@insforge/cli 0.1.55 → 0.1.58

package/dist/index.js

@@ -539,6 +539,9 @@ To sign in, open this URL in your browser:
 
 // src/lib/credentials.ts
 import * as clack3 from "@clack/prompts";
+function isPatLogin(creds) {
+  return creds?.refresh_token?.startsWith("uak_") ?? false;
+}
 async function requireAuth(apiUrl, allowOssBypass = true) {
   const projConfig = getProjectConfig();
   if (allowOssBypass && projConfig?.project_id === FAKE_PROJECT_ID) {
@@ -556,6 +559,10 @@ async function requireAuth(apiUrl, allowOssBypass = true) {
   }
   const creds = getCredentials();
   if (creds && creds.access_token) return creds;
+  if (isPatLogin(creds)) {
+    await refreshAccessToken(apiUrl);
+    return getCredentials();
+  }
   clack3.log.info("You need to log in to continue.");
   for (; ; ) {
     try {
@@ -573,10 +580,43 @@ async function requireAuth(apiUrl, allowOssBypass = true) {
 }
 async function refreshAccessToken(apiUrl) {
   const creds = getCredentials();
-  if (!creds?.refresh_token) {
-    throw new AuthError("Refresh token not found. Run `npx @insforge/cli login` again.");
+  if (!creds) {
+    throw new AuthError("Not logged in. Run `npx @insforge/cli login` first.");
   }
   const platformUrl = getPlatformApiUrl(apiUrl);
+  if (isPatLogin(creds)) {
+    let res;
+    try {
+      res = await fetch(`${platformUrl}/auth/v1/exchange-api-key`, {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify({ apiKey: creds.refresh_token })
+      });
+    } catch {
+      throw new AuthError(
+        `Unable to reach auth server at ${platformUrl}. Check your network connection.`
+      );
+    }
+    if (!res.ok) {
+      if (res.status === 401 || res.status === 403 || res.status === 404) {
+        throw new AuthError(
+          "API key is invalid or revoked. Run `npx @insforge/cli login --user-api-key <new-key>` again."
+        );
+      }
+      throw new AuthError(
+        `Auth server returned HTTP ${res.status} while refreshing session. Please retry shortly.`
+      );
+    }
+    const data = await res.json().catch(() => ({}));
+    if (typeof data.token !== "string" || data.token.length === 0) {
+      throw new AuthError("Exchange endpoint returned an invalid response (missing token).");
+    }
+    saveCredentials({ ...creds, access_token: data.token });
+    return data.token;
+  }
+  if (!creds.refresh_token) {
+    throw new AuthError("Refresh token not found. Run `npx @insforge/cli login` again.");
+  }
   const config = getGlobalConfig();
   const clientId = config.oauth_client_id ?? DEFAULT_CLIENT_ID;
   try {
@@ -774,10 +814,12 @@ async function createProject(orgId, name, region, apiUrl) {
 
 // src/commands/login.ts
 function registerLoginCommand(program2) {
-  program2.command("login").description("Authenticate with InsForge platform").option("--email", "Login with email and password instead of browser").option("--client-id <id>", "OAuth client ID (defaults to insforge-cli)").action(async (opts, cmd) => {
+  program2.command("login").description("Authenticate with InsForge platform").option("--email", "Login with email and password instead of browser").option("--client-id <id>", "OAuth client ID (defaults to insforge-cli)").option("--user-api-key <key>", "Authenticate with a uak_ personal access token").action(async (opts, cmd) => {
     const { json, apiUrl } = getRootOpts(cmd);
     try {
-      if (opts.email) {
+      if (opts.userApiKey) {
+        await loginWithUserApiKey(opts.userApiKey, json, apiUrl);
+      } else if (opts.email) {
         await loginWithEmail(json, apiUrl);
       } else {
         await loginWithOAuth(json, apiUrl);
@@ -846,6 +888,78 @@ async function loginWithOAuth(json, apiUrl) {
     console.log(JSON.stringify({ success: true, user: creds.user }));
   }
 }
+async function loginWithUserApiKey(key, json, apiUrl) {
+  if (!json) {
+    clack4.intro("InsForge CLI");
+  }
+  if (!key.startsWith("uak_")) {
+    throw new CLIError('Invalid API key \u2014 must start with "uak_".');
+  }
+  const s = !json ? clack4.spinner() : null;
+  s?.start("Verifying API key...");
+  let jwt;
+  let user;
+  try {
+    const exchanged = await exchangePatForJwt(key, apiUrl);
+    jwt = exchanged.token;
+    user = exchanged.user;
+  } catch (err) {
+    s?.stop("API key verification failed");
+    throw err instanceof CLIError ? err : new CLIError(err instanceof Error ? err.message : String(err));
+  }
+  saveCredentials({
+    access_token: jwt,
+    refresh_token: key,
+    user
+  });
+  if (!json) {
+    s?.stop(`Authenticated as ${user.email}`);
+    clack4.outro("Done");
+  } else {
+    console.log(JSON.stringify({ success: true, user }));
+  }
+}
+async function exchangePatForJwt(apiKey, apiUrl) {
+  const baseUrl = getPlatformApiUrl(apiUrl);
+  const fullUrl = `${baseUrl}/auth/v1/exchange-api-key`;
+  let res;
+  try {
+    res = await fetch(fullUrl, {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify({ apiKey })
+    });
+  } catch (err) {
+    throw new CLIError(formatFetchError(err, fullUrl));
+  }
+  if (!res.ok) {
+    const body = await res.json().catch(() => ({}));
+    const msg = body.message ?? body.error ?? `HTTP ${res.status}`;
+    throw new CLIError(`API key is invalid or revoked: ${msg}`);
+  }
+  const data = await res.json().catch(() => ({}));
+  if (typeof data.token !== "string" || data.token.length === 0) {
+    throw new CLIError("Exchange endpoint returned an invalid response (missing token).");
+  }
+  const jwt = data.token;
+  let profileRes;
+  try {
+    profileRes = await fetch(`${baseUrl}/auth/v1/profile`, {
+      headers: { Authorization: `Bearer ${jwt}` }
+    });
+  } catch (err) {
+    throw new CLIError(formatFetchError(err, `${baseUrl}/auth/v1/profile`));
+  }
+  if (!profileRes.ok) {
+    throw new CLIError(`Exchange succeeded but could not fetch profile: HTTP ${profileRes.status}`);
+  }
+  const profile = await profileRes.json().catch(() => null);
+  const user = profile && typeof profile === "object" && "user" in profile ? profile.user : profile ?? void 0;
+  if (!user) {
+    throw new CLIError("Exchange succeeded but profile response was empty");
+  }
+  return { token: jwt, user };
+}
 
 // src/lib/output.ts
 import Table from "cli-table3";
@@ -1123,7 +1237,7 @@ async function reportCliUsage(toolName, success, maxRetries = 1, explicitConfig)
 
 // src/lib/analytics.ts
 import { PostHog } from "posthog-node";
-var POSTHOG_API_KEY = "";
+var POSTHOG_API_KEY = "phc_ueV1ii62wdBTkH7E70ugyeqHIHu8dFDdjs0qq3TZhJz";
 var POSTHOG_HOST = process.env.POSTHOG_HOST || "https://us.i.posthog.com";
 var client = null;
 function getClient() {
@@ -1208,10 +1322,11 @@ async function ossFetch(path5, options = {}) {
       message += `
 ${err.nextActions}`;
     }
-    if (res.status === 404 && path5.startsWith("/api/compute")) {
+    const isRouteLevel404 = !err.error || err.error === "NOT_FOUND";
+    if (res.status === 404 && isRouteLevel404 && path5.startsWith("/api/compute")) {
       message = "Compute services are not available on this backend.\nSelf-hosted: upgrade your InsForge instance. Cloud: contact your InsForge admin to enable compute.";
     }
-    if (res.status === 404 && path5 === "/api/database/migrations") {
+    if (res.status === 404 && isRouteLevel404 && path5 === "/api/database/migrations") {
       message = "Database migrations are not available on this backend.\nSelf-hosted: upgrade your InsForge instance. Cloud: contact your InsForge admin about database migration support.";
     }
     throw new CLIError(message);
@@ -2131,7 +2246,11 @@ function buildOssHost2(appkey, region) {
 function registerProjectLinkCommand(program2) {
   program2.command("link").description("Link current directory to an InsForge project").option("--project-id <id>", "Project ID to link").option("--org-id <id>", "Organization ID").option("--template <template>", "Download a template after linking: react, nextjs, chatbot, crm, e-commerce, todo").option("--api-base-url <url>", "API Base URL for direct linking (OSS/Self-hosted)").option("--api-key <key>", "API Key for direct linking (OSS/Self-hosted)").action(async (opts, cmd) => {
     const { json, apiUrl } = getRootOpts(cmd);
+    const validTemplates = ["react", "nextjs", "chatbot", "crm", "e-commerce", "todo"];
     try {
+      if (opts.template && !validTemplates.includes(opts.template)) {
+        throw new CLIError(`Invalid template "${opts.template}". Valid options: ${validTemplates.join(", ")}`);
+      }
       if (opts.apiBaseUrl || opts.apiKey) {
         try {
           if (!opts.apiBaseUrl || !opts.apiKey) {
@@ -2152,6 +2271,84 @@ function registerProjectLinkCommand(program2) {
             oss_host: opts.apiBaseUrl.replace(/\/$/, "")
             // remove trailing slash if any
           };
+          const template2 = opts.template;
+          if (template2) {
+            const defaultDir = `insforge-${template2}`;
+            let dirName = defaultDir;
+            if (!json) {
+              const inputDir = await text2({
+                message: "Directory name:",
+                initialValue: defaultDir,
+                validate: (v) => {
+                  if (v.length < 1) return "Directory name is required";
+                  const normalized = path4.basename(v).replace(/[^a-zA-Z0-9._-]/g, "-");
+                  if (!normalized || normalized === "." || normalized === "..") return "Invalid directory name";
+                  return void 0;
+                }
+              });
+              if (isCancel2(inputDir)) process.exit(0);
+              dirName = path4.basename(inputDir).replace(/[^a-zA-Z0-9._-]/g, "-");
+            }
+            if (!dirName || dirName === "." || dirName === "..") {
+              throw new CLIError("Invalid directory name.");
+            }
+            const templateDir = path4.resolve(process.cwd(), dirName);
+            const dirExists = await fs4.stat(templateDir).catch(() => null);
+            if (dirExists) {
+              throw new CLIError(`Directory "${dirName}" already exists.`);
+            }
+            await fs4.mkdir(templateDir);
+            process.chdir(templateDir);
+            saveProjectConfig(projectConfig2);
+            if (json) {
+              outputJson({
+                success: true,
+                project: { id: projectConfig2.project_id, name: projectConfig2.project_name, region: projectConfig2.region },
+                directory: dirName,
+                template: template2
+              });
+            } else {
+              outputSuccess(`Linked to direct project at ${projectConfig2.oss_host}`);
+            }
+            captureEvent(FAKE_ORG_ID, "template_selected", { template: template2, source: "link_direct" });
+            await downloadGitHubTemplate(template2, projectConfig2, json);
+            const templateDownloaded = await fs4.stat(path4.join(process.cwd(), "package.json")).catch(() => null);
+            if (templateDownloaded && !json) {
+              const installSpinner = clack8.spinner();
+              installSpinner.start("Installing dependencies...");
+              try {
+                await execAsync3("npm install", { cwd: process.cwd(), maxBuffer: 10 * 1024 * 1024 });
+                installSpinner.stop("Dependencies installed");
+              } catch (err) {
+                installSpinner.stop("Failed to install dependencies");
+                clack8.log.warn(`npm install failed: ${err.message}`);
+                clack8.log.info("Run `npm install` manually to install dependencies.");
+              }
+            }
+            await installSkills(json);
+            trackCommand("link", "oss-org", { direct: true, template: template2 });
+            await reportCliUsage("cli.link_direct", true, 6, projectConfig2);
+            try {
+              const urlMatch = opts.apiBaseUrl.match(/^https?:\/\/([^.]+)\.[^.]+\.insforge\.app/);
+              if (urlMatch) {
+                await reportAgentConnected({ app_key: urlMatch[1] }, apiUrl);
+              }
+            } catch {
+            }
+            if (!json) {
+              if (templateDownloaded) {
+                const runCommand = `${pc2.cyan("cd")} ${pc2.green(dirName)} ${pc2.dim("&&")} ${pc2.cyan("npm run dev")}`;
+                const steps = [
+                  `${pc2.bold("1.")} ${runCommand}`,
+                  `${pc2.bold("2.")} Open ${pc2.cyan("Claude Code")} or ${pc2.cyan("Cursor")} and prompt your agent to add more features`
+                ];
+                clack8.note(steps.join("\n"), "What's next");
+              } else {
+                clack8.log.warn("Template download failed. You can retry or set up manually.");
+              }
+            }
+            return;
+          }
           saveProjectConfig(projectConfig2);
           if (json) {
             outputJson({ success: true, project: { id: projectConfig2.project_id, name: projectConfig2.project_name, region: projectConfig2.region } });
@@ -2264,10 +2461,6 @@ function registerProjectLinkCommand(program2) {
       }
       const template = opts.template;
       if (template) {
-        const validTemplates = ["react", "nextjs", "chatbot", "crm", "e-commerce", "todo"];
-        if (!validTemplates.includes(template)) {
-          throw new CLIError(`Invalid template "${template}". Valid options: ${validTemplates.join(", ")}`);
-        }
         let dirName = project.name;
         if (!json) {
           const inputDir = await text2({
@@ -2295,12 +2488,7 @@ function registerProjectLinkCommand(program2) {
         process.chdir(templateDir);
         saveProjectConfig(projectConfig);
         captureEvent(orgId ?? project.organization_id, "template_selected", { template, source: "link" });
-        const githubTemplates = ["chatbot", "crm", "e-commerce", "nextjs", "react", "todo"];
-        if (githubTemplates.includes(template)) {
-          await downloadGitHubTemplate(template, projectConfig, json);
-        } else {
-          await downloadTemplate(template, projectConfig, project.name, json, apiUrl);
-        }
+        await downloadGitHubTemplate(template, projectConfig, json);
         const templateDownloaded = await fs4.stat(path4.join(process.cwd(), "package.json")).catch(() => null);
         if (templateDownloaded && !json) {
           const installSpinner = clack8.spinner();
@@ -5529,7 +5717,7 @@ function registerDiagnoseCommands(diagnoseCmd2) {
         const s = !json ? clack10.spinner() : null;
         s?.start("Collecting diagnostic data...");
         const data2 = await collectDiagnosticData(projectId, ossMode, apiUrl);
-        const cliVersion = "0.1.55";
+        const cliVersion = "0.1.58";
         s?.stop("Data collected");
         if (!json) {
           console.log(`