@outlit/cli 1.7.1 → 1.8.0

package/dist/cli.js

@@ -104,7 +104,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "@outlit/cli",
-    version: "1.7.1",
+    version: "1.8.0",
     description: "CLI for Outlit customer intelligence platform",
     license: "Apache-2.0",
     repository: {
@@ -183,14 +183,15 @@ function promptInput(label, opts) {
 function isInteractive() {
   if (!process.stdin.isTTY || !process.stdout.isTTY)
     return false;
-  if (process.env.CI === "true" || process.env.CI === "1")
-    return false;
-  if (process.env.GITHUB_ACTIONS)
+  if (isCiEnvironment())
     return false;
   if (process.env.TERM === "dumb")
     return false;
   return true;
 }
+function isCiEnvironment() {
+  return process.env.CI === "true" || process.env.CI === "1" || Boolean(process.env.GITHUB_ACTIONS);
+}
 var isUnicodeSupported;
 var init_tty = __esm(() => {
   isUnicodeSupported = process.platform !== "win32" || Boolean(process.env.WT_SESSION) || process.env.TERM_PROGRAM === "vscode";
@@ -2726,17 +2727,173 @@ var init_api = __esm(() => {
   init_table();
 });
 
+// src/lib/poll.ts
+async function pollUntil(fn, predicate, opts = {}) {
+  const intervalMs = opts.intervalMs ?? 2000;
+  const timeoutMs = opts.timeoutMs ?? 300000;
+  const start = Date.now();
+  while (Date.now() - start < timeoutMs) {
+    try {
+      const result = await fn();
+      if (predicate(result))
+        return result;
+    } catch {}
+    if (opts.spinner && opts.spinnerMessage) {
+      const elapsed = Math.floor((Date.now() - start) / 1000);
+      opts.spinner.update(`${opts.spinnerMessage} (${elapsed}s)`);
+    }
+    await sleep(intervalMs);
+  }
+  return null;
+}
+function sleep(ms) {
+  return new Promise((resolve) => setTimeout(resolve, ms));
+}
+
+// src/lib/cli-auth.ts
+function buildApiUrl(baseUrl, path) {
+  return new URL(path, baseUrl).toString();
+}
+function asObject(value) {
+  if (typeof value !== "object" || value === null || Array.isArray(value)) {
+    throw new Error("Invalid response from Outlit API");
+  }
+  return value;
+}
+async function readJsonObject(response) {
+  const text = await response.text();
+  const parsed = text ? (() => {
+    try {
+      return JSON.parse(text);
+    } catch {
+      throw new Error(text);
+    }
+  })() : {};
+  return asObject(parsed);
+}
+function errorFromPayload(payload, fallback) {
+  return typeof payload.error === "string" ? payload.error : fallback;
+}
+async function startCliAuthRequest(baseUrl = process.env.OUTLIT_API_URL ?? DEFAULT_API_URL) {
+  const response = await globalThis.fetch(buildApiUrl(baseUrl, "/api/cli-auth/start"), {
+    method: "POST",
+    headers: {
+      "User-Agent": `outlit-cli/${CLI_VERSION2}`
+    }
+  });
+  const payload = await readJsonObject(response);
+  if (!response.ok) {
+    throw new Error(errorFromPayload(payload, `CLI auth start failed (${response.status})`));
+  }
+  if (typeof payload.requestId !== "string" || typeof payload.pollToken !== "string" || typeof payload.userCode !== "string" || typeof payload.approveUrl !== "string" || typeof payload.expiresAt !== "string" || typeof payload.intervalSeconds !== "number") {
+    throw new Error("Invalid CLI auth start response from Outlit API");
+  }
+  return {
+    requestId: payload.requestId,
+    pollToken: payload.pollToken,
+    userCode: payload.userCode,
+    approveUrl: payload.approveUrl,
+    expiresAt: payload.expiresAt,
+    intervalSeconds: payload.intervalSeconds
+  };
+}
+async function pollCliAuthRequest(baseUrl, input) {
+  const response = await globalThis.fetch(buildApiUrl(baseUrl, "/api/cli-auth/poll"), {
+    method: "POST",
+    headers: {
+      "Content-Type": "application/json",
+      "User-Agent": `outlit-cli/${CLI_VERSION2}`
+    },
+    body: JSON.stringify(input)
+  });
+  const payload = await readJsonObject(response);
+  if (payload.status === "invalid") {
+    return { status: "invalid" };
+  }
+  if (!response.ok) {
+    throw new Error(errorFromPayload(payload, `CLI auth poll failed (${response.status})`));
+  }
+  if (payload.status === "approved") {
+    if (typeof payload.apiKey !== "string" || typeof payload.keyPrefix !== "string") {
+      throw new Error("Invalid approved CLI auth response from Outlit API");
+    }
+    return {
+      status: "approved",
+      apiKey: payload.apiKey,
+      keyPrefix: payload.keyPrefix
+    };
+  }
+  if (payload.status === "pending" || payload.status === "failed" || payload.status === "consumed" || payload.status === "expired" || payload.status === "invalid") {
+    return payload;
+  }
+  throw new Error("Invalid CLI auth poll response from Outlit API");
+}
+async function waitForCliAuthApproval(baseUrl, request, opts = {}) {
+  const expiresAtMs = new Date(request.expiresAt).getTime();
+  const timeoutMs = opts.timeoutMs ?? Math.max(1000, expiresAtMs - Date.now());
+  const intervalMs = opts.intervalMs ?? request.intervalSeconds * 1000;
+  return pollUntil(() => pollCliAuthRequest(baseUrl, {
+    requestId: request.requestId,
+    pollToken: request.pollToken
+  }), (result) => result.status !== "pending", {
+    ...opts,
+    intervalMs,
+    timeoutMs
+  });
+}
+var init_cli_auth = __esm(() => {
+  init_config();
+});
+
 // src/commands/auth/login.ts
 var exports_login = {};
 __export(exports_login, {
   default: () => login_default
 });
+async function runBrowserAuthFlow(json) {
+  const baseUrl = process.env.OUTLIT_API_URL ?? DEFAULT_API_URL;
+  const session = await startCliAuthRequest(baseUrl);
+  const opened = isInteractive() ? openBrowser(session.approveUrl) : false;
+  process.stderr.write([
+    "",
+    "Authorize Outlit CLI in your browser:",
+    `  ${session.approveUrl}`,
+    "",
+    `Confirm this terminal code: ${session.userCode}`,
+    opened ? "Waiting for browser approval..." : "Waiting after you approve the request...",
+    ""
+  ].join(`
+`));
+  const spinner = isInteractive() ? bt2() : null;
+  spinner?.start("Waiting for browser approval...");
+  const result = await waitForCliAuthApproval(baseUrl, session, {
+    spinnerMessage: "Waiting for browser approval..."
+  });
+  if (!result) {
+    spinner?.stop("Approval timed out");
+    return outputError({
+      message: "Timed out waiting for browser approval. Run `outlit auth login --browser` again.",
+      code: "auth_timeout"
+    }, json);
+  }
+  if (result.status !== "approved") {
+    spinner?.stop("Approval did not complete");
+    const message = result.status === "failed" && result.error ? `Browser authorization failed: ${result.error}` : `Browser authorization ${result.status}. Run \`outlit auth login --browser\` again.`;
+    return outputError({
+      message,
+      code: `auth_${result.status}`
+    }, json);
+  }
+  spinner?.stop("Browser authorization approved");
+  return result.apiKey;
+}
 var login_default;
 var init_login = __esm(() => {
   init_dist3();
   init_dist();
   init_output2();
   init_api();
+  init_cli_auth();
   init_config();
   init_output();
   init_tty();
@@ -2753,6 +2910,7 @@ var init_login = __esm(() => {
         "",
         "Examples:",
         "  outlit auth login               # interactive (TTY)",
+        "  outlit auth login --browser     # browser approval, works in agent shells",
         "  outlit auth login --key ok_xxx  # non-interactive (CI, scripts, agents)"
       ].join(`
 `)
@@ -2763,14 +2921,33 @@ var init_login = __esm(() => {
         type: "string",
         description: `API key to store (required in non-interactive / CI mode).
 Format: ok_ followed by 32+ alphanumeric characters.`
+      },
+      browser: {
+        type: "boolean",
+        description: "Create a scoped CLI key through browser approval instead of pasting a key."
       }
     },
     async run({ args }) {
       const json = !!args.json;
       let apiKey = args.key;
+      const interactive = isInteractive();
+      const shouldUseBrowserAuth = args.browser || !interactive && !isCiEnvironment();
+      if (!apiKey) {
+        if (shouldUseBrowserAuth) {
+          apiKey = await runBrowserAuthFlow(json);
+        } else if (!interactive) {
+          return outputError({
+            message: "--key <apiKey> is required in non-interactive mode. For browser approval, run `outlit auth login --browser`.",
+            code: "missing_key"
+          }, json);
+        }
+      }
       if (!apiKey) {
-        if (!isInteractive()) {
-          return outputError({ message: "--key <apiKey> is required in non-interactive mode", code: "missing_key" }, json);
+        if (!interactive) {
+          return outputError({
+            message: "--key <apiKey> is required in non-interactive mode. For browser approval, run `outlit auth login --browser`.",
+            code: "missing_key"
+          }, json);
         }
         We("Outlit CLI -- Login");
         const existing = resolveApiKey();
@@ -2784,33 +2961,35 @@ Format: ok_ followed by 32+ alphanumeric characters.`
         const method = await Je({
           message: "How would you like to get your API key?",
           options: [
-            { value: "browser", label: "Open app.outlit.ai in browser" },
+            { value: "browser", label: "Authorize in browser" },
             { value: "manual", label: "Enter API key manually" }
           ]
         });
         if (Ct(method))
           cancelLogin();
         if (method === "browser") {
+          apiKey = await runBrowserAuthFlow(json);
+        } else {
           const opened = openBrowser(OUTLIT_DASHBOARD_URL);
           if (opened) {
             R2.info("Opening browser... paste your key once you have it.");
           } else {
             R2.info(`Could not open browser. Visit ${OUTLIT_DASHBOARD_URL} manually.`);
           }
+          const result = await He({
+            message: "Paste your Outlit API key:",
+            validate: (v) => {
+              if (!v)
+                return "API key is required";
+              if (!v.startsWith("ok_"))
+                return 'Outlit API keys start with "ok_"';
+              return;
+            }
+          });
+          if (Ct(result))
+            cancelLogin();
+          apiKey = result;
         }
-        const result = await He({
-          message: "Paste your Outlit API key:",
-          validate: (v) => {
-            if (!v)
-              return "API key is required";
-            if (!v.startsWith("ok_"))
-              return 'Outlit API keys start with "ok_"';
-            return;
-          }
-        });
-        if (Ct(result))
-          cancelLogin();
-        apiKey = result;
       }
       if (!apiKey.startsWith("ok_")) {
         return outputError({
@@ -5849,29 +6028,6 @@ var init_list5 = __esm(() => {
   });
 });
 
-// src/lib/poll.ts
-async function pollUntil(fn, predicate, opts = {}) {
-  const intervalMs = opts.intervalMs ?? 2000;
-  const timeoutMs = opts.timeoutMs ?? 300000;
-  const start = Date.now();
-  while (Date.now() - start < timeoutMs) {
-    try {
-      const result = await fn();
-      if (predicate(result))
-        return result;
-    } catch {}
-    if (opts.spinner && opts.spinnerMessage) {
-      const elapsed = Math.floor((Date.now() - start) / 1000);
-      opts.spinner.update(`${opts.spinnerMessage} (${elapsed}s)`);
-    }
-    await sleep(intervalMs);
-  }
-  return null;
-}
-function sleep(ms) {
-  return new Promise((resolve) => setTimeout(resolve, ms));
-}
-
 // src/commands/integrations/add.ts
 var exports_add = {};
 __export(exports_add, {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@outlit/cli",
-  "version": "1.7.1",
+  "version": "1.8.0",
   "description": "CLI for Outlit customer intelligence platform",
   "license": "Apache-2.0",
   "repository": {