@opice/cli 0.0.3 → 0.0.4

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@opice/cli",
-	"version": "0.0.3",
+	"version": "0.0.4",
 	"description": "CLI for opice — scaffolds projects and wraps `bun test` to stream E2E results to the reporting platform",
 	"type": "module",
 	"bin": {

package/src/cli.ts

@@ -22,11 +22,12 @@ Commands:
   failures <run-url|run-id> [--json]
       Pull a failed run's details (failed scenarios, the failing step,
       error, screenshot URL, and source files) for the re-eval workflow.
-      Token comes from the URL's ?token= or OPICE_READ_TOKEN.
+      Read token comes from the URL's ?token= or OPICE_READ_TOKEN (a
+      read-only share link).
 
   users create <email> [--password=...] [--name=...] [--endpoint=URL] [--admin-token=TOKEN]
-      Create a dashboard login (every user is admin). Needs the admin
-      token (--admin-token or OPICE_ADMIN_TOKEN) and the platform endpoint
+      Create a dashboard login (admin role by default). Needs the bootstrap
+      admin token (--admin-token or OPICE_ADMIN_TOKEN) and the platform endpoint
       (--endpoint, OPICE_ENDPOINT, or opice.config.json). A password is
       generated and printed if you don't pass one.
 

package/src/commands/test.ts

@@ -52,12 +52,12 @@ export async function testCommand(args: string[]): Promise<number> {
 
 	// After bun test exits, look for handoff files the reporter wrote and
 	// POST /finish for each run so it leaves "running" state.
-	await finalizeHandoffs(child.pid, project, process.env['OPICE_READ_TOKEN'])
+	await finalizeHandoffs(child.pid, project)
 
 	return exitCode
 }
 
-async function finalizeHandoffs(childPid: number | undefined, slug: string | undefined, readToken: string | undefined): Promise<void> {
+async function finalizeHandoffs(childPid: number | undefined, slug: string | undefined): Promise<void> {
 	let files: string[]
 	try {
 		files = await fs.readdir(HANDOFF_DIR)
@@ -70,7 +70,7 @@ async function finalizeHandoffs(childPid: number | undefined, slug: string | und
 		try {
 			const handoff = JSON.parse(await fs.readFile(full, 'utf-8')) as Handoff
 			await finishRun(handoff)
-			printRunUrl(handoff, slug, readToken)
+			printRunUrl(handoff, slug)
 		} catch (err) {
 			warn(`Failed to finalize run from ${file}: ${(err as Error).message}`)
 		} finally {
@@ -79,14 +79,11 @@ async function finalizeHandoffs(childPid: number | undefined, slug: string | und
 	}
 }
 
-function printRunUrl(handoff: Handoff, slug: string | undefined, readToken: string | undefined): void {
+function printRunUrl(handoff: Handoff, slug: string | undefined): void {
 	if (!slug) return
-	const query = readToken ? `?token=${readToken}` : ''
-	const url = `${handoff.endpoint}/p/${slug}/r/${handoff.runId}${query}`
+	const url = `${handoff.endpoint}/p/${slug}/r/${handoff.runId}`
 	console.error(`[opice] View run: ${url}`)
-	if (!readToken) {
-		console.error('[opice] (open the dashboard for the tokened read-only link, or set OPICE_READ_TOKEN to embed it here)')
-	}
+	console.error('[opice] (sign in to view, or create a read-only share link from the run page)')
 }
 
 async function finishRun(handoff: Handoff): Promise<void> {

package/src/commands/users.ts

@@ -2,9 +2,10 @@
  * `opice users create <email>` — create a dashboard login.
  *
  * Self-service signup is disabled on the platform; this is the sanctioned way
- * to mint an account. It calls the admin endpoint, so it needs the admin token
- * (--admin-token or OPICE_ADMIN_TOKEN) and the platform endpoint (--endpoint,
- * OPICE_ENDPOINT, or opice.config.json). Every account is a full admin.
+ * to mint an account. It calls the `admin.createUser` RPC with the bootstrap
+ * admin token as a Bearer credential (--admin-token or OPICE_ADMIN_TOKEN) and
+ * the platform endpoint (--endpoint, OPICE_ENDPOINT, or opice.config.json).
+ * Accounts are created with the `admin` role by default.
  *
  * If no password is given one is generated and printed once.
  */
@@ -50,24 +51,29 @@ export async function usersCommand(args: string[]): Promise<number> {
 
 	let response: Response
 	try {
-		response = await fetch(`${endpoint.replace(/\/$/, '')}/api/v1/admin/users`, {
+		response = await fetch(`${endpoint.replace(/\/$/, '')}/rpc`, {
 			method: 'POST',
-			headers: { 'content-type': 'application/json', 'x-admin-token': adminToken },
-			body: JSON.stringify({ email: flags.email, password, ...(flags.name ? { name: flags.name } : {}) }),
+			headers: { 'content-type': 'application/json', authorization: `Bearer ${adminToken}` },
+			body: JSON.stringify({
+				method: 'admin.createUser',
+				input: { email: flags.email, password, ...(flags.name ? { name: flags.name } : {}) },
+			}),
 		})
 	} catch (err) {
 		console.error(`[opice] request failed: ${(err as Error).message}`)
 		return 1
 	}
 
-	const data = (await response.json().catch(() => null)) as { email?: string; error?: { message?: string } } | null
-	if (!response.ok || !data || data.error) {
+	const data = (await response.json().catch(() => null)) as
+		| { result?: { email?: string }; error?: { message?: string } }
+		| null
+	if (!response.ok || !data || data.error || !data.result) {
 		const message = data?.error?.message ?? `${response.status} ${response.statusText}`
 		console.error(`[opice] could not create user: ${message}`)
 		return 1
 	}
 
-	console.log(`✓ Created user ${data.email ?? flags.email}`)
+	console.log(`✓ Created user ${data.result.email ?? flags.email}`)
 	if (generated) {
 		console.log(`  password: ${password}`)
 		console.log('  (shown once — store it in your password manager now)')