@getfrontline/cli 1.0.0

package/dist/lib/httpClient.js

@@ -0,0 +1,196 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.FrontlineClient = void 0;
+exports.apiGet = apiGet;
+const errors_1 = require("./errors");
+const config_1 = require("./config");
+const auth_1 = require("./auth");
+const output_1 = require("./output");
+class FrontlineClient {
+    apiKey;
+    baseUrl;
+    debug;
+    constructor(opts) {
+        this.apiKey = opts.apiKey;
+        this.baseUrl = opts.baseUrl;
+        this.debug = opts.debug ?? false;
+    }
+    buildHeaders(extra) {
+        return {
+            Authorization: `Bearer ${this.apiKey}`,
+            "Content-Type": "application/json",
+            "User-Agent": "frontline-cli",
+            ...(extra ?? {}),
+        };
+    }
+    buildUrl(path, params) {
+        const base = this.baseUrl.endsWith("/") ? this.baseUrl : this.baseUrl + "/";
+        const url = new URL(path.replace(/^\//, ""), base);
+        if (params) {
+            for (const [k, v] of Object.entries(params)) {
+                if (v !== undefined && v !== null && v !== "")
+                    url.searchParams.set(k, v);
+            }
+        }
+        return url.toString();
+    }
+    logRequest(method, url, startedAt, status) {
+        if (!this.debug)
+            return;
+        const elapsed = Date.now() - startedAt;
+        process.stderr.write(`[DEBUG] ${method} ${url} -> ${status} (${elapsed}ms) [key=${(0, auth_1.redactToken)(this.apiKey)}]\n`);
+    }
+    async request(method, path, body, params) {
+        const url = this.buildUrl(path, params);
+        const startedAt = Date.now();
+        let res;
+        try {
+            res = await fetch(url, {
+                method,
+                headers: this.buildHeaders(),
+                body: body !== undefined ? JSON.stringify(body) : undefined,
+            });
+        }
+        catch (err) {
+            const message = err instanceof Error ? err.message : String(err);
+            (0, output_1.error)("connection_error", `Failed to connect to ${this.baseUrl}: ${message}`, output_1.EXIT_CODES.GENERAL_ERROR, { suggestion: "Check that the server is running and the base URL is correct" });
+        }
+        this.logRequest(method, url, startedAt, res.status);
+        let json;
+        try {
+            json = await res.json();
+        }
+        catch {
+            if (res.ok && res.status === 204)
+                return undefined;
+            (0, output_1.error)("invalid_response", `Server returned non-JSON response (HTTP ${res.status})`, output_1.EXIT_CODES.GENERAL_ERROR);
+        }
+        if (!res.ok) {
+            const exitCode = (0, output_1.httpStatusToExitCode)(res.status);
+            const payload = (json ?? {});
+            const errData = payload.error ?? payload;
+            (0, output_1.error)(errData?.code ?? "api_error", errData?.message ?? `HTTP ${res.status}`, exitCode, {
+                suggestion: errData?.suggestion,
+                details: errData?.details,
+            });
+        }
+        return json;
+    }
+    get(path, params) {
+        return this.request("GET", path, undefined, params);
+    }
+    post(path, body) {
+        return this.request("POST", path, body);
+    }
+    patch(path, body) {
+        return this.request("PATCH", path, body);
+    }
+    delete(path) {
+        return this.request("DELETE", path);
+    }
+    /** POST that returns the raw Response (for binary downloads, e.g. exports). */
+    async postRaw(path, body) {
+        const url = this.buildUrl(path);
+        const startedAt = Date.now();
+        const res = await fetch(url, {
+            method: "POST",
+            headers: this.buildHeaders(),
+            body: body !== undefined ? JSON.stringify(body) : undefined,
+        });
+        this.logRequest("POST", url, startedAt, res.status);
+        if (!res.ok)
+            await this.throwFromResponse(res);
+        return res;
+    }
+    /** GET that returns the raw Response (for binary downloads, e.g. file downloads). */
+    async getRaw(path) {
+        const url = this.buildUrl(path);
+        const startedAt = Date.now();
+        const res = await fetch(url, {
+            method: "GET",
+            headers: this.buildHeaders(),
+        });
+        this.logRequest("GET", url, startedAt, res.status);
+        if (!res.ok)
+            await this.throwFromResponse(res);
+        return res;
+    }
+    /** POST a multipart/form-data body (for uploads). Content-Type is set by fetch. */
+    async postMultipart(path, formData) {
+        const url = this.buildUrl(path);
+        const startedAt = Date.now();
+        const res = await fetch(url, {
+            method: "POST",
+            headers: {
+                Authorization: `Bearer ${this.apiKey}`,
+                "User-Agent": "frontline-cli",
+            },
+            body: formData,
+        });
+        this.logRequest("POST", url, startedAt, res.status);
+        if (!res.ok)
+            await this.throwFromResponse(res);
+        return (await res.json());
+    }
+    async throwFromResponse(res) {
+        const exitCode = (0, output_1.httpStatusToExitCode)(res.status);
+        let payload = {};
+        try {
+            payload = (await res.json());
+        }
+        catch {
+            /* noop */
+        }
+        const errData = payload.error ??
+            payload;
+        (0, output_1.error)(errData?.code ?? "api_error", errData?.message ?? `HTTP ${res.status}`, exitCode, {
+            suggestion: errData?.suggestion,
+            details: errData?.details,
+        });
+    }
+}
+exports.FrontlineClient = FrontlineClient;
+async function apiGet(options) {
+    const apiKey = (0, config_1.resolveApiKey)(options.apiKey, options.profile);
+    if (!apiKey) {
+        throw new errors_1.APIError("No API key found.", 401);
+    }
+    const baseUrl = (0, config_1.resolveBaseUrl)(options.baseUrl, options.profile);
+    const base = baseUrl.endsWith("/") ? baseUrl : baseUrl + "/";
+    const normalizedPath = options.path.replace(/^\//, "");
+    const url = new URL(normalizedPath, base);
+    if (options.query) {
+        for (const [key, value] of Object.entries(options.query)) {
+            if (value !== undefined && value !== "")
+                url.searchParams.set(key, value);
+        }
+    }
+    const startedAt = Date.now();
+    const res = await fetch(url.toString(), {
+        method: "GET",
+        headers: {
+            Authorization: `Bearer ${apiKey}`,
+            Accept: "application/json",
+            "User-Agent": "frontline-cli",
+        },
+    });
+    if (options.debug) {
+        const elapsed = Date.now() - startedAt;
+        process.stderr.write(`[DEBUG] GET ${url.toString()} -> ${res.status} (${elapsed}ms) [key=${(0, auth_1.redactToken)(apiKey)}]\n`);
+    }
+    let data;
+    try {
+        data = await res.json();
+    }
+    catch {
+        throw new errors_1.APIError(`Invalid JSON response from API`, res.status);
+    }
+    if (res.status >= 400) {
+        const msg = data?.message ??
+            data?.error ??
+            `API returned ${res.status}`;
+        throw new errors_1.APIError(String(msg), res.status, data);
+    }
+    return data;
+}
+//# sourceMappingURL=httpClient.js.map

package/dist/lib/httpClient.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"httpClient.js","sourceRoot":"","sources":["../../src/lib/httpClient.ts"],"names":[],"mappings":";;;AAsNA,wBAiDC;AAvQD,qCAAoC;AACpC,qCAAyD;AACzD,iCAAqC;AACrC,qCAAoF;AAgBpF,MAAa,eAAe;IACP,MAAM,CAAS;IACf,OAAO,CAAS;IAChB,KAAK,CAAU;IAEhC,YAAY,IAA4B;QACpC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC1B,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;QAC5B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC;IACrC,CAAC;IAEO,YAAY,CAAC,KAA8B;QAC/C,OAAO;YACH,aAAa,EAAE,UAAU,IAAI,CAAC,MAAM,EAAE;YACtC,cAAc,EAAE,kBAAkB;YAClC,YAAY,EAAE,eAAe;YAC7B,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC;SACnB,CAAC;IACN,CAAC;IAEO,QAAQ,CAAC,IAAY,EAAE,MAA2C;QACtE,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,GAAG,GAAG,CAAC;QAC5E,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;QACnD,IAAI,MAAM,EAAE,CAAC;YACT,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC1C,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,EAAE;oBAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAC9E,CAAC;QACL,CAAC;QACD,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;IAC1B,CAAC;IAEO,UAAU,CAAC,MAAc,EAAE,GAAW,EAAE,SAAiB,EAAE,MAAc;QAC7E,IAAI,CAAC,IAAI,CAAC,KAAK;YAAE,OAAO;QACxB,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;QACvC,OAAO,CAAC,MAAM,CAAC,KAAK,CAChB,WAAW,MAAM,IAAI,GAAG,OAAO,MAAM,KAAK,OAAO,YAAY,IAAA,kBAAW,EAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAC7F,CAAC;IACN,CAAC;IAEO,KAAK,CAAC,OAAO,CACjB,MAAc,EACd,IAAY,EACZ,IAAc,EACd,MAA2C;QAE3C,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACxC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAE7B,IAAI,GAAa,CAAC;QAClB,IAAI,CAAC;YACD,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;gBACnB,MAAM;gBACN,OAAO,EAAE,IAAI,CAAC,YAAY,EAAE;gBAC5B,IAAI,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;aAC9D,CAAC,CAAC;QACP,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACX,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjE,IAAA,cAAa,EACT,kBAAkB,EAClB,wBAAwB,IAAI,CAAC,OAAO,KAAK,OAAO,EAAE,EAClD,mBAAU,CAAC,aAAa,EACxB,EAAE,UAAU,EAAE,8DAA8D,EAAE,CACjF,CAAC;QACN,CAAC;QAED,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;QAEpD,IAAI,IAAa,CAAC;QAClB,IAAI,CAAC;YACD,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACL,IAAI,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;gBAAE,OAAO,SAAc,CAAC;YACxD,IAAA,cAAa,EACT,kBAAkB,EAClB,2CAA2C,GAAG,CAAC,MAAM,GAAG,EACxD,mBAAU,CAAC,aAAa,CAC3B,CAAC;QACN,CAAC;QAED,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACV,MAAM,QAAQ,GAAG,IAAA,6BAAoB,EAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAClD,MAAM,OAAO,GAAG,CAAC,IAAI,IAAI,EAAE,CAA4B,CAAC;YACxD,MAAM,OAAO,GAAI,OAAO,CAAC,KAA6C,IAAI,OAAO,CAAC;YAClF,IAAA,cAAa,EACR,OAAO,EAAE,IAA2B,IAAI,WAAW,EACnD,OAAO,EAAE,OAA8B,IAAI,QAAQ,GAAG,CAAC,MAAM,EAAE,EAChE,QAAQ,EACR;gBACI,UAAU,EAAE,OAAO,EAAE,UAAgC;gBACrD,OAAO,EAAE,OAAO,EAAE,OAA8C;aACnE,CACJ,CAAC;QACN,CAAC;QAED,OAAO,IAAS,CAAC;IACrB,CAAC;IAED,GAAG,CAAI,IAAY,EAAE,MAA2C;QAC5D,OAAO,IAAI,CAAC,OAAO,CAAI,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;IAC3D,CAAC;IAED,IAAI,CAAI,IAAY,EAAE,IAAc;QAChC,OAAO,IAAI,CAAC,OAAO,CAAI,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IAC/C,CAAC;IAED,KAAK,CAAI,IAAY,EAAE,IAAc;QACjC,OAAO,IAAI,CAAC,OAAO,CAAI,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IAChD,CAAC;IAED,MAAM,CAAI,IAAY;QAClB,OAAO,IAAI,CAAC,OAAO,CAAI,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC3C,CAAC;IAED,+EAA+E;IAC/E,KAAK,CAAC,OAAO,CAAC,IAAY,EAAE,IAAc;QACtC,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAChC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YACzB,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,IAAI,CAAC,YAAY,EAAE;YAC5B,IAAI,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;SAC9D,CAAC,CAAC;QACH,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;QACpD,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,MAAM,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;QAC/C,OAAO,GAAG,CAAC;IACf,CAAC;IAED,qFAAqF;IACrF,KAAK,CAAC,MAAM,CAAC,IAAY;QACrB,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAChC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YACzB,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,IAAI,CAAC,YAAY,EAAE;SAC/B,CAAC,CAAC;QACH,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;QACnD,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,MAAM,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;QAC/C,OAAO,GAAG,CAAC;IACf,CAAC;IAED,mFAAmF;IACnF,KAAK,CAAC,aAAa,CAAI,IAAY,EAAE,QAAkB;QACnD,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAChC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YACzB,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACL,aAAa,EAAE,UAAU,IAAI,CAAC,MAAM,EAAE;gBACtC,YAAY,EAAE,eAAe;aAChC;YACD,IAAI,EAAE,QAAQ;SACjB,CAAC,CAAC;QACH,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;QACpD,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,MAAM,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;QAC/C,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAM,CAAC;IACnC,CAAC;IAEO,KAAK,CAAC,iBAAiB,CAAC,GAAa;QACzC,MAAM,QAAQ,GAAG,IAAA,6BAAoB,EAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAClD,IAAI,OAAO,GAA4B,EAAE,CAAC;QAC1C,IAAI,CAAC;YACD,OAAO,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA4B,CAAC;QAC5D,CAAC;QAAC,MAAM,CAAC;YACL,UAAU;QACd,CAAC;QACD,MAAM,OAAO,GACR,OAAO,CAAC,KAA6C;YACrD,OAAmC,CAAC;QACzC,IAAA,cAAa,EACR,OAAO,EAAE,IAA2B,IAAI,WAAW,EACnD,OAAO,EAAE,OAA8B,IAAI,QAAQ,GAAG,CAAC,MAAM,EAAE,EAChE,QAAQ,EACR;YACI,UAAU,EAAE,OAAO,EAAE,UAAgC;YACrD,OAAO,EAAE,OAAO,EAAE,OAA8C;SACnE,CACJ,CAAC;IACN,CAAC;CACJ;AAlLD,0CAkLC;AAiBM,KAAK,UAAU,MAAM,CAAc,OAAsB;IAC5D,MAAM,MAAM,GAAG,IAAA,sBAAa,EAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IAC9D,IAAI,CAAC,MAAM,EAAE,CAAC;QACV,MAAM,IAAI,iBAAQ,CAAC,mBAAmB,EAAE,GAAG,CAAC,CAAC;IACjD,CAAC;IACD,MAAM,OAAO,GAAG,IAAA,uBAAc,EAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IAEjE,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,GAAG,GAAG,CAAC;IAC7D,MAAM,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACvD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC;IAC1C,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QAChB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACvD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE;gBAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC9E,CAAC;IACL,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE;QACpC,MAAM,EAAE,KAAK;QACb,OAAO,EAAE;YACL,aAAa,EAAE,UAAU,MAAM,EAAE;YACjC,MAAM,EAAE,kBAAkB;YAC1B,YAAY,EAAE,eAAe;SAChC;KACJ,CAAC,CAAC;IAEH,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QAChB,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;QACvC,OAAO,CAAC,MAAM,CAAC,KAAK,CAChB,eAAe,GAAG,CAAC,QAAQ,EAAE,OAAO,GAAG,CAAC,MAAM,KAAK,OAAO,YAAY,IAAA,kBAAW,EAAC,MAAM,CAAC,KAAK,CACjG,CAAC;IACN,CAAC;IAED,IAAI,IAAa,CAAC;IAClB,IAAI,CAAC;QACD,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACL,MAAM,IAAI,iBAAQ,CAAC,gCAAgC,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IACrE,CAAC;IAED,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;QACpB,MAAM,GAAG,GACJ,IAAgC,EAAE,OAAO;YACzC,IAAgC,EAAE,KAAK;YACxC,gBAAgB,GAAG,CAAC,MAAM,EAAE,CAAC;QACjC,MAAM,IAAI,iBAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACtD,CAAC;IAED,OAAO,IAAS,CAAC;AACrB,CAAC"}

package/dist/lib/output.d.ts

@@ -0,0 +1,38 @@
+/**
+ * Output helpers for the CLI.
+ *
+ * Default contract (scripting-friendly):
+ * - `success(data)`       -> JSON to stdout, exit 0
+ * - `error(code, msg, …)` -> JSON error to stdout, human line to stderr, exit with code
+ * - `info(msg)`           -> human message to stderr (for progress/status, no JSON)
+ *
+ * Human-readable helpers (`printTable`, `printKeyValue`, `printSuccess`,
+ * `printError`, `printJson`) are opt-in: commands that support `--pretty` /
+ * `--table` call them instead of `success()`. Stderr lines never interfere
+ * with `| jq` or piping stdout.
+ */
+export declare const EXIT_CODES: {
+    readonly SUCCESS: 0;
+    readonly GENERAL_ERROR: 1;
+    readonly BAD_INPUT: 2;
+    readonly NOT_FOUND: 3;
+    readonly PERMISSION_DENIED: 4;
+    readonly CONFLICT: 5;
+};
+/** Maps HTTP status codes to CLI exit codes. */
+export declare function httpStatusToExitCode(status: number): number;
+/** Print success JSON to stdout and exit 0. */
+export declare function success(data: unknown): never;
+/** Print error JSON to stdout, human message to stderr, and exit with given code. */
+export declare function error(code: string, message: string, exitCode?: number, opts?: {
+    suggestion?: string;
+    details?: Record<string, unknown>;
+}): never;
+/** Print a human progress/status line to stderr (never JSON). */
+export declare function info(message: string): void;
+export declare function printJson(data: unknown): void;
+export declare function printTable(rows: Record<string, unknown>[] | readonly Record<string, unknown>[], columns?: string[]): void;
+export declare function printKeyValue(data: Record<string, unknown>): void;
+export declare function printSuccess(message: string): void;
+export declare function printError(message: string, hint?: string): void;
+//# sourceMappingURL=output.d.ts.map

package/dist/lib/output.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"output.d.ts","sourceRoot":"","sources":["../../src/lib/output.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;GAYG;AAEH,eAAO,MAAM,UAAU;;;;;;;CAOb,CAAC;AAEX,gDAAgD;AAChD,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAO3D;AAID,+CAA+C;AAC/C,wBAAgB,OAAO,CAAC,IAAI,EAAE,OAAO,GAAG,KAAK,CAG5C;AAED,qFAAqF;AACrF,wBAAgB,KAAK,CACjB,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,QAAQ,GAAE,MAAiC,EAC3C,IAAI,CAAC,EAAE;IAAE,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,GAClE,KAAK,CAeP;AAED,iEAAiE;AACjE,wBAAgB,IAAI,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAE1C;AAID,wBAAgB,SAAS,CAAC,IAAI,EAAE,OAAO,GAAG,IAAI,CAE7C;AAED,wBAAgB,UAAU,CACtB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,EACpE,OAAO,CAAC,EAAE,MAAM,EAAE,GACnB,IAAI,CAyBN;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAOjE;AAED,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAElD;AAED,wBAAgB,UAAU,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAG/D"}

package/dist/lib/output.js

@@ -0,0 +1,131 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.EXIT_CODES = void 0;
+exports.httpStatusToExitCode = httpStatusToExitCode;
+exports.success = success;
+exports.error = error;
+exports.info = info;
+exports.printJson = printJson;
+exports.printTable = printTable;
+exports.printKeyValue = printKeyValue;
+exports.printSuccess = printSuccess;
+exports.printError = printError;
+const chalk_1 = __importDefault(require("chalk"));
+/**
+ * Output helpers for the CLI.
+ *
+ * Default contract (scripting-friendly):
+ * - `success(data)`       -> JSON to stdout, exit 0
+ * - `error(code, msg, …)` -> JSON error to stdout, human line to stderr, exit with code
+ * - `info(msg)`           -> human message to stderr (for progress/status, no JSON)
+ *
+ * Human-readable helpers (`printTable`, `printKeyValue`, `printSuccess`,
+ * `printError`, `printJson`) are opt-in: commands that support `--pretty` /
+ * `--table` call them instead of `success()`. Stderr lines never interfere
+ * with `| jq` or piping stdout.
+ */
+exports.EXIT_CODES = {
+    SUCCESS: 0,
+    GENERAL_ERROR: 1,
+    BAD_INPUT: 2,
+    NOT_FOUND: 3,
+    PERMISSION_DENIED: 4,
+    CONFLICT: 5,
+};
+/** Maps HTTP status codes to CLI exit codes. */
+function httpStatusToExitCode(status) {
+    if (status >= 200 && status < 300)
+        return exports.EXIT_CODES.SUCCESS;
+    if (status === 400 || status === 422)
+        return exports.EXIT_CODES.BAD_INPUT;
+    if (status === 401 || status === 403)
+        return exports.EXIT_CODES.PERMISSION_DENIED;
+    if (status === 404)
+        return exports.EXIT_CODES.NOT_FOUND;
+    if (status === 409)
+        return exports.EXIT_CODES.CONFLICT;
+    return exports.EXIT_CODES.GENERAL_ERROR;
+}
+// ── Default JSON-first output ──────────────────────────
+/** Print success JSON to stdout and exit 0. */
+function success(data) {
+    process.stdout.write(JSON.stringify(data, null, 2) + "\n");
+    process.exit(exports.EXIT_CODES.SUCCESS);
+}
+/** Print error JSON to stdout, human message to stderr, and exit with given code. */
+function error(code, message, exitCode = exports.EXIT_CODES.GENERAL_ERROR, opts) {
+    const errorObj = {
+        ok: false,
+        error: {
+            code,
+            message,
+            ...(opts?.suggestion ? { suggestion: opts.suggestion } : {}),
+            ...(opts?.details ? { details: opts.details } : {}),
+        },
+    };
+    process.stdout.write(JSON.stringify(errorObj, null, 2) + "\n");
+    process.stderr.write(`Error: ${message}\n`);
+    if (opts?.suggestion)
+        process.stderr.write(`Hint: ${opts.suggestion}\n`);
+    process.exit(exitCode);
+}
+/** Print a human progress/status line to stderr (never JSON). */
+function info(message) {
+    process.stderr.write(message + "\n");
+}
+// ── Opt-in pretty helpers (used by --pretty / --table) ──
+function printJson(data) {
+    console.log(JSON.stringify(data, null, 2));
+}
+function printTable(rows, columns) {
+    if (rows.length === 0) {
+        console.log(chalk_1.default.yellow("No results found."));
+        return;
+    }
+    const cols = columns ?? Object.keys(rows[0]);
+    const widths = {};
+    for (const col of cols) {
+        widths[col] = col.length;
+        for (const row of rows) {
+            const val = formatCell(row[col]);
+            widths[col] = Math.max(widths[col], val.length);
+        }
+    }
+    const header = cols.map((col) => col.toUpperCase().padEnd(widths[col])).join("  ");
+    console.log(chalk_1.default.bold(header));
+    console.log(cols.map((col) => "─".repeat(widths[col])).join("  "));
+    for (const row of rows) {
+        const line = cols.map((col) => formatCell(row[col]).padEnd(widths[col])).join("  ");
+        console.log(line);
+    }
+}
+function printKeyValue(data) {
+    const keys = Object.keys(data);
+    if (keys.length === 0)
+        return;
+    const maxKeyLen = Math.max(...keys.map((k) => k.length));
+    for (const [key, value] of Object.entries(data)) {
+        console.log(`${chalk_1.default.bold(key.padEnd(maxKeyLen))}  ${formatCell(value)}`);
+    }
+}
+function printSuccess(message) {
+    console.log(chalk_1.default.green(message));
+}
+function printError(message, hint) {
+    console.error(chalk_1.default.red(`Error: ${message}`));
+    if (hint)
+        console.error(chalk_1.default.yellow(`Hint: ${hint}`));
+}
+function formatCell(value) {
+    if (value === null || value === undefined)
+        return "—";
+    if (value instanceof Date)
+        return value.toISOString().split("T")[0];
+    if (typeof value === "object")
+        return JSON.stringify(value);
+    return String(value);
+}
+//# sourceMappingURL=output.js.map

package/dist/lib/output.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"output.js","sourceRoot":"","sources":["../../src/lib/output.ts"],"names":[],"mappings":";;;;;;AA0BA,oDAOC;AAKD,0BAGC;AAGD,sBAoBC;AAGD,oBAEC;AAID,8BAEC;AAED,gCA4BC;AAED,sCAOC;AAED,oCAEC;AAED,gCAGC;AA3HD,kDAA0B;AAE1B;;;;;;;;;;;;GAYG;AAEU,QAAA,UAAU,GAAG;IACtB,OAAO,EAAE,CAAC;IACV,aAAa,EAAE,CAAC;IAChB,SAAS,EAAE,CAAC;IACZ,SAAS,EAAE,CAAC;IACZ,iBAAiB,EAAE,CAAC;IACpB,QAAQ,EAAE,CAAC;CACL,CAAC;AAEX,gDAAgD;AAChD,SAAgB,oBAAoB,CAAC,MAAc;IAC/C,IAAI,MAAM,IAAI,GAAG,IAAI,MAAM,GAAG,GAAG;QAAE,OAAO,kBAAU,CAAC,OAAO,CAAC;IAC7D,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,kBAAU,CAAC,SAAS,CAAC;IAClE,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,kBAAU,CAAC,iBAAiB,CAAC;IAC1E,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,kBAAU,CAAC,SAAS,CAAC;IAChD,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,kBAAU,CAAC,QAAQ,CAAC;IAC/C,OAAO,kBAAU,CAAC,aAAa,CAAC;AACpC,CAAC;AAED,0DAA0D;AAE1D,+CAA+C;AAC/C,SAAgB,OAAO,CAAC,IAAa;IACjC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IAC3D,OAAO,CAAC,IAAI,CAAC,kBAAU,CAAC,OAAO,CAAC,CAAC;AACrC,CAAC;AAED,qFAAqF;AACrF,SAAgB,KAAK,CACjB,IAAY,EACZ,OAAe,EACf,WAAmB,kBAAU,CAAC,aAAa,EAC3C,IAAiE;IAEjE,MAAM,QAAQ,GAA4B;QACtC,EAAE,EAAE,KAAK;QACT,KAAK,EAAE;YACH,IAAI;YACJ,OAAO;YACP,GAAG,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5D,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACtD;KACJ,CAAC;IAEF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IAC/D,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,OAAO,IAAI,CAAC,CAAC;IAC5C,IAAI,IAAI,EAAE,UAAU;QAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,IAAI,CAAC,UAAU,IAAI,CAAC,CAAC;IACzE,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;AAC3B,CAAC;AAED,iEAAiE;AACjE,SAAgB,IAAI,CAAC,OAAe;IAChC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;AACzC,CAAC;AAED,2DAA2D;AAE3D,SAAgB,SAAS,CAAC,IAAa;IACnC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AAC/C,CAAC;AAED,SAAgB,UAAU,CACtB,IAAoE,EACpE,OAAkB;IAElB,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpB,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC,CAAC;QAC/C,OAAO;IACX,CAAC;IAED,MAAM,IAAI,GAAG,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7C,MAAM,MAAM,GAA2B,EAAE,CAAC;IAE1C,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACrB,MAAM,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC;QACzB,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACrB,MAAM,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;YACjC,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;QACpD,CAAC;IACL,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACnF,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;IAChC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAEnE,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACrB,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpF,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACtB,CAAC;AACL,CAAC;AAED,SAAgB,aAAa,CAAC,IAA6B;IACvD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/B,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAC9B,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IACzD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9C,OAAO,CAAC,GAAG,CAAC,GAAG,eAAK,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,KAAK,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC9E,CAAC;AACL,CAAC;AAED,SAAgB,YAAY,CAAC,OAAe;IACxC,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;AACtC,CAAC;AAED,SAAgB,UAAU,CAAC,OAAe,EAAE,IAAa;IACrD,OAAO,CAAC,KAAK,CAAC,eAAK,CAAC,GAAG,CAAC,UAAU,OAAO,EAAE,CAAC,CAAC,CAAC;IAC9C,IAAI,IAAI;QAAE,OAAO,CAAC,KAAK,CAAC,eAAK,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED,SAAS,UAAU,CAAC,KAAc;IAC9B,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,GAAG,CAAC;IACtD,IAAI,KAAK,YAAY,IAAI;QAAE,OAAO,KAAK,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACpE,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC5D,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;AACzB,CAAC"}

package/dist/max/browserLogin.d.ts

@@ -0,0 +1,15 @@
+export type BrowserLoginProvider = "google" | "microsoft" | "otp" | "email";
+export interface BrowserLoginResult {
+    idToken: string;
+    refreshToken?: string;
+}
+/**
+ * Starts a localhost HTTP server, opens the hosted login page with redirect_uri + state,
+ * and waits for GET /callback?token=...&state=... (or error query params).
+ */
+export declare function waitForBrowserCallback(options: {
+    loginPageBaseUrl: string;
+    provider?: BrowserLoginProvider;
+    timeoutMs: number;
+}): Promise<BrowserLoginResult>;
+//# sourceMappingURL=browserLogin.d.ts.map

package/dist/max/browserLogin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"browserLogin.d.ts","sourceRoot":"","sources":["../../src/max/browserLogin.ts"],"names":[],"mappings":"AAIA,MAAM,MAAM,oBAAoB,GAAG,QAAQ,GAAG,WAAW,GAAG,KAAK,GAAG,OAAO,CAAC;AAE5E,MAAM,WAAW,kBAAkB;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,CAAC;CACzB;AA2BD;;;GAGG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE;IAC5C,gBAAgB,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,EAAE,oBAAoB,CAAC;IAChC,SAAS,EAAE,MAAM,CAAC;CACrB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAkI9B"}

package/dist/max/browserLogin.js

@@ -0,0 +1,164 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.waitForBrowserCallback = waitForBrowserCallback;
+const http_1 = __importDefault(require("http"));
+const child_process_1 = require("child_process");
+const crypto_1 = require("crypto");
+function openUrlInBrowser(url) {
+    try {
+        if (process.platform === "win32") {
+            // Use PowerShell Start-Process for robust URL handling (avoids cmd.exe quoting issues with `&`).
+            (0, child_process_1.spawn)("powershell", ["-NoProfile", "-Command", "Start-Process", url], {
+                detached: true,
+                stdio: "ignore",
+            }).unref();
+        }
+        else if (process.platform === "darwin") {
+            (0, child_process_1.spawn)("open", [url], { detached: true, stdio: "ignore" }).unref();
+        }
+        else {
+            (0, child_process_1.spawn)("xdg-open", [url], { detached: true, stdio: "ignore" }).unref();
+        }
+    }
+    catch {
+        console.error("Could not open browser automatically. Open this URL manually:\n", url);
+    }
+}
+function parseCallbackUrl(requestUrl) {
+    if (!requestUrl)
+        return null;
+    const q = requestUrl.indexOf("?");
+    if (q === -1)
+        return null;
+    return new URLSearchParams(requestUrl.slice(q + 1));
+}
+/**
+ * Starts a localhost HTTP server, opens the hosted login page with redirect_uri + state,
+ * and waits for GET /callback?token=...&state=... (or error query params).
+ */
+function waitForBrowserCallback(options) {
+    return new Promise((resolve, reject) => {
+        const state = (0, crypto_1.randomBytes)(24).toString("hex");
+        let settled = false;
+        const timer = setTimeout(() => {
+            if (!settled) {
+                settled = true;
+                server.close();
+                reject(new Error(`Login timed out after ${Math.round(options.timeoutMs / 1000)}s`));
+            }
+        }, options.timeoutMs);
+        const server = http_1.default.createServer((req, res) => {
+            if (settled)
+                return;
+            const url = req.url ?? "";
+            if (!url.startsWith("/callback")) {
+                res.writeHead(404);
+                res.end("Not found");
+                return;
+            }
+            // Don't keep the process alive because of this socket.
+            try {
+                req.socket?.unref?.();
+            }
+            catch {
+                // ignore
+            }
+            const params = parseCallbackUrl(url);
+            if (!params) {
+                res.writeHead(400, { "Content-Type": "text/html; charset=utf-8" });
+                res.end("<p>Invalid callback</p>");
+                return;
+            }
+            const returnedState = params.get("state");
+            const token = params.get("token");
+            const refreshToken = params.get("refresh_token") ?? undefined;
+            const err = params.get("error");
+            const errDesc = params.get("error_description");
+            if (returnedState !== state) {
+                res.writeHead(400, { "Content-Type": "text/html; charset=utf-8" });
+                res.end("<p>Invalid state. Close this tab and try again from the CLI.</p>");
+                if (!settled) {
+                    settled = true;
+                    clearTimeout(timer);
+                    server.close();
+                    reject(new Error("Invalid state parameter (possible CSRF)"));
+                }
+                return;
+            }
+            if (err) {
+                res.writeHead(400, { "Content-Type": "text/html; charset=utf-8" });
+                res.end(`<p>Login failed: ${escapeHtml(err)}${errDesc ? ` — ${escapeHtml(errDesc)}` : ""}</p>`);
+                if (!settled) {
+                    settled = true;
+                    clearTimeout(timer);
+                    server.close();
+                    reject(new Error(errDesc || err));
+                }
+                return;
+            }
+            if (!token) {
+                res.writeHead(400, { "Content-Type": "text/html; charset=utf-8" });
+                res.end("<p>Missing token in callback.</p>");
+                if (!settled) {
+                    settled = true;
+                    clearTimeout(timer);
+                    server.close();
+                    reject(new Error("Missing token in callback URL"));
+                }
+                return;
+            }
+            res.writeHead(200, { "Content-Type": "text/html; charset=utf-8" });
+            res.end("<p>You can close this tab and return to the terminal.</p>");
+            if (!settled) {
+                settled = true;
+                clearTimeout(timer);
+                server.close();
+                resolve({ idToken: token, refreshToken });
+            }
+        });
+        server.listen(0, "127.0.0.1", () => {
+            const addr = server.address();
+            if (!addr || typeof addr === "string") {
+                server.close();
+                reject(new Error("Could not bind localhost server"));
+                return;
+            }
+            const port = addr.port;
+            const redirectUri = `http://127.0.0.1:${port}/callback`;
+            const loginUrl = new URL(options.loginPageBaseUrl);
+            if (options.provider) {
+                loginUrl.searchParams.set("provider", options.provider);
+            }
+            loginUrl.searchParams.set("redirect_uri", redirectUri);
+            loginUrl.searchParams.set("state", state);
+            loginUrl.searchParams.set("response_mode", "query");
+            console.log("\nOpening browser for sign-in...\nIf it does not open, visit:\n", loginUrl.toString(), "\n");
+            openUrlInBrowser(loginUrl.toString());
+        });
+        // Allow the Node.js process to exit if this is the only thing left.
+        try {
+            server.unref?.();
+        }
+        catch {
+            // ignore
+        }
+        server.on("error", (e) => {
+            if (!settled) {
+                settled = true;
+                clearTimeout(timer);
+                reject(e);
+            }
+        });
+    });
+}
+function escapeHtml(s) {
+    return s
+        .replace(/&/g, "&amp;")
+        .replace(/</g, "&lt;")
+        .replace(/>/g, "&gt;")
+        .replace(/"/g, "&quot;");
+}
+//# sourceMappingURL=browserLogin.js.map

package/dist/max/browserLogin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"browserLogin.js","sourceRoot":"","sources":["../../src/max/browserLogin.ts"],"names":[],"mappings":";;;;;AAwCA,wDAsIC;AA9KD,gDAAwB;AACxB,iDAAsC;AACtC,mCAAqC;AASrC,SAAS,gBAAgB,CAAC,GAAW;IACjC,IAAI,CAAC;QACD,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;YAC/B,iGAAiG;YACjG,IAAA,qBAAK,EAAC,YAAY,EAAE,CAAC,YAAY,EAAE,UAAU,EAAE,eAAe,EAAE,GAAG,CAAC,EAAE;gBAClE,QAAQ,EAAE,IAAI;gBACd,KAAK,EAAE,QAAQ;aAClB,CAAC,CAAC,KAAK,EAAE,CAAC;QACf,CAAC;aAAM,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YACvC,IAAA,qBAAK,EAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;QACtE,CAAC;aAAM,CAAC;YACJ,IAAA,qBAAK,EAAC,UAAU,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;QAC1E,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,CAAC,KAAK,CAAC,iEAAiE,EAAE,GAAG,CAAC,CAAC;IAC1F,CAAC;AACL,CAAC;AAED,SAAS,gBAAgB,CAAC,UAA8B;IACpD,IAAI,CAAC,UAAU;QAAE,OAAO,IAAI,CAAC;IAC7B,MAAM,CAAC,GAAG,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAClC,IAAI,CAAC,KAAK,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1B,OAAO,IAAI,eAAe,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AACxD,CAAC;AAED;;;GAGG;AACH,SAAgB,sBAAsB,CAAC,OAItC;IACG,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACnC,MAAM,KAAK,GAAG,IAAA,oBAAW,EAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC9C,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC1B,IAAI,CAAC,OAAO,EAAE,CAAC;gBACX,OAAO,GAAG,IAAI,CAAC;gBACf,MAAM,CAAC,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,IAAI,KAAK,CAAC,yBAAyB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;YACxF,CAAC;QACL,CAAC,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;QAEtB,MAAM,MAAM,GAAG,cAAI,CAAC,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;YAC1C,IAAI,OAAO;gBAAE,OAAO;YAEpB,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,IAAI,EAAE,CAAC;YAC1B,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;gBAC/B,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;gBACnB,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;gBACrB,OAAO;YACX,CAAC;YAED,uDAAuD;YACvD,IAAI,CAAC;gBACA,GAAG,CAAC,MAAc,EAAE,KAAK,EAAE,EAAE,CAAC;YACnC,CAAC;YAAC,MAAM,CAAC;gBACL,SAAS;YACb,CAAC;YAED,MAAM,MAAM,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;YACrC,IAAI,CAAC,MAAM,EAAE,CAAC;gBACV,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,0BAA0B,EAAE,CAAC,CAAC;gBACnE,GAAG,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;gBACnC,OAAO;YACX,CAAC;YAED,MAAM,aAAa,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAC1C,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAClC,MAAM,YAAY,GAAG,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,SAAS,CAAC;YAC9D,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAChC,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;YAEhD,IAAI,aAAa,KAAK,KAAK,EAAE,CAAC;gBAC1B,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,0BAA0B,EAAE,CAAC,CAAC;gBACnE,GAAG,CAAC,GAAG,CAAC,kEAAkE,CAAC,CAAC;gBAC5E,IAAI,CAAC,OAAO,EAAE,CAAC;oBACX,OAAO,GAAG,IAAI,CAAC;oBACf,YAAY,CAAC,KAAK,CAAC,CAAC;oBACpB,MAAM,CAAC,KAAK,EAAE,CAAC;oBACf,MAAM,CAAC,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC,CAAC;gBACjE,CAAC;gBACD,OAAO;YACX,CAAC;YAED,IAAI,GAAG,EAAE,CAAC;gBACN,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,0BAA0B,EAAE,CAAC,CAAC;gBACnE,GAAG,CAAC,GAAG,CACH,oBAAoB,UAAU,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,MAAM,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,CACzF,CAAC;gBACF,IAAI,CAAC,OAAO,EAAE,CAAC;oBACX,OAAO,GAAG,IAAI,CAAC;oBACf,YAAY,CAAC,KAAK,CAAC,CAAC;oBACpB,MAAM,CAAC,KAAK,EAAE,CAAC;oBACf,MAAM,CAAC,IAAI,KAAK,CAAC,OAAO,IAAI,GAAG,CAAC,CAAC,CAAC;gBACtC,CAAC;gBACD,OAAO;YACX,CAAC;YAED,IAAI,CAAC,KAAK,EAAE,CAAC;gBACT,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,0BAA0B,EAAE,CAAC,CAAC;gBACnE,GAAG,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAC;gBAC7C,IAAI,CAAC,OAAO,EAAE,CAAC;oBACX,OAAO,GAAG,IAAI,CAAC;oBACf,YAAY,CAAC,KAAK,CAAC,CAAC;oBACpB,MAAM,CAAC,KAAK,EAAE,CAAC;oBACf,MAAM,CAAC,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC,CAAC;gBACvD,CAAC;gBACD,OAAO;YACX,CAAC;YAED,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,0BAA0B,EAAE,CAAC,CAAC;YACnE,GAAG,CAAC,GAAG,CAAC,2DAA2D,CAAC,CAAC;YACrE,IAAI,CAAC,OAAO,EAAE,CAAC;gBACX,OAAO,GAAG,IAAI,CAAC;gBACf,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,MAAM,CAAC,KAAK,EAAE,CAAC;gBACf,OAAO,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC;YAC9C,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE;YAC/B,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;YAC9B,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACpC,MAAM,CAAC,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC,CAAC;gBACrD,OAAO;YACX,CAAC;YACD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;YACvB,MAAM,WAAW,GAAG,oBAAoB,IAAI,WAAW,CAAC;YACxD,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;YACnD,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;gBACnB,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;YAC5D,CAAC;YACD,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;YACvD,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YAC1C,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC;YAEpD,OAAO,CAAC,GAAG,CACP,iEAAiE,EACjE,QAAQ,CAAC,QAAQ,EAAE,EACnB,IAAI,CACP,CAAC;YACF,gBAAgB,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC1C,CAAC,CAAC,CAAC;QAEH,oEAAoE;QACpE,IAAI,CAAC;YACA,MAAc,CAAC,KAAK,EAAE,EAAE,CAAC;QAC9B,CAAC;QAAC,MAAM,CAAC;YACL,SAAS;QACb,CAAC;QAED,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE;YACrB,IAAI,CAAC,OAAO,EAAE,CAAC;gBACX,OAAO,GAAG,IAAI,CAAC;gBACf,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,MAAM,CAAC,CAAC,CAAC,CAAC;YACd,CAAC;QACL,CAAC,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;AACP,CAAC;AAED,SAAS,UAAU,CAAC,CAAS;IACzB,OAAO,CAAC;SACH,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;SACtB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;AACjC,CAAC"}

package/dist/max/commands/auth/login.d.ts

@@ -0,0 +1,3 @@
+import { Command } from "commander";
+export declare const maxLoginCommand: Command;
+//# sourceMappingURL=login.d.ts.map

package/dist/max/commands/auth/login.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"login.d.ts","sourceRoot":"","sources":["../../../../src/max/commands/auth/login.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAmCpC,eAAO,MAAM,eAAe,SAyDtB,CAAC"}

package/dist/max/commands/auth/login.js

@@ -0,0 +1,58 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.maxLoginCommand = void 0;
+const commander_1 = require("commander");
+const maxConfig_1 = require("../../maxConfig");
+const config_1 = require("../../../lib/config");
+const output_1 = require("../../../lib/output");
+const auth_1 = require("../../../lib/auth");
+const banner_1 = require("../../ui/banner");
+const helpEpilog_1 = require("../../../lib/helpEpilog");
+exports.maxLoginCommand = new commander_1.Command("login")
+    .description("Store a per-user API key on the chosen profile. Saves the key to BOTH the Max store and the Frontline store under the same profile name, so `max` and `frontline` commands share credentials.")
+    .argument("<api-key>", "Your Frontline per-user API key (generated in the Frontline web app)")
+    .option("--profile <name>", helpEpilog_1.MAX_PROFILE_OPTION)
+    .option("--base-url <url>", `Public API base URL for this profile (…/public/v1; default: ${(0, config_1.getDefaultBaseUrl)()})`)
+    .addHelpText("after", `\n${helpEpilog_1.MAX_AUTH_LOGIN_EPILOG}\n`)
+    .action(async (apiKey, options, cmd) => {
+    try {
+        await (0, banner_1.printMaxWelcome)();
+        const trimmed = apiKey.trim();
+        if (!trimmed) {
+            (0, output_1.printError)("API key cannot be empty.");
+            process.exitCode = 1;
+            return;
+        }
+        const allOpts = typeof cmd.optsWithGlobals === "function" ? cmd.optsWithGlobals() : options;
+        const profileName = allOpts.profile ?? (0, maxConfig_1.getMaxCurrentProfile)();
+        if (allOpts.profile) {
+            (0, maxConfig_1.setMaxCurrentProfile)(profileName);
+            (0, config_1.setCurrentProfile)(profileName);
+        }
+        const existingMax = (0, maxConfig_1.getMaxProfile)(profileName);
+        (0, maxConfig_1.setMaxProfile)(profileName, {
+            ...existingMax,
+            apiKey: trimmed,
+        });
+        const existingFront = (0, config_1.getProfile)(profileName);
+        const nextFrontBaseUrl = allOpts.baseUrl?.trim() ||
+            existingFront?.baseUrl ||
+            (0, config_1.getDefaultBaseUrl)();
+        (0, config_1.setProfile)(profileName, {
+            apiKey: trimmed,
+            baseUrl: nextFrontBaseUrl,
+        });
+        (0, output_1.printSuccess)(`API key saved to profile "${profileName}" (shared with Frontline CLI).`);
+        (0, output_1.printKeyValue)({
+            profile: profileName,
+            keyPreview: (0, auth_1.redactToken)(trimmed),
+            publicApiBaseUrl: nextFrontBaseUrl,
+        });
+    }
+    catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        (0, output_1.printError)(message);
+        process.exitCode = 1;
+    }
+});
+//# sourceMappingURL=login.js.map