@solcreek/cli 0.4.20 → 0.4.21

package/dist/commands/login.js

@@ -62,7 +62,7 @@ export const loginCommand = defineCommand({
  * Default login: open browser → dashboard creates API key → redirect to localhost callback.
  */
 async function browserLogin() {
-    const { port, state, waitForCallback, close } = startAuthServer();
+    const { port, state, waitForCallback, close } = await startAuthServer();
     const dashboardUrl = getDashboardUrl();
     const authUrl = `${dashboardUrl}/cli-auth?port=${port}&state=${state}`;
     consola.info("Opening browser to authenticate...");

package/dist/utils/auth-server.d.ts

@@ -13,10 +13,10 @@ export interface AuthCallbackResult {
  * 4. This server receives the callback, validates state, resolves the promise
  * 5. Server auto-closes
  */
-export declare function startAuthServer(): {
+export declare function startAuthServer(): Promise<{
     port: number;
     state: string;
     waitForCallback: () => Promise<string>;
     close: () => void;
-};
+}>;
 //# sourceMappingURL=auth-server.d.ts.map

package/dist/utils/auth-server.js

@@ -11,7 +11,7 @@ import { randomBytes } from "node:crypto";
  * 4. This server receives the callback, validates state, resolves the promise
  * 5. Server auto-closes
  */
-export function startAuthServer() {
+export async function startAuthServer() {
     const state = randomBytes(16).toString("hex");
     let resolveCallback;
     let rejectCallback;
@@ -45,10 +45,23 @@ export function startAuthServer() {
         res.writeHead(404);
         res.end("Not found");
     });
-    // Listen on port 0 = OS picks a random available port
-    server.listen(0, "localhost");
+    // Listen on port 0 = OS picks a random available port.
+    // server.listen() is async — we MUST await the 'listening' event before
+    // reading server.address(), otherwise address() returns null and the
+    // callback URL ships ?port=0 to the dashboard (which correctly rejects
+    // with "Missing port or state parameter"). Regression seen in the wild
+    // on macOS — Node's behavior here is timing-dependent.
+    await new Promise((resolve, reject) => {
+        server.once("listening", () => resolve());
+        server.once("error", (err) => reject(err));
+        server.listen(0, "localhost");
+    });
     const address = server.address();
     const port = typeof address === "object" && address ? address.port : 0;
+    if (port === 0) {
+        server.close();
+        throw new Error("Could not determine local port for auth callback — server.address() returned null after listening.");
+    }
     // Timeout after 2 minutes
     const timeout = setTimeout(() => {
         rejectCallback(new Error("Login timed out after 2 minutes"));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@solcreek/cli",
-  "version": "0.4.20",
+  "version": "0.4.21",
   "description": "CLI for the Creek deployment platform",
   "type": "module",
   "main": "./dist/index.js",