vibegroup 0.1.4 → 0.1.5

package/dist/cli.js

@@ -70,7 +70,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "vibegroup",
-    version: "0.1.4",
+    version: "0.1.5",
     description: "Talk to your teammates' Claude Code agents — agent-to-agent collaboration for Claude Code over a shared channel.",
     type: "module",
     bin: {
@@ -230,6 +230,32 @@ var init_install = __esm(() => {
   init_pluginInstall();
 });
 
+// src/lib/channel.ts
+import { spawnSync as spawnSync2 } from "node:child_process";
+import { existsSync as existsSync3, readFileSync as readFileSync3 } from "node:fs";
+import { dirname as dirname3 } from "node:path";
+function readManagedSettings() {
+  try {
+    const p = managedSettingsPath();
+    if (existsSync3(p))
+      return JSON.parse(readFileSync3(p, "utf8"));
+  } catch {}
+  return null;
+}
+function channelAllowlisted() {
+  return isAllowlisted(readManagedSettings());
+}
+function enableChannelWithSudo() {
+  const path = managedSettingsPath();
+  const json = JSON.stringify(mergeManagedSettings(readManagedSettings()), null, 2);
+  const script = `mkdir -p "${dirname3(path)}" && cat > "${path}"`;
+  const r = spawnSync2("sudo", ["sh", "-c", script], { input: json, stdio: ["pipe", "inherit", "inherit"] });
+  return r.status === 0;
+}
+var init_channel = __esm(() => {
+  init_allowlist();
+});
+
 // src/ui/runner.ts
 import { render } from "ink";
 function runInk(make) {
@@ -466,24 +492,6 @@ var exports_init = {};
 __export(exports_init, {
   initCommand: () => initCommand
 });
-import { spawnSync as spawnSync2 } from "node:child_process";
-import { existsSync as existsSync3, readFileSync as readFileSync3 } from "node:fs";
-import { dirname as dirname3 } from "node:path";
-function readManagedSettings() {
-  try {
-    const p = managedSettingsPath();
-    if (existsSync3(p))
-      return JSON.parse(readFileSync3(p, "utf8"));
-  } catch {}
-  return null;
-}
-function writeAllowlistWithSudo() {
-  const path = managedSettingsPath();
-  const json = JSON.stringify(mergeManagedSettings(readManagedSettings()), null, 2);
-  const script = `mkdir -p "${dirname3(path)}" && cat > "${path}"`;
-  const r = spawnSync2("sudo", ["sh", "-c", script], { input: json, stdio: ["pipe", "inherit", "inherit"] });
-  return r.status === 0;
-}
 async function initCommand(rest, flags = {}, env = process.env) {
   const dev = flags.dev === true;
   console.log(`vibegroup setup
@@ -505,13 +513,13 @@ async function initCommand(rest, flags = {}, env = process.env) {
   }
   if (dev) {
     console.log("• Dev mode: skipping the channel allowlist (launch with `vibegroup claude --dev`).");
-  } else if (isAllowlisted(readManagedSettings())) {
+  } else if (channelAllowlisted()) {
     console.log("✓ Channel already enabled.");
   } else {
     console.log(`
 • Enabling the vibegroup channel needs admin once (Claude Code gates channel plugins).`);
-    console.log(`  Writing ${managedSettingsPath()} — enter your password if prompted.`);
-    if (!writeAllowlistWithSudo()) {
+    console.log("  Enter your password if prompted.");
+    if (!enableChannelWithSudo()) {
       console.error("  Could not write managed settings. Retry, or run `vibegroup init --dev` to skip it and use `vibegroup claude --dev`.");
       return 1;
     }
@@ -534,7 +542,7 @@ async function initCommand(rest, flags = {}, env = process.env) {
 }
 var init_init = __esm(() => {
   init_auth();
-  init_allowlist();
+  init_channel();
   init_pluginInstall();
   init_login();
 });
@@ -699,7 +707,7 @@ function extractFlag(args, name) {
   }
   return { value, rest };
 }
-function claudeCommand(args, env = process.env, launcher) {
+function claudeCommand(args, env = process.env, launcher, channel = realChannelGate) {
   if (!isLoggedIn(readAuth(env))) {
     console.error("Not logged in — run `vibegroup login` first.");
     return 1;
@@ -711,6 +719,13 @@ function claudeCommand(args, env = process.env, launcher) {
     console.error("No team selected — pass `--team <slug>` (the team whose room you want to join).");
     return 1;
   }
+  if (!dangerously && !channel.allowlisted()) {
+    console.log("Enabling the vibegroup channel — one-time, needs admin. Enter your password if prompted.");
+    if (!channel.enable()) {
+      console.error("Could not enable the channel. Retry, or launch with `vibegroup claude --dev` (no admin needed).");
+      return 1;
+    }
+  }
   const vg = {
     VIBEGROUP_TEAM: team,
     VIBEGROUP_ROOM: room && room.length > 0 ? room : "general",
@@ -718,10 +733,12 @@ function claudeCommand(args, env = process.env, launcher) {
   };
   return launchClaude({ extraArgs: extra, dangerously, env: vg }, launcher);
 }
-var DEFAULT_API_BASE = "https://api.vibegroup.sh";
+var DEFAULT_API_BASE = "https://api.vibegroup.sh", realChannelGate;
 var init_claudeCmd = __esm(() => {
   init_claudeLaunch();
   init_auth();
+  init_channel();
+  realChannelGate = { allowlisted: channelAllowlisted, enable: enableChannelWithSudo };
 });
 
 // src/cli.ts

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "vibegroup",
-  "version": "0.1.4",
+  "version": "0.1.5",
   "description": "Talk to your teammates' Claude Code agents — agent-to-agent collaboration for Claude Code over a shared channel.",
   "type": "module",
   "bin": {

package/plugin/commands/init.md

@@ -37,10 +37,11 @@ The session is cached now, so the `vibegroup` CLI works. AskUserQuestion: **"Cre
 
 ## Phase 3 — Launch a channel session
 
-If the vibegroup channel isn't set up on this machine yet, tell the user to run `vibegroup init` once in their terminal (it installs the plugin and enables the channel — needs their password once). Then:
+The vibegroup channel is admin-gated (it lives in root-owned managed settings), so **you can't enable it from here** — it's a terminal action, like login. Tell the user to run, in their terminal:
 ```bash
 vibegroup claude --team <slug>
 ```
+The **first run enables the channel** (one `sudo` password prompt), then launches Claude Code in the room. Every later run just launches. If they'd rather not use admin, `vibegroup claude --team <slug> --dev` skips it via the development-channel flag (no password).
 
 ## Done