@m-kopa/launchpad-cli 0.27.1 → 0.27.2

package/CHANGELOG.md

@@ -6,6 +6,14 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
 This project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html);
 pre-1.0 minor bumps may carry breaking changes per ADR 0005.
 
+## 0.27.2 — 2026-06-15
+
+Fix: `launchpad login --help` and `launchpad logout --help` (and `-h`)
+now print usage and exit without side effects. Previously both verbs
+ignored their arguments and ran the real flow, so asking for help
+actually signed you in / revoked + cleared your session. The flags are
+now documented on each command's docs page.
+
 ## 0.27.1 — 2026-06-12
 
 Bundled-skills refresh (sp-s4k9wm) — no CLI code changes. Every

package/dist/cli.js

@@ -19,7 +19,7 @@ var __toESM = (mod, isNodeMode, target) => {
 var __require = /* @__PURE__ */ createRequire(import.meta.url);
 
 // src/version.ts
-var CLI_VERSION = "0.27.1";
+var CLI_VERSION = "0.27.2";
 
 // src/config.ts
 import * as os from "node:os";
@@ -6724,7 +6724,11 @@ function makeLoginCommand(deps = REAL_DEPS) {
     run: (args, io) => runLogin(args, io, deps)
   };
 }
-async function runLogin(_args, io, deps) {
+async function runLogin(args, io, deps) {
+  if (args.includes("--help") || args.includes("-h")) {
+    printLoginHelp(io);
+    return 0;
+  }
   try {
     const cfg = loadConfig();
     if (cfg.authLegacy) {
@@ -6775,6 +6779,27 @@ async function runLegacyLogin(io, botUrl, sessionPath, deps) {
   io.out(`Access token expires in ~${expiresIn}s; refreshes silently.`);
   return 0;
 }
+function printLoginHelp(io) {
+  io.out("launchpad login — authenticate and store a session.");
+  io.out("");
+  io.out("Usage:");
+  io.out("  launchpad login        Sign in via the browser and store a session");
+  io.out("");
+  io.out("Opens your browser to sign in with your M-KOPA Microsoft account");
+  io.out("through the Launchpad auth gateway (loopback PKCE), then writes the");
+  io.out("session to ~/.launchpad/session.json. The short-lived access token");
+  io.out("refreshes silently as you use the CLI.");
+  io.out("");
+  io.out("Environment:");
+  io.out("  LAUNCHPAD_AUTH_LEGACY=1     Force the legacy Cloudflare Access flow");
+  io.out("                             (deprecated; removed when the dual-auth");
+  io.out("                             window closes)");
+  io.out("  LAUNCHPAD_AUTH_GATEWAY_URL  Override the gateway base URL (testing)");
+  io.out("");
+  io.out("Exit codes:");
+  io.out("  0   signed in / session stored");
+  io.out("  1   login failed (network, browser, or gateway error)");
+}
 function describe19(e) {
   return e instanceof Error ? e.message : String(e);
 }
@@ -6789,7 +6814,11 @@ function makeLogoutCommand(deps = REAL_DEPS2) {
     run: (args, io) => runLogout(args, io, deps)
   };
 }
-async function runLogout(_args, io, deps) {
+async function runLogout(args, io, deps) {
+  if (args.includes("--help") || args.includes("-h")) {
+    printLogoutHelp(io);
+    return 0;
+  }
   try {
     const cfg = loadConfig();
     let session = null;
@@ -6819,6 +6848,22 @@ async function runLogout(_args, io, deps) {
     return 1;
   }
 }
+function printLogoutHelp(io) {
+  io.out("launchpad logout — revoke the session server-side and clear it locally.");
+  io.out("");
+  io.out("Usage:");
+  io.out("  launchpad logout       Revoke server-side, then clear the local session");
+  io.out("");
+  io.out("Gateway (v2) sessions are revoked server-side (the refresh token dies");
+  io.out("immediately; any in-flight access token expires within ~15 minutes),");
+  io.out("then the local ~/.launchpad/session.json is cleared. Logout also works");
+  io.out("offline: if the gateway is unreachable the local session is cleared");
+  io.out("anyway with a warning, and the exit code stays 0.");
+  io.out("");
+  io.out("Exit codes:");
+  io.out("  0   logged out (or already logged out)");
+  io.out("  1   could not clear the local session (file IO / config error)");
+}
 function describe20(e) {
   return e instanceof Error ? e.message : String(e);
 }

package/dist/version.d.ts

@@ -1,2 +1,2 @@
-export declare const CLI_VERSION = "0.27.1";
+export declare const CLI_VERSION = "0.27.2";
 //# sourceMappingURL=version.d.ts.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@m-kopa/launchpad-cli",
-  "version": "0.27.1",
+  "version": "0.27.2",
   "description": "Launchpad CLI — clone / deploy / review / merge against Launchpad-managed apps. Talks to the portal-bot endpoints (SCOPE-M-760 / T4).",
   "type": "module",
   "bin": {

package/skills/launchpad-content-pr/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: launchpad-content-pr
 description: Push a content change to a Launchpad app via `launchpad deploy` and verify it shipped via `launchpad status`. Covers the post-first-deploy iteration loop (edit → deploy → verify) — subsequent deploys commit directly to the app repo's main and the Pages build runs asynchronously, so verification is its own step. Use when someone says "push a content change", "ship an update", "/launchpad-content-pr", "verify my deploy", or after `/launchpad-deploy` reports `done` and they want to follow up with an edit.
-version: 0.27.1
+version: 0.27.2
 ---
 
 <!-- BEGIN shell-contract (managed by scripts/sync-skill-contract.sh — edit skills/_partials/shell-contract.md) -->

package/skills/launchpad-deploy/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: launchpad-deploy
 description: Walk a Launchpad user through deploying an app from their local working directory (Model A — `launchpad init` + `launchpad deploy`). Wraps the CLI verbs end-to-end: detects the app shape, scaffolds `launchpad.yaml`, resolves the allowed Entra group via `launchpad groups`, bundles the CWD via `launchpad deploy`, and watches the rollout via `launchpad status`. Use when someone says "deploy a new app", "ship my app to Launchpad", "/launchpad-deploy", "I have an app locally — get it on Launchpad", or any variant. Resume/abandon for legacy in-flight provisioning is at the bottom.
-version: 0.27.1
+version: 0.27.2
 ---
 
 <!-- BEGIN shell-contract (managed by scripts/sync-skill-contract.sh — edit skills/_partials/shell-contract.md) -->

package/skills/launchpad-deploy-status/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: launchpad-deploy-status
 description: Show the current provisioning stage + failure reason for a Launchpad app via `launchpad status` (Model A drift + deployment_verified) and `launchpad apps` (lifecycle bucket). Renders the M-892 stage trace for in-flight provisioning, and is the canonical home for `launchpad recover` (repair a terminal-failed app record that is actually live). Use when someone says "what's the status of demo-X", "/launchpad-deploy-status", "is my deploy stuck", "my app says failed but it's serving", or after `/launchpad-deploy` reports a non-`done` terminal stage.
-version: 0.27.1
+version: 0.27.2
 ---
 
 <!-- BEGIN shell-contract (managed by scripts/sync-skill-contract.sh — edit skills/_partials/shell-contract.md) -->

package/skills/launchpad-destroy/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: launchpad-destroy
 description: Tear down a Launchpad app end-to-end via `launchpad destroy` — Cloudflare Pages project, edge-auth wiring (gateway KV/audience entries, or the Access app for `auth: access` apps), custom hostname, platform-repo TF, and the app repo (archive-renamed). Owner-only verb with a two-step destructive confirmation. Use when someone says "destroy this app", "/launchpad-destroy", "tear down `<slug>`", "delete the app", or asks to clean up a smoke-test / orphan / retired app.
-version: 0.27.1
+version: 0.27.2
 ---
 
 <!-- BEGIN shell-contract (managed by scripts/sync-skill-contract.sh — edit skills/_partials/shell-contract.md) -->

package/skills/launchpad-onboard/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: launchpad-onboard
 description: One-time setup for the Launchpad CLI + Claude Code skill bundle. Verifies the `launchpad` CLI is installed and current, runs `launchpad whoami` to confirm the session is fresh, and checks the bundled skills are installed and in lock-step with the CLI. Idempotent — safe to re-run any time. Use when someone says "set me up for Launchpad", "I just got a new machine and want to use Launchpad", "/launchpad-onboard", or any of the other launchpad-* skills fails on a prereq check.
-version: 0.27.1
+version: 0.27.2
 ---
 
 <!-- BEGIN shell-contract (managed by scripts/sync-skill-contract.sh — edit skills/_partials/shell-contract.md) -->

package/skills/launchpad-status/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: launchpad-status
 description: Show whether a Launchpad app's local launchpad.yaml matches what's deployed, and read the deployed manifest. Wraps `launchpad pull` (fetch deployed YAML) and `launchpad status` (drift report). Use when someone says "is my app in sync", "what's deployed", "show drift", "/launchpad-status", "/launchpad-pull", or after `launchpad deploy` to verify the change landed.
-version: 0.27.1
+version: 0.27.2
 ---
 
 <!-- BEGIN shell-contract (managed by scripts/sync-skill-contract.sh — edit skills/_partials/shell-contract.md) -->