From aa1998499f8184f90450f89fb7d843791c367ed6 Mon Sep 17 00:00:00 2001
From: Brad Heller <brad@tower.dev>
Date: Sun, 25 Jan 2026 12:09:35 +0100
Subject: [PATCH 1/3] chore: Add `--no-browser` to Login to skip opening
 browsers in environments where our CLI is tricked

---
 crates/tower-cmd/src/lib.rs     |  2 +-
 crates/tower-cmd/src/session.rs | 51 ++++++++++++++++++++++++---------
 2 files changed, 38 insertions(+), 15 deletions(-)

diff --git a/crates/tower-cmd/src/lib.rs b/crates/tower-cmd/src/lib.rs
index cd4fcbda..a55b4967 100644
--- a/crates/tower-cmd/src/lib.rs
+++ b/crates/tower-cmd/src/lib.rs
@@ -99,7 +99,7 @@ impl App {
         }
 
         match matches.subcommand() {
-            Some(("login", _)) => session::do_login(config).await,
+            Some(("login", args)) => session::do_login(config, args).await,
             Some(("version", _)) => version::do_version().await,
             Some(("apps", sub_matches)) => {
                 let apps_command = sub_matches.subcommand();
diff --git a/crates/tower-cmd/src/session.rs b/crates/tower-cmd/src/session.rs
index 7301b46b..7f5b0c77 100644
--- a/crates/tower-cmd/src/session.rs
+++ b/crates/tower-cmd/src/session.rs
@@ -1,5 +1,5 @@
 use crate::output;
-use clap::Command;
+use clap::{Arg, ArgMatches, Command};
 use config::{Config, Session};
 use tokio::{time, time::Duration};
 use tower_api::models::CreateDeviceLoginTicketResponse;
@@ -8,18 +8,30 @@ use tower_telemetry::debug;
 use crate::api;
 
 pub fn login_cmd() -> Command {
-    Command::new("login").about("Create a session with Tower")
+    Command::new("login")
+        .arg(
+            Arg::new("no-browser")
+                .long("no-browser")
+                .short('n')
+                .help("Do not attempt to open the browser automatically")
+                .default_value("false")
+                .action(clap::ArgAction::SetTrue),
+        )
+        .about("Create a session with Tower")
 }
 
-pub async fn do_login(config: Config) {
+pub async fn do_login(config: Config, args: &ArgMatches) {
     output::banner();
 
+    // Open a browser by default, unless the --no-browser flag is set.
+    let open_browser = !args.get_flag("no-browser");
+
     let mut spinner = output::spinner("Starting device login...");
 
     match api::create_device_login_ticket(&config).await {
         Ok(resp) => {
             spinner.success();
-            handle_device_login(config, resp).await;
+            handle_device_login(config, open_browser, resp).await;
         }
         Err(err) => {
             spinner.failure();
@@ -28,18 +40,29 @@ pub async fn do_login(config: Config) {
     }
 }
 
-async fn handle_device_login(config: Config, claim: CreateDeviceLoginTicketResponse) {
+async fn handle_device_login(
+    config: Config,
+    open_browser: bool,
+    claim: CreateDeviceLoginTicketResponse,
+) {
+    // Put this in the debug logs just in case somethign weird happens.
+    debug!("Login URL: {}", claim.login_url);
+
+    let login_instructions = format!(
+        "Please open the following URL in your browser: {}\n",
+        claim.login_url
+    );
+
     // Try to open the login URL in browser
-    if let Err(err) = webbrowser::open(&claim.login_url) {
-        debug!("failed to open web browser: {}", err);
-
-        let line = format!(
-            "Please open the following URL in your browser: {}\n",
-            claim.login_url
-        );
-        output::write(&line);
+    if open_browser {
+        if let Err(err) = webbrowser::open(&claim.login_url) {
+            debug!("failed to open web browser: {}", err);
+            output::write(&login_instructions);
+        } else {
+            debug!("opened browser to {}", claim.login_url);
+        }
     } else {
-        debug!("opened browser to {}", claim.login_url);
+        output::write(&login_instructions);
     }
 
     let mut spinner = output::spinner("Waiting for login...");

From 1e35755ac9f6d4ad73d521652a291ddb8fec7495 Mon Sep 17 00:00:00 2001
From: Brad Heller <brad@tower.dev>
Date: Sun, 25 Jan 2026 12:13:38 +0100
Subject: [PATCH 2/3] Update crates/tower-cmd/src/session.rs

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
---
 crates/tower-cmd/src/session.rs | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/crates/tower-cmd/src/session.rs b/crates/tower-cmd/src/session.rs
index 7f5b0c77..a8c8b41f 100644
--- a/crates/tower-cmd/src/session.rs
+++ b/crates/tower-cmd/src/session.rs
@@ -45,7 +45,7 @@ async fn handle_device_login(
     open_browser: bool,
     claim: CreateDeviceLoginTicketResponse,
 ) {
-    // Put this in the debug logs just in case somethign weird happens.
+    // Put this in the debug logs just in case something weird happens.
     debug!("Login URL: {}", claim.login_url);
 
     let login_instructions = format!(

From 928bc3be2be0f1e6f2f1966fc9200469a61c31e9 Mon Sep 17 00:00:00 2001
From: Brad Heller <brad@tower.dev>
Date: Sun, 25 Jan 2026 12:13:46 +0100
Subject: [PATCH 3/3] Update crates/tower-cmd/src/session.rs

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
---
 crates/tower-cmd/src/session.rs | 1 -
 1 file changed, 1 deletion(-)

diff --git a/crates/tower-cmd/src/session.rs b/crates/tower-cmd/src/session.rs
index a8c8b41f..8f0f8f24 100644
--- a/crates/tower-cmd/src/session.rs
+++ b/crates/tower-cmd/src/session.rs
@@ -14,7 +14,6 @@ pub fn login_cmd() -> Command {
                 .long("no-browser")
                 .short('n')
                 .help("Do not attempt to open the browser automatically")
-                .default_value("false")
                 .action(clap::ArgAction::SetTrue),
         )
         .about("Create a session with Tower")