workos 0.17.0 → 0.18.0

package/README.md

@@ -663,10 +663,10 @@ In agent mode the CLI:
 
 In `ci` mode the CLI additionally refuses browser-based auth flows and prefers terse failures over recovery handoff text.
 
-Legacy compatibility:
+Mode resolution notes:
 
-- `WORKOS_NO_PROMPT=1` continues to work and is treated as agent interaction behavior plus JSON output.
-- `WORKOS_FORCE_TTY=1` continues to force human **output** mode but does not change interaction mode.
+- `WORKOS_MODE=agent` sets agent interaction behavior and forces JSON output. (This replaces the removed `WORKOS_NO_PROMPT` alias.)
+- `WORKOS_FORCE_TTY=1` forces human **output** mode but does not change interaction mode.
 - Non-TTY without an explicit mode still defaults output to JSON and interaction to agent.
 
 ### Headless Installer
@@ -697,7 +697,6 @@ workos install --api-key sk_test_xxx --client-id client_xxx --no-commit 2>/dev/n
 | `WORKOS_API_KEY`         | API key for management commands (bypasses stored config)  |
 | `WORKOS_API_BASE_URL`    | Override API base URL (set automatically by `workos dev`) |
 | `WORKOS_MODE`            | Interaction mode: `human`, `agent`, or `ci`               |
-| `WORKOS_NO_PROMPT=1`     | Legacy alias: agent interaction behavior + JSON output    |
 | `WORKOS_FORCE_TTY=1`     | Force human (non-JSON) **output** mode even when piped    |
 | `WORKOS_TELEMETRY=false` | Disable telemetry                                         |
 

package/dist/bin.js

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 // Load .env.local for local development when --local flag is used
-if (process.argv.includes('--local') || process.env.INSTALLER_DEV) {
+if (process.argv.includes('--local') || process.env.WORKOS_DEV) {
     const { config } = await import('dotenv');
     // bin.ts compiles to dist/bin.js, so go up one level to find .env.local
     const { fileURLToPath } = await import('node:url');
@@ -287,6 +287,34 @@ async function runCli() {
             return;
         await applyInsecureStorage(argv.insecureStorage);
         await maybeWarnUnclaimed();
+    })
+        .middleware(async (argv) => {
+        // One-time MCP banner (lowest-priority startup notice — runs after the
+        // telemetry notice + unclaimed warning so they win the one-per-run slot).
+        // Skip commands that manage MCP/agents directly or where the nudge is
+        // noise, mirroring + extending maybeWarnUnclaimed's list. Self-guarded and
+        // never throws.
+        const command = String(argv._?.[0] ?? '');
+        if ([
+            'mcp',
+            'install',
+            'doctor',
+            'skills',
+            'auth',
+            'env',
+            'claim',
+            'debug',
+            'dashboard',
+            'emulate',
+            'dev',
+            'migrations',
+            'telemetry',
+            'completion',
+            '',
+        ].includes(command))
+            return;
+        const { maybeShowMcpNotice } = await import('./lib/mcp-notice.js');
+        await maybeShowMcpNotice();
     })
         .command('auth', 'Manage authentication (login, logout, status)', (yargs) => {
         yargs.options(insecureStorageOption);
@@ -373,6 +401,31 @@ async function runCli() {
             });
         });
         return yargs.demandCommand(1, 'Please specify a skills subcommand').strict();
+    })
+        .command('mcp', 'Manage the WorkOS MCP server in coding agents (Claude Code, Codex, Cursor)', (yargs) => {
+        registerSubcommand(yargs, 'install', 'Add the WorkOS MCP server to detected coding agents', (y) => y.option('agent', {
+            alias: 'a',
+            type: 'array',
+            string: true,
+            description: 'Target specific agent(s): claude-code, codex, cursor',
+        }), async (argv) => {
+            const { runMcpInstall } = await import('./commands/mcp.js');
+            await runMcpInstall({ agent: argv.agent });
+        });
+        registerSubcommand(yargs, 'remove', 'Remove the WorkOS MCP server from coding agents', (y) => y.option('agent', {
+            alias: 'a',
+            type: 'array',
+            string: true,
+            description: 'Target specific agent(s): claude-code, codex, cursor',
+        }), async (argv) => {
+            const { runMcpRemove } = await import('./commands/mcp.js');
+            await runMcpRemove({ agent: argv.agent });
+        });
+        registerSubcommand(yargs, 'status', 'Show which coding agents have the WorkOS MCP server configured', (y) => y, async () => {
+            const { runMcpStatus } = await import('./commands/mcp.js');
+            await runMcpStatus();
+        });
+        return yargs.demandCommand(1, 'Please specify an mcp subcommand').strict();
     })
         .command('doctor', 'Diagnose WorkOS AuthKit integration issues in the current project', (yargs) => yargs.options({
         verbose: {