feat(cli): authenticate promote with environment API keys

Mono-RevId: eeea820997ad473c81c42a56fad43b2cc065624e

Author: carderne

.changeset/promote-environment-api-keys.md

@@ -0,0 +1,5 @@
+---
+"trigger.dev": patch
+---
+
+Authenticate `trigger promote` with environment API keys supplied through `TRIGGER_ACCESS_TOKEN`. Environment API key commands now use the saved profile API URL when no explicit override is provided.

packages/cli-v3/src/cli/common.test.ts

@@ -0,0 +1,21 @@
+import { Command } from "commander";
+import { describe, expect, it } from "vitest";
+import { commonOptions } from "./common.js";
+
+describe("commonOptions", () => {
+  it("leaves the API URL unset when it is not explicitly provided", () => {
+    const command = commonOptions(new Command());
+
+    command.parse(["node", "trigger"]);
+
+    expect(command.opts().apiUrl).toBeUndefined();
+  });
+
+  it("preserves an explicitly provided API URL", () => {
+    const command = commonOptions(new Command());
+
+    command.parse(["node", "trigger", "--api-url", "https://trigger.example.com"]);
+
+    expect(command.opts().apiUrl).toBe("https://trigger.example.com");
+  });
+});

packages/cli-v3/src/cli/common.ts

@@ -3,7 +3,6 @@ import type { Command } from "commander";
 import { z } from "zod";
 import { fromZodError } from "zod-validation-error";
 import { BundleError } from "../build/bundle.js";
-import { CLOUD_API_URL } from "../consts.js";
 import { chalkError } from "../utilities/cliOutput.js";
 import { formatCommandError } from "../utilities/commandError.js";
 import { readAuthConfigCurrentProfileName } from "../utilities/configFiles.js";
@@ -22,7 +21,7 @@ export type CommonCommandOptions = z.infer<typeof CommonCommandOptions>;
 export function commonOptions(command: Command) {
   return command
     .option("--profile <profile>", "The login profile to use", readAuthConfigCurrentProfileName())
-    .option("-a, --api-url <value>", "Override the API URL", CLOUD_API_URL)
+    .option("-a, --api-url <value>", "Override the API URL")
     .option(
       "-l, --log-level <level>",
       "The CLI log level to use (debug, info, log, warn, error, none). This does not effect the log level of your trigger.dev tasks.",

packages/cli-v3/src/commands/login.test.ts

@@ -0,0 +1,15 @@
+import { describe, expect, it } from "vitest";
+import { CLOUD_API_URL } from "../consts.js";
+import { resolveLoginOptions } from "./login.js";
+
+describe("resolveLoginOptions", () => {
+  it("uses the cloud API when the caller passes an undefined override", () => {
+    expect(resolveLoginOptions({ defaultApiUrl: undefined }).defaultApiUrl).toBe(CLOUD_API_URL);
+  });
+
+  it("preserves an explicit API URL", () => {
+    expect(
+      resolveLoginOptions({ defaultApiUrl: "https://trigger.example.com" }).defaultApiUrl
+    ).toBe("https://trigger.example.com");
+  });
+});

packages/cli-v3/src/commands/login.ts

@@ -40,7 +40,6 @@ import {
 import { links } from "@trigger.dev/core/v3";
 
 const LoginCommandOptions = CommonCommandOptions.extend({
-  apiUrl: z.string(),
   browser: z.boolean().default(true),
 });
 
@@ -98,15 +97,19 @@ export type LoginOptions = {
   browser?: boolean;
 };
 
+export function resolveLoginOptions(options?: LoginOptions) {
+  return {
+    embedded: false,
+    silent: false,
+    ...options,
+    defaultApiUrl: options?.defaultApiUrl ?? CLOUD_API_URL,
+  };
+}
+
 export async function login(options?: LoginOptions): Promise<LoginResult> {
   return await tracer.startActiveSpan("login", async (span) => {
     try {
-      const opts = {
-        defaultApiUrl: CLOUD_API_URL,
-        embedded: false,
-        silent: false,
-        ...options,
-      };
+      const opts = resolveLoginOptions(options);
 
       span.setAttributes({
         "cli.config.apiUrl": opts.defaultApiUrl,

packages/cli-v3/src/commands/promote.ts

@@ -14,6 +14,7 @@ import { getProjectClient } from "../utilities/session.js";
 import { login } from "./login.js";
 import { createGitMeta } from "../utilities/gitMeta.js";
 import { getBranch } from "@trigger.dev/core/v3";
+import { authenticateForDeploy } from "../deploy/auth.js";
 
 const PromoteCommandOptions = CommonCommandOptions.extend({
   projectRef: z.string().optional(),
@@ -70,10 +71,12 @@ async function _promoteCommand(version: string, options: PromoteCommandOptions)
 
   intro(`Promoting version ${version}`);
 
-  const authorization = await login({
-    embedded: true,
-    defaultApiUrl: options.apiUrl,
+  const authorization = await authenticateForDeploy({
+    accessToken: process.env.TRIGGER_ACCESS_TOKEN,
+    apiUrl: process.env.TRIGGER_API_URL ?? options.apiUrl,
     profile: options.profile,
+    silent: false,
+    login,
   });
 
   if (!authorization.ok) {