Authentication

Authentication state is stored locally by the Core API in the SQLite database at ~/.thesis/thesis.db. The thesis auth command surface currently exposes session inspection only — there are no login, logout, or whoami subcommands. Sessions are created by signing in via the Thesis app or desktop; the CLI just reads them back from the local database.

All thesis auth subcommands talk to the local Core API, so the server must be running (thesis server start).

thesis auth

thesis auth [command] [options]

Description: "Manage authentication sessions."

thesis auth sessions list

List all sessions known to the local Core API.

thesis auth sessions list [options]

• Arguments

  • None

• Options

Option	Description	Default	Required?
--core-url <url>	Core API URL	http://localhost:42421	No

• Examples

thesis auth sessions list
thesis auth sessions list --core-url http://localhost:42421

• Notes
  • The command first checks Core API health and exits with an error if it cannot connect.
  • On connection failure it suggests starting the server with thesis server start.

thesis auth sessions get

Get the current session — the latest non-deleted session record, sorted by createdAt.

thesis auth sessions get [options]

• Arguments

  • None

• Options

Option	Description	Default	Required?
--core-url <url>	Core API URL	http://localhost:42421	No

• Examples

thesis auth sessions get

• Notes
  • Exits with a non-zero status if no sessions exist or none are active.
  • The command also checks Core API health before querying.