@dropthis/cli 0.35.0 → 0.37.0

package/dist/cli.cjs

@@ -154,6 +154,8 @@ var init_inline_auth = __esm({
 // src/cli.ts
 var cli_exports = {};
 __export(cli_exports, {
+  wantsInsecureStore: () => wantsInsecureStore,
+  writeCredentialStorageError: () => writeCredentialStorageError,
   writeUsageErrorEnvelope: () => writeUsageErrorEnvelope
 });
 module.exports = __toCommonJS(cli_exports);
@@ -178,8 +180,11 @@ var UPLOAD_NEXT_ACTIONS = {
   too_many_active_uploads: "Cancel unused uploads or wait for expired uploads to be cleaned.",
   upload_not_complete: "Complete the upload session before publishing."
 };
+function isCiEnv(env) {
+  return Boolean(env.CI);
+}
 function createOutput(input) {
-  const json = input.json === true || input.quiet === true || input.stdoutIsTTY === false || input.env.CI === "true";
+  const json = input.json === true || input.quiet === true || input.stdoutIsTTY === false || isCiEnv(input.env);
   return { mode: json ? "json" : "human", quiet: input.quiet === true };
 }
 function errorEnvelope(code, message, nextAction) {
@@ -255,7 +260,10 @@ function cliNextAction(error2) {
     return `This account belongs to more than one workspace \u2014 pick one. Switch it for every later command with: dropthis workspace use ${example} \u2014 or target just this one with: --workspace ${example}.${list}`;
   }
   if (error2.code === "network_error") {
-    return "Could not reach the dropthis API \u2014 check your network or DROPTHIS_API_URL.";
+    return "Could not reach the dropthis API \u2014 check your network or DROPTHIS_API_URL. Run `dropthis doctor --online` to diagnose.";
+  }
+  if (error2.code === "insufficient_scope") {
+    return "This key lacks the required capability scope. Mint a team-scoped key: dropthis login request --email <email>, then dropthis login verify --email <email> --otp <code> --scope team.";
   }
   if (error2.code === "workspace_pinned") {
     return "Service keys are pinned to one workspace. To switch workspaces, use a delegated login (run: dropthis login) instead of a service key.";
@@ -285,10 +293,10 @@ function cliNextAction(error2) {
     return "Check the drop id or slug and retry; list your drops with dropthis list.";
   }
   if (error2.code === "invalid_api_key") {
-    return "API key is invalid or revoked. Run dropthis login to re-authenticate, or set a valid DROPTHIS_API_KEY.";
+    return "API key is invalid or revoked. Run dropthis login to re-authenticate, or set a valid DROPTHIS_API_KEY. Run `dropthis doctor --online` to diagnose.";
   }
   if (error2.statusCode === 401 || error2.code === "missing_api_key") {
-    return "Authenticate with dropthis login or set DROPTHIS_API_KEY.";
+    return "Authenticate with dropthis login or set DROPTHIS_API_KEY. Run `dropthis doctor --online` to diagnose.";
   }
   if (error2.statusCode === 413 || error2.code === "quota_exceeded") {
     return "Reduce the upload size or upgrade the account limit.";
@@ -299,6 +307,7 @@ function exitCodeFor(code) {
   if (code === "usage_error") return 2;
   if (code === "invalid_usage") return 2;
   if (code === "auth_error") return 3;
+  if (code === "credential_storage_unavailable") return 3;
   if (code === "local_input_error") return 4;
   if (code === "network_error") return 5;
   if (code === "verify_pending") return 6;
@@ -351,6 +360,9 @@ function maskKey(apiKey) {
   return apiKey.length <= 8 ? "sk_..." : `${apiKey.slice(0, 3)}...${apiKey.slice(-4)}`;
 }
 
+// src/commands/account.ts
+var prompts = __toESM(require("@clack/prompts"), 1);
+
 // src/fmt.ts
 var import_picocolors2 = __toESM(require("picocolors"), 1);
 
@@ -404,8 +416,8 @@ function writeResult(deps, link, verb, data) {
 `
           );
         } else {
-          const text2 = typeof w.detail === "string" ? w.detail : typeof w.message === "string" ? w.message : typeof w.code === "string" ? w.code : void 0;
-          if (text2) deps.stderr(`${hint(text2)}
+          const text3 = typeof w.detail === "string" ? w.detail : typeof w.message === "string" ? w.message : typeof w.code === "string" ? w.code : void 0;
+          if (text3) deps.stderr(`${hint(text3)}
 `);
         }
       }
@@ -498,6 +510,10 @@ function writeApiError(deps, details) {
 `
         );
       }
+      if (details.upgradeUrl) {
+        deps.stderr(`${hint(`Upgrade: ${details.upgradeUrl}`)}
+`);
+      }
     }
     const nextAction = nextActionForApiError(details, "human");
     if (nextAction) deps.stderr(`${hint(nextAction)}
@@ -622,15 +638,16 @@ async function runAccountUpdate(input, deps) {
   return { exitCode: 0 };
 }
 async function runAccountDelete(input, deps) {
-  if (!input.yes && input.interactive === false) {
+  if (!input.yes && input.interactive !== true) {
     return writeError(
       deps,
       "invalid_usage",
       "Pass --yes to delete the account in non-interactive mode."
     );
   }
+  let credential;
   try {
-    await requireCredential({
+    credential = await requireCredential({
       ...deps.apiKey ? { apiKey: deps.apiKey } : {},
       env: deps.env,
       store: deps.store
@@ -638,6 +655,26 @@ async function runAccountDelete(input, deps) {
   } catch {
     return writeAuthError(deps);
   }
+  if (!input.yes) {
+    if (!credential.email) {
+      return writeError(
+        deps,
+        "invalid_usage",
+        "No stored account email to confirm against.",
+        "Re-run with --yes to confirm: dropthis account delete --yes"
+      );
+    }
+    const typed = await prompts.text({
+      message: `This permanently deletes your account and all its drops. Type ${credential.email} to confirm:`
+    });
+    if (prompts.isCancel(typed) || typed !== credential.email) {
+      deps.stderr(
+        `${error("Account deletion cancelled \u2014 confirmation did not match.")}
+`
+      );
+      return { exitCode: 1 };
+    }
+  }
   const result = await deps.client.account.delete();
   if (result.error) return writeApiError(deps, result.error);
   writeHumanOrJson(deps, success("Account deleted"), {
@@ -647,8 +684,38 @@ async function runAccountDelete(input, deps) {
   return { exitCode: 0 };
 }
 
+// src/commands/analytics.ts
+async function runAnalytics(dropId, _input, deps) {
+  try {
+    await requireCredential({
+      ...deps.apiKey ? { apiKey: deps.apiKey } : {},
+      env: deps.env,
+      store: deps.store
+    });
+  } catch {
+    return writeAuthError(deps);
+  }
+  const result = await deps.client.drops.analytics(dropId);
+  if (result.error) {
+    return writeApiError(deps, result.error);
+  }
+  const data = result.data;
+  const pairs = [];
+  if (data.views !== void 0) pairs.push(["Views", String(data.views)]);
+  if (data.truncated) pairs.push(["Truncated", "yes (lower bound)"]);
+  pushBreakdown(pairs, "Top country", data.byCountry);
+  pushBreakdown(pairs, "Top referer", data.byReferer);
+  writeKv(deps, pairs, { ok: true, analytics: result.data });
+  return { exitCode: 0 };
+}
+function pushBreakdown(pairs, label, value) {
+  if (!Array.isArray(value) || value.length === 0) return;
+  const top = value[0];
+  pairs.push([label, `${top.key ?? "?"} (${top.views ?? 0})`]);
+}
+
 // src/commands/api-keys.ts
-var prompts = __toESM(require("@clack/prompts"), 1);
+var prompts2 = __toESM(require("@clack/prompts"), 1);
 
 // src/types.ts
 function extractPagination(data) {
@@ -774,10 +841,10 @@ async function runApiKeysDelete(keyId, input, deps) {
     );
   }
   if (!input.yes && input.interactive !== false) {
-    const confirmed = await prompts.confirm({
+    const confirmed = await prompts2.confirm({
       message: `Delete API key ${keyId}?`
     });
-    if (prompts.isCancel(confirmed) || !confirmed) {
+    if (prompts2.isCancel(confirmed) || !confirmed) {
       return { exitCode: 0 };
     }
   }
@@ -1131,12 +1198,40 @@ async function runDeploymentsGet(dropId, deploymentId, _input, deps) {
   writeKv(deps, pairs, { ok: true, deployment: result.data });
   return { exitCode: 0 };
 }
+async function runDeploymentsRestore(dropId, deploymentId, _input, deps) {
+  try {
+    await requireCredential({
+      ...deps.apiKey ? { apiKey: deps.apiKey } : {},
+      env: deps.env,
+      store: deps.store
+    });
+  } catch {
+    return writeAuthError(deps);
+  }
+  const result = await deps.client.deployments.restore(dropId, deploymentId);
+  if (result.error) {
+    return writeApiError(deps, result.error);
+  }
+  const data = result.data;
+  if (deps.outputMode === "human") {
+    deps.stdout(`${success(`Restored to deployment ${deploymentId}.`)}
+`);
+  }
+  const pairs = [];
+  if (data.id) pairs.push(["ID", String(data.id)]);
+  if (data.url) pairs.push(["URL", url(String(data.url))]);
+  if (data.revision !== void 0)
+    pairs.push(["Revision", String(data.revision)]);
+  writeKv(deps, pairs, { ok: true, drop: result.data });
+  return { exitCode: 0 };
+}
 function spreadData(data) {
   return data && typeof data === "object" ? data : { data };
 }
 
 // src/version.ts
-var CLI_VERSION = true ? "0.35.0" : "0.0.0-dev";
+var CLI_VERSION = true ? "0.37.0" : "0.0.0-dev";
+var SDK_VERSION = true ? "0.33.0" : "0.0.0-dev";
 
 // src/commands/doctor.ts
 async function onlineChecks(deps, hasCredential) {
@@ -1213,39 +1308,35 @@ async function runDoctor(input, deps) {
   });
   const authSource = credential?.source ?? "missing";
   const storageBackend = stored?.storage ?? "none";
+  const scopes = credential?.scopes ?? [];
   const pairs = [
     ["Version", CLI_VERSION],
+    ["SDK", SDK_VERSION],
     ["Auth", authSource],
     ["Storage", storageBackend]
   ];
+  if (scopes.length > 0) pairs.push(["Scopes", scopes.join(", ")]);
+  const baseEnvelope = {
+    version: CLI_VERSION,
+    sdk_version: SDK_VERSION,
+    auth: { source: authSource },
+    storage: { backend: storageBackend },
+    ...scopes.length > 0 ? { scopes } : {}
+  };
   if (!input.online) {
-    writeKv(deps, pairs, {
-      ok: true,
-      version: CLI_VERSION,
-      auth: { source: authSource },
-      storage: { backend: storageBackend }
-    });
+    writeKv(deps, pairs, { ok: true, ...baseEnvelope });
     return { exitCode: 0 };
   }
-  const { checks, exitCode } = await onlineChecks(
-    deps,
-    credential !== void 0
-  );
+  const { checks, exitCode } = await onlineChecks(deps, credential !== null);
   for (const c of checks) {
     pairs.push([c.name, `${c.status} \u2014 ${c.detail}`]);
   }
-  writeKv(deps, pairs, {
-    ok: exitCode === 0,
-    version: CLI_VERSION,
-    auth: { source: authSource },
-    storage: { backend: storageBackend },
-    checks
-  });
+  writeKv(deps, pairs, { ok: exitCode === 0, ...baseEnvelope, checks });
   return { exitCode };
 }
 
 // src/commands/domains.ts
-var prompts2 = __toESM(require("@clack/prompts"), 1);
+var prompts3 = __toESM(require("@clack/prompts"), 1);
 var import_picocolors3 = __toESM(require("picocolors"), 1);
 function formatDnsTable(records) {
   if (records.length === 0) return "";
@@ -1544,7 +1635,7 @@ async function runDomainsVerify(idOrHostname, input, deps, sleep = defaultSleep)
     if (deps.outputMode === "json" && domain.dns.length > 0) {
       const elapsed = Math.round(elapsedMs / 1e3);
       deps.stderr(
-        `${JSON.stringify({ ok: false, pending: true, status: domain.status, elapsed })}
+        `${JSON.stringify({ ok: true, pending: true, status: domain.status, elapsed })}
 `
       );
     }
@@ -1596,10 +1687,10 @@ async function runDomainsRemove(idOrHostname, input, deps) {
     );
   }
   if (!input.yes && input.interactive !== false) {
-    const confirmed = await prompts2.confirm({
+    const confirmed = await prompts3.confirm({
       message: `Remove ${idOrHostname}? This removes the domain and unmounts its drops.`
     });
-    if (prompts2.isCancel(confirmed) || !confirmed) {
+    if (prompts3.isCancel(confirmed) || !confirmed) {
       return { exitCode: 0 };
     }
   }
@@ -1635,7 +1726,7 @@ async function runDomainsRemove(idOrHostname, input, deps) {
 }
 
 // src/commands/drops.ts
-var prompts3 = __toESM(require("@clack/prompts"), 1);
+var prompts4 = __toESM(require("@clack/prompts"), 1);
 var import_picocolors4 = __toESM(require("picocolors"), 1);
 async function resolveDropTarget(target, deps) {
   if (target.startsWith("drop_")) return { ok: true, dropId: target };
@@ -1805,10 +1896,10 @@ async function runDropsDelete(target, input, deps) {
   writeResolvedLine(deps, resolved);
   const dropId = resolved.dropId;
   if (!input.yes && input.interactive !== false) {
-    const confirmed = await prompts3.confirm({
+    const confirmed = await prompts4.confirm({
       message: `Delete ${dropId}${dropId === target ? "" : ` (${target})`}?`
     });
-    if (prompts3.isCancel(confirmed) || !confirmed) {
+    if (prompts4.isCancel(confirmed) || !confirmed) {
       return { exitCode: 0 };
     }
   }
@@ -1898,31 +1989,31 @@ async function runInvitationsAcceptById(input, deps) {
 }
 
 // src/commands/login.ts
-var prompts4 = __toESM(require("@clack/prompts"), 1);
+var prompts5 = __toESM(require("@clack/prompts"), 1);
 async function runLoginInteractive(deps) {
-  prompts4.intro("dropthis login");
-  const email = await prompts4.text({
+  prompts5.intro("dropthis login");
+  const email = await prompts5.text({
     message: "Email address",
     validate: (v) => v?.includes("@") ? void 0 : "Enter a valid email"
   });
-  if (prompts4.isCancel(email)) {
-    prompts4.cancel("Login cancelled.");
+  if (prompts5.isCancel(email)) {
+    prompts5.cancel("Login cancelled.");
     return { exitCode: 0 };
   }
   const requestResult = await deps.client.auth.requestEmailOtp({ email });
   if (requestResult.error) {
-    prompts4.cancel(requestResult.error.message);
+    prompts5.cancel(requestResult.error.message);
     return { exitCode: exitCodeFor("api_error") };
   }
   const maxAttempts = 3;
   let session;
   for (let attempt = 1; attempt <= maxAttempts; attempt++) {
-    const otp = await prompts4.text({
+    const otp = await prompts5.text({
       message: attempt === 1 ? "Paste the code from your email" : "Try again \u2014 paste the code from your email",
       validate: (v) => v && v.length >= 4 && v.length <= 8 ? void 0 : "Code must be 4\u20138 characters."
     });
-    if (prompts4.isCancel(otp)) {
-      prompts4.cancel("Login cancelled.");
+    if (prompts5.isCancel(otp)) {
+      prompts5.cancel("Login cancelled.");
       return { exitCode: 0 };
     }
     const result = await deps.client.auth.verifyEmailOtp({
@@ -1936,21 +2027,21 @@ async function runLoginInteractive(deps) {
     if (result.error.code === "otp_expired" && attempt < maxAttempts) {
       const resend = await deps.client.auth.requestEmailOtp({ email });
       if (resend.error) {
-        prompts4.cancel(resend.error.message);
+        prompts5.cancel(resend.error.message);
         return { exitCode: exitCodeFor("api_error") };
       }
-      prompts4.log.info("That code expired \u2014 we sent a new one.");
+      prompts5.log.info("That code expired \u2014 we sent a new one.");
       continue;
     }
     if (attempt < maxAttempts) {
-      prompts4.log.warning(result.error.message);
+      prompts5.log.warning(result.error.message);
     } else {
-      prompts4.cancel(result.error.message);
+      prompts5.cancel(result.error.message);
       return { exitCode: exitCodeFor("api_error") };
     }
   }
   if (!session) {
-    prompts4.cancel("Login failed.");
+    prompts5.cancel("Login failed.");
     return { exitCode: exitCodeFor("api_error") };
   }
   const authedClient = deps.createClient(session.data.token);
@@ -1959,7 +2050,7 @@ async function runLoginInteractive(deps) {
     type: "delegated"
   });
   if (apiKey.error) {
-    prompts4.cancel(apiKey.error.message);
+    prompts5.cancel(apiKey.error.message);
     return { exitCode: exitCodeFor("api_error") };
   }
   await deps.store.save({
@@ -1971,7 +2062,7 @@ async function runLoginInteractive(deps) {
     ...apiKey.data.scopes ? { scopes: apiKey.data.scopes } : {},
     storage: "secure"
   });
-  prompts4.outro("Logged in successfully.");
+  prompts5.outro("Logged in successfully.");
   return { exitCode: 0 };
 }
 async function runLoginRequest(input, deps) {
@@ -2025,7 +2116,10 @@ async function runLoginVerify(input, deps) {
     account_id: apiKey.data.accountId ?? session.data.accountId,
     key_id: apiKey.data.id,
     key_last4: apiKey.data.keyLast4,
-    is_new_account: apiKey.data.isNewAccount ?? session.data.isNewAccount
+    is_new_account: apiKey.data.isNewAccount ?? session.data.isNewAccount,
+    // Echo the resolved capability scopes the server granted, so a scoped mint
+    // visibly advertises what the new key can do (ADR 0068).
+    ...apiKey.data.scopes?.length ? { scopes: apiKey.data.scopes } : {}
   });
   return { exitCode: 0 };
 }
@@ -2047,7 +2141,7 @@ async function runLogout(input, deps) {
 }
 
 // src/commands/members.ts
-var prompts5 = __toESM(require("@clack/prompts"), 1);
+var prompts6 = __toESM(require("@clack/prompts"), 1);
 async function runMembersList(workspaceId, _input, deps) {
   try {
     await requireCredential({
@@ -2129,10 +2223,10 @@ async function runMembersRemove(workspaceId, accountId, input, deps) {
     );
   }
   if (!input.yes && input.interactive !== false) {
-    const confirmed = await prompts5.confirm({
+    const confirmed = await prompts6.confirm({
       message: `Remove ${accountId} from workspace ${workspaceId}?`
     });
-    if (prompts5.isCancel(confirmed) || !confirmed) {
+    if (prompts6.isCancel(confirmed) || !confirmed) {
       return { exitCode: 0 };
     }
   }
@@ -2742,7 +2836,7 @@ async function handleDryRun(dropId, input, raw, deps) {
 }
 
 // src/commands/update-settings.ts
-var prompts6 = __toESM(require("@clack/prompts"), 1);
+var prompts7 = __toESM(require("@clack/prompts"), 1);
 var NO_SETTINGS_MESSAGE = "Nothing to update. Provide at least one settings option.";
 var NO_SETTINGS_NEXT_ACTION = "Run dropthis update-settings --help, or retry with one of: --title, --visibility, --password, --no-password, --noindex, --index, --expires-at, --no-expires, --domain, --shared, --slug, --metadata, or --metadata-file. To replace the content at the URL instead, use dropthis update-content <dropId> ./dist.";
 async function runUpdateSettings(target, raw, deps) {
@@ -2774,7 +2868,7 @@ async function runUpdateSettings(target, raw, deps) {
       if (shouldPrompt(deps)) {
         const prompted = await promptForSettings(
           dropId,
-          deps.prompts ?? prompts6
+          deps.prompts ?? prompts7
         );
         if (!prompted) return { exitCode: 0 };
         parsed = { ...parsed, ...prompted };
@@ -3097,12 +3191,7 @@ async function runWhoami(_input, deps) {
   }
   const result = await deps.client.account.get();
   if (result.error) {
-    writeHumanOrJson(
-      deps,
-      `Not authenticated: ${result.error.message}. Run dropthis login.`,
-      { ok: true, authenticated: false, reason: result.error.message }
-    );
-    return { exitCode: 0 };
+    return writeApiError(deps, result.error);
   }
   const account = result.data ?? {};
   const masked = maskKey(credential.apiKey);
@@ -3132,7 +3221,7 @@ async function runWhoami(_input, deps) {
 }
 
 // src/commands/workspace.ts
-var prompts7 = __toESM(require("@clack/prompts"), 1);
+var prompts8 = __toESM(require("@clack/prompts"), 1);
 async function runWorkspaceList(_input, deps) {
   try {
     await requireCredential({
@@ -3258,10 +3347,10 @@ async function runWorkspaceDelete(workspaceId, input, deps) {
     );
   }
   if (!input.yes && input.interactive !== false) {
-    const confirmed = await prompts7.confirm({
+    const confirmed = await prompts8.confirm({
       message: `Delete workspace ${workspaceId}?`
     });
-    if (prompts7.isCancel(confirmed) || !confirmed) {
+    if (prompts8.isCancel(confirmed) || !confirmed) {
       return { exitCode: 0 };
     }
   }
@@ -3315,6 +3404,28 @@ var import_promises4 = require("fs/promises");
 var import_node_os = require("os");
 var import_node_path2 = require("path");
 var import_keyring = require("@napi-rs/keyring");
+var CredentialStorageError = class extends Error {
+  code = "credential_storage_unavailable";
+  constructor(message, options) {
+    super(message, options);
+    this.name = "CredentialStorageError";
+  }
+};
+function isCredentialStorageError(error2) {
+  return error2 instanceof CredentialStorageError || typeof error2 === "object" && error2 !== null && error2.code === "credential_storage_unavailable";
+}
+async function guardStorage(action, fn) {
+  try {
+    return await fn();
+  } catch (error2) {
+    if (error2 instanceof CredentialStorageError) throw error2;
+    const detail = error2 instanceof Error ? error2.message : String(error2);
+    throw new CredentialStorageError(
+      `Could not ${action} stored credentials: ${detail}`,
+      { cause: error2 }
+    );
+  }
+}
 var MemoryCredentialStore = class {
   credential = null;
   async read() {
@@ -3333,19 +3444,24 @@ var InsecureFileCredentialStore = class {
     this.filePath = credentialPath(options.configDir);
   }
   async read() {
-    const value = await readJsonFile(this.filePath);
-    if (!value) return null;
-    if (typeof value.apiKey !== "string" || !value.apiKey) return null;
-    return { ...value, storage: "insecure" };
+    return guardStorage("read", async () => {
+      const value = await readJsonFile(this.filePath);
+      if (!value) return null;
+      if (typeof value.apiKey !== "string" || !value.apiKey) return null;
+      return { ...value, storage: "insecure" };
+    });
   }
   async save(credential) {
-    await writeCredentialFile(this.filePath, {
-      ...credential,
-      storage: "insecure"
-    });
+    await guardStorage(
+      "save",
+      () => writeCredentialFile(this.filePath, {
+        ...credential,
+        storage: "insecure"
+      })
+    );
   }
   async clear() {
-    await (0, import_promises4.rm)(this.filePath, { force: true });
+    await guardStorage("clear", () => (0, import_promises4.rm)(this.filePath, { force: true }));
   }
 };
 var KeyringCredentialStore = class {
@@ -3356,23 +3472,29 @@ var KeyringCredentialStore = class {
     this.keyring = options.keyring ?? defaultKeyringAdapter();
   }
   async read() {
-    const metadata = await readJsonFile(this.filePath);
-    if (!metadata) return null;
-    const apiKey = await this.keyring.getPassword();
-    if (typeof apiKey !== "string" || !apiKey) return null;
-    return { ...metadata, apiKey, storage: "secure" };
+    return guardStorage("read", async () => {
+      const metadata = await readJsonFile(this.filePath);
+      if (!metadata) return null;
+      const apiKey = await this.keyring.getPassword();
+      if (typeof apiKey !== "string" || !apiKey) return null;
+      return { ...metadata, apiKey, storage: "secure" };
+    });
   }
   async save(credential) {
-    await this.keyring.setPassword(credential.apiKey);
-    const { apiKey: _apiKey, ...metadata } = credential;
-    await writeCredentialFile(this.filePath, {
-      ...metadata,
-      storage: "secure"
+    await guardStorage("save", async () => {
+      await this.keyring.setPassword(credential.apiKey);
+      const { apiKey: _apiKey, ...metadata } = credential;
+      await writeCredentialFile(this.filePath, {
+        ...metadata,
+        storage: "secure"
+      });
     });
   }
   async clear() {
-    await this.keyring.deletePassword();
-    await (0, import_promises4.rm)(this.filePath, { force: true });
+    await guardStorage("clear", async () => {
+      await this.keyring.deletePassword();
+      await (0, import_promises4.rm)(this.filePath, { force: true });
+    });
   }
 };
 function createCredentialStore(options = {}) {
@@ -3472,7 +3594,9 @@ function buildProgram(options = {}) {
   const writeErr = options.stderr ?? ((value) => process.stderr.write(value));
   const jsonModeForOutput = () => {
     const argv = program.rawArgs ?? process.argv;
-    return argv.includes("--json") || argv.includes("--quiet") || argv.includes("-q") || options.env?.CI === "true" || options.env === void 0 && process.env.CI === "true" || options.stdoutIsTTY === false || options.stdoutIsTTY === void 0 && process.stdout.isTTY !== true;
+    return argv.includes("--json") || argv.includes("--quiet") || argv.includes("-q") || isCiEnv(
+      options.env ?? process.env
+    ) || options.stdoutIsTTY === false || options.stdoutIsTTY === void 0 && process.stdout.isTTY !== true;
   };
   program.exitOverride();
   program.showSuggestionAfterError();
@@ -3511,6 +3635,10 @@ function buildProgram(options = {}) {
   program.option("--json", "Force JSON output");
   program.option("-q, --quiet", "Suppress status output and imply JSON");
   program.option("--no-interactive", "Disable interactive prompts");
+  program.option(
+    "--insecure-store",
+    "Store credentials in a plaintext file instead of the OS keyring (for headless/CI boxes without a keyring; also DROPTHIS_INSECURE_STORE=1)"
+  );
   program.addHelpText(
     "after",
     [
@@ -3580,6 +3708,16 @@ ${import_picocolors6.default.bold("Canonical vs raw URLs:")}`,
   ).action(async (inputs, commandOptions) => {
     const stdinIsTTY = options.stdinIsTTY ?? process.stdin.isTTY ?? false;
     if (inputs.length === 0 && stdinIsTTY && !commandOptions.manifest) {
+      const writer = outputWriter(program, options, commandOptions);
+      if (writer.outputMode !== "human") {
+        process.exitCode = writeError(
+          writer,
+          "invalid_usage",
+          "No input to publish.",
+          "Pass a file, folder, URL, or piped stdin \u2014 e.g. dropthis publish ./dist."
+        ).exitCode;
+        return;
+      }
       program.outputHelp();
       return;
     }
@@ -3624,12 +3762,12 @@ ${import_picocolors6.default.bold("Canonical vs raw URLs:")}`,
         return;
       }
       if (deps.outputMode === "human" && deps.interactive) {
-        const prompts8 = await import("@clack/prompts");
-        const confirmed = await prompts8.confirm({
+        const prompts9 = await import("@clack/prompts");
+        const confirmed = await prompts9.confirm({
           message: `Publish '${publishInput}' as inline text?`,
           initialValue: false
         });
-        if (prompts8.isCancel(confirmed) || !confirmed) {
+        if (prompts9.isCancel(confirmed) || !confirmed) {
           return;
         }
       }
@@ -3759,7 +3897,12 @@ ${import_picocolors6.default.bold("Canonical vs raw URLs:")}`,
       }
       const result = await runUpdateSettings(dropId, dropOpts, {
         ...deps,
-        interactive: isInteractive(stdinIsTTY, deps.env, global)
+        interactive: isInteractive(
+          stdinIsTTY,
+          deps.env,
+          global,
+          deps.outputMode
+        )
       });
       process.exitCode = result.exitCode;
     }
@@ -3830,7 +3973,12 @@ ${import_picocolors6.default.bold("Canonical vs raw URLs:")}`,
         dropId,
         {
           ...commandOptions,
-          interactive: isInteractive(stdinIsTTY, deps.env, global)
+          interactive: isInteractive(
+            stdinIsTTY,
+            deps.env,
+            global,
+            deps.outputMode
+          )
         },
         deps
       );
@@ -3857,6 +4005,39 @@ ${import_picocolors6.default.bold("Canonical vs raw URLs:")}`,
       process.exitCode = result.exitCode;
     }
   );
+  deployments.command("restore <dropId> <deploymentId>").description(
+    "Roll a drop back to a prior deployment's content (Pro+ version history).\nMints a new deployment copying that one and makes it current; the URL is unchanged."
+  ).option("--json", "Force JSON output").addHelpText(
+    "after",
+    examplesBlock([
+      "dropthis deployments list drop_abc          # find the deployment id to restore",
+      "dropthis deployments restore drop_abc dep_1  # make dep_1's content current again"
+    ])
+  ).action(
+    async (dropId, deploymentId, commandOptions) => {
+      const deps = await commandDeps(program, options, store, commandOptions);
+      const result = await runDeploymentsRestore(
+        dropId,
+        deploymentId,
+        commandOptions,
+        deps
+      );
+      process.exitCode = result.exitCode;
+    }
+  );
+  program.command("analytics <dropId>").description(
+    "Show a drop's approximate view analytics (Keep+ for counts, Pro for breakdowns)"
+  ).option("--json", "Force JSON output").addHelpText(
+    "after",
+    examplesBlock([
+      "dropthis analytics drop_abc",
+      "dropthis analytics drop_abc --json | jq .analytics.views"
+    ])
+  ).action(async (dropId, commandOptions) => {
+    const deps = await commandDeps(program, options, store, commandOptions);
+    const result = await runAnalytics(dropId, commandOptions, deps);
+    process.exitCode = result.exitCode;
+  });
   const domains = program.command("domains").description(
     "Manage custom domains. Loop: connect \u2192 create the CNAME at your DNS provider \u2192 verify --wait \u2192 publish --domain"
   );
@@ -3950,7 +4131,12 @@ ${import_picocolors6.default.bold("Canonical vs raw URLs:")}`,
         hostname,
         {
           ...commandOptions,
-          interactive: isInteractive(stdinIsTTY, deps.env, global)
+          interactive: isInteractive(
+            stdinIsTTY,
+            deps.env,
+            global,
+            deps.outputMode
+          )
         },
         deps
       );
@@ -4001,7 +4187,12 @@ ${import_picocolors6.default.bold("Canonical vs raw URLs:")}`,
         keyId,
         {
           ...commandOptions,
-          interactive: isInteractive(stdinIsTTY, deps.env, global)
+          interactive: isInteractive(
+            stdinIsTTY,
+            deps.env,
+            global,
+            deps.outputMode
+          )
         },
         deps
       );
@@ -4061,7 +4252,12 @@ ${import_picocolors6.default.bold("Canonical vs raw URLs:")}`,
         workspaceId,
         {
           ...commandOptions,
-          interactive: isInteractive(stdinIsTTY, deps.env, global)
+          interactive: isInteractive(
+            stdinIsTTY,
+            deps.env,
+            global,
+            deps.outputMode
+          )
         },
         deps
       );
@@ -4123,7 +4319,12 @@ ${import_picocolors6.default.bold("Canonical vs raw URLs:")}`,
         accountId,
         {
           ...commandOptions,
-          interactive: isInteractive(stdinIsTTY, deps.env, global)
+          interactive: isInteractive(
+            stdinIsTTY,
+            deps.env,
+            global,
+            deps.outputMode
+          )
         },
         deps
       );
@@ -4158,7 +4359,7 @@ ${import_picocolors6.default.bold("Canonical vs raw URLs:")}`,
     const deps = await commandDeps(program, options, store, commandOptions);
     const global = globalOptions(program, commandOptions);
     const stdinIsTTY = options.stdinIsTTY ?? process.stdin.isTTY ?? false;
-    if (!isInteractive(stdinIsTTY, deps.env, global)) {
+    if (!isInteractive(stdinIsTTY, deps.env, global, deps.outputMode)) {
       process.exitCode = writeError(
         deps,
         "invalid_usage",
@@ -4252,7 +4453,12 @@ ${import_picocolors6.default.bold("Canonical vs raw URLs:")}`,
     const result = await runAccountDelete(
       {
         ...commandOptions,
-        interactive: isInteractive(stdinIsTTY, deps.env, global)
+        interactive: isInteractive(
+          stdinIsTTY,
+          deps.env,
+          global,
+          deps.outputMode
+        )
       },
       deps
     );
@@ -4349,7 +4555,12 @@ async function buildPublishDeps(program, options, store, commandOptions, stdinIs
     env: context.env,
     store
   });
-  const interactive = isInteractive(stdinIsTTY, context.env, global);
+  const interactive = isInteractive(
+    stdinIsTTY,
+    context.env,
+    global,
+    context.output.mode
+  );
   const inlineAuth = async () => {
     const { runInlineAuth: runInlineAuth2 } = await Promise.resolve().then(() => (init_inline_auth(), inline_auth_exports));
     return runInlineAuth2({
@@ -4374,8 +4585,9 @@ async function buildPublishDeps(program, options, store, commandOptions, stdinIs
     }
   };
 }
-function isInteractive(stdinIsTTY, env, global) {
-  return stdinIsTTY && !env.CI && !env.DROPTHIS_NON_INTERACTIVE && global.interactive !== false;
+function isInteractive(stdinIsTTY, env, global, outputMode) {
+  if (outputMode !== "human") return false;
+  return stdinIsTTY && !isCiEnv(env) && !env.DROPTHIS_NON_INTERACTIVE && global.interactive !== false;
 }
 function globalOptions(program, commandOptions) {
   const opts = program.opts();
@@ -4548,11 +4760,29 @@ function writeUsageErrorEnvelope(input) {
   }
   return 2;
 }
+function writeCredentialStorageError(input) {
+  const nextAction = "Set DROPTHIS_API_KEY, or re-run with --insecure-store (or DROPTHIS_INSECURE_STORE=1) to use a plaintext credential file instead of the OS keyring.";
+  if (input.json) {
+    input.stderr(
+      `${JSON.stringify(errorEnvelope("credential_storage_unavailable", input.message, nextAction))}
+`
+    );
+  } else {
+    input.stderr(`${error(input.message)}
+`);
+    input.stderr(`${hint(nextAction)}
+`);
+  }
+  return exitCodeFor("credential_storage_unavailable");
+}
+function wantsInsecureStore(argv, env) {
+  return argv.includes("--insecure-store") || Boolean(env.DROPTHIS_INSECURE_STORE);
+}
 function isCommanderError(err) {
   return typeof err === "object" && err !== null && typeof err.code === "string" && err.code.startsWith("commander.");
 }
 function wantsJson(argv) {
-  return argv.includes("--json") || argv.includes("--quiet") || argv.includes("-q") || process.env.CI === "true" || process.stdout.isTTY !== true;
+  return argv.includes("--json") || argv.includes("--quiet") || argv.includes("-q") || isCiEnv(process.env) || process.stdout.isTTY !== true;
 }
 var updateCache = readCache(updateCachePath());
 var showNotice = shouldShowNotice({
@@ -4572,11 +4802,26 @@ ${hint(notice)}
 `);
   }
 }
-buildProgram({ store: createCredentialStore() }).parseAsync(process.argv).finally(() => {
+buildProgram({
+  store: createCredentialStore({
+    insecure: wantsInsecureStore(
+      process.argv.slice(2),
+      process.env
+    )
+  })
+}).parseAsync(process.argv).finally(() => {
   if (showNotice && shouldRefresh(updateCache, /* @__PURE__ */ new Date())) {
     scheduleBackgroundRefresh(updateCachePath());
   }
 }).catch((error2) => {
+  if (isCredentialStorageError(error2)) {
+    process.exitCode = writeCredentialStorageError({
+      message: error2.message,
+      json: wantsJson(process.argv.slice(2)),
+      stderr: (value) => process.stderr.write(value)
+    });
+    return;
+  }
   if (isCommanderError(error2)) {
     if (error2.code === "commander.help" || error2.code === "commander.helpDisplayed" || error2.code === "commander.version") {
       process.exitCode = 0;
@@ -4594,6 +4839,8 @@ buildProgram({ store: createCredentialStore() }).parseAsync(process.argv).finall
 });
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
+  wantsInsecureStore,
+  writeCredentialStorageError,
   writeUsageErrorEnvelope
 });
 //# sourceMappingURL=cli.cjs.map