pnote 0.3.0 → 0.4.1

package/dist/index.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 
 // src/index.ts
-import { Command as Command9 } from "commander";
+import { Command as Command10 } from "commander";
 
 // src/lib/errors.ts
 import pc from "picocolors";
@@ -311,6 +311,16 @@ async function search(params, options = {}) {
   if (params.limit) query.set("limit", String(params.limit));
   return callRestApi("GET", `/search?${query.toString()}`, void 0, options);
 }
+async function checkPinStatus(options = {}) {
+  return callRestApi("GET", "/pin/status", void 0, options);
+}
+async function listProtectedNotes(params = {}, options = {}) {
+  const query = new URLSearchParams();
+  if (params.limit) query.set("limit", String(params.limit));
+  if (params.offset) query.set("offset", String(params.offset));
+  const queryString = query.toString();
+  return callRestApi("GET", `/pin/notes${queryString ? `?${queryString}` : ""}`, void 0, options);
+}
 async function listSharedTags(options = {}) {
   return callRestApi("GET", "/share/tags", void 0, options);
 }
@@ -832,6 +842,7 @@ async function listNotesAction(options, ctx) {
         archived: options.archived ?? false,
         pinned: options.pinned,
         deleted: options.deleted ?? false,
+        protected: options.protected,
         search: options.search,
         limit: options.limit ? parseInt(options.limit, 10) : 50
       },
@@ -946,10 +957,10 @@ async function confirm(message) {
     input: process.stdin,
     output: process.stdout
   });
-  return new Promise((resolve2) => {
+  return new Promise((resolve3) => {
     rl.question(message + " [y/N] ", (answer) => {
       rl.close();
-      resolve2(answer.toLowerCase() === "y" || answer.toLowerCase() === "yes");
+      resolve3(answer.toLowerCase() === "y" || answer.toLowerCase() === "yes");
     });
   });
 }
@@ -1273,7 +1284,7 @@ async function promptForPin(noteTitle, hint, maxAttempts = PIN_MAX_ATTEMPTS) {
   return null;
 }
 async function readPinHidden(prompt) {
-  return new Promise((resolve2) => {
+  return new Promise((resolve3) => {
     const rl = createInterface2({
       input: process.stdin,
       output: process.stderr,
@@ -1289,7 +1300,7 @@ async function readPinHidden(prompt) {
       if (char === "\r" || char === "\n") {
         process.stderr.write("\n");
         cleanup();
-        resolve2(pin);
+        resolve3(pin);
       } else if (char === "") {
         process.stderr.write("\n");
         cleanup();
@@ -1424,7 +1435,7 @@ async function buildContext2(globalOpts) {
     pin: pin ?? void 0
   };
 }
-var notesCommand = new Command3("notes").description("List and manage notes").option("--tag <tag>", 'Filter by tag (e.g., "AI/art")').option("--archived", "Show archived notes").option("--pinned", "Show only pinned notes").option("--deleted", "Show deleted notes").option("--search <query>", "Search notes by title").option("--limit <n>", "Limit number of results", "50").action(async (options, cmd) => {
+var notesCommand = new Command3("notes").description("List and manage notes").option("--tag <tag>", 'Filter by tag (e.g., "AI/art")').option("--archived", "Show archived notes").option("--pinned", "Show only pinned notes").option("--deleted", "Show deleted notes").option("--protected", "Show only PIN-protected notes").option("--search <query>", "Search notes by title").option("--limit <n>", "Limit number of results", "50").action(async (options, cmd) => {
   const globalOpts = cmd.parent?.opts() || {};
   const ctx = await buildContext2(globalOpts);
   await listNotesAction(options, ctx);
@@ -1820,63 +1831,172 @@ import * as fs from "fs";
 import * as path from "path";
 import * as os from "os";
 import pc11 from "picocolors";
+var AGENTS_STORE = ".agents/skills";
+var AGENT_SYMLINK_DIRS = [
+  ".claude/skills",
+  ".windsurf/skills",
+  ".augment/skills",
+  ".agent/skills"
+];
+function makeColors(useColor) {
+  if (useColor) {
+    return {
+      green: pc11.green,
+      dim: pc11.dim,
+      yellow: pc11.yellow,
+      bold: pc11.bold,
+      red: pc11.red
+    };
+  }
+  return {
+    green: (s) => s,
+    dim: (s) => s,
+    yellow: (s) => s,
+    bold: (s) => s,
+    red: (s) => s
+  };
+}
+function resolveMode(options) {
+  if (options.dir) return { mode: "custom", root: path.resolve(options.dir) };
+  if (options.project) return { mode: "project", root: process.cwd() };
+  return { mode: "global", root: os.homedir() };
+}
+function ensureSymlink(linkPath, skillName, dryRun, c, log) {
+  const relTarget = path.join("..", "..", AGENTS_STORE, skillName);
+  if (dryRun) {
+    log(`  ${c.dim("would link")} ${linkPath} \u2192 ${relTarget}`);
+    return;
+  }
+  fs.mkdirSync(path.dirname(linkPath), { recursive: true });
+  let existingStat = null;
+  try {
+    existingStat = fs.lstatSync(linkPath);
+  } catch {
+  }
+  if (existingStat) {
+    if (existingStat.isSymbolicLink()) {
+      if (fs.readlinkSync(linkPath) === relTarget) return;
+      fs.unlinkSync(linkPath);
+    } else if (existingStat.isDirectory()) {
+      fs.rmSync(linkPath, { recursive: true });
+      log(`  ${c.yellow("\u2197")} migrated ${c.dim(linkPath)} (replaced directory with symlink)`);
+    } else {
+      fs.unlinkSync(linkPath);
+    }
+  }
+  fs.symlinkSync(relTarget, linkPath);
+  log(`  ${c.dim("\u21E2")} ${linkPath}`);
+}
+function installSkill(root, mode, skillName, files, dryRun, c, log) {
+  const home = os.homedir();
+  if (mode === "custom") {
+    for (const { fileName, content } of files) {
+      const destPath = path.join(root, skillName, fileName);
+      if (dryRun) {
+        log(`  ${c.dim("would write")} ${destPath}`);
+      } else {
+        fs.mkdirSync(path.dirname(destPath), { recursive: true });
+        fs.writeFileSync(destPath, content, "utf-8");
+        log(`  ${c.green("\u2713")} ${destPath}`);
+      }
+    }
+    return [];
+  }
+  for (const { fileName, content } of files) {
+    const destPath = path.join(root, AGENTS_STORE, skillName, fileName);
+    if (dryRun) {
+      log(`  ${c.dim("would write")} ${destPath}`);
+    } else {
+      fs.mkdirSync(path.dirname(destPath), { recursive: true });
+      fs.writeFileSync(destPath, content, "utf-8");
+      log(`  ${c.green("\u2713")} ${destPath}`);
+    }
+  }
+  const linkedAgents = [];
+  for (const agentSkillsDir of AGENT_SYMLINK_DIRS) {
+    const agentRootDir = agentSkillsDir.split("/")[0];
+    const isClaude = agentRootDir === ".claude";
+    if (!isClaude && !fs.existsSync(path.join(home, agentRootDir))) continue;
+    const linkPath = path.join(root, agentSkillsDir, skillName);
+    ensureSymlink(linkPath, skillName, dryRun, c, log);
+    linkedAgents.push(agentRootDir);
+  }
+  return linkedAgents;
+}
 async function pullSkillsAction(skillName, options, ctx) {
   try {
-    const baseDir = options.dir || path.join(os.homedir(), ".claude", "skills");
+    const { mode, root } = resolveMode(options);
+    const useColor = !ctx.noColor && process.stdout.isTTY;
+    const c = makeColors(useColor);
+    const log = ctx.json ? (_msg) => {
+    } : (msg) => console.log(msg);
     const result = await listNotes(
       { note_type: "skill", limit: 200 },
       { pin: ctx.pin }
     );
     let skills = result.notes;
     if (skillName) {
-      skills = skills.filter((n) => {
-        const prefix = n.title.split("/")[0];
-        return prefix === skillName;
-      });
+      skills = skills.filter((n) => n.title.split("/")[0] === skillName);
       if (skills.length === 0) {
         console.error(pc11.red(`No skill found with name "${skillName}"`));
         process.exit(1);
       }
     }
     if (skills.length === 0) {
-      console.log(pc11.dim("No skills to pull."));
+      if (!ctx.json) console.log(c.dim("No skills to pull."));
+      if (ctx.json) outputJson({ pulled: 0, skipped: 0, mode, root, skills: {} });
       return;
     }
-    let pulled = 0;
-    let skipped = 0;
+    const grouped = /* @__PURE__ */ new Map();
     for (const note of skills) {
       const slashIdx = note.title.indexOf("/");
       if (slashIdx <= 0) {
-        logStatus(`Skipping "${note.title}" (invalid title format, expected "name/file")`);
-        skipped++;
+        if (!ctx.json) console.error(`Skipping "${note.title}" (invalid title format, expected "name/file")`);
         continue;
       }
-      const skillDir = note.title.slice(0, slashIdx);
+      const sName = note.title.slice(0, slashIdx);
       const fileName = note.title.slice(slashIdx + 1);
-      const filePath = path.join(baseDir, skillDir, fileName);
-      const noteData = await getNote(note.id, { pin: ctx.pin });
-      const content = noteData.latest_snippet?.content;
-      if (!content) {
-        logStatus(`Skipping "${note.title}" (no snippet content)`);
-        skipped++;
-        continue;
+      if (!grouped.has(sName)) grouped.set(sName, []);
+      grouped.get(sName).push({ fileName, noteId: note.id });
+    }
+    let totalPulled = 0;
+    let totalSkipped = 0;
+    const jsonResults = {};
+    for (const [sName, fileEntries] of grouped) {
+      log(`
+${c.bold(sName)}`);
+      const files = [];
+      for (const { fileName, noteId } of fileEntries) {
+        const noteData = await getNote(noteId, { pin: ctx.pin });
+        const content = noteData.latest_snippet?.content;
+        if (!content) {
+          if (!ctx.json) console.error(`  Skipping "${sName}/${fileName}" (no snippet content)`);
+          totalSkipped++;
+          continue;
+        }
+        files.push({ fileName, content });
       }
+      if (files.length === 0) continue;
+      const linkedAgents = installSkill(root, mode, sName, files, options.dryRun ?? false, c, log);
+      totalPulled += files.length;
+      jsonResults[sName] = {
+        files: files.map((f) => f.fileName),
+        agents: linkedAgents
+      };
+    }
+    if (!ctx.json) {
+      console.log("");
       if (options.dryRun) {
-        console.log(`${pc11.dim("would write")} ${filePath} ${pc11.dim(`(${content.length} chars)`)}`);
-        pulled++;
-        continue;
+        console.log(c.dim(`Dry run: ${totalPulled} file(s) would be pulled, ${totalSkipped} skipped`));
+      } else {
+        const scopeLabel = mode === "custom" ? root : mode === "project" ? "project (.agents/skills/)" : "global (~/.agents/skills/)";
+        console.log(
+          `Pulled ${totalPulled} file(s) \u2014 ${scopeLabel}` + (totalSkipped > 0 ? `, ${totalSkipped} skipped` : "")
+        );
       }
-      const dir = path.dirname(filePath);
-      fs.mkdirSync(dir, { recursive: true });
-      fs.writeFileSync(filePath, content, "utf-8");
-      console.log(`${pc11.green("\u2713")} ${filePath}`);
-      pulled++;
     }
-    console.log("");
-    if (options.dryRun) {
-      console.log(pc11.dim(`Dry run: ${pulled} file(s) would be written, ${skipped} skipped`));
-    } else {
-      console.log(`Pulled ${pulled} file(s) to ${baseDir}` + (skipped > 0 ? `, ${skipped} skipped` : ""));
+    if (ctx.json) {
+      outputJson({ pulled: totalPulled, skipped: totalSkipped, mode, root, skills: jsonResults });
     }
   } catch (error) {
     handleError(error, ctx.noColor);
@@ -1983,16 +2103,20 @@ var skillsCommand = new Command8("skills").description("Manage agent skills (syn
   "after",
   `
 Examples:
-  $ pnote skills                     List all skills in cloud
-  $ pnote skills pull                Download all skills to ~/.claude/skills/
-  $ pnote skills pull myskill        Download a specific skill
-  $ pnote skills push ./my-skill     Upload a local skill directory
+  $ pnote skills                        List all skills in cloud
+  $ pnote skills pull                   Pull all skills globally (~/.agents/skills/ + symlinks)
+  $ pnote skills pull myskill           Pull a specific skill globally
+  $ pnote skills pull --project         Pull project-level (.agents/skills/ + .claude/skills/ etc.)
+  $ pnote skills pull --dry-run         Preview without writing files
+  $ pnote skills push ./my-skill        Upload a local skill directory
 
-Skills are notes with type "skill" and title format "skill-name/filename.md".
-They sync to ~/.claude/skills/<skill-name>/<filename> for use with Claude Code.
+Skills are stored as notes with type "skill" and title "skill-name/filename.md".
+Pull writes to the canonical .agents/skills/ store and symlinks into each installed
+agent's directory (.claude/skills/, .windsurf/skills/, .augment/skills/, etc.),
+matching the layout used by npx skills for seamless coexistence.
 `
 );
-skillsCommand.command("pull").description("Download skills from cloud to local (~/.claude/skills/)").argument("[skill-name]", "Specific skill to pull (pulls all if omitted)").option("--dir <path>", "Custom output directory (default: ~/.claude/skills)").option("--dry-run", "Show what would be downloaded without writing files").action(async (skillName, options, cmd) => {
+skillsCommand.command("pull").description("Download skills from cloud to local (global by default)").argument("[skill-name]", "Specific skill to pull (pulls all if omitted)").option("--project", "Install project-level (./agents/skills/ + .claude/skills/ etc.)").option("--dir <path>", "Custom output directory \u2014 direct write, no symlinks").option("--dry-run", "Show what would be downloaded without writing files").action(async (skillName, options, cmd) => {
   const globalOpts = cmd.parent?.parent?.opts() || {};
   const ctx = await buildContext6(globalOpts);
   await pullSkillsAction(skillName, options, ctx);
@@ -2003,10 +2127,170 @@ skillsCommand.command("push").description("Upload a local skill directory to clo
   await pushSkillsAction(dir, options, ctx);
 });
 
+// src/commands/pin/index.ts
+import { Command as Command9 } from "commander";
+
+// src/commands/pin/statusAction.ts
+import pc13 from "picocolors";
+async function pinStatusAction(ctx) {
+  try {
+    const result = await checkPinStatus({ pin: ctx.pin });
+    if (ctx.json) {
+      outputJson({
+        ...result,
+        pnote_pin_env_set: !!process.env.PNOTE_PIN,
+        pin_cached: !!getCachedPin()
+      });
+      return;
+    }
+    const useColor = !ctx.noColor && process.stdout.isTTY;
+    const c = {
+      green: useColor ? pc13.green : (s) => s,
+      red: useColor ? pc13.red : (s) => s,
+      yellow: useColor ? pc13.yellow : (s) => s,
+      dim: useColor ? pc13.dim : (s) => s,
+      bold: useColor ? pc13.bold : (s) => s,
+      magenta: useColor ? pc13.magenta : (s) => s
+    };
+    const yes = c.green("\u2713");
+    const no = c.red("\u2717");
+    console.log(c.bold("PIN Status"));
+    console.log("");
+    const hasPin = result.user_has_pin_setup;
+    console.log(`  Account PIN set:       ${hasPin ? yes : no}`);
+    if (result.pin_hint) {
+      console.log(`  PIN hint:              ${c.dim(result.pin_hint)}`);
+    }
+    console.log(`  Protected notes:       ${c.magenta(String(result.protected_notes_count))}`);
+    console.log("");
+    console.log(c.bold("PIN Sources (CLI)"));
+    console.log("");
+    const envSet = !!process.env.PNOTE_PIN;
+    console.log(`  PNOTE_PIN env:         ${envSet ? yes : no}${envSet ? c.dim(" (recommended)") : ""}`);
+    const cached = !!getCachedPin();
+    console.log(`  Session cache:         ${cached ? yes + c.dim(" (active, <5min)") : no}`);
+    if (result.pin_provided) {
+      const valid = result.pin_valid;
+      console.log(`  Provided PIN valid:    ${valid ? yes : no}`);
+    } else {
+      console.log(`  Provided PIN:          ${c.dim("not provided")}`);
+    }
+    console.log("");
+    const canAccess = result.can_access_protected;
+    if (canAccess) {
+      console.log(yes + " " + c.green("Can access protected notes"));
+    } else if (!hasPin) {
+      console.log(c.dim("  No protected notes \u2014 PIN not configured on account"));
+    } else {
+      console.log(no + " " + c.red("Cannot access protected notes"));
+      console.log("");
+      console.log(c.dim("  Set PIN via: export PNOTE_PIN=<pin>"));
+      console.log(c.dim("  Or use:      pnote notes get <id> -p <pin>"));
+      console.log(c.dim("  Or use:      echo <pin> | pnote notes get <id> --pin-stdin"));
+    }
+  } catch (error) {
+    handleError(error, ctx.noColor);
+  }
+}
+
+// src/commands/pin/listAction.ts
+import pc14 from "picocolors";
+async function pinListAction(options, ctx) {
+  try {
+    const result = await listProtectedNotes(
+      {
+        limit: options.limit ? parseInt(options.limit, 10) : 50,
+        offset: options.offset ? parseInt(options.offset, 10) : void 0
+      },
+      { pin: ctx.pin }
+    );
+    if (ctx.json) {
+      outputJson(result);
+      return;
+    }
+    const useColor = !ctx.noColor && process.stdout.isTTY;
+    const c = {
+      dim: useColor ? pc14.dim : (s) => s,
+      bold: useColor ? pc14.bold : (s) => s,
+      cyan: useColor ? pc14.cyan : (s) => s,
+      yellow: useColor ? pc14.yellow : (s) => s,
+      magenta: useColor ? pc14.magenta : (s) => s
+    };
+    const isHuman = !ctx.json && !ctx.plain && process.stdout.isTTY;
+    if (result.notes.length === 0) {
+      console.log(c.dim("No protected notes."));
+      return;
+    }
+    if (isHuman) {
+      console.log(c.bold(`Protected Notes (${result.count})`));
+      if (result.hint) {
+        console.log(c.dim(`PIN hint: ${result.hint}`));
+      }
+      if (!result.can_decrypt) {
+        console.log(c.dim("Note: Content not shown \u2014 set PNOTE_PIN to access content."));
+      }
+      console.log("");
+      const pad2 = (s, w) => s.length >= w ? s.slice(0, w) : s + " ".repeat(w - s.length);
+      const truncate2 = (s, w) => s.length <= w ? s : s.slice(0, w - 1) + "\u2026";
+      console.log(
+        "  " + c.dim(pad2("ID", 10)) + "  " + c.dim(pad2("TITLE", 30)) + "  " + c.dim(pad2("TAGS", 20)) + "  " + c.dim("PROTECTED")
+      );
+      for (const note of result.notes) {
+        const date = new Date(note.protected_at);
+        const updated = date.toLocaleDateString();
+        const pinned = note.pinned ? c.yellow("* ") : "  ";
+        console.log(
+          pinned + pad2(note.id.slice(0, 8), 10) + "  " + pad2(truncate2(note.title, 30), 30) + "  " + pad2(truncate2(note.tags.join(", ") || "-", 20), 20) + "  " + c.magenta(updated)
+        );
+      }
+    } else {
+      for (const note of result.notes) {
+        console.log([note.id, note.title, note.tags.join(","), note.protected_at].join("	"));
+      }
+    }
+  } catch (error) {
+    handleError(error, ctx.noColor);
+  }
+}
+
+// src/commands/pin/index.ts
+async function buildContext7(globalOpts) {
+  const pin = await resolvePin({
+    pinArg: globalOpts.pin,
+    pinFromStdin: globalOpts.pinStdin,
+    skipPrompt: true
+  });
+  return {
+    json: globalOpts.json ?? false,
+    noColor: globalOpts.noColor ?? false,
+    plain: globalOpts.plain ?? false,
+    pin: pin ?? void 0
+  };
+}
+var pinCommand = new Command9("pin").description("Manage PIN protection for notes").addHelpText(
+  "after",
+  `
+Examples:
+  $ pnote pin status                  Check PIN configuration and access
+  $ pnote pin list                    List all protected notes (metadata only)
+  $ PNOTE_PIN=1234 pnote pin status   Check with PIN provided via env
+`
+);
+pinCommand.command("status").description("Check PIN configuration status and access to protected notes").action(async (_options, cmd) => {
+  const globalOpts = cmd.parent?.parent?.opts() || {};
+  const ctx = await buildContext7(globalOpts);
+  await pinStatusAction(ctx);
+});
+pinCommand.command("list").description("List all PIN-protected notes (metadata only, no content)").option("--limit <n>", "Maximum number of results", "50").option("--offset <n>", "Skip N results (for pagination)").action(async (options, cmd) => {
+  const globalOpts = cmd.parent?.parent?.opts() || {};
+  const ctx = await buildContext7(globalOpts);
+  await pinListAction(options, ctx);
+});
+
 // src/lib/update-check.ts
-import { existsSync as existsSync4, readFileSync as readFileSync4, writeFileSync as writeFileSync4, mkdirSync as mkdirSync3 } from "fs";
+import { existsSync as existsSync5, readFileSync as readFileSync4, writeFileSync as writeFileSync4, mkdirSync as mkdirSync3 } from "fs";
 import { join as join5 } from "path";
-import pc13 from "picocolors";
+import pc15 from "picocolors";
 var CACHE_FILE = "update-check.json";
 var CHECK_INTERVAL = 60 * 60 * 1e3;
 var FETCH_TIMEOUT = 2e3;
@@ -2016,7 +2300,7 @@ function getCachePath() {
 function readCache() {
   try {
     const path3 = getCachePath();
-    if (!existsSync4(path3)) return null;
+    if (!existsSync5(path3)) return null;
     return JSON.parse(readFileSync4(path3, "utf-8"));
   } catch {
     return null;
@@ -2025,7 +2309,7 @@ function readCache() {
 function writeCache(cache) {
   try {
     const dir = getConfigDir();
-    if (!existsSync4(dir)) {
+    if (!existsSync5(dir)) {
       mkdirSync3(dir, { recursive: true, mode: 448 });
     }
     writeFileSync4(getCachePath(), JSON.stringify(cache), "utf-8");
@@ -2055,9 +2339,9 @@ function isOlderVersion(current, latest) {
 }
 function printNotice(current, latest, packageName) {
   const useColor = process.stderr.isTTY && !process.env.NO_COLOR && process.env.TERM !== "dumb";
-  const yellow = useColor ? pc13.yellow : (s) => s;
-  const bold = useColor ? pc13.bold : (s) => s;
-  const dim = useColor ? pc13.dim : (s) => s;
+  const yellow = useColor ? pc15.yellow : (s) => s;
+  const bold = useColor ? pc15.bold : (s) => s;
+  const dim = useColor ? pc15.dim : (s) => s;
   const msg = `Update available: ${dim(current)} \u2192 ${bold(latest)}`;
   const cmd = `Run ${bold(`npm i -g ${packageName}`)} to update`;
   const lines = [msg, cmd];
@@ -2103,8 +2387,8 @@ async function checkAndNotifyUpdate(currentVersion, packageName) {
 }
 
 // src/index.ts
-var program = new Command9();
-program.name("pnote").description("pnote - The PromptNote CLI").version("0.3.0", "-V, --version", "Show version number").option("--json", "Output as JSON (for scripting)").option("--no-color", "Disable colored output").option("--plain", "Force plain text output (no formatting)").option("-p, --pin <pin>", "PIN for accessing protected notes").option("--pin-stdin", "Read PIN from stdin (first line only)").configureHelp({
+var program = new Command10();
+program.name("pnote").description("pnote - The PromptNote CLI").version("0.4.1", "-V, --version", "Show version number").option("--json", "Output as JSON (for scripting)").option("--no-color", "Disable colored output").option("--plain", "Force plain text output (no formatting)").option("-p, --pin <pin>", "PIN for accessing protected notes").option("--pin-stdin", "Read PIN from stdin (first line only)").configureHelp({
   sortSubcommands: true,
   sortOptions: true
 }).addHelpText(
@@ -2134,9 +2418,10 @@ program.addCommand(snippetCommand);
 program.addCommand(tagsCommand);
 program.addCommand(searchCommand);
 program.addCommand(shareCommand);
+program.addCommand(pinCommand);
 program.addCommand(skillsCommand);
 program.hook("preAction", async () => {
-  await checkAndNotifyUpdate("0.3.0", "pnote");
+  await checkAndNotifyUpdate("0.4.1", "pnote");
 });
 process.on("SIGINT", () => {
   console.error("\nInterrupted");