@keystrokehq/cli 0.0.95 → 0.0.96

package/README.md

@@ -19,20 +19,23 @@ Right now the CLI exposes `init`, `build`, `dev`, `start`, `health`, `auth`, `--
 
 ### `auth`
 
-Authenticate with a running keystroke deployment via Better Auth device flow. Config lives in `~/.keystroke`; bearer tokens live in the OS keychain.
+Authenticate with Keystroke via Better Auth device flow. Config lives in `~/.keystroke`; bearer tokens live in the OS keychain.
 
 ```bash
 keystroke auth login
 keystroke auth login --web-url http://localhost:3000
+keystroke auth login --web-url https://app.keystroke.ai --platform-url https://api.keystroke.ai
 keystroke auth status
 keystroke auth logout
 ```
 
-| Setting       | Default                 | Purpose                                                       |
-| ------------- | ----------------------- | ------------------------------------------------------------- |
-| `webUrl`      | `http://localhost:3000` | Web dashboard; dev proxies `/api/*` and `/health` to platform |
-| `platformUrl` | `http://localhost:3002` | Platform API (direct; used by CLI platform commands)          |
-| `serverUrl`   | `http://localhost:3001` | Local keystroke server API                                    |
+| Setting       | Default                    | Purpose                                                          |
+| ------------- | -------------------------- | ---------------------------------------------------------------- |
+| `webUrl`      | `https://app.keystroke.ai` | Web dashboard; device login and session checks                   |
+| `platformUrl` | `https://api.keystroke.ai` | Platform API (direct; used by CLI platform commands)             |
+| `serverUrl`   | `http://localhost:3001`    | Local keystroke server API (`keystroke dev` / `keystroke start`) |
+
+`auth login` persists both `webUrl` and `platformUrl`. Local dev: `--web-url http://localhost:3000` (platform URL resolves to `http://localhost:3002`). Cloud auth does not change `serverUrl` — local project commands still hit your dev server.
 
 Existing commands do not require auth yet. Use `resolveCliAuth()` when adding protected commands.
 

package/dist/index.mjs

@@ -6129,6 +6129,12 @@ const OrganizationSlugSchema = string().trim().toLowerCase().min(2, "Slug must b
 const ClaimableOrganizationSlugSchema = OrganizationSlugSchema.refine((slug) => !RESERVED_ORGANIZATION_SLUGS.has(slug), "This slug is reserved");
 /** Browser→platform request budget (ping + small platform overhead). */
 const PROJECT_REACHABILITY_REQUEST_TIMEOUT_MS = 17e3;
+/** Normalize a public origin URL (no trailing slash). */
+function originFromPublicUrl(value, fallback) {
+	const trimmed = value?.trim();
+	if (!trimmed) return fallback.replace(/\/+$/, "");
+	return trimmed.replace(/\/+$/, "");
+}
 /** TCP port to bind for a local server, derived from a public URL. */
 function listenPortFromUrl(url, fallback) {
 	const parsed = new URL(url);
@@ -7201,6 +7207,27 @@ function clearAccessToken(webUrl) {
 	new Entry(SERVICE, accountForWebUrl(webUrl)).deletePassword();
 }
 //#endregion
+//#region src/resolve-platform-url.ts
+const DEFAULT_WEB_URL = "https://app.keystroke.ai";
+const DEFAULT_PLATFORM_URL = "https://api.keystroke.ai";
+const LOCAL_PLATFORM_URL = "http://localhost:3002";
+function webOriginFromUrl(webUrl) {
+	return originFromPublicUrl(webUrl, webUrl.replace(/\/+$/, ""));
+}
+/** Known web origins with a fixed platform API — undefined for custom/staging URLs. */
+function knownPlatformUrlForWebUrl(webUrl) {
+	const webOrigin = webOriginFromUrl(webUrl);
+	if (webOrigin === "http://localhost:3000" || webOrigin === "http://127.0.0.1:3000") return LOCAL_PLATFORM_URL;
+	if (webOrigin === "https://app.keystroke.ai") return DEFAULT_PLATFORM_URL;
+}
+function resolvePlatformUrlForWebUrl(webUrl, options = {}) {
+	const explicit = options.platformUrl?.trim();
+	if (explicit) return explicit.replace(/\/+$/, "");
+	const known = knownPlatformUrlForWebUrl(webUrl);
+	if (known) return known;
+	return (options.fallback?.trim() || "https://api.keystroke.ai").replace(/\/+$/, "");
+}
+//#endregion
 //#region src/config.ts
 function getCliConfigDir(cwd = join(homedir(), ".keystroke")) {
 	return cwd;
@@ -7213,8 +7240,13 @@ function getEffectiveApiTarget(config) {
 	if (explicit === "local" || explicit === "platform") return explicit;
 	return "local";
 }
+function syncPlatformUrlWithWebUrl(config) {
+	const known = knownPlatformUrlForWebUrl(config.get("webUrl"));
+	if (!known) return;
+	if (config.get("platformUrl") !== known) config.set("platformUrl", known);
+}
 function createCliConfig(cwd = getCliConfigDir()) {
-	return new Conf({
+	const config = new Conf({
 		projectName: "keystroke",
 		cwd,
 		schema: {
@@ -7224,11 +7256,11 @@ function createCliConfig(cwd = getCliConfigDir()) {
 			},
 			webUrl: {
 				type: "string",
-				default: "http://localhost:3000"
+				default: DEFAULT_WEB_URL
 			},
 			platformUrl: {
 				type: "string",
-				default: "http://localhost:3002"
+				default: DEFAULT_PLATFORM_URL
 			},
 			activeOrganizationId: { type: "string" },
 			activeProjectId: { type: "string" },
@@ -7238,6 +7270,8 @@ function createCliConfig(cwd = getCliConfigDir()) {
 			}
 		}
 	});
+	syncPlatformUrlWithWebUrl(config);
+	return config;
 }
 function getServerUrl(config) {
 	return config.get("serverUrl");
@@ -7246,7 +7280,7 @@ function getWebUrl(config) {
 	return config.get("webUrl");
 }
 function getPlatformUrl(config) {
-	return config.get("platformUrl");
+	return resolvePlatformUrlForWebUrl(getWebUrl(config), { fallback: config.get("platformUrl") });
 }
 //#endregion
 //#region src/auth/resolve-cli-auth.ts
@@ -13362,10 +13396,15 @@ async function getSessionWithBearer(baseURL, accessToken) {
 //#endregion
 //#region src/commands/auth/login.ts
 function registerAuthLoginCommand(auth) {
-	auth.command("login").description("Authenticate via browser device flow").option("--web-url <url>", "Web dashboard origin (default from config)").option("--org <id>", "Active organization id (skips prompt when you belong to several)").action(async (options) => {
+	auth.command("login").description("Authenticate via browser device flow").option("--web-url <url>", "Web dashboard origin (default from config)").option("--platform-url <url>", "Platform API origin (derived from web URL when omitted)").option("--org <id>", "Active organization id (skips prompt when you belong to several)").action(async (options) => {
 		const config = createCliConfig();
 		const webUrl = options.webUrl ?? getWebUrl(config);
-		if (options.webUrl) config.set("webUrl", webUrl);
+		const platformUrl = resolvePlatformUrlForWebUrl(webUrl, {
+			platformUrl: options.platformUrl,
+			fallback: getPlatformUrl(config)
+		});
+		config.set("webUrl", webUrl);
+		config.set("platformUrl", platformUrl);
 		try {
 			const result = await runDeviceLogin({
 				baseURL: webUrl,
@@ -14312,7 +14351,7 @@ function registerConfigCommand(program) {
 		process.stdout.write(`${JSON.stringify({
 			serverUrl: cliConfig.get("serverUrl"),
 			webUrl: cliConfig.get("webUrl"),
-			platformUrl: cliConfig.get("platformUrl"),
+			platformUrl: getPlatformUrl(cliConfig),
 			activeOrganizationId: cliConfig.get("activeOrganizationId"),
 			activeProjectId: cliConfig.get("activeProjectId"),
 			apiTarget: getEffectiveApiTarget(cliConfig),