@figs-so/cli 0.1.5 → 0.1.6

package/README.md

@@ -25,6 +25,7 @@ The full, always-current guide + `agent.json` schema is served at **`<endpoint>/
 |---|---|
 | `figs status [--json]` | login / workspace / agent state |
 | `figs login` | device-flow browser approve (or `figs login <token>`) |
+| `figs logout` | remove the locally-saved token (`~/.figs/credentials.json`) |
 | `figs workspaces [--json]` | list your workspaces (read-only; create one in the web app) |
 | `figs init --workspace <slug-or-id>` | resolve the workspace, generate identity UUID + config + pointer GUIDE.md |
 | `figs doctor` | validate `.figs/` against the contract |

package/figs.mjs

@@ -5,6 +5,7 @@
  *   figs status                         show login / workspace / agent state    [--json]
  *   figs login                          browser approve (device flow) — agent never sees the token
  *   figs login <token>                  fallback: save a token you pasted (~/.figs/credentials.json)
+ *   figs logout                         remove the locally-saved token (~/.figs/credentials.json)
  *   figs workspaces                     list the user's workspaces               [--json]
  *   figs init --workspace <slug-or-id> [--endpoint <url>]
  *                                         create .figs/config.json + GUIDE.md (generates a stable agent id)
@@ -25,13 +26,14 @@ import {
   existsSync,
   mkdirSync,
   readFileSync,
+  rmSync,
   writeFileSync,
 } from "node:fs"
 import { homedir } from "node:os"
 import { join } from "node:path"
 import { randomUUID } from "node:crypto"
 
-const VERSION = "0.1.5"
+const VERSION = "0.1.6"
 // Going-forward default; override with FIGS_ENDPOINT or .figs/config.json endpoint
 // (e.g. FIGS_ENDPOINT=http://localhost:3000 for local dev).
 const DEFAULT_ENDPOINT = "https://app.figs.so"
@@ -143,6 +145,7 @@ async function checkVersion({ force = false, hardFail = false } = {}) {
 }
 
 if (cmd === "login") await login(process.argv[3])
+else if (cmd === "logout") logout()
 else if (cmd === "status") await status()
 else if (cmd === "workspaces") await workspaces()
 else if (cmd === "init") await init()
@@ -153,7 +156,7 @@ else if (cmd === "version" || cmd === "--version") {
   await checkVersion({ force: true })
 } else {
   die(
-    `unknown command "${cmd}" — try: status, login, workspaces, init, doctor, push`,
+    `unknown command "${cmd}" — try: status, login, logout, workspaces, init, doctor, push`,
   )
 }
 
@@ -206,6 +209,33 @@ async function login(token) {
   die("timed out waiting for approval — run `figs login` again")
 }
 
+/**
+ * `figs logout` — remove the locally-saved token (`~/.figs/credentials.json`).
+ * This only clears *this machine's* copy; the token still exists server-side
+ * until you revoke it in Settings. A token supplied via the FIGS_TOKEN env var
+ * can't be removed here (unset the env var to fully log out).
+ */
+function logout() {
+  if (existsSync(globalCreds)) {
+    try {
+      rmSync(globalCreds)
+    } catch (e) {
+      die(`could not remove ${globalCreds}: ${e?.message || e}`)
+    }
+    console.log("figs: ✓ logged out — removed ~/.figs/credentials.json")
+  } else {
+    console.log("figs: not logged in — no ~/.figs/credentials.json to remove")
+  }
+  if (process.env.FIGS_TOKEN) {
+    console.warn(
+      "figs: ! FIGS_TOKEN is still set in your environment — `unset FIGS_TOKEN` to fully log out",
+    )
+  }
+  console.log(
+    `        the token still exists server-side — revoke it at ${resolveEndpoint()}/settings`,
+  )
+}
+
 /** Show where setup stands — login, workspace, charter. Drives the agent's next step. */
 async function status() {
   const token = getToken()

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@figs-so/cli",
-  "version": "0.1.5",
+  "version": "0.1.6",
   "description": "Figs CLI — publish your AI agent's state to Figs (figs.so). Run by the agent.",
   "type": "module",
   "bin": {