@corelayer-ai/cli 0.2.0 → 0.3.0

package/dist/commands/groups.js

@@ -1,17 +1,16 @@
 import { CorelayerClient } from "../lib/api-client.js";
-import { readConfig } from "../lib/config.js";
+import { resolveToken, resolveApiUrl } from "../lib/config.js";
 import { fail, formatDate, printJson, printTable } from "../lib/output.js";
 export async function runGroups(args, ctx) {
     const sub = args[0];
     if (sub !== "list") {
         fail("Usage: corelayer groups list");
     }
-    const config = readConfig();
-    const token = config.token;
+    const token = resolveToken();
     if (!token) {
-        fail("Not logged in. Run: corelayer login");
+        fail("Not authenticated. Set CORELAYER_API_KEY or run: corelayer login");
     }
-    const apiUrl = ctx.apiUrlOverride || config.apiUrl;
+    const apiUrl = resolveApiUrl(ctx.apiUrlOverride);
     const client = new CorelayerClient(apiUrl, token);
     const result = await client.listGroups();
     if (ctx.json) {

package/dist/commands/install-skill.js

@@ -23,7 +23,7 @@ export async function runInstallSkill(_args, ctx) {
     mkdirSync(targetDir, { recursive: true });
     copyFileSync(source, targetFile);
     if (!ctx.quiet) {
-        process.stdout.write(`Corelayer skill installed to ${targetFile}\nClaude Code will now automatically use the Corelayer CLI for production tasks.\n`);
+        process.stdout.write(`Corelayer skill installed to ${targetFile}\n`);
     }
 }
 export async function runUninstallSkill(_args, ctx) {

package/dist/commands/integrations.js

@@ -1,5 +1,5 @@
 import { CorelayerClient } from "../lib/api-client.js";
-import { readConfig } from "../lib/config.js";
+import { readConfig, resolveToken, resolveApiUrl } from "../lib/config.js";
 import { fail, printJson, printTable } from "../lib/output.js";
 function readFlag(args, flag) {
     const index = args.indexOf(flag);
@@ -13,12 +13,12 @@ export async function runIntegrations(args, ctx) {
         fail("Usage: corelayer integrations list [--group <groupId>]");
     }
     const config = readConfig();
-    const token = config.token;
+    const token = resolveToken();
     if (!token) {
-        fail("Not logged in. Run: corelayer login");
+        fail("Not authenticated. Set CORELAYER_API_KEY or run: corelayer login");
     }
     const groupId = readFlag(args, "--group") || config.defaults?.group;
-    const apiUrl = ctx.apiUrlOverride || config.apiUrl;
+    const apiUrl = resolveApiUrl(ctx.apiUrlOverride);
     const client = new CorelayerClient(apiUrl, token);
     const result = await client.listIntegrations(groupId);
     if (ctx.json) {

package/dist/commands/issues.js

@@ -1,7 +1,7 @@
 import { createInterface } from "node:readline/promises";
 import { stdin as input, stdout as output } from "node:process";
 import { CorelayerClient } from "../lib/api-client.js";
-import { readConfig } from "../lib/config.js";
+import { readConfig, resolveToken, resolveApiUrl } from "../lib/config.js";
 import { fail, formatDate, printJson, printTable } from "../lib/output.js";
 function readFlag(args, flag) {
     const index = args.indexOf(flag);
@@ -48,11 +48,11 @@ async function confirmDelete() {
 export async function runIssues(args, ctx) {
     const sub = args[0];
     const config = readConfig();
-    const token = config.token;
+    const token = resolveToken();
     if (!token) {
-        fail("Not logged in. Run: corelayer login");
+        fail("Not authenticated. Set CORELAYER_API_KEY or run: corelayer login");
     }
-    const apiUrl = ctx.apiUrlOverride || config.apiUrl;
+    const apiUrl = resolveApiUrl(ctx.apiUrlOverride);
     const client = new CorelayerClient(apiUrl, token);
     const commandArgs = removeFlags(args.slice(1));
     if (sub === "list") {

package/dist/commands/login.js

@@ -1,4 +1,5 @@
 import { loginWithBrowser, loginWithCodeDirect } from "../lib/auth.js";
+import { updateConfig } from "../lib/config.js";
 import { fail } from "../lib/output.js";
 function readFlag(args, flag) {
     const index = args.indexOf(flag);
@@ -6,8 +7,34 @@ function readFlag(args, flag) {
         return undefined;
     return args[index + 1];
 }
+function hasFlag(args, flag) {
+    return args.includes(flag);
+}
+async function readStdin() {
+    if (process.stdin.isTTY) {
+        fail("No token provided on stdin. Usage: echo $CORELAYER_API_KEY | corelayer login --with-token");
+    }
+    const chunks = [];
+    for await (const chunk of process.stdin) {
+        chunks.push(chunk);
+    }
+    return Buffer.concat(chunks).toString("utf8").trim();
+}
 export async function runLogin(args, ctx) {
     const code = readFlag(args, "--code");
+    const withToken = hasFlag(args, "--with-token");
+    if (withToken) {
+        const token = await readStdin();
+        if (!token) {
+            fail("Empty token. Usage: echo $CORELAYER_API_KEY | corelayer login --with-token");
+        }
+        const apiUrl = ctx.apiUrlOverride || "https://api.corelayer.com";
+        updateConfig({ token, apiUrl });
+        if (!ctx.quiet) {
+            process.stdout.write(`Token saved. API URL: ${apiUrl}\n`);
+        }
+        return;
+    }
     let email;
     let orgName;
     if (code) {

package/dist/index.js

@@ -15,19 +15,33 @@ function printHelp() {
 Usage:
   corelayer login                              (opens browser)
   corelayer login --code <CODE> --api-url <url> (manual)
+  corelayer login --with-token --api-url <url>  (pipe token from stdin)
   corelayer logout
   corelayer issues <list|get|close|reopen|delete|summary> ...
   corelayer groups list
   corelayer integrations list [--group <groupId>]
   corelayer config <get|set> ...
-  corelayer install-skill                       (install Claude Code skill)
-  corelayer uninstall-skill                     (remove Claude Code skill)
+  corelayer install-skill                       (install Corelayer skill)
+  corelayer uninstall-skill                     (remove Corelayer skill)
 
 Global flags:
   --json
   --quiet, -q
   --api-url <url>
   --no-color
+
+Environment variables:
+  CORELAYER_API_KEY    API key for non-interactive auth (skips login)
+  CORELAYER_API_URL    Server URL (default: https://api.corelayer.com)
+  CORELAYER_AUTH_URL   Auth server URL (default: https://app.corelayer.com)
+
+Non-interactive auth (CI/CD, agents):
+  export CORELAYER_API_KEY=cl_live_...
+  export CORELAYER_API_URL=https://api.corelayer.com
+  corelayer issues list --group <groupId>
+
+Save a token to config:
+  echo $CORELAYER_API_KEY | corelayer login --with-token --api-url <url>
 `);
 }
 function parseGlobalFlags(argv) {

package/dist/lib/config.js

@@ -4,7 +4,7 @@ import path from "node:path";
 const CONFIG_DIR = path.join(os.homedir(), ".corelayer");
 const CONFIG_PATH = path.join(CONFIG_DIR, "config.json");
 function defaultApiUrl() {
-    return process.env.CORELAYER_API_URL || "http://localhost:3000";
+    return process.env.CORELAYER_API_URL || "https://api.corelayer.com";
 }
 export function getConfigPath() {
     return CONFIG_PATH;
@@ -52,6 +52,12 @@ export function updateConfig(partial) {
     writeConfig(merged);
     return merged;
 }
+export function resolveToken() {
+    return process.env.CORELAYER_API_KEY || readConfig().token;
+}
+export function resolveApiUrl(override) {
+    return override || readConfig().apiUrl;
+}
 export function clearToken() {
     const current = readConfig();
     delete current.token;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@corelayer-ai/cli",
-  "version": "0.2.0",
+  "version": "0.3.0",
   "description": "Corelayer CLI",
   "type": "module",
   "bin": {

package/dist/lib/cli-auth.js

@@ -1,31 +0,0 @@
-import crypto from "node:crypto";
-const MAX_CALLBACK_BODY_BYTES = 8 * 1024;
-export function parseTrustedOrigin(authBaseUrl) {
-    const parsed = new URL(authBaseUrl);
-    return parsed.origin;
-}
-export function hashCliAuthCode(code) {
-    return crypto.createHash("sha256").update(code).digest("hex");
-}
-export async function readJsonBody(req) {
-    const chunks = [];
-    let total = 0;
-    for await (const chunk of req) {
-        const buffer = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);
-        total += buffer.length;
-        if (total > MAX_CALLBACK_BODY_BYTES) {
-            throw new Error("Callback body is too large");
-        }
-        chunks.push(buffer);
-    }
-    const raw = Buffer.concat(chunks).toString("utf8").trim();
-    if (!raw) {
-        return {};
-    }
-    try {
-        return JSON.parse(raw);
-    }
-    catch {
-        throw new Error("Callback body is not valid JSON");
-    }
-}