@sickr/replay 0.5.5 → 0.6.0

package/dist/auth.js

@@ -0,0 +1,52 @@
+import { readFileSync, writeFileSync, mkdirSync, chmodSync, unlinkSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { join } from 'node:path';
+function credsPath() {
+    return join(homedir(), '.sickr', 'credentials.json');
+}
+export function readCredentials() {
+    try {
+        return JSON.parse(readFileSync(credsPath(), 'utf8'));
+    }
+    catch {
+        return null;
+    }
+}
+export function writeCredentials(c) {
+    const dir = join(homedir(), '.sickr');
+    mkdirSync(dir, { recursive: true });
+    const p = credsPath();
+    writeFileSync(p, JSON.stringify(c, null, 2) + '\n');
+    try {
+        chmodSync(p, 0o600);
+    }
+    catch { /* Windows: skip */ }
+}
+export function clearCredentials() {
+    try {
+        unlinkSync(credsPath());
+    }
+    catch { /* none */ }
+}
+/** Default to the production wedge worker; override with env for local dev. */
+export const AUTH_ENDPOINT = process.env.SICKR_AUTH_ENDPOINT ?? 'https://sickr.ai/api';
+export async function startDevice() {
+    const r = await fetch(`${AUTH_ENDPOINT}/auth/device/start`, { method: 'POST' });
+    if (!r.ok)
+        throw new Error(`device/start failed: ${r.status}`);
+    return await r.json();
+}
+export async function pollDevice(device_code) {
+    const r = await fetch(`${AUTH_ENDPOINT}/auth/device/poll`, {
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json' },
+        body: JSON.stringify({ device_code }),
+    });
+    if (!r.ok)
+        throw new Error(`device/poll failed: ${r.status}`);
+    return await r.json();
+}
+/** Sleep that respects an AbortSignal if you ever need to cancel. */
+export function sleep(ms) {
+    return new Promise((resolve) => setTimeout(resolve, ms));
+}

package/dist/cli.js

@@ -8,8 +8,9 @@ import { appendEvent, loadRun, runsDir, latestRunId } from './recorder.js';
 import { mergeHooks, removeHooks } from './hookConfig.js';
 import { renderRunHtml, renderCombinedHtml } from './render.js';
 import { buildSharePayload, buildCombinedPayload, publish, PublishError } from './share.js';
+import { readCredentials, writeCredentials, clearCredentials, startDevice, pollDevice, sleep } from './auth.js';
 const REPLAY_ENDPOINT = process.env.SICKR_REPLAY_ENDPOINT ?? 'https://sickr.ai/api/replay';
-const COMMANDS = ['init', 'record', 'open', 'list', 'share', 'stop', 'clear', 'help'];
+const COMMANDS = ['init', 'record', 'open', 'list', 'share', 'stop', 'clear', 'login', 'logout', 'whoami', 'help'];
 export function parseCommand(argv) {
     const c = argv[0];
     return c && COMMANDS.includes(c) ? c : null;
@@ -47,6 +48,11 @@ Commands:
   stop           Stop recording — removes SICKR's hooks from this project.
                  Your recorded runs are kept; run \`init\` to start again.
   clear          Delete all local runs in ~/.sickr/runs (asks first).
+  login          Sign in with GitHub (optional — unlocks persistent shares and
+                 Replay Pro cohort eligibility). Zero-account use still works.
+  logout         Forget the local login. Server-side session stays valid until
+                 it expires; revoke from your account page if needed.
+  whoami         Show who you're logged in as.
   help           Show this help.
 
 Requires Node 18+. Codex capture needs Codex CLI 0.133+ (run /hooks to trust);
@@ -380,7 +386,7 @@ async function handleShare(runId, yes, open) {
     if (!(await confirmPublish(yes, 'this run')))
         return;
     const url = await publishWithRetry(payload);
-    process.stdout.write(`sickr: published → ${url}\nsickr: this link expires in 24h.\nsickr: Replay Pro (live view + remote steer) — coming soon → https://sickr.ai/#waitlist\n`);
+    process.stdout.write(`sickr: published → ${url}\nsickr: this link expires in 24h.\nsickr: Replay Pro (live + remote) — early access, rolling out in cohorts → https://sickr.ai/#waitlist\n`);
     if (open)
         openInBrowser(url);
 }
@@ -401,7 +407,7 @@ async function handleShareCombined(sel, yes, open) {
     if (!(await confirmPublish(yes, 'this combined replay')))
         return;
     const url = await publishWithRetry(payload);
-    process.stdout.write(`sickr: published → ${url}\nsickr: this link expires in 24h.\nsickr: Replay Pro (live view + remote steer) — coming soon → https://sickr.ai/#waitlist\n`);
+    process.stdout.write(`sickr: published → ${url}\nsickr: this link expires in 24h.\nsickr: Replay Pro (live + remote) — early access, rolling out in cohorts → https://sickr.ai/#waitlist\n`);
     if (open)
         openInBrowser(url);
 }
@@ -414,6 +420,84 @@ async function promptLine() {
         });
     });
 }
+/** GitHub Device Flow login — optional, but unlocks persistent shares + Pro eligibility. */
+export async function handleLogin() {
+    const existing = readCredentials();
+    if (existing) {
+        process.stdout.write(`sickr: already logged in as ${existing.login}. Run \`logout\` to switch accounts.\n`);
+        return;
+    }
+    let device;
+    try {
+        device = await startDevice();
+    }
+    catch (e) {
+        process.stderr.write(`sickr: could not start GitHub login (${e.message}).\n`);
+        process.exit(1);
+        return;
+    }
+    const verifyUrl = device.verification_uri_complete ?? device.verification_uri;
+    process.stdout.write(`\nsickr: open ${device.verification_uri} in your browser and enter this code:\n\n` +
+        `    ${device.user_code}\n\n` +
+        `(opening ${verifyUrl} for you …)\n`);
+    openInBrowser(verifyUrl);
+    const deadline = Date.now() + device.expires_in * 1000;
+    let intervalMs = Math.max(1, device.interval) * 1000;
+    while (Date.now() < deadline) {
+        await sleep(intervalMs);
+        let result;
+        try {
+            result = await pollDevice(device.device_code);
+        }
+        catch (e) {
+            process.stderr.write(`sickr: login poll failed (${e.message}).\n`);
+            process.exit(1);
+            return;
+        }
+        if (result.status === 'success') {
+            writeCredentials({
+                token: result.token, login: result.login, github_user_id: result.github_user_id,
+                name: result.name ?? null, login_at: new Date().toISOString(),
+            });
+            process.stdout.write(`\nsickr: logged in as ${result.login}. Your shares are now persistent and claimable.\n`);
+            return;
+        }
+        if (result.status === 'pending')
+            continue;
+        if (result.status === 'slow_down') {
+            intervalMs += 5000;
+            continue;
+        }
+        if (result.status === 'expired') {
+            process.stderr.write('sickr: login code expired. Run `login` again.\n');
+            process.exit(1);
+            return;
+        }
+        if (result.status === 'denied') {
+            process.stderr.write('sickr: authorization denied.\n');
+            process.exit(1);
+            return;
+        }
+        process.stderr.write(`sickr: login error: ${result.error ?? 'unknown'}.\n`);
+        process.exit(1);
+        return;
+    }
+    process.stderr.write('sickr: login timed out. Run `login` again.\n');
+    process.exit(1);
+}
+export function handleLogout() {
+    const c = readCredentials();
+    clearCredentials();
+    process.stdout.write(c ? `sickr: logged out (was ${c.login}).\n` : 'sickr: not logged in.\n');
+}
+export function handleWhoami() {
+    const c = readCredentials();
+    if (!c) {
+        process.stdout.write('sickr: not logged in. Run `npx @sickr/replay login`.\n');
+        return;
+    }
+    process.stdout.write(`sickr: ${c.login}${c.name ? ` (${c.name})` : ''} · since ${c.login_at}\n`);
+}
 async function readStdin() {
     const chunks = [];
     for await (const chunk of process.stdin)
@@ -470,6 +554,15 @@ async function main() {
         case 'clear':
             await handleClear(rest.includes('--yes') || rest.includes('-y'));
             return;
+        case 'login':
+            await handleLogin();
+            return;
+        case 'logout':
+            handleLogout();
+            return;
+        case 'whoami':
+            handleWhoami();
+            return;
         case 'share': {
             const yes = rest.includes('--yes') || rest.includes('-y');
             const openAfter = rest.includes('--open');

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sickr/replay",
-  "version": "0.5.5",
+  "version": "0.6.0",
   "type": "module",
   "description": "npx @sickr/replay — local Claude Code audit + one-click share. The free wedge into SICKR.",
   "bin": { "replay": "dist/cli.js" },