replicas-cli 0.2.630 → 0.2.633

package/dist/index.cjs

@@ -27248,7 +27248,7 @@ var headlessFilesystemAgentResultSchema = external_exports.object({
 });
 
 // ../shared/src/cli-version.ts
-var CLI_VERSION = "0.2.630";
+var CLI_VERSION = "0.2.633";
 
 // ../shared/src/version.ts
 function compareVersions(v1, v2) {
@@ -27967,6 +27967,10 @@ async function ensureOrganizationSelection(options = {}) {
   if (organization) {
     return { organization, total: organizations.length };
   }
+  if (organizations.length === 1) {
+    setOrganizationId(organizations[0].id);
+    return { organization: organizations[0], total: 1 };
+  }
   const canAsk = options.interactive === true && !!process.stdin.isTTY;
   if (canAsk) {
     const chosen = await promptForOrganization(organizations, null);
@@ -28971,7 +28975,7 @@ async function exchangeCodeForTokens(code, codeVerifier) {
     refreshToken: data.refresh_token
   };
 }
-function startCallbackServer(expectedState, codeVerifier) {
+function startCallbackServer(expectedState, codeVerifier, save) {
   return new Promise((resolve2, reject) => {
     const server = import_http2.default.createServer(async (req, res) => {
       try {
@@ -29012,10 +29016,11 @@ function startCallbackServer(expectedState, codeVerifier) {
           }
           try {
             const tokens = await exchangeCodeForTokens(code, codeVerifier);
-            res.writeHead(302, { "Location": `${WEB_APP_URL2}/codex/oauth/success` });
+            const completionUrl = await save(tokens);
+            res.writeHead(302, { "Location": completionUrl });
             res.end();
             server.close();
-            resolve2(tokens);
+            resolve2();
           } catch (tokenError) {
             const errorMessage = encodeURIComponent(tokenError instanceof Error ? tokenError.message : "Unknown error");
             res.writeHead(302, { "Location": `${WEB_APP_URL2}/codex/oauth/error?message=${errorMessage}` });
@@ -29044,11 +29049,11 @@ function startCallbackServer(expectedState, codeVerifier) {
     server.listen(CALLBACK_PORT, "127.0.0.1");
   });
 }
-async function runCodexOAuthFlow(totalSteps) {
+async function runCodexOAuthFlow(totalSteps, save) {
   const pkce = generatePkceCodes();
   const state = generateState2();
   const authUrl = buildAuthorizationUrl(pkce.codeChallenge, state);
-  const tokensPromise = startCallbackServer(state, pkce.codeVerifier);
+  const tokensPromise = startCallbackServer(state, pkce.codeVerifier, save);
   await new Promise((resolve2) => setTimeout(resolve2, 500));
   renderAuthFlowStep(1, totalSteps, "Approve access in your browser");
   await openForApproval("auth.openai.com", authUrl);
@@ -29112,31 +29117,38 @@ async function runCredentialAuthFlow(options, flow) {
     if (!await verifyAuthFlowTarget(target, options.yes === true)) {
       process.exit(1);
     }
-    const tokens = await flow.runOAuth(totalSteps);
-    renderAuthFlowStep(totalSteps, totalSteps, "Saving credentials");
-    const { result: response, reauthenticated } = await withAuthRecovery(
-      () => orgAuthenticatedFetch(
-        isUserScoped ? flow.userEndpoint : flow.orgEndpoint,
-        { method: "POST", body: flow.toRequestBody(tokens) }
-      ),
-      async () => {
-        const current = await resolveAuthFlowTarget(identity);
-        assertDestinationUnchanged(target, current);
-        if (!destinationWasKnown(current)) {
-          throw new Error(
-            "Could not confirm where these credentials would be saved after signing in. Nothing was saved. Re-run the command."
-          );
-        }
-        if (!destinationWasKnown(target) && !await verifyAuthFlowTarget(current, options.yes === true)) {
-          process.exit(1);
+    await flow.runOAuth(totalSteps, async (tokens) => {
+      renderAuthFlowStep(totalSteps, totalSteps, "Saving credentials");
+      const { result: response, reauthenticated } = await withAuthRecovery(
+        () => orgAuthenticatedFetch(isUserScoped ? flow.userEndpoint : flow.orgEndpoint, {
+          method: "POST",
+          body: flow.toRequestBody(tokens)
+        }),
+        async () => {
+          const current = await resolveAuthFlowTarget(identity);
+          assertDestinationUnchanged(target, current);
+          if (!destinationWasKnown(current)) {
+            throw new Error(
+              "Could not confirm where these credentials would be saved after signing in. Nothing was saved. Re-run the command."
+            );
+          }
+          if (!destinationWasKnown(target) && !await verifyAuthFlowTarget(current, options.yes === true)) {
+            process.exit(1);
+          }
         }
-      }
-    );
-    if (!response.success) {
-      throw new Error(response.error || `Failed to upload ${providerLabel} credentials to Replicas`);
-    }
-    const saved = reauthenticated || !target.organization ? await resolveAuthFlowTarget(identity) : target;
-    renderAuthFlowSuccess(providerLabel, response, saved);
+      );
+      if (!response.success) {
+        throw new Error(response.error || `Failed to upload ${providerLabel} credentials to Replicas`);
+      }
+      const saved = reauthenticated || !target.organization ? await resolveAuthFlowTarget(identity) : target;
+      renderAuthFlowSuccess(providerLabel, response, saved);
+      const completionUrl = new URL("/cli-login/success", process.env.REPLICAS_WEB_URL || "https://replicas.dev");
+      completionUrl.searchParams.set("provider", flow.provider);
+      completionUrl.searchParams.set("email", saved.replicasAccount ?? "");
+      completionUrl.searchParams.set("scope", isUserScoped ? "user" : "org");
+      if (saved.organization) completionUrl.searchParams.set("organizationId", saved.organization.id);
+      return completionUrl.toString();
+    });
   } catch (error51) {
     console.log(import_chalk11.default.red("\n  \u2717 Error:"), error51 instanceof Error ? error51.message : error51);
     process.exit(1);
@@ -29146,6 +29158,7 @@ async function runCredentialAuthFlow(options, flow) {
 // src/commands/codex-auth.ts
 async function codexAuthCommand(options = {}) {
   await runCredentialAuthFlow(options, {
+    provider: "codex",
     providerLabel: "Codex",
     credentialLabel: "Codex",
     connectorLabel: "OAuth",
@@ -29275,13 +29288,16 @@ async function runClaudeOAuthFlow(totalSteps) {
 // src/commands/claude-auth.ts
 async function claudeAuthCommand(options = {}) {
   await runCredentialAuthFlow(options, {
+    provider: "claude",
     providerLabel: "Claude",
     credentialLabel: "Claude Code",
     connectorLabel: "OAuth",
     oauthSteps: 2,
     orgEndpoint: "/v1/claude/credentials",
     userEndpoint: "/v1/claude/user/credentials",
-    runOAuth: runClaudeOAuthFlow,
+    runOAuth: async (steps, save) => {
+      await openForApproval("Replicas", await save(await runClaudeOAuthFlow(steps)));
+    },
     toRequestBody: (tokens) => ({
       access_token: tokens.accessToken,
       refresh_token: tokens.refreshToken,
@@ -29368,13 +29384,16 @@ async function runMuseOAuthFlow(totalSteps) {
 // src/commands/muse-auth.ts
 async function museAuthCommand(options = {}) {
   await runCredentialAuthFlow(options, {
+    provider: "muse",
     providerLabel: "Muse",
     credentialLabel: "Muse Code",
     connectorLabel: "OAuth",
     oauthSteps: 1,
     orgEndpoint: "/v1/muse/credentials",
     userEndpoint: "/v1/muse/user/credentials",
-    runOAuth: runMuseOAuthFlow,
+    runOAuth: async (steps, save) => {
+      await openForApproval("Replicas", await save(await runMuseOAuthFlow(steps)));
+    },
     toRequestBody: (tokens) => ({ access_token: tokens.accessToken })
   });
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "replicas-cli",
-  "version": "0.2.630",
+  "version": "0.2.633",
   "description": "CLI for managing Replicas workspaces - SSH into cloud dev environments with automatic port forwarding",
   "main": "dist/index.cjs",
   "bin": {