yorker login: device-code flow for cross-browser auth
The CLI now uses a poll-based device-code flow modeled on Vercel and GitHub, so login works in every browser, including Safari.
yorker login now uses a device-code flow. The CLI prints a short
XXXX-XXXX code and opens your browser to a confirmation page. You verify
the code matches, click Authorize, and the CLI polls until it picks up the
fresh credential. No more localhost callbacks, which Safari blocked on the
https-to-http hop in the previous release.
@yorker/[email protected] (published 2026-05-08) relies on a localhost
listener that this server release no longer talks to, so its yorker login will hang. Update to the next CLI release shipped after this
entry, where the polling flow is wired end-to-end. Older CLI versions
that authenticate via YORKER_API_KEY are unaffected.