@abloatai/ablo 0.16.0 → 0.16.1

package/CHANGELOG.md

@@ -1,5 +1,21 @@
 # Changelog
 
+## 0.16.1
+
+### Patch Changes
+
+- **Fix `ablo login` against the standalone auth server.** The device flow now
+  targets two origins instead of one: the RFC 8628 device endpoints
+  (`/api/auth/device/*`) go to the identity server (`auth.abloatai.com`, override
+  `ABLO_AUTH_URL`), while the human approval page (`/cli`), sign-up, and the
+  key-handoff route (`/api/cli/provision-key`) go to the dashboard host
+  (`www.abloatai.com`, new override `ABLO_DASHBOARD_URL`). Previously every step
+  ran against `www`, where the Better Auth device endpoints no longer resolve —
+  producing "Couldn't start login… Is the dashboard reachable?". The CLI now also
+  builds the approval URL itself rather than trusting the server's
+  `verification_uri`, which (being a relative `/cli`) resolved against the auth
+  server's origin to a 404.
+
 ## 0.16.0
 
 ### Minor Changes
@@ -9,7 +25,6 @@
   per committer kind (`user` / `agent` / `system`) — right next to its fields, using the
   same `overwrite | reject | notify` vocabulary as the `onStale` write guard. It is a
   third axis, orthogonal to `policy` (read access) and `groups` (delta routing).
-
   - **`conflict` on `model()`** — a plain, serializable disposition map. Pure data, so it
     round-trips through the schema registry to the server; the generic engine interprets it
     at the commit chokepoint (no per-model logic in the engine).
@@ -26,7 +41,7 @@
     ```ts
     import { coordination, humansOverwrite, agentsReject } from '@abloatai/ablo/schema';
 
-    conflict: coordination(humansOverwrite(), agentsReject())
+    conflict: coordination(humansOverwrite(), agentsReject());
     // → { user: 'overwrite', agent: 'reject' }
     ```
 

package/dist/cli.cjs

@@ -280541,7 +280541,9 @@ init_cjs_shims();
 var import_child_process = require("child_process");
 var import_picocolors7 = __toESM(require_picocolors(), 1);
 var CLIENT_ID = "ablo-cli";
-var AUTH_URL = (process.env.ABLO_AUTH_URL ?? "https://www.abloatai.com").replace(/\/+$/, "");
+var stripSlash = (u2) => u2.replace(/\/+$/, "");
+var AUTH_URL = stripSlash(process.env.ABLO_AUTH_URL ?? "https://auth.abloatai.com");
+var DASHBOARD_URL = stripSlash(process.env.ABLO_DASHBOARD_URL ?? "https://www.abloatai.com");
 var sleep = (ms) => new Promise((r2) => setTimeout(r2, ms));
 function openBrowser(url) {
   const cmd = process.platform === "darwin" ? "open" : process.platform === "win32" ? "start" : "xdg-open";
@@ -280593,7 +280595,7 @@ async function deviceLogin(argv) {
   }
   const code = await codeRes.json();
   const approvePath = `/cli?user_code=${code.user_code}`;
-  const url = account === "signup" ? `${AUTH_URL}/signup?next=${encodeURIComponent(approvePath)}` : code.verification_uri_complete ?? code.verification_uri;
+  const url = account === "signup" ? `${DASHBOARD_URL}/signup?next=${encodeURIComponent(approvePath)}` : `${DASHBOARD_URL}${approvePath}`;
   Me(`${import_picocolors7.default.bold(code.user_code)}
 
 ${import_picocolors7.default.dim(url)}`, "Approve in your browser");
@@ -280646,7 +280648,7 @@ ${import_picocolors7.default.dim(url)}`, "Approve in your browser");
   s.message(
     targetProject ? `Provisioning keys for ${targetProject}\u2026` : "Provisioning a sandbox key\u2026"
   );
-  const provRes = await fetch(`${AUTH_URL}/api/cli/provision-key`, {
+  const provRes = await fetch(`${DASHBOARD_URL}/api/cli/provision-key`, {
     method: "POST",
     headers: { authorization: `Bearer ${accessToken}`, "content-type": "application/json" },
     // Scope the minted keys to the chosen project (`--project`/active), with
@@ -280661,7 +280663,7 @@ ${import_picocolors7.default.dim(url)}`, "Approve in your browser");
     s.stop("Could not provision a key.");
     const reason = provRes ? (await provRes.json().catch(() => ({}))).error : void 0;
     if (reason) M2.error(reason);
-    else if (provRes) M2.error(`Key provisioning returned ${provRes.status} from ${AUTH_URL}/api/cli/provision-key.`);
+    else if (provRes) M2.error(`Key provisioning returned ${provRes.status} from ${DASHBOARD_URL}/api/cli/provision-key.`);
     M2.error(
       `The browser approval succeeded but the key handoff failed. Try again, or grab a ${import_picocolors7.default.bold("sk_test_")} key from the dashboard and set ${import_picocolors7.default.bold("ABLO_API_KEY")}.`
     );

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@abloatai/ablo",
-  "version": "0.16.0",
+  "version": "0.16.1",
   "description": "The Collaboration Layer For AI Agents",
   "license": "Apache-2.0",
   "type": "module",