@storyclaw/talenthub 0.3.4 → 0.3.5

package/dist/commands/login.js

@@ -1,5 +1,5 @@
 import { execSync } from "node:child_process";
-import { readAuth, requestDeviceCode, pollForToken, exchangeToken, writeAuth } from "../lib/auth.js";
+import { readAuth, requestDeviceCode, pollForToken, exchangeToken, verifyToken, writeAuth } from "../lib/auth.js";
 function openUrl(url) {
     try {
         const cmd = process.platform === "darwin"
@@ -14,14 +14,23 @@ function openUrl(url) {
     }
 }
 export async function login(options) {
-    // Direct token exchange: skip device-code flow entirely
     if (options.token) {
-        console.log("Exchanging token...");
         try {
-            const { access_token, user_id, expires_at } = await exchangeToken(options.token);
-            writeAuth({ token: access_token, user_id, expires_at });
-            console.log(`✓ Logged in successfully.`);
-            console.log(`  User ID: ${user_id}`);
+            if (options.token.startsWith("th_")) {
+                console.log("Verifying token...");
+                const { user_id } = await verifyToken(options.token);
+                writeAuth({ token: options.token, user_id, expires_at: "" });
+                console.log(`✓ Logged in successfully.`);
+                console.log(`  User ID: ${user_id}`);
+            }
+            else {
+                // sc_token from web session — exchange for a CLI token
+                console.log("Exchanging token...");
+                const { access_token, user_id, expires_at } = await exchangeToken(options.token);
+                writeAuth({ token: access_token, user_id, expires_at });
+                console.log(`✓ Logged in successfully.`);
+                console.log(`  User ID: ${user_id}`);
+            }
         }
         catch (err) {
             console.error(`✗ Login failed: ${err instanceof Error ? err.message : err}`);

package/dist/lib/auth.d.ts

@@ -24,4 +24,10 @@ export type TokenResponse = {
  * Exchange an sc_token (web session cookie) for a CLI-compatible th_* token.
  */
 export declare function exchangeToken(scToken: string): Promise<TokenResponse>;
+/**
+ * Verify a th_* CLI token against the registry and return the user_id.
+ */
+export declare function verifyToken(token: string): Promise<{
+    user_id: string;
+}>;
 export declare function pollForToken(deviceCode: string, interval: number, maxWaitMs: number): Promise<TokenResponse>;

package/dist/lib/auth.js

@@ -64,6 +64,21 @@ export async function exchangeToken(scToken) {
     }
     return res.json();
 }
+/**
+ * Verify a th_* CLI token against the registry and return the user_id.
+ */
+export async function verifyToken(token) {
+    const base = getRegistryBaseUrl();
+    const res = await fetchRetry(`${base}/api/talenthub/auth/me`, {
+        method: "GET",
+        headers: { Authorization: `Bearer ${token}` },
+    });
+    if (!res.ok) {
+        const body = await res.json().catch(() => ({ error: "unknown" }));
+        throw new Error(`Token verification failed (${res.status}): ${body.error ?? "unknown error"}`);
+    }
+    return res.json();
+}
 export async function pollForToken(deviceCode, interval, maxWaitMs) {
     const base = getRegistryBaseUrl();
     const deadline = Date.now() + maxWaitMs;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@storyclaw/talenthub",
-  "version": "0.3.4",
+  "version": "0.3.5",
   "description": "CLI tool to manage StoryClaw AI agents",
   "type": "module",
   "bin": {