@pontx/pinhere

Pontx Hub SDK guide

Type-safe Pinhere SDK and preview-first CLI generated only from Pinhere's canonical PontxSpec.

This repository is generated from the MIT-licensed, product-owned contract in jasonHzq/pinhere. Its canonical production origin is pinhere-jasonhzqs-projects.vercel.app and it publishes the reviewed contract at /.well-known/pontx.json.

Safety boundary

• Calls go directly from the caller's process to Pinhere; Pontx Hub proxy execution is disabled for all Endpoints.
• Credentials remain in PINHERE_ACCESS_TOKEN or PINHERE_SESSION_COOKIE and are attached only immediately before network execution.
• Every POST, PATCH, and DELETE CLI call is preview-first and requires the short-lived confirmation token from the exact unchanged request.
• Private issue text, DOM context, screenshots, OAuth values, cookies, tokens, and one-time secrets are redacted from previews.

SDK

import { createPinhereClient } from "@pontx/pinhere";

const client = createPinhereClient({
  accessToken: process.env.PINHERE_ACCESS_TOKEN,
});

const issues = await client.issues.listIssues({
  projectId: "prj_example",
  status: "open",
});

Use sessionCookie only for website-session Endpoints such as project, Webhook, and PAT management. Never copy a browser session into Pontx Hub.

CLI

export PINHERE_ACCESS_TOKEN='...'
pontx-pinhere list apis
pontx-pinhere call issues getIssue --issueId iss_example --dry-run

For a mutation, review the redacted preview and pass its unchanged ptx1... confirmation token to the same command with --confirm.