playwright-auth

# /playwright-auth — Browser Auth Profile Manager

Manages Playwright browser auth profiles so Claude sessions (local and cloud) can access authenticated sites.

## How It Works

- **capture** — opens a real headed browser; you log into GitHub, Google, Notion, etc.; profile is saved to `~/.amux/playwright-auth/profile/` and automatically synced to cloud
- **sync** — ships the saved profile to the cloud VM via gcloud IAP
- **status** — shows profile age and whether it's been synced

## Instructions

The user's request is: **$ARGUMENTS**

Parse the argument:

### `capture` or empty
Run the capture command and wait for completion:
```bash
amux playwright-auth capture
```
This opens a browser. Inform the user to log into any sites they need, then close the browser. It will automatically sync to cloud when done.

### `sync`
Sync the existing local profile to cloud:
```bash
amux playwright-auth sync
```
Report the output — confirm success or surface any errors.

### `status`
Check the current profile state:
```bash
# Profile location and age
ls -lh ~/.amux/playwright-auth/profile/ 2>/dev/null && \
  echo "Last modified: $(stat -f '%Sm' -t '%Y-%m-%d %H:%M' ~/.amux/playwright-auth/profile 2>/dev/null || stat -c '%y' ~/.amux/playwright-auth/profile 2>/dev/null)" || \
  echo "No profile found. Run: amux playwright-auth capture"
```

Always report clearly:
- Whether a profile exists and how old it is
- Whether the last sync succeeded
- Next steps if something needs attention

## Gotchas

- `capture` opens a **headed** (visible) browser — it cannot run in a headless/SSH session.
- The profile directory at `~/.amux/playwright-auth/profile/` is locked while a browser is using it — don't run capture while another Playwright instance is open.
- Auth cookies expire — if automated tasks start getting 401s, the profile needs a fresh capture.
- `sync` requires `gcloud` CLI and IAP tunnel access to the cloud VM; it will fail if the VM is down.