hacklab 26.921.2 → 26.921.4

package/README.md

@@ -1,77 +1,36 @@
 # Hacklab CLI
 
-A CLI for updating your Hacklab bio and social links with your coding agent.
-
-Requires Node.js 22 or newer. Bun 1.4.2 or newer is also supported.
+Sync coding agent usage to Hacklab. Requires Node.js 22+ or Bun 1.4.2+.
 
 ```sh
 npm install --global hacklab@beta
-hacklab --help
-```
-
-For Bun, use `bun install --global hacklab@beta` and `bunx --bun hacklab@beta --help`.
-
-Copy the agent instructions from the signed-in onboarding dialog. They contain no credentials. When you upload, the CLI opens a browser page to sign in with GitHub and authorize the CLI through Better Auth. Check that the code matches your terminal before approving.
-
-## Preview a profile
-
-Create a local JSON file containing a one-line `bio` (at most 160 characters) and a `socials` object. Supported social keys are `github`, `linkedin`, `x`, `instagram`, `youtube`, `huggingface`, `producthunt`, and `goodreads`. Use full HTTPS profile URLs. Omitted links remain unchanged; `null` removes a link.
-
-```sh
-hacklab onboard --file /path/to/profile.json
-```
-
-This validates and previews locally without making a network request.
-
-## Upload after approval
-
-Review the exact bio and links first. Agents must ask the user for approval before using `--confirm-upload`.
-
-```sh
-hacklab onboard --file /path/to/profile.json --confirm-upload
-```
-
-Confirmed onboarding first syncs usage, then saves the profile, sharing one browser authorization. Approval must cover both the profile and the usage report. Preview mode does neither. If syncing fails, onboarding stops before saving the profile.
-
-## Sync usage
-
-```sh
 hacklab sync
 ```
 
-The CLI includes pinned `ccusage@20.0.24` and runs `ccusage session --json`. No separate ccusage installation is needed. Its stdout is posted unchanged to `/api/token-usage`. This report includes agent/session identifiers, tokens, costs, model breakdowns, and metadata, which can include project paths. Source code and transcript contents are not uploaded.
-
-The API accepts the exact `{ session, totals }` envelope. `token_usage` stores each session with the upstream camelCase field names and nested JSON unchanged; only the authenticated `user_id` is added by the server. Totals are validated but not stored because they can be derived from the session rows. Repeated syncs replace counts for the same user, agent, and period rather than adding them. Missing sessions are retained, so syncing another machine does not delete earlier uploads. Reports are limited to 20 MB. The first upload uses browser authorization. Later commands reuse the saved session, checking that it is still valid; expired or revoked sessions open the browser again. Credentials are stored per Hacklab origin in `~/.config/hacklab/credentials/`, with owner-only directory and file permissions on Unix. Run `hacklab logout` to forget local authorization for the current Hacklab server.
-
-## Log in
-
-```sh
-hacklab login
-```
-
-Authorizes the CLI and saves the session without collecting or uploading usage. An existing valid session is reused. To check the authorization dialog again, run `hacklab logout` followed by `hacklab login`.
+The first sync opens your browser to sign in and authorize the CLI. Check that the code matches your terminal before approving. Later commands reuse saved authorization until it expires or is revoked.
 
-## Log out
+## Commands
 
 ```sh
-hacklab logout
-hacklab sync
+hacklab sync       # Sign in and upload usage
+hacklab login      # Sign in without uploading
+hacklab logout     # Clear saved authorization
+hacklab --help
+hacklab --version
 ```
 
-Logout clears the saved CLI credential for the current Hacklab server, even when offline. The next sync opens the authorization dialog on the Arena again. Your browser stays signed in. Other Hacklab servers' credentials are preserved; this command does not revoke the server session.
+The CLI runs bundled `ccusage@20.0.24 session --json` and uploads its output to `/api/token-usage`. Reports include session identifiers, tokens, costs, model breakdowns, and metadata that may include project paths. Source code and transcripts are not uploaded. Reports are limited to 20 MB. Repeated syncs update existing sessions; sessions from other machines are retained.
 
-## Local development
+Credentials are stored per server in `~/.config/hacklab/credentials/`, with owner-only permissions on Unix. Logout removes the local credential for the current server; it does not sign out your browser or revoke the server session.
 
-Building from source requires Bun 1.4.2 or newer; the published package runs with Node.js without Bun.
+## Development
 
-From the Hacklab repository:
+Building requires Bun 1.4.2+.
 
 ```sh
 bun install --frozen-lockfile
 bun run --cwd packages/cli build:dev
-cd packages/cli
-bun link
-hacklab onboard --file /path/to/profile.json
+bun run --cwd packages/cli start --help
 ```
 
-Source runs and `build:dev` always use `http://localhost:3000`. Production builds embed `BETTER_AUTH_URL` from the build environment or `apps/web/.env` / `.env.local`; it must be an HTTPS origin. Set the production URL before running `bun run build` or publishing. No `--url` override is supported. Credentials are saved locally for reuse and are never copied into the prompt. Development and production credentials are stored separately.
+Source runs and development builds use `http://localhost:3000`. Production builds embed `BETTER_AUTH_URL` from the build environment or `apps/web/.env` / `.env.local`; it must be an HTTPS origin. No `--url` override is supported. Development and production credentials are stored separately.

package/dist/index.js

@@ -3,7 +3,7 @@
 // src/index.ts
 import { parseArgs } from "node:util";
 // package.json
-var version = "26.921.2";
+var version = "26.921.4";
 
 // src/auth.ts
 import { spawn } from "node:child_process";
@@ -123,9 +123,6 @@ Waiting for you to connect your account…`);
   throw new Error("CLI sign-in expired. Run the command again to retry.");
 }
 
-// src/onboard.ts
-import { readFile as readFile2, stat } from "node:fs/promises";
-
 // src/origin.ts
 function cliOrigin() {
   return "https://beta.hacklab.so";
@@ -170,7 +167,7 @@ async function uploadUsage(origin, token, body) {
     throw new Error("Hacklab did not confirm the sync. Run hacklab sync to retry.");
   console.log(`Synced ${result.sessions} usage sessions to Hacklab.`);
   if (result.sessions === 0)
-    console.log("No usage found. Use your coding agent, then run hacklab sync again to complete onboarding.");
+    console.log("No usage found. Use your coding agent, then run hacklab sync again.");
 }
 async function sync() {
   const origin = cliOrigin();
@@ -180,135 +177,39 @@ async function sync() {
   await uploadUsage(origin, token, body);
 }
 
-// src/onboard.ts
-async function onboard(options) {
-  const origin = cliOrigin();
-  const file = await stat(options.file);
-  if (file.size > 8192)
-    throw new Error("Profile must be smaller than 8 KB.");
-  const contents = await readFile2(options.file);
-  if (contents.byteLength > 8192)
-    throw new Error("Profile must be smaller than 8 KB.");
-  const profile = JSON.parse(contents.toString("utf8"));
-  if (!profile || typeof profile !== "object" || Array.isArray(profile) || Object.keys(profile).some((key) => !["bio", "socials"].includes(key)) || typeof profile.bio !== "string" || !profile.bio.trim() || profile.bio.trim().length > 160 || /[\r\n]/.test(profile.bio) || !profile.socials || typeof profile.socials !== "object" || Array.isArray(profile.socials))
-    throw new Error("Expected a one-line bio (1–160 characters) and a socials object, with no other fields.");
-  const hosts = {
-    github: ["github.com"],
-    linkedin: ["linkedin.com"],
-    x: ["x.com", "twitter.com"],
-    instagram: ["instagram.com"],
-    youtube: ["youtube.com"],
-    huggingface: ["huggingface.co"],
-    producthunt: ["producthunt.com"],
-    goodreads: ["goodreads.com"]
-  };
-  for (const [platform, value] of Object.entries(profile.socials)) {
-    if (!Object.hasOwn(hosts, platform))
-      throw new Error(`Unsupported social platform: ${platform}`);
-    if (value === null)
-      continue;
-    if (typeof value !== "string" || value.length > 500)
-      throw new Error(`Invalid ${platform} profile URL.`);
-    const url = new URL(value);
-    if (url.protocol !== "https:" || url.username || url.password || url.port || url.pathname === "/" || !hosts[platform].includes(url.hostname.replace(/^www\./, ""))) {
-      throw new Error(`Use an HTTPS ${platform} profile URL.`);
-    }
-  }
-  const payload = JSON.stringify({ bio: profile.bio.trim(), socials: profile.socials }, null, 2);
-  console.log(`Hacklab profile preview for ${origin}:
-${payload}`);
-  if (!options.confirmUpload) {
-    console.log("Nothing uploaded. Ask the user to approve this exact profile and the first ccusage session sync, then run again with --confirm-upload.");
-    return;
-  }
-  const usage = await collectUsage();
-  const token = await authenticate(origin);
-  await uploadUsage(origin, token, usage);
-  const response = await fetch(`${origin}/api/onboarding`, {
-    method: "POST",
-    headers: { "Content-Type": "application/json", Authorization: `Bearer ${token}` },
-    body: payload,
-    redirect: "error",
-    signal: AbortSignal.timeout(30000)
-  });
-  if (!response.ok) {
-    throw new Error(`Hacklab rejected the profile (HTTP ${response.status}). Check the profile and sign-in before retrying.`);
-  }
-  const result = await response.json();
-  if (result.ok !== true)
-    throw new Error("Hacklab did not confirm the update. Check the website before retrying.");
-  console.log("Your Hacklab bio and social links were saved.");
-}
-
 // src/index.ts
 var help = `Hacklab CLI
 
-Get started:
-  npm install -g hacklab@beta
-  hacklab sync
-
 Usage:
-  hacklab sync
-  hacklab onboard --file <profile.json> [--confirm-upload]
-  hacklab login
-  hacklab logout
-  hacklab --help
-  hacklab --version
-
-Optional profile update:
-  --file            Local JSON containing bio and socials
-  --confirm-upload  Upload after approval of the profile and first usage sync
-
-Without --confirm-upload, onboard validates and previews locally without uploading.
-Confirmed onboarding also runs the first usage sync.
-Sync signs in automatically and uploads unmodified ccusage session --json data.
-Onboarding completes when Hacklab receives your usage.
-The first upload opens your browser to authorize the CLI.
-Later uploads reuse saved authorization until it expires or is revoked.
-Login authorizes the CLI without uploading any data.
-Logout clears saved authorization for this Hacklab server.
-Requires Node.js 22 or newer. Bun 1.4.2 or newer is also supported.`;
+  hacklab sync       Sign in and upload usage
+  hacklab login      Sign in without uploading
+  hacklab logout     Clear saved authorization
+  hacklab --help     Show help
+  hacklab --version  Show version`;
 try {
   const { values, positionals } = parseArgs({
     args: process.argv.slice(2),
     options: {
       help: { type: "boolean", short: "h" },
-      version: { type: "boolean", short: "v" },
-      file: { type: "string" },
-      "confirm-upload": { type: "boolean" }
+      version: { type: "boolean", short: "v" }
     },
     allowPositionals: true
   });
-  if (positionals.length > 1 || positionals[0] && !["onboard", "sync", "login", "logout"].includes(positionals[0])) {
-    throw new Error("Unknown command. Use hacklab onboard, hacklab sync, hacklab login, hacklab logout, or hacklab --help.");
+  if (positionals.length > 1 || positionals[0] && !["sync", "login", "logout"].includes(positionals[0])) {
+    throw new Error("Unknown command. Run hacklab --help for usage.");
   }
   if (values.help) {
     console.log(help);
   } else if (values.version) {
     console.log(version);
-  } else if (positionals[0] === "onboard") {
-    if (!values.file)
-      throw new Error("Pass --file with the local profile JSON to preview or upload.");
-    await onboard({
-      file: values.file,
-      confirmUpload: values["confirm-upload"] ?? false
-    });
   } else if (positionals[0] === "login") {
-    if (values.file || values["confirm-upload"])
-      throw new Error("Profile options require the onboard command.");
     await authenticate(cliOrigin());
     console.log("Signed in to Hacklab. Run hacklab sync to upload usage.");
   } else if (positionals[0] === "logout") {
-    if (values.file || values["confirm-upload"])
-      throw new Error("Profile options require the onboard command.");
     await removeCredential(cliOrigin());
     console.log("Saved CLI authorization cleared. Run hacklab sync to sign in again.");
   } else if (positionals[0] === "sync") {
-    if (values.file || values["confirm-upload"])
-      throw new Error("Profile options require the onboard command.");
     await sync();
-  } else if (values.file || values["confirm-upload"]) {
-    throw new Error("Profile options require the onboard command.");
   } else {
     console.log(help);
   }

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "hacklab",
-  "version": "26.921.2",
-  "description": "CLI for agent-assisted Hacklab profile onboarding",
+  "version": "26.921.4",
+  "description": "CLI for syncing coding agent usage to Hacklab",
   "bin": {
     "hacklab": "./dist/index.js"
   },