callkaro-cli-unofficial 0.6.0 → 0.6.1

package/dist/commands/admin.js

@@ -161,7 +161,7 @@ async function adminImpersonateCommand(clientId, opts) {
         if (existing.token && !(await (0, ui_1.confirm)(`${clientEmail} already has a stored login. Replace it with the impersonated token?`, opts.yes))) {
             return;
         }
-        const { token, email: adminEmail } = await (0, adminAuth_1.impersonateClient)(clientId, { adminEmail: (await (0, adminAuth_1.requireAdmin)()).email });
+        const { token, email: adminEmail, dashboard } = await (0, adminAuth_1.impersonateClient)(clientId, { adminEmail: (await (0, adminAuth_1.requireAdmin)()).email });
         // activate: false — the admin's own account stays the default.
         (0, config_1.saveAccount)(clientEmail, {
             token,
@@ -169,11 +169,13 @@ async function adminImpersonateCommand(clientId, opts) {
             monitoring: { id: clientId, name: client.name, email: clientEmail },
             impersonated: { adminEmail, clientId },
         }, { activate: false });
+        (0, config_1.saveDashboardSession)(clientEmail, { email: clientEmail, ...dashboard, savedAt: new Date().toISOString() });
         (0, ui_1.success)(`Impersonating ${client.name || clientEmail} (${clientEmail}).`);
         (0, ui_1.info)('  minted a ck_ token through the admin console and stored it, scoped to that client account.');
         (0, ui_1.info)(`  Use it:  cku accounts use ${clientEmail}`);
         (0, ui_1.info)(`  Or pin a folder:  cku accounts bind ${clientEmail}`);
-        (0, ui_1.info)('  The token renews itself by impersonating again.');
+        (0, ui_1.info)('  Also stored a dashboard session for it, so `cku dashboard api` reaches /v2/agents/.');
+        (0, ui_1.info)('  Both renew themselves by impersonating again.');
     }
     catch (err) {
         (0, ui_1.handleError)(err);

package/dist/lib/adminAuth.js

@@ -304,7 +304,14 @@ async function impersonateClient(clientId, opts = {}) {
     if (polled.status !== 'approved' || !polled.token) {
         throw new Error(`The approval session ended with status "${polled.status}" instead of an approved token.`);
     }
-    return { token: polled.token, email: adminEmail };
+    // Hop 2 also produced a dashboard session for the client: the body JWT is the
+    // `/v2/agents/` bearer and the `access_token` cookie serves the rest. Kept,
+    // because function code only saves through `PUT /v2/agents/:id?version=`.
+    return {
+        token: polled.token,
+        email: adminEmail,
+        dashboard: { token: impersonationToken, sessionToken: sessionJar.get('access_token') },
+    };
 }
 /**
  * Re-mint an impersonated token. Used by the renewal path: an impersonated

package/dist/lib/dashboardApi.js

@@ -250,7 +250,11 @@ function dashboardApi() {
  * accept either token everywhere, and guessing produces an unexplained 401.
  */
 function usesCookieAuth(path) {
-    return !path.startsWith('/v2/agents');
+    // Only the list route takes the bearer. `/v2/agents/:id…` — including the
+    // version save `PUT /v2/agents/:id?version=` — takes the cookie and answers
+    // the bearer with 401 (probed 21 October 2026 with getAgentVersions).
+    const route = path.split('?')[0];
+    return route !== '/v2/agents/' && route !== '/v2/agents';
 }
 /** `?a=1&b=2`, skipping undefined and empty. Mirrors the one in api.ts. */
 function qs(params) {

package/dist/lib/dashboardAuth.js

@@ -153,7 +153,24 @@ async function requireDashboard() {
     // With a stored password, renew a minute early so the token cannot lapse
     // mid-request; without one a token that still has time left is still valid.
     const left = session.sessionToken ? msUntilExpiry(session.sessionToken) : 0;
-    if (left !== undefined && left <= (session.password ? 60_000 : 0)) {
+    const impersonated = slug ? (0, config_1.loadAccount)(slug).impersonated : undefined;
+    if (left !== undefined && left <= (session.password || impersonated ? 60_000 : 0)) {
+        // A session minted by `cku admin impersonate` has no password; it renews by
+        // impersonating again, which also re-issues the account's ck_ token.
+        if (impersonated) {
+            try {
+                const { impersonateClient } = require('./adminAuth');
+                const fresh = await impersonateClient(impersonated.clientId, { adminEmail: impersonated.adminEmail });
+                const renewed = { email: session.email, ...fresh.dashboard, savedAt: new Date().toISOString() };
+                saveDashboard(email, renewed);
+                return { token: renewed.token, sessionToken: renewed.sessionToken, email: renewed.email };
+            }
+            catch (err) {
+                throw new Error(`Dashboard session for ${email} expired and re-impersonating failed: ${err.message}
+` +
+                    '  Run: cku admin login, then cku admin impersonate ' + impersonated.clientId);
+            }
+        }
         if (!session.password) {
             const why = session.sessionToken
                 ? `Dashboard session for ${email} expired ${new Date(Date.now() + left).toLocaleString('en-US')}.\n` +

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "callkaro-cli-unofficial",
-  "version": "0.6.0",
+  "version": "0.6.1",
   "license": "Apache-2.0",
   "description": "Unofficial fork of the CallKaro CLI — manage your voice AI agents from the terminal",
   "bin": {