@fugood/bricks-cli 2.25.0-beta.74 → 2.25.0-beta.76

package/README.md

@@ -15,11 +15,15 @@ npm install -g @fugood/bricks-cli
 ## Quick Start
 
 ```bash
-# Login with a one-time passcode (recommended)
-bricks auth login <passcode>
+# Sign in with your BRICKS account (opens the browser, recommended)
+bricks auth login
 
-# Or login with your workspace token directly
-bricks auth login-token -t <your-workspace-token>
+# Select a workspace as the active profile
+bricks auth use-workspace
+
+# Workspace auth for CI/automation: one-time passcode or token
+bricks auth login-workspace <passcode>
+bricks auth login-workspace --token <your-workspace-token>
 
 # Check connection status
 bricks auth status
@@ -44,54 +48,78 @@ bricks media boxes
 
 ## Authentication Methods
 
-### Method 1: One-Time Passcode (Recommended)
+### Method 1: OAuth Sign-in (Recommended)
 
-The easiest way to authenticate is using a one-time passcode:
+Sign in with your BRICKS account — the CLI opens your browser (Authorization
+Code + PKCE against Auth0) and keeps the session refreshed automatically:
 
-1. Go to [BRICKS Controller](https://control.bricks.tools)
-2. Navigate to Workspace Settings > API Token
-3. Click "Create CLI Passcode"
-4. Use the passcode in the CLI:
-   ```bash
-   bricks auth login <passcode>
-   ```
+```bash
+bricks auth login              # opens the browser
+bricks auth login --no-browser # device-code flow for SSH/headless terminals
+```
 
-The passcode is valid for 5 minutes and can only be used once. This method is more secure as you don't need to copy/paste long tokens.
+Only one account can be signed in at a time; signing in again replaces the
+identity (saved profiles are kept). After signing in, pick which workspaces to
+work with — each becomes a profile:
 
-### Method 2: Direct Token
+```bash
+bricks auth workspaces         # list workspaces your account can access
+bricks auth use-workspace      # interactive picker (or pass an id/name)
+```
+
+OAuth profiles authorize by your role in the workspace — the same permissions
+you have in the web controller. `bricks auth logout` revokes the session;
+profiles remain and reactivate on the next login.
+
+> Note: OAuth login requires the Auth0 native client to be configured in the
+> build (or `BRICKS_OAUTH_CLIENT_ID`). Until then, use workspace auth below.
+
+### Method 2: Workspace Auth (CI / automation)
 
-You can also login with a workspace token directly:
+Workspace tokens are scoped, self-contained credentials — ideal for CI:
 
 1. Go to [BRICKS Controller](https://control.bricks.tools)
 2. Navigate to Workspace Settings > API Token
-3. Generate a new token with the required permissions
-4. Use the token in the CLI:
+3. Click "Generate OTP" (valid 5 minutes, single use) or create a token
+4. Use it in the CLI:
    ```bash
-   bricks auth login-token -t <your-workspace-token>
+   bricks auth login-workspace <passcode>
+   bricks auth login-workspace --token <your-workspace-token>
    ```
 
+> `bricks auth login <passcode>` remains as a deprecated alias for
+> `bricks auth login-workspace <passcode>`; `bricks auth login` without a
+> passcode now performs the OAuth browser sign-in. `login-token` is also deprecated.
+
 ## Commands
 
 ### Authentication
 
 ```bash
-# Login with one-time passcode (recommended)
-bricks auth login <passcode> [-p profile-name]
+# Sign in with your BRICKS account (OAuth via browser)
+bricks auth login [--no-browser]
+
+# List workspaces / select one as the active profile
+bricks auth workspaces [-j|--json]
+bricks auth use-workspace [workspace] [-p profile-name]
 
-# Login with token
-bricks auth login-token -t <token> [-p profile-name]
+# Workspace auth (one-time passcode or token)
+bricks auth login-workspace [passcode] [--token <token>] [-p profile-name]
 
 # Check status
 bricks auth status [-j|--json]
 
-# List all profiles
+# List all profiles (kind: oauth | token)
 bricks auth list
 
 # Switch profile
 bricks auth use <profile-name>
 
-# Logout
-bricks auth logout [-p profile-name] [--all]
+# Sign out of the OAuth session (profiles are kept; --all removes them too)
+bricks auth logout [--all]
+
+# Remove a saved profile
+bricks auth remove <profile-name>
 
 # Set custom API URL
 bricks auth set-url <url>

package/lib/1001.js

@@ -0,0 +1 @@
+import*as e from"ink";import*as r from"react";import*as o from"react/jsx-runtime";export const __rspack_esm_id=1001;export const __rspack_esm_ids=[1001];export const __webpack_modules__={8498(r){r.exports=e},51649(e){e.exports=r},71178(e){e.exports=o},52928(e,r,o){o.r(r),o.d(r,{WorkspacePicker:()=>l,applyWorkspaceSearchInput:()=>i,filterWorkspaces:()=>a});var t=o(68832),s=o(51649),c=o(8498),n=o(71178),a=(e,r)=>{var o=r.trim().toLowerCase();return o?e.filter(e=>[e.name,e._id].some(e=>String(e||"").toLowerCase().includes(o))):e},i=(e,r,o={})=>o.backspace||o.delete?e.slice(0,-1):!r||o.ctrl||o.meta?e:e+r,l=({workspaces:e,onSelect:r,onCancel:o})=>{var l=t((0,s.useState)(""),2),x=l[0],d=l[1],p=t((0,s.useState)(0),2),m=p[0],h=p[1],u=(0,s.useMemo)(()=>a(e,x),[e,x]);(0,c.useInput)((e,t)=>{if(t.escape)return void o();if(t.upArrow||t.downArrow){if(0===u.length)return;var s=t.upArrow?-1:1;h(e=>(e+s+u.length)%u.length);return}if(t.return){var c=u[m];c&&r(c);return}var n=i(x,e,t);n!==x&&(d(n),h(0))});var j=Math.min(Math.max(m-Math.floor(5),0),Math.max(u.length-10,0)),_=u.slice(j,j+10);return(0,n.jsxs)(c.Box,{flexDirection:"column",children:[(0,n.jsx)(c.Text,{bold:!0,children:"Select a workspace"}),(0,n.jsxs)(c.Box,{marginTop:1,children:[(0,n.jsx)(c.Text,{children:"Search: "}),x?(0,n.jsx)(c.Text,{color:"cyan",children:x}):(0,n.jsx)(c.Text,{dimColor:!0,children:"Name or workspace ID"}),(0,n.jsx)(c.Text,{inverse:!0,children:" "})]}),(0,n.jsx)(c.Box,{marginTop:1,flexDirection:"column",children:_.length>0?_.map((e,r)=>{var o=j+r===m;return(0,n.jsxs)(c.Box,{children:[(0,n.jsx)(c.Text,{color:o?"cyan":void 0,children:o?"❯ ":"  "}),(0,n.jsx)(c.Text,{color:o?"cyan":void 0,children:e.name}),(0,n.jsxs)(c.Text,{dimColor:!0,children:[" ",e._id]})]},e._id)}):(0,n.jsx)(c.Text,{color:"yellow",children:"No matching workspaces"})}),(0,n.jsx)(c.Box,{marginTop:1,children:(0,n.jsx)(c.Text,{dimColor:!0,children:"Type anywhere to search \xb7 ↑/↓ navigate \xb7 Enter select \xb7 Esc cancel"})})]})}}};