cassian-cli 0.1.7 → 0.1.9

package/dist/commands/login.js

@@ -1,177 +1,44 @@
-import { createServer } from "http";
 import { createInterface } from "readline";
 import open from "open";
 import { saveCredentials } from "../lib/auth.js";
 import { success, dim } from "../lib/output.js";
 import { fatal } from "../lib/errors.js";
 import { PLATFORM_URL } from "../lib/constants.js";
-const PORT_RANGE = [9876, 9877, 9878, 9879, 9880];
 export async function login() {
-    const port = await findOpenPort();
-    const callbackUrl = port ? `http://localhost:${port}/callback` : null;
-    const authUrl = callbackUrl
-        ? `${PLATFORM_URL}?cli_redirect=${encodeURIComponent(callbackUrl)}`
-        : `${PLATFORM_URL}?cli_mode=token`;
-    const allowedOrigin = new URL(PLATFORM_URL).origin;
+    const authUrl = `${PLATFORM_URL}/cli`;
     console.log();
-    console.log(dim("  Login URL:"));
-    console.log(`  ${authUrl}`);
+    open(authUrl).catch(() => { });
+    console.log(dim("  Opening browser..."));
+    console.log(dim(`  If it didn't open, visit: ${authUrl}`));
     console.log();
-    // If we got a port, try the automatic callback flow
-    if (port && callbackUrl) {
-        console.log(dim("  Press Enter to open browser. Or paste the token from the page below."));
-        console.log();
-        return new Promise((resolve) => {
-            let done = false;
-            const server = createServer((req, res) => {
-                const origin = req.headers["origin"] || "";
-                if (origin && origin !== allowedOrigin) {
-                    res.writeHead(403);
-                    res.end();
-                    return;
-                }
-                res.setHeader("Access-Control-Allow-Origin", allowedOrigin);
-                res.setHeader("Access-Control-Allow-Methods", "POST, OPTIONS");
-                res.setHeader("Access-Control-Allow-Headers", "Content-Type");
-                if (req.method === "OPTIONS") {
-                    res.writeHead(204);
-                    res.end();
-                    return;
-                }
-                const url = new URL(req.url || "/", `http://localhost:${port}`);
-                if (url.pathname === "/callback" && req.method === "POST") {
-                    const accessToken = url.searchParams.get("access_token");
-                    const refreshToken = url.searchParams.get("refresh_token");
-                    const expiresIn = parseInt(url.searchParams.get("expires_in") || "3600");
-                    if (!accessToken || !refreshToken) {
-                        res.writeHead(400);
-                        res.end();
-                        return;
-                    }
-                    finishLogin(accessToken, refreshToken, expiresIn);
-                    res.writeHead(200);
-                    res.end("ok");
-                    return;
-                }
-                res.writeHead(404);
-                res.end();
-            });
-            // Also accept pasted token from stdin
-            const rl = createInterface({ input: process.stdin, output: process.stdout });
-            rl.on("line", (line) => {
-                const trimmed = line.trim();
-                if (!trimmed) {
-                    // Enter with no input = open browser
-                    open(authUrl).catch(() => { });
-                    return;
-                }
-                // User pasted a token
-                if (handlePastedToken(trimmed)) {
-                    rl.close();
-                    server.close();
-                }
-            });
-            server.listen(port, "127.0.0.1");
-            server.on("error", () => {
-                // Port taken — fall back to paste-only
-                console.log(dim("  Could not bind port. Paste your token below:"));
-            });
-            const timeout = setTimeout(() => {
-                if (!done) {
-                    server.close();
-                    rl.close();
-                    fatal("Login timed out.", "Run: cassian login");
-                }
-            }, 300000);
-            server.on("close", () => { if (!done)
-                clearTimeout(timeout); });
-            function finishLogin(accessToken, refreshToken, expiresIn) {
-                if (done)
-                    return;
-                done = true;
-                clearTimeout(timeout);
-                const payload = JSON.parse(Buffer.from(accessToken.split(".")[1], "base64url").toString());
-                const email = payload.email || "unknown";
-                saveCredentials({
-                    access_token: accessToken,
-                    refresh_token: refreshToken,
-                    expires_at: Math.floor(Date.now() / 1000) + expiresIn,
-                    user_email: email,
-                });
-                console.log();
-                success(`Logged in as ${email}`);
-                console.log();
-                rl.close();
-                server.close();
-                resolve();
-            }
-            function handlePastedToken(token) {
-                if (done)
-                    return false;
-                try {
-                    // Format: access_token:::refresh_token
-                    let accessToken;
-                    let refreshToken;
-                    if (token.includes(":::")) {
-                        [accessToken, refreshToken] = token.split(":::");
-                    }
-                    else {
-                        fatal("Invalid token format.", "Copy the full token from the login page.");
-                        return false;
-                    }
-                    const parts = accessToken.split(".");
-                    if (parts.length !== 3)
-                        throw new Error("bad jwt");
-                    const payload = JSON.parse(Buffer.from(parts[1], "base64url").toString());
-                    const expiresIn = (payload.exp || Math.floor(Date.now() / 1000) + 3600) - Math.floor(Date.now() / 1000);
-                    finishLogin(accessToken, refreshToken, expiresIn);
-                    return true;
-                }
-                catch {
-                    console.log(dim("  Invalid token. Try again or wait for browser callback."));
-                    return false;
-                }
-            }
+    const rl = createInterface({ input: process.stdin, output: process.stdout });
+    const code = await new Promise((resolve) => {
+        rl.question("  Enter code: ", (answer) => {
+            rl.close();
+            resolve(answer.trim());
         });
+    });
+    if (!code || !/^\d{6}$/.test(code)) {
+        fatal("Invalid code.", "Enter the 6-digit code shown in your browser.");
     }
-    else {
-        // No port available — paste only
-        console.log(dim("  After logging in, copy the token from the page and paste it here:"));
-        console.log();
-        const rl = createInterface({ input: process.stdin, output: process.stdout });
-        const token = await new Promise((res) => {
-            rl.question("  Token: ", (answer) => { rl.close(); res(answer.trim()); });
-        });
-        if (!token || !token.includes(":::")) {
-            fatal("Invalid token.", "Copy the full token from the login page.");
-        }
-        const [accessToken, refreshToken] = token.split(":::");
-        const payload = JSON.parse(Buffer.from(accessToken.split(".")[1], "base64url").toString());
-        const email = payload.email || "unknown";
-        saveCredentials({
-            access_token: accessToken,
-            refresh_token: refreshToken,
-            expires_at: payload.exp || Math.floor(Date.now() / 1000) + 3600,
-            user_email: email,
-        });
-        console.log();
-        success(`Logged in as ${email}`);
-        console.log();
+    // Exchange code for tokens
+    const { AGENT_URL } = await import("../lib/constants.js");
+    const resp = await fetch(`${AGENT_URL}/v1/cli/auth?code=${code}`);
+    if (!resp.ok) {
+        const body = await resp.json().catch(() => ({}));
+        const msg = body.error || "Code exchange failed";
+        fatal(msg, "Run: cassian login");
     }
-}
-function findOpenPort() {
-    return new Promise((resolve) => {
-        let idx = 0;
-        function tryNext() {
-            if (idx >= PORT_RANGE.length) {
-                resolve(null);
-                return;
-            }
-            const port = PORT_RANGE[idx++];
-            const srv = createServer();
-            srv.listen(port, "127.0.0.1", () => { srv.close(() => resolve(port)); });
-            srv.on("error", () => tryNext());
-        }
-        tryNext();
+    const { access_token, refresh_token } = await resp.json();
+    const payload = JSON.parse(Buffer.from(access_token.split(".")[1], "base64url").toString());
+    const email = payload.email || "unknown";
+    saveCredentials({
+        access_token,
+        refresh_token,
+        expires_at: payload.exp || Math.floor(Date.now() / 1000) + 3600,
+        user_email: email,
     });
+    console.log();
+    success(`Logged in as ${email}`);
+    console.log();
 }

package/dist/commands/ssh.js

@@ -3,6 +3,7 @@ import { ApiClient } from "../lib/api.js";
 import { getCredentials, isTokenExpired, refreshToken } from "../lib/auth.js";
 import { AGENT_URL } from "../lib/constants.js";
 import { loadConfig } from "../lib/config.js";
+import { pushWorkspace } from "../lib/push.js";
 import { dim } from "../lib/output.js";
 import { fatal, handleError } from "../lib/errors.js";
 import { startBidirectionalSync } from "../lib/watcher.js";
@@ -21,6 +22,11 @@ export async function ssh() {
         if (!instance) {
             fatal(`${config.name} is not running.`, "Run: cassian up");
         }
+        // Push local files before connecting
+        try {
+            await pushWorkspace(client, instance.id, config);
+        }
+        catch { /* best effort */ }
         const stopSync = startBidirectionalSync(instance.id, config, AGENT_URL);
         const connected = await connectWebSocket(instance, stopSync);
         if (!connected) {

package/dist/commands/up.js

@@ -82,14 +82,12 @@ export async function up() {
         fatal("Could not connect to Cassian.", "Check your internet connection and try again. If this keeps happening, reach out at trycassian.com.");
     }
     connectSpinner.succeed("Connected");
-    // SSH key — invisible to user
-    let sshPubKey;
+    // SSH key — optional, used only for direct SSH fallback
+    let sshPubKey = "";
     try {
         sshPubKey = readFileSync(findSshPublicKey(dev.ssh_public_key), "utf-8").trim();
     }
-    catch {
-        fatal("No SSH key found.", "Generate one with: ssh-keygen -t ed25519");
-    }
+    catch { /* no key is fine — websocket terminal doesn't need it */ }
     const spinner = ora("Starting instance...").start();
     try {
         const client = new ApiClient();
@@ -132,33 +130,7 @@ export async function up() {
             },
         });
         spinner.succeed("Instance ready");
-        // Push workspace (incremental tar via agent API)
-        const mountPath = config.volumes?.[0]?.mount || "/workspace";
-        const wsSpinner = ora("Syncing files...").start();
-        try {
-            const tar = await import("tar");
-            const syncignore = config.workspace?.syncignore ?? [];
-            const defaultIgnore = ["**/.git/**", "**/node_modules/**", "**/__pycache__/**", "**/*.pyc", "**/.DS_Store", ...syncignore];
-            const ignoreRegexes = defaultIgnore.map((p) => {
-                const esc = p.replace(/[.+^${}()|[\]\\]/g, "\\$&").replace(/\*\*/g, "\x00").replace(/\*/g, "[^/]*").replace(/\x00/g, ".*");
-                return new RegExp(`(^|/)${esc}($|/)`);
-            });
-            const chunks = [];
-            await new Promise((res, rej) => {
-                const pack = tar.create({ cwd: process.cwd(), filter: (p) => {
-                        const rel = p.replace(/^\.\//, "");
-                        return !ignoreRegexes.some((re) => re.test(rel));
-                    } }, ["."]);
-                pack.on("data", (c) => chunks.push(c));
-                pack.on("end", res);
-                pack.on("error", rej);
-            });
-            await client.push(instance.id, Buffer.concat(chunks), mountPath);
-            wsSpinner.succeed("Files synced");
-        }
-        catch {
-            wsSpinner.warn("File sync skipped — you can sync manually once connected");
-        }
+        // Sync happens during ssh/exec, not during up
         // Setup command
         if (config.workspace?.setup) {
             const setupSpinner = ora("Running setup...").start();

package/dist/lib/constants.d.ts

@@ -1,4 +1,4 @@
 export declare const SUPABASE_URL = "https://ykgwmdvzzburglrkjutc.supabase.co";
 export declare const SUPABASE_ANON_KEY = "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6InlrZ3dtZHZ6emJ1cmdscmtqdXRjIiwicm9sZSI6ImFub24iLCJpYXQiOjE3NzI0MzI0MzUsImV4cCI6MjA4ODAwODQzNX0.c-MSPTYr9_G77sy_2hAcY7hth8mSKmNQDzfTjIx8rE0";
 export declare const AGENT_URL = "https://gpu.platops.ai";
-export declare const PLATFORM_URL = "https://platform.trycassian.com";
+export declare const PLATFORM_URL: string;

package/dist/lib/constants.js

@@ -1,4 +1,4 @@
 export const SUPABASE_URL = "https://ykgwmdvzzburglrkjutc.supabase.co";
 export const SUPABASE_ANON_KEY = "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6InlrZ3dtZHZ6emJ1cmdscmtqdXRjIiwicm9sZSI6ImFub24iLCJpYXQiOjE3NzI0MzI0MzUsImV4cCI6MjA4ODAwODQzNX0.c-MSPTYr9_G77sy_2hAcY7hth8mSKmNQDzfTjIx8rE0";
 export const AGENT_URL = "https://gpu.platops.ai";
-export const PLATFORM_URL = "https://platform.trycassian.com";
+export const PLATFORM_URL = process.env.CASSIAN_PLATFORM_URL || "https://platform.trycassian.com";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cassian-cli",
-  "version": "0.1.7",
+  "version": "0.1.9",
   "description": "The Cassian GPU cloud CLI — provision GPUs, sync files, and run workloads from your terminal.",
   "type": "module",
   "bin": {