@getpara/cli 2.15.0

package/README.md

@@ -0,0 +1,97 @@
+# @getpara/cli
+
+The official CLI for [Para](https://getpara.com). Authenticate, manage projects and API keys, scaffold new apps, and diagnose SDK issues — all from the terminal.
+
+## Install
+
+```bash
+npm install -g @getpara/cli
+```
+
+Or run directly with npx:
+
+```bash
+npx @getpara/cli <command>
+```
+
+## Quick Start
+
+```bash
+para login                 # Sign in via the developer portal
+para orgs switch           # Pick your organization
+para projects switch       # Pick your project
+para keys list             # View your API keys
+```
+
+## Commands
+
+### Auth
+
+| Command | Description |
+|---------|-------------|
+| `para login` | Sign in via the Para developer portal |
+| `para logout` | Clear stored credentials |
+| `para whoami` | Show current user, org, and project context |
+
+### Resources
+
+| Command | Description |
+|---------|-------------|
+| `para orgs list` | List your organizations |
+| `para orgs switch` | Set the active organization |
+| `para projects list` | List projects in your organization |
+| `para projects create` | Create a new project |
+| `para projects switch` | Set the active project |
+| `para keys list` | List API keys for a project |
+| `para keys get <id>` | Get details for a specific key |
+| `para keys create` | Create a new API key |
+| `para keys rotate <id>` | Rotate an API key |
+
+### Setup
+
+| Command | Description |
+|---------|-------------|
+| `para create [name]` | Scaffold a new Para-powered app (Next.js or Expo) |
+| `para init` | Save current org/project/env to a `.pararc` file |
+| `para config get [key]` | View configuration values |
+| `para config set <key> <value>` | Set a configuration value |
+| `para config unset <key>` | Remove a configuration value |
+| `para doctor [path]` | Check a project for common SDK issues |
+
+## Global Options
+
+```
+-e, --environment <env>  Target environment (DEV, SANDBOX, BETA, PROD)
+--json                   Output as JSON
+--org <id>               Organization ID override
+--project <id>           Project ID override
+-q, --quiet              Suppress non-essential output
+--no-input               Disable interactive prompts (auto-detected in CI)
+```
+
+## Authentication
+
+The CLI supports three authentication methods:
+
+1. **Browser login** (default) — `para login` opens the developer portal for OAuth
+2. **Environment variable** — set `PARA_TOKEN` for scripts and CI
+3. **Token file** — set `PARA_TOKEN_FILE` to read a token from disk
+
+Credentials are stored in `~/.config/para/credentials.json`.
+
+## Configuration
+
+Settings are resolved in order (first match wins):
+
+1. CLI flags (`--org`, `--project`, `-e`)
+2. Environment variables (`PARA_ENVIRONMENT`, `PARA_ORG_ID`, `PARA_PROJECT_ID`)
+3. Project config (`.pararc` in project root)
+4. Global config (`~/.config/para/config.json`)
+5. Defaults
+
+## More
+
+- [Para Documentation](https://docs.getpara.com)
+- [Developer Portal](https://developer.getpara.com)
+
+Run `para <command> --help` for detailed usage on any command.

package/dist/api/client.d.ts

@@ -0,0 +1,49 @@
+import { type Environment } from '../core/constants.js';
+import type { Organization, Project, ApiKey, ApiKeyConfig, AuthStatus, WebhookConfig, WebhookConfigWithSecretResponse, WebhookTestResponse, WebhookRotateSecretResponse, UpdateWebhookBody } from './types.js';
+interface ClientConfig {
+    environment: Environment;
+    sessionId: string;
+}
+export declare class ParaApiClient {
+    private readonly config;
+    private readonly baseUrl;
+    private readonly sessionId;
+    constructor(config: ClientConfig);
+    private request;
+    getAuthStatus(): Promise<AuthStatus>;
+    logout(): Promise<void>;
+    getOrganizations(userId: string): Promise<Organization[]>;
+    getProjects(orgId: string): Promise<Project[]>;
+    createProject(orgId: string, data: {
+        name: string;
+        description?: string;
+        framework?: string;
+    }): Promise<Project>;
+    getApiKeys(orgId: string, projectId: string, environment: string): Promise<ApiKey[]>;
+    getApiKey(orgId: string, projectId: string, environment: string, keyId: string): Promise<ApiKey>;
+    createApiKey(orgId: string, projectId: string, environment: string, data: {
+        name: string;
+        displayName?: string;
+    }): Promise<ApiKey>;
+    rotateApiKey(orgId: string, projectId: string, environment: string, keyId: string): Promise<{
+        newKey: string;
+    }>;
+    rotateSecretApiKey(orgId: string, projectId: string, environment: string, keyId: string): Promise<{
+        newKey: string;
+    }>;
+    updateProject(orgId: string, projectId: string, data: Partial<Pick<Project, 'name' | 'description' | 'framework' | 'packageManager'>>): Promise<void>;
+    deleteProject(orgId: string, projectId: string): Promise<void>;
+    restoreProject(orgId: string, projectId: string): Promise<void>;
+    updateApiKey(orgId: string, projectId: string, environment: string, keyId: string, data: ApiKeyConfig): Promise<void>;
+    deleteApiKey(orgId: string, projectId: string, environment: string, keyId: string): Promise<void>;
+    getIpAllowlist(orgId: string, projectId: string, environment: string, keyId: string): Promise<string[]>;
+    updateIpAllowlist(orgId: string, projectId: string, environment: string, keyId: string, cidrs: string[]): Promise<string[]>;
+    private webhookBasePath;
+    getWebhookConfig(orgId: string, projectId: string, environment: string, keyId: string): Promise<WebhookConfig | null>;
+    updateWebhookConfig(orgId: string, projectId: string, environment: string, keyId: string, data: UpdateWebhookBody): Promise<WebhookConfigWithSecretResponse>;
+    deleteWebhookConfig(orgId: string, projectId: string, environment: string, keyId: string): Promise<void>;
+    testWebhook(orgId: string, projectId: string, environment: string, keyId: string): Promise<WebhookTestResponse>;
+    rotateWebhookSecret(orgId: string, projectId: string, environment: string, keyId: string): Promise<WebhookRotateSecretResponse>;
+}
+export {};
+//# sourceMappingURL=client.d.ts.map

package/dist/api/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/api/client.ts"],"names":[],"mappings":"AAAA,OAAO,EAA0D,KAAK,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAGhH,OAAO,KAAK,EACV,YAAY,EACZ,OAAO,EACP,MAAM,EACN,YAAY,EACZ,UAAU,EACV,aAAa,EAEb,+BAA+B,EAC/B,mBAAmB,EACnB,2BAA2B,EAC3B,iBAAiB,EAClB,MAAM,YAAY,CAAC;AAcpB,UAAU,YAAY;IACpB,WAAW,EAAE,WAAW,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,qBAAa,aAAa;IAIZ,OAAO,CAAC,QAAQ,CAAC,MAAM;IAHnC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;gBAEN,MAAM,EAAE,YAAY;YAKnC,OAAO;IA0Ef,aAAa,IAAI,OAAO,CAAC,UAAU,CAAC;IAIpC,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC;IAKvB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;IAOzD,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;IAM9C,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,OAAO,CAAC;IAOhH,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAWpF,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAYhG,YAAY,CAChB,KAAK,EAAE,MAAM,EACb,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,GAC3C,OAAO,CAAC,MAAM,CAAC;IAYZ,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAW/G,kBAAkB,CACtB,KAAK,EAAE,MAAM,EACb,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAYxB,aAAa,CACjB,KAAK,EAAE,MAAM,EACb,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,GAAG,aAAa,GAAG,WAAW,GAAG,gBAAgB,CAAC,CAAC,GACpF,OAAO,CAAC,IAAI,CAAC;IAMV,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAM9D,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAO/D,YAAY,CAChB,KAAK,EAAE,MAAM,EACb,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,YAAY,GACjB,OAAO,CAAC,IAAI,CAAC;IAYV,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IASjG,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAYvG,iBAAiB,CACrB,KAAK,EAAE,MAAM,EACb,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,MAAM,EAAE,GACd,OAAO,CAAC,MAAM,EAAE,CAAC;IAcpB,OAAO,CAAC,eAAe;IAQjB,gBAAgB,CACpB,KAAK,EAAE,MAAM,EACb,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC;IAK1B,mBAAmB,CACvB,KAAK,EAAE,MAAM,EACb,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,iBAAiB,GACtB,OAAO,CAAC,+BAA+B,CAAC;IAIrC,mBAAmB,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIxG,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAI/G,mBAAmB,CACvB,KAAK,EAAE,MAAM,EACb,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,2BAA2B,CAAC;CAGxC"}

package/dist/api/client.js

@@ -0,0 +1,247 @@
+import { CLI_VERSION, USER_AGENT, BASE_URLS, DEV_PORTAL_API_KEY } from "../core/constants.js";
+import { NetworkError } from "../core/error-handler.js";
+import { classifyApiError } from "./errors.js";
+const SAFE_PATH_SEGMENT = /^[a-zA-Z0-9_-]+$/;
+function validatePathSegment(value, name) {
+  if (!SAFE_PATH_SEGMENT.test(value)) {
+    throw new Error(`Invalid ${name}: "${value}". Only alphanumeric characters, hyphens, and underscores are allowed.`);
+  }
+}
+const MAX_RETRIES = 2;
+const RETRY_BACKOFF_MS = 1e3;
+const REQUEST_TIMEOUT_MS = 3e4;
+class ParaApiClient {
+  constructor(config) {
+    this.config = config;
+    this.baseUrl = BASE_URLS[config.environment];
+    this.sessionId = config.sessionId;
+  }
+  baseUrl;
+  sessionId;
+  async request(method, path, body) {
+    const url = `${this.baseUrl}${path}`;
+    const headers = {
+      "Content-Type": "application/json",
+      "x-capsule-sid": this.sessionId,
+      "X-External-API-Key": DEV_PORTAL_API_KEY,
+      "x-para-client-type": "cli",
+      "x-para-client-version": CLI_VERSION,
+      "User-Agent": USER_AGENT
+    };
+    let lastError = null;
+    for (let attempt = 0; attempt <= MAX_RETRIES; attempt++) {
+      try {
+        const controller = new AbortController();
+        const timeout = setTimeout(() => controller.abort(), REQUEST_TIMEOUT_MS);
+        const response = await fetch(url, {
+          method,
+          headers,
+          body: body ? JSON.stringify(body) : void 0,
+          signal: controller.signal
+        });
+        clearTimeout(timeout);
+        if (response.ok) {
+          if (response.status === 204) return void 0;
+          return await response.json();
+        }
+        let errorBody = {};
+        try {
+          errorBody = await response.json();
+        } catch {
+          errorBody = { message: response.statusText };
+        }
+        if ((response.status === 429 || response.status >= 500) && attempt < MAX_RETRIES) {
+          const retryAfter = response.headers.get("Retry-After");
+          const parsedRetry = retryAfter ? parseInt(retryAfter, 10) : NaN;
+          const delay = !isNaN(parsedRetry) ? Math.min(parsedRetry, 60) * 1e3 : RETRY_BACKOFF_MS * Math.pow(2, attempt);
+          await new Promise((resolve) => setTimeout(resolve, delay));
+          lastError = classifyApiError(response.status, errorBody);
+          continue;
+        }
+        throw classifyApiError(response.status, errorBody);
+      } catch (error) {
+        if (error instanceof Error && error.name === "AbortError") {
+          if (attempt < MAX_RETRIES) {
+            await new Promise((resolve) => setTimeout(resolve, RETRY_BACKOFF_MS * Math.pow(2, attempt)));
+            lastError = new NetworkError(`Request to ${this.baseUrl} timed out after ${REQUEST_TIMEOUT_MS / 1e3}s.`);
+            continue;
+          }
+          throw new NetworkError(`Request to ${this.baseUrl} timed out after ${REQUEST_TIMEOUT_MS / 1e3}s.`);
+        }
+        if (error instanceof TypeError && error.message.includes("fetch")) {
+          if (attempt < MAX_RETRIES) {
+            await new Promise((resolve) => setTimeout(resolve, RETRY_BACKOFF_MS * Math.pow(2, attempt)));
+            lastError = new NetworkError(`Failed to connect to ${this.baseUrl}. Check your network connection.`);
+            continue;
+          }
+          throw new NetworkError(`Failed to connect to ${this.baseUrl}. Check your network connection.`);
+        }
+        throw error;
+      }
+    }
+    throw lastError || new NetworkError("Request failed after retries.");
+  }
+  // Auth
+  async getAuthStatus() {
+    return this.request("GET", "/cli/auth/status");
+  }
+  async logout() {
+    return this.request("POST", "/cli/auth/logout");
+  }
+  // Organizations
+  async getOrganizations(userId) {
+    validatePathSegment(userId, "userId");
+    const res = await this.request("GET", `/users/${userId}/organizations`);
+    return res.organizations;
+  }
+  // Projects
+  async getProjects(orgId) {
+    validatePathSegment(orgId, "orgId");
+    const res = await this.request("GET", `/organizations/${orgId}/projects`);
+    return res.projects;
+  }
+  async createProject(orgId, data) {
+    validatePathSegment(orgId, "orgId");
+    const res = await this.request("POST", `/organizations/${orgId}/projects`, data);
+    return res.project;
+  }
+  // API Keys
+  async getApiKeys(orgId, projectId, environment) {
+    validatePathSegment(orgId, "orgId");
+    validatePathSegment(projectId, "projectId");
+    validatePathSegment(environment.toLowerCase(), "environment");
+    const res = await this.request(
+      "GET",
+      `/organizations/${orgId}/projects/${projectId}/${environment.toLowerCase()}/keys`
+    );
+    return res.keys;
+  }
+  async getApiKey(orgId, projectId, environment, keyId) {
+    validatePathSegment(orgId, "orgId");
+    validatePathSegment(projectId, "projectId");
+    validatePathSegment(environment.toLowerCase(), "environment");
+    validatePathSegment(keyId, "keyId");
+    const res = await this.request(
+      "GET",
+      `/organizations/${orgId}/projects/${projectId}/${environment.toLowerCase()}/keys/${keyId}`
+    );
+    return res.key;
+  }
+  async createApiKey(orgId, projectId, environment, data) {
+    validatePathSegment(orgId, "orgId");
+    validatePathSegment(projectId, "projectId");
+    validatePathSegment(environment.toLowerCase(), "environment");
+    const res = await this.request(
+      "POST",
+      `/organizations/${orgId}/projects/${projectId}/${environment.toLowerCase()}/keys`,
+      data
+    );
+    return res.key;
+  }
+  async rotateApiKey(orgId, projectId, environment, keyId) {
+    validatePathSegment(orgId, "orgId");
+    validatePathSegment(projectId, "projectId");
+    validatePathSegment(environment.toLowerCase(), "environment");
+    validatePathSegment(keyId, "keyId");
+    return this.request(
+      "POST",
+      `/organizations/${orgId}/projects/${projectId}/${environment.toLowerCase()}/keys/${keyId}/rotate`
+    );
+  }
+  async rotateSecretApiKey(orgId, projectId, environment, keyId) {
+    validatePathSegment(orgId, "orgId");
+    validatePathSegment(projectId, "projectId");
+    validatePathSegment(environment.toLowerCase(), "environment");
+    validatePathSegment(keyId, "keyId");
+    return this.request(
+      "POST",
+      `/organizations/${orgId}/projects/${projectId}/${environment.toLowerCase()}/keys/${keyId}/rotate-secret-key`
+    );
+  }
+  // Project management
+  async updateProject(orgId, projectId, data) {
+    validatePathSegment(orgId, "orgId");
+    validatePathSegment(projectId, "projectId");
+    await this.request("PATCH", `/organizations/${orgId}/projects/${projectId}`, data);
+  }
+  async deleteProject(orgId, projectId) {
+    validatePathSegment(orgId, "orgId");
+    validatePathSegment(projectId, "projectId");
+    await this.request("DELETE", `/organizations/${orgId}/projects/${projectId}`);
+  }
+  async restoreProject(orgId, projectId) {
+    validatePathSegment(orgId, "orgId");
+    validatePathSegment(projectId, "projectId");
+    await this.request("PATCH", `/organizations/${orgId}/projects/${projectId}/restore`);
+  }
+  // API Key management
+  async updateApiKey(orgId, projectId, environment, keyId, data) {
+    validatePathSegment(orgId, "orgId");
+    validatePathSegment(projectId, "projectId");
+    validatePathSegment(environment.toLowerCase(), "environment");
+    validatePathSegment(keyId, "keyId");
+    await this.request(
+      "PATCH",
+      `/organizations/${orgId}/projects/${projectId}/${environment.toLowerCase()}/keys/${keyId}`,
+      data
+    );
+  }
+  async deleteApiKey(orgId, projectId, environment, keyId) {
+    validatePathSegment(orgId, "orgId");
+    validatePathSegment(projectId, "projectId");
+    validatePathSegment(environment.toLowerCase(), "environment");
+    validatePathSegment(keyId, "keyId");
+    await this.request("DELETE", `/organizations/${orgId}/projects/${projectId}/${environment.toLowerCase()}/keys/${keyId}`);
+  }
+  // IP Allowlist
+  async getIpAllowlist(orgId, projectId, environment, keyId) {
+    validatePathSegment(orgId, "orgId");
+    validatePathSegment(projectId, "projectId");
+    validatePathSegment(environment.toLowerCase(), "environment");
+    validatePathSegment(keyId, "keyId");
+    const res = await this.request(
+      "GET",
+      `/organizations/${orgId}/projects/${projectId}/${environment.toLowerCase()}/keys/${keyId}/ip-allowlist`
+    );
+    return res.allowlistCidrs;
+  }
+  async updateIpAllowlist(orgId, projectId, environment, keyId, cidrs) {
+    validatePathSegment(orgId, "orgId");
+    validatePathSegment(projectId, "projectId");
+    validatePathSegment(environment.toLowerCase(), "environment");
+    validatePathSegment(keyId, "keyId");
+    const res = await this.request(
+      "PUT",
+      `/organizations/${orgId}/projects/${projectId}/${environment.toLowerCase()}/keys/${keyId}/ip-allowlist`,
+      { allowlistCidrs: cidrs }
+    );
+    return res.allowlistCidrs;
+  }
+  // Webhooks
+  webhookBasePath(orgId, projectId, environment, keyId) {
+    validatePathSegment(orgId, "orgId");
+    validatePathSegment(projectId, "projectId");
+    validatePathSegment(environment.toLowerCase(), "environment");
+    validatePathSegment(keyId, "keyId");
+    return `/organizations/${orgId}/projects/${projectId}/${environment.toLowerCase()}/keys/${keyId}/webhook`;
+  }
+  async getWebhookConfig(orgId, projectId, environment, keyId) {
+    const res = await this.request("GET", this.webhookBasePath(orgId, projectId, environment, keyId));
+    return res.webhook;
+  }
+  async updateWebhookConfig(orgId, projectId, environment, keyId, data) {
+    return this.request("PUT", this.webhookBasePath(orgId, projectId, environment, keyId), data);
+  }
+  async deleteWebhookConfig(orgId, projectId, environment, keyId) {
+    await this.request("DELETE", this.webhookBasePath(orgId, projectId, environment, keyId));
+  }
+  async testWebhook(orgId, projectId, environment, keyId) {
+    return this.request("POST", `${this.webhookBasePath(orgId, projectId, environment, keyId)}/test`);
+  }
+  async rotateWebhookSecret(orgId, projectId, environment, keyId) {
+    return this.request("POST", `${this.webhookBasePath(orgId, projectId, environment, keyId)}/rotate-secret`);
+  }
+}
+export {
+  ParaApiClient
+};

package/dist/api/errors.d.ts

@@ -0,0 +1,9 @@
+import { CliError, AuthError, ForbiddenError, NetworkError, RateLimitError, NotFoundError } from '../core/error-handler.js';
+export { CliError, AuthError, ForbiddenError, NetworkError, RateLimitError, NotFoundError };
+export interface ApiErrorResponse {
+    message?: string;
+    error?: string;
+    statusCode?: number;
+}
+export declare function classifyApiError(status: number, body: ApiErrorResponse): CliError;
+//# sourceMappingURL=errors.d.ts.map

package/dist/api/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/api/errors.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,cAAc,EAAE,YAAY,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAG5H,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,cAAc,EAAE,YAAY,EAAE,cAAc,EAAE,aAAa,EAAE,CAAC;AAE5F,MAAM,WAAW,gBAAgB;IAC/B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,gBAAgB,GAAG,QAAQ,CAmBjF"}

package/dist/api/errors.js

@@ -0,0 +1,29 @@
+import { CliError, AuthError, ForbiddenError, NetworkError, RateLimitError, NotFoundError } from "../core/error-handler.js";
+function classifyApiError(status, body) {
+  const message = body.message || body.error || `API error (${status})`;
+  switch (status) {
+    case 401:
+      return new AuthError(message);
+    case 403:
+      return new ForbiddenError(message);
+    case 404:
+      return new NotFoundError(message);
+    case 429: {
+      return new RateLimitError(message);
+    }
+    default:
+      if (status >= 500) {
+        return new NetworkError(`Server error: ${message}`);
+      }
+      return new CliError(message);
+  }
+}
+export {
+  AuthError,
+  CliError,
+  ForbiddenError,
+  NetworkError,
+  NotFoundError,
+  RateLimitError,
+  classifyApiError
+};

package/dist/api/types.d.ts

@@ -0,0 +1,155 @@
+import { WalletType, AuthMethod, ThemeMode, OnRampProvider, WebhookEventType, SUBSCRIBABLE_WEBHOOK_EVENT_TYPES as SUBSCRIBABLE_WEBHOOK_EVENTS } from '@getpara/shared';
+export { WalletType, AuthMethod, ThemeMode, OnRampProvider, WebhookEventType, SUBSCRIBABLE_WEBHOOK_EVENTS };
+export declare enum Font {
+    ARIAL = "Arial",
+    COURIER_NEW = "Courier New",
+    GEORGIA = "Georgia",
+    HELVETICA = "Helvetica",
+    LUCIDA_SANS = "Lucida Sans",
+    TAHOMA = "Tahoma",
+    TIMES_NEW_ROMAN = "Times New Roman",
+    TREBUCHET_MS = "Trebuchet MS"
+}
+export declare enum Framework {
+    REACT = "REACT",
+    NEXT = "NEXT",
+    VITE = "VITE",
+    VUE = "VUE",
+    SVELTE = "SVELTE",
+    NODE = "NODE",
+    REACT_NATIVE = "REACT_NATIVE",
+    EXPO = "EXPO",
+    FLUTTER = "FLUTTER",
+    SWIFT = "SWIFT",
+    DENO = "DENO",
+    BUN = "BUN"
+}
+export declare enum PackageManager {
+    NPM = "NPM",
+    YARN = "YARN",
+    PNPM = "PNPM"
+}
+export interface WalletTypeConfig {
+    type: WalletType;
+    optional?: boolean;
+}
+export interface Organization {
+    id: string;
+    name: string;
+    activePlanSlug?: string;
+    hasDevPortalAccess?: boolean;
+    logoUrl?: string;
+    archived?: boolean;
+    suspended?: boolean;
+}
+export interface OrganizationMember {
+    id: string;
+    userId: string;
+    organizationId: string;
+    role: MemberRole;
+    email?: string;
+    name?: string;
+}
+export declare enum MemberRole {
+    ORG_OWNER = "ORG_OWNER",
+    ORG_MEMBER = "ORG_MEMBER",
+    PROJECT_MEMBER = "PROJECT_MEMBER"
+}
+export interface Project {
+    id: string;
+    name: string;
+    description?: string;
+    iconUrl?: string;
+    framework?: string;
+    packageManager?: string;
+    archived?: boolean;
+    organizationId: string;
+}
+export interface ApiKey {
+    id: string;
+    projectId: string;
+    organizationId: string;
+    apiKey: string;
+    secretApiKey?: string;
+    name: string;
+    displayName?: string;
+    environment: string;
+    archived?: boolean;
+    origins?: string[];
+    supportedAuthMethods?: string[];
+    supportedWalletTypes?: WalletTypeConfig[];
+    sessionMaxAge?: string | null;
+    forceTransactionPopups?: boolean;
+    transactionPopupsEnabled?: boolean;
+    ipAllowlistCidrs?: string[] | null;
+    logoUrl?: string | null;
+    iconUrl?: string | null;
+    backgroundColor?: string | null;
+    foregroundColor?: string | null;
+    accentColor?: string | null;
+    themeMode?: ThemeMode | null;
+    font?: string | null;
+    verifyUrl?: string | null;
+    portalUrl?: string | null;
+    emailImageUrl?: string | null;
+    emailImageLink?: string | null;
+    emailWelcome?: boolean;
+    emailBackupKit?: boolean;
+    homepageUrl?: string | null;
+    twitterUrl?: string | null;
+    linkedinUrl?: string | null;
+    githubUrl?: string | null;
+    cosmosPrefix?: string;
+    teamId?: string | null;
+    bundleIdentifier?: string | null;
+    androidPackageName?: string | null;
+    androidSha256CertFingerprints?: string[] | null;
+    hasSecretKey?: boolean;
+    isBuyEnabled?: boolean;
+    isReceiveEnabled?: boolean;
+    isWithdrawEnabled?: boolean;
+    onRampProviders?: string[];
+    rampApiKey?: string;
+    defaultBuyAmount?: string;
+    defaultOnRampAsset?: string;
+    defaultOnRampNetwork?: string;
+}
+export type ApiKeyConfig = Partial<Omit<ApiKey, 'id' | 'apiKey' | 'secretApiKey' | 'organizationId' | 'projectId' | 'archived' | 'environment' | 'hasSecretKey'>>;
+export interface WebhookConfig {
+    url: string;
+    enabled: boolean;
+    events: WebhookEventType[];
+    createdAt: string;
+    updatedAt: string;
+}
+export interface WebhookConfigResponse {
+    webhook: WebhookConfig | null;
+}
+export interface WebhookConfigWithSecretResponse {
+    webhook: WebhookConfig;
+    secret?: string;
+}
+export interface WebhookTestResponse {
+    success: boolean;
+    timestamp: string;
+}
+export interface WebhookRotateSecretResponse {
+    secret: string;
+}
+export interface UpdateWebhookBody {
+    url: string;
+    events: WebhookEventType[];
+    enabled: boolean;
+}
+export interface AuthStatus {
+    authenticated: boolean;
+    userId?: string;
+    email?: string;
+    sessionExpiresAt?: number;
+    organizations?: Array<{
+        id: string;
+        name: string;
+        role: string;
+    }>;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/api/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/api/types.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,UAAU,EACV,UAAU,EACV,SAAS,EACT,cAAc,EACd,gBAAgB,EAChB,gCAAgC,IAAI,2BAA2B,EAChE,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,cAAc,EAAE,gBAAgB,EAAE,2BAA2B,EAAE,CAAC;AAE5G,oBAAY,IAAI;IACd,KAAK,UAAU;IACf,WAAW,gBAAgB;IAC3B,OAAO,YAAY;IACnB,SAAS,cAAc;IACvB,WAAW,gBAAgB;IAC3B,MAAM,WAAW;IACjB,eAAe,oBAAoB;IACnC,YAAY,iBAAiB;CAC9B;AAED,oBAAY,SAAS;IACnB,KAAK,UAAU;IACf,IAAI,SAAS;IACb,IAAI,SAAS;IACb,GAAG,QAAQ;IACX,MAAM,WAAW;IACjB,IAAI,SAAS;IACb,YAAY,iBAAiB;IAC7B,IAAI,SAAS;IACb,OAAO,YAAY;IACnB,KAAK,UAAU;IACf,IAAI,SAAS;IACb,GAAG,QAAQ;CACZ;AAED,oBAAY,cAAc;IACxB,GAAG,QAAQ;IACX,IAAI,SAAS;IACb,IAAI,SAAS;CACd;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,UAAU,CAAC;IACjB,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAED,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,cAAc,EAAE,MAAM,CAAC;IACvB,IAAI,EAAE,UAAU,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,oBAAY,UAAU;IACpB,SAAS,cAAc;IACvB,UAAU,eAAe;IACzB,cAAc,mBAAmB;CAClC;AAED,MAAM,WAAW,OAAO;IACtB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,MAAM;IACrB,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAC;IAChC,oBAAoB,CAAC,EAAE,gBAAgB,EAAE,CAAC;IAG1C,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,sBAAsB,CAAC,EAAE,OAAO,CAAC;IACjC,wBAAwB,CAAC,EAAE,OAAO,CAAC;IACnC,gBAAgB,CAAC,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAGnC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,SAAS,CAAC,EAAE,SAAS,GAAG,IAAI,CAAC;IAC7B,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAG1B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,6BAA6B,CAAC,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAChD,YAAY,CAAC,EAAE,OAAO,CAAC;IAGvB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,oBAAoB,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED,MAAM,MAAM,YAAY,GAAG,OAAO,CAChC,IAAI,CACF,MAAM,EACN,IAAI,GAAG,QAAQ,GAAG,cAAc,GAAG,gBAAgB,GAAG,WAAW,GAAG,UAAU,GAAG,aAAa,GAAG,cAAc,CAChH,CACF,CAAC;AAGF,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,gBAAgB,EAAE,CAAC;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,aAAa,GAAG,IAAI,CAAC;CAC/B;AAED,MAAM,WAAW,+BAA+B;IAC9C,OAAO,EAAE,aAAa,CAAC;IACvB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,2BAA2B;IAC1C,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,iBAAiB;IAChC,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,gBAAgB,EAAE,CAAC;IAC3B,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,UAAU;IACzB,aAAa,EAAE,OAAO,CAAC;IACvB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,aAAa,CAAC,EAAE,KAAK,CAAC;QACpB,EAAE,EAAE,MAAM,CAAC;QACX,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;KACd,CAAC,CAAC;CACJ"}

package/dist/api/types.js

@@ -0,0 +1,58 @@
+import {
+  WalletType,
+  AuthMethod,
+  ThemeMode,
+  OnRampProvider,
+  WebhookEventType,
+  SUBSCRIBABLE_WEBHOOK_EVENT_TYPES as SUBSCRIBABLE_WEBHOOK_EVENTS
+} from "@getpara/shared";
+var Font = /* @__PURE__ */ ((Font2) => {
+  Font2["ARIAL"] = "Arial";
+  Font2["COURIER_NEW"] = "Courier New";
+  Font2["GEORGIA"] = "Georgia";
+  Font2["HELVETICA"] = "Helvetica";
+  Font2["LUCIDA_SANS"] = "Lucida Sans";
+  Font2["TAHOMA"] = "Tahoma";
+  Font2["TIMES_NEW_ROMAN"] = "Times New Roman";
+  Font2["TREBUCHET_MS"] = "Trebuchet MS";
+  return Font2;
+})(Font || {});
+var Framework = /* @__PURE__ */ ((Framework2) => {
+  Framework2["REACT"] = "REACT";
+  Framework2["NEXT"] = "NEXT";
+  Framework2["VITE"] = "VITE";
+  Framework2["VUE"] = "VUE";
+  Framework2["SVELTE"] = "SVELTE";
+  Framework2["NODE"] = "NODE";
+  Framework2["REACT_NATIVE"] = "REACT_NATIVE";
+  Framework2["EXPO"] = "EXPO";
+  Framework2["FLUTTER"] = "FLUTTER";
+  Framework2["SWIFT"] = "SWIFT";
+  Framework2["DENO"] = "DENO";
+  Framework2["BUN"] = "BUN";
+  return Framework2;
+})(Framework || {});
+var PackageManager = /* @__PURE__ */ ((PackageManager2) => {
+  PackageManager2["NPM"] = "NPM";
+  PackageManager2["YARN"] = "YARN";
+  PackageManager2["PNPM"] = "PNPM";
+  return PackageManager2;
+})(PackageManager || {});
+var MemberRole = /* @__PURE__ */ ((MemberRole2) => {
+  MemberRole2["ORG_OWNER"] = "ORG_OWNER";
+  MemberRole2["ORG_MEMBER"] = "ORG_MEMBER";
+  MemberRole2["PROJECT_MEMBER"] = "PROJECT_MEMBER";
+  return MemberRole2;
+})(MemberRole || {});
+export {
+  AuthMethod,
+  Font,
+  Framework,
+  MemberRole,
+  OnRampProvider,
+  PackageManager,
+  SUBSCRIBABLE_WEBHOOK_EVENTS,
+  ThemeMode,
+  WalletType,
+  WebhookEventType
+};

package/dist/auth/polling-flow.d.ts

@@ -0,0 +1,7 @@
+import { type Environment } from '../core/constants.js';
+import type { SessionInfo } from '../core/types.js';
+export interface PollingLoginOptions {
+    openBrowser?: boolean;
+}
+export declare function startPollingLogin(environment: Environment, opts?: PollingLoginOptions): Promise<SessionInfo>;
+//# sourceMappingURL=polling-flow.d.ts.map