insta 0.0.71 → 0.0.72

package/dist/agent.js

@@ -66,7 +66,7 @@ export async function loadAgentSession(apiUrl, projectId, cwd = process.cwd()) {
 // scope.projectId. A miss fails HERE, naming the route, instead of on the platform as a
 // "for a different project" 403 whose setup hint cannot help — keep this list in step with the
 // account-level paths in src/commands/.
-export const ACCOUNT_ROUTES = new Set(['agent', 'auth', 'me', 'orgs', 'regions', 'templates', 'tokens', 'github']);
+export const ACCOUNT_ROUTES = new Set(['agent', 'auth', 'me', 'orgs', 'regions', 'templates', 'tokens']);
 export async function agentHeaders(api, method, path, rawBody, scope = {}) {
     if (!mode)
         return {};

package/dist/commands/github.js

@@ -81,8 +81,8 @@ const sleepSeconds = (s) => new Promise((r) => setTimeout(r, s * 1000));
 const pollDelay = (s) => Math.min(Math.max(s, 1), 60);
 // GitHub shows the person a code to type; the platform holds the device code and finishes the exchange,
 // so nothing secret passes through the CLI.
-export async function authorizeTerminal(api, orgId, wait = sleepSeconds) {
-    const start = await api.request('POST', `/orgs/${encodeURIComponent(orgId)}/github/device`, {});
+export async function authorizeTerminal(api, wait = sleepSeconds) {
+    const start = await api.request('POST', '/me/github/device', {});
     const deadline = Date.parse(start.expiresAt);
     // A NaN deadline makes every comparison false, which reads as an instant expiry — or, inverted, as a
     // loop with no way out. Fail on it rather than guess which.
@@ -100,7 +100,7 @@ export async function authorizeTerminal(api, orgId, wait = sleepSeconds) {
         await wait(interval);
         let answer;
         try {
-            answer = await api.request('POST', `/orgs/${encodeURIComponent(orgId)}/github/device/poll`, { state: start.state });
+            answer = await api.request('POST', '/me/github/device/poll', { state: start.state });
         }
         catch (e) {
             // A dropped link, or the per-IP limiter this cadence already tripped on the login flow, must not
@@ -120,41 +120,18 @@ export async function authorizeTerminal(api, orgId, wait = sleepSeconds) {
     }
     throw new Error('the GitHub authorization expired before it was confirmed — run the command again');
 }
-// Only the platform's own "you have no usable authorization" may send the person to GitHub: any other
-// failure is real, and a device flow cannot fix it.
-const needsAuthorization = (e) => e instanceof ApiError && e.status === 400 && /not linked|no longer accepted/i.test(e.message);
-// The repositories THIS caller's GitHub account can reach — the same question the platform asks again
-// when the connect lands, so a repo missing here would be refused there anyway.
-// Someone has to read the code and type it at GitHub. A terminal qualifies, and so does agent mode —
-// an agent relays the URL to the person driving it — but --json and a bare pipe have no reader, and a
-// ten-minute wait there is a stall where the old code failed with something to act on.
+// Device authorization needs a person to read the code; JSON and bare pipes must fail promptly.
 export function canAuthorizeHere(opts = {}) {
     if (opts.json)
         return false;
     return !!agentMode() || !!process.stderr.isTTY;
 }
-export async function findCallerRepo(api, orgId, ref, authorize = authorizeTerminal, canAuthorize = canAuthorizeHere()) {
-    if (!orgId)
-        throw new Error('this directory is linked without an org — set INSTA_ORG_ID alongside INSTA_PROJECT_ID, or link it with `insta project link`');
-    let repos;
-    try {
-        repos = (await api.request('POST', `/orgs/${encodeURIComponent(orgId)}/github/repos`, {})).repos ?? [];
-    }
-    catch (e) {
-        // Two 403s carry an action; a third kind would be guessed at, so it is rethrown as the platform put it.
-        if (e instanceof ApiError && e.status === 403 && /unclassified_agent_action/.test(e.message)) {
-            throw new Error('this backend does not let an agent authorize GitHub yet — connect the repository from the console, or pass --public for a public repository');
-        }
-        if (e instanceof ApiError && e.status === 403 && /requires admin/i.test(e.message)) {
-            throw new Error('connecting a repository needs the org admin role — ask an admin to connect it, or pass --public for a public repository');
-        }
-        if (!needsAuthorization(e))
-            throw e;
-        if (!canAuthorize) {
-            throw new Error('this GitHub account is not authorized for InstaCloud yet, and nothing here can read the code GitHub shows — run `insta compute connect-repo` from a terminal, connect the repository from the console, or pass --public for a public repository');
-        }
-        repos = await authorize(api, orgId);
+export async function findCallerRepo(api, ref, authorize = authorizeTerminal, canAuthorize = canAuthorizeHere()) {
+    const mine = await api.request('GET', '/me/github/repos');
+    if (!mine.linked && !canAuthorize) {
+        throw new Error('this GitHub account is not authorized for InstaCloud yet, and nothing here can read the code GitHub shows — run `insta compute connect-repo` from a terminal, connect the repository from the console, or pass --public for a public repository');
     }
+    const repos = mine.linked ? mine.repos : await authorize(api);
     const whole = (n) => n !== null && n !== '' && Number.isInteger(Number(n)) && Number(n) > 0;
     const hit = repos.find((r) => r.owner.toLowerCase() === ref.owner.toLowerCase() && r.repo.toLowerCase() === ref.repo.toLowerCase());
     if (hit && whole(hit.installationId) && whole(hit.id))
@@ -187,7 +164,7 @@ export async function computeConnectRepo(rawRef, serviceName, opts) {
     const svc = await targetService(api, p.projectId, opts.branch ?? p.branch, serviceName);
     const src = opts.public
         ? { source: 'public', ...ref }
-        : { source: 'app', ...(await findCallerRepo(api, p.orgId, ref, authorizeTerminal, canAuthorizeHere(opts))), ...ref };
+        : { source: 'app', ...(await findCallerRepo(api, ref, authorizeTerminal, canAuthorizeHere(opts))), ...ref };
     // Detection must scan the branch that will be built: the build refuses commands that differ from what it detects there.
     const detected = await api.request('POST', `/projects/${p.projectId}/github/detect`, { ...src, ...(opts.repoBranch ? { ref: opts.repoBranch } : {}) });
     const candidate = pickCandidate(detected.services, opts.rootDir);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "insta",
-  "version": "0.0.71",
+  "version": "0.0.72",
   "type": "module",
   "description": "InstaCloud CLI — a thin client of the platform control-plane API.",
   "keywords": [