@empiricalrun/test-gen 0.66.2 → 0.67.0

package/CHANGELOG.md

@@ -1,5 +1,11 @@
 # @empiricalrun/test-gen
 
+## 0.67.0
+
+### Minor Changes
+
+- 267b012: feat: add user login in test-gen cli
+
 ## 0.66.2
 
 ### Patch Changes

package/dist/auth/api-client.d.ts

@@ -0,0 +1,12 @@
+declare class APIClient {
+    private appUrl;
+    constructor();
+    request(endpoint: string, options?: RequestInit): Promise<Response>;
+    private makeRequest;
+    private ensureAuthenticated;
+    private refreshToken;
+}
+export declare const apiClient: APIClient;
+export { APIClient };
+export declare function authenticatedFetch(endpoint: string, options?: RequestInit): Promise<any>;
+//# sourceMappingURL=api-client.d.ts.map

package/dist/auth/api-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-client.d.ts","sourceRoot":"","sources":["../../src/auth/api-client.ts"],"names":[],"mappings":"AAOA,cAAM,SAAS;IACb,OAAO,CAAC,MAAM,CAAS;;IAMjB,OAAO,CACX,QAAQ,EAAE,MAAM,EAChB,OAAO,GAAE,WAAgB,GACxB,OAAO,CAAC,QAAQ,CAAC;YAoCN,WAAW;YAmBX,mBAAmB;YAiBnB,YAAY;CA4C3B;AAED,eAAO,MAAM,SAAS,WAAkB,CAAC;AAEzC,OAAO,EAAE,SAAS,EAAE,CAAC;AAErB,wBAAsB,kBAAkB,CACtC,QAAQ,EAAE,MAAM,EAChB,OAAO,CAAC,EAAE,WAAW,GACpB,OAAO,CAAC,GAAG,CAAC,CAqCd"}

package/dist/auth/api-client.js

@@ -0,0 +1,133 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.APIClient = exports.apiClient = void 0;
+exports.authenticatedFetch = authenticatedFetch;
+const token_store_1 = require("./token-store");
+class APIClient {
+    appUrl;
+    constructor() {
+        this.appUrl = process.env.DASHBOARD_DOMAIN || "https://dash.empirical.run";
+    }
+    async request(endpoint, options = {}) {
+        // Ensure user is authenticated
+        await this.ensureAuthenticated();
+        const tokens = await (0, token_store_1.getStoredTokens)();
+        if (!tokens) {
+            throw new Error("Not authenticated. Please run the login command first.");
+        }
+        // Make the request with the access token
+        const response = await this.makeRequest(endpoint, options, tokens.access_token);
+        // If token is expired, try refreshing and retry once
+        if (response.status === 401) {
+            console.log("Access token expired, attempting to refresh...");
+            const refreshed = await this.refreshToken();
+            if (refreshed) {
+                const newTokens = await (0, token_store_1.getStoredTokens)();
+                if (newTokens) {
+                    return this.makeRequest(endpoint, options, newTokens.access_token);
+                }
+            }
+            throw new Error("Authentication failed. Please run the login command again.");
+        }
+        return response;
+    }
+    async makeRequest(endpoint, options, accessToken) {
+        const url = endpoint.startsWith("http")
+            ? endpoint
+            : `${this.appUrl}/api${endpoint}`;
+        return fetch(url, {
+            ...options,
+            headers: {
+                Authorization: `Bearer ${accessToken}`,
+                "Content-Type": "application/json",
+                ...options.headers,
+            },
+        });
+    }
+    async ensureAuthenticated() {
+        if (!(await (0, token_store_1.isAuthenticated)())) {
+            const tokens = await (0, token_store_1.getStoredTokens)();
+            if (!tokens) {
+                throw new Error("Not authenticated. Please run the login command first.");
+            }
+            // Token exists but is expired, try to refresh
+            const refreshed = await this.refreshToken();
+            if (!refreshed) {
+                throw new Error("Session expired. Please run the login command again.");
+            }
+        }
+    }
+    async refreshToken() {
+        const tokens = await (0, token_store_1.getStoredTokens)();
+        if (!tokens || !tokens.refresh_token) {
+            return false;
+        }
+        try {
+            // Use dashboard refresh endpoint instead of Supabase directly
+            const response = await fetch(`${this.appUrl}/api/cli/refresh`, {
+                method: "POST",
+                headers: {
+                    "Content-Type": "application/json",
+                },
+                body: JSON.stringify({
+                    refresh_token: tokens.refresh_token,
+                }),
+            });
+            if (!response.ok) {
+                const errorText = await response.text();
+                console.error("Token refresh failed:", errorText);
+                await (0, token_store_1.clearTokens)();
+                return false;
+            }
+            const data = await response.json();
+            // Store the new tokens (refresh token rotation means we get a new refresh token)
+            await (0, token_store_1.storeTokens)({
+                access_token: data.access_token,
+                refresh_token: data.refresh_token,
+                expires_at: data.expires_at,
+                user_id: data.user?.id || tokens.user_id,
+                user_email: data.user?.email || tokens.user_email,
+            });
+            console.log("Access token refreshed successfully via dashboard");
+            return true;
+        }
+        catch (error) {
+            console.error("Token refresh error:", error);
+            await (0, token_store_1.clearTokens)();
+            return false;
+        }
+    }
+}
+exports.APIClient = APIClient;
+exports.apiClient = new APIClient();
+async function authenticatedFetch(endpoint, options) {
+    try {
+        const response = await exports.apiClient.request(endpoint, options);
+        if (!response.ok) {
+            const errorText = await response.text();
+            let errorMessage;
+            try {
+                const errorJson = JSON.parse(errorText);
+                errorMessage =
+                    errorJson.error || errorJson.message || "API request failed";
+            }
+            catch {
+                errorMessage =
+                    errorText || `Request failed with status ${response.status}`;
+            }
+            throw new Error(errorMessage);
+        }
+        const contentType = response.headers.get("content-type");
+        if (contentType && contentType.includes("application/json")) {
+            return response.json();
+        }
+        return response.text();
+    }
+    catch (error) {
+        if (error.message.includes("Not authenticated") ||
+            error.message.includes("Please run the login command")) {
+            throw new Error("Authentication required. Please run: npx @empiricalrun/test-gen login");
+        }
+        throw error;
+    }
+}

package/dist/auth/cli-auth.d.ts

@@ -0,0 +1,18 @@
+export interface AuthResult {
+    success: boolean;
+    user?: {
+        id: string;
+        email: string;
+    };
+    error?: string;
+}
+export declare function authenticate(): Promise<AuthResult>;
+export declare function logout(): Promise<void>;
+export declare function getAuthStatus(): Promise<{
+    authenticated: boolean;
+    user?: {
+        id: string;
+        email: string;
+    };
+}>;
+//# sourceMappingURL=cli-auth.d.ts.map

package/dist/auth/cli-auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli-auth.d.ts","sourceRoot":"","sources":["../../src/auth/cli-auth.ts"],"names":[],"mappings":"AAoBA,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,CAAC,EAAE;QACL,EAAE,EAAE,MAAM,CAAC;QACX,KAAK,EAAE,MAAM,CAAC;KACf,CAAC;IACF,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,wBAAsB,YAAY,IAAI,OAAO,CAAC,UAAU,CAAC,CAmKxD;AAED,wBAAsB,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC,CAE5C;AAED,wBAAsB,aAAa,IAAI,OAAO,CAAC;IAC7C,aAAa,EAAE,OAAO,CAAC;IACvB,IAAI,CAAC,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;CACtC,CAAC,CAeD"}

package/dist/auth/cli-auth.js

@@ -0,0 +1,184 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.authenticate = authenticate;
+exports.logout = logout;
+exports.getAuthStatus = getAuthStatus;
+const detect_port_1 = __importDefault(require("detect-port"));
+const http_1 = require("http");
+const open_1 = __importDefault(require("open"));
+const url_1 = require("url");
+const token_store_1 = require("./token-store");
+const CLIENT_PORT_DEFAULT = 8080;
+// Get dashboard URL
+const getDashboardUrl = () => {
+    return process.env.DASHBOARD_DOMAIN || "https://dash.empirical.run";
+};
+async function authenticate() {
+    // Check if already authenticated
+    if (await (0, token_store_1.isAuthenticated)()) {
+        const tokens = await (0, token_store_1.getStoredTokens)();
+        if (tokens) {
+            return {
+                success: true,
+                user: {
+                    id: tokens.user_id || "",
+                    email: tokens.user_email || "",
+                },
+            };
+        }
+    }
+    const appUrl = getDashboardUrl();
+    const clientPort = await (0, detect_port_1.default)(CLIENT_PORT_DEFAULT);
+    const redirectUri = `http://localhost:${clientPort}/callback`;
+    return new Promise((resolve) => {
+        // Create temporary local server to receive callback
+        const server = (0, http_1.createServer)(async (req, res) => {
+            const { pathname, query } = (0, url_1.parse)(req.url, true);
+            if (pathname === "/callback") {
+                const { code, error } = query;
+                if (error) {
+                    res.writeHead(400, { "Content-Type": "text/html" });
+                    res.end(`
+            <html>
+              <head><title>Authentication Failed</title></head>
+              <body style="font-family: sans-serif; text-align: center; padding: 50px;">
+                <h1 style="color: #e74c3c;">Authentication Failed</h1>
+                <p>Error: ${error}</p>
+                <p>You can close this window and try again.</p>
+              </body>
+            </html>
+          `);
+                    server.close();
+                    resolve({
+                        success: false,
+                        error: error,
+                    });
+                    return;
+                }
+                if (code) {
+                    try {
+                        // Exchange the temporary code for session tokens
+                        const response = await fetch(`${appUrl}/api/auth/cli/exchange`, {
+                            method: "POST",
+                            headers: {
+                                "Content-Type": "application/json",
+                            },
+                            body: JSON.stringify({ code }),
+                        });
+                        if (!response.ok) {
+                            throw new Error(`Authentication failed: ${response.statusText}`);
+                        }
+                        const { session, user } = await response.json();
+                        if (!session || !user) {
+                            throw new Error("Invalid response from authentication server");
+                        }
+                        const tokens = {
+                            access_token: session.access_token,
+                            refresh_token: session.refresh_token,
+                            expires_at: session.expires_at,
+                            user_id: user.id,
+                            user_email: user.email,
+                        };
+                        await (0, token_store_1.storeTokens)(tokens);
+                        res.writeHead(200, { "Content-Type": "text/html" });
+                        res.end(`
+              <html>
+                <head><title>Authentication Successful</title></head>
+                <body style="font-family: sans-serif; text-align: center; padding: 50px;">
+                  <h1 style="color: #27ae60;">Authentication Successful!</h1>
+                  <p>Welcome, ${user.email}!</p>
+                  <p>You can close this window and return to your CLI.</p>
+                  <script>setTimeout(() => window.close(), 3000);</script>
+                </body>
+              </html>
+            `);
+                        server.close();
+                        resolve({
+                            success: true,
+                            user: {
+                                id: user.id,
+                                email: user.email,
+                            },
+                        });
+                    }
+                    catch (err) {
+                        res.writeHead(500, { "Content-Type": "text/html" });
+                        res.end(`
+              <html>
+                <head><title>Authentication Error</title></head>
+                <body style="font-family: sans-serif; text-align: center; padding: 50px;">
+                  <h1 style="color: #e74c3c;">Authentication Error</h1>
+                  <p>Something went wrong during authentication.</p>
+                  <p>Please try again.</p>
+                </body>
+              </html>
+            `);
+                        server.close();
+                        resolve({
+                            success: false,
+                            error: err.message,
+                        });
+                    }
+                }
+            }
+            else {
+                // Handle other paths
+                res.writeHead(404, { "Content-Type": "text/html" });
+                res.end("<h1>Not Found</h1>");
+            }
+        });
+        server.on("error", (err) => {
+            if (err.code === "EADDRINUSE") {
+                resolve({
+                    success: false,
+                    error: `Port ${clientPort} is already in use. Please ensure no other authentication process is running.`,
+                });
+            }
+            else {
+                resolve({
+                    success: false,
+                    error: `Server error: ${err.message}`,
+                });
+            }
+        });
+        server.listen(clientPort, () => {
+            // Open browser to your Next.js auth page
+            const authUrl = `${appUrl}/auth/cli?redirect_uri=${encodeURIComponent(redirectUri)}`;
+            console.log("Opening browser for authentication...");
+            console.log(`If the browser doesn't open automatically, visit: ${authUrl}`);
+            (0, open_1.default)(authUrl).catch((err) => {
+                console.warn("Could not open browser automatically:", err.message);
+                console.log(`Please manually visit: ${authUrl}`);
+            });
+        });
+        // Timeout after 10 minutes
+        setTimeout(() => {
+            server.close();
+            resolve({
+                success: false,
+                error: "Authentication timeout (10 minutes)",
+            });
+        }, 10 * 60 * 1000);
+    });
+}
+async function logout() {
+    await (0, token_store_1.clearTokens)();
+}
+async function getAuthStatus() {
+    if (await (0, token_store_1.isAuthenticated)()) {
+        const tokens = await (0, token_store_1.getStoredTokens)();
+        if (tokens) {
+            return {
+                authenticated: true,
+                user: {
+                    id: tokens.user_id || "",
+                    email: tokens.user_email || "",
+                },
+            };
+        }
+    }
+    return { authenticated: false };
+}

package/dist/auth/index.d.ts

@@ -0,0 +1,4 @@
+export { APIClient, apiClient, authenticatedFetch } from "./api-client";
+export { authenticate, getAuthStatus, logout } from "./cli-auth";
+export { clearTokens, getStoredTokens, isAuthenticated, type StoredTokens, storeTokens, } from "./token-store";
+//# sourceMappingURL=index.d.ts.map

package/dist/auth/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/auth/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AACxE,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AACjE,OAAO,EACL,WAAW,EACX,eAAe,EACf,eAAe,EACf,KAAK,YAAY,EACjB,WAAW,GACZ,MAAM,eAAe,CAAC"}

package/dist/auth/index.js

@@ -0,0 +1,17 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.storeTokens = exports.isAuthenticated = exports.getStoredTokens = exports.clearTokens = exports.logout = exports.getAuthStatus = exports.authenticate = exports.authenticatedFetch = exports.apiClient = exports.APIClient = void 0;
+// Export all auth-related functionality
+var api_client_1 = require("./api-client");
+Object.defineProperty(exports, "APIClient", { enumerable: true, get: function () { return api_client_1.APIClient; } });
+Object.defineProperty(exports, "apiClient", { enumerable: true, get: function () { return api_client_1.apiClient; } });
+Object.defineProperty(exports, "authenticatedFetch", { enumerable: true, get: function () { return api_client_1.authenticatedFetch; } });
+var cli_auth_1 = require("./cli-auth");
+Object.defineProperty(exports, "authenticate", { enumerable: true, get: function () { return cli_auth_1.authenticate; } });
+Object.defineProperty(exports, "getAuthStatus", { enumerable: true, get: function () { return cli_auth_1.getAuthStatus; } });
+Object.defineProperty(exports, "logout", { enumerable: true, get: function () { return cli_auth_1.logout; } });
+var token_store_1 = require("./token-store");
+Object.defineProperty(exports, "clearTokens", { enumerable: true, get: function () { return token_store_1.clearTokens; } });
+Object.defineProperty(exports, "getStoredTokens", { enumerable: true, get: function () { return token_store_1.getStoredTokens; } });
+Object.defineProperty(exports, "isAuthenticated", { enumerable: true, get: function () { return token_store_1.isAuthenticated; } });
+Object.defineProperty(exports, "storeTokens", { enumerable: true, get: function () { return token_store_1.storeTokens; } });

package/dist/auth/token-store.d.ts

@@ -0,0 +1,15 @@
+export interface StoredTokens {
+    access_token: string;
+    refresh_token: string;
+    expires_at: number;
+    user_id?: string;
+    user_email?: string;
+}
+export interface TokenStorage {
+    [dashboardDomain: string]: StoredTokens;
+}
+export declare function storeTokens(tokens: StoredTokens): Promise<void>;
+export declare function getStoredTokens(): Promise<StoredTokens | null>;
+export declare function clearTokens(): Promise<void>;
+export declare function isAuthenticated(): Promise<boolean>;
+//# sourceMappingURL=token-store.d.ts.map

package/dist/auth/token-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-store.d.ts","sourceRoot":"","sources":["../../src/auth/token-store.ts"],"names":[],"mappings":"AAqBA,MAAM,WAAW,YAAY;IAC3B,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,YAAY;IAC3B,CAAC,eAAe,EAAE,MAAM,GAAG,YAAY,CAAC;CACzC;AAgCD,wBAAsB,WAAW,CAAC,MAAM,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CA2CrE;AAED,wBAAsB,eAAe,IAAI,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAqBpE;AAED,wBAAsB,WAAW,IAAI,OAAO,CAAC,IAAI,CAAC,CA4CjD;AAED,wBAAsB,eAAe,IAAI,OAAO,CAAC,OAAO,CAAC,CAUxD"}

package/dist/auth/token-store.js

@@ -0,0 +1,149 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.storeTokens = storeTokens;
+exports.getStoredTokens = getStoredTokens;
+exports.clearTokens = clearTokens;
+exports.isAuthenticated = isAuthenticated;
+const crypto_1 = require("crypto");
+const promises_1 = require("fs/promises");
+const os_1 = require("os");
+const path_1 = require("path");
+const util_1 = require("util");
+const CONFIG_DIR = (0, path_1.join)((0, os_1.homedir)(), ".empiricalrun");
+const TOKEN_FILE = (0, path_1.join)(CONFIG_DIR, "auth.enc");
+async function getEncryptionKey(salt) {
+    const machineId = 
+    // eslint-disable-next-line turbo/no-undeclared-env-vars
+    process.env.HOME || process.env.USERPROFILE || "default-machine";
+    const scryptAsync = (0, util_1.promisify)(crypto_1.scrypt);
+    return (await scryptAsync("empirical-cli-tokens-" + machineId, salt, 32));
+}
+function getDashboardDomain() {
+    const domain = process.env.DASHBOARD_DOMAIN || "https://dash.empirical.run";
+    // Remove protocol (http:// or https://) to make keys more stable
+    return domain.replace(/^https?:\/\//, "");
+}
+async function getTokenStorage() {
+    try {
+        const encryptedData = await (0, promises_1.readFile)(TOKEN_FILE);
+        // Extract salt, IV, and encrypted data
+        const salt = encryptedData.subarray(0, 16);
+        const iv = encryptedData.subarray(16, 32);
+        const encrypted = encryptedData.subarray(32);
+        // Derive key from password and salt
+        const key = await getEncryptionKey(salt);
+        // Decrypt the data
+        const decipher = (0, crypto_1.createDecipheriv)("aes-256-cbc", key, iv);
+        let decrypted = decipher.update(encrypted, undefined, "utf8");
+        decrypted += decipher.final("utf8");
+        return JSON.parse(decrypted);
+    }
+    catch (error) {
+        // Token file doesn't exist or is corrupted
+        return null;
+    }
+}
+async function storeTokens(tokens) {
+    try {
+        await (0, promises_1.mkdir)(CONFIG_DIR, { recursive: true });
+        const dashboardDomain = getDashboardDomain();
+        // Load existing token storage or create new
+        let tokenStorage = {};
+        try {
+            const existingStorage = await getTokenStorage();
+            if (existingStorage) {
+                tokenStorage = existingStorage;
+            }
+        }
+        catch {
+            // Ignore errors when loading existing storage
+        }
+        // Update tokens for current dashboard domain
+        tokenStorage[dashboardDomain] = tokens;
+        // Generate a random salt and IV
+        const salt = (0, crypto_1.randomBytes)(16);
+        const iv = (0, crypto_1.randomBytes)(16);
+        // Derive key from password and salt
+        const key = await getEncryptionKey(salt);
+        // Encrypt the token data
+        const cipher = (0, crypto_1.createCipheriv)("aes-256-cbc", key, iv);
+        let encrypted = cipher.update(JSON.stringify(tokenStorage), "utf8", "hex");
+        encrypted += cipher.final("hex");
+        // Store salt + iv + encrypted data
+        const encryptedData = Buffer.concat([
+            salt,
+            iv,
+            Buffer.from(encrypted, "hex"),
+        ]);
+        await (0, promises_1.writeFile)(TOKEN_FILE, encryptedData, { mode: 0o600 }); // Restrict file permissions
+    }
+    catch (error) {
+        throw new Error(`Failed to store authentication tokens: ${error}`);
+    }
+}
+async function getStoredTokens() {
+    try {
+        const dashboardDomain = getDashboardDomain();
+        const tokenStorage = await getTokenStorage();
+        if (!tokenStorage || !tokenStorage[dashboardDomain]) {
+            return null;
+        }
+        const tokens = tokenStorage[dashboardDomain];
+        // Validate token structure
+        if (!tokens.access_token || !tokens.refresh_token || !tokens.expires_at) {
+            throw new Error("Invalid token structure");
+        }
+        return tokens;
+    }
+    catch (error) {
+        // Token file doesn't exist or is corrupted
+        return null;
+    }
+}
+async function clearTokens() {
+    try {
+        const dashboardDomain = getDashboardDomain();
+        const tokenStorage = await getTokenStorage();
+        if (!tokenStorage) {
+            return; // Nothing to clear
+        }
+        // Remove tokens for current dashboard domain
+        delete tokenStorage[dashboardDomain];
+        // If no tokens left, remove the file
+        if (Object.keys(tokenStorage).length === 0) {
+            await (0, promises_1.unlink)(TOKEN_FILE);
+            return;
+        }
+        // Otherwise, save the updated storage
+        await (0, promises_1.mkdir)(CONFIG_DIR, { recursive: true });
+        // Generate a random salt and IV
+        const salt = (0, crypto_1.randomBytes)(16);
+        const iv = (0, crypto_1.randomBytes)(16);
+        // Derive key from password and salt
+        const key = await getEncryptionKey(salt);
+        // Encrypt the token data
+        const cipher = (0, crypto_1.createCipheriv)("aes-256-cbc", key, iv);
+        let encrypted = cipher.update(JSON.stringify(tokenStorage), "utf8", "hex");
+        encrypted += cipher.final("hex");
+        // Store salt + iv + encrypted data
+        const encryptedData = Buffer.concat([
+            salt,
+            iv,
+            Buffer.from(encrypted, "hex"),
+        ]);
+        await (0, promises_1.writeFile)(TOKEN_FILE, encryptedData, { mode: 0o600 });
+    }
+    catch (error) {
+        // File doesn't exist, ignore
+    }
+}
+async function isAuthenticated() {
+    const tokens = await getStoredTokens();
+    if (!tokens)
+        return false;
+    // Check if token is not expired (with 5 minute buffer)
+    const expirationBuffer = 5 * 60 * 1000; // 5 minutes
+    const now = Date.now();
+    const tokenExpiry = tokens.expires_at * 1000;
+    return tokenExpiry > now + expirationBuffer;
+}

package/dist/bin/index.js

@@ -16,6 +16,7 @@ const diagnosis_agent_1 = require("../agent/diagnosis-agent");
 const enrich_prompt_1 = require("../agent/enrich-prompt");
 const infer_agent_1 = require("../agent/infer-agent");
 const run_3 = require("../agent/planner/run");
+const auth_1 = require("../auth");
 const recorder_1 = require("../recorder");
 const reporter_1 = require("../reporter");
 const session_1 = require("../session");
@@ -203,6 +204,94 @@ async function main() {
     const removeListeners = setupProcessListeners(flushEvents);
     await (0, utils_2.printBanner)();
     const program = new commander_1.Command();
+    // Add authentication commands
+    program
+        .command("login")
+        .description("Authenticate with your Empirical Run account")
+        .action(async () => {
+        console.log("🔐 Starting authentication...\n");
+        try {
+            const result = await (0, auth_1.authenticate)();
+            if (result.success) {
+                console.log("✅ Authentication successful!");
+                if (result.user) {
+                    console.log(`👤 Logged in as: ${result.user.email}`);
+                }
+                console.log("\nYou can now use authenticated CLI commands.\n");
+            }
+            else {
+                console.error("❌ Authentication failed:", result.error);
+                process.exit(1);
+            }
+        }
+        catch (error) {
+            console.error("❌ Authentication error:", error.message);
+            process.exit(1);
+        }
+        process.exit(0);
+    });
+    program
+        .command("logout")
+        .description("Sign out of your Empirical Run account")
+        .action(async () => {
+        try {
+            await (0, auth_1.logout)();
+            console.log("✅ Successfully signed out.");
+        }
+        catch (error) {
+            console.error("❌ Logout error:", error.message);
+            process.exit(1);
+        }
+        process.exit(0);
+    });
+    program
+        .command("whoami")
+        .description("Check your authentication status")
+        .action(async () => {
+        try {
+            const status = await (0, auth_1.getAuthStatus)();
+            if (status.authenticated) {
+                console.log("✅ You are authenticated");
+                if (status.user) {
+                    console.log(`👤 Logged in as: ${status.user.email}`);
+                }
+            }
+            else {
+                console.log("❌ You are not authenticated");
+                console.log('Run "npx @empiricalrun/test-gen login" to authenticate');
+            }
+        }
+        catch (error) {
+            console.error("❌ Error checking auth status:", error.message);
+            process.exit(1);
+        }
+        removeListeners();
+        await (0, llm_1.flushAllTraces)();
+        await (0, logger_1.waitForLogsToFlush)();
+        process.exit(0);
+    });
+    program
+        .command("auth-test")
+        .description("Test authentication by making an API call")
+        .action(async () => {
+        try {
+            console.log("🔍 Testing authentication with API call...\n");
+            const data = await (0, auth_1.authenticatedFetch)("/requests");
+            console.log("✅ API call successful!");
+            console.log("📄 Response:", JSON.stringify(data, null, 2));
+        }
+        catch (error) {
+            console.error("❌ API call failed:", error.message);
+            if (error.message.includes("Authentication required")) {
+                console.log('\n💡 Tip: Run "npx @empiricalrun/test-gen login" to authenticate');
+            }
+            process.exit(1);
+        }
+        removeListeners();
+        await (0, llm_1.flushAllTraces)();
+        await (0, logger_1.waitForLogsToFlush)();
+        process.exit(0);
+    });
     program
         .option("--token <token>", "Test generation token")
         .option("--prompt <prompt>", "Prompt for the chat agent")
@@ -217,7 +306,9 @@ async function main() {
         .option("--initial-prompt <path>", "Path to an initial prompt file (e.g. prompt.md)")
         .option("--with-retry", "Use the retry strategy")
         .parse(process.argv);
+    // Check if a command was executed (auth commands exit early)
     const options = program.opts();
+    // Only proceed with main workflow if no auth command was executed
     const completedOptions = await (0, utils_2.validateAndCompleteCliOptions)(options);
     const testGenConfig = completedOptions.token
         ? (0, scenarios_1.loadTestConfigs)(completedOptions.token)

package/dist/bin/utils/index.js

@@ -105,10 +105,10 @@ async function printBanner() {
     let versionSuffix = "";
     if (latestVersion) {
         if (version === latestVersion) {
-            versionSuffix = ` ${gray}(latest)${reset}`;
+            versionSuffix = ` (latest)`;
         }
         else {
-            versionSuffix = ` (latest is ${latestVersion})`;
+            versionSuffix = ` ${reset}(latest is ${latestVersion})`;
         }
     }
     const logLine1 = `Running ${PACKAGE_NAME} v${version}${versionSuffix}`;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@empiricalrun/test-gen",
-  "version": "0.66.2",
+  "version": "0.67.0",
   "publishConfig": {
     "registry": "https://registry.npmjs.org/",
     "access": "public"
@@ -53,6 +53,7 @@
     "mime": "3.0.0",
     "minimatch": "^10.0.1",
     "nanoid": "^5.0.7",
+    "open": "^10.1.2",
     "openai": "4.87.3",
     "ora": "^8.1.0",
     "picocolors": "^1.0.1",

package/tsconfig.tsbuildinfo

@@ -1 +1 @@
-{"root":["./src/index.ts","./src/actions/assert.ts","./src/actions/click.ts","./src/actions/done.ts","./src/actions/fill.ts","./src/actions/goto.ts","./src/actions/hover.ts","./src/actions/index.ts","./src/actions/next-task.ts","./src/actions/press.ts","./src/actions/skill.ts","./src/actions/text-content.ts","./src/actions/constants/index.ts","./src/actions/utils/index.ts","./src/agent/browsing/index.ts","./src/agent/browsing/run.ts","./src/agent/browsing/utils.ts","./src/agent/chat/agent-loop.ts","./src/agent/chat/exports.ts","./src/agent/chat/index.ts","./src/agent/chat/models.ts","./src/agent/chat/state.ts","./src/agent/chat/types.ts","./src/agent/chat/utils.ts","./src/agent/chat/prompt/index.ts","./src/agent/chat/prompt/pw-utils-docs.ts","./src/agent/chat/prompt/repo.ts","./src/agent/codegen/create-test-block.ts","./src/agent/codegen/fix-ts-errors.ts","./src/agent/codegen/generate-code-apply-changes.ts","./src/agent/codegen/lexical-scoped-vars.ts","./src/agent/codegen/repo-edit.ts","./src/agent/codegen/run.ts","./src/agent/codegen/skills-retriever.ts","./src/agent/codegen/test-update-feedback.ts","./src/agent/codegen/types.ts","./src/agent/codegen/update-flow.ts","./src/agent/codegen/use-skill.ts","./src/agent/codegen/utils.ts","./src/agent/cua/computer.ts","./src/agent/cua/index.ts","./src/agent/cua/model.ts","./src/agent/cua/pw-codegen/element-from-point.ts","./src/agent/cua/pw-codegen/types.ts","./src/agent/cua/pw-codegen/pw-pause/for-recorder.ts","./src/agent/cua/pw-codegen/pw-pause/index.ts","./src/agent/cua/pw-codegen/pw-pause/ipc.ts","./src/agent/cua/pw-codegen/pw-pause/patch.ts","./src/agent/cua/pw-codegen/pw-pause/types.ts","./src/agent/diagnosis-agent/index.ts","./src/agent/diagnosis-agent/strict-mode-violation.ts","./src/agent/enrich-prompt/index.ts","./src/agent/enrich-prompt/utils.ts","./src/agent/infer-agent/index.ts","./src/agent/master/action-tool-calls.ts","./src/agent/master/element-annotation.ts","./src/agent/master/execute-browser-action.ts","./src/agent/master/execute-skill-action.ts","./src/agent/master/next-action.ts","./src/agent/master/planner.ts","./src/agent/master/run.ts","./src/agent/master/scroller.ts","./src/agent/master/with-hints.ts","./src/agent/master/browser-tests/cua.spec.ts","./src/agent/master/browser-tests/fixtures.ts","./src/agent/master/browser-tests/index.spec.ts","./src/agent/master/browser-tests/skills.spec.ts","./src/agent/master/icon-descriptor/index.ts","./src/agent/master/icon-descriptor/normalize-svg.ts","./src/agent/planner/run-time-planner.ts","./src/agent/planner/run.ts","./src/artifacts/index.ts","./src/artifacts/utils.ts","./src/bin/index.ts","./src/bin/logger/index.ts","./src/bin/utils/context.ts","./src/bin/utils/index.ts","./src/bin/utils/fs/index.ts","./src/bin/utils/platform/web/index.ts","./src/bin/utils/platform/web/test-files/ts-path-import-validate.ts","./src/bin/utils/scenarios/index.ts","./src/browser-injected-scripts/annotate-elements.spec.ts","./src/constants/index.ts","./src/errors/index.ts","./src/evals/add-scenario-agent.evals.ts","./src/evals/append-create-test-agent.evals.ts","./src/evals/fetch-pom-skills-agent.evals.ts","./src/evals/infer-master-or-code-agent.evals.ts","./src/evals/master-agent.evals.ts","./src/evals/type.ts","./src/evals/update-scenario-agent.evals.ts","./src/file/client.ts","./src/file/server.ts","./src/human-in-the-loop/cli.ts","./src/human-in-the-loop/index.ts","./src/human-in-the-loop/ipc.ts","./src/page/index.ts","./src/prompts/lib/ts-transformer.ts","./src/recorder/display.ts","./src/recorder/index.ts","./src/recorder/request.ts","./src/recorder/temp-files.ts","./src/recorder/upload.ts","./src/recorder/validation.ts","./src/reporter/index.ts","./src/reporter/lib.ts","./src/session/index.ts","./src/test-build/index.ts","./src/tool-call-service/index.ts","./src/tool-call-service/utils.ts","./src/tools/commit-and-create-pr.ts","./src/tools/diagnosis-fetcher.ts","./src/tools/download-build.ts","./src/tools/list-environments.ts","./src/tools/str_replace_editor.ts","./src/tools/test-gen-browser.ts","./src/tools/test-run.ts","./src/tools/grep/index.ts","./src/tools/grep/ripgrep/index.ts","./src/tools/grep/ripgrep/types.ts","./src/tools/test-run-fetcher/index.ts","./src/tools/test-run-fetcher/types.ts","./src/tools/upgrade-packages/index.ts","./src/tools/upgrade-packages/utils.ts","./src/tools/utils/index.ts","./src/types/handlebars.d.ts","./src/types/index.ts","./src/uploader/index.ts","./src/uploader/utils.ts","./src/utils/checkpoint.ts","./src/utils/env.ts","./src/utils/exec.ts","./src/utils/file-tree.ts","./src/utils/file.ts","./src/utils/git.ts","./src/utils/html.ts","./src/utils/index.ts","./src/utils/json.ts","./src/utils/repo-tree.ts","./src/utils/slug.ts","./src/utils/string.ts","./src/utils/stripAnsi.ts"],"version":"5.8.3"}
+{"root":["./src/index.ts","./src/actions/assert.ts","./src/actions/click.ts","./src/actions/done.ts","./src/actions/fill.ts","./src/actions/goto.ts","./src/actions/hover.ts","./src/actions/index.ts","./src/actions/next-task.ts","./src/actions/press.ts","./src/actions/skill.ts","./src/actions/text-content.ts","./src/actions/constants/index.ts","./src/actions/utils/index.ts","./src/agent/browsing/index.ts","./src/agent/browsing/run.ts","./src/agent/browsing/utils.ts","./src/agent/chat/agent-loop.ts","./src/agent/chat/exports.ts","./src/agent/chat/index.ts","./src/agent/chat/models.ts","./src/agent/chat/state.ts","./src/agent/chat/types.ts","./src/agent/chat/utils.ts","./src/agent/chat/prompt/index.ts","./src/agent/chat/prompt/pw-utils-docs.ts","./src/agent/chat/prompt/repo.ts","./src/agent/codegen/create-test-block.ts","./src/agent/codegen/fix-ts-errors.ts","./src/agent/codegen/generate-code-apply-changes.ts","./src/agent/codegen/lexical-scoped-vars.ts","./src/agent/codegen/repo-edit.ts","./src/agent/codegen/run.ts","./src/agent/codegen/skills-retriever.ts","./src/agent/codegen/test-update-feedback.ts","./src/agent/codegen/types.ts","./src/agent/codegen/update-flow.ts","./src/agent/codegen/use-skill.ts","./src/agent/codegen/utils.ts","./src/agent/cua/computer.ts","./src/agent/cua/index.ts","./src/agent/cua/model.ts","./src/agent/cua/pw-codegen/element-from-point.ts","./src/agent/cua/pw-codegen/types.ts","./src/agent/cua/pw-codegen/pw-pause/for-recorder.ts","./src/agent/cua/pw-codegen/pw-pause/index.ts","./src/agent/cua/pw-codegen/pw-pause/ipc.ts","./src/agent/cua/pw-codegen/pw-pause/patch.ts","./src/agent/cua/pw-codegen/pw-pause/types.ts","./src/agent/diagnosis-agent/index.ts","./src/agent/diagnosis-agent/strict-mode-violation.ts","./src/agent/enrich-prompt/index.ts","./src/agent/enrich-prompt/utils.ts","./src/agent/infer-agent/index.ts","./src/agent/master/action-tool-calls.ts","./src/agent/master/element-annotation.ts","./src/agent/master/execute-browser-action.ts","./src/agent/master/execute-skill-action.ts","./src/agent/master/next-action.ts","./src/agent/master/planner.ts","./src/agent/master/run.ts","./src/agent/master/scroller.ts","./src/agent/master/with-hints.ts","./src/agent/master/browser-tests/cua.spec.ts","./src/agent/master/browser-tests/fixtures.ts","./src/agent/master/browser-tests/index.spec.ts","./src/agent/master/browser-tests/skills.spec.ts","./src/agent/master/icon-descriptor/index.ts","./src/agent/master/icon-descriptor/normalize-svg.ts","./src/agent/planner/run-time-planner.ts","./src/agent/planner/run.ts","./src/artifacts/index.ts","./src/artifacts/utils.ts","./src/auth/api-client.ts","./src/auth/cli-auth.ts","./src/auth/index.ts","./src/auth/token-store.ts","./src/bin/index.ts","./src/bin/logger/index.ts","./src/bin/utils/context.ts","./src/bin/utils/index.ts","./src/bin/utils/fs/index.ts","./src/bin/utils/platform/web/index.ts","./src/bin/utils/platform/web/test-files/ts-path-import-validate.ts","./src/bin/utils/scenarios/index.ts","./src/browser-injected-scripts/annotate-elements.spec.ts","./src/constants/index.ts","./src/errors/index.ts","./src/evals/add-scenario-agent.evals.ts","./src/evals/append-create-test-agent.evals.ts","./src/evals/fetch-pom-skills-agent.evals.ts","./src/evals/infer-master-or-code-agent.evals.ts","./src/evals/master-agent.evals.ts","./src/evals/type.ts","./src/evals/update-scenario-agent.evals.ts","./src/file/client.ts","./src/file/server.ts","./src/human-in-the-loop/cli.ts","./src/human-in-the-loop/index.ts","./src/human-in-the-loop/ipc.ts","./src/page/index.ts","./src/prompts/lib/ts-transformer.ts","./src/recorder/display.ts","./src/recorder/index.ts","./src/recorder/request.ts","./src/recorder/temp-files.ts","./src/recorder/upload.ts","./src/recorder/validation.ts","./src/reporter/index.ts","./src/reporter/lib.ts","./src/session/index.ts","./src/test-build/index.ts","./src/tool-call-service/index.ts","./src/tool-call-service/utils.ts","./src/tools/commit-and-create-pr.ts","./src/tools/diagnosis-fetcher.ts","./src/tools/download-build.ts","./src/tools/list-environments.ts","./src/tools/str_replace_editor.ts","./src/tools/test-gen-browser.ts","./src/tools/test-run.ts","./src/tools/grep/index.ts","./src/tools/grep/ripgrep/index.ts","./src/tools/grep/ripgrep/types.ts","./src/tools/test-run-fetcher/index.ts","./src/tools/test-run-fetcher/types.ts","./src/tools/upgrade-packages/index.ts","./src/tools/upgrade-packages/utils.ts","./src/tools/utils/index.ts","./src/types/handlebars.d.ts","./src/types/index.ts","./src/uploader/index.ts","./src/uploader/utils.ts","./src/utils/checkpoint.ts","./src/utils/env.ts","./src/utils/exec.ts","./src/utils/file-tree.ts","./src/utils/file.ts","./src/utils/git.ts","./src/utils/html.ts","./src/utils/index.ts","./src/utils/json.ts","./src/utils/repo-tree.ts","./src/utils/slug.ts","./src/utils/string.ts","./src/utils/stripAnsi.ts"],"version":"5.8.3"}