runcloud 0.1.103 → 0.1.104

package/dist/commands/token.js

@@ -0,0 +1,102 @@
+import { acquirePromptIO, select, PromptAbortedError } from '../prompt.js';
+import { fetchProviders } from '../runCloudAuth.js';
+import { authApiUrlFor, commandApiUrls, emailLogin, loginChoices, methodFromFlags, openBrowser, verifyRunCloudCredential, } from './login.js';
+export function tokenReport(isRunCloud, minted) {
+    const bin = isRunCloud ? 'runcloud' : 'newly';
+    const tokenVar = isRunCloud ? 'RUN_CLOUD_API_TOKEN' : 'NEWLY_API_TOKEN';
+    const urlVar = isRunCloud ? 'RUN_CLOUD_API_URL' : 'NEWLY_API_URL';
+    const lines = [
+        '',
+        minted.account ? `  Token minted for ${minted.account}.` : '  Token minted.',
+        '  This is shown once and was NOT saved on this machine — your existing',
+        `  \`${bin} login\` credential is untouched. Treat it like a password.`,
+        '',
+        `  ${minted.token}`,
+        '',
+        '  Use it in CI (environment variables):',
+        `    export ${tokenVar}='${minted.token}'`,
+        `    export ${urlVar}='${minted.apiUrl}'`,
+        '',
+        '  Or log a machine in with it:',
+        `    ${bin} login --token '${minted.token}' --api-url '${minted.apiUrl}'`,
+        '',
+    ];
+    return lines.join('\n');
+}
+export function registerToken(program) {
+    const isRunCloud = program.name() === 'runcloud';
+    const defaultAppUrl = isRunCloud
+        ? process.env.RUN_CLOUD_APP_URL ?? 'https://run.cloud'
+        : process.env.NEWLY_APP_URL ?? 'https://newly.app';
+    const token = program
+        .command('token')
+        .description('Mint and manage API tokens for CI and other machines');
+    token
+        .command('create')
+        .description('Sign in and mint a fresh API token — printed once, never saved. ' +
+        'Your stored login on this machine is untouched.')
+        .option('--app-url <url>', 'product web app URL (for the browser handoff)', defaultAppUrl)
+        .option('--api-url <url>', 'control plane URL to mint against (defaults per skin)')
+        .option('--email [address]', 'sign in with an emailed code, without a browser')
+        .option('--google', 'sign in with Google', false)
+        .option('--github', 'sign in with GitHub', false)
+        .option('--browser', 'skip the picker and use the browser handoff', false)
+        .action(async (opts) => {
+        try {
+            const authApiUrl = authApiUrlFor(isRunCloud, opts.apiUrl);
+            let socialProvider;
+            if (!opts.browser) {
+                let method = methodFromFlags(opts);
+                const terminal = method === 'email' || !method ? acquirePromptIO() : null;
+                try {
+                    let providers = null;
+                    if (!method && terminal) {
+                        providers = await fetchProviders(authApiUrl);
+                        const choices = loginChoices(providers);
+                        if (choices.length === 0) {
+                            throw new Error(`${authApiUrl} has no sign-in methods enabled.`);
+                        }
+                        method = await select('  How do you want to sign in?', choices, terminal.io);
+                    }
+                    if (method === 'email') {
+                        const preset = typeof opts.email === 'string' ? opts.email : undefined;
+                        providers ??= await fetchProviders(authApiUrl);
+                        const { email, token: minted } = await emailLogin(authApiUrl, preset, terminal?.io);
+                        await verifyRunCloudCredential(authApiUrl, minted);
+                        const urls = commandApiUrls(providers.cliApiUrl ?? authApiUrl, authApiUrl);
+                        console.log(tokenReport(isRunCloud, { token: minted, apiUrl: urls.apiUrl, account: email }));
+                        return;
+                    }
+                }
+                finally {
+                    terminal?.close();
+                }
+                if (method === 'google' || method === 'github')
+                    socialProvider = method;
+            }
+            const { runDeviceLogin } = await import('../deviceLogin.js');
+            const payload = await runDeviceLogin({
+                apiUrl: authApiUrl,
+                appUrl: opts.appUrl,
+                provider: socialProvider,
+                openBrowser,
+            });
+            await verifyRunCloudCredential(authApiUrl, payload.token);
+            const urls = commandApiUrls(payload.apiUrl, authApiUrl);
+            console.log(tokenReport(isRunCloud, {
+                token: payload.token,
+                apiUrl: urls.apiUrl,
+                ...(payload.account ? { account: payload.account } : {}),
+            }));
+        }
+        catch (e) {
+            if (e instanceof PromptAbortedError) {
+                console.log('Cancelled.');
+                process.exitCode = 130;
+                return;
+            }
+            console.error(e instanceof Error ? e.message : String(e));
+            process.exitCode = 1;
+        }
+    });
+}

package/dist/index.js

@@ -20,6 +20,7 @@ import { registerDesktop } from './commands/desktop.js';
 import { registerEnvironment } from './commands/environment.js';
 import { registerAppStore } from './commands/appStore.js';
 import { registerUpdate } from './commands/update.js';
+import { registerToken } from './commands/token.js';
 import { CLI_VERSION } from './version.js';
 const program = new Command('newly')
     .description('Develop, provision, and deploy Newly backends')
@@ -44,4 +45,5 @@ registerDesktop(program);
 registerEnvironment(program);
 registerAppStore(program);
 registerUpdate(program);
+registerToken(program);
 await program.parseAsync(process.argv);

package/dist/run-cloud.js

@@ -5,6 +5,7 @@ import { registerLogin } from './commands/login.js';
 import { registerRunCloud } from './commands/run-cloud.js';
 import { registerSandbox } from './commands/sandbox.js';
 import { registerSecrets } from './commands/secrets.js';
+import { registerToken } from './commands/token.js';
 import { CLI_VERSION } from './version.js';
 const program = new Command('runcloud')
     .description('Create and control remote mobile simulators and microVM sandboxes')
@@ -13,5 +14,6 @@ registerLogin(program);
 registerRunCloud(program);
 registerSandbox(program);
 registerSecrets(program);
+registerToken(program);
 registerImage(program);
 await program.parseAsync(process.argv);

package/dist/version.js

@@ -1 +1 @@
-export const CLI_VERSION = '0.1.103';
+export const CLI_VERSION = '0.1.104';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "runcloud",
-  "version": "0.1.103",
+  "version": "0.1.104",
   "description": "Create and control run.cloud remote mobile simulators and cloud sandboxes",
   "license": "Apache-2.0",
   "keywords": [