@aisa-one/cli 0.5.1 → 0.5.2

package/CHANGELOG.md

@@ -7,6 +7,24 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.5.2] — 2026-09-10
+
+Compatible patch on published `0.5.1`. Expanded `aisa login --help` for Agent
+sign-in handoff, plus a default-off login-help evaluation. No auth runtime,
+credential-precedence, or command-surface changes.
+
+### Changed
+
+- `aisa login --help` owns accessible-browser vs persistent headless TTY, live
+  URL relay, one-time paste into the same living process, reuse of a running
+  login, stale-session recovery, no-TTY native MCP OAuth, and connected-only
+  after a successful balance check.
+
+### Added
+
+- Default-off `eval/agent-quickstart/login-handoff/`. Excluded from the npm
+  package; does not run in default CI or against production AIsa credentials.
+
 ## [0.5.1] — 2026-09-10
 
 Compatible patch on published `0.5.0`. Browser-login-first onboarding
@@ -406,7 +424,8 @@ supports today; nothing here depends on a backend change.
 - Config commands (`aisa config get|set|list|reset`) and auth
   (`aisa login|logout|whoami`).
 
-[Unreleased]: https://github.com/AIsa-team/cli/compare/v0.5.1...HEAD
+[Unreleased]: https://github.com/AIsa-team/cli/compare/v0.5.2...HEAD
+[0.5.2]: https://github.com/AIsa-team/cli/compare/v0.5.1...v0.5.2
 [0.5.1]: https://github.com/AIsa-team/cli/compare/v0.5.0...v0.5.1
 [0.5.0]: https://github.com/AIsa-team/cli/compare/v0.3.0...v0.5.0
 [0.4.0]: https://github.com/AIsa-team/cli/compare/v0.3.0...b5c0b04b2a7a2cb9efcb568be5ee5440d7f7d94d

package/dist/commands/oauth-login.d.ts

@@ -27,6 +27,8 @@ export declare function mintCliKey(options?: {
     lang?: Lang;
     catcher?: OAuthCatcher;
 }): Promise<string>;
+/** Commander after-help for `aisa login`. Mechanics only; runtime is unchanged. */
+export declare function loginHelpAfter(): string;
 export declare function oauthLogin(options?: {
     open?: boolean;
     lang?: Lang;

package/dist/commands/oauth-login.js

@@ -319,6 +319,20 @@ export async function mintCliKey(options = {}) {
     setApiKey(minted.key);
     return minted.key;
 }
+/** Commander after-help for `aisa login`. Mechanics only; runtime is unchanged. */
+export function loginHelpAfter() {
+    return `
+Default: open a browser this person can actually use (SSH/CI/no display skip the local open). The live authorize URL is printed at the same time — relay that exact URL immediately. Do not invent, shorten, or delay it.
+
+--no-browser needs a persistent interactive TTY. Agents request only the one-time redirect URL or code — never an API key, access token, or refresh token. Paste that result into this same living process once. Reuse a running login; do not start another. "Done" is not that input. If they cannot type here, relay the paste through chat into this PTY. An empty line cancels.
+
+If this process already timed out, or the URL/code is from an older run, start a fresh aisa login and use the new URL and its result. Do not reuse a stale paste.
+
+No browser and no TTY: this CLI cannot complete OAuth here. Normal setup is native MCP OAuth at https://tools.aisa.one/mcp.
+
+Do not report connected unless login stored a key and the following balance check succeeded. aisa whoami and a stored local key are not proof. Scripts/CI: AISA_API_KEY or --key.
+`;
+}
 export async function oauthLogin(options = {}) {
     if (options.open === false && !process.stdin.isTTY) {
         error("--no-browser needs an interactive terminal to paste the redirect URL into.");

package/dist/constants.d.ts

@@ -1,4 +1,4 @@
-export declare const VERSION = "0.5.1";
+export declare const VERSION = "0.5.2";
 /** Root of the platform. Per-surface bases are derived in api.ts#resolveBases. */
 export declare const BASE_URL = "https://api.aisa.one";
 export declare const ENV_VAR_NAME = "AISA_API_KEY";

package/dist/constants.js

@@ -1,4 +1,4 @@
-export const VERSION = "0.5.1";
+export const VERSION = "0.5.2";
 /** Root of the platform. Per-surface bases are derived in api.ts#resolveBases. */
 export const BASE_URL = "https://api.aisa.one";
 export const ENV_VAR_NAME = "AISA_API_KEY";

package/dist/index.js

@@ -4,6 +4,7 @@ import { VERSION } from "./constants.js";
 import { CliError } from "./cli-error.js";
 // Auth
 import { loginAction, logoutAction, whoamiAction } from "./commands/auth.js";
+import { loginHelpAfter } from "./commands/oauth-login.js";
 // Account
 import { balanceAction, topupAction, usageAction } from "./commands/account.js";
 // API
@@ -75,6 +76,7 @@ program
     .description("Sign in to AIsa — browser sign-in by default, or --key to paste one")
     .option("--key <key>", "API key (skips the browser sign-in)")
     .option("--no-browser", "Print the sign-in URL and paste the redirect back (detected on its own over SSH)")
+    .addHelpText("after", loginHelpAfter())
     .action(wrap(loginAction));
 program
     .command("logout")

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aisa-one/cli",
-  "version": "0.5.1",
+  "version": "0.5.2",
   "description": "CLI for the AIsa unified AI infrastructure platform - one API key for 80+ LLMs and 900+ endpoints across finance, search, social, and video APIs",
   "type": "module",
   "main": "dist/index.js",