@zksecurity/zkao-cli 0.11.0-next.2 → 0.11.0-next.3

package/dist/index.js

@@ -227,6 +227,7 @@ function removePendingLogins(deviceCodes) {
 import { spawn } from "child_process";
 import { hostname } from "os";
 import { DEFAULT_BASE_URL } from "@zksecurity/zkao-sdk";
+var DEFAULT_LOGIN_SCOPES = ["read", "scans:launch", "findings:write"];
 function appOrigin(baseUrl) {
   const url = new URL(baseUrl);
   const prefix = url.pathname.replace(/\/+$/, "").replace(/\/api\/v\d+$/, "");
@@ -318,6 +319,7 @@ async function login(flags) {
   const project = flags.project ?? process.env.ZKAO_PROJECT_ID;
   const start = await postJson(`${origin}/api/auth/device`, {
     label: hostname(),
+    scopes: flags.scopes ?? DEFAULT_LOGIN_SCOPES,
     ...project ? { project } : {}
   });
   printInstructions(start);
@@ -620,6 +622,9 @@ program.command("login").description(
   "--no-wait",
   "start the flow, print the URL/code, and exit; finish with --resume"
 ).option("--resume", "poll a login previously started with --no-wait").option(
+  "--scope <scopes...>",
+  `scopes to request; the approver can change them (default: ${DEFAULT_LOGIN_SCOPES.join(" ")})`
+).option(
   "--timeout <seconds>",
   "with --resume, wait up to this long for approval (default: poll once)",
   toInt
@@ -635,6 +640,7 @@ program.command("login").description(
       project: g.project,
       baseUrl: g.baseUrl,
       noBrowser: opts.browser === false,
+      scopes: opts.scope,
       wait: opts.wait !== false
     });
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zksecurity/zkao-cli",
-  "version": "0.11.0-next.2",
+  "version": "0.11.0-next.3",
   "description": "Command-line interface for the zkao Project API",
   "license": "MIT",
   "author": "zkSecurity",
@@ -39,7 +39,7 @@
     "prepublishOnly": "node -e \"if (!(process.env.npm_config_user_agent || '').includes('bun/')) { console.error('Publish with bun publish: npm ships the literal workspace:* dependency and breaks installs.'); process.exit(1); }\""
   },
   "dependencies": {
-    "@zksecurity/zkao-sdk": "0.11.0-next.2",
+    "@zksecurity/zkao-sdk": "0.11.0-next.3",
     "commander": "^12.1.0"
   },
   "devDependencies": {