 @@
+// Self-update + version helpers for the CLI.
+//
+// `agy-cli-usage update`        check the registry and `npm install -g` if newer
+// `agy-cli-usage update --check` report only, don't install
+// `agy-cli-usage --version`     print the installed version
+
+import { execFileSync, spawnSync } from 'node:child_process';
+import { readFileSync } from 'node:fs';
+
+const PKG_NAME = 'agy-cli-usage';
+
+/** Installed version, read from this package's package.json. */
+export function currentVersion() {
+  const pkg = JSON.parse(readFileSync(new URL('../package.json', import.meta.url), 'utf8'));
+  return pkg.version;
+}
+
+/**
+ * Compare two dotted versions numerically (prerelease tags ignored).
+ * @returns negative if a<b, 0 if equal, positive if a>b
+ */
+export function semverCompare(a, b) {
+  const norm = (v) =>
+    String(v)
+      .replace(/^v/, '')
+      .split('-')[0]
+      .split('.')
+      .map((n) => parseInt(n, 10) || 0);
+  const pa = norm(a);
+  const pb = norm(b);
+  for (let i = 0; i < Math.max(pa.length, pb.length); i++) {
+    const d = (pa[i] || 0) - (pb[i] || 0);
+    if (d !== 0) return d;
+  }
+  return 0;
+}
+
+/** Latest published version: prefer the user's configured registry (npm view), fall back to public. */
+export async function latestVersion() {
+  try {
+    const out = execFileSync('npm', ['view', PKG_NAME, 'version'], {
+      encoding: 'utf8',
+      stdio: ['ignore', 'pipe', 'ignore'],
+    }).trim();
+    if (out) return out;
+  } catch {
+    // npm missing or offline — try the public registry directly
+  }
+  try {
+    const res = await fetch(`https://registry.npmjs.org/${PKG_NAME}/latest`);
+    if (res.ok) return (await res.json()).version;
+  } catch {
+    // offline
+  }
+  return null;
+}
+
+/**
+ * Run the update flow.
+ * @param {{ checkOnly?: boolean }} opts
+ * @returns {Promise<number>} process exit code
+ */
+export async function runUpdate({ checkOnly = false } = {}) {
+  const current = currentVersion();
+  const latest = await latestVersion();
+  if (!latest) {
+    process.stderr.write('Could not determine the latest version (offline or npm unavailable).\n');
+    return 1;
+  }
+  if (semverCompare(latest, current) <= 0) {
+    process.stdout.write(`agy-cli-usage is up to date (${current}).\n`);
+    return 0;
+  }
+  process.stdout.write(`Update available: ${current} -> ${latest}\n`);
+  if (checkOnly) {
+    process.stdout.write('Run `agy-cli-usage update` to install it.\n');
+    return 0;
+  }
+  process.stdout.write(`Installing ${PKG_NAME}@${latest} globally…\n`);
+  const r = spawnSync('npm', ['install', '-g', `${PKG_NAME}@${latest}`], { stdio: 'inherit' });
+  if (r.error) {
+    process.stderr.write(`Failed to run npm: ${r.error.message}\nInstall manually: npm install -g ${PKG_NAME}@latest\n`);
+    return 1;
+  }
+  if (r.status === 0) process.stdout.write(`Updated to ${latest}.\n`);
+  return r.status ?? 0;
+}