improvement(setup): drop the paste-a-key fallback, simplify consent copy

The browser handoff is now the only path — the wizard waits on a spinner
instead of racing a paste prompt. Consent card leads with "Connect your
terminal" and moves the match-the-code disclaimer into the description.

Author: TheodoreSpeaks

apps/sim/app/cli/auth/cli-auth-view.tsx

@@ -40,8 +40,8 @@ export function CliAuthView() {
   return (
     <div className='space-y-6'>
       <AuthHeader
-        title='Does this match your terminal?'
-        description='Approve only if your terminal is showing this same code.'
+        title='Connect your terminal'
+        description='Approve only if the code below matches the one in your terminal.'
       />
       <div className='space-y-4'>
         <div className='flex items-center justify-center rounded-[10px] border border-[var(--border-1)] py-5'>
@@ -65,7 +65,7 @@ export function CliAuthView() {
             )
           }
         >
-          Codes match — connect terminal
+          Connect
         </AuthSubmitButton>
         {approve.isError && (
           <AuthFormMessage type='error' align='center'>

apps/sim/app/cli/auth/loading.tsx

@@ -4,17 +4,16 @@ import { AuthShell } from '@/app/(auth)/components'
 /**
  * Consent-card skeleton, shared by the route fallback and `page.tsx`'s Suspense.
  *
- * Bars mirror the card's boxes so hydration doesn't shift the layout: the
- * heading and description each wrap to two lines in the 400px column, then the
- * 70px pairing panel (28px type + `py-5` + 1px border) and the `h-9` button.
+ * Bars mirror the card's boxes so hydration doesn't shift the layout: a
+ * one-line heading, a description that wraps to two in the 400px column, then
+ * the 70px pairing panel (28px type + `py-5` + 1px border) and the `h-9` button.
  */
 export function CliAuthLoading() {
   return (
     <div className='flex w-full flex-col items-center'>
-      <Skeleton className='h-[38px] w-[300px] rounded-[4px]' />
-      <Skeleton className='h-[38px] w-[220px] rounded-[4px]' />
-      <Skeleton className='mt-1 h-[23px] w-[340px] rounded-[4px]' />
-      <Skeleton className='h-[23px] w-[260px] rounded-[4px]' />
+      <Skeleton className='h-[38px] w-[280px] rounded-[4px]' />
+      <Skeleton className='mt-1 h-[23px] w-[360px] rounded-[4px]' />
+      <Skeleton className='h-[23px] w-[240px] rounded-[4px]' />
       <Skeleton className='mt-6 h-[70px] w-full rounded-[10px]' />
       <Skeleton className='mt-4 h-9 w-full rounded-[10px]' />
     </div>

scripts/setup/cli-auth.ts

@@ -136,9 +136,8 @@ async function exchangeCode(
 }
 
 /**
- * Races the browser handoff against a live paste prompt — whichever produces
- * a key first wins. Returns null when the handoff times out with nothing
- * pasted; ctrl-c cancels setup as everywhere else.
+ * Waits for the browser handoff and redeems the code it returns. Null on
+ * timeout or a failed exchange; ctrl-c exits setup via the SIGINT handler.
  */
 export async function browserKeyFlow(origin: string): Promise<string | null> {
   const listener = await startCodeListener(origin)
@@ -151,35 +150,12 @@ export async function browserKeyFlow(origin: string): Promise<string | null> {
   )
   openBrowser(listener.authUrl)
 
-  const controller = new AbortController()
-  let browserDone = false
-  listener.code.then(() => {
-    browserDone = true
-    controller.abort()
-  })
+  const spin = p.spinner()
+  spin.start('Waiting for approval in your browser')
+  const code = await listener.code
+  spin.stop(code ? 'Approved' : 'Browser handoff timed out')
 
-  for (;;) {
-    const input = await p.passwordCancellable({
-      message: 'Waiting for the browser… (or paste a key here)',
-      signal: controller.signal,
-    })
-    if (p.isCancel(input)) {
-      if (browserDone) {
-        const code = await listener.code
-        if (!code) {
-          p.log.warn('Browser handoff timed out with no key.')
-          return null
-        }
-        const key = await exchangeCode(origin, code, listener.verifier)
-        if (key) p.log.step('Key received from browser')
-        return key
-      }
-      listener.close()
-      p.cancelAndExit()
-    }
-    if (input) {
-      listener.close()
-      return input
-    }
-  }
+  if (!code) return null
+
+  return exchangeCode(origin, code, listener.verifier)
 }

scripts/setup/prompter.ts

@@ -113,18 +113,3 @@ export function cancelAndExit(): never {
   clack.cancel('Setup cancelled.')
   exitWith(130)
 }
-
-/**
- * Password prompt that surfaces cancellation (abort or ctrl-c) as a symbol
- * instead of exiting — for flows that race a prompt against a background
- * event and must tell the two apart.
- */
-export async function passwordCancellable(params: {
-  message: string
-  signal: AbortSignal
-}): Promise<string | symbol> {
-  return clack.password({
-    message: isRich() ? theme.accent(params.message) : params.message,
-    signal: params.signal,
-  })
-}