appflight_cli

Releases

1. ▸▾0.6.029 Sept 2026

   `appflight signup` (#28) — create an AppFlight account from the terminal: full name, email, and a password with echo off, confirmed once. Creates the

   • appflight signup (#28) — create an AppFlight account from the terminal: full name, email, and a password with echo off, confirmed once. Creates the Firebase Auth user through the Identity Toolkit REST API, registers it with the backend, and sends the verification email. Individual accounts only — organizations still onboard in the app. Terms and privacy are captured explicitly (#69): both URLs are printed and an explicit y/N is required, with --accept-terms as the documented non-interactive path — a refusal happens before any account is created. signup mints no API key and writes no credentials file; the flow ends at "check your inbox, then appflight login". --resend <email> re-sends the verification link (it prompts for the password too, since the resend needs a fresh sign-in).

   • appflight login with email and password — signs in against the Identity Toolkit REST API and mints a per-machine cli:<hostname> API key server-side, so a CI key no longer requires the mobile app. A second login on the same machine rotates that key (revokes the old one, mints a fresh one); --key <raw> keeps the existing paste flow, minting and rotating nothing. login now hard-gates on email verification and mustChangePassword before touching any key.

   • appflight logout revokes server-side before deleting the local credentials file — the stored keyId, or a prefix match against GET /auth/api-keys for a file written by an older CLI.

   • appflight keys create / list / revoke — a CI key can now be minted, inspected, and revoked entirely from the terminal (#29). keys create --name <label> prints the raw key once, along with its prefix and the exact keys revoke <prefix> command — the prefix is what keys revoke takes, and is otherwise invisible until the next keys list; labels can't contain whitespace (matching the app's own rule), and the refusal suggests a hyphenated fix instead of applying one. keys list shows label, prefix, created, and last-used. keys revoke <label-or-prefix> accepts an exact label or a partial prefix (rejecting an ambiguous one) and confirms before revoking — refuses without a terminal unless --yes is passed, and refuses to revoke the key currently in use unless --force.

   • login --key no longer silently orphans a live cli:<hostname> key (#74) — if a password-login key is still active under a different value than the one just pasted, login now warns after saving and names the exact keys revoke <prefix> command.

   • appflight apps create --package <pkg> --name <name> (#30) — create a new app on AppFlight from the terminal, backed by a new GET /v1/app/list route. Derives ownerType/organizationId from your account (via whoami), so an already-onboarded, verified organization's developer can create an organization app too — previously phone-only. Organization apps require an admin or developer role, matching what the app has always offered — a plain org member is refused with exit code 9, enforced in the backend so the app and the CLI cannot diverge. 403 PLAN_LIMIT echoes the backend's own ceiling and prints how to upgrade, exiting 8.

   • appflight apps list (#30) — lists apps you can push to (with the N of M apps ceiling for your plan) and apps you only receive builds for, each tagged with your role and APK count.

   • appflight upgrade (#30) — prints where to upgrade to First Class. Works with no credentials and no network.

   • init offers to create an unknown package (#30) — logged in and the typed package isn't registered yet? init asks once whether to create it. Skips the prompt entirely under CI or with no terminal, and never fails init if the check itself fails.

   • Messages that point at the app now say where to get it (#81) — the three walls that used to end at "the AppFlight app" (no account for this email, an account that must set a password first, and an email belonging to an organization) now carry a link: the landing page when there is no account yet, the Play Store listing when the account already exists.

   • New exit code 9 — forbidden — a role or capability refusal, distinct from authRejected (6). Today that means an org member running apps create. CI scripts that switch on exit codes should treat it as "this account may not do that", not as a bad key.

   • Smaller published package — the CLI's internal CLAUDE.md is no longer shipped to pub.dev (it documented AppFlight-internal environments and release process, not anything a user needs), and the Firebase web API key is declared as a known-public identifier so pub publish stops flagging it. No behaviour change.