@keystrokehq/cli 0.0.94 → 0.0.96

package/README.md

@@ -19,20 +19,23 @@ Right now the CLI exposes `init`, `build`, `dev`, `start`, `health`, `auth`, `--
 
 ### `auth`
 
-Authenticate with a running keystroke deployment via Better Auth device flow. Config lives in `~/.keystroke`; bearer tokens live in the OS keychain.
+Authenticate with Keystroke via Better Auth device flow. Config lives in `~/.keystroke`; bearer tokens live in the OS keychain.
 
 ```bash
 keystroke auth login
 keystroke auth login --web-url http://localhost:3000
+keystroke auth login --web-url https://app.keystroke.ai --platform-url https://api.keystroke.ai
 keystroke auth status
 keystroke auth logout
 ```
 
-| Setting       | Default                 | Purpose                                                       |
-| ------------- | ----------------------- | ------------------------------------------------------------- |
-| `webUrl`      | `http://localhost:3000` | Web dashboard; dev proxies `/api/*` and `/health` to platform |
-| `platformUrl` | `http://localhost:3002` | Platform API (direct; used by CLI platform commands)          |
-| `serverUrl`   | `http://localhost:3001` | Local keystroke server API                                    |
+| Setting       | Default                    | Purpose                                                          |
+| ------------- | -------------------------- | ---------------------------------------------------------------- |
+| `webUrl`      | `https://app.keystroke.ai` | Web dashboard; device login and session checks                   |
+| `platformUrl` | `https://api.keystroke.ai` | Platform API (direct; used by CLI platform commands)             |
+| `serverUrl`   | `http://localhost:3001`    | Local keystroke server API (`keystroke dev` / `keystroke start`) |
+
+`auth login` persists both `webUrl` and `platformUrl`. Local dev: `--web-url http://localhost:3000` (platform URL resolves to `http://localhost:3002`). Cloud auth does not change `serverUrl` — local project commands still hit your dev server.
 
 Existing commands do not require auth yet. Use `resolveCliAuth()` when adding protected commands.
 

package/dist/index.mjs

@@ -6129,6 +6129,12 @@ const OrganizationSlugSchema = string().trim().toLowerCase().min(2, "Slug must b
 const ClaimableOrganizationSlugSchema = OrganizationSlugSchema.refine((slug) => !RESERVED_ORGANIZATION_SLUGS.has(slug), "This slug is reserved");
 /** Browser→platform request budget (ping + small platform overhead). */
 const PROJECT_REACHABILITY_REQUEST_TIMEOUT_MS = 17e3;
+/** Normalize a public origin URL (no trailing slash). */
+function originFromPublicUrl(value, fallback) {
+	const trimmed = value?.trim();
+	if (!trimmed) return fallback.replace(/\/+$/, "");
+	return trimmed.replace(/\/+$/, "");
+}
 /** TCP port to bind for a local server, derived from a public URL. */
 function listenPortFromUrl(url, fallback) {
 	const parsed = new URL(url);
@@ -7201,6 +7207,27 @@ function clearAccessToken(webUrl) {
 	new Entry(SERVICE, accountForWebUrl(webUrl)).deletePassword();
 }
 //#endregion
+//#region src/resolve-platform-url.ts
+const DEFAULT_WEB_URL = "https://app.keystroke.ai";
+const DEFAULT_PLATFORM_URL = "https://api.keystroke.ai";
+const LOCAL_PLATFORM_URL = "http://localhost:3002";
+function webOriginFromUrl(webUrl) {
+	return originFromPublicUrl(webUrl, webUrl.replace(/\/+$/, ""));
+}
+/** Known web origins with a fixed platform API — undefined for custom/staging URLs. */
+function knownPlatformUrlForWebUrl(webUrl) {
+	const webOrigin = webOriginFromUrl(webUrl);
+	if (webOrigin === "http://localhost:3000" || webOrigin === "http://127.0.0.1:3000") return LOCAL_PLATFORM_URL;
+	if (webOrigin === "https://app.keystroke.ai") return DEFAULT_PLATFORM_URL;
+}
+function resolvePlatformUrlForWebUrl(webUrl, options = {}) {
+	const explicit = options.platformUrl?.trim();
+	if (explicit) return explicit.replace(/\/+$/, "");
+	const known = knownPlatformUrlForWebUrl(webUrl);
+	if (known) return known;
+	return (options.fallback?.trim() || "https://api.keystroke.ai").replace(/\/+$/, "");
+}
+//#endregion
 //#region src/config.ts
 function getCliConfigDir(cwd = join(homedir(), ".keystroke")) {
 	return cwd;
@@ -7213,8 +7240,13 @@ function getEffectiveApiTarget(config) {
 	if (explicit === "local" || explicit === "platform") return explicit;
 	return "local";
 }
+function syncPlatformUrlWithWebUrl(config) {
+	const known = knownPlatformUrlForWebUrl(config.get("webUrl"));
+	if (!known) return;
+	if (config.get("platformUrl") !== known) config.set("platformUrl", known);
+}
 function createCliConfig(cwd = getCliConfigDir()) {
-	return new Conf({
+	const config = new Conf({
 		projectName: "keystroke",
 		cwd,
 		schema: {
@@ -7224,11 +7256,11 @@ function createCliConfig(cwd = getCliConfigDir()) {
 			},
 			webUrl: {
 				type: "string",
-				default: "http://localhost:3000"
+				default: DEFAULT_WEB_URL
 			},
 			platformUrl: {
 				type: "string",
-				default: "http://localhost:3002"
+				default: DEFAULT_PLATFORM_URL
 			},
 			activeOrganizationId: { type: "string" },
 			activeProjectId: { type: "string" },
@@ -7238,6 +7270,8 @@ function createCliConfig(cwd = getCliConfigDir()) {
 			}
 		}
 	});
+	syncPlatformUrlWithWebUrl(config);
+	return config;
 }
 function getServerUrl(config) {
 	return config.get("serverUrl");
@@ -7246,7 +7280,7 @@ function getWebUrl(config) {
 	return config.get("webUrl");
 }
 function getPlatformUrl(config) {
-	return config.get("platformUrl");
+	return resolvePlatformUrlForWebUrl(getWebUrl(config), { fallback: config.get("platformUrl") });
 }
 //#endregion
 //#region src/auth/resolve-cli-auth.ts
@@ -11781,7 +11815,7 @@ function registerCredentialsCommand(program) {
 /** OAuth device-flow client id for `keystroke auth login`. */
 const CLI_CLIENT_ID = "keystroke-cli";
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.6.11_@tanstack+react-start@1.168.20_crossws@0.4.5_srvx@0.11.15__react-dom_b346619fb1e6b75975d0aa0d3d1e104e/node_modules/better-auth/dist/version.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.6.11_@tanstack+react-start@1.168.22_crossws@0.4.5_srvx@0.11.15__react-dom_58aa013e967694c3ee75e7bc1076e12b/node_modules/better-auth/dist/version.mjs
 const PACKAGE_VERSION = "1.6.11";
 //#endregion
 //#region ../../node_modules/.pnpm/better-call@1.3.5_zod@4.4.3/node_modules/better-call/dist/error.mjs
@@ -11906,7 +11940,7 @@ var BetterAuthError = class extends Error {
 	}
 };
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.6.11_@tanstack+react-start@1.168.20_crossws@0.4.5_srvx@0.11.15__react-dom_b346619fb1e6b75975d0aa0d3d1e104e/node_modules/better-auth/dist/plugins/device-authorization/client.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.6.11_@tanstack+react-start@1.168.22_crossws@0.4.5_srvx@0.11.15__react-dom_58aa013e967694c3ee75e7bc1076e12b/node_modules/better-auth/dist/plugins/device-authorization/client.mjs
 const deviceAuthorizationClient = () => {
 	return {
 		id: "device-authorization",
@@ -12051,7 +12085,7 @@ let onMount = ($store, initialize) => {
 	});
 };
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.6.11_@tanstack+react-start@1.168.20_crossws@0.4.5_srvx@0.11.15__react-dom_b346619fb1e6b75975d0aa0d3d1e104e/node_modules/better-auth/dist/client/query.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.6.11_@tanstack+react-start@1.168.22_crossws@0.4.5_srvx@0.11.15__react-dom_58aa013e967694c3ee75e7bc1076e12b/node_modules/better-auth/dist/client/query.mjs
 const isServer = () => typeof window === "undefined";
 const useAuthQuery = (initializedAtom, path, $fetch, options) => {
 	const value = /* @__PURE__ */ atom({
@@ -12145,7 +12179,7 @@ const useAuthQuery = (initializedAtom, path, $fetch, options) => {
 	return value;
 };
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.6.11_@tanstack+react-start@1.168.20_crossws@0.4.5_srvx@0.11.15__react-dom_b346619fb1e6b75975d0aa0d3d1e104e/node_modules/better-auth/dist/client/broadcast-channel.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.6.11_@tanstack+react-start@1.168.22_crossws@0.4.5_srvx@0.11.15__react-dom_58aa013e967694c3ee75e7bc1076e12b/node_modules/better-auth/dist/client/broadcast-channel.mjs
 const kBroadcastChannel = Symbol.for("better-auth:broadcast-channel");
 const now$1 = () => Math.floor(Date.now() / 1e3);
 var WindowBroadcastChannel = class {
@@ -12188,7 +12222,7 @@ function getGlobalBroadcastChannel(name = "better-auth.message") {
 	return globalThis[kBroadcastChannel];
 }
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.6.11_@tanstack+react-start@1.168.20_crossws@0.4.5_srvx@0.11.15__react-dom_b346619fb1e6b75975d0aa0d3d1e104e/node_modules/better-auth/dist/client/focus-manager.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.6.11_@tanstack+react-start@1.168.22_crossws@0.4.5_srvx@0.11.15__react-dom_58aa013e967694c3ee75e7bc1076e12b/node_modules/better-auth/dist/client/focus-manager.mjs
 const kFocusManager = Symbol.for("better-auth:focus-manager");
 var WindowFocusManager = class {
 	listeners = /* @__PURE__ */ new Set();
@@ -12217,7 +12251,7 @@ function getGlobalFocusManager() {
 	return globalThis[kFocusManager];
 }
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.6.11_@tanstack+react-start@1.168.20_crossws@0.4.5_srvx@0.11.15__react-dom_b346619fb1e6b75975d0aa0d3d1e104e/node_modules/better-auth/dist/client/online-manager.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.6.11_@tanstack+react-start@1.168.22_crossws@0.4.5_srvx@0.11.15__react-dom_58aa013e967694c3ee75e7bc1076e12b/node_modules/better-auth/dist/client/online-manager.mjs
 const kOnlineManager = Symbol.for("better-auth:online-manager");
 var WindowOnlineManager = class {
 	listeners = /* @__PURE__ */ new Set();
@@ -12249,7 +12283,7 @@ function getGlobalOnlineManager() {
 	return globalThis[kOnlineManager];
 }
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.6.11_@tanstack+react-start@1.168.20_crossws@0.4.5_srvx@0.11.15__react-dom_b346619fb1e6b75975d0aa0d3d1e104e/node_modules/better-auth/dist/client/parser.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.6.11_@tanstack+react-start@1.168.22_crossws@0.4.5_srvx@0.11.15__react-dom_58aa013e967694c3ee75e7bc1076e12b/node_modules/better-auth/dist/client/parser.mjs
 const PROTO_POLLUTION_PATTERNS = {
 	proto: /"(?:_|\\u0{2}5[Ff]){2}(?:p|\\u0{2}70)(?:r|\\u0{2}72)(?:o|\\u0{2}6[Ff])(?:t|\\u0{2}74)(?:o|\\u0{2}6[Ff])(?:_|\\u0{2}5[Ff]){2}"\s*:/,
 	constructor: /"(?:c|\\u0063)(?:o|\\u006[Ff])(?:n|\\u006[Ee])(?:s|\\u0073)(?:t|\\u0074)(?:r|\\u0072)(?:u|\\u0075)(?:c|\\u0063)(?:t|\\u0074)(?:o|\\u006[Ff])(?:r|\\u0072)"\s*:/,
@@ -12319,7 +12353,7 @@ function parseJSON(value, options = { strict: true }) {
 	return betterJSONParse(value, options);
 }
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.6.11_@tanstack+react-start@1.168.20_crossws@0.4.5_srvx@0.11.15__react-dom_b346619fb1e6b75975d0aa0d3d1e104e/node_modules/better-auth/dist/client/session-refresh.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.6.11_@tanstack+react-start@1.168.22_crossws@0.4.5_srvx@0.11.15__react-dom_58aa013e967694c3ee75e7bc1076e12b/node_modules/better-auth/dist/client/session-refresh.mjs
 const now = () => Math.floor(Date.now() / 1e3);
 /**
 * Normalize $fetch response: `throw: true` returns data directly, otherwise `{ data, error }`.
@@ -12517,7 +12551,7 @@ Object.freeze({
 	}
 });
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.6.11_@tanstack+react-start@1.168.20_crossws@0.4.5_srvx@0.11.15__react-dom_b346619fb1e6b75975d0aa0d3d1e104e/node_modules/better-auth/dist/utils/url.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.6.11_@tanstack+react-start@1.168.22_crossws@0.4.5_srvx@0.11.15__react-dom_58aa013e967694c3ee75e7bc1076e12b/node_modules/better-auth/dist/utils/url.mjs
 function checkHasPath(url) {
 	try {
 		return (new URL(url).pathname.replace(/\/+$/, "") || "/") !== "/";
@@ -12589,7 +12623,7 @@ function getOrigin(url) {
 	}
 }
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.6.11_@tanstack+react-start@1.168.20_crossws@0.4.5_srvx@0.11.15__react-dom_b346619fb1e6b75975d0aa0d3d1e104e/node_modules/better-auth/dist/client/fetch-plugins.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.6.11_@tanstack+react-start@1.168.22_crossws@0.4.5_srvx@0.11.15__react-dom_58aa013e967694c3ee75e7bc1076e12b/node_modules/better-auth/dist/client/fetch-plugins.mjs
 const redirectPlugin = {
 	id: "redirect",
 	name: "Redirect",
@@ -12604,7 +12638,7 @@ const redirectPlugin = {
 	} }
 };
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.6.11_@tanstack+react-start@1.168.20_crossws@0.4.5_srvx@0.11.15__react-dom_b346619fb1e6b75975d0aa0d3d1e104e/node_modules/better-auth/dist/client/session-atom.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.6.11_@tanstack+react-start@1.168.22_crossws@0.4.5_srvx@0.11.15__react-dom_58aa013e967694c3ee75e7bc1076e12b/node_modules/better-auth/dist/client/session-atom.mjs
 function getSessionAtom($fetch, options) {
 	const $signal = /* @__PURE__ */ atom(false);
 	const session = useAuthQuery($signal, "/get-session", $fetch, { method: "GET" });
@@ -13091,7 +13125,7 @@ var betterFetch = async (url, options) => {
 	};
 };
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.6.11_@tanstack+react-start@1.168.20_crossws@0.4.5_srvx@0.11.15__react-dom_b346619fb1e6b75975d0aa0d3d1e104e/node_modules/better-auth/dist/client/config.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.6.11_@tanstack+react-start@1.168.22_crossws@0.4.5_srvx@0.11.15__react-dom_58aa013e967694c3ee75e7bc1076e12b/node_modules/better-auth/dist/client/config.mjs
 const resolvePublicAuthUrl = (basePath) => {
 	if (typeof process === "undefined") return void 0;
 	const path = basePath ?? "/api/auth";
@@ -13189,12 +13223,12 @@ const getClientConfig = (options, loadEnv) => {
 	};
 };
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.6.11_@tanstack+react-start@1.168.20_crossws@0.4.5_srvx@0.11.15__react-dom_b346619fb1e6b75975d0aa0d3d1e104e/node_modules/better-auth/dist/utils/is-atom.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.6.11_@tanstack+react-start@1.168.22_crossws@0.4.5_srvx@0.11.15__react-dom_58aa013e967694c3ee75e7bc1076e12b/node_modules/better-auth/dist/utils/is-atom.mjs
 function isAtom(value) {
 	return typeof value === "object" && value !== null && "get" in value && typeof value.get === "function" && "lc" in value && typeof value.lc === "number";
 }
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.6.11_@tanstack+react-start@1.168.20_crossws@0.4.5_srvx@0.11.15__react-dom_b346619fb1e6b75975d0aa0d3d1e104e/node_modules/better-auth/dist/client/proxy.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.6.11_@tanstack+react-start@1.168.22_crossws@0.4.5_srvx@0.11.15__react-dom_58aa013e967694c3ee75e7bc1076e12b/node_modules/better-auth/dist/client/proxy.mjs
 function getMethod(path, knownPathMethods, args) {
 	const method = knownPathMethods[path];
 	const { fetchOptions, query: _query, ...body } = args || {};
@@ -13274,7 +13308,7 @@ function capitalizeFirstLetter(str) {
 	return str.charAt(0).toUpperCase() + str.slice(1);
 }
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.6.11_@tanstack+react-start@1.168.20_crossws@0.4.5_srvx@0.11.15__react-dom_b346619fb1e6b75975d0aa0d3d1e104e/node_modules/better-auth/dist/client/vanilla.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.6.11_@tanstack+react-start@1.168.22_crossws@0.4.5_srvx@0.11.15__react-dom_58aa013e967694c3ee75e7bc1076e12b/node_modules/better-auth/dist/client/vanilla.mjs
 function createAuthClient(options) {
 	const { pluginPathMethods, pluginsActions, pluginsAtoms, $fetch, atomListeners, $store } = getClientConfig(options);
 	const resolvedHooks = {};
@@ -13362,10 +13396,15 @@ async function getSessionWithBearer(baseURL, accessToken) {
 //#endregion
 //#region src/commands/auth/login.ts
 function registerAuthLoginCommand(auth) {
-	auth.command("login").description("Authenticate via browser device flow").option("--web-url <url>", "Web dashboard origin (default from config)").option("--org <id>", "Active organization id (skips prompt when you belong to several)").action(async (options) => {
+	auth.command("login").description("Authenticate via browser device flow").option("--web-url <url>", "Web dashboard origin (default from config)").option("--platform-url <url>", "Platform API origin (derived from web URL when omitted)").option("--org <id>", "Active organization id (skips prompt when you belong to several)").action(async (options) => {
 		const config = createCliConfig();
 		const webUrl = options.webUrl ?? getWebUrl(config);
-		if (options.webUrl) config.set("webUrl", webUrl);
+		const platformUrl = resolvePlatformUrlForWebUrl(webUrl, {
+			platformUrl: options.platformUrl,
+			fallback: getPlatformUrl(config)
+		});
+		config.set("webUrl", webUrl);
+		config.set("platformUrl", platformUrl);
 		try {
 			const result = await runDeviceLogin({
 				baseURL: webUrl,
@@ -14312,7 +14351,7 @@ function registerConfigCommand(program) {
 		process.stdout.write(`${JSON.stringify({
 			serverUrl: cliConfig.get("serverUrl"),
 			webUrl: cliConfig.get("webUrl"),
-			platformUrl: cliConfig.get("platformUrl"),
+			platformUrl: getPlatformUrl(cliConfig),
 			activeOrganizationId: cliConfig.get("activeOrganizationId"),
 			activeProjectId: cliConfig.get("activeProjectId"),
 			apiTarget: getEffectiveApiTarget(cliConfig),