@glash/cli 0.2.37 → 0.2.39

package/commands/deploy.mjs

@@ -711,12 +711,14 @@ function sourceUploadPartSize(value) {
 }
 
 function sourceUploadConcurrency(flags = {}) {
-  // Default 3: fewer simultaneous part uploads means each connection gets more of
-  // a constrained uplink and finishes before it can be reset mid-stream. Override
-  // with --source-concurrency or GLASH_SOURCE_UPLOAD_CONCURRENCY.
-  const raw = flags['source-concurrency'] ?? process.env.GLASH_SOURCE_UPLOAD_CONCURRENCY ?? '3';
+  // Default 4 — parts upload simultaneously and 4 is the measured throughput
+  // sweet spot: a single connection can't saturate a typical uplink (~2.5x
+  // speedup from parallelism), but past ~4 connections contention makes it
+  // slower and unreliable. Override with --source-concurrency or
+  // GLASH_SOURCE_UPLOAD_CONCURRENCY (capped at 8).
+  const raw = flags['source-concurrency'] ?? process.env.GLASH_SOURCE_UPLOAD_CONCURRENCY ?? '4';
   const parsed = Number(raw);
-  if (!Number.isFinite(parsed) || parsed < 1) return 3;
+  if (!Number.isFinite(parsed) || parsed < 1) return 4;
   return Math.max(1, Math.min(8, Math.floor(parsed)));
 }
 

package/commands/login.mjs

@@ -7,6 +7,17 @@ import { prompt, ok, fail, info, warn, color } from '../lib/ui.mjs';
 
 const sleep = (ms) => new Promise((r) => setTimeout(r, ms));
 
+async function identityPost(path, body, opts) {
+  try {
+    return await apiPost(`/identity${path}`, body, opts);
+  } catch (e) {
+    if (e?.status === 404) {
+      return apiPost(`/auth${path}`, body, opts);
+    }
+    throw e;
+  }
+}
+
 function openBrowser(url) {
   try {
     const opener = platform === 'darwin' ? 'open' : platform === 'win32' ? 'cmd' : 'xdg-open';
@@ -29,7 +40,7 @@ export async function login({ flags }) {
 async function browserLogin(flags) {
   let start;
   try {
-    start = await apiPost('/auth/cli/device/start', { deviceName: hostname() });
+    start = await identityPost('/cli/device/start', { deviceName: hostname() });
   } catch (e) {
     // Older backend without device auth — fall back to password login.
     warn('Browser login is unavailable; falling back to email/password.');
@@ -60,7 +71,7 @@ async function browserLogin(flags) {
       await sleep(delay);
       let r;
       try {
-        r = await apiPost('/auth/cli/device/poll', { deviceCode });
+        r = await identityPost('/cli/device/poll', { deviceCode });
       } catch (e) {
         return fail(e.message);
       }
@@ -84,16 +95,16 @@ async function passwordLogin(flags) {
   if (!email || !password) return fail('email and password required');
 
   try {
-    let r = await apiPost('/auth/login', { email, password });
+    let r = await identityPost('/login', { email, password });
 
     // Second factor is always required. Complete the email-OTP challenge.
     if (!r?.accessToken && r?.secondFactorRequired && !r?.challengeId) {
-      r = await apiPost('/auth/login', { email, password, secondFactorMethod: 'email_otp' });
+      r = await identityPost('/login', { email, password, secondFactorMethod: 'email_otp' });
     }
     if (!r?.accessToken && (r?.otpRequired || r?.challengeId)) {
       const code = flags.otp || (await prompt('Enter the 6-digit code sent to your email: '));
       if (!code) throw new Error('A verification code is required to sign in.');
-      r = await apiPost('/auth/login', {
+      r = await identityPost('/login', {
         email,
         password,
         emailOtpCode: String(code).trim(),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@glash/cli",
-  "version": "0.2.37",
+  "version": "0.2.39",
   "description": "glashDB command-line interface — deploy projects, pull source + env, manage env vars.",
   "license": "Apache-2.0",
   "homepage": "https://glashdb.com",