@softr/cli 0.1.0 → 0.1.1-se21216.6

package/dist/cli.mjs

@@ -6098,9 +6098,9 @@ var SoftrApiError = class extends Error {
   body;
   hint;
 };
-function hintFor(status) {
+function hintFor(status, client) {
   if (status === 401 || status === 403) {
-    return "The token was not accepted: revoked, from another environment, missing access to this workflow, or its statements do not grant this action. Run: softr login";
+    return client.kind === "proxy" ? "The target refused the request: no access to this workflow, or its credential is gone." : "The token was not accepted: revoked, from another environment, missing access to this workflow, or its statements do not grant this action. Run: softr login";
   }
   if (status === 409) {
     return "The workflow changed on the server since the last pull. Pull again with --force, then re-apply your edits.";
@@ -6108,7 +6108,7 @@ function hintFor(status) {
   return void 0;
 }
 function authHeaders(client) {
-  return { Authorization: `Bearer ${client.token}` };
+  return client.kind === "proxy" ? {} : { Authorization: `Bearer ${client.token}` };
 }
 async function send(client, service, method, path13, body) {
   const init = {
@@ -6129,7 +6129,7 @@ async function send(client, service, method, path13, body) {
     `${method} ${path13} failed with status ${response.status}${text ? `: ${text}` : ""}`,
     response.status,
     text,
-    hintFor(response.status)
+    hintFor(response.status, client)
   );
 }
 async function apiRequest(client, method, path13, body) {
@@ -14514,7 +14514,7 @@ function normalizeUrl(value, source) {
   } catch {
     throw new CliError(`${source} is not a valid URL: ${value}`);
   }
-  return url.origin;
+  return `${url.origin}${url.pathname.replace(/\/+$/, "")}`;
 }
 function resolveTarget(remembered) {
   const pick = (envVar, rememberedValue, fallback) => {
@@ -14547,6 +14547,8 @@ function tokenKind(token) {
 
 // src/config/credentials.ts
 var TOKEN_ENV_VAR = "SOFTR_TOKEN";
+var AUTH_ENV_VAR = "SOFTR_AUTH";
+var PROXY_AUTH = "proxy";
 var REFRESH_MARGIN_MS = 5 * 60 * 1e3;
 function credentialsPath() {
   return path6.join(homedir(), ".softr", "credentials.json");
@@ -14611,6 +14613,9 @@ async function refreshedAccessToken(target, stored) {
   }
 }
 async function authenticatedClient(target) {
+  if (process.env[AUTH_ENV_VAR] === PROXY_AUTH) {
+    return { target, kind: "proxy" };
+  }
   const fromEnv = process.env[TOKEN_ENV_VAR];
   if (fromEnv) {
     return { target, token: fromEnv, kind: tokenKind(fromEnv) };
@@ -15542,6 +15547,11 @@ function registerLogin(program3) {
   ).option("--no-browser", "browser login, but print the URL instead of opening it (for remote shells and agents)").action(async (opts, command) => {
     const options = globalOptions(command);
     const target = resolveTarget();
+    if (process.env[AUTH_ENV_VAR] === "proxy") {
+      throw new CliError(
+        `Login is not needed: the target authenticates the requests itself ($${AUTH_ENV_VAR}=proxy).`
+      );
+    }
     const token = (opts.token ?? process.env[TOKEN_ENV_VAR] ?? "").trim();
     const saved = token ? pastedToken(token) : opts.browser ? await interactiveLogin(target) : await browserLogin(target, true);
     const identity = await identify({ target, token: saved.token, kind: saved.kind });
@@ -15561,6 +15571,14 @@ function registerLogin(program3) {
     const options = globalOptions(command);
     const target = resolveTarget();
     const client = await authenticatedClient(target);
+    if (client.kind === "proxy") {
+      emit(
+        options,
+        `Requests to ${targetHost(target)} carry no token: the target authenticates them itself ($${AUTH_ENV_VAR}=proxy).`,
+        { kind: "proxy", host: targetHost(target) }
+      );
+      return;
+    }
     const identity = await identify(client);
     const stored = process.env[TOKEN_ENV_VAR] ? void 0 : await storedToken(target);
     const expiry = stored?.expiresAt ? ` Expires ${stored.expiresAt.slice(0, 16).replace("T", " ")} UTC.` : "";
@@ -16672,7 +16690,7 @@ Pass --workspace <id> to a command, or set SOFTR_WORKSPACE_ID, to work in one of
 // package.json
 var package_default = {
   name: "@softr/cli",
-  version: "0.1.0",
+  version: "0.1.1-se21216.6",
   description: "The Softr command line: build, test and publish Softr workflows from local files; more Softr APIs to come",
   keywords: [
     "softr",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@softr/cli",
-  "version": "0.1.0",
+  "version": "0.1.1-se21216.6",
   "description": "The Softr command line: build, test and publish Softr workflows from local files; more Softr APIs to come",
   "keywords": [
     "softr",