forgeos 0.1.0-alpha.49 → 0.1.0-alpha.50

package/AGENTS.md

@@ -1,4 +1,4 @@
-// @forge-generated generator=0.1.0-alpha.49 input=a7c20b1d3492dcb4111d826ff8622647abd8f6be499cffb3c27e077c9b3267b1 content=721818a6f9a664aa898092d4aa5cd68cbbd8ad6e150c7d3ad3ef785a2e3fcf53
+// @forge-generated generator=0.1.0-alpha.50 input=5f918b7dab43b47f2774c505897503c0b5ddc26d4022167410ed9f3b76190ee6 content=721818a6f9a664aa898092d4aa5cd68cbbd8ad6e150c7d3ad3ef785a2e3fcf53
 # AGENTS.md
 
 <!-- forge-generated:start -->

package/CHANGELOG.md

@@ -1,5 +1,19 @@
 # forgeos
 
+## 0.1.0-alpha.50
+
+### Patch Changes
+
+- Tighten the no-dashboard WorkOS real setup/proof handoff.
+
+  - WorkOS hosted setup now records explicit `WORKOS_MODE=agent npx --yes
+    workos@latest auth login --json` shell guidance when CLI login is required.
+  - Failed `forge workos setup --real` login attempts now tell the operator to
+    rerun the same setup command after completing OAuth/device-code login,
+    instead of pointing generically at `prove --real`.
+  - Human output now includes the login command, device URL/code when present,
+    and the exact Forge rerun command for agent-friendly continuation.
+
 ## 0.1.0-alpha.49
 
 ### Patch Changes

package/docs/changelog.md

@@ -6,6 +6,16 @@ The canonical source file in the repository is `CHANGELOG.md`.
 
 ## Unreleased
 
+## 0.1.0-alpha.50
+
+- WorkOS hosted setup now includes explicit
+  `WORKOS_MODE=agent npx --yes workos@latest auth login --json` guidance when
+  CLI OAuth/device-code login is required.
+- `forge workos setup --real` now tells the operator to rerun the same setup
+  command after login instead of pointing generically at `prove --real`.
+- Human WorkOS output now includes the login command, device URL/code, and exact
+  Forge rerun command for no-dashboard agent continuation.
+
 ## 0.1.0-alpha.49
 
 - `forge release doctor --json` now reports npm `alpha` and `latest` dist-tag

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "forgeos",
-  "version": "0.1.0-alpha.49",
+  "version": "0.1.0-alpha.50",
   "description": "Agent-native application framework and compiler for building Forge apps without a mandatory dashboard.",
   "type": "module",
   "license": "MIT",

package/src/forge/_generated/releaseManifest.json

@@ -1 +1 @@
-{"defaultProvider":"local","diagnostics":[],"env":{"deployEnv":"FORGE_DEPLOY_ENV","deployId":"FORGE_DEPLOY_ID","publicReleaseId":"NEXT_PUBLIC_FORGE_RELEASE_ID","releaseId":"FORGE_RELEASE_ID"},"gitSha":"unknown","optionalProviders":["local","sentry-compatible","sentry","glitchtip","bugsink","otel","custom"],"packageName":"forgeos","packageVersion":"0.1.0-alpha.49","releaseId":"forgeos@0.1.0-alpha.49+unknown","schemaVersion":"0.1.0"}
+{"defaultProvider":"local","diagnostics":[],"env":{"deployEnv":"FORGE_DEPLOY_ENV","deployId":"FORGE_DEPLOY_ID","publicReleaseId":"NEXT_PUBLIC_FORGE_RELEASE_ID","releaseId":"FORGE_RELEASE_ID"},"gitSha":"unknown","optionalProviders":["local","sentry-compatible","sentry","glitchtip","bugsink","otel","custom"],"packageName":"forgeos","packageVersion":"0.1.0-alpha.50","releaseId":"forgeos@0.1.0-alpha.50+unknown","schemaVersion":"0.1.0"}

package/src/forge/_generated/releaseManifest.ts

@@ -1,4 +1,4 @@
-// @forge-generated generator=0.1.0-alpha.49 input=a7c20b1d3492dcb4111d826ff8622647abd8f6be499cffb3c27e077c9b3267b1 content=bfe9659e5f5a5d2d52e6ac7eb6c13d2bc356c8bf95724fafc6e10fe4641f2104
+// @forge-generated generator=0.1.0-alpha.50 input=5f918b7dab43b47f2774c505897503c0b5ddc26d4022167410ed9f3b76190ee6 content=5bb2a5849e690e58325fbd495bd3b1ad63a42f77c8c1d06464b64c27f9192c6c
 export const releaseManifest = {
   "defaultProvider": "local",
   "diagnostics": [],
@@ -19,7 +19,7 @@ export const releaseManifest = {
     "custom"
   ],
   "packageName": "forgeos",
-  "packageVersion": "0.1.0-alpha.49",
-  "releaseId": "forgeos@0.1.0-alpha.49+unknown",
+  "packageVersion": "0.1.0-alpha.50",
+  "releaseId": "forgeos@0.1.0-alpha.50+unknown",
   "schemaVersion": "0.1.0"
 } as const;

package/src/forge/cli/workos.ts

@@ -347,7 +347,10 @@ export interface WorkOSCliAuthSummary {
   method: "api-key" | "cli";
   skippedReason?: string;
   statusCommand: string[];
+  statusShellCommand?: string;
   loginCommand?: string[];
+  loginShellCommand?: string;
+  rerunCommand?: string;
   loginAttempted: boolean;
   authenticated?: boolean;
   email?: string;
@@ -414,9 +417,21 @@ function workOSCliAuthCheck(auth: WorkOSCliAuthSummary): WorkOSCheck {
   };
 }
 
+function workOSCliAuthShellCommand(command: string[]): string {
+  return `WORKOS_MODE=agent ${command.join(" ")}`;
+}
+
+function workOSHostedRerunCommand(options: WorkOSCommandOptions): string {
+  const file = options.file ?? DEFAULT_SEED_FILE;
+  const subcommand = options.subcommand === "setup" ? "setup" : "prove";
+  return `forge workos ${subcommand} --real --file ${file} --json`;
+}
+
 function ensureWorkOSCliAuthForHosted(options: WorkOSCommandOptions): WorkOSCliAuthSummary {
   const env = readRealEnv(options.workspaceRoot);
   const statusCommand = ["npx", "--yes", "workos@latest", "auth", "status", "--json"];
+  const statusShellCommand = workOSCliAuthShellCommand(statusCommand);
+  const rerunCommand = workOSHostedRerunCommand(options);
   if (hasValue(env, "WORKOS_API_KEY")) {
     return {
       required: false,
@@ -424,6 +439,7 @@ function ensureWorkOSCliAuthForHosted(options: WorkOSCommandOptions): WorkOSCliA
       method: "api-key",
       skippedReason: "WORKOS_API_KEY is present; WorkOS CLI browser login is optional for hosted setup",
       statusCommand,
+      statusShellCommand,
       loginAttempted: false,
       detail: "WORKOS_API_KEY is present; hosted WorkOS setup can use API key authentication",
       nextActions: [],
@@ -444,6 +460,7 @@ function ensureWorkOSCliAuthForHosted(options: WorkOSCommandOptions): WorkOSCliA
       ok: true,
       method: "cli",
       statusCommand,
+      statusShellCommand,
       loginAttempted: false,
       authenticated,
       ...(email ? { email } : {}),
@@ -460,6 +477,7 @@ function ensureWorkOSCliAuthForHosted(options: WorkOSCommandOptions): WorkOSCliA
   }
 
   const loginCommand = ["npx", "--yes", "workos@latest", "auth", "login", "--json"];
+  const loginShellCommand = workOSCliAuthShellCommand(loginCommand);
   const login = runExternalCommand(loginCommand, options);
   const instructions = extractWorkOSLoginInstructions(login.stdout, login.stderr);
   if (login.status === 0) {
@@ -468,7 +486,9 @@ function ensureWorkOSCliAuthForHosted(options: WorkOSCommandOptions): WorkOSCliA
       ok: true,
       method: "cli",
       statusCommand,
+      statusShellCommand,
       loginCommand,
+      loginShellCommand,
       loginAttempted: true,
       authenticated: true,
       status: status.status,
@@ -480,15 +500,19 @@ function ensureWorkOSCliAuthForHosted(options: WorkOSCommandOptions): WorkOSCliA
   }
 
   const nextActions = [
+    loginShellCommand,
     "complete the WorkOS CLI OAuth/device-code login shown in loginInstructions",
-    "rerun forge workos prove --real --file workos-seed.yml --json",
+    `rerun ${rerunCommand}`,
   ];
   return {
     required: true,
     ok: false,
     method: "cli",
     statusCommand,
+    statusShellCommand,
     loginCommand,
+    loginShellCommand,
+    rerunCommand,
     loginAttempted: true,
     authenticated,
     ...(email ? { email } : {}),
@@ -2839,12 +2863,18 @@ export function formatWorkOSHuman(result: WorkOSCommandResult): string {
       lines.push(`WorkOS CLI authenticated${cliAuth.email ? ` as ${cliAuth.email}` : ""}; hosted setup can proceed without opening the dashboard.`);
     } else if (!cliAuth.ok && cliAuth.loginInstructions) {
       lines.push("WorkOS CLI login required before hosted setup can proceed.");
+      if (cliAuth.loginShellCommand) {
+        lines.push(`login: ${cliAuth.loginShellCommand}`);
+      }
       if (cliAuth.loginInstructions.url) {
         lines.push(`open: ${cliAuth.loginInstructions.url}`);
       }
       if (cliAuth.loginInstructions.code) {
         lines.push(`code: ${cliAuth.loginInstructions.code}`);
       }
+      if (cliAuth.rerunCommand) {
+        lines.push(`rerun: ${cliAuth.rerunCommand}`);
+      }
     } else if (cliAuth.method === "api-key") {
       lines.push("WorkOS hosted setup will use WORKOS_API_KEY; CLI browser login is optional.");
     }

package/src/forge/version.ts

@@ -1,3 +1,3 @@
-export const FORGEOS_VERSION = "0.1.0-alpha.49";
+export const FORGEOS_VERSION = "0.1.0-alpha.50";
 export const GENERATOR_VERSION = FORGEOS_VERSION;
 export const CLI_VERSION = FORGEOS_VERSION;