archive-labs 1.0.5 → 1.0.7

package/LICENSE

@@ -1,17 +1,17 @@
-Apache License
-Version 2.0, January 2004
-https://www.apache.org/licenses/
-
-Copyright 2026 Archive Labs
-
-Licensed under the Apache License, Version 2.0 (the "License");
-you may not use this file except in compliance with the License.
-You may obtain a copy of the License at
-
-    https://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License.
+Apache License
+Version 2.0, January 2004
+https://www.apache.org/licenses/
+
+Copyright 2026 Archive Labs
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+    https://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.

package/README.md

@@ -1,86 +1,87 @@
-# Archive Labs CLI
-
-<p align="center">
-  <img src="https://cdn.jsdelivr.net/npm/archive-labs/logo.png" alt="Archive Labs" width="96" />
-</p>
-
-Archive Labs CLI is a terminal client for Archive. It signs in, reads repository state, runs sync and checks, and supports text or JSON output.
-
-## Install
-
-```bash
-npm install -g archive-labs
-archive
-```
-
-No global install:
-
-```bash
-npx archive-labs
-```
-
-## Commands
-
-### Auth and setup
-
-- `archive init` Set the API and app targets for this workspace.
-- `archive login` Sign in and store credentials for later commands.
-- `archive logout` Remove stored credentials from this machine.
-
-### Repository checks
-
-- `archive status` Show repository health, readiness, and missing signals.
-- `archive sync` Refresh the repository index and derived metadata.
-- `archive check` Run the default check for the current context.
-- `archive check pr <number>` Review a pull request for merge readiness, impact, ownership, and blockers.
-- `archive check diff` Review the current working tree before commit or push.
-- `archive events` Review recent repository events.
-- `archive recent` Show recently used commands.
-
-### Impact and release
-
-- `archive impact file <path>` Show what a file change affects across services and downstream paths.
-- `archive impact diff` Summarize the impact of the current working tree.
-- `archive release summarize <tag>` Summarize what is included in a release tag.
-- `archive release risk <tag>` Review release risk before shipping.
-- `archive ask <question>` Query the codebase in natural language.
-- `archive why <path>` Show file or folder context from history and evidence.
-
-### Utilities
-
-- `archive doctor` Inspect local config, auth, and runtime state.
-- `archive ping` Check API connectivity.
-- `archive help` Show the command list and usage.
-- `archive version` Print the installed CLI version.
-
-Example usage:
-
-```bash
-archive login
-archive status
-archive sync
-archive check pr 182 --repository acme/payments --ci --json --strict
-archive impact diff --json
-archive release risk v1.2.0
-```
-
-## Output
-
-Use `--json` when you need machine-readable output. Text output stays short and terminal-friendly.
-
-## Config
-
-CLI config is stored under `~/.archive-labs/config.json`.
-
-Environment variables:
-
-- `ARCHIVE_TOKEN`
-- `ARCHIVE_LABS_TOKEN`
-- `ARCHIVE_GITHUB_TOKEN`
-
-## Publish
-
-```bash
-npm pack
-npm publish
-```
+# Archive Labs CLI
+
+<p align="center">
+  <img src="https://cdn.jsdelivr.net/npm/archive-labs/logo.png" alt="Archive Labs" width="96" />
+</p>
+
+Archive Labs CLI is a terminal client for Archive. It signs in, reads repository state, runs sync and checks, and supports text or JSON output.
+
+## Install
+
+```bash
+npm install -g archive-labs
+archive
+```
+
+No global install:
+
+```bash
+npx archive-labs
+```
+
+## Commands
+
+### Auth and setup
+
+- `archive init` Set the API and app targets for this workspace.
+- `archive login` Sign in and store credentials for later commands.
+- `archive auth login` Alias for browser-based sign-in from onboarding flows.
+- `archive logout` Remove stored credentials from this machine.
+
+### Repository checks
+
+- `archive status` Show repository health, readiness, and missing signals.
+- `archive sync` Refresh the repository index and derived metadata.
+- `archive check` Run the default check for the current context.
+- `archive check pr <number>` Review a pull request for merge readiness, impact, ownership, and blockers.
+- `archive check diff` Review the current working tree before commit or push.
+- `archive events` Review recent repository events.
+- `archive recent` Show recently used commands.
+
+### Impact and release
+
+- `archive impact file <path>` Show what a file change affects across services and downstream paths.
+- `archive impact diff` Summarize the impact of the current working tree.
+- `archive release summarize <tag>` Summarize what is included in a release tag.
+- `archive release risk <tag>` Review release risk before shipping.
+- `archive ask <question>` Query the codebase in natural language.
+- `archive why <path>` Show file or folder context from history and evidence.
+
+### Utilities
+
+- `archive doctor` Inspect local config, auth, and runtime state.
+- `archive ping` Check API connectivity.
+- `archive help` Show the command list and usage.
+- `archive version` Print the installed CLI version.
+
+Example usage:
+
+```bash
+archive login
+archive status
+archive sync
+archive check pr 182 --repository acme/payments --ci --json --strict
+archive impact diff --json
+archive release risk v1.2.0
+```
+
+## Output
+
+Use `--json` when you need machine-readable output. Text output stays short and terminal-friendly.
+
+## Config
+
+CLI config is stored under `~/.archive-labs/config.json`.
+
+Environment variables:
+
+- `ARCHIVE_TOKEN`
+- `ARCHIVE_LABS_TOKEN`
+- `ARCHIVE_GITHUB_TOKEN`
+
+## Publish
+
+```bash
+npm pack
+npm publish
+```

package/dist/cli.js

@@ -52,6 +52,7 @@ const systemCheckStaleSyncThresholdMs = 72 * 60 * 60 * 1000;
 const impactPollIntervalMs = 1500;
 const defaultApiUrl = "https://api.archivelabs.dev";
 const defaultAppUrl = "https://app.archivelabs.dev";
+const defaultLocalAppUrl = "http://localhost:8080";
 const legacyApiUrl = "http://localhost:3000";
 const legacyAppUrl = "http://localhost:5173";
 const jsonSchemaVersion = 1;
@@ -170,6 +171,10 @@ const utilityHelpEntries = [
         command: "archive login",
         description: "Authenticate with GitHub, Google, Microsoft, or email.",
     },
+    {
+        command: "archive auth login",
+        description: "Alias for archive login; opens browser sign-in.",
+    },
     {
         command: "archive logout",
         description: "Remove stored Archive login credentials from this machine.",
@@ -423,6 +428,19 @@ const matchesNormalizedUrl = (value, expected) => {
         return false;
     }
 };
+const isLocalhostUrl = (value) => {
+    if (!value?.trim()) {
+        return false;
+    }
+    try {
+        const parsed = new URL(normalizeBaseUrl(value));
+        const hostname = parsed.hostname.toLowerCase();
+        return hostname === "localhost" || hostname === "127.0.0.1" || hostname === "::1" || hostname === "[::1]";
+    }
+    catch {
+        return false;
+    }
+};
 const renderLocalInitFixCommand = () => `${primaryCommand} init --api-url ${defaultApiUrl} --app-url ${defaultAppUrl} -y`;
 const getLegacyConfigWarnings = (config) => {
     const warnings = [];
@@ -471,9 +489,12 @@ const joinCommandInput = (value, label) => {
     return normalized;
 };
 let repoEnvPromise = null;
+const repoEnvFileNames = [".env", ".env.local", ".env.development", ".env.development.local"];
 const getRepoEnvPaths = () => [
-    path.join(process.cwd(), ".env"),
-    path.join(process.cwd(), "backend", ".env"),
+    ...repoEnvFileNames.map((fileName) => path.join(process.cwd(), fileName)),
+    ...repoEnvFileNames.map((fileName) => path.join(process.cwd(), "backend", fileName)),
+    ...repoEnvFileNames.map((fileName) => path.join(process.cwd(), "apps", "backend", fileName)),
+    ...repoEnvFileNames.map((fileName) => path.join(process.cwd(), "apps", "frontend", fileName)),
 ];
 const readRepoEnv = async () => {
     if (!repoEnvPromise) {
@@ -501,7 +522,7 @@ const resolveBaseUrl = (explicit, config) => {
         return normalizeBaseUrl(config.apiUrl);
     return defaultApiUrl;
 };
-const resolveAppUrl = async (explicit, config) => {
+const resolveAppUrl = async (explicit, config, apiUrl) => {
     if (explicit?.trim())
         return normalizeBaseUrl(explicit);
     if (process.env.ARCHIVE_LABS_APP_URL?.trim()) {
@@ -524,6 +545,9 @@ const resolveAppUrl = async (explicit, config) => {
     if (repoCandidate?.trim()) {
         return normalizeBaseUrl(repoCandidate);
     }
+    if (isLocalhostUrl(apiUrl)) {
+        return defaultLocalAppUrl;
+    }
     return defaultAppUrl;
 };
 const resolveHealthUrl = (explicit, config) => {
@@ -1670,7 +1694,7 @@ const serializeSummaryAction = (action) => action?.kind === "command"
         : null;
 const buildSetupReadinessSummary = async (config) => {
     const accessContext = await loadRepositoryAccessContext(config);
-    const appUrl = await resolveAppUrl(undefined, config);
+    const appUrl = await resolveAppUrl(undefined, config, resolveBaseUrl(undefined, config));
     const selectionPlan = planRepositorySelection({
         canPrompt: false,
         explicitRepositoryFullName: null,
@@ -5961,7 +5985,15 @@ const createCliCallbackServer = async (expectedState, allowedOrigin, apiUrl) =>
             try {
                 return await new Promise((resolve, reject) => {
                     timer = setTimeout(() => {
-                        reject(new Error("Timed out waiting for browser login to complete."));
+                        reject(createCliError({
+                            category: "timeout",
+                            code: "timeout",
+                            command: primaryCommand,
+                            exitCode: exitCodeTimeout,
+                            hint: "Open the login URL again, or increase --timeout if browser sign-in needs longer.",
+                            message: "Archive timed out waiting for browser login to complete.",
+                            retryable: true,
+                        }));
                     }, timeoutMs);
                     void result.then(resolve, reject);
                 });
@@ -5977,7 +6009,7 @@ const createCliCallbackServer = async (expectedState, allowedOrigin, apiUrl) =>
 };
 const runOAuthLogin = async (provider, options, existingConfig) => {
     const apiUrl = resolveBaseUrl(options.apiUrl, existingConfig);
-    const appUrl = await resolveAppUrl(options.appUrl, existingConfig);
+    const appUrl = await resolveAppUrl(options.appUrl, existingConfig, apiUrl);
     const state = crypto.randomBytes(20).toString("hex");
     const callbackServer = await createCliCallbackServer(state, new URL(appUrl).origin, apiUrl);
     const loginUrl = new URL("/auth", `${appUrl}/`);
@@ -6241,7 +6273,6 @@ const runInit = async (options = {}) => {
         clack.intro(`${primaryCommand} init`);
     }
     const resolvedApiUrl = resolveBaseUrl(undefined, existingConfig);
-    const resolvedAppUrl = await resolveAppUrl(undefined, existingConfig);
     let apiUrl = options.apiUrl?.trim() || (options.yes ? resolvedApiUrl : "");
     if (!apiUrl) {
         if (!allowPrompts) {
@@ -6273,6 +6304,7 @@ const runInit = async (options = {}) => {
         apiUrl = String(response);
     }
     const normalizedApiUrl = normalizeBaseUrl(apiUrl);
+    const resolvedAppUrl = await resolveAppUrl(undefined, existingConfig, normalizedApiUrl);
     let appUrl = options.appUrl?.trim() || (options.yes ? resolvedAppUrl : "");
     if (!appUrl) {
         if (!allowPrompts) {
@@ -6391,7 +6423,7 @@ const runDoctor = async (options = {}) => {
         {
             title: "Resolve app target",
             task: async () => {
-                appUrl = await resolveAppUrl(undefined, config);
+                appUrl = await resolveAppUrl(undefined, config, apiBaseUrl);
             },
         },
     ], {
@@ -6723,7 +6755,7 @@ const runSync = async (options = {}) => {
     const repositoryState = getSyncRepositoryState(repository);
     const lastIndexedAt = repository.lastSyncedAt ?? null;
     if (!repository.appInstalled || !repository.installationId) {
-        const appUrl = await resolveAppUrl(undefined, nextConfig);
+        const appUrl = await resolveAppUrl(undefined, nextConfig, resolveBaseUrl(undefined, nextConfig));
         throw createSyncCliError({
             code: "app_install_required",
             hint: `${appUrl}/dashboard?flow=setup&provider=github`,
@@ -8643,6 +8675,42 @@ const buildProgram = async () => {
         .action(withCommandHandling("archive release risk", async (tag, options) => {
         await runReleaseRisk(tag, options);
     }));
+    const authCommand = program
+        .command("auth")
+        .description("Manage Archive authentication");
+    authCommand.helpInformation = () => renderGroupHelp(version, "Auth", [
+        {
+            command: "archive auth login",
+            description: "Authenticate with GitHub, Google, Microsoft, or email.",
+        },
+        {
+            command: "archive auth logout",
+            description: "Remove stored Archive login credentials from this machine.",
+        },
+    ]);
+    authCommand.action(withCommandHandling("archive auth", async () => {
+        authCommand.outputHelp();
+    }));
+    authCommand
+        .command("login")
+        .description("Sign in with GitHub, Google, Microsoft, or email")
+        .option("--provider <provider>", "Login method (github, google, azure, microsoft, or email)", parseLoginProvider)
+        .option("--email <email>", "Email address for email login")
+        .option("--api-url <url>", "Archive Labs API URL for email login")
+        .option("--app-url <url>", "Archive Labs app URL for browser login")
+        .option("--json", "Output login state as JSON")
+        .option("--timeout <ms>", "Login timeout in milliseconds", parseTimeout, defaultLoginTimeoutMs)
+        .option("--no-browser", "Print the browser sign-in URL instead of opening it automatically")
+        .action(withCommandHandling("archive auth login", async (options) => {
+        await runLogin(options);
+    }));
+    authCommand
+        .command("logout")
+        .description("Remove stored Archive login credentials from this machine")
+        .option("--json", "Output logout state as JSON")
+        .action(withCommandHandling("archive auth logout", async (options) => {
+        await runLogout(options);
+    }));
     program
         .command("login")
         .description("Sign in with GitHub, Google, Microsoft, or email")

package/dist/recentHistory.js

@@ -99,6 +99,9 @@ export const inferCommandGroup = (argv) => {
     if (head === "release") {
         return "release";
     }
+    if (head === "auth" && (next === "login" || next === "logout")) {
+        return "utility";
+    }
     if (head === "login" || head === "doctor" || head === "ping" || head === "help" || head === "version" || head === "recent") {
         return "utility";
     }

package/package.json

@@ -1,56 +1,56 @@
-{
-  "name": "archive-labs",
-  "version": "1.0.5",
-  "description": "Terminal CLI for Archive that manages login, repository status, sync, checks, impact analysis, and release risk.",
-  "license": "Apache-2.0",
-  "preferGlobal": true,
-  "packageManager": "pnpm@10.33.0",
-  "type": "module",
-  "bin": {
-    "archive": "./dist/cli.js",
-    "archive-labs": "./dist/cli.js"
-  },
-  "files": [
-    "dist",
-    "logo.png",
-    "README.md",
-    "LICENSE"
-  ],
-  "engines": {
-    "node": ">=22.13.0"
-  },
-  "scripts": {
-    "clean": "node -e \"require('node:fs').rmSync('dist',{recursive:true,force:true})\"",
-    "build": "tsc -p tsconfig.json",
-    "dev": "tsx watch src/cli.ts",
-    "start": "node dist/cli.js",
-    "smoke": "node dist/cli.js version && node dist/cli.js help",
-    "pack:verify": "node scripts/verify-pack.mjs",
-    "test:contract": "node scripts/test-contract.mjs",
-    "lint": "npm run typecheck",
-    "typecheck": "tsc -p tsconfig.json --noEmit",
-    "test:integration": "npm run build && node scripts/run-node-tests.mjs",
-    "test": "npm run test:integration",
-    "ci": "npm run clean && npm run typecheck && npm run build && npm run smoke && npm run test",
-    "prepack": "npm run build",
-    "prepublishOnly": "npm run ci && npm run pack:verify"
-  },
-  "keywords": [
-    "archive-labs",
-    "archive",
-    "cli"
-  ],
-  "devDependencies": {
-    "@types/node": "^22.16.5",
-    "tsx": "^4.20.3",
-    "typescript": "^5.9.3"
-  },
-  "dependencies": {
-    "@clack/prompts": "^1.2.0",
-    "@napi-rs/keyring": "^1.3.0",
-    "chalk": "^5.6.2",
-    "commander": "^14.0.3",
-    "listr2": "^10.2.1",
-    "ora": "^9.3.0"
-  }
-}
+{
+  "name": "archive-labs",
+  "version": "1.0.7",
+  "description": "Terminal CLI for Archive that manages login, repository status, sync, checks, impact analysis, and release risk.",
+  "license": "Apache-2.0",
+  "preferGlobal": true,
+  "packageManager": "pnpm@10.33.0",
+  "type": "module",
+  "bin": {
+    "archive": "./dist/cli.js",
+    "archive-labs": "./dist/cli.js"
+  },
+  "files": [
+    "dist",
+    "logo.png",
+    "README.md",
+    "LICENSE"
+  ],
+  "engines": {
+    "node": ">=22.13.0"
+  },
+  "scripts": {
+    "clean": "node -e \"require('node:fs').rmSync('dist',{recursive:true,force:true})\"",
+    "build": "tsc -p tsconfig.json",
+    "dev": "tsx watch src/cli.ts",
+    "start": "node dist/cli.js",
+    "smoke": "node dist/cli.js version && node dist/cli.js help",
+    "pack:verify": "node scripts/verify-pack.mjs",
+    "test:contract": "node scripts/test-contract.mjs",
+    "lint": "npm run typecheck",
+    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "test:integration": "npm run build && node scripts/run-node-tests.mjs",
+    "test": "npm run test:integration",
+    "ci": "npm run clean && npm run typecheck && npm run build && npm run smoke && npm run test",
+    "prepack": "npm run build",
+    "prepublishOnly": "npm run ci && npm run pack:verify"
+  },
+  "keywords": [
+    "archive-labs",
+    "archive",
+    "cli"
+  ],
+  "devDependencies": {
+    "@types/node": "^22.16.5",
+    "tsx": "^4.20.3",
+    "typescript": "^5.9.3"
+  },
+  "dependencies": {
+    "@clack/prompts": "^1.2.0",
+    "@napi-rs/keyring": "^1.3.0",
+    "chalk": "^5.6.2",
+    "commander": "^14.0.3",
+    "listr2": "^10.2.1",
+    "ora": "^9.3.0"
+  }
+}