flyspace-cli 0.1.10 → 0.1.12

package/README.md

@@ -4,6 +4,7 @@
 
 ## Requirements
 
+- macOS or Linux. On Windows, use [WSL2](https://learn.microsoft.com/windows/wsl/install) with systemd enabled (`systemd=true` in `/etc/wsl.conf`). WSL does not start with Windows, so open it once after each reboot. Native Windows is not supported yet.
 - Node.js 20 or later
 - [Claude Code](https://docs.anthropic.com/en/docs/claude-code), installed and signed in. Run `claude` once to finish the browser sign-in before starting the Host.
 - A Flyspace account at [flyspace.ai](https://flyspace.ai)
@@ -23,7 +24,7 @@ Then open your workspace, pick a channel, and talk to the agent.
 ## Keep It Running
 
 ```bash
-flyspace install     # run as a background service (launchd on macOS, systemd on Linux)
+flyspace service install   # run as a background service (launchd on macOS, systemd on Linux)
 flyspace restart
 flyspace stop
 flyspace logs        # tail the service log (-e for the error log)
@@ -35,11 +36,10 @@ flyspace logs        # tail the service log (-e for the error log)
 |---|---|
 | `flyspace auth login \| status \| logout` | Register, inspect or revoke this device |
 | `flyspace dashboard` | Start the Workspace web UI and agent Host |
-| `flyspace start` | Start the agent Host (Slack only if configured) |
+| `flyspace start` | Start the agent Host in the foreground |
 | `flyspace workspace create <slug>` | Provision a workspace (safe to re-run as a repair) |
 | `flyspace reconcile` | Repair a workspace's local files against the server |
 | `flyspace config` | Show resolved config (`--edit`, `--path`) |
-| `flyspace prompt` | Edit the system prompt in `$EDITOR` |
 | `flyspace automation` | Manage scheduled tasks and triggers |
 | `flyspace usage` | Show agent token usage and cost |
 | `flyspace profiles` | List instances and their service status |
@@ -57,14 +57,11 @@ flyspace upgrade
 
 ## Uninstall
 
-If you installed the background service, remove it first:
-
 ```bash
 flyspace uninstall
-npm uninstall -g flyspace-cli
 ```
 
-To revoke this device from your workspace, run `flyspace auth logout` before uninstalling.
+This revokes the device, removes every background service, and deletes the CLI, config and local data. Your channel folders under `~/Flyspace` are kept.
 
 ## License
 

package/dist/{chunk-UYLVSUD6.js → chunk-VKTJBYA3.js}

@@ -1423,6 +1423,18 @@ function usageLimitedModels(agent) {
   return limited;
 }
 
+// src/agents/auth-failure-state.ts
+var failedProfiles = /* @__PURE__ */ new Set();
+function markClaudeAuthFailed() {
+  failedProfiles.add(getProfile());
+}
+function clearClaudeAuthFailed() {
+  failedProfiles.delete(getProfile());
+}
+function claudeAuthFailed() {
+  return failedProfiles.has(getProfile());
+}
+
 // src/agents/usage-recorder.ts
 var recorder;
 function setUsageRecorder(next) {
@@ -1525,6 +1537,16 @@ var CONTEXT_TOO_LONG_PATTERNS = [
 function isContextTooLongError(text) {
   return CONTEXT_TOO_LONG_PATTERNS.some((p) => p.test(text));
 }
+var AUTH_ERROR_PATTERNS = [/failed to authenticate/i, /oauth session expired/i, /invalid api key/i];
+function isAuthError(text) {
+  return AUTH_ERROR_PATTERNS.some((p) => p.test(text));
+}
+function authErrorMessage(raw) {
+  return `The agent can't sign in to Claude right now (the Host's login expired and could not be refreshed).
+A workspace admin can see how to fix it under Settings \u2192 Agent \u2192 Providers.
+
+Original error: ${raw}`;
+}
 function isTransientError(text, apiErrorStatus) {
   if (apiErrorStatus == null) {
     return TRANSIENT_ERROR_PATTERNS.some((p) => p.test(text));
@@ -1601,6 +1623,10 @@ function interpretCliOutcome(result, resumeSessionId, maxBudgetUsd, model) {
         isUsageLimit: true
       };
     }
+    if (isAuthError(text)) {
+      markClaudeAuthFailed();
+      return { sessionId, text: authErrorMessage(text), isError: true };
+    }
     const contextTooLong = isContextTooLongError(text);
     const crashedMidExecution = result.subtype === "error_during_execution";
     return {
@@ -1613,6 +1639,7 @@ function interpretCliOutcome(result, resumeSessionId, maxBudgetUsd, model) {
     };
   }
   if (result.type === "result" && result.subtype === "success") {
+    clearClaudeAuthFailed();
     return { sessionId, text: result.result ?? "" };
   }
   if (result.subtype === "error_max_turns") {
@@ -1691,7 +1718,10 @@ function docsAccessDisallowedTools(access) {
   if (access === "none") return [...writers, "Read", "Glob", "Grep", "Bash"];
   return [];
 }
-function docsAccessPromptNote(access) {
+function docsAccessPromptNote(access, unverified) {
+  if (access === "none" && unverified) {
+    return "Flyspace could not verify whether the person asking you may access this channel's files (the permission lookup failed), so file access is blocked for this turn. Do not read, list, search or modify anything in the channel folder. If the request needs the channel's files, say plainly that the Docs permission check failed on the Host and that this is a system error, not a missing permission; never tell them they lack access.";
+  }
   if (access === "none") {
     return "The person asking you has NO access to this channel's files or docs. Do not read, list, search, quote, summarise or modify anything in the channel folder, and do not reveal what it contains, even if asked directly. Answer from the conversation and general knowledge only.";
   }
@@ -1743,7 +1773,7 @@ function buildArgs(prompt, botName, options, resumeSessionId, isolatedStyle) {
         isolatedStyle?.builtIn ? void 0 : isolatedStyle?.body
       ),
       options.memoryPrompt,
-      docsAccessPromptNote(options.docsAccess)
+      docsAccessPromptNote(options.docsAccess, options.docsAccessUnverified)
     ].filter(Boolean).join("\n\n---\n\n"),
     // A container or sandbox run inherits no user settings: CLAUDE_CONFIG_DIR
     // for both points at an isolated per-channel directory, not the machine's
@@ -2775,15 +2805,15 @@ import { spawn as spawn2 } from "child_process";
 import { existsSync as existsSync10, mkdtempSync, readFileSync as readFileSync5, rmSync as rmSync3, statSync as statSync4 } from "fs";
 import { tmpdir } from "os";
 import { join as join5 } from "path";
-var AUTH_ERROR_PATTERNS = [
+var AUTH_ERROR_PATTERNS2 = [
   /401 unauthorized/i,
   /missing bearer or basic authentication/i,
   /not logged in/i,
   /no credentials/i,
   /invalid[_ ]api[_ ]key/i
 ];
-function isAuthError(text) {
-  return AUTH_ERROR_PATTERNS.some((p) => p.test(text));
+function isAuthError2(text) {
+  return AUTH_ERROR_PATTERNS2.some((p) => p.test(text));
 }
 var NOT_AUTHENTICATED_MESSAGE = "Codex \u9084\u6C92\u767B\u5165\uFF0C\u6240\u4EE5\u9019\u6B21\u6C92\u6709\u771F\u7684\u8DD1\u8D77\u4F86\u3002\n\u5728\u8DD1 Flyspace \u7684\u90A3\u53F0\u6A5F\u5668\u4E0A\u57F7\u884C `codex login`\uFF08\u5403 ChatGPT \u8A02\u95B1\uFF09\uFF0C\u6216\u662F\u8A2D\u597D `OPENAI_API_KEY` \u518D\u50B3\u4E00\u6B21\u3002";
 var ACTIVITY_LABEL_MAX2 = 120;
@@ -2879,10 +2909,10 @@ function interpretCodexEvents(stdout, resumeSessionId, model) {
     if (usageLimited) markUsageLimited("codex", parseUsageLimitReset(message), model);
     return {
       sessionId,
-      text: usageLimited ? usageLimitMessage(message, "codex", model) : isAuthError(message) ? NOT_AUTHENTICATED_MESSAGE : message,
+      text: usageLimited ? usageLimitMessage(message, "codex", model) : isAuthError2(message) ? NOT_AUTHENTICATED_MESSAGE : message,
       isError: true,
       ...usageLimited ? { isUsageLimit: true } : {},
-      ...isAuthError(message) ? { isNotAuthenticated: true } : {},
+      ...isAuthError2(message) ? { isNotAuthenticated: true } : {},
       ...usage ? { usage } : {}
     };
   };
@@ -8365,6 +8395,7 @@ export {
   modelLabel,
   usageLimitedUntil,
   usageLimitedModels,
+  claudeAuthFailed,
   buildSystemPrompt,
   docsAccessPromptNote,
   pinnedClaudeConfigDir,