@indigoai-us/hq-cli 5.72.0 → 5.73.0

package/dist/commands/outposts.d.ts

@@ -73,6 +73,13 @@ export declare function listOutposts(token: string): Promise<OutpostSummary[]>;
 export declare function getOutpostStatus(token: string, outpostId?: string): Promise<Record<string, unknown>>;
 export declare function enableCodex(token: string, outpostId?: string): Promise<Record<string, unknown>>;
 export declare function regenerateLoginUrl(token: string, outpostId?: string): Promise<Record<string, unknown>>;
+/**
+ * Hand the box the one-time Claude sign-in code the operator got from the login
+ * URL. hq-pro stores it as the row's pending code; the box polls for it, feeds
+ * it to `claude`, and flips itself `awaiting-claude-login → ready`. This is the
+ * terminal-native equivalent of pasting the code into the web console.
+ */
+export declare function submitLoginCode(token: string, code: string, outpostId?: string): Promise<Record<string, unknown>>;
 export declare function destroyOutpost(token: string, outpostId?: string): Promise<Record<string, unknown>>;
 /** Result of `POST /outpost/exec` — a terminal SSM invocation on the box. */
 export interface OutpostExecResult {

package/dist/commands/outposts.js

@@ -116,6 +116,21 @@ export async function regenerateLoginUrl(token, outpostId) {
         query: outpostId ? { outpostId } : undefined,
     });
 }
+/**
+ * Hand the box the one-time Claude sign-in code the operator got from the login
+ * URL. hq-pro stores it as the row's pending code; the box polls for it, feeds
+ * it to `claude`, and flips itself `awaiting-claude-login → ready`. This is the
+ * terminal-native equivalent of pasting the code into the web console.
+ */
+export async function submitLoginCode(token, code, outpostId) {
+    return outpostRequest({
+        token,
+        path: "/outpost/login-code",
+        method: "POST",
+        body: { code },
+        query: outpostId ? { outpostId } : undefined,
+    });
+}
 export async function destroyOutpost(token, outpostId) {
     return outpostRequest({
         token,
@@ -1011,8 +1026,40 @@ export function registerOutpostsCommand(program, selfDeployOverrides = {}) {
                 process.stdout.write(JSON.stringify(result, null, 2) + "\n");
                 return;
             }
-            console.log(chalk.green("Login-URL regeneration requested. The box mints a fresh URL shortly — " +
-                "check `hq outposts status` to pick it up."));
+            console.log(chalk.green("Login-URL regeneration requested. The box mints a fresh URL shortly."));
+            console.log(chalk.dim("Next: `hq outposts status" +
+                (opts.id ? ` --id ${opts.id}` : "") +
+                "` to read the login URL, open it and sign in, then paste the code back with " +
+                "`hq outposts login-code <code>" +
+                (opts.id ? ` --id ${opts.id}` : "") +
+                "`."));
+        }
+        catch (err) {
+            fail(err);
+        }
+    });
+    outposts
+        .command("login-code <code>")
+        .description("Submit the Claude sign-in code for an Outpost that is awaiting login")
+        .option("--id <outpostId>", "Outpost id (defaults to your primary box)")
+        .option("--json", "Emit raw JSON")
+        .action(async function (code, opts) {
+        try {
+            const trimmed = code.trim();
+            if (!trimmed) {
+                console.error(chalk.red("Provide the sign-in code: hq outposts login-code <code>"));
+                process.exit(1);
+            }
+            const token = await ensureCognitoToken();
+            const result = await submitLoginCode(token, trimmed, opts.id);
+            if (opts.json) {
+                process.stdout.write(JSON.stringify(result, null, 2) + "\n");
+                return;
+            }
+            console.log(chalk.green("Code submitted — the box will finish signing in shortly."));
+            console.log(chalk.dim("Track it: `hq outposts status" +
+                (opts.id ? ` --id ${opts.id}` : "") +
+                "` (it flips to `ready` once Claude auth completes)."));
         }
         catch (err) {
             fail(err);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@indigoai-us/hq-cli",
-  "version": "5.72.0",
+  "version": "5.73.0",
   "description": "HQ by Indigo management CLI — modules and cloud sync",
   "main": "dist/index.js",
   "bin": {

package/src/commands/outposts.test.ts

@@ -171,6 +171,38 @@ describe("hq outposts codex-enable / login", () => {
     expect(String(url)).toContain("/outpost/regenerate-login-url");
     expect(init?.method).toBe("POST");
   });
+
+  it("login-code POSTs /outpost/login-code with the code in the body", async () => {
+    fetchSpy.mockResolvedValueOnce(jsonResponse(200, { ok: true, userId: "u1" }));
+    await run(["outposts", "login-code", "ABC-123"]);
+    const [url, init] = fetchSpy.mock.calls[0];
+    expect(String(url)).toContain("/outpost/login-code");
+    expect(init?.method).toBe("POST");
+    expect(JSON.parse(String(init?.body))).toEqual({ code: "ABC-123" });
+  });
+
+  it("login-code targets a specific box via --id (outpostId query)", async () => {
+    fetchSpy.mockResolvedValueOnce(jsonResponse(200, { ok: true, userId: "u1" }));
+    await run(["outposts", "login-code", "CODE", "--id", "3"]);
+    const [url] = fetchSpy.mock.calls[0];
+    expect(String(url)).toContain("outpostId=3");
+  });
+
+  it("login-code trims whitespace and refuses an empty code without calling the API", async () => {
+    await expect(run(["outposts", "login-code", "   "])).rejects.toThrow(
+      "process.exit(1)",
+    );
+    expect(fetchSpy).not.toHaveBeenCalled();
+  });
+
+  it("login-code surfaces an awaiting-login not-found error", async () => {
+    fetchSpy.mockResolvedValueOnce(
+      jsonResponse(404, { error: true, step: "not-found", message: "no outpost" }),
+    );
+    await expect(run(["outposts", "login-code", "CODE"])).rejects.toThrow(
+      "process.exit(1)",
+    );
+  });
 });
 
 describe("hq outposts destroy", () => {

package/src/commands/outposts.ts

@@ -182,6 +182,26 @@ export async function regenerateLoginUrl(
   });
 }
 
+/**
+ * Hand the box the one-time Claude sign-in code the operator got from the login
+ * URL. hq-pro stores it as the row's pending code; the box polls for it, feeds
+ * it to `claude`, and flips itself `awaiting-claude-login → ready`. This is the
+ * terminal-native equivalent of pasting the code into the web console.
+ */
+export async function submitLoginCode(
+  token: string,
+  code: string,
+  outpostId?: string,
+): Promise<Record<string, unknown>> {
+  return outpostRequest({
+    token,
+    path: "/outpost/login-code",
+    method: "POST",
+    body: { code },
+    query: outpostId ? { outpostId } : undefined,
+  });
+}
+
 export async function destroyOutpost(
   token: string,
   outpostId?: string,
@@ -1450,8 +1470,58 @@ export function registerOutpostsCommand(
         }
         console.log(
           chalk.green(
-            "Login-URL regeneration requested. The box mints a fresh URL shortly — " +
-              "check `hq outposts status` to pick it up.",
+            "Login-URL regeneration requested. The box mints a fresh URL shortly.",
+          ),
+        );
+        console.log(
+          chalk.dim(
+            "Next: `hq outposts status" +
+              (opts.id ? ` --id ${opts.id}` : "") +
+              "` to read the login URL, open it and sign in, then paste the code back with " +
+              "`hq outposts login-code <code>" +
+              (opts.id ? ` --id ${opts.id}` : "") +
+              "`.",
+          ),
+        );
+      } catch (err) {
+        fail(err);
+      }
+    });
+
+  outposts
+    .command("login-code <code>")
+    .description(
+      "Submit the Claude sign-in code for an Outpost that is awaiting login",
+    )
+    .option("--id <outpostId>", "Outpost id (defaults to your primary box)")
+    .option("--json", "Emit raw JSON")
+    .action(async function (
+      this: Command,
+      code: string,
+      opts: { id?: string; json?: boolean },
+    ) {
+      try {
+        const trimmed = code.trim();
+        if (!trimmed) {
+          console.error(chalk.red("Provide the sign-in code: hq outposts login-code <code>"));
+          process.exit(1);
+        }
+        const token = await ensureCognitoToken();
+        const result = await submitLoginCode(token, trimmed, opts.id);
+        if (opts.json) {
+          process.stdout.write(JSON.stringify(result, null, 2) + "\n");
+          return;
+        }
+        console.log(
+          chalk.green(
+            "Code submitted — the box will finish signing in shortly.",
+          ),
+        );
+        console.log(
+          chalk.dim(
+            "Track it: `hq outposts status" +
+              (opts.id ? ` --id ${opts.id}` : "") +
+              "` (it flips to `ready` once Claude auth completes).",
           ),
         );
       } catch (err) {