@glash/cli 0.2.38 → 0.2.39

package/commands/login.mjs

@@ -7,6 +7,17 @@ import { prompt, ok, fail, info, warn, color } from '../lib/ui.mjs';
 
 const sleep = (ms) => new Promise((r) => setTimeout(r, ms));
 
+async function identityPost(path, body, opts) {
+  try {
+    return await apiPost(`/identity${path}`, body, opts);
+  } catch (e) {
+    if (e?.status === 404) {
+      return apiPost(`/auth${path}`, body, opts);
+    }
+    throw e;
+  }
+}
+
 function openBrowser(url) {
   try {
     const opener = platform === 'darwin' ? 'open' : platform === 'win32' ? 'cmd' : 'xdg-open';
@@ -29,7 +40,7 @@ export async function login({ flags }) {
 async function browserLogin(flags) {
   let start;
   try {
-    start = await apiPost('/auth/cli/device/start', { deviceName: hostname() });
+    start = await identityPost('/cli/device/start', { deviceName: hostname() });
   } catch (e) {
     // Older backend without device auth — fall back to password login.
     warn('Browser login is unavailable; falling back to email/password.');
@@ -60,7 +71,7 @@ async function browserLogin(flags) {
       await sleep(delay);
       let r;
       try {
-        r = await apiPost('/auth/cli/device/poll', { deviceCode });
+        r = await identityPost('/cli/device/poll', { deviceCode });
       } catch (e) {
         return fail(e.message);
       }
@@ -84,16 +95,16 @@ async function passwordLogin(flags) {
   if (!email || !password) return fail('email and password required');
 
   try {
-    let r = await apiPost('/auth/login', { email, password });
+    let r = await identityPost('/login', { email, password });
 
     // Second factor is always required. Complete the email-OTP challenge.
     if (!r?.accessToken && r?.secondFactorRequired && !r?.challengeId) {
-      r = await apiPost('/auth/login', { email, password, secondFactorMethod: 'email_otp' });
+      r = await identityPost('/login', { email, password, secondFactorMethod: 'email_otp' });
     }
     if (!r?.accessToken && (r?.otpRequired || r?.challengeId)) {
       const code = flags.otp || (await prompt('Enter the 6-digit code sent to your email: '));
       if (!code) throw new Error('A verification code is required to sign in.');
-      r = await apiPost('/auth/login', {
+      r = await identityPost('/login', {
         email,
         password,
         emailOtpCode: String(code).trim(),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@glash/cli",
-  "version": "0.2.38",
+  "version": "0.2.39",
   "description": "glashDB command-line interface — deploy projects, pull source + env, manage env vars.",
   "license": "Apache-2.0",
   "homepage": "https://glashdb.com",