Agent Skills
› langwatch/langwatch
› haven-auth
haven-auth
GitHub管理本地开发环境的浏览器登录状态，支持以管理员或种子用户身份生成 Playwright storage-state 文件，确保密码不泄露且仅限本地使用。
Trigger Scenarios
haven auth
haven browser login --as
sign in as admin
log in as a seeded user
storage state
a signed-in session for a script
what is the admin login
login for a Playwright test
how do I get a session without a password
Install
npx skills add langwatch/langwatch --skill haven-auth -g -y
SKILL.md
Frontmatter
{
"name": "haven-auth",
"description": "Sign in to this worktree's stack as admin or a seeded login with `haven browser login --as`, which writes a Playwright storage-state file and never prints the password. Use when someone says 'haven auth', 'haven browser login --as', 'sign in as admin', 'log in as a seeded user', 'storage state', 'a signed-in session for a script', 'what is the admin login', 'login for a Playwright test', or 'how do I get a session without a password'.",
"argument-hint": "browser login --as <admin|email> [--out file] [--json] [--stack slug]",
"user-invocable": true
}
haven browser login (formerly haven auth)
haven browser login --as admin # the stack's admin; state goes to haven's per-stack browser dir
haven browser login --as admin --out .claude/tmp/state.json # a Playwright storage state, mode 600
haven browser login --as someone@seed.test --json # a seeded login by email; JSON {who, email, app, file}
- It signs in through the app's normal email sign-in and writes the session cookies as a Playwright storage state (owner-only, mode 600). The password is never printed.
- It refuses any app that is not on this machine, so a dev password never travels elsewhere.
- Needs a running stack:
haven up --agent -d.--stack <slug>signs in to another worktree's. adminis the stack's admin account (LANGWATCH_ADMIN_EMAIL, from the overlay or.env). Any other login must be an email a seed created;haven db seed --jsonlists them. Seeded logins share one fixed local dev password defined intools/thuishaven/domain/identity.go; never type it or paste it anywhere. Lethaven browser loginand--asuse it.- The default file lives at
<haven browser dir>/auth/<who>.json.
With browser lanes
You usually do not run haven browser login yourself: haven browser open ... --as admin signs the
lane in and re-signs it if it lands on sign-in. Use haven browser login --as <who> --out <file> when a Playwright
script outside haven needs a signed-in state, then load it with
haven browser state-load <file> --lane <name>. See haven-browser.
Rules: a state file is a credential. Keep it under .claude/tmp/, never commit it, never paste it.
Version History
- c0c14dc Current 2026-10-19 19:32
