@mtreeai/msapling-cli 2.3.6-beta.11 → 2.3.6-beta.13

package/dist/index.js

@@ -8045,18 +8045,24 @@ async function promptPassword(prompt) {
     stdin.on("data", onData);
   });
 }
-async function loginWithEmailPassword(email, context) {
+async function loginWithEmailPassword(email, context, preSuppliedPassword) {
   context.addMessage("system", `Logging in as ${email}...`);
-  let password = "";
-  try {
-    password = await promptPassword("Password: ");
-    if (!password) {
-      context.addMessage("system", "Login cancelled.");
+  let password = preSuppliedPassword || process.env.MSAPLING_PASSWORD || "";
+  if (!password) {
+    context.addMessage(
+      "system",
+      "NOTE: the interactive password prompt is known to leak keystrokes into the REPL input. Safer alternatives: /login <email> <password>  OR  set MSAPLING_PASSWORD env var  OR  use /login <token>."
+    );
+    try {
+      password = await promptPassword("Password: ");
+      if (!password) {
+        context.addMessage("system", "Login cancelled.");
+        return;
+      }
+    } catch (err) {
+      context.addMessage("error", `Password prompt failed: ${err}`);
       return;
     }
-  } catch (err) {
-    context.addMessage("error", `Password prompt failed: ${err}`);
-    return;
   }
   try {
     const result = await context.client.loginEmailPassword(email, password);
@@ -8184,10 +8190,10 @@ var init_login = __esm({
           context.addMessage(
             "system",
             `Usage:
-  /login your@email.com    Sign in with email + password
-  /login github            GitHub device flow
-  /login guest             Anonymous guest session (limited tier)
-  /login <token>           Paste an API token from msapling.com \u2192 Settings \u2192 API Keys`
+  /login your@email.com [pwd]   Sign in with email + password (pwd may also come from MSAPLING_PASSWORD env var)
+  /login github                 GitHub device flow
+  /login guest                  Anonymous guest session (limited tier)
+  /login <token>                Paste an API token from msapling.com \u2192 Settings \u2192 API Keys`
           );
           return;
         }
@@ -8196,7 +8202,8 @@ var init_login = __esm({
         } else if (arg === "guest") {
           await loginAsGuest(context);
         } else if (isEmailAddress(arg)) {
-          await loginWithEmailPassword(arg, context);
+          const inlinePassword = args2[1];
+          await loginWithEmailPassword(arg, context, inlinePassword);
         } else if (isTokenLike(arg)) {
           await context.storage.saveToken(arg);
           context.client.setToken(arg);
@@ -13288,7 +13295,7 @@ import { jsx, jsxs } from "react/jsx-runtime";
 var Header = () => /* @__PURE__ */ jsxs(Box, { borderStyle: "single", borderColor: "cyan", paddingX: 1, marginBottom: 1, children: [
   /* @__PURE__ */ jsxs(Text, { bold: true, color: "cyan", children: [
     "\u25CF MSapling CLI v",
-    "2.3.6-beta.11"
+    "2.3.6-beta.13"
   ] }),
   /* @__PURE__ */ jsx(Box, { marginLeft: 2, children: /* @__PURE__ */ jsx(Text, { color: "gray", children: "Platinum Tier Architecture" }) })
 ] });
@@ -13310,6 +13317,13 @@ function shouldShowCapMeter(user) {
 }
 var Footer = ({ user }) => {
   if (!user) return null;
+  const num = (v) => typeof v === "number" && Number.isFinite(v) ? v : 0;
+  const fuel = num(user.fuel_credits);
+  const tokensByok = num(user.tokens_byok);
+  const costByok = num(user.cost_byok);
+  const tokensOllama = num(user.tokens_ollama);
+  const costOllama = num(user.cost_ollama);
+  const tokensPurchased = num(user.tokens_purchased);
   const showCapMeter = shouldShowCapMeter(user);
   const dailyUsed = user.daily_tokens_used;
   const dailyLimit = user.daily_tokens_limit;
@@ -13320,26 +13334,26 @@ var Footer = ({ user }) => {
       /* @__PURE__ */ jsx2(Text2, { bold: true, children: "Usage Dashboard (6-Track)" }),
       /* @__PURE__ */ jsxs2(Text2, { color: "yellow", children: [
         "$",
-        user.fuel_credits.toFixed(4),
+        fuel.toFixed(4),
         " Fuel"
       ] })
     ] }),
     /* @__PURE__ */ jsxs2(Box2, { flexDirection: "row", gap: 2, marginTop: 0, children: [
       /* @__PURE__ */ jsxs2(Text2, { dimColor: true, children: [
         "BYOK: ",
-        user.tokens_byok.toLocaleString(),
+        tokensByok.toLocaleString(),
         " t / $",
-        user.cost_byok.toFixed(2)
+        costByok.toFixed(2)
       ] }),
       /* @__PURE__ */ jsxs2(Text2, { dimColor: true, children: [
         "Ollama: ",
-        user.tokens_ollama.toLocaleString(),
+        tokensOllama.toLocaleString(),
         " t / $",
-        user.cost_ollama.toFixed(2)
+        costOllama.toFixed(2)
       ] }),
       /* @__PURE__ */ jsxs2(Text2, { dimColor: true, children: [
         "Purchased: ",
-        user.tokens_purchased.toLocaleString(),
+        tokensPurchased.toLocaleString(),
         " t"
       ] })
     ] }),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mtreeai/msapling-cli",
-  "version": "2.3.6-beta.11",
+  "version": "2.3.6-beta.13",
   "description": "MSapling CLI — React/Ink terminal client for the MSapling backend (chat, projects, MDrive, agent tools). Proprietary; redistribution prohibited.",
   "license": "UNLICENSED",
   "author": "MSapling Team",