@thecorporation/cli 26.3.10 → 26.3.11

package/README.md

@@ -15,12 +15,25 @@ npm install -g @thecorporation/cli
 ## Quick Start
 
 ```bash
-corp setup                          # interactive first-run wizard
+corp setup                          # authenticate via magic link
 corp status                         # workspace summary
 corp chat                           # AI assistant with full tool access
 corp form --type llc --name "Acme"  # form a new entity
 ```
 
+## Authentication
+
+`corp setup` authenticates via magic link:
+
+1. Enter your name and email
+2. Check your email for a sign-in link from TheCorporation
+3. Copy the code from the link URL and paste it into the terminal
+4. Credentials are saved to `~/.corp/config.json`
+
+Your workspace is shared across the CLI, [MCP server](https://www.npmjs.com/package/@thecorporation/mcp-server), and [chat](https://humans.thecorporation.ai/chat) — all keyed on your email.
+
+For self-hosted setups (`CORP_API_URL` pointing to your own server), `corp setup` provisions a workspace directly without requiring a magic link.
+
 ## Commands
 
 ### Core
@@ -204,7 +217,7 @@ Inside `corp chat`, these slash commands are available:
 
 ## Configuration
 
-Config is stored at `~/.corp/config.json`. The `corp setup` wizard will populate it, or set values manually:
+Config is stored at `~/.corp/config.json`. `corp setup` populates it via magic link auth. You can also set values manually:
 
 ```bash
 corp config set api_url https://api.thecorporation.ai

package/dist/index.js

@@ -479,25 +479,112 @@ __export(setup_exports, {
   setupCommand: () => setupCommand
 });
 import { input, confirm } from "@inquirer/prompts";
+async function requestMagicLink(apiUrl, email, tosAccepted) {
+  const resp = await fetch(`${apiUrl}/v1/auth/magic-link`, {
+    method: "POST",
+    headers: { "Content-Type": "application/json" },
+    body: JSON.stringify({ email, tos_accepted: tosAccepted })
+  });
+  if (!resp.ok) {
+    const data = await resp.json().catch(() => ({}));
+    const detail = data?.error ?? data?.message ?? resp.statusText;
+    throw new Error(
+      typeof detail === "string" ? detail : JSON.stringify(detail)
+    );
+  }
+}
+async function verifyMagicLinkCode(apiUrl, code) {
+  const resp = await fetch(`${apiUrl}/v1/auth/magic-link/verify`, {
+    method: "POST",
+    headers: { "Content-Type": "application/json" },
+    body: JSON.stringify({ code, client: "cli" })
+  });
+  const data = await resp.json().catch(() => ({}));
+  if (!resp.ok) {
+    const detail = data?.error ?? data?.message ?? resp.statusText;
+    throw new Error(
+      typeof detail === "string" ? detail : JSON.stringify(detail)
+    );
+  }
+  if (!data.api_key || !data.workspace_id) {
+    throw new Error("Unexpected response \u2014 missing api_key or workspace_id");
+  }
+  return {
+    api_key: data.api_key,
+    workspace_id: data.workspace_id
+  };
+}
+function isCloudApi(url) {
+  return url.replace(/\/+$/, "").includes("thecorporation.ai");
+}
+async function magicLinkAuth(apiUrl, email) {
+  console.log("\nSending magic link to " + email + "...");
+  await requestMagicLink(apiUrl, email, true);
+  console.log("Check your email for a sign-in link from TheCorporation.");
+  console.log(
+    "Copy the code from the URL (the ?code=... part) and paste it below.\n"
+  );
+  const code = await input({ message: "Paste your magic link code" });
+  const trimmed = code.trim().replace(/^.*[?&]code=/, "");
+  if (!trimmed) {
+    throw new Error("No code provided");
+  }
+  console.log("Verifying...");
+  return verifyMagicLinkCode(apiUrl, trimmed);
+}
 async function setupCommand() {
   const cfg = loadConfig();
   console.log("Welcome to corp \u2014 corporate governance from the terminal.\n");
-  cfg.api_url = API_URL;
+  const customUrl = process.env.CORP_API_URL;
+  if (customUrl) {
+    cfg.api_url = customUrl.replace(/\/+$/, "");
+    console.log(`Using API: ${cfg.api_url}
+`);
+  } else {
+    cfg.api_url = CLOUD_API_URL;
+  }
   console.log("--- User Info ---");
   const user = cfg.user ?? { name: "", email: "" };
-  user.name = await input({ message: "Your name", default: user.name || void 0 });
-  user.email = await input({ message: "Your email", default: user.email || void 0 });
+  user.name = await input({
+    message: "Your name",
+    default: user.name || void 0
+  });
+  user.email = await input({
+    message: "Your email",
+    default: user.email || void 0
+  });
   cfg.user = user;
-  if (!cfg.api_key || !cfg.workspace_id) {
-    console.log("\nProvisioning workspace...");
-    try {
-      const result = await provisionWorkspace(cfg.api_url, `${user.name}'s workspace`);
-      cfg.api_key = result.api_key;
-      cfg.workspace_id = result.workspace_id;
-      console.log(`Workspace provisioned: ${result.workspace_id}`);
-    } catch (err) {
-      printError(`Auto-provision failed: ${err}`);
-      console.log("You can manually set credentials with: corp config set api_key <key>");
+  const needsAuth = !cfg.api_key || !cfg.workspace_id;
+  const cloud = isCloudApi(cfg.api_url);
+  if (needsAuth) {
+    if (cloud) {
+      try {
+        const result = await magicLinkAuth(cfg.api_url, user.email);
+        cfg.api_key = result.api_key;
+        cfg.workspace_id = result.workspace_id;
+        printSuccess(`Authenticated. Workspace: ${result.workspace_id}`);
+      } catch (err) {
+        printError(`Authentication failed: ${err}`);
+        console.log(
+          "You can manually set credentials with: corp config set api_key <key>"
+        );
+      }
+    } else {
+      console.log("\nProvisioning workspace...");
+      try {
+        const result = await provisionWorkspace(
+          cfg.api_url,
+          `${user.name}'s workspace`
+        );
+        cfg.api_key = result.api_key;
+        cfg.workspace_id = result.workspace_id;
+        console.log(`Workspace provisioned: ${result.workspace_id}`);
+      } catch (err) {
+        printError(`Auto-provision failed: ${err}`);
+        console.log(
+          "You can manually set credentials with: corp config set api_key <key>"
+        );
+      }
     }
   } else {
     console.log("\nVerifying existing credentials...");
@@ -514,21 +601,33 @@ async function setupCommand() {
       console.log("Credentials OK.");
     } else {
       console.log("API key is no longer valid.");
-      const reprovision = await confirm({
-        message: "Provision a new workspace? (This will replace your current credentials)",
-        default: false
+      const reauth = await confirm({
+        message: cloud ? "Re-authenticate via magic link?" : "Provision a new workspace? (This will replace your current credentials)",
+        default: true
       });
-      if (reprovision) {
+      if (reauth) {
         try {
-          const result = await provisionWorkspace(cfg.api_url, `${user.name}'s workspace`);
-          cfg.api_key = result.api_key;
-          cfg.workspace_id = result.workspace_id;
-          console.log(`Workspace provisioned: ${result.workspace_id}`);
+          if (cloud) {
+            const result = await magicLinkAuth(cfg.api_url, user.email);
+            cfg.api_key = result.api_key;
+            cfg.workspace_id = result.workspace_id;
+            printSuccess(`Authenticated. Workspace: ${result.workspace_id}`);
+          } else {
+            const result = await provisionWorkspace(
+              cfg.api_url,
+              `${user.name}'s workspace`
+            );
+            cfg.api_key = result.api_key;
+            cfg.workspace_id = result.workspace_id;
+            console.log(`Workspace provisioned: ${result.workspace_id}`);
+          }
         } catch (err) {
-          printError(`Provisioning failed: ${err}`);
+          printError(`Authentication failed: ${err}`);
         }
       } else {
-        console.log("Keeping existing credentials. You can manually update with: corp config set api_key <key>");
+        console.log(
+          "Keeping existing credentials. You can manually update with: corp config set api_key <key>"
+        );
       }
     }
   }
@@ -536,14 +635,14 @@ async function setupCommand() {
   console.log("\nConfig saved to ~/.corp/config.json");
   console.log("Run 'corp status' to verify your connection.");
 }
-var API_URL;
+var CLOUD_API_URL;
 var init_setup = __esm({
   "src/commands/setup.ts"() {
     "use strict";
     init_config();
     init_api_client();
     init_output();
-    API_URL = "https://api.thecorporation.ai";
+    CLOUD_API_URL = "https://api.thecorporation.ai";
   }
 });