pendingyou 0.20.1 → 0.22.0

package/dist/args.js

@@ -2,6 +2,7 @@ import { APP_IDS, APP_NAMES, DEFAULT_APP, isAppId } from "./apps/ids.js";
 export const DEFAULT_ORIGIN = 'https://www.pendingyou.com';
 export const DEFAULT_TIMEOUT_MS = 4 * 60 * 60 * 1000;
 const MAX_TIMEOUT_MS = 24 * 60 * 60 * 1000;
+export const APP_SUBS = ['login', 'logout', 'status'];
 export const MACHINE_SUBS = ['status', 'attest', 'rotate'];
 export const HERDR_SUBS = [
     'report',
@@ -82,6 +83,7 @@ const COMMANDS = new Set([
     'presence',
     'herdr',
     'machine',
+    'app',
 ]);
 const FLAGS = {
     help: {},
@@ -151,6 +153,15 @@ const FLAGS = {
         ensure: false,
     },
     machine: { origin: true, 'client-id': true, cnf: true, name: true, yes: false },
+    app: {
+        origin: true,
+        'client-id': true,
+        scope: true,
+        name: true,
+        device: false,
+        browser: false,
+        'no-browser': false,
+    },
 };
 const VALUE_OPTIONS = new Set([
     'origin',
@@ -167,6 +178,7 @@ const VALUE_OPTIONS = new Set([
     'at',
     'client-id',
     'cnf',
+    'scope',
 ]);
 function splitCommand(argv) {
     let index = 0;
@@ -417,6 +429,8 @@ export function parseArgs(argv, env = {}) {
             return herdrCommand(origin, positional, flags, app);
         case 'machine':
             return machineCommand(origin, positional, flags, machine);
+        case 'app':
+            return appCommandOf(origin, positional, flags, machine, device);
         case 'init':
             none();
             return {
@@ -569,6 +583,66 @@ function machineCommand(origin, positional, flags, machine) {
         ...machine(),
     };
 }
+const APP_SCOPE_NAMES = [
+    'cards:read',
+    'cards:read:all',
+    'cards:answer',
+    'cards:reply',
+    'cards:later',
+    'cards:delegate',
+    'assistants:read',
+    'presence:desk',
+];
+function appCommandOf(origin, positional, flags, machine, device) {
+    const [sub, app, ...extra] = positional;
+    if (sub === undefined)
+        throw new UsageError('app needs what to do, like: pendingyou app login herdr');
+    if (!APP_SUBS.includes(sub))
+        throw new UsageError(`app has no “${sub}”. Use ${APP_SUBS.join(', ')}.`);
+    if (extra.length)
+        throw new UsageError(`app ${sub} takes one app, not “${extra[0]}”.`);
+    const allowed = {
+        login: ['client-id', 'scope', 'name', 'device', 'browser', 'no-browser'],
+        logout: [],
+        status: [],
+    };
+    for (const key of flags.keys())
+        if (key !== 'origin' && !allowed[sub].includes(key))
+            throw new UsageError(`app ${sub} has no --${key} option.`);
+    if (app !== undefined && !/^[a-z0-9][a-z0-9-]{0,39}$/.test(app))
+        throw new UsageError(`“${app}” isn’t an app’s name here: lower-case letters, digits and dashes.`);
+    if (app === undefined && sub !== 'status')
+        throw new UsageError(`app ${sub} needs the app, like: pendingyou app ${sub} herdr`);
+    const command = {
+        name: 'app',
+        origin,
+        sub: sub,
+        ...(app ? { app } : {}),
+        device: null,
+        browser: true,
+    };
+    if (sub !== 'login')
+        return command;
+    const clientId = flags.get('client-id');
+    if (clientId !== undefined && (typeof clientId !== 'string' || !CLIENT_ID.test(clientId)))
+        throw new UsageError('--client-id needs the client the app signs in with.');
+    const scope = flags.get('scope');
+    let scopes;
+    if (typeof scope === 'string') {
+        scopes = [...new Set(scope.split(/[\s,]+/).filter(Boolean))];
+        const unknown = scopes.find((each) => !APP_SCOPE_NAMES.includes(each));
+        if (unknown || scopes.length === 0)
+            throw new UsageError(`--scope takes the person API’s scopes: ${APP_SCOPE_NAMES.join(', ')}.`);
+    }
+    return {
+        ...command,
+        ...(typeof clientId === 'string' ? { clientId } : {}),
+        ...(scopes ? { scopes } : {}),
+        ...machine(),
+        device: device(),
+        browser: !flags.has('no-browser'),
+    };
+}
 export const USAGE = `pendingyou: Pending You for your coding agents (Claude Code, Codex, OpenCode and Pi)
 
   npx -y pendingyou@latest init
@@ -602,6 +676,10 @@ export const USAGE = `pendingyou: Pending You for your coding agents (Claude Cod
                                never leaves the computer): whether Pending You knows each agent's
                                connection by it, a proof of it for an app's own sign-in
                                (--client-id, --cnf), or a new key (--yes: without asking)
+  npx pendingyou app login herdr | logout herdr | status
+                               Sign in an app that answers your cards when you press a key in it (the
+                               Pending You plugin for Herdr), out again, or what each may do. This
+                               command line never answers: the app does, with its own sign-in and key
 
 Apps (for --app): ${APP_IDS.map((app) => `${app} (${APP_NAMES[app]})`).join(', ')}.