@kutrion/cli 1.2.7 → 1.2.10
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +23 -0
- package/dist/index.js +2301 -749
- package/package.json +1 -1
package/README.md
CHANGED
|
@@ -17,6 +17,16 @@ kt --version
|
|
|
17
17
|
|
|
18
18
|
`npm i -g @kutrion/cli` does not work: the package is not on the public npm registry.
|
|
19
19
|
|
|
20
|
+
### The Kutrion app
|
|
21
|
+
|
|
22
|
+
On a desktop, the first interactive `kt login` also starts a background install of the Kutrion app (the Hub) when it is
|
|
23
|
+
missing or older than this release needs. The installer is taken from the update feed at https://kutrion.com/updates; its
|
|
24
|
+
sha512 must match the feed and its publisher identity must match the one this build expects, and on any mismatch nothing is
|
|
25
|
+
installed. The install never prompts, and it is skipped with no terminal, in CI, over SSH, on a Linux session with no
|
|
26
|
+
display, and when `KT_NO_HUB=1` is set. Linux needs root or passwordless `sudo` for the package install, otherwise it is
|
|
27
|
+
skipped. One attempt is made per day. Nothing in `kt` or in the other Kutrion apps ever removes the app. To install it by
|
|
28
|
+
hand, use https://kutrion.com/downloads.
|
|
29
|
+
|
|
20
30
|
## First sign-in
|
|
21
31
|
|
|
22
32
|
```sh
|
|
@@ -31,6 +41,19 @@ code. A script pipes the password instead, with `--code` when the account has a
|
|
|
31
41
|
printf '%s\n' "$KT_PASSWORD" | kt login --email you@example.com --password-stdin
|
|
32
42
|
```
|
|
33
43
|
|
|
44
|
+
On a computer with an OS keychain, an interactive password or 2FA login on a desktop also registers
|
|
45
|
+
this CLI as a device of its own (it appears in Active devices as "Kutrion CLI on <computer>" and counts toward the plan's
|
|
46
|
+
device limit), and `kt logout` revokes it. If the Kutrion desktop app is installed there, the login
|
|
47
|
+
then offers to sign it in to the same account, so every Kutrion app on the computer is signed in
|
|
48
|
+
after one sign-in. The first time, the CLI shows the app's code and waits for you to type `yes`; your
|
|
49
|
+
password is never sent to the app. Both the device registration and this step are skipped, with no device
|
|
50
|
+
row and no device slot used, over SSH, in CI, with `--password-stdin` or any non-terminal input, on a
|
|
51
|
+
Linux box with no display, with no keychain, and whenever `KT_NO_HUB=1` is set. Signing the app in is
|
|
52
|
+
also skipped unless the server confirms an audited-vault account, so a Private vault account is never
|
|
53
|
+
handed over. If registration fails and the new device cannot be removed, the CLI says so: remove "Kutrion
|
|
54
|
+
CLI on <computer>" from Active devices. It starts an installed app in the background if it is not running,
|
|
55
|
+
and never fails the login.
|
|
56
|
+
|
|
34
57
|
A successful login saves the server to `~/.config/kutrion/config.json`, so every command after it
|
|
35
58
|
needs no `--base`:
|
|
36
59
|
|