spawn/packages/cli
A 844808cd7d
Some checks failed
CLI Release / Build and release CLI (push) Has been cancelled
Lint / ShellCheck (push) Has been cancelled
Lint / Biome Lint (push) Has been cancelled
Lint / macOS Compatibility (push) Has been cancelled
feat(ssh): let user pick SSH key when handshake auth keeps failing (#3402)
* feat(ssh): let user pick SSH key when handshake auth keeps failing

When `waitForSsh` sees consecutive "Permission denied (publickey)"
responses from the remote, the auto-discovered set of `~/.ssh/*` keys
clearly isn't the right one. Today the user just watches the same
error scroll past until the retry budget runs out.

This adds an interactive picker after 2 consecutive auth failures (and
only in interactive mode). The picker lists every discovered key (with
type + an "already tried" hint), lets the user paste a custom path, or
keep retrying with the current set. The chosen path replaces the `-i`
identity flags on the next handshake attempt.

- New `promptForSshKey()` in `shared/ssh-keys.ts` — clack-driven picker
  with custom-path support and `~` expansion. Returns `null` in
  non-interactive mode so unattended runs are unaffected.
- `waitForSsh` tracks consecutive publickey rejections, ignores
  unrelated transient failures (timeouts, connection refused), and
  offers the picker once per call when the threshold is hit.
- Adds dedicated unit tests covering non-interactive bypass, the skip
  path, key selection, custom-path entry, `~/` expansion, and the
  "already tried" hint.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

* fix(ssh): resolve rebase conflict — use discoverLegacyKeys in promptForSshKey

After #3401 refactored ssh-keys.ts (renamed discoverSshKeys → discoverLegacyKeys
+ getSpawnKey), the key-picker PR's promptForSshKey still called the old
discoverSshKeys name. Update to use discoverLegacyKeys() directly for picker
options (spawn key is excluded since it's always the default, not a choice).
Also remove now-unused readdirSync import.

Agent: pr-maintainer
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

* feat(ssh): final-fallback picker after exhausted retries + remember choice

Builds on the mid-loop picker: now if every auto-discovered key still
gets rejected after the retry budget runs out, the user gets one more
chance to point spawn at the right key — and the choice is persisted
to ~/.config/spawn/preferences.json (sshKeyPath) so subsequent spawn
runs use it directly with no further prompts.

- getPreferredSshKeyPath() reads the saved path and gracefully ignores
  stale entries (file deleted, malformed JSON, missing field).
- setPreferredSshKeyPath() merges the value into preferences.json
  while preserving every other field (models, starPromptShownAt).
- clearPreferredSshKeyPath() is added for completeness / recovery.
- ensureSshKeys() honors the saved preference — if set, only that key
  is offered to SSH (rather than diluting the explicit choice with
  the spawn-managed key + legacy fallbacks).
- waitForSsh now offers a final fallback picker after the main loop
  exhausts (only if every failure was publickey-auth and the user is
  interactive). One extra handshake attempt with the picked key. On
  success — mid-loop swap or final fallback — the chosen key is
  persisted via setPreferredSshKeyPath.
- 10 new unit tests cover the preference round-trip, malformed-JSON
  / stale-path resilience, field preservation, directory creation,
  clearPreferredSshKeyPath, and ensureSshKeys honoring/falling back
  as expected.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

---------

Co-authored-by: Claude <claude@anthropic.com>
Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Co-authored-by: B <6723574+louisgv@users.noreply.github.com>
2026-05-11 22:16:33 -07:00
..
src feat(ssh): let user pick SSH key when handshake auth keeps failing (#3402) 2026-05-11 22:16:33 -07:00
.gitignore Remove Daytona cloud provider from codebase (#2261) 2026-03-06 18:53:08 -05:00
build-clouds.ts fix: navigate back to list after delete/remove errors (#2488) 2026-03-11 00:04:51 -07:00
bun.lock feat: Bun workspace monorepo — packages/cli + packages/shared (#1853) 2026-02-23 22:07:05 -08:00
bunfig.toml feat(digitalocean): guided readiness before deploy (#3336) 2026-04-21 21:55:01 -07:00
package-lock.json feat: Bun workspace monorepo — packages/cli + packages/shared (#1853) 2026-02-23 22:07:05 -08:00
package.json feat(ssh): let user pick SSH key when handshake auth keeps failing (#3402) 2026-05-11 22:16:33 -07:00
README.md refactor: Remove dead code and stale references (#2278) 2026-03-07 03:56:13 -05:00
tsconfig.json feat: Bun workspace monorepo — packages/cli + packages/shared (#1853) 2026-02-23 22:07:05 -08:00

Spawn CLI

The spawn CLI is a command-line tool for launching AI coding agents on cloud providers, pre-configured with OpenRouter.

Overview

The spawn CLI provides a unified interface to:

  • Launch any supported AI agent (Claude Code, Codex, etc.) on any supported cloud provider
  • Interactively browse available agents and clouds
  • View the agent × cloud compatibility matrix
  • Self-update to the latest version

Architecture

Installation Strategy

The installer uses bun to build the TypeScript CLI into a standalone JavaScript file. If bun is not already installed, the installer auto-installs it first (~5 seconds).

Why bun?

  • Fast: Native TypeScript runtime, instant builds
  • Universal: Auto-installed if missing, works on any system with bash and curl
  • Zero friction: No prerequisite installation required
  • Single implementation: One codebase, always feature-complete

Directory Structure

cli/
├── src/
│   ├── index.ts        # Entry point (routes commands to handlers)
│   ├── commands/       # Per-command modules (interactive, list, run, etc.)
│   │   └── index.ts    # Barrel re-export
│   ├── manifest.ts     # Manifest fetching and caching logic
│   ├── update-check.ts # Auto-update check (once per day)
│   └── __tests__/      # Test suite (Bun test runner)
├── ../sh/cli/install.sh # Installer (auto-installs bun if needed, lives in sh/cli/)
├── package.json        # Package metadata and dependencies
└── tsconfig.json       # TypeScript configuration

TypeScript Implementation

The TypeScript CLI (src/*.ts) provides:

  • Interactive mode: Terminal UI with prompts for selecting agents and clouds
  • Manifest caching: Local cache with TTL to minimize network requests
  • Auto-update check: Non-intrusive daily version check with notifications
  • Progress indicators: Spinners and colored output for better UX
  • Error handling: Structured error messages and exit codes

Key dependencies:

  • @clack/prompts — Interactive terminal prompts
  • picocolors — Terminal color support

Installation

Quick Install

curl -fsSL https://raw.githubusercontent.com/OpenRouterTeam/spawn/main/sh/cli/install.sh | bash

The installer will:

  1. Install bun if not already present
  2. Clone the CLI source
  3. Build and install the spawn binary to ~/.local/bin

Environment Variables

  • SPAWN_INSTALL_DIR — Override install directory (default: $HOME/.local/bin)

Manual Installation (Development)

cd cli
bun install
bun link

Or build a standalone binary:

bun run compile  # Creates ./spawn executable

Usage

Interactive Mode

spawn

Launches an interactive picker to select an agent and cloud provider.

Direct Launch

spawn <agent> <cloud>

Examples:

spawn claude sprite    # Launch Claude Code on Sprite
spawn codex hetzner    # Launch Codex CLI on Hetzner Cloud

Agent Information

spawn <agent>

Show which cloud providers support the specified agent.

Example:

spawn claude
# Output:
# Claude Code — AI coding agent from Anthropic
#
# Available clouds:
#   Sprite          spawn claude sprite
#   Hetzner Cloud   spawn claude hetzner

List All Combinations

spawn list

Display the full agent × cloud compatibility matrix.

List Agents

spawn agents

Show all available agents with descriptions.

List Cloud Providers

spawn clouds

Show all available cloud providers with descriptions.

Update CLI

spawn update

Displays update instructions (re-run installer).

Auto-update check: The CLI automatically checks for updates once per day and displays a notification if a newer version is available. To disable this, set SPAWN_NO_UPDATE_CHECK=1.

Version

spawn version

Display the current CLI version.

Development

Prerequisites

  • Bun 1.0+

Running Locally

bun run dev             # Run TypeScript CLI directly
bun run build           # Build to cli.js
bun run compile         # Compile to standalone binary

Testing

bun run dev list
bun run dev agents
bun run dev claude sprite

Code Organization

src/index.ts

  • Command-line argument parsing
  • Routes to appropriate command handler
  • Minimal logic (just dispatching)

src/commands/

  • Per-command modules: interactive.ts, list.ts, run.ts, delete.ts, update.ts, etc.
  • shared.ts — helpers, entity resolution, fuzzy matching, credential hints
  • index.ts — barrel re-export for backward compatibility with existing imports

src/manifest.ts

  • Manifest fetching from GitHub
  • Local caching with TTL
  • Offline fallback to stale cache
  • Typed manifest structure

src/version.ts

  • Single source of truth for version number

Adding a New Command

  1. Add a new file src/commands/mycommand.ts:

    export async function cmdMyCommand() {
      const manifest = await loadManifest();
      // ... implementation
    }
    
  2. Re-export from src/commands/index.ts:

    export { cmdMyCommand } from "./mycommand.js";
    
  3. Add routing in src/index.ts:

    case "mycommand":
      await cmdMyCommand();
      break;
    
  4. Update help text in src/commands/help.tscmdHelp()

Design Rationale

Why TypeScript?

  • Type safety: Manifest structure is type-checked at compile time
  • Modern async/await: Clean, readable asynchronous code
  • Rich ecosystem: Access to high-quality CLI libraries (@clack/prompts, etc.)
  • Single codebase: Same code runs on bun, node, or as a compiled binary

Why Auto-install Bun?

  • Single implementation: No need to maintain a separate bash CLI
  • Feature parity: Every user gets the full TypeScript CLI with all features
  • Fast install: Bun installs in ~5 seconds via curl -fsSL https://bun.sh/install | bash
  • Simple maintenance: One codebase, one source of truth

Manifest Caching

The CLI caches the manifest locally to reduce network requests:

  • Cache location: $XDG_CACHE_HOME/spawn/manifest.json (or ~/.cache/spawn/manifest.json)
  • TTL: 1 hour (3600 seconds)
  • Offline fallback: If fetch fails, uses stale cache if available
  • Invalidation: spawn update clears the cache

Script Execution Flow

When you run spawn <agent> <cloud>:

  1. Load manifest: Fetch from GitHub or use cached version
  2. Validate combination: Check that matrix["<cloud>/<agent>"] is "implemented"
  3. Download script: Fetch https://openrouter.ai/labs/spawn/<cloud>/<agent>.sh
    • Fallback to GitHub raw URL if OpenRouter CDN fails
  4. Execute: Pipe script to bash -c with inherited stdio
  5. Interactive handoff: User interacts directly with the spawned agent

Contributing

Before Submitting Changes

  1. Test the CLI:

    bun run dev --help
    
  2. Ensure version numbers are synchronized:

    • src/version.tsVERSION
    • package.jsonversion
  3. Update this README if you add new commands or change behavior

  4. Run the installer locally to verify it works:

    bash install.sh
    

Release Checklist

  1. Bump version in both locations (see above)
  2. Update CHANGELOG (if exists)
  3. Test installer on clean system
  4. Tag release: git tag -a cli-vX.Y.Z -m "Release vX.Y.Z"
  5. Push tag: git push --tags

License

See repository root for license information.