spacecode 2.0.0 → 2.0.2

package/dist/index.js

@@ -585,6 +585,7 @@ var config_exports = {};
 __export(config_exports, {
   addTask: () => addTask,
   addTasks: () => addTasks,
+  applyApiKeyFlag: () => applyApiKeyFlag,
   cancelTask: () => cancelTask,
   clearAuth: () => clearAuth,
   getConfigDir: () => getConfigDir,
@@ -837,6 +838,9 @@ async function clearAuth() {
     }
   }
 }
+function applyApiKeyFlag(key) {
+  if (key?.startsWith("sk_")) process.env.SPACECODE_TOKEN = key;
+}
 async function resolveAuthToken() {
   const envToken = process.env.SPACECODE_TOKEN;
   if (envToken) {
@@ -7421,17 +7425,6 @@ function renderEvent(event) {
     case "text": {
       break;
     }
-    case "text": {
-      if (phase === "thinking") {
-        stopThinkingTimer();
-        clearLine();
-        process.stderr.write("\n");
-      }
-      phase = "streaming";
-      process.stdout.write(renderMarkdown(event.content));
-      if (!event.content.endsWith("\n")) process.stdout.write("\n");
-      break;
-    }
     case "text_delta": {
       if (phase === "thinking") {
         stopThinkingTimer();
@@ -7904,6 +7897,143 @@ var init_init = __esm({
   }
 });
 
+// src/auth/device-protocol.ts
+function parseDeviceCode(status2, body) {
+  if (status2 === 429) {
+    throw new Error("Too many login attempts; wait a few minutes and retry");
+  }
+  if (status2 === 404 || status2 === 401 || status2 === 503) {
+    throw new Error(
+      `Browser sign-in is not available on the server yet (status ${status2}); use \`spacecode login --api-key\` instead`
+    );
+  }
+  if (status2 !== 200) {
+    throw new Error(`Could not start login: status ${status2}`);
+  }
+  if (typeof body !== "object" || body === null) {
+    throw new Error(`Could not start login: status ${status2}`);
+  }
+  const obj = body;
+  const requiredStringFields = [
+    "device_code",
+    "user_code",
+    "verification_uri"
+  ];
+  for (const field of requiredStringFields) {
+    const value = obj[field];
+    if (typeof value !== "string") {
+      throw new Error(`Could not start login: status ${status2}`);
+    }
+  }
+  const interval = obj["interval"];
+  if (typeof interval !== "number" || interval <= 0) {
+    throw new Error(`Could not start login: status ${status2}`);
+  }
+  const expiresIn = obj["expires_in"];
+  if (typeof expiresIn !== "number" || expiresIn <= 0) {
+    throw new Error(`Could not start login: status ${status2}`);
+  }
+  const verificationUriComplete = typeof obj["verification_uri_complete"] === "string" ? obj["verification_uri_complete"].trim() : "";
+  const url = verificationUriComplete !== "" ? verificationUriComplete : obj["verification_uri"];
+  return {
+    deviceCode: obj["device_code"],
+    userCode: obj["user_code"],
+    url,
+    intervalSec: interval,
+    expiresInSec: expiresIn
+  };
+}
+function classifyTokenResponse(status2, body, intervalSec) {
+  if (status2 === 200) {
+    if (typeof body === "object" && body !== null) {
+      const b = body;
+      if (typeof b.key === "string" && b.key.startsWith("sk_")) {
+        const result = {
+          kind: "done",
+          key: b.key
+        };
+        if (typeof b.keyPrefix === "string") {
+          result.keyPrefix = b.keyPrefix;
+        }
+        return result;
+      }
+    }
+    throw new Error("Login returned an invalid key");
+  }
+  const isObjectBody = typeof body === "object" && body !== null;
+  const error = isObjectBody ? body.error : void 0;
+  if (error === "authorization_pending") {
+    return { kind: "pending", intervalSec };
+  }
+  if (error === "slow_down") {
+    return { kind: "pending", intervalSec: intervalSec + 5 };
+  }
+  if (error === "expired_token") {
+    throw new Error("Login code expired");
+  }
+  if (error === "access_denied") {
+    throw new Error("Login was denied");
+  }
+  if (error === "invalid_grant") {
+    throw new Error("Login code is no longer valid; run `spacecode login` again");
+  }
+  if (error === "max_keys_reached") {
+    throw new Error("Your organization has reached its API key limit; revoke an old key in the dashboard and retry");
+  }
+  const errMsg = typeof error === "string" ? `: ${error}` : "";
+  throw new Error(`Login failed (${status2})${errMsg}`);
+}
+var init_device_protocol = __esm({
+  "src/auth/device-protocol.ts"() {
+    "use strict";
+  }
+});
+
+// src/auth/device-login.ts
+async function deviceLogin(baseUrl, deps) {
+  const start = await deps.post(`${baseUrl}/api/device/code`, {});
+  const info = parseDeviceCode(start.status, start.body);
+  deps.log(`Your code: ${info.userCode}
+Approve sign-in at: ${info.url}`);
+  try {
+    await deps.openBrowser(info.url);
+  } catch (err) {
+    const reason = err instanceof Error ? err.message : String(err);
+    deps.log(`Could not open a browser (${reason}); open ${info.url} manually`);
+  }
+  const deadline = deps.now() + info.expiresInSec * 1e3;
+  let interval = info.intervalSec;
+  let failures = 0;
+  for (; ; ) {
+    if (deps.now() >= deadline) {
+      throw new Error("Login code expired");
+    }
+    await deps.sleep(interval * 1e3);
+    let response;
+    try {
+      response = await deps.post(`${baseUrl}/api/device/token`, { device_code: info.deviceCode });
+    } catch (err) {
+      failures += 1;
+      if (failures >= MAX_CONSECUTIVE_POST_FAILURES) throw err;
+      continue;
+    }
+    failures = 0;
+    const result = classifyTokenResponse(response.status, response.body, interval);
+    if (result.kind === "done") {
+      return result.keyPrefix === void 0 ? { key: result.key } : { key: result.key, keyPrefix: result.keyPrefix };
+    }
+    interval = result.intervalSec;
+  }
+}
+var MAX_CONSECUTIVE_POST_FAILURES;
+var init_device_login = __esm({
+  "src/auth/device-login.ts"() {
+    "use strict";
+    init_device_protocol();
+    MAX_CONSECUTIVE_POST_FAILURES = 3;
+  }
+});
+
 // src/commands/auth.ts
 async function login(options = {}) {
   const apiKey2 = options.apiKey?.trim();
@@ -7911,22 +8041,42 @@ async function login(options = {}) {
     if (!apiKey2.startsWith("sk_") || apiKey2.length < 12 || /\s/.test(apiKey2)) {
       throw new Error("That does not look like a SpaceCode API key (expected sk_...).");
     }
-    await saveAuth({
-      accessToken: apiKey2,
-      user: { id: "api-key", githubId: "", githubLogin: `api-key ${apiKey2.slice(0, 7)}...` }
-    });
+    await saveApiKey(apiKey2);
     console.log(import_chalk17.default.green("API key saved. You are signed in."));
     return;
   }
-  console.error(import_chalk17.default.yellow("Interactive GitHub login is no longer supported."));
-  console.error("Authenticate with an API key:");
-  console.error(`  ${import_chalk17.default.bold("spacecode login --api-key sk_...")}   key from your SpaceCode dashboard (saved to ~/.spacecode/auth.json)`);
-  console.error(`  ${import_chalk17.default.bold("export SPACECODE_TOKEN=sk_...")}      or set it in the environment (CI, scripts)`);
-  console.error("Service credentials (internal use):");
-  console.error(`  ${import_chalk17.default.bold("export SPACECODE_TOKEN=sct_...")}   personal access token (exchanged for a short-lived JWT)`);
-  console.error(`  ${import_chalk17.default.bold("export SPACECODE_TOKEN=<secret>")}  sandbox shared secret (acts as the internal user)`);
-  console.error(`  ${import_chalk17.default.bold("export SPACECODE_SHARED_TOKEN=<secret>")}  backend gate secret (required for PAT exchange and backend calls)`);
-  throw new Error("No credentials given; run `spacecode login --api-key sk_...` or set SPACECODE_TOKEN");
+  const { key } = await deviceLogin(process.env.SPACECODE_AUTH_URL ?? DEFAULT_AUTH_URL, {
+    post: postJson,
+    sleep: (ms) => new Promise((resolve2) => setTimeout(resolve2, ms)),
+    now: () => Date.now(),
+    openBrowser: async (url) => {
+      const { default: open } = await import("open");
+      await open(url);
+    },
+    log: (msg) => console.log(msg)
+  });
+  await saveApiKey(key);
+  console.log(import_chalk17.default.green("Signed in. API key saved to ~/.spacecode/auth.json."));
+}
+async function saveApiKey(apiKey2) {
+  await saveAuth({
+    accessToken: apiKey2,
+    user: { id: "api-key", githubId: "", githubLogin: `api-key ${apiKey2.slice(0, 7)}...` }
+  });
+}
+async function postJson(url, body) {
+  const res = await fetch(url, {
+    method: "POST",
+    headers: { "content-type": "application/json" },
+    body: JSON.stringify(body),
+    signal: AbortSignal.timeout(15e3)
+  });
+  let parsed = null;
+  try {
+    parsed = await res.json();
+  } catch {
+  }
+  return { status: res.status, body: parsed };
 }
 async function logout() {
   const auth = await loadAuth();
@@ -7992,7 +8142,7 @@ async function requireAuth() {
   }
   return new BackendApiClient(apiUrl, freshAuth.accessToken);
 }
-var import_chalk17;
+var import_chalk17, DEFAULT_AUTH_URL;
 var init_auth2 = __esm({
   "src/commands/auth.ts"() {
     "use strict";
@@ -8000,6 +8150,8 @@ var init_auth2 = __esm({
     init_remote();
     init_client();
     import_chalk17 = __toESM(require("chalk"));
+    init_device_login();
+    DEFAULT_AUTH_URL = "https://spacecode-app.g-a-l-a-c-t-i-c.com";
   }
 });
 
@@ -8600,7 +8752,7 @@ Agent error: ${message}
     fileSync.start();
   }
   const ttyHost = new URL(wsUrl.replace("wss://", "https://").replace("ws://", "http://")).host;
-  const version = "2.0.0";
+  const version = "2.0.2";
   if (isResume) {
     let turnCount = 0;
     try {
@@ -23761,7 +23913,7 @@ async function startLocalRepl(opts = {}) {
       "Local REPL not built. Run `pnpm --filter @spacecode/agent-ui build` (or set SPACECODE_REPL_BIN), or use `spacecode --cloud` for a cloud session."
     );
   }
-  const args = [bin, ...opts.yolo ? ["--yolo"] : []];
+  const args = [bin, ...opts.yolo ? ["--yolo"] : [], ...opts.resume ? ["--continue"] : []];
   return new Promise((resolve2, reject) => {
     const child = (0, import_node_child_process3.spawn)(process.execPath, args, { stdio: "inherit" });
     child.on("error", reject);
@@ -24042,11 +24194,12 @@ var init_index = __esm({
     init_token();
     init_agent2();
     init_sentry();
+    init_config();
     init_config3();
     init_analytics();
     initPostHog();
     program = new import_commander.Command();
-    program.name("spacecode").description("SpaceCode - launch cloud dev environments with AI coding agents").version("2.0.0").enablePositionalOptions();
+    program.name("spacecode").description("SpaceCode - launch cloud dev environments with AI coding agents").version("2.0.2").enablePositionalOptions();
     program.command("launch").description("Launch a new cloud session").option("-R, --repo <repo>", "Clone a GitHub repository into workspace (URL or owner/repo)").option("-n, --new [name]", "Start a new project (optionally specify name, or will prompt)").option("--name <name>", "Name this session for easy reconnection").option("--destroy", "Destroy the session on exit (default: session stays alive)").option("-t, --idle-timeout <minutes>", "Auto-shutdown timeout in minutes (default: 15)", "15").option("--proxy-mode <mode>", 'API proxy mode: "legacy" (round-robin GLM) or "pipeline" (multi-model router)', "pipeline").option("--own-key", "Bring your own API key (no proxy)").option("--api-key <key>", "Use a specific API key (bypasses proxy)").action(async (options) => {
       await launchWithOptions(options);
     });
@@ -24285,11 +24438,12 @@ Batch ${result.groupId}: ${result.dispatched}/${result.total} dispatched`));
         showConfigPaths();
       }
     });
-    program.argument("[target]", "Repo (owner/repo) to launch, or session name/ID to attach").option("-p, --prompt [prompt]", "Run headless (non-interactive)").option("--output-format <format>", "Output format for -p: text (default) or json", "text").option("-v, --verbose", "Show detailed progress (phases, stderr)").option("-R, --repo <repo>", "Clone a GitHub repository into workspace").option("-n, --new [name]", "Start a new project").option("--name <name>", "Name this session for easy reconnection").option("--destroy", "Destroy the session on exit").option("-b, --branch <branch>", "Branch name for the task").option("--no-commit", "Skip auto-commit and PR creation").option("-t, --idle-timeout <minutes>", "Auto-shutdown timeout (default: 15)", "15").option("--proxy-mode <mode>", "API proxy mode", "pipeline").option("--own-key", "Bring your own API key").option("--api-key <key>", "Use a specific API key").option("--session <id>", "Resume an existing agent session").option("--cloud", "With no target: start a cloud agent session instead of the local REPL").option("--yolo", "Local REPL: skip confirmation prompts (policy denies still apply)").action(async (target, options) => {
+    program.argument("[target]", "Repo (owner/repo) to launch, or session name/ID to attach").option("-p, --prompt [prompt]", "Run headless (non-interactive)").option("--output-format <format>", "Output format for -p: text (default) or json", "text").option("-v, --verbose", "Show detailed progress (phases, stderr)").option("-R, --repo <repo>", "Clone a GitHub repository into workspace").option("-n, --new [name]", "Start a new project").option("--name <name>", "Name this session for easy reconnection").option("--destroy", "Destroy the session on exit").option("-b, --branch <branch>", "Branch name for the task").option("--no-commit", "Skip auto-commit and PR creation").option("-t, --idle-timeout <minutes>", "Auto-shutdown timeout (default: 15)", "15").option("--proxy-mode <mode>", "API proxy mode", "pipeline").option("--own-key", "Bring your own API key").option("--api-key <key>", "Use a specific API key").option("--session <id>", "Resume an existing agent session").option("--cloud", "With no target: start a cloud agent session instead of the local REPL").option("--yolo", "Local REPL: skip confirmation prompts (policy denies still apply)").option("--continue", "Local REPL: resume the newest saved conversation for this project").action(async (target, options) => {
       try {
+        applyApiKeyFlag(options.apiKey);
         if (!target && !options.session && options.prompt === void 0 && !options.cloud && !options.repo && !options.new) {
           const { startLocalRepl: startLocalRepl2 } = await Promise.resolve().then(() => (init_repl(), repl_exports));
-          process.exit(await startLocalRepl2({ yolo: options.yolo }));
+          process.exit(await startLocalRepl2({ yolo: options.yolo, resume: options.continue }));
         }
         if (options.session) {
           let sessionId = options.session;