@postion/cli

Sync your Claude Code sessions to Postion, redacted on your machine, and turn any session into a post.

npx @postion/cli login     # confirm in the browser; the key can only upload/read sessions and create drafts
npx @postion/cli install   # adds Stop / SessionEnd hooks to ~/.claude/settings.json
npx @postion/cli sync      # optional: import past sessions of the current repo (--all for every repo)

To turn a session into a post, ask Claude Code to run npx @postion/cli draft (or run it yourself in the project). It uploads the latest session of the current directory, creates a private draft on your last-used site (--site <subdomain> to choose) and opens it in the editor. Prompts that may contain private info redaction can't hide (public IPs, database addresses, emails) are skipped and listed; add them back on the web if they are fine. Nothing is published until you publish it in the editor.

After install, every Claude Code reply triggers a background sync. The hook returns immediately and never blocks or fails the agent; results go to ~/.postion/sync.log.

install copies the CLI to ~/.postion/runtime and points the hooks there, so clearing the npx cache never breaks them. To upgrade, run npx @postion/cli@latest install again; do the same after removing the Node version the hooks were installed with (npx @postion/cli status tells you when the hooks need repair).

Privacy

• Secrets are redacted locally before upload: API keys (Anthropic, OpenAI, GitHub, Stripe, AWS, Google, Slack, npm, Postion), JWTs, bearer tokens, passwords in connection strings, private keys, and *_SECRET / *_TOKEN / *_PASSWORD style assignments. The server runs the same rules again.
• Your home directory is replaced with ~. The project is identified by a hash of its git remote (or path); absolute paths are not uploaded.
• Thinking blocks and sub-agent transcripts are not uploaded. Tool output is truncated to 4,000 characters; set "toolOutput": "none" in ~/.postion/config.json to skip it entirely.
• npx @postion/cli ignore inside a repo excludes it. Deleting a session on the web removes its messages and stops it from being uploaded again.

Commands

Command
login [--key <api-key>] [--api-url <url>] [--no-browser]	Device login, or use an API key with the sessions:write scope
install / uninstall	Add / remove the Claude Code hooks (other hooks are left untouched; a backup is written first)
sync [file...] [--all] [--force]	Upload now. Without arguments: sessions of the current directory
draft [file] [--site <subdomain>] [--tools] [--no-browser]	Create a private draft from a session (default: latest of the current directory)
ignore [dir] / unignore [dir]	Exclude / include a project
status	Account, hook state, recent background syncs

Environment: POSTION_HOME (default ~/.postion), POSTION_API_URL, POSTION_API_KEY, POSTION_DISABLE=1, CLAUDE_CONFIG_DIR.

Upload format

POST /api/v1/agent-sessions with format v1 (src/format.mjs). Uploads are idempotent: each item carries a stable externalId and the client only sends what the server has not confirmed yet.