@keystrokehq/cli 0.0.103 → 0.0.105

package/README.md

@@ -35,7 +35,7 @@ keystroke auth logout
 | `platformUrl` | `https://api.keystroke.ai` | Platform API (direct; used by CLI platform commands)             |
 | `serverUrl`   | `http://localhost:3001`    | Local keystroke server API (`keystroke dev` / `keystroke start`) |
 
-`auth login` persists both `webUrl` and `platformUrl`. Local dev: `--web-url http://localhost:3000` (platform URL resolves to `http://localhost:3002`). Cloud auth does not change `serverUrl` — local project commands still hit your dev server.
+`auth login` persists both `webUrl` and `platformUrl`. Omit `--web-url` to always reset to production defaults (`https://app.keystroke.ai` / `https://api.keystroke.ai`), even if a previous login pointed at localhost. Local dev: `--web-url http://localhost:3000` (platform URL resolves to `http://localhost:3002`). Cloud auth does not change `serverUrl` — local project commands still hit your dev server.
 
 Existing commands do not require auth yet. Use `resolveCliAuth()` when adding protected commands.
 

package/dist/index.mjs

@@ -11278,8 +11278,6 @@ async function syncActiveOrganizationAfterLogin(config, options = {}) {
 		process.stdout.write(`Using organization ${membership.organization.name}\n`);
 		return membership;
 	}
-	const webUrl = getWebUrl(config).replace(/\/+$/, "");
-	options.openUrl?.(`${webUrl}/organization/selection?from=cli`);
 	const membership = await pickOrganization(config, organizations);
 	process.stdout.write(`Using organization ${membership.organization.name}\n`);
 	return membership;
@@ -13430,15 +13428,23 @@ async function getSessionWithBearer(baseURL, accessToken) {
 	};
 }
 //#endregion
+//#region src/auth/resolve-login-targets.ts
+function resolveAuthLoginTargets(options, config) {
+	const webUrl = options.webUrl ?? "https://app.keystroke.ai";
+	return {
+		webUrl,
+		platformUrl: resolvePlatformUrlForWebUrl(webUrl, {
+			platformUrl: options.platformUrl,
+			fallback: options.webUrl ? getPlatformUrl(config) : DEFAULT_PLATFORM_URL
+		})
+	};
+}
+//#endregion
 //#region src/commands/auth/login.ts
 function registerAuthLoginCommand(auth) {
-	auth.command("login").description("Authenticate via browser device flow").option("--web-url <url>", "Web dashboard origin (default from config)").option("--platform-url <url>", "Platform API origin (derived from web URL when omitted)").option("--org <id>", "Active organization id (skips prompt when you belong to several)").action(async (options) => {
+	auth.command("login").description("Authenticate via browser device flow").option("--web-url <url>", "Web dashboard origin (omit to use production defaults; local dev: http://localhost:3000)").option("--platform-url <url>", "Platform API origin (derived from web URL when omitted)").option("--org <id>", "Active organization id (skips prompt when you belong to several)").action(async (options) => {
 		const config = createCliConfig();
-		const webUrl = options.webUrl ?? getWebUrl(config);
-		const platformUrl = resolvePlatformUrlForWebUrl(webUrl, {
-			platformUrl: options.platformUrl,
-			fallback: getPlatformUrl(config)
-		});
+		const { webUrl, platformUrl } = resolveAuthLoginTargets(options, config);
 		config.set("webUrl", webUrl);
 		config.set("platformUrl", platformUrl);
 		try {
@@ -13451,10 +13457,7 @@ function registerAuthLoginCommand(auth) {
 			const user = await getSessionWithBearer(webUrl, result.accessToken);
 			if (user) process.stdout.write(`Logged in as ${user.name} (${user.email})\n`);
 			else process.stdout.write(`Logged in to ${webUrl}\n`);
-			await syncActiveOrganizationAfterLogin(config, {
-				organizationId: options.org,
-				openUrl
-			});
+			await syncActiveOrganizationAfterLogin(config, { organizationId: options.org });
 		} catch (error) {
 			process.stderr.write(`${formatCliError(error, "Login failed", { webUrl })}\n`);
 			process.exitCode = 1;