@capuchoo/cli 0.2.0

package/README.md

@@ -0,0 +1,351 @@
+@capuchoo/cli
+=============
+
+Capuchooo CLI bundles and uploads your application to the cloud. It packages builds as native
+artifacts or ZIP files, then publishes them using user-defined parameters such as channels and
+custom release options. Built for simple, repeatable deployments, it integrates cleanly into local
+workflows and CI pipelines to ship updates quickly and reliably.
+
+For team release operations, version ownership, GitHub Actions integration, and ecosystem
+boundaries, see [CI releases](docs/ci-releases.md).
+
+[![oclif](https://img.shields.io/badge/cli-oclif-brightgreen.svg)](https://oclif.io)
+[![Version](https://img.shields.io/npm/v/%40capuchoo%2Fcli.svg)](https://npmjs.org/package/@capuchoo/cli)
+[![Downloads/week](https://img.shields.io/npm/dw/%40capuchoo%2Fcli.svg)](https://npmjs.org/package/@capuchoo/cli)
+
+<!-- toc -->
+
+- [Usage](#usage)
+- [Commands](#commands)
+
+<!-- tocstop -->
+
+# Usage
+
+<!-- usage -->
+
+```sh-session
+$ npm install -g @capuchoo/cli
+$ capuchoo COMMAND
+running command...
+$ capuchoo (--version)
+@capuchoo/cli/0.2.0 win32-x64 node-v26.4.0
+$ capuchoo --help [COMMAND]
+USAGE
+  $ capuchoo COMMAND
+...
+```
+
+<!-- usagestop -->
+
+# Commands
+
+<!-- commands -->
+
+- [`capuchoo auth login`](#capuchoo-auth-login)
+- [`capuchoo auth logout`](#capuchoo-auth-logout)
+- [`capuchoo auth whoami`](#capuchoo-auth-whoami)
+- [`capuchoo channel list`](#capuchoo-channel-list)
+- [`capuchoo config list`](#capuchoo-config-list)
+- [`capuchoo config set KEY VALUE`](#capuchoo-config-set-key-value)
+- [`capuchoo deploy native`](#capuchoo-deploy-native)
+- [`capuchoo deploy ota`](#capuchoo-deploy-ota)
+- [`capuchoo help [COMMAND]`](#capuchoo-help-command)
+- [`capuchoo init`](#capuchoo-init)
+- [`capuchoo version bump TYPE`](#capuchoo-version-bump-type)
+- [`capuchoo version sync`](#capuchoo-version-sync)
+
+## `capuchoo auth login`
+
+Store an API key for the Capuchooo backend
+
+```
+USAGE
+  $ capuchoo auth login [-k <value>] [-e <value>]
+
+FLAGS
+  -e, --endpoint=<value>  Backend base URL
+  -k, --api-key=<value>   API key from Settings > API Keys in the dashboard
+
+DESCRIPTION
+  Store an API key for the Capuchooo backend
+
+EXAMPLES
+  $ capuchoo auth login
+
+  $ capuchoo auth login --endpoint https://capuchoo.internal --api-key cap_...
+```
+
+_See code:
+[src/commands/auth/login.ts](https://github.com/aybinv7/capuchoo/blob/v0.2.0/src/commands/auth/login.ts)_
+
+## `capuchoo auth logout`
+
+Remove the stored API key
+
+```
+USAGE
+  $ capuchoo auth logout
+
+DESCRIPTION
+  Remove the stored API key
+```
+
+_See code:
+[src/commands/auth/logout.ts](https://github.com/aybinv7/capuchoo/blob/v0.2.0/src/commands/auth/logout.ts)_
+
+## `capuchoo auth whoami`
+
+Show the signed-in account, and the organizations and apps it can reach
+
+```
+USAGE
+  $ capuchoo auth whoami [--json]
+
+FLAGS
+  --json  Machine-readable output
+
+DESCRIPTION
+  Show the signed-in account, and the organizations and apps it can reach
+```
+
+_See code:
+[src/commands/auth/whoami.ts](https://github.com/aybinv7/capuchoo/blob/v0.2.0/src/commands/auth/whoami.ts)_
+
+## `capuchoo channel list`
+
+List this app's channels and what they serve
+
+```
+USAGE
+  $ capuchoo channel list [--json]
+
+FLAGS
+  --json  Machine-readable output
+
+DESCRIPTION
+  List this app's channels and what they serve
+```
+
+_See code:
+[src/commands/channel/list.ts](https://github.com/aybinv7/capuchoo/blob/v0.2.0/src/commands/channel/list.ts)_
+
+## `capuchoo config list`
+
+Show the resolved configuration, and which build tools were found
+
+```
+USAGE
+  $ capuchoo config list [--json]
+
+FLAGS
+  --json  Machine-readable output
+
+DESCRIPTION
+  Show the resolved configuration, and which build tools were found
+```
+
+_See code:
+[src/commands/config/list.ts](https://github.com/aybinv7/capuchoo/blob/v0.2.0/src/commands/config/list.ts)_
+
+## `capuchoo config set KEY VALUE`
+
+Set a user preference in ~/.capuchoo/config.json
+
+```
+USAGE
+  $ capuchoo config set KEY VALUE
+
+ARGUMENTS
+  KEY    (endpoint|defaultChannel) Preference to set
+  VALUE  New value
+
+DESCRIPTION
+  Set a user preference in ~/.capuchoo/config.json
+
+EXAMPLES
+  $ capuchoo config set endpoint https://capuchoo.internal
+
+  $ capuchoo config set defaultChannel staging
+```
+
+_See code:
+[src/commands/config/set.ts](https://github.com/aybinv7/capuchoo/blob/v0.2.0/src/commands/config/set.ts)_
+
+## `capuchoo deploy native`
+
+Build and publish a native binary (APK). Users install it through the OS.
+
+```
+USAGE
+  $ capuchoo deploy native [-c <value>] [-n <value>] [-v major|minor|patch] [-a] [-r] [--skip-assets] [--skip-build]
+    [--dry-run] [--json] [--verbose] [-y] [-p android|ios] [-t debug|release] [--allow-unsigned]
+
+FLAGS
+  -a, --[no-]active        Serve this release immediately
+  -c, --channel=<value>    Channel to publish to. Its environment selects the flavour.
+  -n, --note=<value>       Release notes shown to users
+  -p, --platform=<option>  [default: android] Target platform
+                           <options: android|ios>
+  -r, --[no-]required      Users cannot postpone this release
+  -t, --type=<option>      [default: release] Gradle variant to assemble
+                           <options: debug|release>
+  -v, --version=<option>   Bump the app version before publishing
+                           <options: major|minor|patch>
+  -y, --yes                Accept every prompt - required in CI
+      --allow-unsigned     Publish a release build with no signature. Android will refuse to install it.
+      --dry-run            Build and package, but upload nothing
+      --json               Emit a machine-readable result on stdout
+      --skip-assets        Do not regenerate launcher icons
+      --skip-build         Publish the existing build output as-is
+      --verbose            Stream build output to the terminal
+
+DESCRIPTION
+  Build and publish a native binary (APK). Users install it through the OS.
+
+EXAMPLES
+  $ capuchoo deploy native --channel staging
+
+  $ capuchoo deploy native -c production -v minor --type release
+
+  $ capuchoo deploy native -c staging --type debug -y
+```
+
+_See code:
+[src/commands/deploy/native.ts](https://github.com/aybinv7/capuchoo/blob/v0.2.0/src/commands/deploy/native.ts)_
+
+## `capuchoo deploy ota`
+
+Publish a web bundle over the air. Does not change the installed binary.
+
+```
+USAGE
+  $ capuchoo deploy ota [-c <value>] [-n <value>] [-v major|minor|patch] [-a] [-r] [--skip-assets] [--skip-build]
+    [--dry-run] [--json] [--verbose] [-y]
+
+FLAGS
+  -a, --[no-]active       Serve this release immediately
+  -c, --channel=<value>   Channel to publish to. Its environment selects the flavour.
+  -n, --note=<value>      Release notes shown to users
+  -r, --[no-]required     Users cannot postpone this release
+  -v, --version=<option>  Bump the app version before publishing
+                          <options: major|minor|patch>
+  -y, --yes               Accept every prompt - required in CI
+      --dry-run           Build and package, but upload nothing
+      --json              Emit a machine-readable result on stdout
+      --skip-assets       Do not regenerate launcher icons
+      --skip-build        Publish the existing build output as-is
+      --verbose           Stream build output to the terminal
+
+DESCRIPTION
+  Publish a web bundle over the air. Does not change the installed binary.
+
+EXAMPLES
+  $ capuchoo deploy ota --channel staging
+
+  $ capuchoo deploy ota -c production -v patch -n 'Fixes the invoice total'
+
+  $ capuchoo deploy ota -c staging --dry-run
+```
+
+_See code:
+[src/commands/deploy/ota.ts](https://github.com/aybinv7/capuchoo/blob/v0.2.0/src/commands/deploy/ota.ts)_
+
+## `capuchoo help [COMMAND]`
+
+Display help for capuchoo.
+
+```
+USAGE
+  $ capuchoo help [COMMAND...] [-n]
+
+ARGUMENTS
+  [COMMAND...]  Command to show help for.
+
+FLAGS
+  -n, --nested-commands  Include all nested commands in the output.
+
+DESCRIPTION
+  Display help for capuchoo.
+```
+
+_See code:
+[@oclif/plugin-help](https://github.com/oclif/plugin-help/blob/6.2.58/src/commands/help.ts)_
+
+## `capuchoo init`
+
+Link this directory to a Capuchooo app and write .capuchoo/project.json
+
+```
+USAGE
+  $ capuchoo init [-l] [-f]
+
+FLAGS
+  -f, --force  Overwrite an existing project.json
+  -l, --link   Link an existing app instead of creating one
+
+DESCRIPTION
+  Link this directory to a Capuchooo app and write .capuchoo/project.json
+
+EXAMPLES
+  $ capuchoo init
+
+  $ capuchoo init --link
+```
+
+_See code:
+[src/commands/init.ts](https://github.com/aybinv7/capuchoo/blob/v0.2.0/src/commands/init.ts)_
+
+## `capuchoo version bump TYPE`
+
+Raise the app's semantic version, and optionally an environment's build number
+
+```
+USAGE
+  $ capuchoo version bump TYPE [-e dev|staging|prod]
+
+ARGUMENTS
+  TYPE  (major|minor|patch) Which part of the version to raise
+
+FLAGS
+  -e, --environment=<option>  Also increment this environment's native build number
+                              <options: dev|staging|prod>
+
+DESCRIPTION
+  Raise the app's semantic version, and optionally an environment's build number
+
+EXAMPLES
+  $ capuchoo version bump patch
+
+  $ capuchoo version bump minor --environment staging
+```
+
+_See code:
+[src/commands/version/bump.ts](https://github.com/aybinv7/capuchoo/blob/v0.2.0/src/commands/version/bump.ts)_
+
+## `capuchoo version sync`
+
+Show, or advance, the version and build number used for each flavour
+
+```
+USAGE
+  $ capuchoo version sync [-b] [-e dev|staging|prod] [--json]
+
+FLAGS
+  -b, --bump                  Increment the build number for the selected environments
+  -e, --environment=<option>  Limit to one environment
+                              <options: dev|staging|prod>
+      --json                  Machine-readable output
+
+DESCRIPTION
+  Show, or advance, the version and build number used for each flavour
+
+EXAMPLES
+  $ capuchoo version sync
+
+  $ capuchoo version sync --bump --environment staging
+```
+
+_See code:
+[src/commands/version/sync.ts](https://github.com/aybinv7/capuchoo/blob/v0.2.0/src/commands/version/sync.ts)_
+<!-- commandsstop -->

package/bin/dev.cmd

@@ -0,0 +1,3 @@
+@echo off
+
+node --loader ts-node/esm --no-warnings=ExperimentalWarning "%~dp0\dev" %*

package/bin/dev.js

@@ -0,0 +1,5 @@
+#!/usr/bin/env -S node --loader ts-node/esm --disable-warning=ExperimentalWarning
+
+import { execute } from "@oclif/core";
+
+await execute({ development: true, dir: import.meta.url });

package/bin/run.cmd

@@ -0,0 +1,3 @@
+@echo off
+
+node "%~dp0\run" %*

package/bin/run.js

@@ -0,0 +1,5 @@
+#!/usr/bin/env node
+
+import { execute } from "@oclif/core";
+
+await execute({ dir: import.meta.url });

package/dist/base-command.d.ts

@@ -0,0 +1,15 @@
+import { Command } from "@oclif/core";
+/**
+ * Base class for every Capucho command.
+ *
+ * Two jobs, both about failure. oclif's default renderer prints the error class
+ * name and a stack-shaped indent, which for a deploy tool buries the one line
+ * that matters. And an aborted prompt raises `ExitPromptError`, which used to
+ * surface as an unhandled crash when a developer pressed Ctrl-C.
+ */
+export declare abstract class BaseCommand extends Command {
+    protected catch(error: Error & {
+        exitCode?: number;
+    }): Promise<never>;
+}
+//# sourceMappingURL=base-command.d.ts.map

package/dist/base-command.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"base-command.d.ts","sourceRoot":"","sources":["../src/base-command.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAItC;;;;;;;GAOG;AACH,8BAAsB,WAAY,SAAQ,OAAO;cACtB,KAAK,CAAC,KAAK,EAAE,KAAK,GAAG;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,KAAK,CAAC;CAwBrF"}

package/dist/base-command.js

@@ -0,0 +1,61 @@
+import { Command } from "@oclif/core";
+import chalk from "chalk";
+import { HttpError } from "./utils/http.js";
+/**
+ * Base class for every Capucho command.
+ *
+ * Two jobs, both about failure. oclif's default renderer prints the error class
+ * name and a stack-shaped indent, which for a deploy tool buries the one line
+ * that matters. And an aborted prompt raises `ExitPromptError`, which used to
+ * surface as an unhandled crash when a developer pressed Ctrl-C.
+ */
+export class BaseCommand extends Command {
+    async catch(error) {
+        // Ctrl-C at a prompt is a decision, not a fault.
+        if (error.name === "ExitPromptError" || error.name === "AbortPromptError") {
+            process.stderr.write(chalk.dim("\nCancelled.\n"));
+            process.exit(130); // 128 + SIGINT
+        }
+        if (error instanceof HttpError) {
+            process.stderr.write(`\n${chalk.red("✗")} ${error.message}\n`);
+            // Say what the status actually means for the caller, rather than leaving
+            // them to interpret a bare number.
+            const hint = describeStatus(error.status);
+            if (hint)
+                process.stderr.write(chalk.dim(`  ${hint}\n`));
+            process.stderr.write("\n");
+            process.exit(1);
+        }
+        // Multi-line messages are already formatted by the thrower (validation
+        // reports a bulleted list, for instance); do not re-wrap them.
+        const message = error.message ?? String(error);
+        process.stderr.write(`\n${chalk.red("✗")} ${message}\n\n`);
+        process.exit(typeof error.exitCode === "number" ? error.exitCode : 1);
+    }
+}
+function describeStatus(status) {
+    switch (status) {
+        case 401:
+        case 403: {
+            return "The API key was rejected, or it is not scoped to this app. Check `capuchoo auth whoami`.";
+        }
+        case 404: {
+            return "The server has no record with that id. If this app was deleted or recreated, re-run `capuchoo init`.";
+        }
+        case 409: {
+            return "That version already exists on this channel. Bump the version, or deactivate the existing release.";
+        }
+        case 413: {
+            return "The artefact is larger than the server accepts.";
+        }
+        case 429: {
+            return "Rate limited. Wait and retry.";
+        }
+        default: {
+            return status >= 500
+                ? "The server failed. This is not something the CLI can fix - retry, then check the backend logs."
+                : null;
+        }
+    }
+}
+//# sourceMappingURL=base-command.js.map

package/dist/base-command.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"base-command.js","sourceRoot":"","sources":["../src/base-command.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AACtC,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAE5C;;;;;;;GAOG;AACH,MAAM,OAAgB,WAAY,SAAQ,OAAO;IAC5B,KAAK,CAAC,KAAK,CAAC,KAAoC;QACjE,iDAAiD;QACjD,IAAI,KAAK,CAAC,IAAI,KAAK,iBAAiB,IAAI,KAAK,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;YAC1E,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC;YAClD,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,eAAe;QACpC,CAAC;QAED,IAAI,KAAK,YAAY,SAAS,EAAE,CAAC;YAC/B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,OAAO,IAAI,CAAC,CAAC;YAE/D,yEAAyE;YACzE,mCAAmC;YACnC,MAAM,IAAI,GAAG,cAAc,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAC1C,IAAI,IAAI;gBAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC;YACzD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC3B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,uEAAuE;QACvE,+DAA+D;QAC/D,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC;QAC/C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,OAAO,MAAM,CAAC,CAAC;QAC3D,OAAO,CAAC,IAAI,CAAC,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACxE,CAAC;CACF;AAED,SAAS,cAAc,CAAC,MAAc;IACpC,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,GAAG,CAAC;QACT,KAAK,GAAG,CAAC,CAAC,CAAC;YACT,OAAO,0FAA0F,CAAC;QACpG,CAAC;QACD,KAAK,GAAG,CAAC,CAAC,CAAC;YACT,OAAO,sGAAsG,CAAC;QAChH,CAAC;QACD,KAAK,GAAG,CAAC,CAAC,CAAC;YACT,OAAO,oGAAoG,CAAC;QAC9G,CAAC;QACD,KAAK,GAAG,CAAC,CAAC,CAAC;YACT,OAAO,iDAAiD,CAAC;QAC3D,CAAC;QACD,KAAK,GAAG,CAAC,CAAC,CAAC;YACT,OAAO,+BAA+B,CAAC;QACzC,CAAC;QACD,OAAO,CAAC,CAAC,CAAC;YACR,OAAO,MAAM,IAAI,GAAG;gBAClB,CAAC,CAAC,gGAAgG;gBAClG,CAAC,CAAC,IAAI,CAAC;QACX,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/commands/auth/login.d.ts

@@ -0,0 +1,19 @@
+import { BaseCommand } from "../../base-command.js";
+export default class AuthLogin extends BaseCommand {
+    static description: string;
+    static examples: string[];
+    static flags: {
+        "api-key": import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        endpoint: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    };
+    run(): Promise<void>;
+    /**
+     * Shared with `capuchoo init`, which offers to log in when it finds no
+     * credentials.
+     *
+     * Throws on failure rather than calling `this.error`, so the caller decides
+     * whether a failed login ends the process or just ends the login step.
+     */
+    static performLogin(flagEndpoint?: string, flagApiKey?: string): Promise<void>;
+}
+//# sourceMappingURL=login.d.ts.map

package/dist/commands/auth/login.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"login.d.ts","sourceRoot":"","sources":["../../../src/commands/auth/login.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAIpD,MAAM,CAAC,OAAO,OAAO,SAAU,SAAQ,WAAW;IAChD,OAAgB,WAAW,SAA8C;IAEzE,OAAgB,QAAQ,WAGtB;IAEF,OAAgB,KAAK;;;MAMnB;IAEI,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC;IAK1B;;;;;;OAMG;WACU,YAAY,CAAC,YAAY,CAAC,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAoDrF"}

package/dist/commands/auth/login.js

@@ -0,0 +1,74 @@
+import { input, password } from "@inquirer/prompts";
+import { Flags } from "@oclif/core";
+import chalk from "chalk";
+import ora from "ora";
+import { CloudClient } from "../../services/cloud.js";
+import { readGlobalConfig, updateGlobalConfig } from "../../utils/config.js";
+import { BaseCommand } from "../../base-command.js";
+const DEFAULT_ENDPOINT = "https://capuchoo-back.onrender.com";
+export default class AuthLogin extends BaseCommand {
+    static description = "Store an API key for the Capucho backend";
+    static examples = [
+        "<%= config.bin %> auth login",
+        "<%= config.bin %> auth login --endpoint https://capucho.internal --api-key cap_...",
+    ];
+    static flags = {
+        "api-key": Flags.string({
+            char: "k",
+            description: "API key from Settings > API Keys in the dashboard",
+        }),
+        endpoint: Flags.string({ char: "e", description: "Backend base URL" }),
+    };
+    async run() {
+        const { flags } = await this.parse(AuthLogin);
+        await AuthLogin.performLogin(flags.endpoint, flags["api-key"]);
+    }
+    /**
+     * Shared with `capuchoo init`, which offers to log in when it finds no
+     * credentials.
+     *
+     * Throws on failure rather than calling `this.error`, so the caller decides
+     * whether a failed login ends the process or just ends the login step.
+     */
+    static async performLogin(flagEndpoint, flagApiKey) {
+        const existing = readGlobalConfig();
+        const endpoint = (flagEndpoint ??
+            (await input({
+                message: "Backend URL",
+                default: existing.endpoint ?? DEFAULT_ENDPOINT,
+                validate: (value) => /^https?:\/\/.+/.test(value.trim()) || "Must start with http:// or https://",
+            })))
+            .trim()
+            .replace(/\/+$/, "");
+        let apiKey = flagApiKey;
+        if (!apiKey) {
+            process.stderr.write(chalk.dim(`\n  Create a key under Settings > API Keys at ${endpoint}\n\n`));
+            apiKey = await password({
+                message: "API key",
+                // Only a length check. The previous version required the key to start
+                // with "cap_", which is a server-side format decision the CLI has no
+                // business enforcing - a rotated prefix would have locked users out.
+                validate: (value) => value.trim().length >= 16 || "That key looks too short",
+            });
+        }
+        apiKey = apiKey.trim();
+        const spinner = ora({ text: "Verifying", stream: process.stderr }).start();
+        const profile = await new CloudClient(endpoint, apiKey).whoami();
+        if (!profile) {
+            spinner.fail("Those credentials were rejected");
+            throw new Error(`${endpoint} did not accept that API key. Check the key and the URL.`);
+        }
+        spinner.succeed(`Signed in as ${profile.user.email}`);
+        // Only what is needed to authenticate, plus who it belongs to. The old
+        // implementation also wrote the full app and organization lists, which went
+        // stale immediately - and `auth whoami` then read fields that `auth login`
+        // never actually saved, so it always reported no organizations.
+        updateGlobalConfig({
+            endpoint,
+            apiKey,
+            user: { id: profile.user.id, email: profile.user.email },
+            authenticatedAt: new Date().toISOString(),
+        });
+    }
+}
+//# sourceMappingURL=login.js.map

package/dist/commands/auth/login.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"login.js","sourceRoot":"","sources":["../../../src/commands/auth/login.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AACpC,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,GAAG,MAAM,KAAK,CAAC;AACtB,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AACtD,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAC7E,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAEpD,MAAM,gBAAgB,GAAG,oCAAoC,CAAC;AAE9D,MAAM,CAAC,OAAO,OAAO,SAAU,SAAQ,WAAW;IAChD,MAAM,CAAU,WAAW,GAAG,0CAA0C,CAAC;IAEzE,MAAM,CAAU,QAAQ,GAAG;QACzB,8BAA8B;QAC9B,oFAAoF;KACrF,CAAC;IAEF,MAAM,CAAU,KAAK,GAAG;QACtB,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC;YACtB,IAAI,EAAE,GAAG;YACT,WAAW,EAAE,mDAAmD;SACjE,CAAC;QACF,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,WAAW,EAAE,kBAAkB,EAAE,CAAC;KACvE,CAAC;IAEF,KAAK,CAAC,GAAG;QACP,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAC9C,MAAM,SAAS,CAAC,YAAY,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;IACjE,CAAC;IAED;;;;;;OAMG;IACH,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,YAAqB,EAAE,UAAmB;QAClE,MAAM,QAAQ,GAAG,gBAAgB,EAAE,CAAC;QAEpC,MAAM,QAAQ,GAAG,CACf,YAAY;YACZ,CAAC,MAAM,KAAK,CAAC;gBACX,OAAO,EAAE,aAAa;gBACtB,OAAO,EAAE,QAAQ,CAAC,QAAQ,IAAI,gBAAgB;gBAC9C,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE,CAClB,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,qCAAqC;aAC/E,CAAC,CAAC,CACJ;aACE,IAAI,EAAE;aACN,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAEvB,IAAI,MAAM,GAAG,UAAU,CAAC;QACxB,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,KAAK,CAAC,GAAG,CAAC,iDAAiD,QAAQ,MAAM,CAAC,CAC3E,CAAC;YACF,MAAM,GAAG,MAAM,QAAQ,CAAC;gBACtB,OAAO,EAAE,SAAS;gBAClB,sEAAsE;gBACtE,qEAAqE;gBACrE,qEAAqE;gBACrE,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,IAAI,EAAE,IAAI,0BAA0B;aAC7E,CAAC,CAAC;QACL,CAAC;QAED,MAAM,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;QAEvB,MAAM,OAAO,GAAG,GAAG,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;QAC3E,MAAM,OAAO,GAAG,MAAM,IAAI,WAAW,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,EAAE,CAAC;QAEjE,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;YAChD,MAAM,IAAI,KAAK,CAAC,GAAG,QAAQ,0DAA0D,CAAC,CAAC;QACzF,CAAC;QAED,OAAO,CAAC,OAAO,CAAC,gBAAgB,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;QAEtD,uEAAuE;QACvE,4EAA4E;QAC5E,2EAA2E;QAC3E,gEAAgE;QAChE,kBAAkB,CAAC;YACjB,QAAQ;YACR,MAAM;YACN,IAAI,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE;YACxD,eAAe,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SAC1C,CAAC,CAAC;IACL,CAAC"}

package/dist/commands/auth/logout.d.ts

@@ -0,0 +1,6 @@
+import { BaseCommand } from "../../base-command.js";
+export default class AuthLogout extends BaseCommand {
+    static description: string;
+    run(): Promise<void>;
+}
+//# sourceMappingURL=logout.d.ts.map

package/dist/commands/auth/logout.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"logout.d.ts","sourceRoot":"","sources":["../../../src/commands/auth/logout.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAEpD,MAAM,CAAC,OAAO,OAAO,UAAW,SAAQ,WAAW;IACjD,OAAgB,WAAW,SAA+B;IAEpD,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC;CAkB3B"}

package/dist/commands/auth/logout.js

@@ -0,0 +1,22 @@
+import chalk from "chalk";
+import { readGlobalConfig, writeGlobalConfig } from "../../utils/config.js";
+import { BaseCommand } from "../../base-command.js";
+export default class AuthLogout extends BaseCommand {
+    static description = "Remove the stored API key";
+    async run() {
+        const config = readGlobalConfig();
+        if (!config.apiKey) {
+            this.log(chalk.dim("No stored credentials to remove."));
+        }
+        else {
+            // The endpoint is a preference, not a credential - keeping it means the
+            // next login pre-fills the right server. Everything else goes.
+            writeGlobalConfig({ endpoint: config.endpoint });
+            this.log(chalk.green("Signed out. The stored API key has been removed."));
+        }
+        if (process.env.CAPUCHO_API_KEY) {
+            this.log(chalk.yellow("! CAPUCHO_API_KEY is set in this environment and still takes precedence."));
+        }
+    }
+}
+//# sourceMappingURL=logout.js.map

package/dist/commands/auth/logout.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logout.js","sourceRoot":"","sources":["../../../src/commands/auth/logout.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC5E,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAEpD,MAAM,CAAC,OAAO,OAAO,UAAW,SAAQ,WAAW;IACjD,MAAM,CAAU,WAAW,GAAG,2BAA2B,CAAC;IAE1D,KAAK,CAAC,GAAG;QACP,MAAM,MAAM,GAAG,gBAAgB,EAAE,CAAC;QAElC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YACnB,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,kCAAkC,CAAC,CAAC,CAAC;QAC1D,CAAC;aAAM,CAAC;YACN,wEAAwE;YACxE,+DAA+D;YAC/D,iBAAiB,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;YACjD,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,kDAAkD,CAAC,CAAC,CAAC;QAC5E,CAAC;QAED,IAAI,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,CAAC;YAChC,IAAI,CAAC,GAAG,CACN,KAAK,CAAC,MAAM,CAAC,0EAA0E,CAAC,CACzF,CAAC;QACJ,CAAC;IACH,CAAC"}

package/dist/commands/auth/whoami.d.ts

@@ -0,0 +1,9 @@
+import { BaseCommand } from "../../base-command.js";
+export default class AuthWhoami extends BaseCommand {
+    static description: string;
+    static flags: {
+        json: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+    };
+    run(): Promise<void>;
+}
+//# sourceMappingURL=whoami.d.ts.map

package/dist/commands/auth/whoami.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"whoami.d.ts","sourceRoot":"","sources":["../../../src/commands/auth/whoami.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAEpD,MAAM,CAAC,OAAO,OAAO,UAAW,SAAQ,WAAW;IACjD,OAAgB,WAAW,SACiD;IAE5E,OAAgB,KAAK;;MAEnB;IAEI,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC;CAoF3B"}