artifact-cafe 0.0.7 → 0.0.8

package/dist/index.js

@@ -112,8 +112,9 @@ var anchorSchema = z2.discriminatedUnion("type", [
   pointAnchorSchema,
   textAnchorSchema
 ]);
+var displayNameSchema = z2.string().trim().min(1).max(64);
 var guestSchema = z2.object({
-  displayName: z2.string().min(1).max(64),
+  displayName: displayNameSchema,
   guestId: z2.string().min(16)
 });
 var createCommentThreadSchema = z2.object({
@@ -207,8 +208,10 @@ var ownArtifactSchema = z4.object({
   // Owned artifacts normally never expire; non-null only while an
   // expiry is still set (e.g. an unclaimed publish surfaced here later).
   expiresAt: z4.string().nullable(),
-  // SPEC-2 §8.4 — the containing folder's name for workspace-owned
-  // artifacts; always null for personal artifacts.
+  // SPEC-2 §8.4 — the containing folder for workspace-owned artifacts;
+  // both null for personal artifacts. `folderId` drives the dashboard's
+  // move control and folder filter; `folderName` is the display label.
+  folderId: z4.string().nullable(),
   folderName: z4.string().nullable(),
   // Whether a publish token is still active — revocable from the
   // dashboard (§6.18); the token itself is never returned.
@@ -655,7 +658,7 @@ function createApiClient(apiUrl2, publishToken) {
       });
       return request(
         `${base}/api/v1/artifacts/${artifactId}/comments/export?${params}`,
-        { method: "GET" },
+        { headers, method: "GET" },
         (d) => commentExportSchema.parse(d)
       );
     },
@@ -669,7 +672,7 @@ function createApiClient(apiUrl2, publishToken) {
     async getArtifact(artifactId) {
       return request(
         `${base}/api/v1/artifacts/${artifactId}`,
-        { method: "GET" },
+        { headers, method: "GET" },
         (d) => artifactResponseSchema.parse(d)
       );
     },
@@ -705,6 +708,34 @@ function createApiClient(apiUrl2, publishToken) {
         (d) => meResponseSchema.parse(d)
       );
     },
+    // SPEC §6.7 — reopen a resolved thread. Same auth as resolve.
+    async reopenThread(threadId) {
+      return request(
+        `${base}/api/v1/comment-threads/${threadId}/reopen`,
+        { body: "{}", headers, method: "POST" },
+        (d) => commentThreadSchema.parse(d)
+      );
+    },
+    // SPEC §6.5 — post a reply into a thread. Authorized by this client's
+    // credential: the artifact's publish token (the reply renders as the
+    // agent) or the owner's account key (renders as the owner). No guest
+    // payload — the credential is the identity.
+    async replyThread(threadId, body) {
+      return request(
+        `${base}/api/v1/comment-threads/${threadId}/messages`,
+        { body: JSON.stringify({ body }), headers, method: "POST" },
+        (d) => commentThreadSchema.parse(d)
+      );
+    },
+    // SPEC §6.6 — mark a thread resolved. Authorized by this client's
+    // credential: the artifact's publish token, or the owner's account key.
+    async resolveThread(threadId) {
+      return request(
+        `${base}/api/v1/comment-threads/${threadId}/resolve`,
+        { body: "{}", headers, method: "POST" },
+        (d) => commentThreadSchema.parse(d)
+      );
+    },
     // SPEC §6.16 — set a password (string) or clear it (null). Authorized
     // by the publish token this client was created with.
     async setProtection(artifactId, password) {
@@ -1067,8 +1098,8 @@ function printThread(t) {
     console.log(`  \u21B3 at ${t.anchor.elementPath}`);
   }
   console.log(indent(t.body, "  "));
-  for (const reply of t.replies) {
-    console.log(indent(`${reply.author}: ${reply.body}`, "    "));
+  for (const reply2 of t.replies) {
+    console.log(indent(`${reply2.author}: ${reply2.body}`, "    "));
   }
   console.log("");
 }
@@ -1486,6 +1517,11 @@ function printCliError(err, json) {
       if (err.retryAfter) {
         console.error(`  Retry in ${err.retryAfter}s.`);
       }
+      if (err.code === "password_required") {
+        console.error(
+          "  Run `artifact-cafe login` as the owner, or run from the published folder (its publish token unlocks it)."
+        );
+      }
     }
     return;
   }
@@ -1625,7 +1661,7 @@ function pickArtifact(artifacts) {
     );
   });
   const rl = createInterface({ input: process.stdin, output: process.stdout });
-  return new Promise((resolve, reject) => {
+  return new Promise((resolve2, reject) => {
     rl.question(`
 Link which? [1-${artifacts.length}]: `, (answer) => {
       rl.close();
@@ -1634,7 +1670,7 @@ Link which? [1-${artifacts.length}]: `, (answer) => {
         reject(new Error(`Enter a number between 1 and ${artifacts.length}.`));
         return;
       }
-      resolve(artifacts[n - 1]);
+      resolve2(artifacts[n - 1]);
     });
   });
 }
@@ -1701,7 +1737,7 @@ function apiUrl() {
   return (process.env.ARTIFACT_CAFE_URL ?? DEFAULT_API_URL).replace(/\/$/, "");
 }
 function promptSecret(question) {
-  return new Promise((resolve) => {
+  return new Promise((resolve2) => {
     const rl = createInterface2({
       input: process.stdin,
       output: process.stdout
@@ -1716,7 +1752,7 @@ function promptSecret(question) {
     rl.question(question, (answer) => {
       rl.close();
       process.stdout.write("\n");
-      resolve(answer);
+      resolve2(answer);
     });
     muted = true;
   });
@@ -1871,6 +1907,234 @@ async function protect(opts) {
   );
 }
 
+// src/reply.ts
+import path10 from "path";
+async function readStdin() {
+  if (process.stdin.isTTY) {
+    return "";
+  }
+  const chunks = [];
+  for await (const chunk of process.stdin) {
+    chunks.push(chunk);
+  }
+  return Buffer.concat(chunks).toString("utf8");
+}
+async function replyToThread(opts) {
+  const threadId = opts.thread?.trim();
+  if (!threadId) {
+    throw new Error(
+      "Pass the thread id to reply to \u2014 get it from `artifact-cafe comments --json`."
+    );
+  }
+  const body = (opts.body ?? await readStdin()).trim();
+  if (!body) {
+    throw new Error(
+      'Nothing to post. Pass the reply with --body "\u2026", or pipe it on stdin.'
+    );
+  }
+  const dir = path10.resolve(opts.dir);
+  const target = resolveArtifactTarget(dir, {
+    apiKey: opts.apiKey,
+    artifact: opts.artifact
+  });
+  const client = createApiClient(target.apiUrl, target.credential);
+  let thread = await client.replyThread(threadId, body);
+  if (opts.resolve) {
+    thread = await client.resolveThread(threadId);
+  }
+  if (opts.json) {
+    console.log(
+      JSON.stringify(
+        {
+          id: thread.id,
+          messageCount: thread.messages.length,
+          status: thread.status
+        },
+        null,
+        2
+      )
+    );
+    return;
+  }
+  const closed = opts.resolve ? " and resolved it" : "";
+  console.log(`\u2713 Replied to ${thread.id}${closed} \u2014 now ${thread.status}.`);
+}
+
+// src/resolve.ts
+import path11 from "path";
+async function changeThreadStatus(opts) {
+  const threadId = opts.thread?.trim();
+  if (!threadId) {
+    throw new Error(
+      `Pass the thread id to ${opts.action} \u2014 get it from \`artifact-cafe comments --json\`.`
+    );
+  }
+  const dir = path11.resolve(opts.dir);
+  const target = resolveArtifactTarget(dir, {
+    apiKey: opts.apiKey,
+    artifact: opts.artifact
+  });
+  const client = createApiClient(target.apiUrl, target.credential);
+  const thread = opts.action === "resolve" ? await client.resolveThread(threadId) : await client.reopenThread(threadId);
+  if (opts.json) {
+    console.log(
+      JSON.stringify({ id: thread.id, status: thread.status }, null, 2)
+    );
+    return;
+  }
+  const verb = opts.action === "resolve" ? "Resolved" : "Reopened";
+  console.log(`\u2713 ${verb} ${thread.id} \u2014 now ${thread.status}.`);
+}
+
+// src/update.ts
+import { existsSync as existsSync3, mkdirSync as mkdirSync3, readFileSync as readFileSync5, writeFileSync as writeFileSync3 } from "fs";
+import { createRequire } from "module";
+import { homedir as homedir2 } from "os";
+import path12 from "path";
+import { z as z15 } from "zod";
+var REGISTRY_LATEST_URL = "https://registry.npmjs.org/artifact-cafe/latest";
+var SKILL_SOURCE_URL = "https://raw.githubusercontent.com/Artifact-Cafe/skill/main/artifact-cafe/SKILL.md";
+var SKILL_UPDATE_COMMAND = "npx skills add artifact-cafe/skill --skill artifact-cafe -g";
+var CHECK_TTL_MS = 24 * 60 * 60 * 1e3;
+var FETCH_TIMEOUT_MS = 2e3;
+var SKILL_VERSION_PATTERN = /\*\*Skill version:\s*(\d+\.\d+\.\d+)\*\*/;
+var cacheSchema = z15.object({
+  checkedAt: z15.number(),
+  cliLatest: z15.string().nullable(),
+  skillLatest: z15.string().nullable(),
+  version: z15.literal(1)
+});
+function cliVersion() {
+  const pkg = createRequire(import.meta.url)("../package.json");
+  return pkg.version;
+}
+function cachePath() {
+  return path12.join(homedir2(), ".artifactcafe", "update-check.json");
+}
+function readCache() {
+  try {
+    return cacheSchema.parse(JSON.parse(readFileSync5(cachePath(), "utf8")));
+  } catch {
+    return null;
+  }
+}
+function writeCache(cache) {
+  try {
+    mkdirSync3(path12.dirname(cachePath()), { mode: 448, recursive: true });
+    writeFileSync3(cachePath(), `${JSON.stringify(cache, null, 2)}
+`);
+  } catch {
+  }
+}
+function isNewerVersion(candidate, current) {
+  const parse = (value) => value.split(".").map((part) => Number.parseInt(part, 10) || 0);
+  const a = parse(candidate);
+  const b = parse(current);
+  for (let i = 0; i < 3; i++) {
+    if ((a[i] ?? 0) !== (b[i] ?? 0)) {
+      return (a[i] ?? 0) > (b[i] ?? 0);
+    }
+  }
+  return false;
+}
+async function fetchJson(url) {
+  const res = await fetch(url, {
+    signal: AbortSignal.timeout(FETCH_TIMEOUT_MS)
+  });
+  if (!res.ok) {
+    throw new Error(`GET ${url} \u2192 ${res.status}`);
+  }
+  return res.json();
+}
+async function fetchText(url) {
+  const res = await fetch(url, {
+    signal: AbortSignal.timeout(FETCH_TIMEOUT_MS)
+  });
+  if (!res.ok) {
+    throw new Error(`GET ${url} \u2192 ${res.status}`);
+  }
+  return res.text();
+}
+async function fetchLatestVersions(previous) {
+  const [cli, skill] = await Promise.all([
+    fetchJson(REGISTRY_LATEST_URL).then((body) => z15.object({ version: z15.string() }).parse(body).version).catch(() => null),
+    fetchText(SKILL_SOURCE_URL).then((body) => SKILL_VERSION_PATTERN.exec(body)?.[1] ?? null).catch(() => null)
+  ]);
+  return {
+    checkedAt: Date.now(),
+    cliLatest: cli ?? previous?.cliLatest ?? null,
+    skillLatest: skill ?? previous?.skillLatest ?? null,
+    version: 1
+  };
+}
+function installedSkillVersions() {
+  const roots = [homedir2(), process.cwd()];
+  const dirs = [".agents", ".claude"];
+  const versions = [];
+  for (const root of roots) {
+    for (const dir of dirs) {
+      const file = path12.join(root, dir, "skills", "artifact-cafe", "SKILL.md");
+      if (!existsSync3(file)) {
+        continue;
+      }
+      try {
+        const found = SKILL_VERSION_PATTERN.exec(readFileSync5(file, "utf8"));
+        if (found?.[1]) {
+          versions.push(found[1]);
+        }
+      } catch {
+      }
+    }
+  }
+  return versions;
+}
+function updateChecksDisabled() {
+  return Boolean(
+    process.env.ARTIFACT_CAFE_NO_UPDATE_CHECK ?? process.env.NO_UPDATE_NOTIFIER ?? process.env.CI
+  );
+}
+function startUpdateCheck() {
+  if (updateChecksDisabled()) {
+    return () => Promise.resolve();
+  }
+  const pending = (async () => {
+    const cached = readCache();
+    if (cached && Date.now() - cached.checkedAt < CHECK_TTL_MS) {
+      return cached;
+    }
+    const fresh = await fetchLatestVersions(cached);
+    writeCache(fresh);
+    return fresh;
+  })().catch(() => null);
+  return async () => {
+    const latest = await pending;
+    if (!latest) {
+      return;
+    }
+    const notices = [];
+    const current = cliVersion();
+    if (latest.cliLatest && isNewerVersion(latest.cliLatest, current)) {
+      notices.push(
+        `[artifact-cafe] CLI update available: ${current} \u2192 ${latest.cliLatest}. Run commands via \`npx artifact-cafe@latest\`; update a global install with \`npm i -g artifact-cafe@latest\`.`
+      );
+    }
+    if (latest.skillLatest) {
+      const stale = installedSkillVersions().filter(
+        (version) => isNewerVersion(latest.skillLatest, version)
+      ).sort((a, b) => isNewerVersion(a, b) ? 1 : -1);
+      if (stale.length > 0) {
+        notices.push(
+          `[artifact-cafe] Skill update available: ${stale[0]} \u2192 ${latest.skillLatest}. Update: \`${SKILL_UPDATE_COMMAND}\` (drop -g for a repo-local copy), then re-read SKILL.md.`
+        );
+      }
+    }
+    if (notices.length > 0) {
+      console.error(`
+${notices.join("\n")}`);
+    }
+  };
+}
+
 // src/workspaces.ts
 async function workspaces(opts) {
   const apiUrl2 = (process.env.ARTIFACT_CAFE_URL ?? DEFAULT_API_URL).replace(
@@ -2292,6 +2556,101 @@ var protect2 = defineCommand({
     }
   }
 });
+var threadStatusCommand = (action) => defineCommand({
+  args: {
+    "api-key": {
+      description: "Authorize with an account API key (default: stored login)",
+      type: "string"
+    },
+    artifact: {
+      description: "Act on an artifact ID instead of the linked folder",
+      type: "string"
+    },
+    dir: {
+      default: ".",
+      description: "Linked directory to authorize from (default: .)",
+      type: "string"
+    },
+    json: { description: "Machine-readable output", type: "boolean" },
+    thread: {
+      description: "Thread id (from `comments --json`)",
+      required: true,
+      type: "positional"
+    }
+  },
+  meta: {
+    description: action === "resolve" ? "Mark a comment thread resolved" : "Reopen a resolved comment thread",
+    name: action
+  },
+  async run({ args }) {
+    try {
+      await changeThreadStatus({
+        action,
+        apiKey: args["api-key"],
+        artifact: args.artifact,
+        dir: args.dir,
+        json: Boolean(args.json),
+        thread: args.thread
+      });
+    } catch (err) {
+      printCliError(err, Boolean(args.json));
+      process.exit(1);
+    }
+  }
+});
+var resolve = threadStatusCommand("resolve");
+var reopen = threadStatusCommand("reopen");
+var reply = defineCommand({
+  args: {
+    "api-key": {
+      description: "Authorize with an account API key (default: stored login)",
+      type: "string"
+    },
+    artifact: {
+      description: "Act on an artifact ID instead of the linked folder",
+      type: "string"
+    },
+    body: {
+      description: "Reply text (omit to read from stdin)",
+      type: "string"
+    },
+    dir: {
+      default: ".",
+      description: "Linked directory to authorize from (default: .)",
+      type: "string"
+    },
+    json: { description: "Machine-readable output", type: "boolean" },
+    resolve: {
+      description: "Resolve the thread after replying",
+      type: "boolean"
+    },
+    thread: {
+      description: "Thread id (from `comments --json`)",
+      required: true,
+      type: "positional"
+    }
+  },
+  meta: {
+    description: "Reply to a comment thread (as the agent or owner)",
+    name: "reply"
+  },
+  async run({ args }) {
+    try {
+      await replyToThread({
+        apiKey: args["api-key"],
+        artifact: args.artifact,
+        body: args.body,
+        dir: args.dir,
+        json: Boolean(args.json),
+        resolve: Boolean(args.resolve),
+        thread: args.thread
+      });
+    } catch (err) {
+      printCliError(err, Boolean(args.json));
+      process.exit(1);
+    }
+  }
+});
 var open = defineCommand({
   args: {
     "api-key": {
@@ -2346,7 +2705,8 @@ var dashboard = defineCommand({
 var main = defineCommand({
   meta: {
     description: "Publish AI-generated artifacts for review \u2014 https://artifact.cafe",
-    name: "artifact-cafe"
+    name: "artifact-cafe",
+    version: cliVersion()
   },
   // Bare `artifact-cafe` (no subcommand) → brand banner + usage. citty
   // still calls this parent run *after* a matched subcommand, so bail when
@@ -2371,8 +2731,13 @@ var main = defineCommand({
     open,
     protect: protect2,
     publish: publish2,
+    reopen,
+    reply,
+    resolve,
     whoami: whoami2,
     workspaces: workspaces2
   }
 });
-runMain(main);
+var finishUpdateCheck = startUpdateCheck();
+await runMain(main);
+await finishUpdateCheck();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "artifact-cafe",
-  "version": "0.0.7",
+  "version": "0.0.8",
   "description": "Publish AI-generated artifacts for review on artifact.cafe",
   "type": "module",
   "bin": {
@@ -9,19 +9,19 @@
   "files": [
     "dist"
   ],
+  "scripts": {
+    "build": "tsup",
+    "typecheck": "tsc --noEmit",
+    "dev": "tsup --watch"
+  },
   "dependencies": {
     "citty": "^0.1.6",
     "zod": "^4.1.0"
   },
   "devDependencies": {
+    "@artifact-cafe/shared": "workspace:*",
     "@types/node": "^24.0.0",
     "tsup": "^8.5.0",
-    "typescript": "^5.9.0",
-    "@artifact-cafe/shared": "0.1.0"
-  },
-  "scripts": {
-    "build": "tsup",
-    "typecheck": "tsc --noEmit",
-    "dev": "tsup --watch"
+    "typescript": "^5.9.0"
   }
-}
+}