@glasshome/widget-cli 0.4.11 → 0.4.12

package/bin/cli.ts

@@ -66,7 +66,12 @@ const { values: flags, positionals } = parseArgs({
   strict: false,
 });
 
-const explicitDir = flags.dir;
+// strict:false widens every flag to string | boolean | undefined; a bare
+// `--flag` with no value parses as `true`, which no string option accepts.
+const str = (v: string | boolean | undefined): string | undefined =>
+  typeof v === "string" ? v : undefined;
+
+const explicitDir = str(flags.dir);
 const [command, ...args] = positionals;
 
 if (command === "help" || flags.help) {
@@ -144,9 +149,9 @@ switch (effectiveCommand) {
     const hubUrlArg = args[0];
     const { runPublish } = await import("../src/commands/publish");
     await runPublish(resolveWidgetDir(), hubUrlArg, {
-      name: flags.name,
-      bump: flags.bump as "keep" | "patch" | "minor" | "major" | undefined,
-      scope: flags.scope,
+      name: str(flags.name),
+      bump: str(flags.bump) as "keep" | "patch" | "minor" | "major" | undefined,
+      scope: str(flags.scope),
     });
     outro("Done");
     break;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@glasshome/widget-cli",
-  "version": "0.4.11",
+  "version": "0.4.12",
   "description": "CLI for creating and managing GlassHome widgets",
   "type": "module",
   "bin": {

package/src/commands/connect.ts

@@ -216,19 +216,19 @@ export async function runConnect(apiUrl: string, cwd: string): Promise<void> {
           });
 
           if (res.ok) {
-            // better-auth's device-authorization plugin returns a
-            // first-party session, not an OIDC token bundle. The bearer is
-            // session.token; expiry is session.expiresAt (ISO/epoch/Date).
+            // better-auth's device-authorization plugin returns an OAuth-style
+            // bundle: { access_token, token_type, expires_in, scope }. The
+            // access_token IS the first-party session token.
             const data = (await res.json()) as {
-              session?: { token: string; expiresAt: string | number | Date };
-              user?: unknown;
+              access_token?: string;
+              expires_in?: number;
             };
-            if (!data.session?.token) {
+            if (!data.access_token) {
               s.stop("Auth response missing session token");
               break;
             }
-            token = data.session.token;
-            const tokenExpiresAt = new Date(data.session.expiresAt).getTime();
+            token = data.access_token;
+            const tokenExpiresAt = Date.now() + (data.expires_in ?? 0) * 1000;
             storeHostToken(host, token, tokenExpiresAt);
             break;
           }