claudemesh-cli 1.6.0 → 1.6.1

package/README.md

@@ -2,7 +2,7 @@
 
 Peer mesh for Claude Code sessions. Connect multiple Claude Code instances into a shared mesh with real-time messaging, shared state, memory, file sharing, vector store, scheduled jobs, and more — all driven from the `claudemesh` CLI. The MCP server is a tool-less push-pipe that delivers inbound peer messages to Claude as `<channel>` interrupts; everything else lives behind CLI verbs that Claude learns from the auto-installed `claudemesh` skill.
 
-> **What's new in 1.6.0:** topics (channel pub/sub), API keys for human/REST clients, and bridge peers that forward a topic between two meshes. New verbs: `claudemesh topic`, `claudemesh apikey`, `claudemesh bridge`. The broker now exposes a REST surface at `/api/v1/*` (messages, topics, peers, history) for non-WebSocket clients.
+> **What's new in 1.6.0:** topics (channel pub/sub), API keys for human/REST clients, and bridge peers that forward a topic between two meshes. New verbs: `claudemesh topic`, `claudemesh apikey`, `claudemesh bridge`. A REST surface at `https://claudemesh.com/api/v1/*` (messages, topics, peers, history) accepts `Authorization: Bearer cm_...` keys, so any HTTPS client can participate without WebSocket + ed25519 plumbing. **Note**: REST lives on the web host (`claudemesh.com`), not the broker host (`ic.claudemesh.com`) — the broker only speaks WebSocket.
 >
 > **Migration note (1.5.0):** the previous 79 MCP tools (`send_message`, `list_peers`, `remember`, …) are removed. Use the matching CLI verbs (`claudemesh send`, `claudemesh peers`, `claudemesh remember`). Run `claudemesh install` and the bundled skill teaches Claude the full surface.
 

package/dist/entrypoints/cli.js

@@ -88,7 +88,7 @@ __export(exports_urls, {
   VERSION: () => VERSION,
   URLS: () => URLS
 });
-var URLS, VERSION = "1.6.0", env;
+var URLS, VERSION = "1.6.1", env;
 var init_urls = __esm(() => {
   URLS = {
     BROKER: process.env.CLAUDEMESH_BROKER_URL ?? "wss://ic.claudemesh.com/ws",
@@ -751,10 +751,25 @@ function requireToken() {
     throw new NotSignedIn;
   return auth.session_token;
 }
+function localView() {
+  const cfg = readConfig();
+  if (cfg.meshes.length === 0)
+    return;
+  return {
+    config_path: PATHS.CONFIG_FILE,
+    meshes: cfg.meshes.map((m) => ({
+      slug: m.slug,
+      mesh_id: m.meshId,
+      member_id: m.memberId,
+      pubkey_prefix: m.pubkey.slice(0, 12)
+    }))
+  };
+}
 async function whoAmI() {
   const auth = getStoredToken();
+  const local = localView();
   if (!auth)
-    return { signed_in: false };
+    return { signed_in: false, local };
   try {
     const profile = await exports_my.getProfile(auth.session_token);
     const meshes = await exports_my.getMeshes(auth.session_token);
@@ -763,12 +778,13 @@ async function whoAmI() {
       signed_in: true,
       user: profile,
       token_source: auth.token_source,
-      meshes: { owned, guest: meshes.length - owned }
+      meshes: { owned, guest: meshes.length - owned },
+      local
     };
   } catch (err) {
     if (err instanceof ApiError && err.isUnauthorized) {
       clearToken();
-      return { signed_in: false };
+      return { signed_in: false, local };
     }
     throw err;
   }
@@ -791,6 +807,8 @@ async function register(callbackPort) {
 var init_client2 = __esm(() => {
   init_facade3();
   init_facade3();
+  init_facade();
+  init_paths();
   init_token_store();
   init_errors2();
 });
@@ -1138,6 +1156,7 @@ class BrokerClient {
   topicHistoryResolvers = new Map;
   apiKeyCreatedResolvers = new Map;
   apiKeyListResolvers = new Map;
+  apiKeyRevokeResolvers = new Map;
   sharedDirs = [process.cwd()];
   _serviceCatalog = [];
   get serviceCatalog() {
@@ -1546,9 +1565,21 @@ class BrokerClient {
     });
   }
   async apiKeyRevoke(id) {
-    if (!this.ws || this.ws.readyState !== this.ws.OPEN)
-      return;
-    this.ws.send(JSON.stringify({ type: "apikey_revoke", id }));
+    if (!this.ws || this.ws.readyState !== this.ws.OPEN) {
+      return { ok: false, code: "not_connected", message: "broker not connected" };
+    }
+    return new Promise((resolve) => {
+      const reqId = this.makeReqId();
+      this.apiKeyRevokeResolvers.set(reqId, {
+        resolve,
+        timer: setTimeout(() => {
+          if (this.apiKeyRevokeResolvers.delete(reqId)) {
+            resolve({ ok: false, code: "timeout", message: "broker did not respond within 5s" });
+          }
+        }, 5000)
+      });
+      this.ws.send(JSON.stringify({ type: "apikey_revoke", id, _reqId: reqId }));
+    });
   }
   async setState(key, value) {
     if (!this.ws || this.ws.readyState !== this.ws.OPEN)
@@ -2667,6 +2698,28 @@ class BrokerClient {
       this.resolveFromMap(this.apiKeyListResolvers, msgReqId, msg.keys ?? []);
       return;
     }
+    if (msg.type === "apikey_revoke_response") {
+      const status = String(msg.status ?? "");
+      if (status === "revoked") {
+        this.resolveFromMap(this.apiKeyRevokeResolvers, msgReqId, {
+          ok: true,
+          id: String(msg.id ?? "")
+        });
+      } else if (status === "not_found") {
+        this.resolveFromMap(this.apiKeyRevokeResolvers, msgReqId, {
+          ok: false,
+          code: "not_found",
+          message: "no api key matches that id in this mesh"
+        });
+      } else if (status === "not_unique") {
+        this.resolveFromMap(this.apiKeyRevokeResolvers, msgReqId, {
+          ok: false,
+          code: "not_unique",
+          message: `prefix matches ${Number(msg.matches ?? 0)} keys; use the full id`
+        });
+      }
+      return;
+    }
     if (msg.type === "push") {
       this._statsCounters.messagesIn++;
       const nonce = String(msg.nonce ?? "");
@@ -7521,18 +7574,33 @@ async function whoami(opts) {
   const result = await whoAmI();
   if (opts.json) {
     console.log(JSON.stringify({ schema_version: "1.0", ...result }, null, 2));
-    return EXIT.SUCCESS;
+    return result.signed_in || result.local ? EXIT.SUCCESS : EXIT.AUTH_FAILED;
   }
-  if (!result.signed_in) {
-    render.err("Not signed in", "Run `claudemesh login` to sign in.");
+  if (!result.signed_in && !result.local) {
+    render.err("Not signed in", "Run `claudemesh login` to sign in or `claudemesh <invite>` to join.");
     return EXIT.AUTH_FAILED;
   }
   render.section("whoami");
-  render.kv([
-    ["user", `${bold(result.user.display_name)} ${dim(`(${result.user.email})`)}`],
-    ["token", `${result.token_source} ${dim("(~/.claudemesh/auth.json)")}`],
-    ...result.meshes ? [["meshes", `${result.meshes.owned} owned · ${result.meshes.guest} guest`]] : []
-  ]);
+  if (result.signed_in) {
+    render.kv([
+      ["user", `${bold(result.user.display_name)} ${dim(`(${result.user.email})`)}`],
+      ["token", `${result.token_source} ${dim("(~/.claudemesh/auth.json)")}`],
+      ...result.meshes ? [["meshes", `${result.meshes.owned} owned · ${result.meshes.guest} guest`]] : []
+    ]);
+  } else {
+    render.kv([
+      ["web", dim("not signed in · run `claudemesh login` for account features")]
+    ]);
+  }
+  if (result.local) {
+    render.blank();
+    render.kv([
+      ["local", `${result.local.meshes.length} mesh${result.local.meshes.length === 1 ? "" : "es"} · ${dim(result.local.config_path)}`]
+    ]);
+    for (const m of result.local.meshes) {
+      console.log(`    ${clay("●")} ${bold(m.slug)}  ${dim(`member ${m.member_id.slice(0, 8)}…  pk ${m.pubkey_prefix}…`)}`);
+    }
+  }
   render.blank();
   return EXIT.SUCCESS;
 }
@@ -11394,11 +11462,19 @@ async function runApiKeyRevoke(id, flags) {
     return EXIT.INVALID_ARGS;
   }
   return await withMesh({ meshSlug: flags.mesh ?? null }, async (client) => {
-    await client.apiKeyRevoke(id);
+    const result = await client.apiKeyRevoke(id);
+    if (!result.ok) {
+      if (flags.json) {
+        console.log(JSON.stringify({ ok: false, code: result.code, message: result.message }));
+      } else {
+        render.err(`${result.code}: ${result.message}`);
+      }
+      return result.code === "not_found" ? EXIT.NOT_FOUND : result.code === "not_unique" ? EXIT.INVALID_ARGS : EXIT.INTERNAL_ERROR;
+    }
     if (flags.json)
-      console.log(JSON.stringify({ revoked: id }));
+      console.log(JSON.stringify({ revoked: result.id }));
     else
-      render.ok("revoked", clay(id.slice(0, 8)));
+      render.ok("revoked", clay(result.id.slice(0, 8)));
     return EXIT.SUCCESS;
   });
 }
@@ -13976,4 +14052,4 @@ main().catch((err) => {
   process.exit(EXIT.INTERNAL_ERROR);
 });
 
-//# debugId=E78F8FEDBA22CD8C64756E2164756E21
+//# debugId=131DC57DB8537D5464756E2164756E21