aptunnel 1.0.1 → 1.0.3

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "aptunnel",
-  "version": "1.0.1",
+  "version": "1.0.3",
   "description": "Cross-platform Aptible tunnel manager — multi-tunnel, auto-discovery, background process management",
   "type": "module",
   "bin": {

package/src/commands/init.js

@@ -37,15 +37,16 @@ export async function runInit(args) {
   console.log('');
 
   // 4. Login (interactive — handles 2FA via stdio: inherit)
-  // Close readline BEFORE spawning aptible so stdin is fully available to the child
+  // Do NOT show a spinner here: aptible may prompt for a 2FA OTP code and the
+  // spinner output would hide that prompt. Print a plain line instead.
   closeRL();
-  const spinner = (await import('ora')).default({ text: 'Logging in to Aptible…' }).start();
+  console.log('Logging in to Aptible… (enter 2FA code if prompted)');
   const ok = await login({ email, password });
   if (!ok) {
-    spinner.fail('Login failed. Please check your credentials.');
+    logger.error('Login failed. Please check your credentials.');
     process.exit(1);
   }
-  spinner.succeed('Logged in successfully.');
+  logger.success('Logged in successfully.');
   console.log('');
 
   // 5. Discover environments
@@ -272,8 +273,9 @@ function closeRL() {
     _rl.close();
     _rl = null;
   }
-  // Ensure stdin is resumed so child processes can read from it (e.g. aptible 2FA)
-  process.stdin.resume();
+  // Do NOT call process.stdin.resume() here. Flowing mode with no listener
+  // discards keystrokes. Child processes (aptible) read from fd 0 directly
+  // at OS level regardless of Node.js stream state.
 }
 
 function ask(prompt) {
@@ -303,6 +305,9 @@ function askSecret(prompt) {
         if (char === '\r' || char === '\n') {
           process.stdin.removeListener('data', onData);
           if (isTTY) process.stdin.setRawMode(false);
+          // Pause so Node.js stops consuming keystrokes that belong to child
+          // processes (e.g. aptible login waiting for a 2FA OTP).
+          process.stdin.pause();
           process.stdout.write('\n');
           resolve(chars.join(''));
           return;

package/src/commands/login.js

@@ -93,7 +93,6 @@ function getRL() {
 }
 function closeRL() {
   if (_rl) { _rl.close(); _rl = null; }
-  process.stdin.resume();
 }
 
 function ask(prompt) {
@@ -120,6 +119,7 @@ function askSecret(prompt) {
         if (char === '\r' || char === '\n') {
           process.stdin.removeListener('data', onData);
           if (isTTY) process.stdin.setRawMode(false);
+          process.stdin.pause();
           process.stdout.write('\n');
           resolve(chars.join(''));
           return;

package/src/lib/aptible.js

@@ -58,12 +58,10 @@ export function login({ email, password, lifetime = '7d', otp } = {}) {
     if (password) args.push(`--password=${password}`);
     if (otp)      args.push(`--otp=${otp}`);
 
-    // Resume stdin so aptible can receive input (e.g. 2FA OTP prompt).
-    // readline.close() pauses process.stdin; we must unpause it before handing
-    // it to a child process, otherwise the child's read() never returns.
-    process.stdin.resume();
-
-    // stdio: 'inherit' is critical — aptible prompts for 2FA interactively
+    // stdio: 'inherit' — aptible reads from fd 0 directly at OS level,
+    // independent of Node.js stream state. Do NOT call process.stdin.resume()
+    // here: flowing mode with no listener would consume the user's 2FA keystrokes
+    // before aptible gets them.
     const child = spawn('aptible', args, { stdio: 'inherit', ...SHELL_OPT });
 
     child.on('close', (code) => resolve(code === 0));