@epilot/cli 0.1.3 → 0.1.5

package/README.md

@@ -16,7 +16,7 @@ npm install -g @epilot/cli   # scoped package (same thing)
 
 <!-- usage-help -->
 ```
-epilot v0.1.3 — CLI for epilot APIs
+epilot v0.1.5 — CLI for epilot APIs
 
 USAGE
   epilot <api> <operationId> [params...] [flags]
@@ -252,7 +252,23 @@ When running in a TTY without required arguments, the CLI prompts interactively:
 
 Disable with `--no-interactive` for CI/scripts.
 
-## Shell Completion
+## Shell Completions
+
+Tab completion for API names, operation IDs, and flags.
+
+```bash
+# Auto-install for your current shell
+epilot completion --install
+
+# Or install for a specific shell
+epilot completion --install bash
+epilot completion --install zsh
+epilot completion --install fish
+```
+
+This adds the completion script to your shell config (`~/.bashrc`, `~/.zshrc`, or `~/.config/fish/completions/epilot.fish`). Restart your shell or source the config file to activate.
+
+You can also set up completions manually:
 
 ```bash
 # Bash — add to ~/.bashrc
@@ -265,8 +281,6 @@ eval "$(epilot completion zsh)"
 epilot completion fish > ~/.config/fish/completions/epilot.fish
 ```
 
-Provides tab completion for API names, operation IDs, and flags.
-
 ## API Reference
 
 Full documentation with sample calls and responses for all APIs:

package/dist/{access-token-F2VH6TNQ.js → access-token-BDNU3ZFC.js}

@@ -1,11 +1,11 @@
 #!/usr/bin/env node
 import {
   callApi
-} from "./chunk-5CTRM3JQ.js";
+} from "./chunk-BJOXXFMA.js";
 import "./chunk-RSA7K5HB.js";
 import "./chunk-PDMWUCWD.js";
-import "./chunk-4VITQVW2.js";
-import "./chunk-TKZLQD2B.js";
+import "./chunk-HN4QDJOJ.js";
+import "./chunk-6RBLA5YE.js";
 
 // src/commands/apis/access-token.ts
 import { defineCommand } from "citty";

package/dist/{address-YBOAFFFH.js → address-ZCYZYRP4.js}

@@ -1,11 +1,11 @@
 #!/usr/bin/env node
 import {
   callApi
-} from "./chunk-5CTRM3JQ.js";
+} from "./chunk-BJOXXFMA.js";
 import "./chunk-RSA7K5HB.js";
 import "./chunk-PDMWUCWD.js";
-import "./chunk-4VITQVW2.js";
-import "./chunk-TKZLQD2B.js";
+import "./chunk-HN4QDJOJ.js";
+import "./chunk-6RBLA5YE.js";
 
 // src/commands/apis/address.ts
 import { defineCommand } from "citty";

package/dist/{address-suggestions-ITPRYJSF.js → address-suggestions-RP5N7NVQ.js}

@@ -1,11 +1,11 @@
 #!/usr/bin/env node
 import {
   callApi
-} from "./chunk-5CTRM3JQ.js";
+} from "./chunk-BJOXXFMA.js";
 import "./chunk-RSA7K5HB.js";
 import "./chunk-PDMWUCWD.js";
-import "./chunk-4VITQVW2.js";
-import "./chunk-TKZLQD2B.js";
+import "./chunk-HN4QDJOJ.js";
+import "./chunk-6RBLA5YE.js";
 
 // src/commands/apis/address-suggestions.ts
 import { defineCommand } from "citty";

package/dist/{ai-agents-EBWNYR5R.js → ai-agents-PLUGVZTI.js}

@@ -1,11 +1,11 @@
 #!/usr/bin/env node
 import {
   callApi
-} from "./chunk-5CTRM3JQ.js";
+} from "./chunk-BJOXXFMA.js";
 import "./chunk-RSA7K5HB.js";
 import "./chunk-PDMWUCWD.js";
-import "./chunk-4VITQVW2.js";
-import "./chunk-TKZLQD2B.js";
+import "./chunk-HN4QDJOJ.js";
+import "./chunk-6RBLA5YE.js";
 
 // src/commands/apis/ai-agents.ts
 import { defineCommand } from "citty";

package/dist/{app-WOAQAMSE.js → app-HZECIN6N.js}

@@ -1,11 +1,11 @@
 #!/usr/bin/env node
 import {
   callApi
-} from "./chunk-5CTRM3JQ.js";
+} from "./chunk-BJOXXFMA.js";
 import "./chunk-RSA7K5HB.js";
 import "./chunk-PDMWUCWD.js";
-import "./chunk-4VITQVW2.js";
-import "./chunk-TKZLQD2B.js";
+import "./chunk-HN4QDJOJ.js";
+import "./chunk-6RBLA5YE.js";
 
 // src/commands/apis/app.ts
 import { defineCommand } from "citty";

package/dist/{audit-logs-OAUUPKTJ.js → audit-logs-JWKGNHPP.js}

@@ -1,11 +1,11 @@
 #!/usr/bin/env node
 import {
   callApi
-} from "./chunk-5CTRM3JQ.js";
+} from "./chunk-BJOXXFMA.js";
 import "./chunk-RSA7K5HB.js";
 import "./chunk-PDMWUCWD.js";
-import "./chunk-4VITQVW2.js";
-import "./chunk-TKZLQD2B.js";
+import "./chunk-HN4QDJOJ.js";
+import "./chunk-6RBLA5YE.js";
 
 // src/commands/apis/audit-logs.ts
 import { defineCommand } from "citty";

package/dist/{auth-NEBRZ66K.js → auth-O5LQZAG7.js}

@@ -11,7 +11,7 @@ import {
   RED,
   RESET,
   YELLOW
-} from "./chunk-TKZLQD2B.js";
+} from "./chunk-6RBLA5YE.js";
 
 // src/commands/auth.ts
 import { defineCommand } from "citty";
@@ -21,8 +21,8 @@ var auth_default = defineCommand({
     description: "Manage authentication"
   },
   subCommands: {
-    login: () => import("./auth-login-QQBH7BVA.js").then((m) => m.default),
-    token: () => import("./auth-token-W6GXKHXB.js").then((m) => m.default),
+    login: () => import("./auth-login-NM74PQRP.js").then((m) => m.default),
+    token: () => import("./auth-token-VSNRXUBI.js").then((m) => m.default),
     logout: defineCommand({
       meta: { name: "logout", description: "Remove stored credentials" },
       run: () => {

package/dist/auth-login-NM74PQRP.js

@@ -0,0 +1,332 @@
+#!/usr/bin/env node
+import {
+  saveCredentials
+} from "./chunk-RSA7K5HB.js";
+import "./chunk-PDMWUCWD.js";
+import {
+  BOLD,
+  CYAN,
+  DIM,
+  GREEN,
+  RED,
+  RESET,
+  YELLOW
+} from "./chunk-6RBLA5YE.js";
+
+// src/commands/auth-login.ts
+import { defineCommand } from "citty";
+import { randomBytes } from "crypto";
+import { createServer } from "http";
+var auth_login_default = defineCommand({
+  meta: { name: "login", description: "Authenticate with epilot" },
+  args: {
+    token: { type: "string", description: "Manually provide a token instead of browser login" },
+    profile: { type: "string", description: "Save credentials to this profile" }
+  },
+  run: async ({ args }) => {
+    const profileName = args.profile || process.env.EPILOT_PROFILE;
+    if (args.token) {
+      saveCredentials({ token: args.token }, profileName);
+      const suffix = profileName ? ` to profile "${profileName}"` : "";
+      process.stdout.write(`${GREEN}Token saved${suffix}.${RESET}
+`);
+      return;
+    }
+    if (!process.stdin.isTTY) {
+      process.stderr.write(`${RED}Browser login requires an interactive terminal.${RESET}
+`);
+      process.stderr.write(
+        `Use ${BOLD}epilot auth login --token <token>${RESET} or ${BOLD}epilot auth token${RESET} instead.
+`
+      );
+      process.exit(1);
+    }
+    const token = await browserLogin(profileName);
+    if (token) {
+      process.stdout.write(`${GREEN}${BOLD}Login successful!${RESET}
+`);
+    } else {
+      process.stderr.write(`${RED}Login failed or was cancelled.${RESET}
+`);
+      process.exit(1);
+    }
+  }
+});
+var browserLogin = async (profileName) => {
+  const state = randomBytes(32).toString("hex");
+  const verificationCode = randomBytes(3).toString("hex").toUpperCase();
+  const suffix = profileName ? ` ${DIM}(profile: ${profileName})${RESET}` : "";
+  process.stdout.write(`
+${BOLD}epilot CLI Login${RESET}${suffix}
+
+`);
+  process.stdout.write("This will open your browser to authenticate with epilot.\n");
+  process.stdout.write("\n");
+  process.stdout.write(`  ${YELLOW}Verification code: ${BOLD}${verificationCode}${RESET}
+`);
+  process.stdout.write("\n");
+  process.stdout.write(`${DIM}Verify this code matches what is shown in your browser after login.${RESET}
+`);
+  process.stdout.write(`${DIM}This ensures you are logging into the correct CLI session.${RESET}
+`);
+  process.stdout.write("\n");
+  const { confirm } = await import("@inquirer/prompts");
+  const proceed = await confirm({ message: "Open browser to log in?", default: true });
+  if (!proceed) {
+    return null;
+  }
+  return new Promise((resolve) => {
+    let settled = false;
+    let timeoutId;
+    let tokenPromptController;
+    const done = (token) => {
+      if (settled) return;
+      settled = true;
+      clearTimeout(timeoutId);
+      tokenPromptController?.abort();
+      server.close();
+      resolve(token);
+    };
+    const onServerListening = async () => {
+      const address = server.address();
+      if (!address || typeof address === "string") {
+        done(null);
+        return;
+      }
+      const port = address.port;
+      const callbackUrl = `http://localhost:${port}/callback`;
+      const loginUrl = `https://portal.epilot.cloud/login?cli_callback=${encodeURIComponent(callbackUrl)}&state=${state}&code=${verificationCode}`;
+      process.stdout.write(`
+${DIM}Login URL: ${loginUrl}${RESET}
+
+`);
+      try {
+        const open = (await import("open")).default;
+        await open(loginUrl);
+        process.stdout.write(`${CYAN}Browser opened.${RESET} Waiting for authentication...
+`);
+      } catch {
+        process.stdout.write(`Could not open browser. Please visit this URL manually:
+
+  ${loginUrl}
+
+`);
+      }
+      process.stdout.write(`
+${DIM}Or paste a token manually:${RESET}
+`);
+      try {
+        const { password } = await import("@inquirer/prompts");
+        tokenPromptController = new AbortController();
+        const token = await password(
+          { message: "Token:", theme: { prefix: "" } },
+          { signal: tokenPromptController.signal }
+        );
+        if (token?.trim()) {
+          saveCredentials({ token: token.trim() }, profileName);
+          done(token.trim());
+        }
+      } catch {
+      }
+      timeoutId = setTimeout(
+        () => {
+          process.stderr.write(`
+${RED}Login timed out after 5 minutes.${RESET}
+`);
+          done(null);
+        },
+        5 * 60 * 1e3
+      );
+      timeoutId.unref();
+    };
+    const server = createServer((req, res) => {
+      const url = new URL(req.url, "http://localhost");
+      if (url.pathname === "/callback") {
+        const token = url.searchParams.get("token");
+        const returnedState = url.searchParams.get("state");
+        const orgId = url.searchParams.get("org_id");
+        const userId = url.searchParams.get("user_id");
+        const name = url.searchParams.get("name");
+        if (returnedState && returnedState !== state) {
+          res.writeHead(403, { "Content-Type": "text/html; charset=utf-8" });
+          res.end(
+            renderPage("Login Failed", "Invalid session. This request may not have originated from your CLI.", "error")
+          );
+          return;
+        }
+        if (!returnedState) {
+          process.stderr.write(
+            `${YELLOW}Warning: Login portal did not return state parameter. CSRF protection is not active.${RESET}
+`
+          );
+        }
+        if (token) {
+          saveCredentials(
+            {
+              token,
+              org_id: orgId ?? void 0,
+              user_id: userId ?? void 0,
+              name: name ?? void 0
+            },
+            profileName
+          );
+          res.writeHead(200, { "Content-Type": "text/html; charset=utf-8" });
+          res.end(
+            renderPage(
+              "Login Successful",
+              "You can close this tab and return to your terminal.",
+              "success",
+              verificationCode
+            )
+          );
+          done(token);
+        } else {
+          res.writeHead(400, { "Content-Type": "text/html; charset=utf-8" });
+          res.end(renderPage("Login Failed", "No token was received. Please try again.", "error"));
+          done(null);
+        }
+      } else {
+        res.writeHead(404);
+        res.end();
+      }
+    });
+    server.unref();
+    server.listen(0, () => {
+      onServerListening().catch(() => done(null));
+    });
+  });
+};
+var renderPage = (title, message, status, code) => {
+  const icon = status === "success" ? "\u2713" : "\u2715";
+  const iconBg = status === "success" ? "#e8f5e9" : "#ffeef0";
+  const iconColor = status === "success" ? "#2e7d32" : "#c62828";
+  const titleColor = status === "success" ? "#1b5e20" : "#b71c1c";
+  const codeBlock = code ? `
+      <div class="code-section">
+        <p class="code-label">Verification code</p>
+        <div class="code">${escapeHtml(code)}</div>
+      </div>` : "";
+  return `<!DOCTYPE html>
+<html lang="en">
+<head>
+  <meta charset="utf-8" />
+  <meta name="viewport" content="width=device-width, initial-scale=1" />
+  <title>${escapeHtml(title)} \u2014 epilot CLI</title>
+  <link href="https://fonts.googleapis.com/css2?family=Nunito+Sans:wght@400;600;700;900&display=swap" rel="stylesheet" />
+  <style>
+    * { margin: 0; padding: 0; box-sizing: border-box; }
+    body {
+      font-family: 'Nunito Sans', 'Helvetica Neue', Arial, sans-serif;
+      background: #f0f4f8;
+      color: #172b4d;
+      display: flex;
+      align-items: center;
+      justify-content: center;
+      min-height: 100vh;
+      padding: 2rem;
+    }
+    .card {
+      background: #fff;
+      border-radius: 24px;
+      box-shadow: 0 4px 24px rgba(0, 0, 0, 0.08);
+      padding: 3rem 2.5rem;
+      max-width: 420px;
+      width: 100%;
+      text-align: center;
+    }
+    .logo {
+      margin-bottom: 2rem;
+    }
+    .logo svg {
+      height: 32px;
+      width: auto;
+    }
+    .icon-circle {
+      width: 96px;
+      height: 96px;
+      border-radius: 50%;
+      background: ${iconBg};
+      display: flex;
+      align-items: center;
+      justify-content: center;
+      margin: 0 auto 1.5rem;
+    }
+    .icon {
+      font-size: 48px;
+      color: ${iconColor};
+      line-height: 1;
+    }
+    h1 {
+      font-size: 28px;
+      font-weight: 900;
+      color: ${titleColor};
+      margin-bottom: 0.5rem;
+    }
+    .message {
+      font-size: 16px;
+      color: #5e6c84;
+      line-height: 1.5;
+      margin-bottom: 1.5rem;
+    }
+    .code-section {
+      margin: 1.5rem 0;
+    }
+    .code-label {
+      font-size: 13px;
+      color: #8993a4;
+      margin-bottom: 0.5rem;
+      text-transform: uppercase;
+      letter-spacing: 0.05em;
+    }
+    .code {
+      font-family: 'SF Mono', 'Fira Code', Menlo, Consolas, monospace;
+      font-size: 28px;
+      font-weight: 700;
+      letter-spacing: 0.25em;
+      color: #172b4d;
+      background: #f4f5f7;
+      border: 2px solid #dfe1e6;
+      border-radius: 12px;
+      padding: 0.75rem 1.5rem;
+      display: inline-block;
+    }
+    .footer {
+      font-size: 13px;
+      color: #8993a4;
+      margin-top: 1.5rem;
+    }
+    .footer a {
+      color: #005eb4;
+      text-decoration: none;
+    }
+  </style>
+</head>
+<body>
+  <div class="card">
+    <div class="logo">
+      <svg viewBox="0 0 552 138" fill="none" xmlns="http://www.w3.org/2000/svg">
+        <path d="M71.19 95.55c-12.85 0-24.72-5.46-33.46-14.97l-.41-.45-19.59 16.08.45.52C30.37 110.64 49.8 120 71.19 120c34.26 0 59.25-24.7 59.25-58.76h-25.53c0 20.42-14.32 34.31-33.72 34.31Z" fill="#005EB4"/>
+        <path d="M71.19 36.42c13.56 0 24.8 5.32 33.36 15.04l.41.46 19.52-16.15-.44-.52C111.8 21.27 92.34 12 71.19 12 36.41 12 12 36.7 12 70.63h25.53c0-20.3 14.32-34.21 33.66-34.21Z" fill="#005EB4"/>
+        <path d="M190.05 96.74V76.2h38.82V58.01h-38.82V42.44h43.48V24.04h-64.12v91.32h66.46V96.74h-45.82Z" fill="#005EB4"/>
+        <path d="M287.9 45.04c-6.53 0-12.37 1.73-17.36 5.15V24.04h-20v91.32h20v-4.3c4.99 3.63 10.96 5.49 17.75 5.49 18.74 0 33.01-15.58 33.01-36.09 0-20.25-14.54-35.42-33.4-35.42Zm-2.53 53.5c-9.62 0-16.63-7.52-16.63-17.86 0-10.07 7-17.53 16.29-17.53 9.62 0 16.63 7.46 16.63 17.53 0 10.34-7.01 17.86-16.29 17.86Z" fill="#005EB4"/>
+        <path d="M335.35 24.04h20.64v91.32h-20.64V24.04Z" fill="#005EB4"/>
+        <path d="M397.25 45.04c-20.78 0-36.74 15.37-36.74 35.42 0 20.32 15.96 36.09 36.39 36.09 20.78 0 36.74-15.5 36.74-35.82 0-20.45-15.97-35.69-36.39-35.69Zm-.18 53.5c-9.48 0-16.11-7.52-16.11-18.28 0-10.14 6.86-17.25 16.65-17.25 9.41 0 16.04 7.11 16.04 17.25 0 10.76-6.86 18.28-16.58 18.28Z" fill="#005EB4"/>
+        <path d="M460.2 62.87v-16.4h-13.06v68.89h20.64V79.07c0-9.35 5.73-14.7 14.18-14.7h6.53V45.04h-4.62c-10.3 0-18.68 5.73-23.67 17.83Z" fill="#005EB4"/>
+        <circle cx="526" cy="90" r="14" fill="#FF7043"/>
+      </svg>
+    </div>
+    <div class="icon-circle">
+      <span class="icon">${icon}</span>
+    </div>
+    <h1>${escapeHtml(title)}</h1>
+    <p class="message">${escapeHtml(message)}</p>
+    ${codeBlock}
+    <p class="footer">Powered by <a href="https://epilot.cloud" target="_blank" rel="noopener">epilot</a></p>
+  </div>
+</body>
+</html>`;
+};
+var escapeHtml = (s) => s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;");
+export {
+  auth_login_default as default
+};

package/dist/{auth-token-W6GXKHXB.js → auth-token-VSNRXUBI.js}

@@ -8,7 +8,7 @@ import {
   GREEN,
   RED,
   RESET
-} from "./chunk-TKZLQD2B.js";
+} from "./chunk-6RBLA5YE.js";
 
 // src/commands/auth-token.ts
 import { defineCommand } from "citty";

package/dist/{automation-52ONEM6D.js → automation-73BC4PYK.js}

@@ -1,11 +1,11 @@
 #!/usr/bin/env node
 import {
   callApi
-} from "./chunk-5CTRM3JQ.js";
+} from "./chunk-BJOXXFMA.js";
 import "./chunk-RSA7K5HB.js";
 import "./chunk-PDMWUCWD.js";
-import "./chunk-4VITQVW2.js";
-import "./chunk-TKZLQD2B.js";
+import "./chunk-HN4QDJOJ.js";
+import "./chunk-6RBLA5YE.js";
 
 // src/commands/apis/automation.ts
 import { defineCommand } from "citty";

package/dist/{billing-2RED3OVH.js → billing-GQDSK4H2.js}

@@ -1,11 +1,11 @@
 #!/usr/bin/env node
 import {
   callApi
-} from "./chunk-5CTRM3JQ.js";
+} from "./chunk-BJOXXFMA.js";
 import "./chunk-RSA7K5HB.js";
 import "./chunk-PDMWUCWD.js";
-import "./chunk-4VITQVW2.js";
-import "./chunk-TKZLQD2B.js";
+import "./chunk-HN4QDJOJ.js";
+import "./chunk-6RBLA5YE.js";
 
 // src/commands/apis/billing.ts
 import { defineCommand } from "citty";