@mechasm/cli 0.1.4 → 0.1.5

package/AGENT_GUIDE.md

@@ -2,8 +2,20 @@
 
 Use Node.js 22 or newer. Install `@mechasm/cli`, sign in with `mechasm login`, then check `mechasm doctor`.
 
+When signing in again with a valid session and the same account, review the preselected project and team approvals before approving.
+
 Keep each test request in Markdown. Name the project ID, target URL, expected result, and limits. Reuse configured test accounts; do not ask agents to expose credentials or change data outside the named test scope.
 
+Before creating a test, list the project's existing tests and inspect likely matches. If the target and requirements match, run the existing test and inspect the new run. An app change alone does not require a new test. Edit a test when its requirements change; create one only for missing coverage. Never reuse an old result as verification of a new app version.
+
+```sh
+mechasm tests list --project PROJECT_ID --json
+mechasm tests get TEST_ID --project PROJECT_ID --json
+mechasm tests run TEST_ID --project PROJECT_ID --json
+```
+
+For missing coverage:
+
 ```sh
 mechasm tests create --project PROJECT_ID --name "Sign-in" --prompt-file prompt.md --json
 ```

package/README.md

@@ -31,6 +31,8 @@ mechasm projects list
 
 Approve the existing projects and actions this device needs. Project access and permission to create projects in a team are separate. Team project-creation access does not grant access to existing projects in that team. If a project or team is missing, sign in again and approve access; your account must already have access to it.
 
+When signing in again with a valid session and the same account, your previous approvals are preselected. Review them before approving. If your session has expired or was revoked, select access again.
+
 Pass project IDs explicitly to test, run, variable, and local-app commands. The CLI does not select a default project.
 
 ## Create a project and run a test
@@ -43,6 +45,8 @@ mechasm tests create --project PROJECT_ID --name "Home page" --prompt "Open the
 
 Replace `TEAM_ID`, `PROJECT_ID`, and the example URL with your values. `--team` is optional when exactly one team is approved. The project creation response contains the project ID to use in later commands.
 
+For later app changes, inspect existing tests and run matching ones with `mechasm tests run TEST_ID --project PROJECT_ID`. Edit tests when requirements change; create tests only for missing coverage. Always inspect the new run's result. See the bundled [Agent Guide](./AGENT_GUIDE.md) for the full workflow.
+
 Commands that start a run return its `runId` and workspace `runUrl`. Use the returned run ID to follow execution:
 
 ```sh

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mechasm/cli",
-  "version": "0.1.4",
+  "version": "0.1.5",
   "description": "Mechasm command line client",
   "homepage": "https://mechasm.ai/docs/mechasm-cli/getting-started",
   "license": "SEE LICENSE IN LICENSE",

package/src/api-client.js

@@ -228,7 +228,19 @@ export function createCliClient(rawApiUrl) {
     async login({ deviceName = hostname().slice(0, 120), noBrowser = false, json = false } = {}) {
       deviceName = String(deviceName).trim();
       if (!deviceName || deviceName.length > 120) throw new CliError('--device-name must be 1 to 120 characters.', 2);
-      const device = (await request('/auth/device', { method: 'POST', body: { deviceName } })).data;
+      let previousToken;
+      try {
+        if (await readCredentials(path)) previousToken = (await accessToken()).token;
+      } catch (error) {
+        if (error.exitCode !== 3) throw error;
+      }
+      let device;
+      try {
+        device = (await request('/auth/device', { method: 'POST', body: { deviceName }, token: previousToken })).data;
+      } catch (error) {
+        if (!previousToken || error.exitCode !== 3) throw error;
+        device = (await request('/auth/device', { method: 'POST', body: { deviceName } })).data;
+      }
       if (typeof device?.deviceCode !== 'string' || !/^mcd_[A-Za-z0-9_-]{43}$/.test(device.deviceCode) ||
           typeof device?.userCode !== 'string' || !device.userCode || typeof device?.verificationUrl !== 'string' ||
           !Number.isInteger(device.expiresIn) || device.expiresIn < 1 || device.expiresIn > 1800) {