@farthershore/cli 0.33.5 → 0.33.6

package/README.md

@@ -3,7 +3,7 @@
 Create and operate [FartherShore](https://farthershore.com) software businesses
 from the terminal.
 
-**Status: `0.33.5`.** Pre-1.0 — the command surface is stable but may still
+**Status: `0.33.6`.** Pre-1.0 — the command surface is stable but may still
 change between minor versions. Pin an exact version in CI.
 
 FartherShore lets you define a software business as code, then sells, meters,
@@ -21,19 +21,19 @@ the explicitly agent-operable subset of the CLI surface.
 ## Install
 
 ```bash
-npm install -g @farthershore/cli@0.33.5
+npm install -g @farthershore/cli@0.33.6
 ```
 
 Or run it directly with npx:
 
 ```bash
-npx -p @farthershore/cli@0.33.5 farthershore --help
+npx -p @farthershore/cli@0.33.6 farthershore --help
 ```
 
 The package also ships an MCP stdio server for agents:
 
 ```bash
-npx -p @farthershore/cli@0.33.5 farthershore-mcp
+npx -p @farthershore/cli@0.33.6 farthershore-mcp
 ```
 
 ## Authentication
@@ -591,7 +591,13 @@ Bootstrap and rotation return a key once. `login` sends the 60-second,
 single-use handoff only in the browser URL fragment to the platform-owned
 `/persona-sign-in` bridge. The bridge establishes an HttpOnly browser session
 and returns to the exact original portal path, query, and fragment. CLI output
-contains portal metadata but never the handoff or a session bearer. Product
+contains portal metadata but never the handoff or a session bearer. `login`
+emits `opened: true` only after the system browser launcher (`open` /
+`xdg-open`) has exited successfully, so the URL has been handed off before the
+command returns; a launcher failure is reported as an error. The wait is capped
+at 20 seconds: a launcher still running then (for example `xdg-open` running
+the browser in the foreground) is detached, and `login` emits `opened: false`
+with a stderr notice instead of hanging until the browser closes. Product
 role keys must already exist in that subscriber's role catalog; omit `--role` to use its
 configured default. Deletion tears down the temporary user and credential, and
 deleting the environment also removes the remaining persona-owned workspace.
@@ -774,18 +780,18 @@ Use `--all-plans` to clear plan scoping.
 Install or refresh the platform-verified skills bundle together. The platform
 pins this immutable release, and CI plus a daily repository check compare it to
 GitHub's latest stable release so the guidance cannot silently drift.
-This command requires `@farthershore/cli` 0.33.5 or newer.
+This command requires `@farthershore/cli` 0.33.6 or newer.
 
 ```bash
 set -euo pipefail
 CLI_VERSION=$(farthershore --version)
-printf '%s' "$CLI_VERSION" | node -e 'let v=""; process.stdin.on("data", c => v += c).on("end", () => { const m = /^(0|[1-9][0-9]*)\.(0|[1-9][0-9]*)\.(0|[1-9][0-9]*)(?:\+[0-9A-Za-z.-]+)?$/.exec(v.trim()); if (!m || !(+m[1] > 0 || +m[2] > 33 || (+m[2] === 33 && +m[3] >= 5))) { console.error("Stop: CLI 0.33.5 or newer is required; ask the human to upgrade."); process.exitCode = 1; } })'
+printf '%s' "$CLI_VERSION" | node -e 'let v=""; process.stdin.on("data", c => v += c).on("end", () => { const m = /^(0|[1-9][0-9]*)\.(0|[1-9][0-9]*)\.(0|[1-9][0-9]*)(?:\+[0-9A-Za-z.-]+)?$/.exec(v.trim()); if (!m || !(+m[1] > 0 || +m[2] > 33 || (+m[2] === 33 && +m[3] >= 6))) { console.error("Stop: CLI 0.33.6 or newer is required; ask the human to upgrade."); process.exitCode = 1; } })'
 farthershore skills install --help
 farthershore skills install
 ```
 
 If either prerequisite fails, stop and ask the human to run
-`npm install -g @farthershore/cli@0.33.5`, then repeat the checks.
+`npm install -g @farthershore/cli@0.33.6`, then repeat the checks.
 Do not install or upgrade global tooling autonomously.
 
 The Farther Shore CLI downloads the exact installer archive and verifies this