Release 0.5.2: agent sign-in guidance in login help - #23
Merged
Merged
Conversation
Commander after-help only. Flags, description, and OAuth runtime unchanged. Unpublished 0.5.1 candidate; do not treat as released.
No TTY uses native MCP OAuth. Agents paste a one-time code once, never a key or token. Connected only after login and a successful balance check.
R1 read help then started another login --no-browser instead of sending the result to the live PTY. Help only; runtime unchanged.
This was referenced Sep 10, 2026
Version metadata and changelog only. Auth runtime, help body, and default-off login-handoff eval are unchanged. Not tagged or published.
Point Unreleased at v0.5.2...HEAD and add [0.5.2] v0.5.1...v0.5.2.
eddiearc
changed the title
eddiearc
marked this pull request as ready for review
September 10, 2026 06:08
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
aisa login --helpnow explains the browser/headless sign-in handoff that previously lived in a long Quickstart. Agents can consult command help, immediately relay the actual authorization URL, reuse the running login, accept only its one-time result, recover expired sessions, choose native MCP without a persistent terminal, and verify balance before claiming connection.Login help change: two existing files,+17 lines.
src/commands/oauth-login.tsprovides the help text;src/index.tsattaches it through Commander. Login flags, OAuth implementation, credential storage, endpoints and paid-tool behavior are unchanged. Existing command compatibility is retained; published0.5.2 delivers this expanded help to installed users.Review map against d88cc10 at69257ee:14 files,+512/-18, divided without overlap:
The focused
eval/agent-quickstart/login-handoff/entry is outside the118-file npm payload and leaves the existing business eval unchanged. Its guards distinguish real help from mocked login, refuse invalid/duplicate input, preserve all failed runs, and prevent model execution by default. It adds no production auth layer.Validation:308 existing tests; all five Node18/20/22/24/26 CI jobs and package smoke pass. Two real packed/install arms differ only in the help registration. Final real-Agent/tool result: full5/5, ablated2/5 by frozen semantic rubric (mechanical5/5 vs4/5). The control omits the current URL/chat handoff and attempts unavailable login. Auth/PTY/balance are synthetic, not live OAuth. R0/R1 failures and scoped fixes are preserved; no selective row replacement or universal reliability claim. Results and reproduction.
Companions: Skill PR51 provides a short help-first Sign-in section; Docs PR100 shortens bootstrap and preserves the direct-HTTP paid-approval contract.
Released as0.5.2. The user authorized this merge and publication. Reviewed head69257ee was squash-merged asf012ee6e0175febef098e79c2c819a78ba92d133; merged-main CI passed and the tree matched the reviewed candidate. Fresh annotatedv0.5.2 points to that merge. The unchanged OIDC Release workflow succeeded.
Official npm metadata confirms version/latest0.5.2. The downloaded registry archive passed SHA512/SHA1 verification; SHA256e3988cf3ebf1973e5a4ba1c2bae9dc46ec4f9869277e40a992130ab282b7085a. All118 payload files match the final reviewed candidate; eval/source/tests are absent. Published-archive installation passes45 smoke checks; installed login help is byte-identical to reviewed R2 help. No local npm publish, retag, global CLI replacement or production AIsa auth/data call was used.
Release evidence. Skill PR51 is already merged. Docs PR100 and user-journey-evals PR14 remain unmerged; this release does not authorize their merge.