feat(computers): expose viewer password commands

Author: robertohluna

CHANGELOG.md

@@ -2,6 +2,12 @@
 
 All notable changes to @miosa/cli will be documented in this file.
 
+## [1.0.82] - 2026-06-22
+
+### Added
+- `miosa computers viewer-password <computer-id>` shows external desktop viewer-password status.
+- `miosa computers rotate-viewer-password <computer-id>` rotates and prints the raw external desktop viewer password once.
+
 ## [1.0.54] - 2026-06-10
 
 ### Changed

README.md

@@ -364,6 +364,25 @@ miosa ssh my-mac
 miosa ssh my-mac --cmd "ls -la"
 ```
 
+### `miosa computers viewer-password <computer-id> [--json]`
+
+Show whether a Computer's raw external desktop viewer password is set.
+Authenticated MIOSA platform desktop links do not need this password.
+
+```bash
+miosa computers viewer-password comp_123
+```
+
+### `miosa computers rotate-viewer-password <computer-id> [--json]`
+
+Rotate and print the raw external desktop viewer password once. Use this when
+sharing a direct `*.computer.miosa.ai/desktop/index.html` viewer link outside
+the authenticated platform UI.
+
+```bash
+miosa computers rotate-viewer-password comp_123
+```
+
 ### `miosa exec <host> <cmd> [args...] [--cwd dir] [--env KEY=VAL] [--timeout 30s]`
 
 Run a command non-interactively and stream output. Exits with the remote exit code.

package-lock.json

@@ -1,6 +1,6 @@
 {
   "name": "@miosa/cli",
-  "version": "1.0.81",
+  "version": "1.0.82",
   "description": "MIOSA platform CLI — projects, sandboxes, deploys, databases, more",
   "type": "module",
   "bin": {

package.json

@@ -243,6 +243,98 @@ export function register(program: Command): void {
       }),
     );
 
+  computers!
+    .command("viewer-password <computer-id>")
+    .alias("password")
+    .description("Show external desktop viewer-password status")
+    .option("--json", "Output as JSON")
+    .action((id: string, opts: JsonOptions) =>
+      runAction(async () => {
+        const raw = unwrap<Record<string, unknown>>(
+          await client().apiGet<unknown>(
+            apiPath(`/computers/${enc(id)}/viewer-password`),
+          ),
+        );
+
+        if (isJsonMode(opts)) {
+          console.log(JSON.stringify(raw, null, 2));
+          return;
+        }
+
+        printBanner({ subtitle: "External desktop viewer password" });
+        console.log(
+          kvPanel([
+            { icon: icon.info, label: "computer", value: chalk.dim(id) },
+            {
+              label: "password_set",
+              value: raw["password_set"] ? chalk.green("yes") : chalk.yellow("no"),
+            },
+            ...(raw["viewer_password_set_at"] || raw["password_set_at"]
+              ? [
+                  {
+                    label: "set_at",
+                    value: chalk.dim(
+                      String(raw["viewer_password_set_at"] ?? raw["password_set_at"]),
+                    ),
+                  },
+                ]
+              : []),
+          ]),
+        );
+        console.log();
+        console.log(
+          hintBlock("Use", [
+            `miosa computers rotate-viewer-password ${id}`,
+            "Authenticated platform desktop links do not need this password.",
+          ]),
+        );
+        console.log();
+      }),
+    );
+
+  computers!
+    .command("rotate-viewer-password <computer-id>")
+    .alias("rotate-password")
+    .description("Rotate and print the external desktop viewer password once")
+    .option("--json", "Output as JSON")
+    .action((id: string, opts: JsonOptions) =>
+      runAction(async () => {
+        const raw = unwrap<Record<string, unknown>>(
+          await client().apiPost<unknown>(
+            apiPath(`/computers/${enc(id)}/viewer-password/rotate`),
+            {},
+          ),
+        );
+
+        if (isJsonMode(opts)) {
+          console.log(JSON.stringify(raw, null, 2));
+          return;
+        }
+
+        const password = String(raw["viewer_password"] ?? raw["password"] ?? "");
+        printBanner({ subtitle: "Rotated external viewer password" });
+        console.log(
+          kvPanel([
+            { icon: icon.ok, label: "computer", value: chalk.dim(id) },
+            {
+              label: "viewer_password",
+              value: password ? chalk.bold(password) : chalk.dim("not returned"),
+            },
+            ...(raw["rotated_at"]
+              ? [{ label: "rotated_at", value: chalk.dim(String(raw["rotated_at"])) }]
+              : []),
+          ]),
+        );
+        console.log();
+        console.log(
+          chalk.yellow(
+            "This password is for raw external desktop viewer links. Store it now; it may not be returned again.",
+          ),
+        );
+        console.log();
+      }),
+    );
+
   // Workspace-aware create (skipped in resourceCommands via skipCommands).
   addDataOption(
     computers!