@sendpanda/cli 0.1.0 → 0.2.0

package/README.md

@@ -3,7 +3,7 @@
 Manage every SendPanda project from a terminal or a coding agent: create projects, add and verify domains, create keys and templates, send email. Requires Node.js 22 or newer.
 
 ```sh
-npx @sendpanda/cli login --token sp_pat_...   # token: dashboard → Settings → Connections → New token
+npx @sendpanda/cli login   # opens your browser to approve access (or: login --token sp_pat_...)
 npx @sendpanda/cli whoami                     # accounts, projects, environment ids
 npx @sendpanda/cli setup --project "My App" --domain example.com --env-file .env
 ```

package/dist/cli.js

@@ -4,11 +4,16 @@
 import { mkdir, readFile, writeFile, chmod } from "fs/promises";
 import { homedir } from "os";
 import { dirname, join } from "path";
+import { createServer } from "http";
+import { randomBytes } from "crypto";
+import { spawn } from "child_process";
 var DEFAULT_API = "https://api.sendpanda.email";
+var DEFAULT_WEB = "https://sendpanda.email";
 var HELP = `sendpanda: manage SendPanda from a terminal or a coding agent
 
 Setup
-  login --token <sp_pat_...> [--api URL]   Save an access token (Settings > Connections > New token)
+  login [--api URL] [--web URL]            Open SendPanda in your browser to approve access
+  login --token <sp_pat_...>               Save an access token instead (Settings > Connections)
   logout                                   Forget the saved token
   whoami                                   Show your accounts, projects and environment ids
   setup --project NAME --domain DOMAIN     Create a project, add the domain, create a sending key
@@ -60,7 +65,8 @@ async function main(argv, deps = {}) {
     env: deps.env ?? process.env,
     out: deps.out ?? ((t) => process.stdout.write(t)),
     err: deps.err ?? ((t) => process.stderr.write(t)),
-    readFile: deps.readFile ?? ((p) => readFile(p, "utf8"))
+    readFile: deps.readFile ?? ((p) => readFile(p, "utf8")),
+    open: deps.open ?? openBrowser
   };
   try {
     await run(argv, d);
@@ -71,6 +77,60 @@ async function main(argv, deps = {}) {
     return e instanceof CliError ? 2 : 1;
   }
 }
+function openBrowser(url) {
+  const [cmd, args] = process.platform === "darwin" ? ["open", [url]] : process.platform === "win32" ? ["cmd", ["/c", "start", "", url.replace(/&/g, "^&")]] : ["xdg-open", [url]];
+  try {
+    spawn(cmd, args, { stdio: "ignore", detached: true }).on("error", () => {
+    }).unref();
+  } catch {
+  }
+}
+async function browserLogin(d, webUrl) {
+  const state = randomBytes(16).toString("hex");
+  return new Promise((resolve, reject) => {
+    const server = createServer((req, res) => {
+      const url = new URL(req.url ?? "/", "http://127.0.0.1");
+      if (url.pathname !== "/callback") {
+        res.writeHead(404).end();
+        return;
+      }
+      const token = url.searchParams.get("token");
+      const ok = url.searchParams.get("state") === state && !!token;
+      res.writeHead(ok ? 200 : 400, {
+        "Content-Type": "text/html; charset=utf-8",
+        "Referrer-Policy": "no-referrer"
+      }).end(
+        ok ? `<!doctype html><title>SendPanda</title><body style="font-family:system-ui;padding:3rem"><h2>You're signed in.</h2><p>You can close this tab and return to your terminal.</p>` : '<!doctype html><title>SendPanda</title><body style="font-family:system-ui;padding:3rem"><h2>Sign-in failed.</h2><p>Return to your terminal and run sendpanda login again.</p>'
+      );
+      if (ok) done(() => resolve(token));
+    });
+    const timer = setTimeout(
+      () => done(
+        () => reject(new CliError("Timed out waiting for browser approval"))
+      ),
+      5 * 6e4
+    );
+    function done(fn) {
+      clearTimeout(timer);
+      server.close();
+      server.closeAllConnections();
+      fn();
+    }
+    server.on("error", (e) => done(() => reject(e)));
+    server.listen(0, "127.0.0.1", () => {
+      const port = server.address().port;
+      const target = new URL("/cli/authorize", webUrl);
+      target.searchParams.set("port", String(port));
+      target.searchParams.set("state", state);
+      d.err(
+        `Opening your browser to approve access. If it does not open, visit:
+${target}
+`
+      );
+      d.open(target.toString());
+    });
+  });
+}
 function configPath(d) {
   return join(
     d.env.SENDPANDA_CONFIG_DIR ?? join(homedir(), ".config", "sendpanda"),
@@ -108,10 +168,7 @@ async function run(argv, d) {
   const print = (value) => d.out(JSON.stringify(value, null, 2) + "\n");
   async function call(method, path, options = {}) {
     const secret = options.token ?? token;
-    if (!secret)
-      throw new CliError(
-        "Not signed in. Create an access token in the dashboard (Settings > Connections) and run: sendpanda login --token sp_pat_..."
-      );
+    if (!secret) throw new CliError("Not signed in. Run: sendpanda login");
     if (!/^\/(v1|api)\//.test(path))
       throw new CliError("Path must start with /v1/ or /api/");
     const response = await d.fetch(new URL(path, base), {
@@ -175,11 +232,13 @@ async function run(argv, d) {
   };
   switch (command) {
     case "login": {
-      const given = str(flags.token) ?? d.env.SENDPANDA_TOKEN;
-      if (!given?.startsWith("sp_pat_"))
-        throw new CliError(
-          "Pass an access token: sendpanda login --token sp_pat_... (create one in the dashboard under Settings > Connections)"
-        );
+      let given = str(flags.token) ?? d.env.SENDPANDA_TOKEN;
+      if (!given) {
+        const web = str(flags.web) ?? d.env.SENDPANDA_WEB_URL ?? (base.hostname.startsWith("api.") ? `${base.protocol}//${base.host.slice(4)}` : base.hostname === "localhost" || base.hostname === "127.0.0.1" ? "http://localhost:3000" : DEFAULT_WEB);
+        given = await browserLogin(d, web);
+      }
+      if (!given.startsWith("sp_pat_"))
+        throw new CliError("That is not a SendPanda access token (sp_pat_...)");
       const who = await call("GET", "/api/me", { token: given });
       await saveConfig(d, {
         ...saved,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sendpanda/cli",
-  "version": "0.1.0",
+  "version": "0.2.0",
   "description": "SendPanda command line: manage every project, domain, key, template and email from a terminal or a coding agent.",
   "license": "MIT",
   "engines": {
@@ -9,7 +9,7 @@
   "private": false,
   "type": "module",
   "bin": {
-    "sendpanda": "./dist/cli.js"
+    "sendpanda": "dist/cli.js"
   },
   "files": [
     "dist",