@standardagents/cli 0.25.3 → 0.25.4

package/dist/index.js

@@ -121,10 +121,13 @@ async function parseError(response) {
     return fallback;
   }
 }
-async function startCliAuthSession(endpoint) {
+async function startCliAuthSession(endpoint, options = {}) {
   const response = await fetch(`${endpoint}/cli/auth/start`, {
     method: "POST",
-    headers: { "Content-Type": "application/json" }
+    headers: { "Content-Type": "application/json" },
+    // purpose 'auth' routes the browser to the platform's dedicated /cli-auth
+    // page (instant, no-wizard handshake) instead of project onboarding.
+    body: options.purpose ? JSON.stringify({ purpose: options.purpose }) : void 0
   });
   if (!response.ok) {
     throw new Error(await parseError(response));
@@ -239,7 +242,7 @@ function getScaffoldStandardAgentsVersion() {
   if (process.env.STANDARDAGENTS_WORKSPACE === "1") {
     return "workspace:*";
   }
-  return "0.25.3";
+  return "0.25.4";
 }
 function findViteConfig(cwd) {
   const candidates = ["vite.config.ts", "vite.config.js", "vite.config.mts", "vite.config.mjs"];
@@ -1534,7 +1537,7 @@ async function ensurePlatformAuth(options, quietLogs = false, context = {}) {
   return { connected: true, mode: "standardagents" };
 }
 function getCliVersion() {
-  return "0.25.3";
+  return "0.25.4";
 }
 function getSipVersion() {
   return "1.0.1";
@@ -2992,6 +2995,7 @@ function parseCliGitAuthRecord(value) {
     version: 1,
     endpoint: candidate.endpoint,
     session_cookie: candidate.session_cookie,
+    ...typeof candidate.api_key === "string" && candidate.api_key.length > 0 ? { api_key: candidate.api_key } : {},
     account_id: candidate.account_id,
     account_slug: typeof candidate.account_slug === "string" ? candidate.account_slug : void 0,
     user_id: candidate.user_id,
@@ -3013,6 +3017,7 @@ function saveCliGitAuth(input) {
     version: 1,
     endpoint: input.endpoint.replace(/\/+$/, ""),
     session_cookie: input.sessionCookie,
+    ...input.apiKey ? { api_key: input.apiKey } : {},
     account_id: input.account.id,
     account_slug: input.account.slug,
     user_id: input.user.id,
@@ -4980,6 +4985,7 @@ async function availableModels(options = {}) {
     writeError(message);
   }
 }
+var GIT_LOGIN_COMMAND = "npx @standardagents/cli@latest git-login";
 function parseKeyValueLines(input) {
   const result = {};
   for (const line of input.split(/\r?\n/)) {
@@ -5030,6 +5036,12 @@ function loadLocalConfig(options) {
   if (requestedEndpoint && requestedEndpoint !== globalAuth.endpoint) {
     return null;
   }
+  if (globalAuth.api_key) {
+    return {
+      endpoint: globalAuth.endpoint,
+      auth: { kind: "api-key", apiKey: globalAuth.api_key }
+    };
+  }
   return {
     endpoint: globalAuth.endpoint,
     auth: { kind: "session-cookie", cookie: globalAuth.session_cookie }
@@ -5050,11 +5062,18 @@ async function readStdin() {
 }
 async function gitCredential(operation, options = {}) {
   if (operation !== "get") return;
-  const config = loadLocalConfig(options);
-  if (!config) return;
+  const warn = options.warn ?? ((text) => {
+    process.stderr.write(`standardagents: ${text}
+`);
+  });
   const input = options.input ?? await readStdin();
   const remote = remoteFromCredentialRequest(parseKeyValueLines(input));
   if (!remote) return;
+  const config = loadLocalConfig(options);
+  if (!config) {
+    warn(`No Standard Agents git credentials found. Run: ${GIT_LOGIN_COMMAND}`);
+    return;
+  }
   const fetchImpl = options.fetchImpl ?? fetch;
   const headers = {
     "Content-Type": "application/json"
@@ -5069,10 +5088,24 @@ async function gitCredential(operation, options = {}) {
     headers,
     body: JSON.stringify({ remote, scope: "write" })
   }).catch(() => null);
-  if (!response?.ok) return;
+  if (!response?.ok) {
+    if (!response) {
+      warn(`Could not reach ${config.endpoint} to mint git credentials \u2014 check your connection and retry.`);
+    } else if (response.status === 401 || response.status === 403) {
+      warn(
+        config.auth.kind === "api-key" ? `Your Standard Agents API key was revoked or lost access. Run: ${GIT_LOGIN_COMMAND}` : `Your Standard Agents sign-in expired. Run: ${GIT_LOGIN_COMMAND}`
+      );
+    } else {
+      warn(`Minting git credentials failed (HTTP ${response.status}). Retry, or re-auth with: ${GIT_LOGIN_COMMAND}`);
+    }
+    return;
+  }
   const body = await response.json().catch(() => null);
   const tokenSecret = body?.artifact_git?.token_secret;
-  if (!tokenSecret) return;
+  if (!tokenSecret) {
+    warn(`The platform returned no git token for ${remote}. Re-auth with: ${GIT_LOGIN_COMMAND}`);
+    return;
+  }
   const write = options.write ?? ((text) => {
     process.stdout.write(text);
   });
@@ -5166,7 +5199,7 @@ async function completeBrowserGitLogin(options, endpoint) {
   let wsUrl = null;
   let wsExpiresAt = 0;
   try {
-    const started = await startCliAuthSession(endpoint);
+    const started = await startCliAuthSession(endpoint, { purpose: "auth" });
     sessionId = started.session_id;
     authAppUrl = started.auth_url;
     wsUrl = started.ws_url;
@@ -5218,9 +5251,14 @@ async function gitLogin(options = {}) {
   if (!state.session_cookie) {
     throw new Error("Platform login did not return a session cookie for Git authentication.");
   }
+  const apiKey = await mintGitAccessApiKey(endpoint, state.session_cookie, options.fetchImpl);
+  if (!apiKey) {
+    logger.warning("Could not mint a long-lived API key \u2014 falling back to the browser session (expires in a few days).");
+  }
   const record = saveCliGitAuth({
     endpoint,
     sessionCookie: state.session_cookie,
+    apiKey,
     account: state.account,
     user: state.user
   });
@@ -5235,8 +5273,29 @@ async function gitLogin(options = {}) {
   if (configured) {
     logger.log(`Credential helper: ${configured.helperCommand}${configured.helperAdded ? "" : " (already installed)"}`);
   }
+  if (record.api_key) {
+    logger.log("Credentials: long-lived API key (no expiry \u2014 revoke from the dashboard to sign out)");
+  }
   logger.log("");
 }
+async function mintGitAccessApiKey(endpoint, sessionCookie, fetchImpl = fetch) {
+  try {
+    const label = `git (${os3.hostname()})`;
+    const response = await fetchImpl(`${endpoint}/api-keys`, {
+      method: "POST",
+      headers: {
+        "Content-Type": "application/json",
+        Cookie: sessionCookie
+      },
+      body: JSON.stringify({ label })
+    });
+    if (!response.ok) return null;
+    const body = await response.json().catch(() => null);
+    return typeof body?.key === "string" && body.key.length > 0 ? body.key : null;
+  } catch {
+    return null;
+  }
+}
 
 // src/index.ts
 async function settleStdinForInitHandoff(stdin = process.stdin) {
@@ -5257,7 +5316,7 @@ async function settleStdinForInitHandoff(stdin = process.stdin) {
   }
 }
 var program = new Command();
-program.name("agents").description("CLI tool for Standard Agents / AgentBuilder").version("0.25.3");
+program.name("agents").description("CLI tool for Standard Agents / AgentBuilder").version("0.25.4");
 program.command("init [project-name]").description("Create a new Standard Agents project").option("-y, --yes", "Skip prompts and use defaults").option("--local", "Use local project scaffolding instead of browser platform onboarding").option("--cli", "Use classic line-by-line CLI prompts instead of the TUI wizard").option("--api-url <url>", "Standard Agents platform API URL").option("--endpoint <url>", "Platform API endpoint for auth/bootstrap exchange").option("--package-manager <manager>", "Package manager for generated project: npm, pnpm, yarn, or bun").option("--template <template>", "Vite template to use", "vanilla-ts").option("--workspace", "Install @standardagents packages as workspace:* (local pnpm workspace development)").option("--no-dev", "Clone and configure the project without starting the dev server").addOption(new Option("--bootstrap <code>", "Exchange a web onboarding bootstrap code")).action(init);
 program.command("login").description("Authenticate this machine (or use --bootstrap for project bootstrap auth)").option("--bootstrap <code>", "Bootstrap code from web onboarding").option("--endpoint <url>", "Platform API endpoint (default: https://api.standardagents.ai)").option("--no-open", "Do not auto-open browser URL").action(login);
 program.command("logout").description("Clear stored StandardAgents auth and local org-scoped project auth").option("--org <org-id-or-slug>", "Org ID or slug to logout (defaults to active org)").option("--endpoint <url>", "Platform API endpoint (default: https://api.standardagents.ai)").action(logout);