@shipd-ai/cli 0.1.1 → 0.1.3

package/README.md

@@ -16,15 +16,16 @@ Admin docs, the supported checks, and a copy-paste setup prompt for coding agent
 
 ```bash
 npm install -g @shipd-ai/cli
-shipd login            # opens the quest's login page (olympus by default); or: shipd login --token <jwt>
+shipd login            # opens https://shipd.ai/cli-auth (one token for every quest); or: shipd login --token <jwt>
 shipd whoami
 shipd quests           # which quests this CLI can talk to
 ```
 
 `login` opens the token page in your browser; paste the token back into the
-terminal. It is stored at `~/.shipd/credentials.json` (mode 0600). The token is
-personal: never commit it, never pass it on a command line. `shipd logout`
-deletes it.
+terminal. `--no-browser` prints the page URL instead of opening it. The token is
+stored at `~/.shipd/credentials.json` (mode 0600). It is personal: never commit
+or share it. Typing `--token` by hand leaves it in your shell history, so prefer
+the prompt there. `shipd logout` deletes it.
 
 ## Three input modes
 
@@ -110,6 +111,7 @@ check with `status`, `verdict`, `output`, `error`, `durationMs`, and `steps`
 
 | Variable | Effect |
 | --- | --- |
+| `SHIPD_AUTH_URL` | Override the platform login page `shipd login` opens (default `https://shipd.ai/cli-auth`). |
 | `SHIPD_<QUEST>_URL` | Override the quest's base URL (for example `SHIPD_OLYMPUS_URL`). |
 | `SHIPD_<QUEST>_CONVEX_URL` | Skip `/api/cli/config` and talk to this Convex deployment. |
 | `SHIPD_HOME` | Credentials and caches directory (default `~/.shipd`). |

package/dist/commands/auth.d.ts

@@ -3,14 +3,15 @@ export declare const login: import("citty").CommandDef<{
         readonly type: "string";
         readonly description: "Paste the token directly instead of prompting";
     };
-    readonly "no-browser": {
+    readonly browser: {
         readonly type: "boolean";
-        readonly description: "Print the login URL instead of opening it";
+        readonly default: true;
+        readonly description: "Open the login page in a browser";
+        readonly negativeDescription: "Print the login URL instead of opening a browser";
     };
     readonly quest: {
         readonly type: "string";
-        readonly description: "Quest whose login page to open (default: olympus)";
-        readonly default: "olympus";
+        readonly description: "Open this quest's own login page instead of the platform page (the token works for every quest either way)";
     };
 }>;
 export declare const logout: import("citty").CommandDef<import("citty").ArgsDef>;

package/dist/commands/auth.js

@@ -4,7 +4,7 @@ import { defineCommand } from "citty";
 import { clearCredentials, loadCredentials, saveCredentials } from "../auth.js";
 import { UsageError } from "../errors.js";
 import { printJson } from "../format.js";
-import { DEFAULT_QUEST, questAuthUrl } from "../quests.js";
+import { platformAuthUrl, questAuthUrl } from "../quests.js";
 function openBrowser(url) {
     if (process.platform === "win32") {
         // `start` is a cmd.exe built-in, not a standalone executable.
@@ -18,7 +18,18 @@ function openBrowser(url) {
 function prompt(question) {
     const rl = createInterface({ input: process.stdin, output: process.stdout });
     return new Promise((resolve) => {
+        let answered = false;
+        // stdin can end before an answer (a non-interactive shell with nothing
+        // piped in). Resolve empty so login fails with a usage error; otherwise
+        // the process drains and exits 0 with nothing saved.
+        rl.on("close", () => {
+            if (answered)
+                return;
+            process.stdout.write("\n");
+            resolve("");
+        });
         rl.question(question, (answer) => {
+            answered = true;
             rl.close();
             resolve(answer.trim());
         });
@@ -27,8 +38,7 @@ function prompt(question) {
 const questArg = {
     quest: {
         type: "string",
-        description: `Quest whose login page to open (default: ${DEFAULT_QUEST})`,
-        default: DEFAULT_QUEST,
+        description: "Open this quest's own login page instead of the platform page (the token works for every quest either way)",
     },
 };
 export const login = defineCommand({
@@ -36,23 +46,31 @@ export const login = defineCommand({
     args: {
         ...questArg,
         token: { type: "string", description: "Paste the token directly instead of prompting" },
-        "no-browser": { type: "boolean", description: "Print the login URL instead of opening it" },
+        // Named `browser` with a true default because citty parses `--no-browser`
+        // as browser=false; an arg literally named "no-browser" is never set.
+        browser: {
+            type: "boolean",
+            default: true,
+            description: "Open the login page in a browser",
+            negativeDescription: "Print the login URL instead of opening a browser",
+        },
     },
     run: async ({ args }) => {
-        const authUrl = questAuthUrl(args.quest);
+        const authUrl = args.quest ? questAuthUrl(args.quest) : platformAuthUrl();
         let token = args.token?.trim();
         if (!token) {
-            if (args["no-browser"]) {
-                console.log(`\n  Open this page and copy the token:\n  ${authUrl}\n`);
-            }
-            else {
+            if (args.browser) {
                 console.log(`\n  Opening browser...\n  ${authUrl}\n`);
                 openBrowser(authUrl);
             }
+            else {
+                console.log(`\n  Open this page and copy the token:\n  ${authUrl}\n`);
+            }
             token = await prompt("  Paste your token: ");
         }
-        if (!token)
-            throw new UsageError("No token provided.");
+        if (!token) {
+            throw new UsageError("No token provided. Pass it with --token, or paste it at the prompt in an interactive terminal.");
+        }
         const identity = saveCredentials(token);
         const expiresAt = new Date(identity.exp * 1000).toLocaleDateString();
         console.log(`\n  Logged in as ${identity.name || identity.email || identity.sub}`);

package/dist/quests.d.ts

@@ -4,7 +4,9 @@ export declare const DEFAULT_QUEST = "olympus";
 export declare function knownQuests(): string[];
 /** `SHIPD_<QUEST>_URL` override, or NODE_ENV=development → localhost. */
 export declare function questBaseUrl(quest: string): string;
-/** The page that mints the CLI token for the browser login flow. */
+/** `SHIPD_AUTH_URL` override, or NODE_ENV=development → localhost. */
+export declare function platformAuthUrl(): string;
+/** A quest's own copy of the token page (the platform page is the default). */
 export declare function questAuthUrl(quest: string): string;
 export interface QuestConfig {
     convexUrl: string;

package/dist/quests.js

@@ -32,7 +32,21 @@ export function questBaseUrl(quest) {
     }
     return process.env.NODE_ENV === "development" ? entry.dev : entry.prod;
 }
-/** The page that mints the CLI token for the browser login flow. */
+// The platform-level token page. The shipd-cli token works for every quest,
+// so the browser login lands here; `questAuthUrl` stays for a quest's own
+// copy of the page (`shipd login --quest <quest>`).
+const PLATFORM_AUTH_URL = {
+    prod: "https://shipd.ai/cli-auth",
+    dev: "http://localhost:3010/cli-auth",
+};
+/** `SHIPD_AUTH_URL` override, or NODE_ENV=development → localhost. */
+export function platformAuthUrl() {
+    const override = process.env.SHIPD_AUTH_URL;
+    if (override)
+        return override;
+    return process.env.NODE_ENV === "development" ? PLATFORM_AUTH_URL.dev : PLATFORM_AUTH_URL.prod;
+}
+/** A quest's own copy of the token page (the platform page is the default). */
 export function questAuthUrl(quest) {
     return `${questBaseUrl(quest)}/cli-auth`;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@shipd-ai/cli",
-  "version": "0.1.1",
+  "version": "0.1.3",
   "description": "Shipd admin CLI — run quest checks on Harbor tasks or existing tasks",
   "type": "module",
   "homepage": "https://shipd.ai",