workos 0.8.2 → 0.9.0

package/README.md

@@ -470,10 +470,13 @@ The CLI uses WorkOS Connect OAuth device flow for authentication:
 
 ```bash
 # Login (opens browser for authentication)
-workos login
+workos auth login
+
+# Check current auth status
+workos auth status
 
 # Logout (clears stored credentials)
-workos logout
+workos auth logout
 ```
 
 OAuth credentials are stored in the system keychain (with `~/.workos/credentials.json` fallback). Access tokens are not persisted long-term for security - users re-authenticate when tokens expire.

package/dist/bin.js

@@ -20,7 +20,7 @@ if (!satisfies(process.version, NODE_VERSION_RANGE)) {
     process.exit(1);
 }
 import { isNonInteractiveEnvironment } from './utils/environment.js';
-import { resolveOutputMode, setOutputMode, outputJson, exitWithError } from './utils/output.js';
+import { resolveOutputMode, setOutputMode, isJsonMode, outputJson, exitWithError } from './utils/output.js';
 import clack from './utils/clack.js';
 import { registerSubcommand } from './utils/register-subcommand.js';
 // Resolve output mode early from raw argv (before yargs parses)
@@ -163,8 +163,9 @@ const installerOptions = {
         type: 'boolean',
     },
 };
-// Check for updates (blocks up to 500ms)
-await checkForUpdates();
+// Check for updates (blocks up to 500ms, skip in JSON mode to keep stdout clean)
+if (!isJsonMode())
+    await checkForUpdates();
 yargs(rawArgs)
     .env('WORKOS_INSTALLER')
     .option('json', {
@@ -173,16 +174,25 @@ yargs(rawArgs)
     describe: 'Output results as JSON (auto-enabled in non-TTY)',
     global: true,
 })
-    .command('login', 'Authenticate with WorkOS via browser-based OAuth', insecureStorageOption, async (argv) => {
-    await applyInsecureStorage(argv.insecureStorage);
-    const { runLogin } = await import('./commands/login.js');
-    await runLogin();
-    process.exit(0);
-})
-    .command('logout', 'Remove stored WorkOS credentials and tokens', insecureStorageOption, async (argv) => {
-    await applyInsecureStorage(argv.insecureStorage);
-    const { runLogout } = await import('./commands/logout.js');
-    await runLogout();
+    .command('auth', 'Manage authentication (login, logout, status)', (yargs) => {
+    yargs.options(insecureStorageOption);
+    registerSubcommand(yargs, 'login', 'Authenticate with WorkOS via browser-based OAuth', (y) => y, async (argv) => {
+        await applyInsecureStorage(argv.insecureStorage);
+        const { runLogin } = await import('./commands/login.js');
+        await runLogin();
+        process.exit(0);
+    });
+    registerSubcommand(yargs, 'logout', 'Remove stored WorkOS credentials and tokens', (y) => y, async (argv) => {
+        await applyInsecureStorage(argv.insecureStorage);
+        const { runLogout } = await import('./commands/logout.js');
+        await runLogout();
+    });
+    registerSubcommand(yargs, 'status', 'Show current authentication status', (y) => y, async (argv) => {
+        await applyInsecureStorage(argv.insecureStorage);
+        const { runAuthStatus } = await import('./commands/auth-status.js');
+        await runAuthStatus();
+    });
+    return yargs.demandCommand(1, 'Please specify an auth subcommand').strict();
 })
     .command('install-skill', 'Install bundled AuthKit skills to coding agents (Claude Code, Codex, Cursor, Goose)', (yargs) => {
     return yargs