avo 3.3.1 → 3.4.0

package/cli.js

@@ -1434,11 +1434,44 @@ function _respondWithRedirect(req, res, Location) {
         resolve();
     });
 }
+function _extractAuthorizationCode(codeOrUrl) {
+    const input = codeOrUrl.trim();
+    if (!input) {
+        return input;
+    }
+    try {
+        const parsedUrl = new URL(input);
+        const code = parsedUrl.searchParams.get('code');
+        if (code) {
+            return code.trim();
+        }
+    }
+    catch {
+        // Not a full URL, fall back to parsing possible query-like input.
+    }
+    const query = input.includes('?')
+        ? input.split('?').slice(1).join('?')
+        : input;
+    const code = new URLSearchParams(query).get('code');
+    return code ? code.trim() : input;
+}
 function _loginWithoutLocalhost() {
     const callbackUrl = _getCallbackUrl();
     const authUrl = _getLoginUrl(callbackUrl);
     report.info(`Visit this URL on any device to login: ${new URL(authUrl)}`);
-    return open(authUrl);
+    open(authUrl);
+    return inquirer
+        .prompt([
+        {
+            type: 'input',
+            name: 'codeOrUrl',
+            message: 'Paste full redirect URL or code (value after code=):',
+        },
+    ])
+        .then((answers) => _getTokensFromAuthorizationCode(_extractAuthorizationCode(answers.codeOrUrl), callbackUrl).then((tokens) => ({
+        user: jwt.decode(tokens.idToken),
+        tokens,
+    })));
 }
 function _loginWithLocalhost(port) {
     return new Promise((resolve, reject) => {
@@ -1476,7 +1509,10 @@ function _loginWithLocalhost(port) {
         });
     });
 }
-function login() {
+function login(forceManual = false) {
+    if (forceManual) {
+        return _loginWithoutLocalhost();
+    }
     return _getPort().then(_loginWithLocalhost, _loginWithoutLocalhost);
 }
 function logout(refreshToken) {
@@ -2044,14 +2080,20 @@ if (isMainModule) {
             .command({
             command: 'login',
             describe: 'Log into the Avo platform',
-            handler: () => {
+            builder: (yargs) => yargs.option('force-manual', {
+                alias: 'm',
+                describe: 'Force manual login (copy-paste code)',
+                type: 'boolean',
+                default: false,
+            }),
+            handler: (argv) => {
                 const command = () => {
                     const user = conf.get('user');
                     if (user) {
                         report.info(`Already logged in as ${email(user.email)}`);
                         return;
                     }
-                    login()
+                    login(argv.forceManual)
                         .then((result) => {
                         conf.set('user', result.user);
                         conf.set('tokens', result.tokens);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "avo",
-  "version": "3.3.1",
+  "version": "3.4.0",
   "type": "module",
   "description": "The command-line interface for Avo",
   "author": "Avo (https://www.avo.app)",
@@ -37,7 +37,7 @@
     "got": "^12.1.0",
     "http-shutdown": "^1.2.0",
     "ignore-walk": "^5.0.1",
-    "inquirer": "^8.0.0",
+    "inquirer": "8.2.6",
     "inquirer-fuzzy-path": "^2.3.0",
     "jsonwebtoken": "^9.0.3",
     "load-json-file": "^7.0.1",
@@ -59,7 +59,7 @@
     "@types/ignore-walk": "^4.0.0",
     "@types/jest": "^29.5.14",
     "@types/minimatch": "^5.1.2",
-    "@types/node": "^24.1.0",
+    "@types/node": "^25.3.0",
     "@typescript-eslint/eslint-plugin": "^5.30.5",
     "@typescript-eslint/parser": "^5.30.5",
     "eslint": "^7.32.0 || ^8.2.0",