@framedash/cli 0.1.1 → 0.1.3

package/README.md

@@ -6,22 +6,52 @@ Framedash CLI tool for CI/CD pipelines, analytics queries, and coding agent inte
 
 | Command | Description |
 |---------|-------------|
-| `framedash auth` | Authenticate with API key |
+| `framedash login` | Sign in via the browser (interactive OAuth; not for CI) |
+| `framedash logout` | Revoke and remove a stored browser login |
+| `framedash auth` | Verify credentials, show their source, and list projects |
 | `framedash query` | Run SQL analytics queries against ClickHouse |
 | `framedash dashboard` | Fetch dashboard KPI summary |
 | `framedash retention` | Fetch retention cohort data |
 | `framedash funnel` | Fetch funnel conversion data |
+| `framedash builds` | List builds seen for the project (for `perf-diff`) |
+| `framedash perf-diff` | Compare two builds and gate CI on a perf regression |
+| `framedash run-profile-test` | Run a profiling build, wait for ingest, then gate on a regression |
 | `framedash alerts` | Manage alert rules and channels |
 | `framedash maps` | List and manage map overlays |
+| `framedash threshold-profiles` | List threshold profiles (perf budgets for alerts) |
 | `framedash content` | Manage content registry entries |
 | `framedash status` | Check project ingestion status |
 | `framedash map-capture` | Upload captured map images |
 
-## Environment
+`framedash alerts create` requires an existing map and threshold profile: pass
+their UUIDs via `--map-id` and `--threshold-profile-id`. Discover those UUIDs
+without opening the dashboard by running `framedash maps list` and
+`framedash threshold-profiles list`.
 
-API commands require an API key from `--api-key-file` (which supports `-` for
-piped stdin), `--api-key`, or `FRAMEDASH_API_KEY`. Prefer files or piped stdin
-over `--api-key` for local runs so raw keys do not appear in shell history.
+## Authentication
+
+Two credential types are supported:
+
+- API keys (recommended for CI and any non-interactive use): pass via
+  `--api-key-file` (supports `-` for piped stdin), `--api-key`, or the
+  `FRAMEDASH_API_KEY` environment variable. Prefer files or piped stdin over
+  `--api-key` for local runs so raw keys do not appear in shell history.
+- Interactive browser login: `framedash login` runs an OAuth 2.1
+  authorization-code + PKCE flow against the Framedash authorization server
+  (loopback redirect on `127.0.0.1`). Tokens are stored per base-URL origin in
+  `$XDG_CONFIG_HOME/framedash/credentials.json` (default
+  `~/.config/framedash/credentials.json`; the same `~/.config` path is used on
+  Windows) and refreshed automatically, including refresh-token rotation.
+  `framedash logout` revokes the session server-side (best effort) and removes
+  the stored tokens; `framedash logout --all` clears every stored login.
+
+Precedence: `--api-key` > `--api-key-file` > `FRAMEDASH_API_KEY` > stored
+OAuth login for the resolved base URL. `framedash auth` reports which source
+is active.
+
+CI/non-interactive environments should keep using `FRAMEDASH_API_KEY` with a
+project API key: `framedash login` requires a browser and stores per-user
+refresh tokens, neither of which fits ephemeral CI runners.
 
 Project-scoped commands such as `dashboard` also require a project ID from
 `--project-id` or `FRAMEDASH_PROJECT_ID`. The `auth` command only requires an
@@ -56,6 +86,33 @@ node . dashboard --api-key-file ../../framedash.key --format table
 node . dashboard --api-key-file ../../framedash.key --format csv
 ```
 
+## CI performance gating
+
+`run-profile-test` ties the SDK's automated-session API to the `perf-diff` gate
+into a single CI step. It exports the `FRAMEDASH_*` session contract, launches
+your profiling build, waits for its performance data to ingest, then fails the
+job on a build-over-build regression:
+
+```bash
+framedash run-profile-test \
+  --command "./Build/Game.exe -nullrhi -ExecCmds='Automation RunTest Perf'" \
+  --scenario nightly --baseline "$BASE_SHA" --threshold 5 --fail-on-regression
+```
+
+The launched command inherits `FRAMEDASH_BUILD_ID`, `FRAMEDASH_GIT_BRANCH`,
+`FRAMEDASH_GIT_COMMIT`, and `FRAMEDASH_TEST_SCENARIO`; an SDK that calls
+`BeginAutomatedSessionFromEnvironment()` stamps them onto every event with no
+in-game code change. The build id (defaulting to the git commit) becomes the
+`perf-diff` candidate. Because the build id reaches the game only through the
+exported `FRAMEDASH_BUILD_ID`, a build that hardcodes its SDK build id will never
+match the awaited build and the ingest wait will time out.
+
+The launched process is bounded by `--command-timeout` (default 1800s, `0`
+disables): if the game does not exit on its own, its whole process tree is killed
+and the run fails without gating -- so a non-self-quitting build cannot hang the
+CI job forever. Run `framedash run-profile-test --help` for all options, or use
+`framedash builds` / `framedash perf-diff` to drive the steps manually.
+
 ## Development
 
 Run these commands from `packages/cli`:

package/dist/commands/alerts.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"alerts.d.ts","sourceRoot":"","sources":["../../src/commands/alerts.ts"],"names":[],"mappings":"AAmCA,eAAO,MAAM,MAAM,mCAKjB,CAAC"}
+{"version":3,"file":"alerts.d.ts","sourceRoot":"","sources":["../../src/commands/alerts.ts"],"names":[],"mappings":"AAoCA,eAAO,MAAM,MAAM,mCAKjB,CAAC"}

package/dist/commands/alerts.js

@@ -19,8 +19,9 @@ Create a new alert rule.
 
 Required:
   --name <name>                    Alert rule name
-  --map-id <uuid>                  Map ID
+  --map-id <uuid>                  Map ID (list IDs with 'framedash maps list')
   --threshold-profile-id <uuid>    Threshold profile ID
+                                   (list IDs with 'framedash threshold-profiles list')
   --metric <metric>                Metric name
   --threshold-level <level>        Threshold level
   --fail-percentage <n>            Failure percentage (0-100)

package/dist/commands/alerts.js.map

@@ -1 +1 @@
-{"version":3,"file":"alerts.js","sourceRoot":"","sources":["../../src/commands/alerts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACjE,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAEpE,MAAM,IAAI,GAAG;;;;;;;;;;0DAU6C,CAAC;AAE3D,MAAM,WAAW,GAAG;;;;;;;;;;;;;;;;8EAgB0D,CAAC;AAE/E,MAAM,CAAC,MAAM,MAAM,GAAG,eAAe,CAAC,QAAQ,EAAE,IAAI,EAAE;IACrD,IAAI,EAAE,UAAU;IAChB,MAAM,EAAE,YAAY;IACpB,MAAM,EAAE,YAAY;IACpB,MAAM,EAAE,YAAY;CACpB,CAAC,CAAC;AAEH,KAAK,UAAU,UAAU,CAAC,IAAc;IACvC,MAAM,UAAU,CACf,EAAE,IAAI,EAAE,IAAI,EAAE,yEAAyE,EAAE,EACzF,KAAK,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE;QAC5B,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC5D,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IACxC,CAAC,CACD,CAAC;AACH,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,IAAc;IACzC,MAAM,UAAU,CACf;QACC,IAAI;QACJ,IAAI,EAAE,WAAW;QACjB,OAAO,EAAE;YACR,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YACxB,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAC5B,sBAAsB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAC1C,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAC1B,iBAAiB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YACrC,iBAAiB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YACrC,iBAAiB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YACrC,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAC/B,kBAAkB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YACtC,aAAa,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;SACjC;KACD,EACD,KAAK,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE;QACpC,MAAM,QAAQ,GAAG;YAChB,MAAM;YACN,QAAQ;YACR,sBAAsB;YACtB,QAAQ;YACR,iBAAiB;YACjB,iBAAiB;YACjB,iBAAiB;YACjB,WAAW;YACX,kBAAkB;SACT,CAAC;QAEX,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;YAC7B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;gBACnB,KAAK,CAAC,KAAK,IAAI,cAAc,CAAC,CAAC;gBAC/B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACjB,CAAC;QACF,CAAC;QAED,MAAM,IAAI,GAA4B;YACrC,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC;YACvB,kBAAkB,EAAE,MAAM,CAAC,sBAAsB,CAAC;YAClD,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,cAAc,EAAE,MAAM,CAAC,iBAAiB,CAAC;YACzC,cAAc,EAAE,WAAW,CAAC,MAAM,CAAC,iBAAiB,CAAW,EAAE,iBAAiB,CAAC;YACnF,cAAc,EAAE,gBAAgB,CAAC,MAAM,CAAC,iBAAiB,CAAW,EAAE,iBAAiB,CAAC;YACxF,QAAQ,EAAE,gBAAgB,CAAC,MAAM,CAAC,WAAW,CAAW,EAAE,WAAW,CAAC;YACtE,eAAe,EAAE,gBAAgB,CAAC,MAAM,CAAC,kBAAkB,CAAW,EAAE,kBAAkB,CAAC;SAC3F,CAAC;QAEF,IAAI,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC;YAC3B,IAAI,CAAC,UAAU,GAAG,eAAe,CAAC,MAAM,CAAC,aAAa,CAAW,CAAC,CAAC;QACpE,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,CAAC;QACnE,OAAO,CAAC,oBAAoB,CAAC,CAAC;QAC9B,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IACxC,CAAC,CACD,CAAC;AACH,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,IAAc;IACzC,MAAM,UAAU,CACf;QACC,IAAI;QACJ,IAAI,EAAE,yGAAyG;QAC/G,OAAO,EAAE;YACR,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YACxB,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAC/B,aAAa,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YACjC,iBAAiB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YACrC,iBAAiB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YACrC,kBAAkB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;SACtC;QACD,gBAAgB,EAAE,IAAI;KACtB,EACD,KAAK,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE,EAAE;QACjD,MAAM,OAAO,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;QAC/B,IAAI,CAAC,OAAO,EAAE,CAAC;YACd,KAAK,CAAC,0DAA0D,CAAC,CAAC;YAClE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjB,CAAC;QAED,MAAM,IAAI,GAA4B,EAAE,CAAC;QACzC,IAAI,MAAM,CAAC,IAAI;YAAE,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;QACzC,IAAI,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC;YACzB,MAAM,CAAC,GAAG,MAAM,CAAC,WAAW,CAAW,CAAC;YACxC,IAAI,CAAC,KAAK,MAAM,IAAI,CAAC,KAAK,OAAO,EAAE,CAAC;gBACnC,KAAK,CAAC,+CAA+C,CAAC,EAAE,CAAC,CAAC;gBAC1D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACjB,CAAC;YACD,IAAI,CAAC,QAAQ,GAAG,CAAC,KAAK,MAAM,CAAC;QAC9B,CAAC;QACD,IAAI,MAAM,CAAC,aAAa,CAAC;YAAE,IAAI,CAAC,UAAU,GAAG,eAAe,CAAC,MAAM,CAAC,aAAa,CAAW,CAAC,CAAC;QAC9F,IAAI,MAAM,CAAC,iBAAiB,CAAC;YAC5B,IAAI,CAAC,cAAc,GAAG,WAAW,CAAC,MAAM,CAAC,iBAAiB,CAAW,EAAE,iBAAiB,CAAC,CAAC;QAC3F,IAAI,MAAM,CAAC,iBAAiB,CAAC;YAC5B,IAAI,CAAC,cAAc,GAAG,gBAAgB,CACrC,MAAM,CAAC,iBAAiB,CAAW,EACnC,iBAAiB,CACjB,CAAC;QACH,IAAI,MAAM,CAAC,kBAAkB,CAAC;YAC7B,IAAI,CAAC,eAAe,GAAG,gBAAgB,CACtC,MAAM,CAAC,kBAAkB,CAAW,EACpC,kBAAkB,CAClB,CAAC;QAEH,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACpC,KAAK,CAAC,0CAA0C,CAAC,CAAC;YAClD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjB,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,KAAK,CAC9B,MAAM,CAAC,WAAW,CAAC,UAAU,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAC,EAC3D,IAAI,CACJ,CAAC;QACF,OAAO,CAAC,oBAAoB,CAAC,CAAC;QAC9B,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IACxC,CAAC,CACD,CAAC;AACH,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,IAAc;IACzC,MAAM,UAAU,CACf;QACC,IAAI;QACJ,IAAI,EAAE,4DAA4D;QAClE,gBAAgB,EAAE,IAAI;KACtB,EACD,KAAK,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE,EAAE;QACjC,MAAM,OAAO,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;QAC/B,IAAI,CAAC,OAAO,EAAE,CAAC;YACd,KAAK,CAAC,0DAA0D,CAAC,CAAC;YAClE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjB,CAAC;QAED,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,UAAU,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;QACjF,OAAO,CAAC,cAAc,OAAO,UAAU,CAAC,CAAC;IAC1C,CAAC,CACD,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,GAAW;IACnC,MAAM,GAAG,GAAG,GAAG;SACb,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,OAAO,CAAC,CAAC;IAClB,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,KAAK,CAAC,4CAA4C,CAAC,CAAC;QACpD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACjB,CAAC;IACD,OAAO,GAAG,CAAC;AACZ,CAAC"}
+{"version":3,"file":"alerts.js","sourceRoot":"","sources":["../../src/commands/alerts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACjE,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAEpE,MAAM,IAAI,GAAG;;;;;;;;;;0DAU6C,CAAC;AAE3D,MAAM,WAAW,GAAG;;;;;;;;;;;;;;;;;8EAiB0D,CAAC;AAE/E,MAAM,CAAC,MAAM,MAAM,GAAG,eAAe,CAAC,QAAQ,EAAE,IAAI,EAAE;IACrD,IAAI,EAAE,UAAU;IAChB,MAAM,EAAE,YAAY;IACpB,MAAM,EAAE,YAAY;IACpB,MAAM,EAAE,YAAY;CACpB,CAAC,CAAC;AAEH,KAAK,UAAU,UAAU,CAAC,IAAc;IACvC,MAAM,UAAU,CACf,EAAE,IAAI,EAAE,IAAI,EAAE,yEAAyE,EAAE,EACzF,KAAK,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE;QAC5B,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC5D,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IACxC,CAAC,CACD,CAAC;AACH,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,IAAc;IACzC,MAAM,UAAU,CACf;QACC,IAAI;QACJ,IAAI,EAAE,WAAW;QACjB,OAAO,EAAE;YACR,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YACxB,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAC5B,sBAAsB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAC1C,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAC1B,iBAAiB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YACrC,iBAAiB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YACrC,iBAAiB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YACrC,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAC/B,kBAAkB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YACtC,aAAa,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;SACjC;KACD,EACD,KAAK,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE;QACpC,MAAM,QAAQ,GAAG;YAChB,MAAM;YACN,QAAQ;YACR,sBAAsB;YACtB,QAAQ;YACR,iBAAiB;YACjB,iBAAiB;YACjB,iBAAiB;YACjB,WAAW;YACX,kBAAkB;SACT,CAAC;QAEX,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;YAC7B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;gBACnB,KAAK,CAAC,KAAK,IAAI,cAAc,CAAC,CAAC;gBAC/B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACjB,CAAC;QACF,CAAC;QAED,MAAM,IAAI,GAA4B;YACrC,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC;YACvB,kBAAkB,EAAE,MAAM,CAAC,sBAAsB,CAAC;YAClD,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,cAAc,EAAE,MAAM,CAAC,iBAAiB,CAAC;YACzC,cAAc,EAAE,WAAW,CAAC,MAAM,CAAC,iBAAiB,CAAW,EAAE,iBAAiB,CAAC;YACnF,cAAc,EAAE,gBAAgB,CAAC,MAAM,CAAC,iBAAiB,CAAW,EAAE,iBAAiB,CAAC;YACxF,QAAQ,EAAE,gBAAgB,CAAC,MAAM,CAAC,WAAW,CAAW,EAAE,WAAW,CAAC;YACtE,eAAe,EAAE,gBAAgB,CAAC,MAAM,CAAC,kBAAkB,CAAW,EAAE,kBAAkB,CAAC;SAC3F,CAAC;QAEF,IAAI,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC;YAC3B,IAAI,CAAC,UAAU,GAAG,eAAe,CAAC,MAAM,CAAC,aAAa,CAAW,CAAC,CAAC;QACpE,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,CAAC;QACnE,OAAO,CAAC,oBAAoB,CAAC,CAAC;QAC9B,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IACxC,CAAC,CACD,CAAC;AACH,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,IAAc;IACzC,MAAM,UAAU,CACf;QACC,IAAI;QACJ,IAAI,EAAE,yGAAyG;QAC/G,OAAO,EAAE;YACR,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YACxB,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAC/B,aAAa,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YACjC,iBAAiB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YACrC,iBAAiB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YACrC,kBAAkB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;SACtC;QACD,gBAAgB,EAAE,IAAI;KACtB,EACD,KAAK,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE,EAAE;QACjD,MAAM,OAAO,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;QAC/B,IAAI,CAAC,OAAO,EAAE,CAAC;YACd,KAAK,CAAC,0DAA0D,CAAC,CAAC;YAClE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjB,CAAC;QAED,MAAM,IAAI,GAA4B,EAAE,CAAC;QACzC,IAAI,MAAM,CAAC,IAAI;YAAE,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;QACzC,IAAI,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC;YACzB,MAAM,CAAC,GAAG,MAAM,CAAC,WAAW,CAAW,CAAC;YACxC,IAAI,CAAC,KAAK,MAAM,IAAI,CAAC,KAAK,OAAO,EAAE,CAAC;gBACnC,KAAK,CAAC,+CAA+C,CAAC,EAAE,CAAC,CAAC;gBAC1D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACjB,CAAC;YACD,IAAI,CAAC,QAAQ,GAAG,CAAC,KAAK,MAAM,CAAC;QAC9B,CAAC;QACD,IAAI,MAAM,CAAC,aAAa,CAAC;YAAE,IAAI,CAAC,UAAU,GAAG,eAAe,CAAC,MAAM,CAAC,aAAa,CAAW,CAAC,CAAC;QAC9F,IAAI,MAAM,CAAC,iBAAiB,CAAC;YAC5B,IAAI,CAAC,cAAc,GAAG,WAAW,CAAC,MAAM,CAAC,iBAAiB,CAAW,EAAE,iBAAiB,CAAC,CAAC;QAC3F,IAAI,MAAM,CAAC,iBAAiB,CAAC;YAC5B,IAAI,CAAC,cAAc,GAAG,gBAAgB,CACrC,MAAM,CAAC,iBAAiB,CAAW,EACnC,iBAAiB,CACjB,CAAC;QACH,IAAI,MAAM,CAAC,kBAAkB,CAAC;YAC7B,IAAI,CAAC,eAAe,GAAG,gBAAgB,CACtC,MAAM,CAAC,kBAAkB,CAAW,EACpC,kBAAkB,CAClB,CAAC;QAEH,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACpC,KAAK,CAAC,0CAA0C,CAAC,CAAC;YAClD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjB,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,KAAK,CAC9B,MAAM,CAAC,WAAW,CAAC,UAAU,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAC,EAC3D,IAAI,CACJ,CAAC;QACF,OAAO,CAAC,oBAAoB,CAAC,CAAC;QAC9B,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IACxC,CAAC,CACD,CAAC;AACH,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,IAAc;IACzC,MAAM,UAAU,CACf;QACC,IAAI;QACJ,IAAI,EAAE,4DAA4D;QAClE,gBAAgB,EAAE,IAAI;KACtB,EACD,KAAK,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE,EAAE;QACjC,MAAM,OAAO,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;QAC/B,IAAI,CAAC,OAAO,EAAE,CAAC;YACd,KAAK,CAAC,0DAA0D,CAAC,CAAC;YAClE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjB,CAAC;QAED,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,UAAU,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;QACjF,OAAO,CAAC,cAAc,OAAO,UAAU,CAAC,CAAC;IAC1C,CAAC,CACD,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,GAAW;IACnC,MAAM,GAAG,GAAG,GAAG;SACb,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,OAAO,CAAC,CAAC;IAClB,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,KAAK,CAAC,4CAA4C,CAAC,CAAC;QACpD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACjB,CAAC;IACD,OAAO,GAAG,CAAC;AACZ,CAAC"}

package/dist/commands/auth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/commands/auth.ts"],"names":[],"mappings":"AAIA,wBAAsB,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAMxD"}
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/commands/auth.ts"],"names":[],"mappings":"AA0BA,wBAAsB,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAOxD"}

package/dist/commands/auth.js

@@ -1,19 +1,42 @@
 import { formatOutput } from "../lib/formatters.js";
 import { log, success } from "../lib/logger.js";
 import { runCommand } from "../lib/run-command.js";
+/**
+ * Human-readable description of the active credential source. For a stored
+ * OAuth login this shows scope and expiry ONLY -- never token material.
+ */
+function describeCredential(credential) {
+    if (credential.kind === "api-key") {
+        switch (credential.source) {
+            case "flag":
+                return "API key from --api-key flag";
+            case "file":
+                return "API key from --api-key-file";
+            case "env":
+                return "API key from FRAMEDASH_API_KEY env";
+        }
+    }
+    const expires = new Date(credential.entry.expires_at).toISOString();
+    return `stored OAuth login for ${credential.origin} (framedash login; scopes: ${credential.entry.scope || "unknown"}; access token expires: ${expires})`;
+}
 export async function auth(args) {
     await runCommand({ args, help: HELP, noProject: true }, async ({ client, config }) => {
         const projects = await client.get("/api/v1/projects");
-        success("API key is valid");
+        success(config.credential.kind === "api-key" ? "API key is valid" : "OAuth login is valid");
+        success(`Credential source: ${describeCredential(config.credential)}`);
         log(formatOutput(projects, config.format));
     });
 }
 const HELP = `Usage: framedash auth [options]
 
-Verify your API key and show the project bound to it.
+Verify your credentials and list the projects they can read. Also reports
+which credential source is active: --api-key flag, --api-key-file,
+FRAMEDASH_API_KEY env, or a stored OAuth login from 'framedash login'
+(API keys always take precedence over a stored login).
 
 Options:
   --api-key <key>        API key (or FRAMEDASH_API_KEY env)
+  --api-key-file <path>  Read the API key from a file ('-' for stdin)
   --base-url <url>       API base URL (default: https://app.framedash.dev)
   --format <fmt>         Output format: json, table, csv (default: json)
   -h, --help             Show help`;

package/dist/commands/auth.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../src/commands/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAChD,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAEnD,MAAM,CAAC,KAAK,UAAU,IAAI,CAAC,IAAc;IACxC,MAAM,UAAU,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE;QACpF,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,GAAG,CAAiC,kBAAkB,CAAC,CAAC;QACtF,OAAO,CAAC,kBAAkB,CAAC,CAAC;QAC5B,GAAG,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,IAAI,GAAG;;;;;;;;mCAQsB,CAAC"}
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../src/commands/auth.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAChD,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAEnD;;;GAGG;AACH,SAAS,kBAAkB,CAAC,UAAyB;IACpD,IAAI,UAAU,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QACnC,QAAQ,UAAU,CAAC,MAAM,EAAE,CAAC;YAC3B,KAAK,MAAM;gBACV,OAAO,6BAA6B,CAAC;YACtC,KAAK,MAAM;gBACV,OAAO,6BAA6B,CAAC;YACtC,KAAK,KAAK;gBACT,OAAO,oCAAoC,CAAC;QAC9C,CAAC;IACF,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE,CAAC;IACpE,OAAO,0BAA0B,UAAU,CAAC,MAAM,8BACjD,UAAU,CAAC,KAAK,CAAC,KAAK,IAAI,SAC3B,2BAA2B,OAAO,GAAG,CAAC;AACvC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,IAAI,CAAC,IAAc;IACxC,MAAM,UAAU,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE;QACpF,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,GAAG,CAAiC,kBAAkB,CAAC,CAAC;QACtF,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC;QAC5F,OAAO,CAAC,sBAAsB,kBAAkB,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QACvE,GAAG,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,IAAI,GAAG;;;;;;;;;;;;mCAYsB,CAAC"}

package/dist/commands/builds.d.ts

@@ -0,0 +1,2 @@
+export declare function builds(args: string[]): Promise<void>;
+//# sourceMappingURL=builds.d.ts.map

package/dist/commands/builds.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"builds.d.ts","sourceRoot":"","sources":["../../src/commands/builds.ts"],"names":[],"mappings":"AAKA,wBAAsB,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAgB1D"}

package/dist/commands/builds.js

@@ -0,0 +1,31 @@
+import { buildBuildsPath } from "@framedash/api-client";
+import { formatOutput } from "../lib/formatters.js";
+import { log } from "../lib/logger.js";
+import { runCommand } from "../lib/run-command.js";
+export async function builds(args) {
+    await runCommand({
+        args,
+        help: HELP,
+        options: {
+            days: { type: "string" },
+        },
+    }, async ({ client, config, values }) => {
+        const data = await client.get(client.projectPath(buildBuildsPath({ days: values.days })));
+        log(formatOutput(data, config.format));
+    });
+}
+const HELP = `Usage: framedash builds [options]
+
+List the builds seen for the project (newest first), so you can pick build IDs
+to compare with 'framedash perf-diff'. A build is any non-empty build_id that
+produced performance events in the window (set build_id from your CI, e.g. the
+git SHA, when initializing the SDK).
+
+Options:
+  --days <n>             Time period in days: 7, 14, 30, 90 (default: 30)
+  --api-key <key>        API key (or FRAMEDASH_API_KEY env)
+  --project-id <uuid>    Project ID (or FRAMEDASH_PROJECT_ID env)
+  --base-url <url>       API base URL (default: https://app.framedash.dev)
+  --format <fmt>         Output format: json, table, csv (default: json)
+  -h, --help             Show help`;
+//# sourceMappingURL=builds.js.map

package/dist/commands/builds.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"builds.js","sourceRoot":"","sources":["../../src/commands/builds.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EAAE,GAAG,EAAE,MAAM,kBAAkB,CAAC;AACvC,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAEnD,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,IAAc;IAC1C,MAAM,UAAU,CACf;QACC,IAAI;QACJ,IAAI,EAAE,IAAI;QACV,OAAO,EAAE;YACR,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;SACxB;KACD,EACD,KAAK,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE;QACpC,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,GAAG,CAC5B,MAAM,CAAC,WAAW,CAAC,eAAe,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAA0B,EAAE,CAAC,CAAC,CAChF,CAAC;QACF,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IACxC,CAAC,CACD,CAAC;AACH,CAAC;AAED,MAAM,IAAI,GAAG;;;;;;;;;;;;;mCAasB,CAAC"}

package/dist/commands/content.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"content.d.ts","sourceRoot":"","sources":["../../src/commands/content.ts"],"names":[],"mappings":"AAqBA,eAAO,MAAM,OAAO,mCAIlB,CAAC"}
+{"version":3,"file":"content.d.ts","sourceRoot":"","sources":["../../src/commands/content.ts"],"names":[],"mappings":"AAsBA,eAAO,MAAM,OAAO,mCAIlB,CAAC"}

package/dist/commands/content.js

@@ -1,4 +1,5 @@
 import { readFile } from "node:fs/promises";
+import { buildContentPath } from "@framedash/api-client";
 import { formatOutput } from "../lib/formatters.js";
 import { error, log, success } from "../lib/logger.js";
 import { runCommand, withSubcommands } from "../lib/run-command.js";
@@ -27,8 +28,7 @@ async function contentList(args) {
         help: "Usage: framedash content list [--type <content-type>] [--format json|table|csv] [global options]",
         options: { type: { type: "string" } },
     }, async ({ client, config, values }) => {
-        const params = values.type ? `?${new URLSearchParams({ type: values.type })}` : "";
-        const data = await client.get(`/api/v1/content${params}`);
+        const data = await client.get(buildContentPath({ type: values.type }));
         log(formatOutput(data, config.format));
     });
 }

package/dist/commands/content.js.map

@@ -1 +1 @@
-{"version":3,"file":"content.js","sourceRoot":"","sources":["../../src/commands/content.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAEpE,MAAM,IAAI,GAAG;;;;;;;;;2DAS8C,CAAC;AAE5D,MAAM,WAAW,GAAG;;;6DAGyC,CAAC;AAE9D,MAAM,CAAC,MAAM,OAAO,GAAG,eAAe,CAAC,SAAS,EAAE,IAAI,EAAE;IACvD,IAAI,EAAE,WAAW;IACjB,MAAM,EAAE,aAAa;IACrB,MAAM,EAAE,aAAa;CACrB,CAAC,CAAC;AAEH,KAAK,UAAU,WAAW,CAAC,IAAc;IACxC,MAAM,UAAU,CACf;QACC,IAAI;QACJ,IAAI,EAAE,kGAAkG;QACxG,OAAO,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;KACrC,EACD,KAAK,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE;QACpC,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,eAAe,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAc,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7F,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,kBAAkB,MAAM,EAAE,CAAC,CAAC;QAC1D,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IACxC,CAAC,CACD,CAAC;AACH,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,IAAc;IAC1C,MAAM,UAAU,CACf;QACC,IAAI;QACJ,IAAI,EAAE,8DAA8D;QACpE,gBAAgB,EAAE,IAAI;KACtB,EACD,KAAK,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE,EAAE;QACzC,MAAM,QAAQ,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;QAChC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACf,KAAK,CAAC,kEAAkE,CAAC,CAAC;YAC1E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjB,CAAC;QAED,IAAI,GAAW,CAAC;QAChB,IAAI,CAAC;YACJ,GAAG,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACzC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;YACjE,KAAK,CAAC,wBAAwB,QAAQ,KAAK,GAAG,GAAG,CAAC,CAAC;YACnD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjB,CAAC;QAED,IAAI,OAAgB,CAAC;QACrB,IAAI,CAAC;YACJ,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC3B,CAAC;QAAC,MAAM,CAAC;YACR,KAAK,CAAC,mBAAmB,CAAC,CAAC;YAC3B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjB,CAAC;QAED,iDAAiD;QACjD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;QAE/D,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,iBAAiB,EAAE,OAAO,CAAC,CAAC;QAC3D,OAAO,CAAC,kBAAkB,CAAC,CAAC;QAC5B,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IACxC,CAAC,CACD,CAAC;AACH,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,IAAc;IAC1C,MAAM,UAAU,CACf;QACC,IAAI;QACJ,IAAI,EAAE,WAAW;QACjB,OAAO,EAAE;YACR,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YACxB,YAAY,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;SAChC;QACD,gBAAgB,EAAE,IAAI;KACtB,EACD,KAAK,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE,EAAE;QACzC,MAAM,EAAE,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;QAC1B,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC;YACjD,KAAK,CAAC,kEAAkE,CAAC,CAAC;YAC1E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjB,CAAC;QACD,IAAI,EAAE,EAAE,CAAC;YACR,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;YAC3C,MAAM,MAAM,CAAC,MAAM,CAAC,mBAAmB,MAAM,EAAE,CAAC,CAAC;YACjD,OAAO,CAAC,iBAAiB,EAAE,UAAU,CAAC,CAAC;QACxC,CAAC;aAAM,IAAI,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC;YAChD,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;gBAClC,WAAW,EAAE,MAAM,CAAC,IAAc;gBAClC,SAAS,EAAE,MAAM,CAAC,YAAY,CAAW;aACzC,CAAC,CAAC;YACH,MAAM,MAAM,CAAC,MAAM,CAAC,mBAAmB,MAAM,EAAE,CAAC,CAAC;YACjD,OAAO,CAAC,uBAAuB,CAAC,CAAC;QAClC,CAAC;aAAM,CAAC;YACP,KAAK,CAAC,gDAAgD,CAAC,CAAC;YACxD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjB,CAAC;IACF,CAAC,CACD,CAAC;AACH,CAAC"}
+{"version":3,"file":"content.js","sourceRoot":"","sources":["../../src/commands/content.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAEpE,MAAM,IAAI,GAAG;;;;;;;;;2DAS8C,CAAC;AAE5D,MAAM,WAAW,GAAG;;;6DAGyC,CAAC;AAE9D,MAAM,CAAC,MAAM,OAAO,GAAG,eAAe,CAAC,SAAS,EAAE,IAAI,EAAE;IACvD,IAAI,EAAE,WAAW;IACjB,MAAM,EAAE,aAAa;IACrB,MAAM,EAAE,aAAa;CACrB,CAAC,CAAC;AAEH,KAAK,UAAU,WAAW,CAAC,IAAc;IACxC,MAAM,UAAU,CACf;QACC,IAAI;QACJ,IAAI,EAAE,kGAAkG;QACxG,OAAO,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;KACrC,EACD,KAAK,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE;QACpC,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,gBAAgB,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAA0B,EAAE,CAAC,CAAC,CAAC;QAC7F,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IACxC,CAAC,CACD,CAAC;AACH,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,IAAc;IAC1C,MAAM,UAAU,CACf;QACC,IAAI;QACJ,IAAI,EAAE,8DAA8D;QACpE,gBAAgB,EAAE,IAAI;KACtB,EACD,KAAK,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE,EAAE;QACzC,MAAM,QAAQ,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;QAChC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACf,KAAK,CAAC,kEAAkE,CAAC,CAAC;YAC1E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjB,CAAC;QAED,IAAI,GAAW,CAAC;QAChB,IAAI,CAAC;YACJ,GAAG,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACzC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;YACjE,KAAK,CAAC,wBAAwB,QAAQ,KAAK,GAAG,GAAG,CAAC,CAAC;YACnD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjB,CAAC;QAED,IAAI,OAAgB,CAAC;QACrB,IAAI,CAAC;YACJ,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC3B,CAAC;QAAC,MAAM,CAAC;YACR,KAAK,CAAC,mBAAmB,CAAC,CAAC;YAC3B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjB,CAAC;QAED,iDAAiD;QACjD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;QAE/D,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,iBAAiB,EAAE,OAAO,CAAC,CAAC;QAC3D,OAAO,CAAC,kBAAkB,CAAC,CAAC;QAC5B,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IACxC,CAAC,CACD,CAAC;AACH,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,IAAc;IAC1C,MAAM,UAAU,CACf;QACC,IAAI;QACJ,IAAI,EAAE,WAAW;QACjB,OAAO,EAAE;YACR,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YACxB,YAAY,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;SAChC;QACD,gBAAgB,EAAE,IAAI;KACtB,EACD,KAAK,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE,EAAE;QACzC,MAAM,EAAE,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;QAC1B,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC;YACjD,KAAK,CAAC,kEAAkE,CAAC,CAAC;YAC1E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjB,CAAC;QACD,IAAI,EAAE,EAAE,CAAC;YACR,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;YAC3C,MAAM,MAAM,CAAC,MAAM,CAAC,mBAAmB,MAAM,EAAE,CAAC,CAAC;YACjD,OAAO,CAAC,iBAAiB,EAAE,UAAU,CAAC,CAAC;QACxC,CAAC;aAAM,IAAI,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC;YAChD,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;gBAClC,WAAW,EAAE,MAAM,CAAC,IAAc;gBAClC,SAAS,EAAE,MAAM,CAAC,YAAY,CAAW;aACzC,CAAC,CAAC;YACH,MAAM,MAAM,CAAC,MAAM,CAAC,mBAAmB,MAAM,EAAE,CAAC,CAAC;YACjD,OAAO,CAAC,uBAAuB,CAAC,CAAC;QAClC,CAAC;aAAM,CAAC;YACP,KAAK,CAAC,gDAAgD,CAAC,CAAC;YACxD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjB,CAAC;IACF,CAAC,CACD,CAAC;AACH,CAAC"}

package/dist/commands/dashboard.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"dashboard.d.ts","sourceRoot":"","sources":["../../src/commands/dashboard.ts"],"names":[],"mappings":"AAIA,wBAAsB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAS7D"}
+{"version":3,"file":"dashboard.d.ts","sourceRoot":"","sources":["../../src/commands/dashboard.ts"],"names":[],"mappings":"AAKA,wBAAsB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAU7D"}

package/dist/commands/dashboard.js

@@ -1,10 +1,10 @@
+import { buildDashboardPath } from "@framedash/api-client";
 import { formatOutput } from "../lib/formatters.js";
 import { log } from "../lib/logger.js";
 import { runCommand } from "../lib/run-command.js";
 export async function dashboard(args) {
     await runCommand({ args, help: HELP, options: { days: { type: "string" } } }, async ({ client, config, values }) => {
-        const params = new URLSearchParams({ days: values.days ?? "30" });
-        const data = await client.get(client.projectPath(`dashboard?${params}`));
+        const data = await client.get(client.projectPath(buildDashboardPath({ days: values.days ?? "30" })));
         log(formatOutput(data, config.format));
     });
 }
@@ -13,7 +13,7 @@ const HELP = `Usage: framedash dashboard [options]
 Show project dashboard metrics.
 
 Options:
-  --days <n>             Time period in days: 1, 7, 14, 30 (default: 30)
+  --days <n>             Time period in days: 7, 14, 30, 90 (default: 30)
   --api-key <key>        API key (or FRAMEDASH_API_KEY env)
   --project-id <uuid>    Project ID (or FRAMEDASH_PROJECT_ID env)
   --base-url <url>       API base URL (default: https://app.framedash.dev)

package/dist/commands/dashboard.js.map

@@ -1 +1 @@
-{"version":3,"file":"dashboard.js","sourceRoot":"","sources":["../../src/commands/dashboard.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EAAE,GAAG,EAAE,MAAM,kBAAkB,CAAC;AACvC,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAEnD,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,IAAc;IAC7C,MAAM,UAAU,CACf,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,EAC3D,KAAK,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE;QACpC,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,EAAE,IAAI,EAAG,MAAM,CAAC,IAAe,IAAI,IAAI,EAAE,CAAC,CAAC;QAC9E,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,aAAa,MAAM,EAAE,CAAC,CAAC,CAAC;QACzE,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IACxC,CAAC,CACD,CAAC;AACH,CAAC;AAED,MAAM,IAAI,GAAG;;;;;;;;;;mCAUsB,CAAC"}
+{"version":3,"file":"dashboard.js","sourceRoot":"","sources":["../../src/commands/dashboard.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EAAE,GAAG,EAAE,MAAM,kBAAkB,CAAC;AACvC,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAEnD,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,IAAc;IAC7C,MAAM,UAAU,CACf,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,EAC3D,KAAK,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE;QACpC,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,GAAG,CAC5B,MAAM,CAAC,WAAW,CAAC,kBAAkB,CAAC,EAAE,IAAI,EAAG,MAAM,CAAC,IAAe,IAAI,IAAI,EAAE,CAAC,CAAC,CACjF,CAAC;QACF,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IACxC,CAAC,CACD,CAAC;AACH,CAAC;AAED,MAAM,IAAI,GAAG;;;;;;;;;;mCAUsB,CAAC"}

package/dist/commands/funnel.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"funnel.d.ts","sourceRoot":"","sources":["../../src/commands/funnel.ts"],"names":[],"mappings":"AAIA,wBAAsB,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CA0B1D"}
+{"version":3,"file":"funnel.d.ts","sourceRoot":"","sources":["../../src/commands/funnel.ts"],"names":[],"mappings":"AAKA,wBAAsB,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CA6B1D"}

package/dist/commands/funnel.js

@@ -1,3 +1,4 @@
+import { buildFunnelPath } from "@framedash/api-client";
 import { formatOutput } from "../lib/formatters.js";
 import { error, log } from "../lib/logger.js";
 import { runCommand } from "../lib/run-command.js";
@@ -15,13 +16,11 @@ export async function funnel(args) {
             error('--steps is required (comma-separated event names, e.g. "login,tutorial,purchase")');
             process.exit(1);
         }
-        const params = new URLSearchParams();
-        params.set("steps", values.steps);
-        if (values.days)
-            params.set("days", values.days);
-        if (values.window)
-            params.set("window", values.window);
-        const data = await client.get(client.projectPath(`funnels?${params}`));
+        const data = await client.get(client.projectPath(buildFunnelPath({
+            steps: values.steps,
+            days: values.days,
+            window: values.window,
+        })));
         log(formatOutput(data, config.format));
     });
 }
@@ -33,7 +32,7 @@ Required:
   --steps <events>       Comma-separated event names (2-8 steps)
 
 Options:
-  --days <n>             Time period in days: 1, 7, 14, 30 (default: 30)
+  --days <n>             Time period in days: 7, 14, 30, 90 (default: 30)
   --window <seconds>     Conversion window: 3600, 21600, 86400, 604800 (default: 86400)
   --api-key <key>        API key (or FRAMEDASH_API_KEY env)
   --project-id <uuid>    Project ID (or FRAMEDASH_PROJECT_ID env)

package/dist/commands/funnel.js.map

@@ -1 +1 @@
-{"version":3,"file":"funnel.js","sourceRoot":"","sources":["../../src/commands/funnel.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAEnD,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,IAAc;IAC1C,MAAM,UAAU,CACf;QACC,IAAI;QACJ,IAAI,EAAE,IAAI;QACV,OAAO,EAAE;YACR,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YACzB,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YACxB,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;SAC1B;KACD,EACD,KAAK,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE;QACpC,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YACnB,KAAK,CAAC,mFAAmF,CAAC,CAAC;YAC3F,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjB,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;QACrC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,KAAe,CAAC,CAAC;QAC5C,IAAI,MAAM,CAAC,IAAI;YAAE,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,IAAc,CAAC,CAAC;QAC3D,IAAI,MAAM,CAAC,MAAM;YAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAgB,CAAC,CAAC;QAEjE,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,WAAW,MAAM,EAAE,CAAC,CAAC,CAAC;QACvE,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IACxC,CAAC,CACD,CAAC;AACH,CAAC;AAED,MAAM,IAAI,GAAG;;;;;;;;;;;;;;mCAcsB,CAAC"}
+{"version":3,"file":"funnel.js","sourceRoot":"","sources":["../../src/commands/funnel.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAEnD,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,IAAc;IAC1C,MAAM,UAAU,CACf;QACC,IAAI;QACJ,IAAI,EAAE,IAAI;QACV,OAAO,EAAE;YACR,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YACzB,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YACxB,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;SAC1B;KACD,EACD,KAAK,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE;QACpC,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YACnB,KAAK,CAAC,mFAAmF,CAAC,CAAC;YAC3F,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjB,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,GAAG,CAC5B,MAAM,CAAC,WAAW,CACjB,eAAe,CAAC;YACf,KAAK,EAAE,MAAM,CAAC,KAAe;YAC7B,IAAI,EAAE,MAAM,CAAC,IAA0B;YACvC,MAAM,EAAE,MAAM,CAAC,MAA4B;SAC3C,CAAC,CACF,CACD,CAAC;QACF,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IACxC,CAAC,CACD,CAAC;AACH,CAAC;AAED,MAAM,IAAI,GAAG;;;;;;;;;;;;;;mCAcsB,CAAC"}

package/dist/commands/login.d.ts

@@ -0,0 +1,2 @@
+export declare function login(args: string[]): Promise<void>;
+//# sourceMappingURL=login.d.ts.map

package/dist/commands/login.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"login.d.ts","sourceRoot":"","sources":["../../src/commands/login.ts"],"names":[],"mappings":"AAwEA,wBAAsB,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAmFzD"}

package/dist/commands/login.js

@@ -0,0 +1,142 @@
+import { spawn } from "node:child_process";
+import { parseArgs } from "node:util";
+import { GLOBAL_OPTIONS, resolveBaseAndFormat } from "../lib/config.js";
+import { error, log, success } from "../lib/logger.js";
+import { startLoopbackServer } from "../lib/oauth/loopback-server.js";
+import { computeS256CodeChallenge, generateCodeVerifier, generateState, } from "../lib/oauth/pkce.js";
+import { CLI_OAUTH_CLIENT_ID, exchangeAuthorizationCode, revokeToken, toStoredEntry, } from "../lib/oauth/token-endpoint.js";
+import { credentialsFilePath, saveStoredEntry } from "../lib/oauth/token-store.js";
+const HELP = `Usage: framedash login [options]
+
+Sign in interactively via your browser (OAuth 2.1 authorization code + PKCE).
+Tokens are stored in ${"~"}/.config/framedash/credentials.json (honors
+XDG_CONFIG_HOME; the same path is used on Windows) and refreshed
+automatically. Commands use the stored login only when no API key is given
+(--api-key / --api-key-file / FRAMEDASH_API_KEY take precedence).
+
+For CI and other non-interactive use, do NOT use login: set the
+FRAMEDASH_API_KEY environment variable to a project API key instead.
+
+Options:
+  --scopes <scopes>      Space-delimited scopes to request
+                         (default: analytics:read)
+  --no-browser           Do not try to open the browser; print the URL only
+  --base-url <url>       API base URL (default: https://app.framedash.dev)
+  -h, --help             Show help`;
+/** Give the user five minutes to finish the browser consent. */
+const CALLBACK_TIMEOUT_MS = 5 * 60 * 1000;
+/** RFC 6749 scope tokens: printable ASCII except space, quote, backslash. */
+const SCOPE_RE = /^[\x21\x23-\x5B\x5D-\x7E]+$/;
+/**
+ * Best-effort system browser launch; the URL is always printed as fallback.
+ * Windows uses rundll32's FileProtocolHandler instead of `cmd /c start`
+ * because start parses `&` (which every authorize URL contains) as a shell
+ * operator unless escaped.
+ */
+function openBrowser(url) {
+    let command;
+    let args;
+    if (process.platform === "win32") {
+        command = "rundll32";
+        args = ["url.dll,FileProtocolHandler", url];
+    }
+    else if (process.platform === "darwin") {
+        command = "open";
+        args = [url];
+    }
+    else {
+        command = "xdg-open";
+        args = [url];
+    }
+    try {
+        const child = spawn(command, args, { stdio: "ignore", detached: true });
+        child.on("error", () => {
+            // Best effort: the printed URL is the fallback.
+        });
+        child.unref();
+    }
+    catch {
+        // Best effort only.
+    }
+}
+export async function login(args) {
+    const { values } = parseArgs({
+        args,
+        options: {
+            ...GLOBAL_OPTIONS,
+            scopes: { type: "string" },
+            "no-browser": { type: "boolean" },
+        },
+        allowPositionals: false,
+    });
+    if (values.help) {
+        log(HELP);
+        return;
+    }
+    const { baseUrl } = resolveBaseAndFormat(values);
+    const origin = new URL(baseUrl).origin;
+    // Normalize whitespace: trim, split on runs of any whitespace, and drop
+    // empty tokens, so "a  b" or tab-separated input works. An empty token
+    // list must fail explicitly ([].every() is vacuously true).
+    const scopeList = (values.scopes ?? "analytics:read").trim().split(/\s+/).filter(Boolean);
+    if (scopeList.length === 0 || !scopeList.every((scope) => SCOPE_RE.test(scope))) {
+        error(`Invalid --scopes value. Use space-delimited scopes, e.g. "analytics:read".`);
+        process.exit(1);
+    }
+    const scopes = scopeList.join(" ");
+    const codeVerifier = generateCodeVerifier();
+    const state = generateState();
+    const server = await startLoopbackServer(state);
+    try {
+        const authorizeUrl = new URL("/oauth/authorize", origin);
+        authorizeUrl.searchParams.set("response_type", "code");
+        authorizeUrl.searchParams.set("client_id", CLI_OAUTH_CLIENT_ID);
+        authorizeUrl.searchParams.set("redirect_uri", server.redirectUri);
+        authorizeUrl.searchParams.set("scope", scopes);
+        authorizeUrl.searchParams.set("state", state);
+        authorizeUrl.searchParams.set("code_challenge", computeS256CodeChallenge(codeVerifier));
+        authorizeUrl.searchParams.set("code_challenge_method", "S256");
+        log("Open this URL in your browser to sign in:");
+        log("");
+        log(`  ${authorizeUrl.toString()}`);
+        log("");
+        if (!values["no-browser"]) {
+            openBrowser(authorizeUrl.toString());
+        }
+        success("Waiting for the browser sign-in to complete (5 minute timeout)...");
+        const { code } = await server.waitForCallback(CALLBACK_TIMEOUT_MS);
+        const tokens = await exchangeAuthorizationCode(baseUrl, {
+            code,
+            codeVerifier,
+            redirectUri: server.redirectUri,
+        });
+        // Last-writer-wins: of two racing logins for the same origin, the later
+        // save is the one that sticks (see token-store.ts concurrency model).
+        const entry = toStoredEntry(tokens);
+        try {
+            await saveStoredEntry(origin, entry);
+        }
+        catch (err) {
+            // The exchange already minted a LIVE server-side grant, and we are
+            // about to discard the only refresh token that could disconnect it
+            // (ENOSPC/permissions on the save). Best-effort revoke so no orphaned
+            // grant lingers on the server, then surface the original error.
+            try {
+                await revokeToken(baseUrl, tokens.refresh_token);
+            }
+            catch {
+                // Best effort: the user can also revoke from Connected apps.
+            }
+            throw err;
+        }
+        success(`Logged in to ${origin}`);
+        // Scope + expiry only -- NEVER print token values.
+        log(`Scopes: ${entry.scope || "(none reported)"}`);
+        log(`Access token expires: ${new Date(entry.expires_at).toISOString()}`);
+        log(`Credentials stored in: ${credentialsFilePath()}`);
+    }
+    finally {
+        await server.close();
+    }
+}
+//# sourceMappingURL=login.js.map

package/dist/commands/login.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"login.js","sourceRoot":"","sources":["../../src/commands/login.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,cAAc,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AACxE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AACtE,OAAO,EACN,wBAAwB,EACxB,oBAAoB,EACpB,aAAa,GACb,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACN,mBAAmB,EACnB,yBAAyB,EACzB,WAAW,EACX,aAAa,GACb,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,mBAAmB,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAEnF,MAAM,IAAI,GAAG;;;uBAGU,GAAG;;;;;;;;;;;;;mCAaS,CAAC;AAEpC,gEAAgE;AAChE,MAAM,mBAAmB,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAE1C,6EAA6E;AAC7E,MAAM,QAAQ,GAAG,6BAA6B,CAAC;AAE/C;;;;;GAKG;AACH,SAAS,WAAW,CAAC,GAAW;IAC/B,IAAI,OAAe,CAAC;IACpB,IAAI,IAAc,CAAC;IACnB,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QAClC,OAAO,GAAG,UAAU,CAAC;QACrB,IAAI,GAAG,CAAC,6BAA6B,EAAE,GAAG,CAAC,CAAC;IAC7C,CAAC;SAAM,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC1C,OAAO,GAAG,MAAM,CAAC;QACjB,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IACd,CAAC;SAAM,CAAC;QACP,OAAO,GAAG,UAAU,CAAC;QACrB,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IACd,CAAC;IACD,IAAI,CAAC;QACJ,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QACxE,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACtB,gDAAgD;QACjD,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,KAAK,EAAE,CAAC;IACf,CAAC;IAAC,MAAM,CAAC;QACR,oBAAoB;IACrB,CAAC;AACF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,KAAK,CAAC,IAAc;IACzC,MAAM,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;QAC5B,IAAI;QACJ,OAAO,EAAE;YACR,GAAG,cAAc;YACjB,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAC1B,YAAY,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;SACjC;QACD,gBAAgB,EAAE,KAAK;KACvB,CAAC,CAAC;IAEH,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;QACjB,GAAG,CAAC,IAAI,CAAC,CAAC;QACV,OAAO;IACR,CAAC;IAED,MAAM,EAAE,OAAO,EAAE,GAAG,oBAAoB,CAAC,MAAiC,CAAC,CAAC;IAC5E,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC;IAEvC,wEAAwE;IACxE,uEAAuE;IACvE,4DAA4D;IAC5D,MAAM,SAAS,GAAG,CAAC,MAAM,CAAC,MAAM,IAAI,gBAAgB,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC1F,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QACjF,KAAK,CAAC,4EAA4E,CAAC,CAAC;QACpF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACjB,CAAC;IACD,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAEnC,MAAM,YAAY,GAAG,oBAAoB,EAAE,CAAC;IAC5C,MAAM,KAAK,GAAG,aAAa,EAAE,CAAC;IAC9B,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,KAAK,CAAC,CAAC;IAChD,IAAI,CAAC;QACJ,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,kBAAkB,EAAE,MAAM,CAAC,CAAC;QACzD,YAAY,CAAC,YAAY,CAAC,GAAG,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;QACvD,YAAY,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,mBAAmB,CAAC,CAAC;QAChE,YAAY,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;QAClE,YAAY,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC/C,YAAY,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC9C,YAAY,CAAC,YAAY,CAAC,GAAG,CAAC,gBAAgB,EAAE,wBAAwB,CAAC,YAAY,CAAC,CAAC,CAAC;QACxF,YAAY,CAAC,YAAY,CAAC,GAAG,CAAC,uBAAuB,EAAE,MAAM,CAAC,CAAC;QAE/D,GAAG,CAAC,2CAA2C,CAAC,CAAC;QACjD,GAAG,CAAC,EAAE,CAAC,CAAC;QACR,GAAG,CAAC,KAAK,YAAY,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QACpC,GAAG,CAAC,EAAE,CAAC,CAAC;QACR,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC;YAC3B,WAAW,CAAC,YAAY,CAAC,QAAQ,EAAE,CAAC,CAAC;QACtC,CAAC;QACD,OAAO,CAAC,mEAAmE,CAAC,CAAC;QAE7E,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,mBAAmB,CAAC,CAAC;QACnE,MAAM,MAAM,GAAG,MAAM,yBAAyB,CAAC,OAAO,EAAE;YACvD,IAAI;YACJ,YAAY;YACZ,WAAW,EAAE,MAAM,CAAC,WAAW;SAC/B,CAAC,CAAC;QACH,wEAAwE;QACxE,sEAAsE;QACtE,MAAM,KAAK,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;QACpC,IAAI,CAAC;YACJ,MAAM,eAAe,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QACtC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,mEAAmE;YACnE,mEAAmE;YACnE,sEAAsE;YACtE,gEAAgE;YAChE,IAAI,CAAC;gBACJ,MAAM,WAAW,CAAC,OAAO,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC;YAClD,CAAC;YAAC,MAAM,CAAC;gBACR,6DAA6D;YAC9D,CAAC;YACD,MAAM,GAAG,CAAC;QACX,CAAC;QAED,OAAO,CAAC,gBAAgB,MAAM,EAAE,CAAC,CAAC;QAClC,mDAAmD;QACnD,GAAG,CAAC,WAAW,KAAK,CAAC,KAAK,IAAI,iBAAiB,EAAE,CAAC,CAAC;QACnD,GAAG,CAAC,yBAAyB,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QACzE,GAAG,CAAC,0BAA0B,mBAAmB,EAAE,EAAE,CAAC,CAAC;IACxD,CAAC;YAAS,CAAC;QACV,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IACtB,CAAC;AACF,CAAC"}

package/dist/commands/logout.d.ts

@@ -0,0 +1,2 @@
+export declare function logout(args: string[]): Promise<void>;
+//# sourceMappingURL=logout.d.ts.map

package/dist/commands/logout.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"logout.d.ts","sourceRoot":"","sources":["../../src/commands/logout.ts"],"names":[],"mappings":"AAyCA,wBAAsB,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAiD1D"}

package/dist/commands/logout.js

@@ -0,0 +1,79 @@
+import { existsSync } from "node:fs";
+import { parseArgs } from "node:util";
+import { GLOBAL_OPTIONS, resolveBaseAndFormat } from "../lib/config.js";
+import { log, success, warn } from "../lib/logger.js";
+import { revokeToken } from "../lib/oauth/token-endpoint.js";
+import { clearTokenStore, credentialsFilePath, deleteStoredEntry, readStoredEntry, readTokenStore, } from "../lib/oauth/token-store.js";
+const HELP = `Usage: framedash logout [options]
+
+Sign out of a stored OAuth login (created by 'framedash login'): revokes the
+session server-side (best effort) and removes the locally stored tokens for
+the resolved base URL. API keys (FRAMEDASH_API_KEY etc.) are not affected.
+
+Options:
+  --all                  Revoke and remove ALL stored logins for every origin
+  --base-url <url>       API base URL (default: https://app.framedash.dev)
+  -h, --help             Show help`;
+/**
+ * Best-effort server-side revocation of the refresh token (RFC 7009 kills
+ * the whole grant). A transport failure only warns: the local credentials
+ * are removed regardless, and an unreachable server must not block logout.
+ */
+async function bestEffortRevoke(origin, refreshToken) {
+    try {
+        await revokeToken(origin, refreshToken);
+    }
+    catch (err) {
+        warn(`Could not revoke the server-side session for ${origin} ` +
+            `(${err instanceof Error ? err.message : String(err)}); removing local credentials anyway. ` +
+            `You can also revoke it from the dashboard's Connected apps page.`);
+    }
+}
+export async function logout(args) {
+    const { values } = parseArgs({
+        args,
+        options: { ...GLOBAL_OPTIONS, all: { type: "boolean" } },
+        allowPositionals: false,
+    });
+    if (values.help) {
+        log(HELP);
+        return;
+    }
+    if (values.all) {
+        const store = readTokenStore();
+        const origins = Object.keys(store);
+        const hadFile = existsSync(credentialsFilePath());
+        for (const origin of origins) {
+            const entry = store[origin];
+            if (entry) {
+                await bestEffortRevoke(origin, entry.refresh_token);
+            }
+        }
+        // Always clear: this removes the file (including the corrupt/unparseable
+        // case, which still holds token material) AND reaps any orphaned
+        // credentials.json.*.tmp files from crashed writes.
+        await clearTokenStore();
+        if (origins.length > 0) {
+            success(`Logged out of ${origins.length} origin(s); credentials file removed.`);
+        }
+        else if (hadFile) {
+            success("Removed the local credentials file (it contained no parseable logins; " +
+                "server-side revocation was skipped).");
+        }
+        else {
+            log("No stored logins.");
+        }
+        return;
+    }
+    const { baseUrl } = resolveBaseAndFormat(values);
+    const origin = new URL(baseUrl).origin;
+    const entry = readStoredEntry(origin);
+    if (!entry) {
+        log(`No stored login for ${origin}.`);
+        return;
+    }
+    await bestEffortRevoke(origin, entry.refresh_token);
+    await deleteStoredEntry(origin);
+    success(`Logged out of ${origin}`);
+}
+//# sourceMappingURL=logout.js.map

package/dist/commands/logout.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logout.js","sourceRoot":"","sources":["../../src/commands/logout.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,cAAc,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AACxE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,WAAW,EAAE,MAAM,gCAAgC,CAAC;AAC7D,OAAO,EACN,eAAe,EACf,mBAAmB,EACnB,iBAAiB,EACjB,eAAe,EACf,cAAc,GACd,MAAM,6BAA6B,CAAC;AAErC,MAAM,IAAI,GAAG;;;;;;;;;mCASsB,CAAC;AAEpC;;;;GAIG;AACH,KAAK,UAAU,gBAAgB,CAAC,MAAc,EAAE,YAAoB;IACnE,IAAI,CAAC;QACJ,MAAM,WAAW,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IACzC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,IAAI,CACH,gDAAgD,MAAM,GAAG;YACxD,IAAI,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,wCAAwC;YAC5F,kEAAkE,CACnE,CAAC;IACH,CAAC;AACF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,IAAc;IAC1C,MAAM,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;QAC5B,IAAI;QACJ,OAAO,EAAE,EAAE,GAAG,cAAc,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE;QACxD,gBAAgB,EAAE,KAAK;KACvB,CAAC,CAAC;IAEH,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;QACjB,GAAG,CAAC,IAAI,CAAC,CAAC;QACV,OAAO;IACR,CAAC;IAED,IAAI,MAAM,CAAC,GAAG,EAAE,CAAC;QAChB,MAAM,KAAK,GAAG,cAAc,EAAE,CAAC;QAC/B,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnC,MAAM,OAAO,GAAG,UAAU,CAAC,mBAAmB,EAAE,CAAC,CAAC;QAClD,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC9B,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;YAC5B,IAAI,KAAK,EAAE,CAAC;gBACX,MAAM,gBAAgB,CAAC,MAAM,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC;YACrD,CAAC;QACF,CAAC;QACD,yEAAyE;QACzE,iEAAiE;QACjE,oDAAoD;QACpD,MAAM,eAAe,EAAE,CAAC;QACxB,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,OAAO,CAAC,iBAAiB,OAAO,CAAC,MAAM,uCAAuC,CAAC,CAAC;QACjF,CAAC;aAAM,IAAI,OAAO,EAAE,CAAC;YACpB,OAAO,CACN,wEAAwE;gBACvE,sCAAsC,CACvC,CAAC;QACH,CAAC;aAAM,CAAC;YACP,GAAG,CAAC,mBAAmB,CAAC,CAAC;QAC1B,CAAC;QACD,OAAO;IACR,CAAC;IAED,MAAM,EAAE,OAAO,EAAE,GAAG,oBAAoB,CAAC,MAAiC,CAAC,CAAC;IAC5E,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC;IACvC,MAAM,KAAK,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;IACtC,IAAI,CAAC,KAAK,EAAE,CAAC;QACZ,GAAG,CAAC,uBAAuB,MAAM,GAAG,CAAC,CAAC;QACtC,OAAO;IACR,CAAC;IACD,MAAM,gBAAgB,CAAC,MAAM,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC;IACpD,MAAM,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAChC,OAAO,CAAC,iBAAiB,MAAM,EAAE,CAAC,CAAC;AACpC,CAAC"}