@vincentt-xr/cli 0.1.3 → 0.1.4

package/dist/cli/index.js

@@ -12,6 +12,7 @@
 import os from "node:os";
 import path from "node:path";
 import { runLogin } from "../login/login.js";
+import { ensureLoggedIn } from "../login/ensure.js";
 import { clearMachineToken, clearProjectBinding, loadMachineConfig, } from "../shared/config.js";
 import { getMe } from "../lib/backend.js";
 import { diagQuery, diagRead, previewStart, previewStop, previewStopSignal, projectCreate, projectPublish, } from "../lib/lifecycle.js";
@@ -51,6 +52,18 @@ async function login() {
     console.log(`\n✓ Signed in. Access token saved to ${configPath}`);
     console.log(`  API: ${saved}`);
 }
+/** The token that would authenticate a machine call, if any (env wins over file). */
+async function currentToken() {
+    return process.env.VINCENTT_PAT ?? (await loadMachineConfig()).pat;
+}
+/** Guard an auth-requiring verb: log in inline on first run instead of erroring. */
+async function requireLogin() {
+    await ensureLoggedIn({
+        currentToken,
+        runLogin: login,
+        notify: (m) => console.error(m),
+    });
+}
 async function logout() {
     const { path: p, hadToken } = await clearMachineToken();
     console.log(hadToken ? `✓ Signed out. Token removed from ${p}` : "Already signed out.");
@@ -79,6 +92,7 @@ async function whoami() {
 }
 // ---- dev loop ---------------------------------------------------------------
 async function create() {
+    await requireLogin();
     const result = await projectCreate(projectDir(), {
         name: flag("--name"),
         slug: flag("--slug"),
@@ -102,6 +116,7 @@ async function unbind() {
     console.log(hadBinding ? `✓ Unbound. Removed ${p}` : "This directory has no project binding.");
 }
 async function publish() {
+    await requireLogin();
     const result = await projectPublish(projectDir(), {
         distDir: flag("--dist"),
         note: flag("--note"),
@@ -118,6 +133,7 @@ async function preview() {
         console.log(message);
         return;
     }
+    await requireLogin();
     const { preview: p, started } = await previewStart(projectDir(), (m) => console.error(`[preview] ${m}`));
     if (!started) {
         console.log(`A preview is already running:\n${p.url}`);

package/dist/login/ensure.d.ts

@@ -0,0 +1,10 @@
+export interface EnsureLoginDeps {
+    /** Resolve the current token (env override or machine config), or undefined. */
+    currentToken: () => Promise<string | undefined>;
+    /** Run the interactive login flow (loopback OAuth), persisting a token. */
+    runLogin: () => Promise<void>;
+    /** Surface a line to the user (stderr, so it never pollutes machine-readable stdout). */
+    notify: (message: string) => void;
+}
+/** No-op when a token is already present; otherwise log-and-login before returning. */
+export declare function ensureLoggedIn(deps: EnsureLoginDeps): Promise<void>;

package/dist/login/ensure.js

@@ -0,0 +1,13 @@
+// First-run login guard. An auth-requiring verb (create / preview / publish) calls
+// this before doing any work: if there's no token yet, it runs the login flow inline
+// and continues, instead of failing with "not signed in". Login stays a human browser
+// approval — this only removes the separate `vincentt login` step a user had to know
+// to run first. Deps are injected so the branch is unit-testable without a real
+// browser round-trip or a real config file.
+/** No-op when a token is already present; otherwise log-and-login before returning. */
+export async function ensureLoggedIn(deps) {
+    if (await deps.currentToken())
+        return;
+    deps.notify("You're not signed in yet — opening the browser to authorize this device…");
+    await deps.runLogin();
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vincentt-xr/cli",
-  "version": "0.1.3",
+  "version": "0.1.4",
   "description": "Vincentt CLI — the vincentt command-line dev loop (login, create, publish, preview, diagnostics, feedback, relay, mcp)",
   "license": "UNLICENSED",
   "type": "module",