nexrall-code 0.5.208 → 0.5.210

package/README.md

@@ -7,7 +7,7 @@ npm install -g nexrall-code
 nex
 ```
 
-Requires Node.js 20+ and a Nexrall account — it signs in with the same account as the extension; billing stays in one place and there are no API keys to configure.
+Requires Node.js 20+ and a Nexrall account. **Signing in happens in the terminal** — no editor, no VS Code login first: the first `nex` (or `nex auth`) asks how you want to sign in, with a browser hand-off that works for Google/Apple/SSO accounts as well as email + password or a token. It is the same account as the extension, so billing stays in one place and there are no API keys to configure.
 
 ## Quick start
 

package/dist/index.js

@@ -10097,7 +10097,7 @@ var require_client = __commonJS({
       return mod && mod.__esModule ? mod : { "default": mod };
     };
     Object.defineProperty(exports, "__esModule", { value: true });
-    exports.SCHEDULE_MAX_MINUTES = exports.SCHEDULE_MIN_MINUTES = exports.API_BASE = void 0;
+    exports.SCHEDULE_MAX_MINUTES = exports.SCHEDULE_MIN_MINUTES = exports.DEVICE_ACCOUNT_LIMIT = exports.API_BASE = void 0;
     exports.chooseFinalContent = chooseFinalContent;
     exports.refreshAccessToken = refreshAccessToken3;
     exports.earlyToolResolveEnabled = earlyToolResolveEnabled;
@@ -10112,6 +10112,8 @@ var require_client = __commonJS({
     exports.getOrgs = getOrgs3;
     exports.getCodeModels = getCodeModels;
     exports.getUsageDaily = getUsageDaily;
+    exports.parseApiRefusal = parseApiRefusal;
+    exports.refusalMessage = refusalMessage;
     exports.exchangeVscodeCode = exchangeVscodeCode;
     exports.login = login2;
     exports.exchangeAuthCode = exchangeAuthCode2;
@@ -11122,15 +11124,41 @@ var require_client = __commonJS({
         totalSpent: typeof data.totalSpent === "number" ? data.totalSpent : 0
       };
     }
-    async function exchangeVscodeCode(code) {
-      const response = await (0, node_fetch_1.default)(`${exports.API_BASE}/api/auth/vscode-exchange`, {
+    exports.DEVICE_ACCOUNT_LIMIT = "device_account_limit";
+    function parseApiRefusal(raw) {
+      const text = raw.trim();
+      try {
+        const body = JSON.parse(text);
+        const message = typeof body.error === "string" && body.error.trim() ? body.error.trim() : void 0;
+        return {
+          raw: text,
+          ...message ? { message } : {},
+          ...typeof body.code === "string" && body.code ? { code: body.code } : {},
+          ...typeof body.limit === "number" ? { limit: body.limit } : {}
+        };
+      } catch {
+        return { raw: text };
+      }
+    }
+    function refusalMessage(raw) {
+      const { code, message, limit, raw: text } = parseApiRefusal(raw);
+      if (code === exports.DEVICE_ACCOUNT_LIMIT) {
+        return message ?? `This device has reached its limit of ${limit ?? "the maximum number of"} accounts. Sign in with an account already used on this device, or use a different device.`;
+      }
+      return message ?? text;
+    }
+    function postVscodeExchange(code) {
+      return (0, node_fetch_1.default)(`${exports.API_BASE}/api/auth/vscode-exchange`, {
         method: "POST",
         headers: { "Content-Type": "application/json", ...deviceHeader() },
         body: JSON.stringify({ code })
       });
+    }
+    async function exchangeVscodeCode(code) {
+      const response = await postVscodeExchange(code);
       if (!response.ok) {
         const errText3 = await response.text();
-        throw new Error(`OAuth exchange failed (${response.status}): ${errText3}`);
+        throw new Error(`OAuth exchange failed (${response.status}): ${refusalMessage(errText3)}`);
       }
       const data = await response.json();
       if (!data.token)
@@ -11149,7 +11177,7 @@ var require_client = __commonJS({
       });
       if (!response.ok) {
         const errText3 = await response.text();
-        throw new Error(`Login failed (${response.status}): ${errText3}`);
+        throw new Error(`Login failed (${response.status}): ${refusalMessage(errText3)}`);
       }
       const data = await response.json();
       if (!data.token) {
@@ -11162,17 +11190,13 @@ var require_client = __commonJS({
       };
     }
     async function exchangeAuthCode2(code) {
-      const response = await (0, node_fetch_1.default)(`${exports.API_BASE}/api/auth/vscode-exchange`, {
-        method: "POST",
-        headers: { "Content-Type": "application/json", ...deviceHeader() },
-        body: JSON.stringify({ code })
-      });
+      const response = await postVscodeExchange(code);
       if (response.status === 401 || response.status === 400) {
         throw new Error("That sign-in code is invalid or has expired (codes last 5 minutes). Run `nex auth --browser` again.");
       }
       if (!response.ok) {
         const errText3 = await response.text().catch(() => "");
-        throw new Error(`Sign-in failed (${response.status}): ${errText3}`);
+        throw new Error(`Sign-in failed (${response.status}): ${refusalMessage(errText3)}`);
       }
       const data = await response.json();
       if (!data.token)
@@ -80240,6 +80264,12 @@ function parseAuthMethod(input) {
     return "token";
   return null;
 }
+function shouldOfferLogin(ctx) {
+  return ctx.isTTY && !ctx.headless;
+}
+function stripPasteMarkers(raw) {
+  return raw.replace(/\u001b\[[0-9;?]*[~A-Za-z]/g, "").replace(/\u001b/g, "");
+}
 function prompt(question, hidden = false) {
   return new Promise((resolve19) => {
     const rl = readline.createInterface({
@@ -80250,30 +80280,38 @@ function prompt(question, hidden = false) {
     if (hidden) {
       process.stdout.write(question);
       let value = "";
+      let finished = false;
       const { stdin } = process;
       const wasRaw = stdin.isRaw;
       stdin.setRawMode(true);
       stdin.resume();
       stdin.setEncoding("utf8");
-      const onData = (char) => {
-        if (char === "\n" || char === "\r" || char === "") {
-          stdin.setRawMode(wasRaw ?? false);
-          stdin.pause();
-          stdin.removeListener("data", onData);
-          rl.close();
-          process.stdout.write("\n");
-          if (char === "") {
-            process.exit(0);
-          }
-          resolve19(value);
-          return;
-        }
-        if (char === "\x7F" || char === "\b") {
-          if (value.length > 0)
-            value = value.slice(0, -1);
+      const finish = (submit) => {
+        if (finished)
           return;
+        finished = true;
+        stdin.setRawMode(wasRaw ?? false);
+        stdin.pause();
+        stdin.removeListener("data", onData);
+        rl.close();
+        process.stdout.write("\n");
+        if (!submit)
+          process.exit(0);
+        resolve19(stripPasteMarkers(value));
+      };
+      const onData = (chunk) => {
+        for (const char of chunk) {
+          if (char === "\n" || char === "\r")
+            return finish(true);
+          if (char === "")
+            return finish(false);
+          if (char === "\x7F" || char === "\b") {
+            if (value.length > 0)
+              value = value.slice(0, -1);
+            continue;
+          }
+          value += char;
         }
-        value += char;
       };
       stdin.on("data", onData);
     } else {
@@ -114900,8 +114938,17 @@ program2.option("-y, --yolo", "Auto-approve all tool calls (no permission prompt
   "Settings (permissions, hooks\u2026) for this run only: a JSON file or an inline JSON object; merged over the user/project settings"
 ).option("--debug-file <path>", "Write the --debug diagnostics log to this file (implies --debug)").argument("[prompt...]", "One-shot prompt \u2014 if omitted, starts interactive mode").action(async (promptParts, options) => {
   if (!(0, import_code_core78.isAuthenticated)()) {
-    console.error("Not logged in. Run: nex auth");
-    process.exit(1);
+    if (!shouldOfferLogin({
+      isTTY: !!process.stdin.isTTY,
+      headless: !!(options.print || options.outputFormat)
+    })) {
+      console.error("Not logged in. Run: nex auth (or set NEXRALL_TOKEN for CI)");
+      process.exit(1);
+    }
+    console.log(paint.dim("  Not signed in yet \u2014 signing in first (Ctrl+C cancels)."));
+    await authCommand();
+    if (!(0, import_code_core78.isAuthenticated)())
+      process.exit(process.exitCode || 1);
   }
   const model = options.model ?? "deepseek-flash";
   const workDir = options.dir ? path35.resolve(options.dir) : process.cwd();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nexrall-code",
-  "version": "0.5.208",
+  "version": "0.5.210",
   "description": "Nexrall Code — AI coding assistant for your terminal (headless agent for scripts, CI and automation)",
   "keywords": [
     "ai",