@keystrokehq/cli 0.0.2 → 0.0.3

package/dist/{auth-Byry35LJ.mjs → auth-CY0Gg9sN.mjs}

@@ -25,7 +25,7 @@ function createAuthCommand() {
 		description: "Authenticate Keystroke CLI via device flow",
 		schema: AuthOptionsSchema,
 		optionsConfig: AUTH_OPTIONS_CONFIG,
-		loadHandler: async () => (await import("./auth.handler-BBPObKwk.mjs")).handleAuth,
+		loadHandler: async () => (await import("./auth.handler-CbhiLOG1.mjs")).handleAuth,
 		subcommands: [
 			createTypedCommand({
 				name: "clear",

package/dist/{auth.handler-BBPObKwk.mjs → auth.handler-CbhiLOG1.mjs}

@@ -1,11 +1,13 @@
 #!/usr/bin/env node
 
-import { _ as AUTH_URL_PATH, b as CALLBACK_PATH, h as toErrorMessage, i as logger, t as ui, v as CALLBACK_LOOPBACK_HOST, x as CLI_AUTH_COMMAND, y as CALLBACK_LOOPBACK_ORIGIN } from "./keystroke.mjs";
+import { n as DEFAULT_CLI_WEB_URL, t as DEFAULT_CLI_SERVER_URL } from "./default-urls-BS4twrsS.mjs";
+import { C as CliExitError, _ as AUTH_URL_PATH, b as CALLBACK_PATH, h as toErrorMessage, i as logger, t as ui, v as CALLBACK_LOOPBACK_HOST, x as CLI_AUTH_COMMAND, y as CALLBACK_LOOPBACK_ORIGIN } from "./keystroke.mjs";
 import { f as upsertOrgCredentials, i as getCredentialsFilePath } from "./dist-BF6r1hfv.mjs";
 import { a as resolveCliWebUrl, i as resolveCliServerUrl } from "./env-YTZGKGIu.mjs";
 import { t as openBrowser } from "./browser-gddMccBQ.mjs";
 import { hostname } from "node:os";
 import { z } from "zod";
+import { confirm, isCancel } from "@clack/prompts";
 import { randomBytes } from "node:crypto";
 import { createServer } from "node:http";
 //#region src/commands/auth/device-auth.ts
@@ -237,6 +239,74 @@ async function createDeviceCallbackListener(expectedState, timeoutMs) {
 }
 //#endregion
 //#region src/commands/auth/auth.handler.ts
+const LOOPBACK_HOSTNAMES = new Set([
+	"localhost",
+	"127.0.0.1",
+	"::1"
+]);
+function isLoopbackUrl(rawUrl) {
+	try {
+		const parsed = new URL(rawUrl);
+		const host = parsed.hostname.startsWith("[") ? parsed.hostname.slice(1, -1) : parsed.hostname;
+		return LOOPBACK_HOSTNAMES.has(host);
+	} catch {
+		return false;
+	}
+}
+function resolveAuthHosts(options, ctx) {
+	const savedWeb = ctx.storedCredentials?.webUrl;
+	const savedServer = ctx.storedCredentials?.serverUrl;
+	const webUrl = resolveCliWebUrl(options.webUrl, savedWeb);
+	const serverUrl = resolveCliServerUrl(ctx.baseUrl);
+	return {
+		webUrl,
+		serverUrl,
+		webFromFlag: typeof options.webUrl === "string" && options.webUrl.length > 0,
+		webMatchesSaved: savedWeb === webUrl,
+		serverMatchesSaved: savedServer === serverUrl
+	};
+}
+function shouldConfirmLoopback(hosts) {
+	if (isLoopbackUrl("https://keystroke.ai") && isLoopbackUrl("https://api.kestroke.ai")) return false;
+	const webNeedsConfirm = !hosts.webFromFlag && isLoopbackUrl(hosts.webUrl);
+	const serverNeedsConfirm = isLoopbackUrl(hosts.serverUrl);
+	return webNeedsConfirm || serverNeedsConfirm;
+}
+function describeHostSource(matchesSaved, fromFlag = false) {
+	if (fromFlag) return "flag";
+	if (matchesSaved) return "saved credentials";
+	return "env or default";
+}
+function printResolvedHosts(hosts) {
+	ui.hint(`Web URL: ${hosts.webUrl} (${describeHostSource(hosts.webMatchesSaved, hosts.webFromFlag)})`);
+	ui.hint(`API URL: ${hosts.serverUrl} (${describeHostSource(hosts.serverMatchesSaved)})`);
+}
+async function confirmLoopbackHostsOrExit(hosts) {
+	ui.br();
+	ui.warn("About to authenticate against a local development environment");
+	if (hosts.webMatchesSaved || hosts.serverMatchesSaved) ui.hint(`Saved at: ${getCredentialsFilePath()} (from a previous keystroke auth run)`);
+	else ui.hint("Resolved from your environment (WEB_URL / SERVER_URL).");
+	ui.hint(`CLI default is ${DEFAULT_CLI_WEB_URL} / ${DEFAULT_CLI_SERVER_URL}.`);
+	ui.hint("To switch hosts:");
+	ui.hint(`  - Reset and re-auth: ${CLI_AUTH_COMMAND} clear, then ${CLI_AUTH_COMMAND}`);
+	ui.hint(`  - Override once: ${CLI_AUTH_COMMAND} --web-url <url> --server-url <url>`);
+	ui.br();
+	if (process.stdin.isTTY !== true) {
+		ui.warn("Non-interactive shell detected — continuing with the local URLs.");
+		return;
+	}
+	const proceed = await confirm({
+		message: "Continue signing in against these local URLs?",
+		initialValue: false
+	});
+	if (isCancel(proceed) || proceed !== true) {
+		ui.hint("Cancelled. No credentials were changed.");
+		throw new CliExitError("Auth cancelled by user.", {
+			exitCode: 0,
+			reported: true
+		});
+	}
+}
 function getVerificationCode(state) {
 	return state.slice(0, 8).toUpperCase();
 }
@@ -266,17 +336,22 @@ async function warnIfAlreadyAuthenticated(ctx) {
 	} catch {
 		return;
 	}
-	const identity = ctx.storedCredentials?.user?.email ?? "unknown user";
+	const stored = ctx.storedCredentials;
+	const identity = stored?.user?.email ?? "unknown user";
+	const activeOrg = stored?.orgs.find((o) => o.organizationId === stored?.activeOrgId);
 	ui.br();
 	ui.warn("Already authenticated");
-	ui.hint(`Signed in as ${identity}`);
+	ui.hint(`Signed in as ${identity}${activeOrg ? ` (${activeOrg.organizationName})` : ""}`);
+	if (stored?.webUrl || stored?.serverUrl) ui.hint(`Saved hosts: web ${stored.webUrl ?? "(none)"} | api ${stored.serverUrl ?? "(none)"}`);
 	ui.hint("Continuing will add or replace credentials for the selected organization.");
 	ui.br();
 }
 async function handleAuth(options, ctx, overrides) {
 	await warnIfAlreadyAuthenticated(ctx);
-	const webUrl = resolveCliWebUrl(options.webUrl, ctx.storedCredentials?.webUrl);
-	const serverUrl = resolveCliServerUrl(ctx.baseUrl);
+	const hosts = resolveAuthHosts(options, ctx);
+	printResolvedHosts(hosts);
+	if (shouldConfirmLoopback(hosts)) await confirmLoopbackHostsOrExit(hosts);
+	const { webUrl, serverUrl } = hosts;
 	const timeoutMs = options.timeout * 1e3;
 	const state = createDeviceAuthState();
 	logger.info("Starting auth flow", {

package/dist/keystroke.mjs

@@ -9,7 +9,7 @@ import * as path$1 from "node:path";
 import { z } from "zod";
 import { log } from "@clack/prompts";
 //#region package.json
-var version = "0.0.2";
+var version = "0.0.3";
 //#endregion
 //#region src/command-registry.ts
 const ROOT_OPTIONS_WITH_VALUES = new Set([
@@ -33,7 +33,7 @@ const lazyCommandDefinitions = [
 	},
 	{
 		name: "auth",
-		loadCommand: async () => (await import("./auth-Byry35LJ.mjs")).createAuthCommand()
+		loadCommand: async () => (await import("./auth-CY0Gg9sN.mjs")).createAuthCommand()
 	},
 	{
 		name: "connect",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@keystrokehq/cli",
-  "version": "0.0.2",
+  "version": "0.0.3",
   "private": false,
   "description": "Command-line interface for creating, managing, and deploying Keystroke automations.",
   "type": "module",
@@ -39,17 +39,17 @@
     "typescript": "^5.9.3",
     "vitest": "^4.1.5",
     "@keystroke/env-utils": "0.0.0",
-    "@keystroke/skills": "0.0.1",
-    "@keystroke/project-config": "0.0.0",
     "@keystroke/local-memory": "0.0.0",
+    "@keystroke/shared-types": "0.0.0",
     "@keystroke/typescript-config": "0.0.0",
-    "@keystroke/utils": "0.0.0",
+    "@keystroke/test-utils": "0.0.0",
     "@keystroke/workflow-builder": "0.0.1",
+    "@keystroke/skills": "0.0.1",
+    "@keystroke/utils": "0.0.0",
     "@keystrokehq/core": "0.0.2",
-    "@keystroke/shared-types": "0.0.0",
     "@keystroke/workflow-deploy": "0.0.0",
     "@keystroke/workflow-sdk": "0.0.0",
-    "@keystroke/test-utils": "0.0.0"
+    "@keystroke/project-config": "0.0.0"
   },
   "keywords": [
     "automation",