@startanaicompany/cli 1.3.1 → 1.4.1

package/CLAUDE.md

@@ -313,6 +313,58 @@ saac update --restart on-failure
 - Warns if tier limits were applied (resource caps)
 - Reminds user to redeploy for changes to take effect
 
+### Git OAuth Commands (NEW in 1.4.0)
+
+The `git` command manages Git account OAuth connections, allowing users to deploy applications without providing tokens repeatedly.
+
+**Subcommands:**
+1. `saac git connect [host]` - Connect Git account via OAuth
+2. `saac git list` - List all connected Git accounts
+3. `saac git disconnect <host>` - Disconnect a Git account
+
+**OAuth Flow:**
+1. User runs `saac git connect` or creates app without token
+2. Browser opens to OAuth authorization page
+3. User authorizes on Git provider (Gitea, GitHub, GitLab)
+4. CLI polls for completion every 2 seconds (max 5 minutes)
+5. Connection saved on server (encrypted AES-256-GCM)
+6. Future app creations use OAuth token automatically
+
+**Usage Examples:**
+```bash
+# Connect to default Gitea instance
+saac git connect git.startanaicompany.com
+
+# Connect from repository URL
+saac git connect git@git.startanaicompany.com:user/repo.git
+
+# Interactive mode - select provider
+saac git connect
+
+# List connections
+saac git list
+
+# Disconnect
+saac git disconnect git.startanaicompany.com
+```
+
+**Integration with Create Command:**
+- If Git account connected → Uses OAuth automatically
+- If NOT connected and no `--git-token` → Prompts to connect
+- If `--git-token` provided → Uses manual token (fallback)
+
+**Benefits:**
+- ✅ Connect once, deploy unlimited apps
+- ✅ No need to copy/paste tokens repeatedly
+- ✅ Tokens stored encrypted on server
+- ✅ Auto-refresh for expired tokens
+- ✅ Supports multiple Git providers
+
+**Implementation Files:**
+- `src/lib/oauth.js` - OAuth helper functions
+- `src/commands/git.js` - Git command implementation
+- Updated `src/commands/create.js` - OAuth integration
+
 ### Init Command Implementation
 
 The `init` command links an existing SAAC application to the current directory.

package/README.md

@@ -38,6 +38,58 @@ saac deploy
 
 ## Commands
 
+## Git Authentication
+
+SAAC CLI supports two methods for Git authentication:
+
+### Method 1: OAuth (Recommended ✨ NEW in 1.4.0)
+
+Connect your Git account once, deploy unlimited applications without providing tokens:
+
+```bash
+# Connect Git account (interactive)
+saac git connect
+
+# Or specify host directly
+saac git connect git.startanaicompany.com
+
+# List connected accounts
+saac git list
+
+# Disconnect account
+saac git disconnect git.startanaicompany.com
+```
+
+**Benefits:**
+- ✅ Connect once, deploy unlimited apps
+- ✅ No need to remember or copy tokens
+- ✅ Tokens stored encrypted on server
+- ✅ Supports Gitea, GitHub, and GitLab
+
+**Creating apps with OAuth:**
+```bash
+# No token needed if OAuth connected!
+saac create my-app -s myapp -r git@git.startanaicompany.com:user/repo.git
+
+# CLI automatically uses your connected account
+# ✅ Using connected account: username@git.startanaicompany.com
+```
+
+### Method 2: Manual Token (Fallback)
+
+Provide Git API token for each application:
+
+```bash
+saac create my-app \
+  -s myapp \
+  -r git@git.startanaicompany.com:user/repo.git \
+  -t your_gitea_token_here
+```
+
+**Note:** OAuth automatically takes precedence. Manual tokens are only used as fallback if no OAuth connection exists.
+
+---
+
 ### Authentication
 
 #### `saac register`
@@ -102,6 +154,43 @@ saac sessions
 
 Shows all devices where you're currently logged in with creation date, last used time, IP address, and expiration date.
 
+#### `saac git connect [host]`
+Connect a Git account via OAuth
+
+```bash
+# Interactive mode - select from providers
+saac git connect
+
+# Connect to specific host
+saac git connect git.startanaicompany.com
+
+# Connect from repository URL
+saac git connect git@git.startanaicompany.com:user/repo.git
+```
+
+**What happens:**
+1. Browser opens to OAuth authorization page
+2. You authorize on the Git provider
+3. Connection saved (encrypted on server)
+4. Future app creations use this connection automatically
+
+#### `saac git list`
+List all connected Git accounts
+
+```bash
+saac git list
+saac git ls  # Alias
+```
+
+Shows host, username, provider, expiration date, and last used time.
+
+#### `saac git disconnect <host>`
+Disconnect a Git account
+
+```bash
+saac git disconnect git.startanaicompany.com
+```
+
 ### Application Management
 
 #### `saac init`
@@ -144,7 +233,7 @@ saac create api -s api -r git@git... -t abc123 \
 - `<name>` - Application name
 - `-s, --subdomain <subdomain>` - Subdomain for your app
 - `-r, --repository <url>` - Git repository URL (SSH format)
-- `-t, --git-token <token>` - Git API token
+- `-t, --git-token <token>` - Git API token (optional if OAuth connected)
 
 **Optional:**
 - `-b, --branch <branch>` - Git branch (default: master)

package/bin/saac.js

@@ -16,6 +16,7 @@ const verify = require('../src/commands/verify');
 const logout = require('../src/commands/logout');
 const logoutAll = require('../src/commands/logoutAll');
 const sessions = require('../src/commands/sessions');
+const git = require('../src/commands/git');
 const init = require('../src/commands/init');
 const create = require('../src/commands/create');
 const update = require('../src/commands/update');
@@ -40,7 +41,7 @@ program
   .command('register')
   .description('Register for a new account')
   .option('-e, --email <email>', 'Email address')
-  .option('--gitea-username <username>', 'Gitea username (auto-detected if not provided)')
+  .option('--git-username <username>', 'Git username (auto-detected if not provided)')
   .action(register);
 
 program
@@ -71,6 +72,27 @@ program
   .description('List all active sessions')
   .action(sessions);
 
+// Git OAuth commands
+const gitCommand = program
+  .command('git')
+  .description('Manage Git account connections (OAuth)');
+
+gitCommand
+  .command('connect [host]')
+  .description('Connect a Git account via OAuth')
+  .action(git.connect);
+
+gitCommand
+  .command('list')
+  .alias('ls')
+  .description('List connected Git accounts')
+  .action(git.list);
+
+gitCommand
+  .command('disconnect <host>')
+  .description('Disconnect a Git account')
+  .action(git.disconnect);
+
 // Application management
 program
   .command('init')